# OAuth2CredentialProviderAttributes

Attributes for importing an existing OAuth2 credential provider.

- Source: [`aws-bedrockagentcore/lib/identity/oauth2-credential-provider.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-bedrockagentcore/lib/identity/oauth2-credential-provider.ts#L508)
- Type last changed: v2.255.0 · 19 May 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';
const oAuth2CredentialProviderAttributes: bedrockagentcore.OAuth2CredentialProviderAttributes = {
  credentialProviderArn: 'credentialProviderArn',
  credentialProviderVendor: 'credentialProviderVendor',

  // the properties below are optional
  callbackUrl: 'callbackUrl',
  clientSecretArn: 'clientSecretArn',
  createdTime: 'createdTime',
  lastUpdatedTime: 'lastUpdatedTime',
};
```

## Properties

- `callbackUrl`: string — Callback URL from the deployed provider, if known.

  **Default:** not set

- `clientSecretArn`: string — ARN of the Secrets Manager secret for OAuth2 client credentials, if known.

  **Default:** not set; required for {@link OAuth2CredentialProvider.bindForGatewayOAuthTarget } on imported providers

- `createdTime`: string — Resource creation time.

  **Default:** not set

- `credentialProviderArn`: string (required) — ARN of the credential provider.

- `credentialProviderVendor`: string (required) — Vendor string for this provider.

- `lastUpdatedTime`: string — Resource last-updated time.

  **Default:** not set