1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. sagemaker
  6. Workforce

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.75.0
published on Monday, Aug 17, 2026 by Pulumi
aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.75.0
published on Monday, Aug 17, 2026 by Pulumi

    Resource Type definition for AWS::SageMaker::Workforce. Use to create a private workforce that you can use to label your training data using Amazon SageMaker Ground Truth.

    Create Workforce Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Workforce(name: string, args?: WorkforceArgs, opts?: CustomResourceOptions);
    @overload
    def Workforce(resource_name: str,
                  args: Optional[WorkforceArgs] = None,
                  opts: Optional[ResourceOptions] = None)
    
    @overload
    def Workforce(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  cognito_config: Optional[WorkforceCognitoConfigArgs] = None,
                  ip_address_type: Optional[WorkforceIpAddressType] = None,
                  oidc_config: Optional[WorkforceOidcConfigArgs] = None,
                  source_ip_config: Optional[WorkforceSourceIpConfigArgs] = None,
                  tags: Optional[Sequence[_root_inputs.TagArgs]] = None,
                  workforce_name: Optional[str] = None,
                  workforce_vpc_config: Optional[WorkforceVpcConfigRequestArgs] = None)
    func NewWorkforce(ctx *Context, name string, args *WorkforceArgs, opts ...ResourceOption) (*Workforce, error)
    public Workforce(string name, WorkforceArgs? args = null, CustomResourceOptions? opts = null)
    public Workforce(String name, WorkforceArgs args)
    public Workforce(String name, WorkforceArgs args, CustomResourceOptions options)
    
    type: aws-native:sagemaker:Workforce
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "aws-native_sagemaker_workforce" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args WorkforceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args WorkforceArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args WorkforceArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WorkforceArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args WorkforceArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Workforce Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Workforce resource accepts the following input properties:

    CognitoConfig WorkforceCognitoConfigArgs
    IpAddressType WorkforceIpAddressType
    The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
    OidcConfig WorkforceOidcConfigArgs
    SourceIpConfig WorkforceSourceIpConfigArgs
    Tags TagArgs
    An array of key-value pairs.
    WorkforceName string
    The name of the private workforce.
    WorkforceVpcConfig WorkforceVpcConfigRequestArgs
    cognito_config object
    ip_address_type "ipv4" | "dualstack"
    The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
    oidc_config object
    source_ip_config object
    tags list(object)
    An array of key-value pairs.
    workforce_name string
    The name of the private workforce.
    workforce_vpc_config object
    cognitoConfig WorkforceCognitoConfig
    ipAddressType WorkforceIpAddressType
    The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
    oidcConfig WorkforceOidcConfig
    sourceIpConfig WorkforceSourceIpConfig
    tags List<Tag>
    An array of key-value pairs.
    workforceName String
    The name of the private workforce.
    workforceVpcConfig WorkforceVpcConfigRequest
    cognitoConfig WorkforceCognitoConfig
    ipAddressType WorkforceIpAddressType
    The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
    oidcConfig WorkforceOidcConfig
    sourceIpConfig WorkforceSourceIpConfig
    tags Tag[]
    An array of key-value pairs.
    workforceName string
    The name of the private workforce.
    workforceVpcConfig WorkforceVpcConfigRequest
    cognitoConfig Property Map
    ipAddressType "ipv4" | "dualstack"
    The IP address type for the workforce. IPv4 only or dualstack (IPv4 and IPv6).
    oidcConfig Property Map
    sourceIpConfig Property Map
    tags List<Property Map>
    An array of key-value pairs.
    workforceName String
    The name of the private workforce.
    workforceVpcConfig Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Workforce resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    SubDomain string
    The subdomain for your OIDC Identity Provider.
    WorkforceArn string
    The Amazon Resource Name (ARN) of the private workforce.
    Id string
    The provider-assigned unique ID for this managed resource.
    SubDomain string
    The subdomain for your OIDC Identity Provider.
    WorkforceArn string
    The Amazon Resource Name (ARN) of the private workforce.
    id string
    The provider-assigned unique ID for this managed resource.
    sub_domain string
    The subdomain for your OIDC Identity Provider.
    workforce_arn string
    The Amazon Resource Name (ARN) of the private workforce.
    id String
    The provider-assigned unique ID for this managed resource.
    subDomain String
    The subdomain for your OIDC Identity Provider.
    workforceArn String
    The Amazon Resource Name (ARN) of the private workforce.
    id string
    The provider-assigned unique ID for this managed resource.
    subDomain string
    The subdomain for your OIDC Identity Provider.
    workforceArn string
    The Amazon Resource Name (ARN) of the private workforce.
    id str
    The provider-assigned unique ID for this managed resource.
    sub_domain str
    The subdomain for your OIDC Identity Provider.
    workforce_arn str
    The Amazon Resource Name (ARN) of the private workforce.
    id String
    The provider-assigned unique ID for this managed resource.
    subDomain String
    The subdomain for your OIDC Identity Provider.
    workforceArn String
    The Amazon Resource Name (ARN) of the private workforce.

