# IAwsRadiusProviderBuilder

- Kind: `interface`
- Package: [Aspire.Hosting.Radius](/reference/api/csharp/aspire.hosting.radius.md)
- Version: `13.5.3-preview.1.26425.3`
- Namespace: `Aspire.Hosting.Radius.CloudProviders`
- Target framework: `net10.0`
- Source: [GitHub](https://github.com/microsoft/aspire/blob/b5f143315ffb6968ea939a9978797a5b20e4c688/src/Aspire.Hosting.Radius/CloudProviders/IAwsRadiusProviderBuilder.cs)

Builder surface exposed inside the `WithAwsProvider` callback for selecting an AWS credential mode. Exactly one `With*` method must be called; a repeat call replaces the previous selection.

## Definition

```csharp
namespace Aspire.Hosting.Radius.CloudProviders;

public interface IAwsRadiusProviderBuilder
{
    // ...
}
```

## Methods

- [WithAccessKey(IResourceBuilder<ParameterResource>, IResourceBuilder<ParameterResource>)](/reference/api/csharp/aspire.hosting.radius/iawsradiusproviderbuilder/methods.md#withaccesskey-iresourcebuilder-parameterresource-iresourcebuilder-parameterresource) : [IAwsRadiusProviderBuilder](/reference/api/csharp/aspire.hosting.radius/iawsradiusproviderbuilder.md) `abstract` -- Configures an IAM access key credential. Both the access key id and secret access key values are provided via `ApplicationModel.ParameterResource` s so plaintext never appears in the publish artifact. Reference them with `builder.AddParameter("awsAccessKeyId", secret: true)` / `builder.AddParameter("awsSecretAccessKey", secret: true)`.
- [WithIrsa(string)](/reference/api/csharp/aspire.hosting.radius/iawsradiusproviderbuilder/methods.md#withirsa-string) : [IAwsRadiusProviderBuilder](/reference/api/csharp/aspire.hosting.radius/iawsradiusproviderbuilder.md) `abstract` -- Configures an IAM Roles for Service Accounts (IRSA) credential. No long-lived secret is materialized; the role is assumed at deploy time via the hosting Kubernetes cluster's OIDC provider.