We recommend new projects start with resources from the AWS provider.
published on Monday, Aug 17, 2026 by Pulumi
We recommend new projects start with resources from the AWS provider.
published on Monday, Aug 17, 2026 by Pulumi
Resource Type definition for AWS::SageMaker::Workforce. Use to create a private workforce that you can use to label your training data using Amazon SageMaker Ground Truth.
Create Workforce Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Workforce(name: string, args?: WorkforceArgs, opts?: CustomResourceOptions);@overload
def Workforce(resource_name: str,
args: Optional[WorkforceArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def Workforce(resource_name: str,
opts: Optional[ResourceOptions] = None,
cognito_config: Optional[WorkforceCognitoConfigArgs] = None,
ip_address_type: Optional[WorkforceIpAddressType] = None,
oidc_config: Optional[WorkforceOidcConfigArgs] = None,
source_ip_config: Optional[WorkforceSourceIpConfigArgs] = None,
tags: Optional[Sequence[_root_inputs.TagArgs]] = None,
workforce_name: Optional[str] = None,
workforce_vpc_config: Optional[WorkforceVpcConfigRequestArgs] = None)func NewWorkforce(ctx *Context, name string, args *WorkforceArgs, opts ...ResourceOption) (*Workforce, error)public Workforce(string name, WorkforceArgs? args = null, CustomResourceOptions? opts = null)
public Workforce(String name, WorkforceArgs args)
public Workforce(String name, WorkforceArgs args, CustomResourceOptions options)
type: aws-native:sagemaker:Workforce
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "aws-native_sagemaker_workforce" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args WorkforceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args WorkforceArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args WorkforceArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args WorkforceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args WorkforceArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Workforce Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Workforce resource accepts the following input properties:
- Cognito
Config Pulumi.Aws Native. Sage Maker. Inputs. Workforce Cognito Config - Ip
Address Pulumi.Type Aws Native. Sage Maker. Workforce Ip Address Type - The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
- Oidc
Config Pulumi.Aws Native. Sage Maker. Inputs. Workforce Oidc Config - Source
Ip Pulumi.Config Aws Native. Sage Maker. Inputs. Workforce Source Ip Config -
List<Pulumi.
Aws Native. Inputs. Tag> - An array of key-value pairs.
- Workforce
Name string - The name of the private workforce.
- Workforce
Vpc Pulumi.Config Aws Native. Sage Maker. Inputs. Workforce Vpc Config Request
- Cognito
Config WorkforceCognito Config Args - Ip
Address WorkforceType Ip Address Type - The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
- Oidc
Config WorkforceOidc Config Args - Source
Ip WorkforceConfig Source Ip Config Args -
Tag
Args - An array of key-value pairs.
- Workforce
Name string - The name of the private workforce.
- Workforce
Vpc WorkforceConfig Vpc Config Request Args
- cognito_
config object - ip_
address_ "ipv4" | "dualstack"type - The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
- oidc_
config object - source_
ip_ objectconfig - list(object)
- An array of key-value pairs.
- workforce_
name string - The name of the private workforce.
- workforce_
vpc_ objectconfig
- cognito
Config WorkforceCognito Config - ip
Address WorkforceType Ip Address Type - The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
- oidc
Config WorkforceOidc Config - source
Ip WorkforceConfig Source Ip Config - List<Tag>
- An array of key-value pairs.
- workforce
Name String - The name of the private workforce.
- workforce
Vpc WorkforceConfig Vpc Config Request
- cognito
Config WorkforceCognito Config - ip
Address WorkforceType Ip Address Type - The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
- oidc
Config WorkforceOidc Config - source
Ip WorkforceConfig Source Ip Config - Tag[]
- An array of key-value pairs.
- workforce
Name string - The name of the private workforce.
- workforce
Vpc WorkforceConfig Vpc Config Request
- cognito_
config WorkforceCognito Config Args - ip_
address_ Workforcetype Ip Address Type - The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
- oidc_
config WorkforceOidc Config Args - source_
ip_ Workforceconfig Source Ip Config Args -
Sequence[Tag
Args] - An array of key-value pairs.
- workforce_
name str - The name of the private workforce.
- workforce_
vpc_ Workforceconfig Vpc Config Request Args
- cognito
Config Property Map - ip
Address "ipv4" | "dualstack"Type - The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
- oidc
Config Property Map - source
Ip Property MapConfig - List<Property Map>
- An array of key-value pairs.
- workforce
Name String - The name of the private workforce.
- workforce
Vpc Property MapConfig
Outputs
All input properties are implicitly available as output properties. Additionally, the Workforce resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Sub
Domain string - The subdomain for your OIDC Identity Provider.
- Workforce
Arn string - The Amazon Resource Name (ARN) of the private workforce.
- Id string
- The provider-assigned unique ID for this managed resource.