    Supporting Types

    Tag, TagArgs

    A set of tags to apply to the resource.
    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    WorkforceCognitoConfig, WorkforceCognitoConfigArgs

    The configuration of an Amazon Cognito workforce. A single Cognito workforce is created using and corresponds to a single Amazon Cognito user pool.
    ClientId string
    The client ID for your Amazon Cognito user pool.
    UserPool string
    The ID for your Amazon Cognito user pool.
    ClientId string
    The client ID for your Amazon Cognito user pool.
    UserPool string
    The ID for your Amazon Cognito user pool.
    client_id string
    The client ID for your Amazon Cognito user pool.
    user_pool string
    The ID for your Amazon Cognito user pool.
    clientId String
    The client ID for your Amazon Cognito user pool.
    userPool String
    The ID for your Amazon Cognito user pool.
    clientId string
    The client ID for your Amazon Cognito user pool.
    userPool string
    The ID for your Amazon Cognito user pool.
    client_id str
    The client ID for your Amazon Cognito user pool.
    user_pool str
    The ID for your Amazon Cognito user pool.
    clientId String
    The client ID for your Amazon Cognito user pool.
    userPool String
    The ID for your Amazon Cognito user pool.

    WorkforceIpAddressType, WorkforceIpAddressTypeArgs

    Ipv4
    ipv4
    Dualstack
    dualstack
    WorkforceIpAddressTypeIpv4
    ipv4
    WorkforceIpAddressTypeDualstack
    dualstack
    "ipv4"
    ipv4
    "dualstack"
    dualstack
    Ipv4
    ipv4
    Dualstack
    dualstack
    Ipv4
    ipv4
    Dualstack
    dualstack
    IPV4
    ipv4
    DUALSTACK
    dualstack
    "ipv4"
    ipv4
    "dualstack"
    dualstack

    WorkforceOidcConfig, WorkforceOidcConfigArgs

    The configuration of an OIDC Identity Provider (IdP) private workforce.
    AuthorizationEndpoint string
    The OIDC IdP authorization endpoint used to configure your private workforce.
    ClientId string
    The OIDC IdP client ID used to configure your private workforce.
    Issuer string
    The OIDC IdP issuer used to configure your private workforce.
    JwksUri string
    The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
    LogoutEndpoint string
    The OIDC IdP logout endpoint used to configure your private workforce.
    TokenEndpoint string
    The OIDC IdP token endpoint used to configure your private workforce.
    UserInfoEndpoint string
    The OIDC IdP user info endpoint used to configure your private workforce.
    AuthenticationRequestExtraParams Dictionary<string, string>
    A string to string map of identifiers specific to the custom identity provider (IdP) being used.
    ClientSecret string
    The OIDC IdP client secret used to configure your private workforce.
    Scope string
    An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
    AuthorizationEndpoint string
    The OIDC IdP authorization endpoint used to configure your private workforce.
    ClientId string
    The OIDC IdP client ID used to configure your private workforce.
    Issuer string
    The OIDC IdP issuer used to configure your private workforce.
    JwksUri string
    The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
    LogoutEndpoint string
    The OIDC IdP logout endpoint used to configure your private workforce.
    TokenEndpoint string
    The OIDC IdP token endpoint used to configure your private workforce.
    UserInfoEndpoint string
    The OIDC IdP user info endpoint used to configure your private workforce.
    AuthenticationRequestExtraParams map[string]string
    A string to string map of identifiers specific to the custom identity provider (IdP) being used.
    ClientSecret string
    The OIDC IdP client secret used to configure your private workforce.
    Scope string
    An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
    authorization_endpoint string
    The OIDC IdP authorization endpoint used to configure your private workforce.
    client_id string
    The OIDC IdP client ID used to configure your private workforce.
    issuer string
    The OIDC IdP issuer used to configure your private workforce.
    jwks_uri string
    The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
    logout_endpoint string
    The OIDC IdP logout endpoint used to configure your private workforce.
    token_endpoint string
    The OIDC IdP token endpoint used to configure your private workforce.
    user_info_endpoint string
    The OIDC IdP user info endpoint used to configure your private workforce.
    authentication_request_extra_params map(string)
    A string to string map of identifiers specific to the custom identity provider (IdP) being used.
    client_secret string
    The OIDC IdP client secret used to configure your private workforce.
    scope string
    An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
    authorizationEndpoint String
    The OIDC IdP authorization endpoint used to configure your private workforce.
    clientId String
    The OIDC IdP client ID used to configure your private workforce.
    issuer String
    The OIDC IdP issuer used to configure your private workforce.
    jwksUri String
    The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
    logoutEndpoint String
    The OIDC IdP logout endpoint used to configure your private workforce.
    tokenEndpoint String
    The OIDC IdP token endpoint used to configure your private workforce.
    userInfoEndpoint String
    The OIDC IdP user info endpoint used to configure your private workforce.
    authenticationRequestExtraParams Map<String,String>
    A string to string map of identifiers specific to the custom identity provider (IdP) being used.
    clientSecret String
    The OIDC IdP client secret used to configure your private workforce.
    scope String
    An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
    authorizationEndpoint string
    The OIDC IdP authorization endpoint used to configure your private workforce.
    clientId string
    The OIDC IdP client ID used to configure your private workforce.
    issuer string
    The OIDC IdP issuer used to configure your private workforce.
    jwksUri string
    The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
    logoutEndpoint string
    The OIDC IdP logout endpoint used to configure your private workforce.
    tokenEndpoint string
    The OIDC IdP token endpoint used to configure your private workforce.
    userInfoEndpoint string
    The OIDC IdP user info endpoint used to configure your private workforce.
    authenticationRequestExtraParams {[key: string]: string}
    A string to string map of identifiers specific to the custom identity provider (IdP) being used.
    clientSecret string
    The OIDC IdP client secret used to configure your private workforce.
    scope string
    An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
    authorization_endpoint str
    The OIDC IdP authorization endpoint used to configure your private workforce.
    client_id str
    The OIDC IdP client ID used to configure your private workforce.
    issuer str
    The OIDC IdP issuer used to configure your private workforce.
    jwks_uri str
    The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
    logout_endpoint str
    The OIDC IdP logout endpoint used to configure your private workforce.
    token_endpoint str
    The OIDC IdP token endpoint used to configure your private workforce.
    user_info_endpoint str
    The OIDC IdP user info endpoint used to configure your private workforce.
    authentication_request_extra_params Mapping[str, str]
    A string to string map of identifiers specific to the custom identity provider (IdP) being used.
    client_secret str
    The OIDC IdP client secret used to configure your private workforce.
    scope str
    An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.
    authorizationEndpoint String
    The OIDC IdP authorization endpoint used to configure your private workforce.
    clientId String
    The OIDC IdP client ID used to configure your private workforce.
    issuer String
    The OIDC IdP issuer used to configure your private workforce.
    jwksUri String
    The OIDC IdP JSON Web Key Set (Jwks) URI used to configure your private workforce.
    logoutEndpoint String
    The OIDC IdP logout endpoint used to configure your private workforce.
    tokenEndpoint String
    The OIDC IdP token endpoint used to configure your private workforce.
    userInfoEndpoint String
    The OIDC IdP user info endpoint used to configure your private workforce.
    authenticationRequestExtraParams Map<String>
    A string to string map of identifiers specific to the custom identity provider (IdP) being used.
    clientSecret String
    The OIDC IdP client secret used to configure your private workforce.
    scope String
    An array of string identifiers used to refer to the specific pieces of user data or claims that the client application wants to access.

