AWS::RolesAnywhere::Profile AttributeMapping

A mapping applied to the authenticating end-entity certificate.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "CertificateField" : String,
  "MappingRules" : [ MappingRule, ... ]
}

YAML

  CertificateField: String
  MappingRules: 
    - MappingRule

Properties

CertificateField

Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.

Required: Yes

Type: String

Allowed values: x509Subject | x509Issuer | x509SAN

Update requires: No interruption

MappingRules

A list of mapping entries for every supported specifier or sub-field.

Required: Yes

Type: Array of MappingRule

Update requires: No interruption