This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.
AWS::BedrockAgentCore::Runtime CustomJWTAuthorizerConfiguration
Configuration for inbound JWT-based authorization, specifying how incoming requests should be authenticated.
Syntax
To declare this entity in your CloudFormation template, use the following syntax:
JSON
{ "AllowedAudience" :[ String, ... ], "AllowedClients" :[ String, ... ], "AllowedScopes" :[ String, ... ], "AllowedWorkloadConfiguration" :AllowedWorkloadConfiguration, "CustomClaims" :[ CustomClaimValidationType, ... ], "DiscoveryUrl" :String, "PrivateEndpoint" :PrivateEndpoint, "PrivateEndpointOverrides" :[ PrivateEndpointOverride, ... ]}
YAML
AllowedAudience:- StringAllowedClients:- StringAllowedScopes:- StringAllowedWorkloadConfiguration:AllowedWorkloadConfigurationCustomClaims:- CustomClaimValidationTypeDiscoveryUrl:StringPrivateEndpoint:PrivateEndpointPrivateEndpointOverrides:- PrivateEndpointOverride
Properties
-
Represents individual audience values that are validated in the incoming JWT token validation process.
Required: No
Type: Array of String
Minimum:
1Update requires: No interruption
-
Represents individual client IDs that are validated in the incoming JWT token validation process.
Required: No
Type: Array of String
Minimum:
1Update requires: No interruption
-
An array of scopes that are allowed to access the token.
Required: No
Type: Array of String
Minimum:
1Update requires: No interruption
-
The configuration that restricts which workloads in the request's identity chain are allowed to invoke the target, identified by their hosting environments and workload identities. At launch, this is supported only for AgentCore Runtime targets, and the allowed workloads are AgentCore Gateways.
Required: No
Type: AllowedWorkloadConfiguration
Update requires: No interruption
-
An array of objects that define a custom claim validation name, value, and operation
Required: No
Type: Array of CustomClaimValidationType
Minimum:
1Update requires: No interruption
-
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
Required: Yes
Type: String
Pattern:
^.+/\.well-known/openid-configuration$Update requires: No interruption
Property description not available.
Required: No
Type: PrivateEndpoint
Update requires: No interruption
-
The private endpoint overrides for the custom JWT authorizer configuration.
Required: No
Type: Array of PrivateEndpointOverride
Minimum:
0Maximum:
5Update requires: No interruption
