WritingBasetenBasetenpublished Sep 11, 2026seen 4h

Oidc And Aws Assumerole For Training Jobs

Open original ↗

Captured source

source ↗
published Sep 11, 2026seen 4hcaptured 4hhttp 200method plain

OIDC and AWS AssumeRole for training jobs Blaxel is joining Baseten . Read more

changelog / post

OIDC and AWS AssumeRole for training jobs

Sep 11, 2026 Go back

Training jobs can now use OIDC or AWS AssumeRole during setup to pull private container images and download model weights or training data without storing long-lived cloud credentials in Baseten. OIDC supports Amazon ECR and S3, Google Artifact Registry and Container Registry, and Google Cloud Storage. Training OIDC tokens let you scope access to your Baseten organization, team, training project, or individual job. For AWS resources, you can use AWS AssumeRole without registering an OIDC provider. Baseten assumes an IAM role in your account using your organization's unique external ID. AWS AssumeRole supports private images in Amazon ECR and weights or data in Amazon S3.

For setup instructions, see OIDC authentication , AWS AssumeRole , private training images , and weights and data authentication .

Explore Baseten today Start deploying Talk to an engineer

Popular models DeepSeek V4.1 Flash

GLM-5.3

GLM-5.3-Flash

Kimi K3

Whisper Large V3

Qwen3.8-27B

Explore all

Popular models DeepSeek V4.1 Flash

GLM-5.3

GLM-5.3-Flash

Kimi K3

Whisper Large V3

Qwen3.8-27B

Explore all

Notability

notability 5.0/10

Substantive technical post on OIDC and AWS IAM for training.