# ObjectStorageFederatedIdentityConfigProperty

Specifies the identity federation configuration that DataSync uses to access your object storage location using an OpenID Connect (OIDC) token.

- Source: Generated code
- Type last changed: v2.272.0 · 30 Sep 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_datasync as datasync } from 'aws-cdk-lib';
const objectStorageFederatedIdentityConfigProperty: datasync.CfnLocationObjectStorage.ObjectStorageFederatedIdentityConfigProperty = {
  awsIamRole: 'awsIamRole',
  externalIdentity: {
    googleOidc: {
      identityPoolName: 'identityPoolName',
      identityProviderName: 'identityProviderName',
      projectName: 'projectName',
      projectNumber: 'projectNumber',
    },
  },
};
```

## Properties

- `awsIamRole`: string — Specifies the ARN of the AWS Identity and Access Management (IAM) role that DataSync assumes to mint the OIDC token used to authenticate with the identity provider.

- `externalIdentity`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnLocationObjectStorage.ObjectStorageExternalIdentityConfigProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_datasync.CfnLocationObjectStorage.ObjectStorageExternalIdentityConfigProperty.html) — Specifies the external (non-AWS) identity provider that DataSync federates with to access your object storage location.