We recommend new projects start with resources from the AWS provider.
Viewing docs for AWS Cloud Control v1.79.0
published on Monday, Sep 14, 2026 by Pulumi
published on Monday, Sep 14, 2026 by Pulumi
We recommend new projects start with resources from the AWS provider.
Viewing docs for AWS Cloud Control v1.79.0
published on Monday, Sep 14, 2026 by Pulumi
published on Monday, Sep 14, 2026 by Pulumi
Resource Type definition for AWS::BedrockAgentCore::OAuth2CredentialProvider
Using getOAuth2CredentialProvider
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getOAuth2CredentialProvider(args: GetOAuth2CredentialProviderArgs, opts?: InvokeOptions): Promise<GetOAuth2CredentialProviderResult>
function getOAuth2CredentialProviderOutput(args: GetOAuth2CredentialProviderOutputArgs, opts?: InvokeOutputOptions): Output<GetOAuth2CredentialProviderResult>def get_o_auth2_credential_provider(credential_provider_arn: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetOAuth2CredentialProviderResult
def get_o_auth2_credential_provider_output(credential_provider_arn: pulumi.Input[Optional[str]] = None,
opts: Optional[InvokeOutputOptions] = None) -> Output[GetOAuth2CredentialProviderResult]func LookupOAuth2CredentialProvider(ctx *Context, args *LookupOAuth2CredentialProviderArgs, opts ...InvokeOption) (*LookupOAuth2CredentialProviderResult, error)
func LookupOAuth2CredentialProviderOutput(ctx *Context, args *LookupOAuth2CredentialProviderOutputArgs, opts ...InvokeOption) LookupOAuth2CredentialProviderResultOutput> Note: This function is named LookupOAuth2CredentialProvider in the Go SDK.
public static class GetOAuth2CredentialProvider
{
public static Task<GetOAuth2CredentialProviderResult> InvokeAsync(GetOAuth2CredentialProviderArgs args, InvokeOptions? opts = null)
public static Output<GetOAuth2CredentialProviderResult> Invoke(GetOAuth2CredentialProviderInvokeArgs args, InvokeOptions? opts = null)
public static Output<GetOAuth2CredentialProviderResult> Invoke(GetOAuth2CredentialProviderInvokeArgs args, InvokeOutputOptions opts)
}public static CompletableFuture<GetOAuth2CredentialProviderResult> getOAuth2CredentialProvider(GetOAuth2CredentialProviderArgs args, InvokeOptions options)
public static Output<GetOAuth2CredentialProviderResult> getOAuth2CredentialProvider(GetOAuth2CredentialProviderArgs args, InvokeOptions options)
public static Output<GetOAuth2CredentialProviderResult> getOAuth2CredentialProvider(GetOAuth2CredentialProviderArgs args, InvokeOutputOptions options)
fn::invoke:
function: aws-native:bedrockagentcore:getOAuth2CredentialProvider
arguments:
# arguments dictionarydata "aws-native_bedrockagentcore_get_o_auth2_credential_provider" "name" {
# arguments
}The following arguments are supported:
- Credential
Provider stringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- Credential
Provider stringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- credential_
provider_ stringarn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- credential
Provider StringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- credential
Provider stringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- credential_
provider_ strarn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- credential
Provider StringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
getOAuth2CredentialProvider Result
The following output properties are available:
- Callback
Url string - The callback URL for the OAuth2 authorization flow
- Client
Secret Pulumi.Arn Aws Native. Bedrock Agent Core. Outputs. OAuth2Credential Provider Client Secret Arn - The ARN of the client secret in AWS Secrets Manager
- Client
Secret stringJson Key - The JSON key within the secret that contains the client secret value
- Client
Secret Pulumi.Source Aws Native. Bedrock Agent Core. OAuth2Credential Provider Client Secret Source - The source of the client secret
- Created
Time string - The timestamp when the credential provider was created
- Credential
Provider stringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- Last
Updated stringTime - The timestamp when the credential provider was last updated
- Oauth2Provider
Config Pulumi.Output Aws Native. Bedrock Agent Core. Outputs. OAuth2Credential Provider Oauth2Provider Config Output - The output configuration for the OAuth2 provider
- Status
Pulumi.
Aws Native. Bedrock Agent Core. OAuth2Credential Provider Status - The current status of the OAuth2 credential provider
-
List<Pulumi.
