Viewing docs for AWS v7.50.0
published on Thursday, Oct 8, 2026 by Pulumi
published on Thursday, Oct 8, 2026 by Pulumi
Viewing docs for AWS v7.50.0
published on Thursday, Oct 8, 2026 by Pulumi
published on Thursday, Oct 8, 2026 by Pulumi
Manages an AWS Agent Registry registry.
A registry allows developers to discover, manage, and govern reusable agentic components such as tools, prompts, guardrails, and knowledge bases.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.agentregistry.Registry("example", {
discoveryConfiguration: {
authorizerType: "AWS_IAM",
},
name: "example-registry",
});
import pulumi
import pulumi_aws as aws
example = aws.agentregistry.Registry("example",
discovery_configuration={
"authorizer_type": "AWS_IAM",
},
name="example-registry")
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/agentregistry"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := agentregistry.NewRegistry(ctx, "example", &agentregistry.RegistryArgs{
DiscoveryConfiguration: &agentregistry.RegistryDiscoveryConfigurationArgs{
AuthorizerType: pulumi.String("AWS_IAM"),
},
Name: pulumi.String("example-registry"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.AgentRegistry.Registry("example", new()
{
DiscoveryConfiguration = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationArgs
{
AuthorizerType = "AWS_IAM",
},
Name = "example-registry",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.agentregistry.Registry;
import com.pulumi.aws.agentregistry.RegistryArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Registry("example", RegistryArgs.builder()
.discoveryConfiguration(RegistryDiscoveryConfigurationArgs.builder()
.authorizerType("AWS_IAM")
.build())
.name("example-registry")
.build());
}
}
resources:
example:
type: aws:agentregistry:Registry
properties:
discoveryConfiguration:
authorizerType: AWS_IAM
name: example-registry
pulumi {
required_providers {
aws = {
source = "pulumi/aws"
}
}
}
resource "aws_agentregistry_registry" "example" {
discovery_configuration = {
authorizer_type = "AWS_IAM"
}
name = "example-registry"
}
With Description
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.agentregistry.Registry("example", {
discoveryConfiguration: {
authorizerType: "AWS_IAM",
},
name: "example-registry",
description: "Example agent registry",
});
import pulumi
import pulumi_aws as aws
example = aws.agentregistry.Registry("example",
discovery_configuration={
"authorizer_type": "AWS_IAM",
},
name="example-registry",
description="Example agent registry")
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/agentregistry"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := agentregistry.NewRegistry(ctx, "example", &agentregistry.RegistryArgs{
DiscoveryConfiguration: &agentregistry.RegistryDiscoveryConfigurationArgs{
AuthorizerType: pulumi.String("AWS_IAM"),
},
Name: pulumi.String("example-registry"),
Description: pulumi.String("Example agent registry"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.AgentRegistry.Registry("example", new()
{
DiscoveryConfiguration = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationArgs
{
AuthorizerType = "AWS_IAM",
},
Name = "example-registry",
Description = "Example agent registry",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.agentregistry.Registry;
import com.pulumi.aws.agentregistry.RegistryArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Registry("example", RegistryArgs.builder()
.discoveryConfiguration(RegistryDiscoveryConfigurationArgs.builder()
.authorizerType("AWS_IAM")
.build())
.name("example-registry")
.description("Example agent registry")
.build());
}
}
resources:
example:
type: aws:agentregistry:Registry
properties:
discoveryConfiguration:
authorizerType: AWS_IAM
name: example-registry
description: Example agent registry
pulumi {
required_providers {
aws = {
source = "pulumi/aws"
}
}
}
resource "aws_agentregistry_registry" "example" {
discovery_configuration = {
authorizer_type = "AWS_IAM"
}
name = "example-registry"
description = "Example agent registry"
}
With Auto Approval
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.agentregistry.Registry("example", {
approvalConfiguration: {
autoApprovalRules: ["APPROVE_ALL"],
},
discoveryConfiguration: {
authorizerType: "AWS_IAM",
},
name: "example-registry",
});
import pulumi
