aws-cdk-lib.aws_msk.CfnReplicator.KafkaClusterOAuthClientCredentialsAssertionProperty

KafkaClusterOAuthClientCredentialsAssertionProperty Struct

Details for SASL/OAUTHBEARER using the client credentials grant with a JWT client assertion (RFC 7521/7523 Section 2.2). An STS-vended JWT is used as the client_assertion.

Source

Generated code

Type last changed

v2.268.0 · 2 Sep 2026

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_msk as msk } from 'aws-cdk-lib';
const kafkaClusterOAuthClientCredentialsAssertionProperty: msk.CfnReplicator.KafkaClusterOAuthClientCredentialsAssertionProperty = {
  audience: 'audience',
  signingAlgorithm: 'signingAlgorithm',

  // the properties below are optional
  tokenRequestSecretArn: 'tokenRequestSecretArn',
};

Properties

audiencestringaudiencestraudienceStringAudiencestringAudience*stringrequired#

The audience (aud claim) set in the STS JWT client assertion.

signingAlgorithmstringsigning_algorithmstrsigningAlgorithmStringSigningAlgorithmstringSigningAlgorithm*stringrequired#

The algorithm used to sign the STS JWT assertion.

tokenRequestSecretArn?optionalstringtoken_request_secret_arn?optionalstrtokenRequestSecretArn?optionalStringTokenRequestSecretArn?optionalstringTokenRequestSecretArn?optional*string#

Optional Secrets Manager ARN for identity providers that require client_id as a form parameter alongside the JWT client assertion.