Package software.amazon.awscdk.services.bedrock.agentcore.alpha

Class RuntimeAuthorizerConfiguration

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.services.bedrock.agentcore.alpha.RuntimeAuthorizerConfiguration

All Implemented Interfaces:

software.amazon.jsii.JsiiSerializable

@Generated(value="jsii-pacmak/1.140.0 (build 79fd58c)",
           date="2026-09-30T11:05:24.396Z")
@Stability(Deprecated)
@Deprecated
public abstract class RuntimeAuthorizerConfiguration
extends software.amazon.jsii.JsiiObject

Deprecated.

Use the equivalent construct from aws-cdk-lib/aws-bedrockagentcore instead.

(deprecated) Abstract base class for runtime authorizer configurations.

Provides static factory methods to create different authentication types.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.bedrock.agentcore.alpha.*;
 import software.amazon.awscdk.services.cognito.*;
 RuntimeCustomClaim runtimeCustomClaim;
 UserPool userPool;
 UserPoolClient userPoolClient;
 RuntimeAuthorizerConfiguration runtimeAuthorizerConfiguration = RuntimeAuthorizerConfiguration.usingCognito(userPool, List.of(userPoolClient), List.of("allowedAudience"), List.of("allowedScopes"), List.of(runtimeCustomClaim));
 

Nested Class Summary

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	RuntimeAuthorizerConfiguration()	Deprecated.
protected	RuntimeAuthorizerConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)	Deprecated.
protected	RuntimeAuthorizerConfiguration(software.amazon.jsii.JsiiObjectRef objRef)	Deprecated.

Method Summary

Modifier and Type	Method	Description
static RuntimeAuthorizerConfiguration	usingCognito(IUserPool userPool, List<? extends IUserPoolClient> userPoolClients)	Deprecated.
static RuntimeAuthorizerConfiguration	usingCognito(IUserPool userPool, List<? extends IUserPoolClient> userPoolClients, List<String> allowedAudience)	Deprecated.
static RuntimeAuthorizerConfiguration	usingCognito(IUserPool userPool, List<? extends IUserPoolClient> userPoolClients, List<String> allowedAudience, List<String> allowedScopes)	Deprecated.
static RuntimeAuthorizerConfiguration	usingCognito(IUserPool userPool, List<? extends IUserPoolClient> userPoolClients, List<String> allowedAudience, List<String> allowedScopes, List<? extends RuntimeCustomClaim> customClaims)	Deprecated.
static RuntimeAuthorizerConfiguration	usingIAM()	Deprecated.
static RuntimeAuthorizerConfiguration	usingJWT(String discoveryUrl)	Deprecated.
static RuntimeAuthorizerConfiguration	usingJWT(String discoveryUrl, List<String> allowedClients)	Deprecated.
static RuntimeAuthorizerConfiguration	usingJWT(String discoveryUrl, List<String> allowedClients, List<String> allowedAudience)	Deprecated.
static RuntimeAuthorizerConfiguration	usingJWT(String discoveryUrl, List<String> allowedClients, List<String> allowedAudience, List<String> allowedScopes)	Deprecated.
static RuntimeAuthorizerConfiguration	usingJWT(String discoveryUrl, List<String> allowedClients, List<String> allowedAudience, List<String> allowedScopes, List<? extends RuntimeCustomClaim> customClaims)	Deprecated.
static RuntimeAuthorizerConfiguration	usingOAuth(String discoveryUrl, String clientId)	Deprecated.
static RuntimeAuthorizerConfiguration	usingOAuth(String discoveryUrl, String clientId, List<String> allowedAudience)	Deprecated.
static RuntimeAuthorizerConfiguration	usingOAuth(String discoveryUrl, String clientId, List<String> allowedAudience, List<String> allowedScopes)	Deprecated.
static RuntimeAuthorizerConfiguration	usingOAuth(String discoveryUrl, String clientId, List<String> allowedAudience, List<String> allowedScopes, List<? extends RuntimeCustomClaim> customClaims)	Deprecated.

