aws-cdk-lib.aws_bedrockagentcore.CfnRuntime.AllowedWorkloadConfigurationProperty

AllowedWorkloadConfigurationProperty Struct

Allow-list of upstream workloads permitted to reach this resource via the workload identity chain.

When set, the data plane enforces that the introspected workload chain's caller matches one of the configured hosting environments or workload identities; absent means no chain enforcement.

Source

Generated code

Type last changed

v2.264.0 · 10 Aug 2026

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';
const allowedWorkloadConfigurationProperty: bedrockagentcore.CfnRuntime.AllowedWorkloadConfigurationProperty = {
  hostingEnvironments: [{
    arn: 'arn',
  }],
  workloadIdentities: ['workloadIdentities'],
};

Properties

hostingEnvironments?optionalIResolvable | IResolvable | CfnRuntime.HostingEnvironmentProperty[]hosting_environments?optionaltyping.Union[IResolvable, typing.List[typing.Union[IResolvable, HostingEnvironmentProperty]]]hostingEnvironments?optionalIResolvableHostingEnvironments?optionalIResolvableHostingEnvironments?optionalinterface{}#

List of allow-listed hosting environments.

workloadIdentities?optionalstring[]workload_identities?optionaltyping.List[str]workloadIdentities?optionalList<String>WorkloadIdentities?optionalstring[]WorkloadIdentities?optional*[]*string#

List of allow-listed workload identity names.