CustomJWTAuthorizerConfigurationProperty Struct
Example
ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';
const customJWTAuthorizerConfigurationProperty: bedrockagentcore.CfnHarness.CustomJWTAuthorizerConfigurationProperty = {
discoveryUrl: 'discoveryUrl',
// the properties below are optional
advertisedScopeMapping: {
advertisedScopeMappingKey: 'advertisedScopeMapping',
},
allowedAudience: ['allowedAudience'],
allowedClients: ['allowedClients'],
allowedScopes: ['allowedScopes'],
customClaims: [{
authorizingClaimMatchValue: {
claimMatchOperator: 'claimMatchOperator',
claimMatchValue: {
matchValueString: 'matchValueString',
matchValueStringList: ['matchValueStringList'],
},
},
inboundTokenClaimName: 'inboundTokenClaimName',
inboundTokenClaimValueType: 'inboundTokenClaimValueType',
}],
privateEndpoint: {
managedVpcResource: {
endpointIpAddressType: 'endpointIpAddressType',
subnetIds: ['subnetIds'],
vpcIdentifier: 'vpcIdentifier',
// the properties below are optional
routingDomain: 'routingDomain',
securityGroupIds: ['securityGroupIds'],
tags: {
tagsKey: 'tags',
},
},
selfManagedLatticeResource: {
resourceConfigurationIdentifier: 'resourceConfigurationIdentifier',
},
},
privateEndpointOverrides: [{
domain: 'domain',
privateEndpoint: {
managedVpcResource: {
endpointIpAddressType: 'endpointIpAddressType',
subnetIds: ['subnetIds'],
vpcIdentifier: 'vpcIdentifier',
// the properties below are optional
routingDomain: 'routingDomain',
securityGroupIds: ['securityGroupIds'],
tags: {
tagsKey: 'tags',
},
},
selfManagedLatticeResource: {
resourceConfigurationIdentifier: 'resourceConfigurationIdentifier',
},
},
}],
};
Properties
advertisedScopeMappingoptionalIResolvable | { [key: string]: string }advertised_scope_mappingoptionaltyping.Union[IResolvable, typing.Mapping[str, str]]advertisedScopeMappingoptionalIResolvableAdvertisedScopeMappingoptionalIResolvableAdvertisedScopeMappingoptionalinterface{}#A map that associates each scope in AllowedScopes with a corresponding advertised scope value.
The advertised scope appears in OAuth protected resource metadata and WWW-Authenticate response headers.
allowedAudienceoptionalstring[]allowed_audienceoptionaltyping.List[str]allowedAudienceoptionalList<String>AllowedAudienceoptionalstring[]AllowedAudienceoptional*[]*string#allowedClientsoptionalstring[]allowed_clientsoptionaltyping.List[str]allowedClientsoptionalList<String>AllowedClientsoptionalstring[]AllowedClientsoptional*[]*string#allowedScopesoptionalstring[]allowed_scopesoptionaltyping.List[str]allowedScopesoptionalList<String>AllowedScopesoptionalstring[]AllowedScopesoptional*[]*string#customClaimsoptionalIResolvable | IResolvable | CfnHarness.CustomClaimValidationTypeProperty[]custom_claimsoptionaltyping.Union[IResolvable, typing.List[typing.Union[IResolvable, CustomClaimValidationTypeProperty]]]customClaimsoptionalIResolvableCustomClaimsoptionalIResolvableCustomClaimsoptionalinterface{}#privateEndpointoptionalIResolvable | CfnHarness.PrivateEndpointPropertyprivate_endpointoptionaltyping.Union[IResolvable, PrivateEndpointProperty]privateEndpointoptionalIResolvablePrivateEndpointoptionalIResolvablePrivateEndpointoptionalinterface{}#Private endpoint configuration for connecting to the OpenID Connect discovery endpoint over a private network.
privateEndpointOverridesoptionalIResolvable | IResolvable | CfnHarness.PrivateEndpointOverrideProperty[]private_endpoint_overridesoptionaltyping.Union[IResolvable, typing.List[typing.Union[IResolvable, PrivateEndpointOverrideProperty]]]privateEndpointOverridesoptionalIResolvablePrivateEndpointOverridesoptionalIResolvablePrivateEndpointOverridesoptionalinterface{}#