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Constructor Details

RuntimeAuthorizerConfiguration

protected RuntimeAuthorizerConfiguration(software.amazon.jsii.JsiiObjectRef objRef)

Deprecated.

RuntimeAuthorizerConfiguration

protected RuntimeAuthorizerConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

Deprecated.

RuntimeAuthorizerConfiguration

@Stability(Experimental)
protected RuntimeAuthorizerConfiguration()

Deprecated.

Method Details

usingCognito

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingCognito(@NotNull
 IUserPool userPool,
 @NotNull
 List<? extends IUserPoolClient> userPoolClients,
 @Nullable
 List<String> allowedAudience,
 @Nullable
 List<String> allowedScopes,
 @Nullable
 List<? extends RuntimeCustomClaim> customClaims)

Deprecated.

(deprecated) Use AWS Cognito User Pool authentication.

Validates Cognito-issued JWT tokens.

Parameters:

userPool - The Cognito User Pool. This parameter is required.

userPoolClients - The Cognito User Pool App Clients. This parameter is required.

allowedAudience - Optional array of allowed audiences.

allowedScopes - Optional array of allowed scopes.

customClaims - Optional array of custom claim validations.

Returns:

RuntimeAuthorizerConfiguration for Cognito authentication

usingCognito

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingCognito(@NotNull
 IUserPool userPool,
 @NotNull
 List<? extends IUserPoolClient> userPoolClients,
 @Nullable
 List<String> allowedAudience,
 @Nullable
 List<String> allowedScopes)

Deprecated.

(deprecated) Use AWS Cognito User Pool authentication.

Validates Cognito-issued JWT tokens.

Parameters:

userPool - The Cognito User Pool. This parameter is required.

userPoolClients - The Cognito User Pool App Clients. This parameter is required.

allowedAudience - Optional array of allowed audiences.

allowedScopes - Optional array of allowed scopes.

Returns:

RuntimeAuthorizerConfiguration for Cognito authentication

usingCognito

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingCognito(@NotNull
 IUserPool userPool,
 @NotNull
 List<? extends IUserPoolClient> userPoolClients,
 @Nullable
 List<String> allowedAudience)

Deprecated.

(deprecated) Use AWS Cognito User Pool authentication.

Validates Cognito-issued JWT tokens.

Parameters:

userPool - The Cognito User Pool. This parameter is required.

userPoolClients - The Cognito User Pool App Clients. This parameter is required.

allowedAudience - Optional array of allowed audiences.

Returns:

RuntimeAuthorizerConfiguration for Cognito authentication

usingCognito

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingCognito(@NotNull
 IUserPool userPool,
 @NotNull
 List<? extends IUserPoolClient> userPoolClients)

Deprecated.

(deprecated) Use AWS Cognito User Pool authentication.

Validates Cognito-issued JWT tokens.

Parameters:

userPool - The Cognito User Pool. This parameter is required.

userPoolClients - The Cognito User Pool App Clients. This parameter is required.

Returns:

RuntimeAuthorizerConfiguration for Cognito authentication

usingIAM

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingIAM()

Deprecated.

(deprecated) Use IAM authentication (default).

Requires AWS credentials to sign requests using SigV4.

Returns:

RuntimeAuthorizerConfiguration for IAM authentication

usingJWT

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingJWT(@NotNull
 String discoveryUrl,
 @Nullable
 List<String> allowedClients,
 @Nullable
 List<String> allowedAudience,
 @Nullable
 List<String> allowedScopes,
 @Nullable
 List<? extends RuntimeCustomClaim> customClaims)

Deprecated.

(deprecated) Use custom JWT authentication.

Validates JWT tokens against the specified OIDC provider.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

allowedClients - Optional array of allowed client IDs.

allowedAudience - Optional array of allowed audiences.

allowedScopes - Optional array of allowed scopes.

customClaims - Optional array of custom claim validations.

