---
title: "Get team OIDC IAM configuration for ECR."
method: GET
path: "/external_registry/iam"
tags: ["externalRegistries"]
---

# Get team OIDC IAM configuration for ECR.

`GET /external_registry/iam`

## Request

- Base URL: `https://api.replicated.com/vendor/v3`
- URL: `https://api.replicated.com/vendor/v3/external_registry/iam`
- Auth: API key in header `Authorization`

Required RBAC Policy: kots/externalregistry/read

## Response `200`

GetECRIAMConfigResponse contains the team OIDC configuration.

- object
  - `audience` string
  - `issuer_url` string
  - `subject_type` string
  - `thumbprint` string

## Other responses

- `401`: Return if the caller is not authorized
- `403`: Returned if the caller does not have the needed permission

## Changes

- **2026-11-03** `a36c6aead22f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/replicated/apis/vendor-api-v3-2/changes/external_registry/iam/get.md)

---

[API](https://skmtc.dev/replicated/apis/vendor-api-v3-2.md) - [All operations](https://skmtc.dev/replicated/apis/vendor-api-v3-2/llms.txt) - [OpenAPI document](https://skmtc.dev/replicated/apis/vendor-api-v3-2/revisions/a36c6aead22f?raw)