View a markdown version of this page

AWS::BedrockAgentCore::Harness CustomJWTAuthorizerConfiguration - AWS CloudFormation
SyntaxProperties

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::BedrockAgentCore::Harness CustomJWTAuthorizerConfiguration

Configuration for inbound JWT-based authorization, specifying how incoming requests should be authenticated.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "AllowedAudience" : [ String, ... ],
  "AllowedClients" : [ String, ... ],
  "AllowedScopes" : [ String, ... ],
  "CustomClaims" : [ CustomClaimValidationType, ... ],
  "DiscoveryUrl" : String,
  "PrivateEndpoint" : PrivateEndpoint,
  "PrivateEndpointOverrides" : [ PrivateEndpointOverride, ... ]
}

Properties

AllowedAudience

Represents individual audience values that are validated in the incoming JWT token validation process.

Required: No

Type: Array of String

Minimum: 1

Update requires: No interruption

AllowedClients

Represents individual client IDs that are validated in the incoming JWT token validation process.

Required: No

Type: Array of String

Minimum: 1

Update requires: No interruption

AllowedScopes

An array of scopes that are allowed to access the token.

Required: No

Type: Array of String

Maximum: 255

Minimum: 1 | 1

Update requires: No interruption

CustomClaims

An array of objects that define a custom claim validation name, value, and operation

Required: No

Type: Array of CustomClaimValidationType

Minimum: 1

Update requires: No interruption

DiscoveryUrl

This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.

Required: Yes

Type: String

Pattern: ^.+/\.well-known/openid-configuration$

Update requires: No interruption

PrivateEndpoint

Property description not available.

Required: No

Type: PrivateEndpoint

Update requires: No interruption

PrivateEndpointOverrides

The private endpoint overrides for the custom JWT authorizer configuration.

Required: No

Type: Array of PrivateEndpointOverride

Maximum: 5

Update requires: No interruption