Aws Native. Outputs. Tag> - Tags to assign to the OAuth2 credential provider
- Callback
Url string - The callback URL for the OAuth2 authorization flow
- Client
Secret OAuth2CredentialArn Provider Client Secret Arn - The ARN of the client secret in AWS Secrets Manager
- Client
Secret stringJson Key - The JSON key within the secret that contains the client secret value
- Client
Secret OAuth2CredentialSource Provider Client Secret Source - The source of the client secret
- Created
Time string - The timestamp when the credential provider was created
- Credential
Provider stringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- Last
Updated stringTime - The timestamp when the credential provider was last updated
- Oauth2Provider
Config OAuth2CredentialOutput Provider Oauth2Provider Config Output - The output configuration for the OAuth2 provider
- Status
OAuth2Credential
Provider Status - The current status of the OAuth2 credential provider
- Tag
- Tags to assign to the OAuth2 credential provider
- callback_
url string - The callback URL for the OAuth2 authorization flow
- client_
secret_ objectarn - The ARN of the client secret in AWS Secrets Manager
- client_
secret_ stringjson_ key - The JSON key within the secret that contains the client secret value
- client_
secret_ "MANAGED" | "EXTERNAL"source - The source of the client secret
- created_
time string - The timestamp when the credential provider was created
- credential_
provider_ stringarn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- last_
updated_ stringtime - The timestamp when the credential provider was last updated
- oauth2_
provider_ objectconfig_ output - The output configuration for the OAuth2 provider
- status "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "READY" | "DELETING" | "DELETE_FAILED"
- The current status of the OAuth2 credential provider
- list(object)
- Tags to assign to the OAuth2 credential provider
- callback
Url String - The callback URL for the OAuth2 authorization flow
- client
Secret OAuth2CredentialArn Provider Client Secret Arn - The ARN of the client secret in AWS Secrets Manager
- client
Secret StringJson Key - The JSON key within the secret that contains the client secret value
- client
Secret OAuth2CredentialSource Provider Client Secret Source - The source of the client secret
- created
Time String - The timestamp when the credential provider was created
- credential
Provider StringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- last
Updated StringTime - The timestamp when the credential provider was last updated
- oauth2Provider
Config OAuth2CredentialOutput Provider Oauth2Provider Config Output - The output configuration for the OAuth2 provider
- status
OAuth2Credential
Provider Status - The current status of the OAuth2 credential provider
- List<Tag>
- Tags to assign to the OAuth2 credential provider
- callback
Url string - The callback URL for the OAuth2 authorization flow
- client
Secret OAuth2CredentialArn Provider Client Secret Arn - The ARN of the client secret in AWS Secrets Manager
- client
Secret stringJson Key - The JSON key within the secret that contains the client secret value
- client
Secret OAuth2CredentialSource Provider Client Secret Source - The source of the client secret
- created
Time string - The timestamp when the credential provider was created
- credential
Provider stringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- last
Updated stringTime - The timestamp when the credential provider was last updated
- oauth2Provider
Config OAuth2CredentialOutput Provider Oauth2Provider Config Output - The output configuration for the OAuth2 provider
- status
OAuth2Credential
Provider Status - The current status of the OAuth2 credential provider
- Tag[]
- Tags to assign to the OAuth2 credential provider
- callback_
url str - The callback URL for the OAuth2 authorization flow
- client_
secret_ OAuth2Credentialarn Provider Client Secret Arn - The ARN of the client secret in AWS Secrets Manager
- client_
secret_ strjson_ key - The JSON key within the secret that contains the client secret value
- client_
secret_ OAuth2Credentialsource Provider Client Secret Source - The source of the client secret
- created_
time str - The timestamp when the credential provider was created
- credential_
provider_ strarn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- last_
updated_ strtime - The timestamp when the credential provider was last updated
- oauth2_
provider_ OAuth2Credentialconfig_ output Provider Oauth2Provider Config Output - The output configuration for the OAuth2 provider
- status
OAuth2Credential
Provider Status - The current status of the OAuth2 credential provider
- Sequence[root_Tag]
- Tags to assign to the OAuth2 credential provider
- callback
Url String - The callback URL for the OAuth2 authorization flow
- client
Secret Property MapArn - The ARN of the client secret in AWS Secrets Manager
- client
