View a markdown version of this page

AWS::DevOpsAgent::Service AzureIdentityServiceDetails - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.

AWS::DevOpsAgent::Service AzureIdentityServiceDetails

Configuration details for registering an Azure identity using federated identity credentials.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "ClientId" : String,
  "TenantId" : String,
  "WebIdentityRoleArn" : String,
  "WebIdentityTokenAudiences" : [ String, ... ]
}

YAML

  ClientId: String
  TenantId: String
  WebIdentityRoleArn: String
  WebIdentityTokenAudiences: 
    - String

Properties

ClientId

The application (client) ID of the Microsoft Entra application.

Required: Yes

Type: String

Pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

Update requires: No interruption

TenantId

The Microsoft Entra ID tenant identifier.

Required: Yes

Type: String

Pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

Update requires: No interruption

WebIdentityRoleArn

The ARN of the IAM role used for web identity token exchange.

Required: Yes

Type: String

Pattern: ^arn:aws[a-zA-Z-]*:iam::[0-9]{12}:role/.+$

Update requires: No interruption

WebIdentityTokenAudiences

The list of audiences for the web identity token.

Required: Yes

Type: Array of String

Minimum: 1

Update requires: No interruption