Class CfnRuntimePropsMixin.CustomJWTAuthorizerConfigurationProperty

Configuration for custom JWT authorizer.

Inheritance

object

CfnRuntimePropsMixin.CustomJWTAuthorizerConfigurationProperty

Implements

CfnRuntimePropsMixin.ICustomJWTAuthorizerConfigurationProperty

Inherited Members

object.GetType()

object.MemberwiseClone()

object.ToString()

object.Equals(object)

object.Equals(object, object)

object.ReferenceEquals(object, object)

object.GetHashCode()

Namespace: Amazon.CDK.CfnPropertyMixins.AWS.BedrockAgentCore

Assembly: Amazon.CDK.CfnPropertyMixins.dll

Syntax (csharp)

public class CfnRuntimePropsMixin.CustomJWTAuthorizerConfigurationProperty : CfnRuntimePropsMixin.ICustomJWTAuthorizerConfigurationProperty

Syntax (vb)

Public Class CfnRuntimePropsMixin.CustomJWTAuthorizerConfigurationProperty Implements CfnRuntimePropsMixin.ICustomJWTAuthorizerConfigurationProperty

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
             // The values are placeholders you should change.
             using Amazon.CDK.CfnPropertyMixins.AWS.BedrockAgentCore;

             var customJWTAuthorizerConfigurationProperty = new CustomJWTAuthorizerConfigurationProperty {
                 AllowedAudience = new [] { "allowedAudience" },
                 AllowedClients = new [] { "allowedClients" },
                 AllowedScopes = new [] { "allowedScopes" },
                 AllowedWorkloadConfiguration = new AllowedWorkloadConfigurationProperty {
                     HostingEnvironments = new [] { new HostingEnvironmentProperty {
                         Arn = "arn"
                     } },
                     WorkloadIdentities = new [] { "workloadIdentities" }
                 },
                 CustomClaims = new [] { new CustomClaimValidationTypeProperty {
                     AuthorizingClaimMatchValue = new AuthorizingClaimMatchValueTypeProperty {
                         ClaimMatchOperator = "claimMatchOperator",
                         ClaimMatchValue = new ClaimMatchValueTypeProperty {
                             MatchValueString = "matchValueString",
                             MatchValueStringList = new [] { "matchValueStringList" }
                         }
                     },
                     InboundTokenClaimName = "inboundTokenClaimName",
                     InboundTokenClaimValueType = "inboundTokenClaimValueType"
                 } },
                 DiscoveryUrl = "discoveryUrl",
                 PrivateEndpoint = new PrivateEndpointProperty {
                     ManagedVpcResource = new ManagedVpcResourceProperty {
                         EndpointIpAddressType = "endpointIpAddressType",
                         RoutingDomain = "routingDomain",
                         SecurityGroupIds = new [] { "securityGroupIds" },
                         SubnetIds = new [] { "subnetIds" },
                         Tags = new Dictionary<string, string> {
                             { "tagsKey", "tags" }
                         },
                         VpcIdentifier = "vpcIdentifier"
                     },
                     SelfManagedLatticeResource = new SelfManagedLatticeResourceProperty {
                         ResourceConfigurationIdentifier = "resourceConfigurationIdentifier"
                     }
                 },
                 PrivateEndpointOverrides = new [] { new PrivateEndpointOverrideProperty {
                     Domain = "domain",
                     PrivateEndpoint = new PrivateEndpointProperty {
                         ManagedVpcResource = new ManagedVpcResourceProperty {
                             EndpointIpAddressType = "endpointIpAddressType",
                             RoutingDomain = "routingDomain",
                             SecurityGroupIds = new [] { "securityGroupIds" },
                             SubnetIds = new [] { "subnetIds" },
                             Tags = new Dictionary<string, string> {
                                 { "tagsKey", "tags" }
                             },
                             VpcIdentifier = "vpcIdentifier"
                         },
                         SelfManagedLatticeResource = new SelfManagedLatticeResourceProperty {
                             ResourceConfigurationIdentifier = "resourceConfigurationIdentifier"
                         }
                     }
                 } }
             };

Synopsis

Constructors

CustomJWTAuthorizerConfigurationProperty()

Configuration for custom JWT authorizer.

Properties

AllowedAudience	Represents inbound authorization configuration options used to authenticate incoming requests.
AllowedClients	Represents individual client IDs that are validated in the incoming JWT token validation process.
AllowedScopes	List of allowed scopes.
AllowedWorkloadConfiguration	Allow-list of upstream workloads permitted to reach this resource via the workload identity chain.
CustomClaims	List of required custom claims.
DiscoveryUrl	The configuration authorization.
PrivateEndpoint	Private endpoint configuration.
PrivateEndpointOverrides	List of private endpoint overrides.