Secret StringJson Key - The JSON key within the secret that contains the client secret value
- client
Secret "MANAGED" | "EXTERNAL"Source - The source of the client secret
- created
Time String - The timestamp when the credential provider was created
- credential
Provider StringArn - The Amazon Resource Name (ARN) of the OAuth2 credential provider
- last
Updated StringTime - The timestamp when the credential provider was last updated
- oauth2Provider
Config Property MapOutput - The output configuration for the OAuth2 provider
- status "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "READY" | "DELETING" | "DELETE_FAILED"
- The current status of the OAuth2 credential provider
- List<Property Map>
- Tags to assign to the OAuth2 credential provider
Supporting Types
OAuth2CredentialProviderClientSecretArn
- Secret
Arn string - The ARN of the secret in AWS Secrets Manager
- Secret
Arn string - The ARN of the secret in AWS Secrets Manager
- secret_
arn string - The ARN of the secret in AWS Secrets Manager
- secret
Arn String - The ARN of the secret in AWS Secrets Manager
- secret
Arn string - The ARN of the secret in AWS Secrets Manager
- secret_
arn str - The ARN of the secret in AWS Secrets Manager
- secret
Arn String - The ARN of the secret in AWS Secrets Manager
OAuth2CredentialProviderClientSecretSource
OAuth2CredentialProviderKmsKeySourceType
- Kms
Key stringArn - The Amazon Resource Name (ARN) of the KMS key used to sign the JWT client assertion
- Kms
Key stringArn - The Amazon Resource Name (ARN) of the KMS key used to sign the JWT client assertion
- kms_
key_ stringarn - The Amazon Resource Name (ARN) of the KMS key used to sign the JWT client assertion
- kms
Key StringArn - The Amazon Resource Name (ARN) of the KMS key used to sign the JWT client assertion
- kms
Key stringArn - The Amazon Resource Name (ARN) of the KMS key used to sign the JWT client assertion
- kms_
key_ strarn - The Amazon Resource Name (ARN) of the KMS key used to sign the JWT client assertion
- kms
Key StringArn - The Amazon Resource Name (ARN) of the KMS key used to sign the JWT client assertion
OAuth2CredentialProviderManagedVpcResource
- Endpoint
Ip Pulumi.Address Type Aws Native. Bedrock Agent Core. OAuth2Credential Provider Managed Vpc Resource Endpoint Ip Address Type - The IP address type for the resource configuration endpoint
- Subnet
Ids List<string> - The subnet IDs within the VPC where the VPC Lattice resource gateway is placed
- Vpc
Identifier string - The ID of the VPC that contains your private resource
- Routing
Domain string - An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint
- Security
Group List<string>Ids - The security group IDs to associate with the VPC Lattice resource gateway
- Dictionary<string, string>
- Tags to apply to the managed VPC Lattice resource gateway
- Endpoint
Ip OAuth2CredentialAddress Type Provider Managed Vpc Resource Endpoint Ip Address Type - The IP address type for the resource configuration endpoint
- Subnet
Ids []string - The subnet IDs within the VPC where the VPC Lattice resource gateway is placed
- Vpc
Identifier string - The ID of the VPC that contains your private resource
- Routing
Domain string - An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint
- Security
Group []stringIds - The security group IDs to associate with the VPC Lattice resource gateway
- map[string]string
- Tags to apply to the managed VPC Lattice resource gateway
- endpoint_
ip_ "IPV4" | "IPV6"address_ type - The IP address type for the resource configuration endpoint
- subnet_
ids list(string) - The subnet IDs within the VPC where the VPC Lattice resource gateway is placed
- vpc_
identifier string - The ID of the VPC that contains your private resource
- routing_
domain string - An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint
- security_
group_ list(string)ids - The security group IDs to associate with the VPC Lattice resource gateway
- map(string)
- Tags to apply to the managed VPC Lattice resource gateway
- endpoint
Ip OAuth2CredentialAddress Type Provider Managed Vpc Resource Endpoint Ip Address Type - The IP address type for the resource configuration endpoint
- subnet
Ids List<String> - The subnet IDs within the VPC where the VPC Lattice resource gateway is placed
- vpc
Identifier String - The ID of the VPC that contains your private resource
- routing
Domain String - An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint
- security
Group List<String>Ids - The security group IDs to associate with the VPC Lattice resource gateway
- Map<String,String>
- Tags to apply to the managed VPC Lattice resource gateway
- endpoint
Ip OAuth2CredentialAddress Type Provider Managed Vpc Resource Endpoint Ip Address Type - The IP address type for the resource configuration endpoint
- subnet
Ids string[] - The subnet IDs within the VPC where the VPC Lattice resource gateway is placed
- vpc
Identifier string - The ID of the VPC that contains your private resource
- routing
