# GatewayApiKeyIdentityBinding

Provider and secret ARNs for wiring a Token Vault API key identity into a gateway target.

- Source: [`aws-bedrockagentcore/lib/identity/api-key-credential-provider.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-bedrockagentcore/lib/identity/api-key-credential-provider.ts#L106)
- Type last changed: v2.255.0 · 19 May 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';
const gatewayApiKeyIdentityBinding: bedrockagentcore.GatewayApiKeyIdentityBinding = {
  providerArn: 'providerArn',
  secretArn: 'secretArn',
};
```

## Properties

- `providerArn`: string (required) — API key credential provider ARN.

- `secretArn`: string (required) — Secrets Manager secret ARN for the API key material.