Class: Aws::AgentRegistryControl::Types::CustomJWTAuthorizerConfiguration

Inherits:
Struct
  • Object
show all
Includes:
Structure
Defined in:
lib/aws-sdk-agentregistrycontrol/types.rb

Overview

Configuration for a custom JWT authorizer that validates inbound bearer tokens against an OpenID Connect identity provider.

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#allowed_audience ⇒ Array<String>

The audience values accepted during JWT validation. A token is rejected if none of its audience claims match.

Returns:

  • (Array<String>) 


439
440
441
442
443
444
445
446
447
448
449
 
# File 'lib/aws-sdk-agentregistrycontrol/types.rb', line 439

class CustomJWTAuthorizerConfiguration < Struct.new(
  :discovery_url,
  :allowed_audience,
  :allowed_clients,
  :allowed_scopes,
  :custom_claims,
  :private_endpoint,
  :private_endpoint_overrides)
  SENSITIVE = []
  include Aws::Structure
end

#allowed_clients ⇒ Array<String>

The client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.

Returns:

  • (Array<String>) 


439
440
441
442
443
444
445
446
447
448
449
 
# File 'lib/aws-sdk-agentregistrycontrol/types.rb', line 439

class CustomJWTAuthorizerConfiguration < Struct.new(
  :discovery_url,
  :allowed_audience,
  :allowed_clients,
  :allowed_scopes,
  :custom_claims,
  :private_endpoint,
  :private_endpoint_overrides)
  SENSITIVE = []
  include Aws::Structure
end

#allowed_scopes ⇒ Array<String>

The scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.

Returns:

  • (Array<String>) 


439
440
441
442
443
444
445
446
447
448
449
 
# File 'lib/aws-sdk-agentregistrycontrol/types.rb', line 439

class CustomJWTAuthorizerConfiguration < Struct.new(
  :discovery_url,
  :allowed_audience,
  :allowed_clients,
  :allowed_scopes,
  :custom_claims,
  :private_endpoint,
  :private_endpoint_overrides)
  SENSITIVE = []
  include Aws::Structure
end

#custom_claims ⇒ Array<Types::CustomClaimValidationType>

Additional custom claim validations applied to the inbound JWT.

Returns:



439
440
441
442
443
444
445
446
447
448
449
 
# File 'lib/aws-sdk-agentregistrycontrol/types.rb', line 439

class CustomJWTAuthorizerConfiguration < Struct.new(
  :discovery_url,
  :allowed_audience,
  :allowed_clients,
  :allowed_scopes,
  :custom_claims,
  :private_endpoint,
  :private_endpoint_overrides)
  SENSITIVE = []
  include Aws::Structure
end

#discovery_url ⇒ String

The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.

Returns:

  • (String) 


439
440
441
442
443
444
445
446
447
448
449
 
# File 'lib/aws-sdk-agentregistrycontrol/types.rb', line 439

class CustomJWTAuthorizerConfiguration < Struct.new(
  :discovery_url,
  :allowed_audience,
  :allowed_clients,
  :allowed_scopes,
  :custom_claims,
  :private_endpoint,
  :private_endpoint_overrides)
  SENSITIVE = []
  include Aws::Structure
end

#private_endpoint ⇒ Types::PrivateEndpoint

The private endpoint used to reach the identity provider's discovery URL over a private network path.

Returns:



439
440
441
442
443
444
445
446
447
448
449
 
# File 'lib/aws-sdk-agentregistrycontrol/types.rb', line 439

class CustomJWTAuthorizerConfiguration < Struct.new(
  :discovery_url,
  :allowed_audience,
  :allowed_clients,
  :allowed_scopes,
  :custom_claims,
  :private_endpoint,
  :private_endpoint_overrides)
  SENSITIVE = []
  include Aws::Structure
end

#private_endpoint_overrides ⇒ Array<Types::PrivateEndpointOverride>

Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints.

Returns:



439
440
441
442
443
444
445
446
447
448
449
 
# File 'lib/aws-sdk-agentregistrycontrol/types.rb', line 439

class CustomJWTAuthorizerConfiguration < Struct.new(
  :discovery_url,
  :allowed_audience,
  :allowed_clients,
  :allowed_scopes,
  :custom_claims,
  :private_endpoint,
  :private_endpoint_overrides)
  SENSITIVE = []
  include Aws::Structure
end