# DropboxOAuth2CredentialProviderProps

Props for {@link OAuth2CredentialProvider.usingDropbox}.

Extends: DropboxOAuth2CredentialProviderProps
Extends: OAuth2CredentialProviderFactoryBaseProps

- Source: [`aws-bedrockagentcore/lib/identity/oauth2-credential-provider.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-bedrockagentcore/lib/identity/oauth2-credential-provider.ts#L374)
- Type last changed: v2.255.0 · 19 May 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as cdk from 'aws-cdk-lib';
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';

declare const secretValue: cdk.SecretValue;
const dropboxOAuth2CredentialProviderProps: bedrockagentcore.DropboxOAuth2CredentialProviderProps = {
  clientId: 'clientId',
  clientSecret: secretValue,

  // the properties below are optional
  oAuth2CredentialProviderName: 'oAuth2CredentialProviderName',
  tags: {
    tagsKey: 'tags',
  },
};
```

## Properties

- `clientId`: string (required) — OAuth2 client identifier.

- `clientSecret`: [SecretValue](/cdk/api/v2/docs/aws-cdk-lib.SecretValue.html) (required) — OAuth2 client secret.

  **NOTE:** The client secret will be included in the CloudFormation template as part of synthesis.
  The service stores the secret in Secrets Manager after creation, but the value is visible
  in the template and deployment history. Use `SecretValue.unsafePlainText()` to explicitly
  acknowledge plaintext, or pass a reference from another construct to avoid embedding the
  literal value.

- `oAuth2CredentialProviderName`: string — Name of the credential provider.

  **Default:** a name generated by CDK

- `tags`: { [key: string]: string } — Tags for this credential provider.

  **Default:** no tags