    WorkforceSourceIpConfig, WorkforceSourceIpConfigArgs

    A list of IP address ranges used to access your training data.
    Cidrs List<string>
    A list of one to ten Classless Inter-Domain Routing (CIDR) values.
    Cidrs []string
    A list of one to ten Classless Inter-Domain Routing (CIDR) values.
    cidrs list(string)
    A list of one to ten Classless Inter-Domain Routing (CIDR) values.
    cidrs List<String>
    A list of one to ten Classless Inter-Domain Routing (CIDR) values.
    cidrs string[]
    A list of one to ten Classless Inter-Domain Routing (CIDR) values.
    cidrs Sequence[str]
    A list of one to ten Classless Inter-Domain Routing (CIDR) values.
    cidrs List<String>
    A list of one to ten Classless Inter-Domain Routing (CIDR) values.

    WorkforceVpcConfigRequest, WorkforceVpcConfigRequestArgs

    The VPC configuration for the workforce.
    SecurityGroupIds List<string>
    The VPC security group IDs.
    Subnets List<string>
    The VPC subnets.
    VpcId string
    The ID of the VPC.
    SecurityGroupIds []string
    The VPC security group IDs.
    Subnets []string
    The VPC subnets.
    VpcId string
    The ID of the VPC.
    security_group_ids list(string)
    The VPC security group IDs.
    subnets list(string)
    The VPC subnets.
    vpc_id string
    The ID of the VPC.
    securityGroupIds List<String>
    The VPC security group IDs.
    subnets List<String>
    The VPC subnets.
    vpcId String
    The ID of the VPC.
    securityGroupIds string[]
    The VPC security group IDs.
    subnets string[]
    The VPC subnets.
    vpcId string
    The ID of the VPC.
    security_group_ids Sequence[str]
    The VPC security group IDs.
    subnets Sequence[str]
    The VPC subnets.
    vpc_id str
    The ID of the VPC.
    securityGroupIds List<String>
    The VPC security group IDs.
    subnets List<String>
    The VPC subnets.
    vpcId String
    The ID of the VPC.

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.75.0
    published on Monday, Aug 17, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial