# AppConnectionAws > Resource AppConnectionAws in pulumi-infisical. Resource AppConnectionAws in pulumi-infisical. Pulumi type: `infisical:index/appConnectionAws:AppConnectionAws`. `name` is the Pulumi resource name. Nested object fields are documented under that object. They are not arguments of this resource. ## Example Only required arguments are set. A string in angle brackets stands in for that argument. Any other value is an option or example written in the SDK description. ```ts import * as infisical from "pulumi-infisical" const resource = new infisical.AppConnectionAws("appConnectionAws", { credentials: {}, method: "", }) ``` ## Arguments | Property | Type | Required | Description | | ------------- | ------------------------------------- | -------- | ----------------------------------------------------------------------------------------------------------------------------- | | `credentials` | `AppConnectionAwsCredentials (input)` | yes | The credentials for the AWS App Connection | | `description` | `string` | no | An optional description for the AWS App Connection. | | `method` | `string` | yes | The method used to authenticate with AWS. Possible values are: assume-role, access-key | | `name` | `string` | no | The name of the AWS App Connection to create. Must be slug-friendly | | `projectId` | `string` | no | The ID of the project to scope the app connection to. If not provided, the app connection will be scoped to the organization. | ## Outputs Computed outputs are produced by the provider. They are not constructor arguments. | Property | Type | Computed | Description | | ----------------- | -------------------------------------- | -------- | ----------------------------------------------------------------------------------------------------------------------------- | | `credentials` | `AppConnectionAwsCredentials (output)` | no | The credentials for the AWS App Connection | | `credentialsHash` | `string` | yes | The hash of the AWS App Connection credentials | | `description` | `string` | no | An optional description for the AWS App Connection. | | `method` | `string` | no | The method used to authenticate with AWS. Possible values are: assume-role, access-key | | `name` | `string` | no | The name of the AWS App Connection to create. Must be slug-friendly | | `projectId` | `string` | no | The ID of the project to scope the app connection to. If not provided, the app connection will be scoped to the organization. | ## `AppConnectionAwsCredentials (input)` Input object `AppConnectionAwsCredentials`. Fields below belong to this object, not to the parent. | Property | Type | Required | Description | | ----------------- | -------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `accessKeyId` | `string` | no | The AWS Access Key ID used to authenticate requests to AWS services. Required for access-key access method. For more details, refer to the documentation here infisical.com/docs/integrations/app-connections/aws#access-key | | `roleArn` | `string` | no | The Amazon Resource Name (ARN) of the IAM role to assume for performing operations. Infisical will assume this role using AWS Security Token Service (STS). Required for assume-role access method. For more details, refer to the documentation here infisical.com/docs/integrations/app-connections/aws#assume-role-recommended | | `secretAccessKey` | `string` | no | The AWS Secret Access Key associated with the Access Key ID to authenticate requests to AWS services. Required for access-key access method. For more details, refer to the documentation here infisical.com/docs/integrations/app-connections/aws#access-key | | `stsEndpoint` | `string` | no | An optional custom endpoint URL for the AWS STS API (must start with https://). Only applicable to the assume-role method; when omitted, AWS's default STS endpoint resolution is used. | ## `AppConnectionAwsCredentials (output)` Output object `AppConnectionAwsCredentials`. Fields below belong to this object. | Property | Type | Always present | Description | | ----------------- | -------- | -------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `accessKeyId` | `string` | no | The AWS Access Key ID used to authenticate requests to AWS services. Required for access-key access method. For more details, refer to the documentation here infisical.com/docs/integrations/app-connections/aws#access-key | | `roleArn` | `string` | no | The Amazon Resource Name (ARN) of the IAM role to assume for performing operations. Infisical will assume this role using AWS Security Token Service (STS). Required for assume-role access method. For more details, refer to the documentation here infisical.com/docs/integrations/app-connections/aws#assume-role-recommended | | `secretAccessKey` | `string` | no | The AWS Secret Access Key associated with the Access Key ID to authenticate requests to AWS services. Required for access-key access method. For more details, refer to the documentation here infisical.com/docs/integrations/app-connections/aws#access-key | | `stsEndpoint` | `string` | no | An optional custom endpoint URL for the AWS STS API (must start with https://). Only applicable to the assume-role method; when omitted, AWS's default STS endpoint resolution is used. |