Skip to content

Bedrock Agentcore Control  >  Structures  >  IncludedOauth2ProviderConfigInput

IncludedOauth2ProviderConfigInput

Structure Class

IncludedOauth2ProviderConfigInput dataclass

Configuration settings for connecting to a supported OAuth2 provider. This includes client credentials and OAuth2 discovery information for providers that have built-in support.

Attributes

authorization_endpoint class-attribute instance-attribute
authorization_endpoint: str | None = None

OAuth2 authorization endpoint for your isolated OAuth2 application tenant. This is where users are redirected to authenticate and authorize access to their resources.

client_id instance-attribute
client_id: str

The client ID for the supported OAuth2 provider. This identifier is assigned by the OAuth2 provider when you register your application.

client_secret class-attribute instance-attribute
client_secret: str = field(repr=False, default='')

The client secret for the supported OAuth2 provider. This secret is assigned by the OAuth2 provider and used along with the client ID to authenticate your application.

client_secret_config class-attribute instance-attribute
client_secret_config: SecretReference | None = None

A reference to the Amazon Web Services Secrets Manager secret that stores the client secret. This includes the secret ID and the JSON key used to extract the client secret value from the secret. Required when clientSecretSource is set to EXTERNAL.

client_secret_source class-attribute instance-attribute
client_secret_source: SecretSourceType | None = None

The source type of the client secret. Use MANAGED if the secret is managed by the service, or EXTERNAL if you manage the secret yourself in Amazon Web Services Secrets Manager.

issuer class-attribute instance-attribute
issuer: str | None = None

Token issuer of your isolated OAuth2 application tenant. This URL identifies the authorization server that issues tokens for this provider.

token_endpoint class-attribute instance-attribute
token_endpoint: str | None = None

OAuth2 token endpoint for your isolated OAuth2 application tenant. This is where authorization codes are exchanged for access tokens.