CfnIdentitySourceMixinProps

class aws_cdk.mixins_preview.aws_verifiedpermissions.mixins.CfnIdentitySourceMixinProps(*, configuration=None, policy_store_id=None, principal_entity_type=None)

Bases: object

Properties for CfnIdentitySourcePropsMixin.

Parameters:

configuration (Union[IResolvable, IdentitySourceConfigurationProperty, Dict[str, Any], None]) – Contains configuration information used when creating a new identity source.
policy_store_id (Optional[str]) – Specifies the ID of the policy store in which you want to store this identity source. Only policies and requests made using this policy store can reference identities from the identity provider configured in the new identity source.
principal_entity_type (Optional[str]) – Specifies the namespace and data type of the principals generated for identities authenticated by the new identity source.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_verifiedpermissions import mixins as verifiedpermissions_mixins

cfn_identity_source_mixin_props = verifiedpermissions_mixins.CfnIdentitySourceMixinProps(
    configuration=verifiedpermissions_mixins.CfnIdentitySourcePropsMixin.IdentitySourceConfigurationProperty(
        cognito_user_pool_configuration=verifiedpermissions_mixins.CfnIdentitySourcePropsMixin.CognitoUserPoolConfigurationProperty(
            client_ids=["clientIds"],
            group_configuration=verifiedpermissions_mixins.CfnIdentitySourcePropsMixin.CognitoGroupConfigurationProperty(
                group_entity_type="groupEntityType"
            ),
            user_pool_arn="userPoolArn"
        ),
        open_id_connect_configuration=verifiedpermissions_mixins.CfnIdentitySourcePropsMixin.OpenIdConnectConfigurationProperty(
            entity_id_prefix="entityIdPrefix",
            group_configuration=verifiedpermissions_mixins.CfnIdentitySourcePropsMixin.OpenIdConnectGroupConfigurationProperty(
                group_claim="groupClaim",
                group_entity_type="groupEntityType"
            ),
            issuer="issuer",
            token_selection=verifiedpermissions_mixins.CfnIdentitySourcePropsMixin.OpenIdConnectTokenSelectionProperty(
                access_token_only=verifiedpermissions_mixins.CfnIdentitySourcePropsMixin.OpenIdConnectAccessTokenConfigurationProperty(
                    audiences=["audiences"],
                    principal_id_claim="principalIdClaim"
                ),
                identity_token_only=verifiedpermissions_mixins.CfnIdentitySourcePropsMixin.OpenIdConnectIdentityTokenConfigurationProperty(
                    client_ids=["clientIds"],
                    principal_id_claim="principalIdClaim"
                )
            )
        )
    ),
    policy_store_id="policyStoreId",
    principal_entity_type="principalEntityType"
)

Attributes

configuration

Contains configuration information used when creating a new identity source.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html#cfn-verifiedpermissions-identitysource-configuration

policy_store_id

Specifies the ID of the policy store in which you want to store this identity source.

Only policies and requests made using this policy store can reference identities from the identity provider configured in the new identity source.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html#cfn-verifiedpermissions-identitysource-policystoreid

principal_entity_type

Specifies the namespace and data type of the principals generated for identities authenticated by the new identity source.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-verifiedpermissions-identitysource.html#cfn-verifiedpermissions-identitysource-principalentitytype