Method: projects.locations.awsClusters.generateAwsAccessToken

Generates a short-lived access token to authenticate to a given AwsCluster resource.

HTTP request

GET https://{endpoint}/v1/{awsCluster=projects/*/locations/*/awsClusters/*}:generateAwsAccessToken

Where {endpoint} is one of the supported service endpoints.

The URLs use gRPC Transcoding syntax.

Path parameters



Required. The name of the AwsCluster resource to authenticate to.

AwsCluster names are formatted as projects/<project-id>/locations/<region>/awsClusters/<cluster-id>.

See Resource Names for more details on Google Cloud resource names.

Request body

The request body must be empty.

Response body

Response message for AwsClusters.GenerateAwsAccessToken method.

If successful, the response body contains data with the following structure:

JSON representation
  "accessToken": string,
  "expirationTime": string


Output only. Access token to authenticate to k8s api-server.


string (Timestamp format)

Output only. Timestamp at which the token will expire.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

Authorization scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the awsCluster resource:

  • gkemulticloud.awsClusters.generateAccessToken

For more information, see the IAM documentation.