# AWS::VerifiedPermissions Construct Library --- ![cfn-resources: Stable](https://img.shields.io/badge/cfn--resources-stable-success.svg?style=for-the-badge) > All classes with the `Cfn` prefix in this module ([CFN Resources]) are always stable and safe to use. > > [CFN Resources]: https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib --- This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project. ```ts import * as verifiedpermissions from 'aws-cdk-lib/aws-verifiedpermissions'; ``` There are no official hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet. Here are some suggestions on how to proceed: - Search [Construct Hub for VerifiedPermissions construct libraries](https://constructs.dev/search?q=verifiedpermissions) - Use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, in the same way you would use [the CloudFormation AWS::VerifiedPermissions resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_VerifiedPermissions.html) directly. There are no hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet. However, you can still use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, and use this service exactly as you would using CloudFormation directly. For more information on the resources and properties available for this service, see the [CloudFormation documentation for AWS::VerifiedPermissions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_VerifiedPermissions.html). (Read the [CDK Contributing Guide](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and submit an RFC if you are interested in contributing to this construct library.) ## Types | Name | Kind | Summary | | --- | --- | --- | | [`CfnIdentitySource`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource) | Construct (L1) | Creates or updates a reference to Amazon Cognito as an external identity provider. | | [`CfnPolicy`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicy) | Construct (L1) | Creates or updates a Cedar policy and saves it in the specified policy store. | | [`CfnPolicyStore`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStore) | Construct (L1) | Creates a policy store. | | [`CfnPolicyStoreAlias`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStoreAlias) | Construct (L1) | Definition of AWS::VerifiedPermissions::PolicyStoreAlias Resource Type. | | [`CfnPolicyTemplate`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyTemplate) | Construct (L1) | Creates a policy template. | | [`CfnIdentitySource.CognitoGroupConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.CognitoGroupConfigurationProperty) | Struct | The type of entity that a policy store maps to groups from an Amazon Cognito user pool identity source. | | [`CfnIdentitySource.CognitoUserPoolConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.CognitoUserPoolConfigurationProperty) | Struct | A structure that contains configuration information used when creating or updating an identity source that represents a connection to an Amazon Cognito user pool used as an identity provider for Verified Permissions . | | [`CfnIdentitySource.IdentitySourceConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.IdentitySourceConfigurationProperty) | Struct | A structure that contains configuration information used when creating or updating a new identity source. | | [`CfnIdentitySource.IdentitySourceDetailsProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.IdentitySourceDetailsProperty) | Struct | | | [`CfnIdentitySource.OpenIdConnectAccessTokenConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.OpenIdConnectAccessTokenConfigurationProperty) | Struct | The configuration of an OpenID Connect (OIDC) identity source for handling access token claims. | | [`CfnIdentitySource.OpenIdConnectConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.OpenIdConnectConfigurationProperty) | Struct | Contains configuration details of an OpenID Connect (OIDC) identity provider, or identity source, that Verified Permissions can use to generate entities from authenticated identities. | | [`CfnIdentitySource.OpenIdConnectGroupConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.OpenIdConnectGroupConfigurationProperty) | Struct | The claim in OIDC identity provider tokens that indicates a user's group membership, and the entity type that you want to map it to. | | [`CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty) | Struct | The configuration of an OpenID Connect (OIDC) identity source for handling identity (ID) token claims. | | [`CfnIdentitySource.OpenIdConnectTokenSelectionProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySource.OpenIdConnectTokenSelectionProperty) | Struct | The token type that you want to process from your OIDC identity provider. | | [`CfnIdentitySourceProps`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnIdentitySourceProps) | Struct | Properties for defining a `CfnIdentitySource`. | | [`CfnPolicy.EntityIdentifierProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicy.EntityIdentifierProperty) | Struct | Contains the identifier of an entity in a policy, including its ID and type. | | [`CfnPolicy.PolicyDefinitionProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicy.PolicyDefinitionProperty) | Struct | A structure that defines a Cedar policy. | | [`CfnPolicy.StaticPolicyDefinitionProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicy.StaticPolicyDefinitionProperty) | Struct | A structure that defines a static policy. | | [`CfnPolicy.TemplateLinkedPolicyDefinitionProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicy.TemplateLinkedPolicyDefinitionProperty) | Struct | A structure that describes a policy created by instantiating a policy template. | | [`CfnPolicyProps`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyProps) | Struct | Properties for defining a `CfnPolicy`. | | [`CfnPolicyStore.DeletionProtectionProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStore.DeletionProtectionProperty) | Struct | Specifies whether the policy store can be deleted. | | [`CfnPolicyStore.EncryptionSettingsProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStore.EncryptionSettingsProperty) | Struct | | | [`CfnPolicyStore.EncryptionStateProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStore.EncryptionStateProperty) | Struct | | | [`CfnPolicyStore.KmsEncryptionSettingsProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStore.KmsEncryptionSettingsProperty) | Struct | | | [`CfnPolicyStore.KmsEncryptionStateProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStore.KmsEncryptionStateProperty) | Struct | | | [`CfnPolicyStore.SchemaDefinitionProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStore.SchemaDefinitionProperty) | Struct | Contains a list of principal types, resource types, and actions that can be specified in policies stored in the same policy store. | | [`CfnPolicyStore.ValidationSettingsProperty`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStore.ValidationSettingsProperty) | Struct | A structure that contains Cedar policy validation settings for the policy store. | | [`CfnPolicyStoreAliasProps`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStoreAliasProps) | Struct | Properties for defining a `CfnPolicyStoreAlias`. | | [`CfnPolicyStoreProps`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyStoreProps) | Struct | Properties for defining a `CfnPolicyStore`. | | [`CfnPolicyTemplateProps`](/v2/docs/aws-cdk-lib.aws_verifiedpermissions.CfnPolicyTemplateProps) | Struct | Properties for defining a `CfnPolicyTemplate`. |