- Sub
Domain string - The subdomain for your OIDC Identity Provider.
- Workforce
Arn string - The Amazon Resource Name (ARN) of the private workforce.
- id string
- The provider-assigned unique ID for this managed resource.
- sub_
domain string - The subdomain for your OIDC Identity Provider.
- workforce_
arn string - The Amazon Resource Name (ARN) of the private workforce.
- id String
- The provider-assigned unique ID for this managed resource.
- sub
Domain String - The subdomain for your OIDC Identity Provider.
- workforce
Arn String - The Amazon Resource Name (ARN) of the private workforce.
- id string
- The provider-assigned unique ID for this managed resource.
- sub
Domain string - The subdomain for your OIDC Identity Provider.
- workforce
Arn string - The Amazon Resource Name (ARN) of the private workforce.
- id str
- The provider-assigned unique ID for this managed resource.
- sub_
domain str - The subdomain for your OIDC Identity Provider.
- workforce_
arn str - The Amazon Resource Name (ARN) of the private workforce.
- id String
- The provider-assigned unique ID for this managed resource.
- sub
Domain String - The subdomain for your OIDC Identity Provider.
- workforce
Arn String - The Amazon Resource Name (ARN) of the private workforce.
Supporting Types
Tag, TagArgs
A set of tags to apply to the resource.WorkforceCognitoConfig, WorkforceCognitoConfigArgs
The configuration of an Amazon Cognito workforce. A single Cognito workforce is created using and corresponds to a single Amazon Cognito user pool.WorkforceIpAddressType, WorkforceIpAddressTypeArgs
- Ipv4
ipv4- Dualstack
dualstack
- Workforce
Ip Address Type Ipv4 ipv4- Workforce
Ip Address Type Dualstack dualstack
- "ipv4"
ipv4- "dualstack"
dualstack
- Ipv4
ipv4- Dualstack
dualstack
- Ipv4
ipv4- Dualstack
dualstack
- IPV4
ipv4- DUALSTACK
dualstack
- "ipv4"
ipv4- "dualstack"
dualstack
WorkforceOidcConfig, WorkforceOidcConfigArgs
The configuration of an OIDC Identity Provider (IdP) private workforce.- string
- The OIDC IdP authorization endpoint used to configure your private workforce.
- Client
Id string - The OIDC IdP client ID used to configure your private workforce.
- Issuer string
- The OIDC IdP issuer used to configure your private workforce.
- Jwks
Uri string - The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
- Logout
Endpoint string - The OIDC IdP logout endpoint used to configure your private workforce.
- Token
Endpoint string - The OIDC IdP token endpoint used to configure your private workforce.
- User
Info stringEndpoint - The OIDC IdP user info endpoint used to configure your private workforce.
- Authentication
Request Dictionary<string, string>Extra Params - A string to string map of identifiers specific to the custom identity provider (IdP) being used.
- Client
Secret string - The OIDC IdP client secret used to configure your private workforce.
- Scope string
- An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
- string
- The OIDC IdP authorization endpoint used to configure your private workforce.
- Client
Id string - The OIDC IdP client ID used to configure your private workforce.
- Issuer string
- The OIDC IdP issuer used to configure your private workforce.
- Jwks
Uri string - The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
- Logout
Endpoint string - The OIDC IdP logout endpoint used to configure your private workforce.
- Token
Endpoint string - The OIDC IdP token endpoint used to configure your private workforce.
- User
Info stringEndpoint - The OIDC IdP user info endpoint used to configure your private workforce.
- Authentication
Request map[string]stringExtra Params - A string to string map of identifiers specific to the custom identity provider (IdP) being used.
- Client
Secret string - The OIDC IdP client secret used to configure your private workforce.
- Scope string
- An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
- string
- The OIDC IdP authorization endpoint used to configure your private workforce.
- client_
id string - The OIDC IdP client ID used to configure your private workforce.
- issuer string
- The OIDC IdP issuer used to configure your private workforce.
- jwks_
uri string - The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
- logout_
endpoint string - The OIDC IdP logout endpoint used to configure your private workforce.
- token_
endpoint string - The OIDC IdP token endpoint used to configure your private workforce.
- user_
info_ stringendpoint - The OIDC IdP user info endpoint used to configure your private workforce.
- authentication_
request_ map(string)extra_ params - A string to string map of identifiers specific to the custom identity provider (IdP) being used.
- client_
secret string - The OIDC IdP client secret used to configure your private workforce.
- scope string
- An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
- String
- The OIDC IdP authorization endpoint used to configure your private workforce.
- client
Id String - The OIDC IdP client ID used to configure your private workforce.
- issuer String
- The OIDC IdP issuer used to configure your private workforce.
- jwks
Uri String - The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
- logout
Endpoint String - The OIDC IdP logout endpoint used to configure your private workforce.
