View a markdown version of this page

PrivateKeyJwtConfig - Amazon Bedrock AgentCore Control Plane

PrivateKeyJwtConfig

The private key configuration for private_key_jwt client authentication.

Contents

additionalHeaderClaims

A map of additional claims to include in the JWT client assertion header. Standard header claims such as alg and typ cannot be added.

Type: String to string map

Map Entries: Maximum number of 10 items.

Key Length Constraints: Minimum length of 1. Maximum length of 255.

Key Pattern: [A-Za-z0-9_.:#-]+

Value Length Constraints: Minimum length of 1. Maximum length of 2048.

Required: No

additionalPayloadClaims

A map of additional claims to include in the JWT client assertion payload. Payload claims generated by the service, such as iss, sub, jti, and exp, cannot be added.

Type: String to string map

Map Entries: Maximum number of 10 items.

Key Length Constraints: Minimum length of 1. Maximum length of 255.

Key Pattern: [A-Za-z0-9_.:#-]+

Value Length Constraints: Minimum length of 1. Maximum length of 2048.

Required: No

privateKeySource

The private key source for the JWT client assertion.

Type: PrivateKeySource object

Note: This object is a Union. Only one member of this object can be specified or returned.

Required: No

signingAlgorithm

The algorithm used to sign the JWT client assertion. Valid values are RS256, PS256, and ES256.

Type: String

Valid Values: RS256 | PS256 | ES256

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: