2.266.0

interface CustomJWTAuthorizerConfigurationProperty

LanguageType name
.NETAmazon.CDK.CfnPropertyMixins.AWS.BedrockAgentCore.CfnRuntimePropsMixin.CustomJWTAuthorizerConfigurationProperty
Gogithub.com/aws/aws-cdk-go/awscdkcfnpropertymixins/v2/awsbedrockagentcore#CfnRuntimePropsMixin_CustomJWTAuthorizerConfigurationProperty
Javasoftware.amazon.awscdk.cfnpropertymixins.services.bedrockagentcore.CfnRuntimePropsMixin.CustomJWTAuthorizerConfigurationProperty
Pythonaws_cdk.cfn_property_mixins.aws_bedrockagentcore.CfnRuntimePropsMixin.CustomJWTAuthorizerConfigurationProperty
TypeScript @aws-cdk/cfn-property-mixins » aws_bedrockagentcore » CfnRuntimePropsMixin » CustomJWTAuthorizerConfigurationProperty

Configuration for custom JWT authorizer.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from '@aws-cdk/cfn-property-mixins';
const customJWTAuthorizerConfigurationProperty: bedrockagentcore.CfnRuntimePropsMixin.CustomJWTAuthorizerConfigurationProperty = {
  allowedAudience: ['allowedAudience'],
  allowedClients: ['allowedClients'],
  allowedScopes: ['allowedScopes'],
  allowedWorkloadConfiguration: {
    hostingEnvironments: [{
      arn: 'arn',
    }],
    workloadIdentities: ['workloadIdentities'],
  },
  customClaims: [{
    authorizingClaimMatchValue: {
      claimMatchOperator: 'claimMatchOperator',
      claimMatchValue: {
        matchValueString: 'matchValueString',
        matchValueStringList: ['matchValueStringList'],
      },
    },
    inboundTokenClaimName: 'inboundTokenClaimName',
    inboundTokenClaimValueType: 'inboundTokenClaimValueType',
  }],
  discoveryUrl: 'discoveryUrl',
  privateEndpoint: {
    managedVpcResource: {
      endpointIpAddressType: 'endpointIpAddressType',
      routingDomain: 'routingDomain',
      securityGroupIds: ['securityGroupIds'],
      subnetIds: ['subnetIds'],
      tags: {
        tagsKey: 'tags',
      },
      vpcIdentifier: 'vpcIdentifier',
    },
    selfManagedLatticeResource: {
      resourceConfigurationIdentifier: 'resourceConfigurationIdentifier',
    },
  },
  privateEndpointOverrides: [{
    domain: 'domain',
    privateEndpoint: {
      managedVpcResource: {
        endpointIpAddressType: 'endpointIpAddressType',
        routingDomain: 'routingDomain',
        securityGroupIds: ['securityGroupIds'],
        subnetIds: ['subnetIds'],
        tags: {
          tagsKey: 'tags',
        },
        vpcIdentifier: 'vpcIdentifier',
      },
      selfManagedLatticeResource: {
        resourceConfigurationIdentifier: 'resourceConfigurationIdentifier',
      },
    },
  }],
};

Properties

NameTypeDescription
allowedAudience?string[]Represents inbound authorization configuration options used to authenticate incoming requests.
allowedClients?string[]Represents individual client IDs that are validated in the incoming JWT token validation process.
allowedScopes?string[]List of allowed scopes.
allowedWorkloadConfiguration?IResolvable | AllowedWorkloadConfigurationPropertyAllow-list of upstream workloads permitted to reach this resource via the workload identity chain.
customClaims?IResolvable | (IResolvable | CustomClaimValidationTypeProperty)[]List of required custom claims.
discoveryUrl?stringThe configuration authorization.
privateEndpoint?IResolvable | PrivateEndpointPropertyPrivate endpoint configuration.
privateEndpointOverrides?IResolvable | (IResolvable | PrivateEndpointOverrideProperty)[]List of private endpoint overrides.

allowedAudience?

Type: string[] (optional)

Represents inbound authorization configuration options used to authenticate incoming requests.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedaudience

allowedClients?

Type: string[] (optional)

Represents individual client IDs that are validated in the incoming JWT token validation process.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedclients

allowedScopes?

Type: string[] (optional)

List of allowed scopes.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedscopes

allowedWorkloadConfiguration?

Type: IResolvable | AllowedWorkloadConfigurationProperty (optional)

Allow-list of upstream workloads permitted to reach this resource via the workload identity chain.

When set, the data plane enforces that the introspected workload chain's caller matches one of the configured hosting environments or workload identities; absent means no chain enforcement.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedworkloadconfiguration

customClaims?

Type: IResolvable | (IResolvable | CustomClaimValidationTypeProperty)[] (optional)

List of required custom claims.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-customclaims

discoveryUrl?

Type: string (optional)

The configuration authorization.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-discoveryurl

privateEndpoint?

Type: IResolvable | PrivateEndpointProperty (optional)

Private endpoint configuration.

Exactly one of SelfManagedLatticeResource or ManagedVpcResource must be specified.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-privateendpoint

privateEndpointOverrides?

Type: IResolvable | (IResolvable | PrivateEndpointOverrideProperty)[] (optional)

List of private endpoint overrides.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-privateendpointoverrides

← PreviousNext →