interface CustomJWTAuthorizerConfigurationProperty

Language	Type name
.NET	Amazon.CDK.AWS.BedrockAgentCore.CfnRuntime.CustomJWTAuthorizerConfigurationProperty
Go	github.com/aws/aws-cdk-go/awscdk/v2/awsbedrockagentcore#CfnRuntime_CustomJWTAuthorizerConfigurationProperty
Java	software.amazon.awscdk.services.bedrockagentcore.CfnRuntime.CustomJWTAuthorizerConfigurationProperty
Python	aws_cdk.aws_bedrockagentcore.CfnRuntime.CustomJWTAuthorizerConfigurationProperty
TypeScript	aws-cdk-lib » aws_bedrockagentcore » CfnRuntime » CustomJWTAuthorizerConfigurationProperty

Configuration for custom JWT authorizer.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';
const customJWTAuthorizerConfigurationProperty: bedrockagentcore.CfnRuntime.CustomJWTAuthorizerConfigurationProperty = {
  discoveryUrl: 'discoveryUrl',

  // the properties below are optional
  allowedAudience: ['allowedAudience'],
  allowedClients: ['allowedClients'],
  allowedScopes: ['allowedScopes'],
  allowedWorkloadConfiguration: {
    hostingEnvironments: [{
      arn: 'arn',
    }],
    workloadIdentities: ['workloadIdentities'],
  },
  customClaims: [{
    authorizingClaimMatchValue: {
      claimMatchOperator: 'claimMatchOperator',
      claimMatchValue: {
        matchValueString: 'matchValueString',
        matchValueStringList: ['matchValueStringList'],
      },
    },
    inboundTokenClaimName: 'inboundTokenClaimName',
    inboundTokenClaimValueType: 'inboundTokenClaimValueType',
  }],
  privateEndpoint: {
    managedVpcResource: {
      endpointIpAddressType: 'endpointIpAddressType',
      subnetIds: ['subnetIds'],
      vpcIdentifier: 'vpcIdentifier',

      // the properties below are optional
      routingDomain: 'routingDomain',
      securityGroupIds: ['securityGroupIds'],
      tags: {
        tagsKey: 'tags',
      },
    },
    selfManagedLatticeResource: {
      resourceConfigurationIdentifier: 'resourceConfigurationIdentifier',
    },
  },
  privateEndpointOverrides: [{
    domain: 'domain',
    privateEndpoint: {
      managedVpcResource: {
        endpointIpAddressType: 'endpointIpAddressType',
        subnetIds: ['subnetIds'],
        vpcIdentifier: 'vpcIdentifier',

        // the properties below are optional
        routingDomain: 'routingDomain',
        securityGroupIds: ['securityGroupIds'],
        tags: {
          tagsKey: 'tags',
        },
      },
      selfManagedLatticeResource: {
        resourceConfigurationIdentifier: 'resourceConfigurationIdentifier',
      },
    },
  }],
};

Properties

Name	Type	Description
discoveryUrl	string	The configuration authorization.
allowedAudience?	string[]	Represents inbound authorization configuration options used to authenticate incoming requests.
allowedClients?	string[]	Represents individual client IDs that are validated in the incoming JWT token validation process.
allowedScopes?	string[]	List of allowed scopes.
allowedWorkloadConfiguration?	IResolvable | AllowedWorkloadConfigurationProperty	Allow-list of upstream workloads permitted to reach this resource via the workload identity chain.
customClaims?	IResolvable | (IResolvable | CustomClaimValidationTypeProperty)[]	List of required custom claims.
privateEndpoint?	IResolvable | PrivateEndpointProperty	Private endpoint configuration.
privateEndpointOverrides?	IResolvable | (IResolvable | PrivateEndpointOverrideProperty)[]	List of private endpoint overrides.

---

discoveryUrl

Type: string

The configuration authorization.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-discoveryurl

---

allowedAudience?

Type: string[] (optional)

Represents inbound authorization configuration options used to authenticate incoming requests.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedaudience

---

allowedClients?

Type: string[] (optional)

Represents individual client IDs that are validated in the incoming JWT token validation process.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedclients

---

allowedScopes?

Type: string[] (optional)

List of allowed scopes.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedscopes

---

allowedWorkloadConfiguration?

Type: IResolvable | AllowedWorkloadConfigurationProperty (optional)

Allow-list of upstream workloads permitted to reach this resource via the workload identity chain.

When set, the data plane enforces that the introspected workload chain's caller matches one of the configured hosting environments or workload identities; absent means no chain enforcement.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedworkloadconfiguration

---

customClaims?

Type: IResolvable | (IResolvable | CustomClaimValidationTypeProperty)[] (optional)

List of required custom claims.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-customclaims

---

privateEndpoint?

Type: IResolvable | PrivateEndpointProperty (optional)

Private endpoint configuration.

Exactly one of SelfManagedLatticeResource or ManagedVpcResource must be specified.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-privateendpoint

---

privateEndpointOverrides?

Type: IResolvable | (IResolvable | PrivateEndpointOverrideProperty)[] (optional)

List of private endpoint overrides.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-privateendpointoverrides