---
name: iam-assume-role-web-identity-token
description: For AssumeRoleWithWebIdentity, the WebIdentity token.
type: string
env:
  - TG_IAM_ASSUME_ROLE_WEB_IDENTITY_TOKEN
---

Specifies the WebIdentity token to use when assuming an IAM role using web identity federation. This flag is only used when [`iam-assume-role`](/reference/cli/commands/run#iam-assume-role) is specified.

For more information on how to use this flag, and how it differs from other ways of managing authentication with Terragrunt, see the [Authentication](/features/units/authentication) feature documentation.
