Ansible Academy · Lesson

Credentials, Teams & RBAC

Secure who runs what, where.

Secrets Out of Your Code

AWX stores SSH keys, passwords and cloud tokens as credentials, encrypted in its database, so secrets never sit in playbooks or Git. 🔐

Each credential has a type, like Machine, Source Control or Amazon Web Services, which decides exactly which fields AWX collects and injects.