CfnIdentitySourceProps
- class aws_cdk.aws_verifiedpermissions.CfnIdentitySourceProps(*, configuration, policy_store_id, principal_entity_type=None)
Bases:
object
Properties for defining a
CfnIdentitySource
.- Parameters:
configuration (
Union
[IResolvable
,IdentitySourceConfigurationProperty
,Dict
[str
,Any
]]) – Contains configuration information used when creating a new identity source.policy_store_id (
str
) – Specifies the ID of the policy store in which you want to store this identity source. Only policies and requests made using this policy store can reference identities from the identity provider configured in the new identity source.principal_entity_type (
Optional
[str
]) – Specifies the namespace and data type of the principals generated for identities authenticated by the new identity source.
- See:
- ExampleMetadata:
fixture=_generated
Example:
# The code below shows an example of how to instantiate this type. # The values are placeholders you should change. from aws_cdk import aws_verifiedpermissions as verifiedpermissions cfn_identity_source_props = verifiedpermissions.CfnIdentitySourceProps( configuration=verifiedpermissions.CfnIdentitySource.IdentitySourceConfigurationProperty( cognito_user_pool_configuration=verifiedpermissions.CfnIdentitySource.CognitoUserPoolConfigurationProperty( user_pool_arn="userPoolArn", # the properties below are optional client_ids=["clientIds"], group_configuration=verifiedpermissions.CfnIdentitySource.CognitoGroupConfigurationProperty( group_entity_type="groupEntityType" ) ), open_id_connect_configuration=verifiedpermissions.CfnIdentitySource.OpenIdConnectConfigurationProperty( issuer="issuer", token_selection=verifiedpermissions.CfnIdentitySource.OpenIdConnectTokenSelectionProperty( access_token_only=verifiedpermissions.CfnIdentitySource.OpenIdConnectAccessTokenConfigurationProperty( audiences=["audiences"], principal_id_claim="principalIdClaim" ), identity_token_only=verifiedpermissions.CfnIdentitySource.OpenIdConnectIdentityTokenConfigurationProperty( client_ids=["clientIds"], principal_id_claim="principalIdClaim" ) ), # the properties below are optional entity_id_prefix="entityIdPrefix", group_configuration=verifiedpermissions.CfnIdentitySource.OpenIdConnectGroupConfigurationProperty( group_claim="groupClaim", group_entity_type="groupEntityType" ) ) ), policy_store_id="policyStoreId", # the properties below are optional principal_entity_type="principalEntityType" )
Attributes
- configuration
Contains configuration information used when creating a new identity source.
- policy_store_id
Specifies the ID of the policy store in which you want to store this identity source.
Only policies and requests made using this policy store can reference identities from the identity provider configured in the new identity source.
- principal_entity_type
Specifies the namespace and data type of the principals generated for identities authenticated by the new identity source.