Domain string - An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint
- security
Group string[]Ids - The security group IDs to associate with the VPC Lattice resource gateway
- {[key: string]: string}
- Tags to apply to the managed VPC Lattice resource gateway
- endpoint_
ip_ OAuth2Credentialaddress_ type Provider Managed Vpc Resource Endpoint Ip Address Type - The IP address type for the resource configuration endpoint
- subnet_
ids Sequence[str] - The subnet IDs within the VPC where the VPC Lattice resource gateway is placed
- vpc_
identifier str - The ID of the VPC that contains your private resource
- routing_
domain str - An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint
- security_
group_ Sequence[str]ids - The security group IDs to associate with the VPC Lattice resource gateway
- Mapping[str, str]
- Tags to apply to the managed VPC Lattice resource gateway
- endpoint
Ip "IPV4" | "IPV6"Address Type - The IP address type for the resource configuration endpoint
- subnet
Ids List<String> - The subnet IDs within the VPC where the VPC Lattice resource gateway is placed
- vpc
Identifier String - The ID of the VPC that contains your private resource
- routing
Domain String - An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint
- security
Group List<String>Ids - The security group IDs to associate with the VPC Lattice resource gateway
- Map<String>
- Tags to apply to the managed VPC Lattice resource gateway
OAuth2CredentialProviderManagedVpcResourceEndpointIpAddressType
OAuth2CredentialProviderOauth2AuthorizationServerMetadata
- string
- The authorization endpoint URL
- Issuer string
- The issuer URL for the OAuth2 authorization server
- Token
Endpoint string - The token endpoint URL
- Response
Types List<string> - The supported response types
- string
- The authorization endpoint URL
- Issuer string
- The issuer URL for the OAuth2 authorization server
- Token
Endpoint string - The token endpoint URL
- Response
Types []string - The supported response types
- string
- The authorization endpoint URL
- issuer string
- The issuer URL for the OAuth2 authorization server
- token_
endpoint string - The token endpoint URL
- response_
types list(string) - The supported response types
- String
- The authorization endpoint URL
- issuer String
- The issuer URL for the OAuth2 authorization server
- token
Endpoint String - The token endpoint URL
- response
Types List<String> - The supported response types
- string
- The authorization endpoint URL
- issuer string
- The issuer URL for the OAuth2 authorization server
- token
Endpoint string - The token endpoint URL
- response
Types string[] - The supported response types
- str
- The authorization endpoint URL
- issuer str
- The issuer URL for the OAuth2 authorization server
- token_
endpoint str - The token endpoint URL
- response_
types Sequence[str] - The supported response types
- String
- The authorization endpoint URL
- issuer String
- The issuer URL for the OAuth2 authorization server
- token
Endpoint String - The token endpoint URL
- response
Types List<String> - The supported response types
OAuth2CredentialProviderOauth2Discovery
-
Pulumi.
Aws Native. Bedrock Agent Core. Inputs. OAuth2Credential Provider Oauth2Authorization Server Metadata - Discovery
Url string - The discovery URL for the OAuth2 provider
-
OAuth2Credential
Provider Oauth2Authorization Server Metadata - Discovery
Url string - The discovery URL for the OAuth2 provider
- object
- discovery_
url string - The discovery URL for the OAuth2 provider
-
OAuth2Credential
Provider Oauth2Authorization Server Metadata - discovery
Url String - The discovery URL for the OAuth2 provider
-
OAuth2Credential
Provider Oauth2Authorization Server Metadata - discovery
Url string - The discovery URL for the OAuth2 provider
-
OAuth2Credential
Provider Oauth2Authorization Server Metadata - discovery_
url str - The discovery URL for the OAuth2 provider
- Property Map
- discovery
Url String - The discovery URL for the OAuth2 provider
OAuth2CredentialProviderOauth2ProviderConfigOutput
- Client
Authentication Pulumi.Method Aws Native. Bedrock Agent Core. OAuth2Credential Provider Oauth2Provider Config Output Client Authentication Method - The client authentication method used when authenticating with the token endpoint
- Client
Id string - Oauth
Discovery Pulumi.Aws Native. Bedrock Agent Core. Inputs. OAuth2Credential Provider Oauth2Discovery - On
Behalf Pulumi.Of Token Exchange Config Aws Native. Bedrock Agent Core. Inputs. OAuth2Credential Provider On Behalf Of Token Exchange Config - Private
Endpoint Pulumi.Aws Native. Bedrock Agent Core. Inputs. OAuth2Credential Provider Private Endpoint - Private
Endpoint List<Pulumi.Overrides Aws Native. Bedrock Agent Core. Inputs. OAuth2Credential Provider Private Endpoint Override> - The list of private endpoint overrides for the OAuth2 provider. Each override maps a specific domain to a private endpoint, enabling secure connectivity through VPC Lattice resource configurations.
