# CustomJwtAuthorizer

Custom JWT authorizer configuration implementation.

Extends: CustomJwtAuthorizer
Implements: IGatewayAuthorizerConfig

- Source: [`aws-bedrockagentcore/lib/gateway/inbound-auth/authorizer.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-bedrockagentcore/lib/gateway/inbound-auth/authorizer.ts#L83)
- Type last changed: v2.255.0 · 19 May 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';

declare const gatewayCustomClaim: bedrockagentcore.GatewayCustomClaim;
const customJwtAuthorizer = new bedrockagentcore.CustomJwtAuthorizer({
  discoveryUrl: 'discoveryUrl',

  // the properties below are optional
  allowedAudience: ['allowedAudience'],
  allowedClients: ['allowedClients'],
  allowedScopes: ['allowedScopes'],
  customClaims: [gatewayCustomClaim],
});
```

## Initializer

```ts
new CustomJwtAuthorizer(config: CustomJwtConfiguration)
```

## Properties

- `authorizerType`: [GatewayAuthorizerType](/cdk/api/v2/docs/aws-cdk-lib.aws_bedrockagentcore.GatewayAuthorizerType.html) (required) — The authorizer type.