AWS::RolesAnywhere::Profile AttributeMapping - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::RolesAnywhere::Profile AttributeMapping

A mapping applied to the authenticating end-entity certificate.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "CertificateField" : String,
  "MappingRules" : [ MappingRule, ... ]
}

Properties

CertificateField

Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.

Required: Yes

Type: String

Allowed values: x509Subject | x509Issuer | x509SAN

Update requires: No interruption

MappingRules

A list of mapping entries for every supported specifier or sub-field.

Required: Yes

Type: Array of MappingRule

Update requires: No interruption