assume IAM role from Azure cloud

Question

Hi team,

I followed this [blog](https://aws.amazon.com/blogs/security/extend-aws-iam-roles-to-workloads-outside-of-aws-with-iam-roles-anywhere/)

to use IAM role for a workload outside AWS

in my case I want a Pipeline running in Azure devops to push an image into amazon ECR for example

following the blog I was able to generate credentials from the IAM role and hit AWS s3

but I'm not sure how this is applicable for a workload running in azure for example

what are the steps to follow to make a Pipeline in Azure assume an IAM role in AWS and push images to ECR

I don't know how to apply the IAM role anywhere principle in Azure

is there AWS docs /blog explaining the steps?

Thank you!

Answer

Similar to how you have accessed AWS S3. You can use temporary security credentials with AWS SDKs and the AWS CLI to push images to ECR.

Once you have assumed the role,
Please refer at our documentation on commands you can use to achieve pushing docker image:
[Pushing a Docker image](https://docs.aws.amazon.com/AmazonECR/latest/userguide/docker-push-ecr-image.html)

Additionally, please refer at our documentation for all commands you can use:
[Private images](https://docs.aws.amazon.com/AmazonECR/latest/userguide/images.html)

assume IAM role from Azure cloud

Relevant content