AWS::OpenSearchServerless::SecurityConfig IamFederationConfigOptions - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.

AWS::OpenSearchServerless::SecurityConfig IamFederationConfigOptions

Describes IAM federation options for an OpenSearch Serverless security configuration in the form of a key-value map. These options define how OpenSearch Serverless integrates with external identity providers using federation.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{ "GroupAttribute" : String, "UserAttribute" : String }

YAML

GroupAttribute: String UserAttribute: String

Properties

GroupAttribute

The group attribute for this IAM federation integration. This attribute is used to map identity provider groups to OpenSearch Serverless permissions.

Required: No

Type: String

Pattern: [A-Za-z][A-Za-z0-9_.:/=+\-@]*

Minimum: 1

Maximum: 64

Update requires: No interruption

UserAttribute

The user attribute for this IAM federation integration. This attribute is used to identify users in the federated authentication process.

Required: No

Type: String

Pattern: [A-Za-z][A-Za-z0-9_.:/=+\-@]*

Minimum: 1

Maximum: 64

Update requires: No interruption