# PrivateKeyJwtConfigProperty

Configuration for private_key_jwt client authentication (RFC 7523).

- Source: Generated code
- Type last changed: v2.268.0 · 2 Sep 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';
const privateKeyJwtConfigProperty: bedrockagentcore.CfnOAuth2CredentialProvider.PrivateKeyJwtConfigProperty = {
  additionalHeaderClaims: {
    additionalHeaderClaimsKey: 'additionalHeaderClaims',
  },
  additionalPayloadClaims: {
    additionalPayloadClaimsKey: 'additionalPayloadClaims',
  },
  privateKeySource: {
    kmsKeySource: {
      kmsKeyArn: 'kmsKeyArn',
    },
  },
  signingAlgorithm: 'signingAlgorithm',
};
```

## Properties

- `additionalHeaderClaims`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | { [key: string]: string } — A map of additional claims to include in the JWT client assertion.

- `additionalPayloadClaims`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | { [key: string]: string } — A map of additional claims to include in the JWT client assertion.

- `privateKeySource`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnOAuth2CredentialProvider.PrivateKeySourceProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_bedrockagentcore.CfnOAuth2CredentialProvider.PrivateKeySourceProperty.html) — Contains the private key source configuration for a JWT client assertion.

- `signingAlgorithm`: string — The algorithm used to sign the JWT client assertion.