Lesson 5: Create an identity for your workload

In this lesson, you will learn how to create and identity in Conjur Cloud for your workload.

Workloads are any non-human users in your environment. You create a workload identity by defining it in a Conjur Cloud policy object called a host.

Each host can be created with different attributes based on:

To create a simple host that authenticates using an API key:

This task assumes you are logged in to the Conjur Cloud CLI as a Conjur Cloud admin user.

Create a policy for the host:

- !host
  id: <host name>
  annotations:
    authn/api-key: true

Save the policy as myapp-host.yaml.
Load the policy file into the data policy branch:
```
$ conjur policy load -b data -f myapp-host.yaml
```
The policy is loaded and an API key is returned.
Copy the API key. You will need this key when you authenticate myapp to Conjur Cloud.

Save the API key securely as a Privilege Cloud account.

In this lesson you learned how to set up authentication for your application using the Conjur Cloud's Default Authenticator. For additional supported authentication methods, see Supported authentication methods Supported Conjur Cloud authenticators.