AWS::AppRunner::Service AuthenticationConfiguration - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.

AWS::AppRunner::Service AuthenticationConfiguration

Describes resources needed to authenticate access to some source repositories. The specific resource depends on the repository provider.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "AccessRoleArn" : String, "ConnectionArn" : String }


AccessRoleArn: String ConnectionArn: String



The Amazon Resource Name (ARN) of the IAM role that grants the App Runner service access to a source repository. It's required for ECR image repositories (but not for ECR Public repositories).

Required: No

Type: String

Minimum: 29

Maximum: 1024

Pattern: arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):iam::[0-9]{12}:(role|role\/service-role)\/[\w+=,.@\-/]{1,1000}

Update requires: No interruption


The Amazon Resource Name (ARN) of the App Runner connection that enables the App Runner service to connect to a source repository. It's required for GitHub code repositories.

Required: No

Type: String

Minimum: 1

Maximum: 1011

Pattern: arn:aws(-[\w]+)*:[a-z0-9-\\.]{0,63}:[a-z0-9-\\.]{0,63}:[0-9]{12}:(\w|\/|-){1,1011}

Update requires: No interruption