# PrivateKeyJwtConfig
<a name="API_PrivateKeyJwtConfig"></a>

The private key configuration for private\_key\_jwt client authentication.

## Contents
<a name="API_PrivateKeyJwtConfig_Contents"></a>

 ** additionalHeaderClaims **   <a name="bedrockagentcorecontrol-Type-PrivateKeyJwtConfig-additionalHeaderClaims"></a>
A map of additional claims to include in the JWT client assertion header. Standard header claims such as `alg` and `typ` cannot be added.  
Type: String to string map  
Map Entries: Maximum number of 10 items.  
Key Length Constraints: Minimum length of 1. Maximum length of 255.  
Key Pattern: `[A-Za-z0-9_.:#-]+`   
Value Length Constraints: Minimum length of 1. Maximum length of 2048.  
Required: No

 ** additionalPayloadClaims **   <a name="bedrockagentcorecontrol-Type-PrivateKeyJwtConfig-additionalPayloadClaims"></a>
A map of additional claims to include in the JWT client assertion payload. Payload claims generated by the service, such as `iss`, `sub`, `jti`, and `exp`, cannot be added.  
Type: String to string map  
Map Entries: Maximum number of 10 items.  
Key Length Constraints: Minimum length of 1. Maximum length of 255.  
Key Pattern: `[A-Za-z0-9_.:#-]+`   
Value Length Constraints: Minimum length of 1. Maximum length of 2048.  
Required: No

 ** privateKeySource **   <a name="bedrockagentcorecontrol-Type-PrivateKeyJwtConfig-privateKeySource"></a>
The private key source for the JWT client assertion.  
Type: [PrivateKeySource](API_PrivateKeySource.md) object  
 **Note: **This object is a Union. Only one member of this object can be specified or returned.  
Required: No

 ** signingAlgorithm **   <a name="bedrockagentcorecontrol-Type-PrivateKeyJwtConfig-signingAlgorithm"></a>
The algorithm used to sign the JWT client assertion. Valid values are `RS256`, `PS256`, and `ES256`.  
Type: String  
Valid Values: `RS256 | PS256 | ES256`   
Required: No

## See Also
<a name="API_PrivateKeyJwtConfig_SeeAlso"></a>

For more information about using this API in one of the language-specific AWS SDKs, see the following:
+  [AWS SDK for C\+\+](https://docs.aws.amazon.com/goto/SdkForCpp/bedrock-agentcore-control-2023-06-05/PrivateKeyJwtConfig) 
+  [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/bedrock-agentcore-control-2023-06-05/PrivateKeyJwtConfig) 
+  [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/bedrock-agentcore-control-2023-06-05/PrivateKeyJwtConfig)