# MCPServerSigV4AuthorizationConfigProperty

SigV4 authorization configuration for MCP server.

- Source: Generated code
- Type last changed: v2.264.0 · 10 Aug 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_devopsagent as devopsagent } from 'aws-cdk-lib';
const mCPServerSigV4AuthorizationConfigProperty: devopsagent.CfnService.MCPServerSigV4AuthorizationConfigProperty = {
  region: 'region',
  service: 'service',

  // the properties below are optional
  customHeaders: {
    customHeadersKey: 'customHeaders',
  },
  mcpRoleArn: 'mcpRoleArn',
  roleArn: 'roleArn',
};
```

## Properties

- `customHeaders`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | { [key: string]: string } — Custom headers for the SigV4 MCP server.

- `mcpRoleArn`: string — IAM role ARN to assume for SigV4 signing.

  Optional - when omitted, credentials are resolved at runtime via a monitor account association.

- `region`: string (required) — AWS region for SigV4 signing.

  Use '*' for SigV4a multi-region signing.

- `roleArn`: string — Deprecated - use McpRoleArn instead.

  IAM role ARN to assume for SigV4 signing. Set to an empty string to remove a previously configured role and make the server role-less (cross-account).

- `service`: string (required) — AWS service name for SigV4 signing.