aws-cdk-lib.aws_bedrockagentcore.OAuth2ClientCredentials

OAuth2ClientCredentials Struct

OAuth2 client identifier and secret registered with the identity provider (all vendors).

Source

aws-bedrockagentcore/lib/identity/oauth2-credential-provider.ts

Type last changed

v2.255.0 · 19 May 2026

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as cdk from 'aws-cdk-lib';
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';

declare const secretValue: cdk.SecretValue;
const oAuth2ClientCredentials: bedrockagentcore.OAuth2ClientCredentials = {
  clientId: 'clientId',
  clientSecret: secretValue,
};

Properties

clientIdstringclient_idstrclientIdStringClientIdstringClientId*stringrequired#

OAuth2 client identifier.

clientSecretSecretValueclient_secretSecretValueclientSecretSecretValueClientSecretSecretValueClientSecretSecretValuerequired#

OAuth2 client secret.

notes

NOTE: The client secret will be included in the CloudFormation template as part of synthesis. The service stores the secret in Secrets Manager after creation, but the value is visible in the template and deployment history. Use SecretValue.unsafePlainText() to explicitly acknowledge plaintext, or pass a reference from another construct to avoid embedding the literal value.