This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.
AWS::AgentRegistry::Registry CustomJWTAuthorizerConfiguration
Configuration for a custom JSON Web Token (JWT) authorizer that validates inbound bearer tokens against an OpenID Connect (OIDC) identity provider.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "AllowedAudience" :[ String, ... ], "AllowedClients" :[ String, ... ], "AllowedScopes" :[ String, ... ], "CustomClaims" :[ CustomClaimValidationType, ... ], "DiscoveryUrl" :String}
YAML
AllowedAudience:- StringAllowedClients:- StringAllowedScopes:- StringCustomClaims:- CustomClaimValidationTypeDiscoveryUrl:String
Properties
-
The audience values accepted during JWT validation.
Required: No
Type: Array of String
Maximum:
255Minimum:
1 | 1Update requires: No interruption
-
The client identifiers accepted during JWT validation.
Required: No
Type: Array of String
Maximum:
255Minimum:
1 | 1Update requires: No interruption
-
The scopes accepted during JWT validation.
Required: No
Type: Array of String
Maximum:
255Minimum:
1 | 1Update requires: No interruption
-
Additional custom claim validations applied to the inbound JWT.
Required: No
Type: Array of CustomClaimValidationType
Minimum:
1Update requires: No interruption
-
The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
Required: Yes
Type: String
Pattern:
^.+/\.well-known/openid-configuration$Minimum:
1Maximum:
2048Update requires: No interruption