Constructors

CustomJWTAuthorizerConfigurationProperty()

Configuration for custom JWT authorizer.

public CustomJWTAuthorizerConfigurationProperty()

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
             // The values are placeholders you should change.
             using Amazon.CDK.CfnPropertyMixins.AWS.BedrockAgentCore;

             var customJWTAuthorizerConfigurationProperty = new CustomJWTAuthorizerConfigurationProperty {
                 AllowedAudience = new [] { "allowedAudience" },
                 AllowedClients = new [] { "allowedClients" },
                 AllowedScopes = new [] { "allowedScopes" },
                 AllowedWorkloadConfiguration = new AllowedWorkloadConfigurationProperty {
                     HostingEnvironments = new [] { new HostingEnvironmentProperty {
                         Arn = "arn"
                     } },
                     WorkloadIdentities = new [] { "workloadIdentities" }
                 },
                 CustomClaims = new [] { new CustomClaimValidationTypeProperty {
                     AuthorizingClaimMatchValue = new AuthorizingClaimMatchValueTypeProperty {
                         ClaimMatchOperator = "claimMatchOperator",
                         ClaimMatchValue = new ClaimMatchValueTypeProperty {
                             MatchValueString = "matchValueString",
                             MatchValueStringList = new [] { "matchValueStringList" }
                         }
                     },
                     InboundTokenClaimName = "inboundTokenClaimName",
                     InboundTokenClaimValueType = "inboundTokenClaimValueType"
                 } },
                 DiscoveryUrl = "discoveryUrl",
                 PrivateEndpoint = new PrivateEndpointProperty {
                     ManagedVpcResource = new ManagedVpcResourceProperty {
                         EndpointIpAddressType = "endpointIpAddressType",
                         RoutingDomain = "routingDomain",
                         SecurityGroupIds = new [] { "securityGroupIds" },
                         SubnetIds = new [] { "subnetIds" },
                         Tags = new Dictionary<string, string> {
                             { "tagsKey", "tags" }
                         },
                         VpcIdentifier = "vpcIdentifier"
                     },
                     SelfManagedLatticeResource = new SelfManagedLatticeResourceProperty {
                         ResourceConfigurationIdentifier = "resourceConfigurationIdentifier"
                     }
                 },
                 PrivateEndpointOverrides = new [] { new PrivateEndpointOverrideProperty {
                     Domain = "domain",
                     PrivateEndpoint = new PrivateEndpointProperty {
                         ManagedVpcResource = new ManagedVpcResourceProperty {
                             EndpointIpAddressType = "endpointIpAddressType",
                             RoutingDomain = "routingDomain",
                             SecurityGroupIds = new [] { "securityGroupIds" },
                             SubnetIds = new [] { "subnetIds" },
                             Tags = new Dictionary<string, string> {
                                 { "tagsKey", "tags" }
                             },
                             VpcIdentifier = "vpcIdentifier"
                         },
                         SelfManagedLatticeResource = new SelfManagedLatticeResourceProperty {
                             ResourceConfigurationIdentifier = "resourceConfigurationIdentifier"
                         }
                     }
                 } }
             };

Properties

AllowedAudience

Represents inbound authorization configuration options used to authenticate incoming requests.

public string[]? AllowedAudience { get; set; }

Property Value

string[]

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedaudience

AllowedClients

Represents individual client IDs that are validated in the incoming JWT token validation process.

public string[]? AllowedClients { get; set; }

Property Value

string[]

Remarks

AllowedScopes

List of allowed scopes.

public string[]? AllowedScopes { get; set; }

Property Value

string[]

Remarks

AllowedWorkloadConfiguration

Allow-list of upstream workloads permitted to reach this resource via the workload identity chain.

public object? AllowedWorkloadConfiguration { get; set; }

Property Value

object

Remarks

When set, the data plane enforces that the introspected workload chain's caller matches one of the configured hosting environments or workload identities; absent means no chain enforcement.

Type union: either IResolvable or CfnRuntimePropsMixin.IAllowedWorkloadConfigurationProperty

CustomClaims

List of required custom claims.

public object? CustomClaims { get; set; }

Property Value

object

Remarks

Type union: either IResolvable or (either IResolvable or CfnRuntimePropsMixin.ICustomClaimValidationTypeProperty)[]

DiscoveryUrl

The configuration authorization.

public string? DiscoveryUrl { get; set; }

Property Value

string

Remarks

PrivateEndpoint

Private endpoint configuration.

public object? PrivateEndpoint { get; set; }

Property Value

object

Remarks

Exactly one of SelfManagedLatticeResource or ManagedVpcResource must be specified.

Type union: either IResolvable or CfnRuntimePropsMixin.IPrivateEndpointProperty

PrivateEndpointOverrides

List of private endpoint overrides.

public object? PrivateEndpointOverrides { get; set; }