xref

Author: jneczypor

cloud_experts_tutorials/cloud-experts-rosa-sts-explained.adoc

@@ -48,7 +48,7 @@ ROSA uses STS to grant permissions defined as least-privilege policies to specif
 STS roles and policies must be created for each ROSA cluster. To make this easier, the installation tools provide all the commands and files needed to create the roles as policies as well as an option to allow the CLI to perform the creation of these roles and policies automatically. See xref:../rosa_install_access_delete_clusters/rosa-sts-creating-a-cluster-with-customizations.adoc#rosa-sts-creating-cluster-customizations_rosa-sts-creating-a-cluster-with-customizations[Creating a ROSa cluster with STS using customizations] for more information about the different `--mode` options.
 
 == Components specific to ROSA with STS
-* *AWS infrastructure* - This provides the infrastructure required for the cluster. This will contain the actual EC2 instances, storage, and networking components. See xref:../rosa_policy_service_definition/rosa-service-definition.adoc#rosa-sdpolicy-aws-compute-types_rosa-service-definition[AWS compute types] to see supported instance types for compute nodes and xref:../rosa_planning/rosa-sts-aws-prereqs.adoc#rosa-ec2-instances_rosa-sts-aws-prereqs[provisioned AWS infrastructure] for the control plane and infrastructure node configuration.
+* *AWS infrastructure* - This provides the infrastructure required for the cluster. This will contain the actual EC2 instances, storage, and networking components. See xref:../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-sdpolicy-aws-compute-types_rosa-service-definition[AWS compute types] to see supported instance types for compute nodes and xref:../rosa_planning/rosa-sts-aws-prereqs.adoc#rosa-ec2-instances_rosa-sts-aws-prereqs[provisioned AWS infrastructure] for the control plane and infrastructure node configuration.
 * *AWS STS* - See the above section titled "ROSA with STS".
 * *OIDC* - Provides a mechanism for cluster operators to authenticate with AWS, assume the cluster roles via a trust policy, and obtain temporary credentials from STS in order to make the required API calls.
 * *Roles and policies* - This is the main component that differentiates ROSA with STS from ROSA with IAM Users. The roles and policies that are used by ROSA are broken up into account-wide roles and policies and operator roles and policies.