- token
Endpoint String - The OIDC IdP token endpoint used to configure your private workforce.
- user
Info StringEndpoint - The OIDC IdP user info endpoint used to configure your private workforce.
- authentication
Request Map<String,String>Extra Params - A string to string map of identifiers specific to the custom identity provider (IdP) being used.
- client
Secret String - The OIDC IdP client secret used to configure your private workforce.
- scope String
- An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
- string
- The OIDC IdP authorization endpoint used to configure your private workforce.
- client
Id string - The OIDC IdP client ID used to configure your private workforce.
- issuer string
- The OIDC IdP issuer used to configure your private workforce.
- jwks
Uri string - The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
- logout
Endpoint string - The OIDC IdP logout endpoint used to configure your private workforce.
- token
Endpoint string - The OIDC IdP token endpoint used to configure your private workforce.
- user
Info stringEndpoint - The OIDC IdP user info endpoint used to configure your private workforce.
- authentication
Request {[key: string]: string}Extra Params - A string to string map of identifiers specific to the custom identity provider (IdP) being used.
- client
Secret string - The OIDC IdP client secret used to configure your private workforce.
- scope string
- An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
- str
- The OIDC IdP authorization endpoint used to configure your private workforce.
- client_
id str - The OIDC IdP client ID used to configure your private workforce.
- issuer str
- The OIDC IdP issuer used to configure your private workforce.
- jwks_
uri str - The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
- logout_
endpoint str - The OIDC IdP logout endpoint used to configure your private workforce.
- token_
endpoint str - The OIDC IdP token endpoint used to configure your private workforce.
- user_
info_ strendpoint - The OIDC IdP user info endpoint used to configure your private workforce.
- authentication_
request_ Mapping[str, str]extra_ params - A string to string map of identifiers specific to the custom identity provider (IdP) being used.
- client_
secret str - The OIDC IdP client secret used to configure your private workforce.
- scope str
- An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
- String
- The OIDC IdP authorization endpoint used to configure your private workforce.
- client
Id String - The OIDC IdP client ID used to configure your private workforce.
- issuer String
- The OIDC IdP issuer used to configure your private workforce.
- jwks
Uri String - The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
- logout
Endpoint String - The OIDC IdP logout endpoint used to configure your private workforce.
- token
Endpoint String - The OIDC IdP token endpoint used to configure your private workforce.
- user
Info StringEndpoint - The OIDC IdP user info endpoint used to configure your private workforce.
- authentication
Request Map<String>Extra Params - A string to string map of identifiers specific to the custom identity provider (IdP) being used.
- client
Secret String - The OIDC IdP client secret used to configure your private workforce.
- scope String
- An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
WorkforceSourceIpConfig, WorkforceSourceIpConfigArgs
A list of IP address ranges used to access your training data.- Cidrs List<string>
- A list of one to ten Classless Inter-Domain Routing (CIDR) values.
- Cidrs []string
- A list of one to ten Classless Inter-Domain Routing (CIDR) values.
- cidrs list(string)
- A list of one to ten Classless Inter-Domain Routing (CIDR) values.
- cidrs List<String>
- A list of one to ten Classless Inter-Domain Routing (CIDR) values.
- cidrs string[]
- A list of one to ten Classless Inter-Domain Routing (CIDR) values.
- cidrs Sequence[str]
- A list of one to ten Classless Inter-Domain Routing (CIDR) values.
- cidrs List<String>
- A list of one to ten Classless Inter-Domain Routing (CIDR) values.
WorkforceVpcConfigRequest, WorkforceVpcConfigRequestArgs
The VPC configuration for the workforce.- Security
Group List<string>Ids - The VPC security group IDs.
- Subnets List<string>
- The VPC subnets.
- Vpc
Id string - The ID of the VPC.
- Security
Group []stringIds - The VPC security group IDs.
- Subnets []string
- The VPC subnets.
- Vpc
Id string - The ID of the VPC.
- security_
group_ list(string)ids - The VPC security group IDs.
- subnets list(string)
- The VPC subnets.
- vpc_
id string - The ID of the VPC.
- security
Group List<String>Ids - The VPC security group IDs.
- subnets List<String>
- The VPC subnets.
- vpc
Id String - The ID of the VPC.
- security
Group string[]Ids - The VPC security group IDs.
- subnets string[]
- The VPC subnets.
- vpc
Id string - The ID of the VPC.
- security_
group_ Sequence[str]ids - The VPC security group IDs.
- subnets Sequence[str]
- The VPC subnets.
- vpc_
id str - The ID of the VPC.
- security
Group List<String>Ids - The VPC security group IDs.
- subnets List<String>
- The VPC subnets.
- vpc
Id String - The ID of the VPC.
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.
published on Monday, Aug 17, 2026 by Pulumi