- Private
Key Pulumi.Jwt Config Aws Native. Bedrock Agent Core. Inputs. OAuth2Credential Provider Private Key Jwt Config
- Client
Authentication OAuth2CredentialMethod Provider Oauth2Provider Config Output Client Authentication Method - The client authentication method used when authenticating with the token endpoint
- Client
Id string - Oauth
Discovery OAuth2CredentialProvider Oauth2Discovery - On
Behalf OAuth2CredentialOf Token Exchange Config Provider On Behalf Of Token Exchange Config - Private
Endpoint OAuth2CredentialProvider Private Endpoint - Private
Endpoint []OAuth2CredentialOverrides Provider Private Endpoint Override - The list of private endpoint overrides for the OAuth2 provider. Each override maps a specific domain to a private endpoint, enabling secure connectivity through VPC Lattice resource configurations.
- Private
Key OAuth2CredentialJwt Config Provider Private Key Jwt Config
- client_
authentication_ "CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST" | "AWS_IAM_ID_TOKEN_JWT" | "PRIVATE_KEY_JWT"method - The client authentication method used when authenticating with the token endpoint
- client_
id string - oauth_
discovery object - on_
behalf_ objectof_ token_ exchange_ config - private_
endpoint object - private_
endpoint_ list(object)overrides - The list of private endpoint overrides for the OAuth2 provider. Each override maps a specific domain to a private endpoint, enabling secure connectivity through VPC Lattice resource configurations.
- private_
key_ objectjwt_ config
- client
Authentication OAuth2CredentialMethod Provider Oauth2Provider Config Output Client Authentication Method - The client authentication method used when authenticating with the token endpoint
- client
Id String - oauth
Discovery OAuth2CredentialProvider Oauth2Discovery - on
Behalf OAuth2CredentialOf Token Exchange Config Provider On Behalf Of Token Exchange Config - private
Endpoint OAuth2CredentialProvider Private Endpoint - private
Endpoint List<OAuth2CredentialOverrides Provider Private Endpoint Override> - The list of private endpoint overrides for the OAuth2 provider. Each override maps a specific domain to a private endpoint, enabling secure connectivity through VPC Lattice resource configurations.
- private
Key OAuth2CredentialJwt Config Provider Private Key Jwt Config
- client
Authentication OAuth2CredentialMethod Provider Oauth2Provider Config Output Client Authentication Method - The client authentication method used when authenticating with the token endpoint
- client
Id string - oauth
Discovery OAuth2CredentialProvider Oauth2Discovery - on
Behalf OAuth2CredentialOf Token Exchange Config Provider On Behalf Of Token Exchange Config - private
Endpoint OAuth2CredentialProvider Private Endpoint - private
Endpoint OAuth2CredentialOverrides Provider Private Endpoint Override[] - The list of private endpoint overrides for the OAuth2 provider. Each override maps a specific domain to a private endpoint, enabling secure connectivity through VPC Lattice resource configurations.
- private
Key OAuth2CredentialJwt Config Provider Private Key Jwt Config
- client_
authentication_ OAuth2Credentialmethod Provider Oauth2Provider Config Output Client Authentication Method - The client authentication method used when authenticating with the token endpoint
- client_
id str - oauth_
discovery OAuth2CredentialProvider Oauth2Discovery - on_
behalf_ OAuth2Credentialof_ token_ exchange_ config Provider On Behalf Of Token Exchange Config - private_
endpoint OAuth2CredentialProvider Private Endpoint - private_
endpoint_ Sequence[OAuth2Credentialoverrides Provider Private Endpoint Override] - The list of private endpoint overrides for the OAuth2 provider. Each override maps a specific domain to a private endpoint, enabling secure connectivity through VPC Lattice resource configurations.
