Package software.amazon.awscdk.services.verifiedpermissions

Interface CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty.Jsii$Proxy

Enclosing class:

CfnIdentitySource

@Stability(Stable)
public static interface CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty
extends software.amazon.jsii.JsiiSerializable

The configuration of an OpenID Connect (OIDC) identity source for handling identity (ID) token claims.

Contains the claim that you want to identify as the principal in an authorization request, and the values of the aud claim, or audiences, that you want to accept.

This data type is part of a OpenIdConnectTokenSelection structure, which is a parameter of CreateIdentitySource .

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.verifiedpermissions.*;
 OpenIdConnectIdentityTokenConfigurationProperty openIdConnectIdentityTokenConfigurationProperty = OpenIdConnectIdentityTokenConfigurationProperty.builder()
         .clientIds(List.of("clientIds"))
         .principalIdClaim("principalIdClaim")
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty.Builder	A builder for CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty
static final class	CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty.Jsii$Proxy	An implementation for CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty

Method Summary

Modifier and Type	Method	Description
static CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty.Builder	builder()
default List<String>	getClientIds()	The ID token audience, or client ID, claim values that you want to accept in your policy store from an OIDC identity provider.
default String	getPrincipalIdClaim()	The claim that determines the principal in OIDC access tokens.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getClientIds

@Stability(Stable)
@Nullable
default List<String> getClientIds()

The ID token audience, or client ID, claim values that you want to accept in your policy store from an OIDC identity provider.

For example, 1example23456789, 2example10111213 .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration-clientids

getPrincipalIdClaim

@Stability(Stable)
@Nullable
default String getPrincipalIdClaim()

The claim that determines the principal in OIDC access tokens.

For example, sub .

Default: - "sub"

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectidentitytokenconfiguration-principalidclaim

builder

@Stability(Stable)
static CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty.Builder builder()

Returns:

a CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty.Builder of CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty