View a markdown version of this page

PrivateKeyJwtConfig - Amazon Bedrock AgentCore Control Plane
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

PrivateKeyJwtConfig

The private key configuration for private_key_jwt client authentication.

Contents

additionalHeaderClaims

A map of additional claims to include in the JWT client assertion header. Standard header claims such as alg and typ cannot be added.

Type: String to string map

Map Entries: Maximum number of 10 items.

Key Length Constraints: Minimum length of 1. Maximum length of 255.

Key Pattern: [A-Za-z0-9_.:#-]+

Value Length Constraints: Minimum length of 1. Maximum length of 2048.

Required: No

additionalPayloadClaims

A map of additional claims to include in the JWT client assertion payload. Payload claims generated by the service, such as iss, sub, jti, and exp, cannot be added.

Type: String to string map

Map Entries: Maximum number of 10 items.

Key Length Constraints: Minimum length of 1. Maximum length of 255.

Key Pattern: [A-Za-z0-9_.:#-]+

Value Length Constraints: Minimum length of 1. Maximum length of 2048.

Required: No

privateKeySource

The private key source for the JWT client assertion.

Type: PrivateKeySource object

Note: This object is a Union. Only one member of this object can be specified or returned.

Required: No

signingAlgorithm

The algorithm used to sign the JWT client assertion. Valid values are RS256, PS256, and ES256.

Type: String

Valid Values: RS256 | PS256 | ES256

Required: No

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: