aws-cdk-lib.aws_cognito.CfnIdentityPoolRoleAttachment.RoleMappingProperty

RoleMappingProperty Struct

One of a set of RoleMappings , a property of the AWS::Cognito::IdentityPoolRoleAttachment resource that defines the role-mapping attributes of an Amazon Cognito identity pool.

Source

Generated code

Type last changed

v2.93.0 · 23 Aug 2023

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_cognito as cognito } from 'aws-cdk-lib';
const roleMappingProperty: cognito.CfnIdentityPoolRoleAttachment.RoleMappingProperty = {
  type: 'type',

  // the properties below are optional
  ambiguousRoleResolution: 'ambiguousRoleResolution',
  identityProvider: 'identityProvider',
  rulesConfiguration: {
    rules: [{
      claim: 'claim',
      matchType: 'matchType',
      roleArn: 'roleArn',
      value: 'value',
    }],
  },
};

Properties

ambiguousRoleResolutionstringambiguous_role_resolutionstrambiguousRoleResolutionStringAmbiguousRoleResolutionstringAmbiguousRoleResolution*string#

If you specify Token or Rules as the `Type` , `AmbiguousRoleResolution` is required.

Specifies the action to be taken if either no rules match the claim value for the Rules type, or there is no cognito:preferred_role claim and there are multiple cognito:roles matches for the Token type.

identityProviderstringidentity_providerstridentityProviderStringIdentityProviderstringIdentityProvider*string#

Identifier for the identity provider for which the role is mapped.

notes

For example: graph.facebook.com or cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id (http://cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id) . This is the identity provider that is used by the user for authentication.

If the identity provider property isn't provided, the key of the entry in the RoleMappings map is used as the identity provider.

rulesConfigurationIResolvable | CfnIdentityPoolRoleAttachment.RulesConfigurationTypePropertyrules_configurationtyping.Union[IResolvable, RulesConfigurationTypeProperty]rulesConfigurationIResolvableRulesConfigurationIResolvableRulesConfigurationinterface{}#

The rules to be used for mapping users to roles.

If you specify "Rules" as the role-mapping type, RulesConfiguration is required.

typestringtypestrtypeStringTypestringType*stringrequired#

The role mapping type.

Token will use cognito:roles and cognito:preferred_role claims from the Cognito identity provider token to map groups to roles. Rules will attempt to match claims from the token to map to a role.