Returns:

RuntimeAuthorizerConfiguration for JWT authentication

usingJWT

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingJWT(@NotNull
 String discoveryUrl,
 @Nullable
 List<String> allowedClients,
 @Nullable
 List<String> allowedAudience,
 @Nullable
 List<String> allowedScopes)

Deprecated.

(deprecated) Use custom JWT authentication.

Validates JWT tokens against the specified OIDC provider.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

allowedClients - Optional array of allowed client IDs.

allowedAudience - Optional array of allowed audiences.

allowedScopes - Optional array of allowed scopes.

Returns:

RuntimeAuthorizerConfiguration for JWT authentication

usingJWT

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingJWT(@NotNull
 String discoveryUrl,
 @Nullable
 List<String> allowedClients,
 @Nullable
 List<String> allowedAudience)

Deprecated.

(deprecated) Use custom JWT authentication.

Validates JWT tokens against the specified OIDC provider.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

allowedClients - Optional array of allowed client IDs.

allowedAudience - Optional array of allowed audiences.

Returns:

RuntimeAuthorizerConfiguration for JWT authentication

usingJWT

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingJWT(@NotNull
 String discoveryUrl,
 @Nullable
 List<String> allowedClients)

Deprecated.

(deprecated) Use custom JWT authentication.

Validates JWT tokens against the specified OIDC provider.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

allowedClients - Optional array of allowed client IDs.

Returns:

RuntimeAuthorizerConfiguration for JWT authentication

usingJWT

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingJWT(@NotNull
 String discoveryUrl)

Deprecated.

(deprecated) Use custom JWT authentication.

Validates JWT tokens against the specified OIDC provider.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

Returns:

RuntimeAuthorizerConfiguration for JWT authentication

usingOAuth

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingOAuth(@NotNull
 String discoveryUrl,
 @NotNull
 String clientId,
 @Nullable
 List<String> allowedAudience,
 @Nullable
 List<String> allowedScopes,
 @Nullable
 List<? extends RuntimeCustomClaim> customClaims)

Deprecated.

(deprecated) Use OAuth 2.0 authentication. Supports various OAuth providers.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

clientId - OAuth client ID. This parameter is required.

allowedAudience - Optional array of allowed audiences.

allowedScopes - Optional array of allowed scopes.

customClaims - Optional array of custom claim validations.

Returns:

RuntimeAuthorizerConfiguration for OAuth authentication

usingOAuth

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingOAuth(@NotNull
 String discoveryUrl,
 @NotNull
 String clientId,
 @Nullable
 List<String> allowedAudience,
 @Nullable
 List<String> allowedScopes)

Deprecated.

(deprecated) Use OAuth 2.0 authentication. Supports various OAuth providers.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

clientId - OAuth client ID. This parameter is required.

allowedAudience - Optional array of allowed audiences.

allowedScopes - Optional array of allowed scopes.

Returns:

RuntimeAuthorizerConfiguration for OAuth authentication

usingOAuth

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingOAuth(@NotNull
 String discoveryUrl,
 @NotNull
 String clientId,
 @Nullable
 List<String> allowedAudience)

Deprecated.

(deprecated) Use OAuth 2.0 authentication. Supports various OAuth providers.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

clientId - OAuth client ID. This parameter is required.

allowedAudience - Optional array of allowed audiences.

Returns:

RuntimeAuthorizerConfiguration for OAuth authentication

usingOAuth

@Stability(Deprecated)
@Deprecated
@NotNull
public static RuntimeAuthorizerConfiguration usingOAuth(@NotNull
 String discoveryUrl,
 @NotNull
 String clientId)

Deprecated.

(deprecated) Use OAuth 2.0 authentication. Supports various OAuth providers.

Parameters:

discoveryUrl - The OIDC discovery URL (must end with /.well-known/openid-configuration). This parameter is required.

clientId - OAuth client ID. This parameter is required.

Returns:

RuntimeAuthorizerConfiguration for OAuth authentication