The list that you pass with this action completely replaces the existing list of thumbprints. (The lists are not merged.)
Typically, you need to update a thumbprint only when the identity provider's certificate changes, which occurs rarely. However, if the provider's certificate does change, any attempt to assume an IAM role that specifies the OIDC provider as a principal will fail until the certificate thumbprint is updated.
UpdateOpenIDConnectProviderThumbprintaction to highly-privileged users.
Version: (assembly version)
public class UpdateOpenIDConnectProviderThumbprintRequest : AmazonIdentityManagementServiceRequest IRequestEvents
The UpdateOpenIDConnectProviderThumbprintRequest type exposes the following members
Gets and sets the property OpenIDConnectProviderArn.
The Amazon Resource Name (ARN) of the IAM OpenID Connect (OIDC) provider to update the thumbprint for. You can get a list of OIDC provider ARNs by using the ListOpenIDConnectProviders action.
Gets and sets the property ThumbprintList.
A list of certificate thumbprints that are associated with the specified IAM OpenID Connect provider. For more information, see CreateOpenIDConnectProvider.
Supported in: 4.5, 4.0, 3.5
.NET for Windows Store apps:
Supported in: Windows 8.1, Windows 8
.NET for Windows Phone:
Supported in: Windows Phone 8.1