# CustomJWTAuthorizerConfiguration
<a name="API_CustomJWTAuthorizerConfiguration"></a>

Configuration for inbound JWT-based authorization, specifying how incoming requests should be authenticated.

## Contents
<a name="API_CustomJWTAuthorizerConfiguration_Contents"></a>

 ** discoveryUrl **   <a name="bedrockagentcorecontrol-Type-CustomJWTAuthorizerConfiguration-discoveryUrl"></a>
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.  
Type: String  
Pattern: `.+/\.well-known/openid-configuration`   
Required: Yes

 ** allowedAudience **   <a name="bedrockagentcorecontrol-Type-CustomJWTAuthorizerConfiguration-allowedAudience"></a>
Represents individual audience values that are validated in the incoming JWT token validation process.  
Type: Array of strings  
Array Members: Minimum number of 1 item.  
Required: No

 ** allowedClients **   <a name="bedrockagentcorecontrol-Type-CustomJWTAuthorizerConfiguration-allowedClients"></a>
Represents individual client IDs that are validated in the incoming JWT token validation process.  
Type: Array of strings  
Array Members: Minimum number of 1 item.  
Required: No

 ** allowedScopes **   <a name="bedrockagentcorecontrol-Type-CustomJWTAuthorizerConfiguration-allowedScopes"></a>
An array of scopes that are allowed to access the token.  
Type: Array of strings  
Array Members: Minimum number of 1 item.  
Length Constraints: Minimum length of 1. Maximum length of 255.  
Pattern: `[\x21\x23-\x5B\x5D-\x7E]+`   
Required: No

 ** customClaims **   <a name="bedrockagentcorecontrol-Type-CustomJWTAuthorizerConfiguration-customClaims"></a>
An array of objects that define a custom claim validation name, value, and operation   
Type: Array of [CustomClaimValidationType](API_CustomClaimValidationType.md) objects  
Array Members: Minimum number of 1 item.  
Required: No

## See Also
<a name="API_CustomJWTAuthorizerConfiguration_SeeAlso"></a>

For more information about using this API in one of the language-specific AWS SDKs, see the following:
+  [AWS SDK for C\$1\$1](https://docs.aws.amazon.com/goto/SdkForCpp/bedrock-agentcore-control-2023-06-05/CustomJWTAuthorizerConfiguration) 
+  [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/bedrock-agentcore-control-2023-06-05/CustomJWTAuthorizerConfiguration) 
+  [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/bedrock-agentcore-control-2023-06-05/CustomJWTAuthorizerConfiguration)