- private_
key_ OAuth2Credentialjwt_ config Provider Private Key Jwt Config
- client
Authentication "CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST" | "AWS_IAM_ID_TOKEN_JWT" | "PRIVATE_KEY_JWT"Method - The client authentication method used when authenticating with the token endpoint
- client
Id String - oauth
Discovery Property Map - on
Behalf Property MapOf Token Exchange Config - private
Endpoint Property Map - private
Endpoint List<Property Map>Overrides - The list of private endpoint overrides for the OAuth2 provider. Each override maps a specific domain to a private endpoint, enabling secure connectivity through VPC Lattice resource configurations.
- private
Key Property MapJwt Config
OAuth2CredentialProviderOauth2ProviderConfigOutputClientAuthenticationMethod
OAuth2CredentialProviderOnBehalfOfTokenExchangeConfig
- Grant
Type OAuth2CredentialProvider On Behalf Of Token Exchange Config Grant Type - The grant type for on-behalf-of token exchange
- Token
Exchange OAuth2CredentialGrant Type Config Provider Token Exchange Grant Type Config
- grant_
type "TOKEN_EXCHANGE" | "JWT_AUTHORIZATION_GRANT" - The grant type for on-behalf-of token exchange
- token_
exchange_ objectgrant_ type_ config
- grant
Type OAuth2CredentialProvider On Behalf Of Token Exchange Config Grant Type - The grant type for on-behalf-of token exchange
- token
Exchange OAuth2CredentialGrant Type Config Provider Token Exchange Grant Type Config
- grant
Type OAuth2CredentialProvider On Behalf Of Token Exchange Config Grant Type - The grant type for on-behalf-of token exchange
- token
Exchange OAuth2CredentialGrant Type Config Provider Token Exchange Grant Type Config
- grant_
type OAuth2CredentialProvider On Behalf Of Token Exchange Config Grant Type - The grant type for on-behalf-of token exchange
- token_
exchange_ OAuth2Credentialgrant_ type_ config Provider Token Exchange Grant Type Config
- grant
Type "TOKEN_EXCHANGE" | "JWT_AUTHORIZATION_GRANT" - The grant type for on-behalf-of token exchange
- token
Exchange Property MapGrant Type Config
OAuth2CredentialProviderOnBehalfOfTokenExchangeConfigGrantType
OAuth2CredentialProviderPrivateEndpoint
OAuth2CredentialProviderPrivateEndpointOverride
- Domain string
- The domain to override with a private endpoint
- Private
Endpoint Pulumi.Aws Native. Bedrock Agent Core. Inputs. OAuth2Credential Provider Private Endpoint
- Domain string
- The domain to override with a private endpoint
- Private
Endpoint OAuth2CredentialProvider Private Endpoint
- domain string
- The domain to override with a private endpoint
- private_
endpoint object
- domain String
- The domain to override with a private endpoint
- private
Endpoint OAuth2CredentialProvider Private Endpoint
- domain string
- The domain to override with a private endpoint
- private
Endpoint OAuth2CredentialProvider Private Endpoint
- domain str
- The domain to override with a private endpoint
- private_
endpoint OAuth2CredentialProvider Private Endpoint
- domain String
- The domain to override with a private endpoint
- private
Endpoint Property Map
OAuth2CredentialProviderPrivateKeyJwtConfig
- Additional
Header Dictionary<string, string>Claims - Additional
Payload Dictionary<string, string>Claims - Private
Key Pulumi.Source Aws Native. Bedrock Agent Core. Inputs. OAuth2Credential Provider Private Key Source - Signing
Algorithm Pulumi.Aws Native. Bedrock Agent Core. OAuth2Credential Provider Private Key Jwt Config Signing Algorithm - The algorithm used to sign the JWT client assertion
- Additional
Header map[string]stringClaims - Additional
Payload map[string]stringClaims - Private
Key OAuth2CredentialSource Provider Private Key Source - Signing
Algorithm OAuth2CredentialProvider Private Key Jwt Config Signing Algorithm - The algorithm used to sign the JWT client assertion
- additional_
header_ map(string)claims - additional_
payload_ map(string)claims - private_
key_ objectsource - signing_
