Skip to content
v2.274.0

IdpAuthConfigurationProperty Struct Added in v2.274.0 ​

External identity provider configuration for the Operator App.

Example ​

ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_devopsagent as devopsagent } from 'aws-cdk-lib';
const idpAuthConfigurationProperty: devopsagent.CfnAgentSpace.IdpAuthConfigurationProperty = {
  clientId: 'clientId',
  clientSecret: 'clientSecret',
  issuerUrl: 'issuerUrl',
  operatorAppRoleArn: 'operatorAppRoleArn',
  provider: 'provider',

  // the properties below are optional
  createdAt: 'createdAt',
  updatedAt: 'updatedAt',
  userIdClaim: 'userIdClaim',
};

Properties ​

clientIdstringclient_idstrclientIdStringClientIdstringClientId*stringrequired#
The OIDC client identifier for the external identity provider application.
clientSecretstringclient_secretstrclientSecretStringClientSecretstringClientSecret*stringrequired#
The OIDC client secret for the external identity provider application.

Use a Secrets Manager dynamic reference to avoid storing the secret in the template.

createdAtstringcreated_atstrcreatedAtStringCreatedAtstringCreatedAt*string#
issuerUrlstringissuer_urlstrissuerUrlStringIssuerUrlstringIssuerUrl*stringrequired#
The OIDC issuer URL for the external identity provider.
operatorAppRoleArnstringoperator_app_role_arnstroperatorAppRoleArnStringOperatorAppRoleArnstringOperatorAppRoleArn*stringrequired#
The IAM role that Operator App users assume to access DevOps Agent APIs.
providerstringproviderstrproviderStringProviderstringProvider*stringrequired#
The external identity provider type.
updatedAtstringupdated_atstrupdatedAtStringUpdatedAtstringUpdatedAt*string#
userIdClaimstringuser_id_claimstruserIdClaimStringUserIdClaimstringUserIdClaim*string#
The identity claim used to identify users.

This value is selected by the service for the configured provider.