algorithm "RS256" | "PS256" | "ES256" - The algorithm used to sign the JWT client assertion
- additional
Header Map<String,String>Claims - additional
Payload Map<String,String>Claims - private
Key OAuth2CredentialSource Provider Private Key Source - signing
Algorithm OAuth2CredentialProvider Private Key Jwt Config Signing Algorithm - The algorithm used to sign the JWT client assertion
- additional
Header {[key: string]: string}Claims - additional
Payload {[key: string]: string}Claims - private
Key OAuth2CredentialSource Provider Private Key Source - signing
Algorithm OAuth2CredentialProvider Private Key Jwt Config Signing Algorithm - The algorithm used to sign the JWT client assertion
- additional_
header_ Mapping[str, str]claims - additional_
payload_ Mapping[str, str]claims - private_
key_ OAuth2Credentialsource Provider Private Key Source - signing_
algorithm OAuth2CredentialProvider Private Key Jwt Config Signing Algorithm - The algorithm used to sign the JWT client assertion
- additional
Header Map<String>Claims - additional
Payload Map<String>Claims - private
Key Property MapSource - signing
Algorithm "RS256" | "PS256" | "ES256" - The algorithm used to sign the JWT client assertion
OAuth2CredentialProviderPrivateKeyJwtConfigSigningAlgorithm
OAuth2CredentialProviderPrivateKeySource
OAuth2CredentialProviderSelfManagedLatticeResource
- Resource
Configuration stringIdentifier - The ARN or ID of the VPC Lattice resource configuration
- Resource
Configuration stringIdentifier - The ARN or ID of the VPC Lattice resource configuration
- resource_
configuration_ stringidentifier - The ARN or ID of the VPC Lattice resource configuration
- resource
Configuration StringIdentifier - The ARN or ID of the VPC Lattice resource configuration
- resource
Configuration stringIdentifier - The ARN or ID of the VPC Lattice resource configuration
- resource_
configuration_ stridentifier - The ARN or ID of the VPC Lattice resource configuration
- resource
Configuration StringIdentifier - The ARN or ID of the VPC Lattice resource configuration
OAuth2CredentialProviderStatus
OAuth2CredentialProviderTokenExchangeGrantTypeConfig
- Actor
Token Pulumi.Content Aws Native. Bedrock Agent Core. OAuth2Credential Provider Token Exchange Grant Type Config Actor Token Content - The actor token content type
- Actor
Token List<string>Scopes - The actor token scopes. Only valid when ActorTokenContent is M2M.
- Actor
Token OAuth2CredentialContent Provider Token Exchange Grant Type Config Actor Token Content - The actor token content type
- Actor
Token []stringScopes - The actor token scopes. Only valid when ActorTokenContent is M2M.
- actor_
token_ "NONE" | "M2M" | "AWS_IAM_ID_TOKEN_JWT"content - The actor token content type
- actor_
token_ list(string)scopes - The actor token scopes. Only valid when ActorTokenContent is M2M.
- actor
Token OAuth2CredentialContent Provider Token Exchange Grant Type Config Actor Token Content - The actor token content type
- actor
Token List<String>Scopes - The actor token scopes. Only valid when ActorTokenContent is M2M.
- actor
Token OAuth2CredentialContent Provider Token Exchange Grant Type Config Actor Token Content - The actor token content type
- actor
Token string[]Scopes - The actor token scopes. Only valid when ActorTokenContent is M2M.
- actor_
token_ OAuth2Credentialcontent Provider Token Exchange Grant Type Config Actor Token Content - The actor token content type
- actor_
token_ Sequence[str]scopes - The actor token scopes. Only valid when ActorTokenContent is M2M.
- actor
Token "NONE" | "M2M" | "AWS_IAM_ID_TOKEN_JWT"Content - The actor token content type
- actor
Token List<String>Scopes - The actor token scopes. Only valid when ActorTokenContent is M2M.
OAuth2CredentialProviderTokenExchangeGrantTypeConfigActorTokenContent
Tag
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.
Viewing docs for AWS Cloud Control v1.79.0
published on Monday, Sep 14, 2026 by Pulumi
published on Monday, Sep 14, 2026 by Pulumi