import pulumi_aws as aws
example = aws.agentregistry.Registry("example",
approval_configuration={
"auto_approval_rules": ["APPROVE_ALL"],
},
discovery_configuration={
"authorizer_type": "AWS_IAM",
},
name="example-registry")
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/agentregistry"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := agentregistry.NewRegistry(ctx, "example", &agentregistry.RegistryArgs{
ApprovalConfiguration: &agentregistry.RegistryApprovalConfigurationArgs{
AutoApprovalRules: pulumi.StringArray{
pulumi.String("APPROVE_ALL"),
},
},
DiscoveryConfiguration: &agentregistry.RegistryDiscoveryConfigurationArgs{
AuthorizerType: pulumi.String("AWS_IAM"),
},
Name: pulumi.String("example-registry"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.AgentRegistry.Registry("example", new()
{
ApprovalConfiguration = new Aws.AgentRegistry.Inputs.RegistryApprovalConfigurationArgs
{
AutoApprovalRules = new[]
{
"APPROVE_ALL",
},
},
DiscoveryConfiguration = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationArgs
{
AuthorizerType = "AWS_IAM",
},
Name = "example-registry",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.agentregistry.Registry;
import com.pulumi.aws.agentregistry.RegistryArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryApprovalConfigurationArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Registry("example", RegistryArgs.builder()
.approvalConfiguration(RegistryApprovalConfigurationArgs.builder()
.autoApprovalRules("APPROVE_ALL")
.build())
.discoveryConfiguration(RegistryDiscoveryConfigurationArgs.builder()
.authorizerType("AWS_IAM")
.build())
.name("example-registry")
.build());
}
}
resources:
example:
type: aws:agentregistry:Registry
properties:
approvalConfiguration:
autoApprovalRules:
- APPROVE_ALL
discoveryConfiguration:
authorizerType: AWS_IAM
name: example-registry
pulumi {
required_providers {
aws = {
source = "pulumi/aws"
}
}
}
resource "aws_agentregistry_registry" "example" {
approval_configuration = {
auto_approval_rules = ["APPROVE_ALL"]
}
discovery_configuration = {
authorizer_type = "AWS_IAM"
}
name = "example-registry"
}
With Custom JWT Authorization
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.agentregistry.Registry("example", {
discoveryConfiguration: {
authorizerConfiguration: {
customJwtAuthorizer: {
customClaims: [{
authorizingClaimMatchValue: {
claimMatchValue: {
matchValueString: "authorized-user",
},
claimMatchOperator: "EQUALS",
},
inboundTokenClaimName: "sub",
inboundTokenClaimValueType: "STRING",
}],
discoveryUrl: "https://example.com/.well-known/openid-configuration",
allowedAudiences: ["https://api.example.com"],
allowedClients: ["client-id-1"],
allowedScopes: [
"read",
"write",
],
},
},
authorizerType: "CUSTOM_JWT",
},
name: "example-registry",
});
import pulumi
import pulumi_aws as aws
example = aws.agentregistry.Registry("example",
discovery_configuration={
"authorizer_configuration": {
"custom_jwt_authorizer": {
"custom_claims": [{
"authorizing_claim_match_value": {
"claim_match_value": {
"match_value_string": "authorized-user",
},
"claim_match_operator": "EQUALS",
},
"inbound_token_claim_name": "sub",
"inbound_token_claim_value_type": "STRING",
}],
"discovery_url": "https://example.com/.well-known/openid-configuration",
"allowed_audiences": ["https://api.example.com"],
"allowed_clients": ["client-id-1"],
"allowed_scopes": [
"read",
"write",
],
},
},
"authorizer_type": "CUSTOM_JWT",
},
name="example-registry")
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/agentregistry"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := agentregistry.NewRegistry(ctx, "example", &agentregistry.RegistryArgs{
DiscoveryConfiguration: &agentregistry.RegistryDiscoveryConfigurationArgs{
AuthorizerConfiguration: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationArgs{
CustomJwtAuthorizer: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerArgs{
CustomClaims: agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArray{
&agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs{
AuthorizingClaimMatchValue: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs{
ClaimMatchValue: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs{
MatchValueString: pulumi.String("authorized-user"),
},
ClaimMatchOperator: pulumi.String("EQUALS"),
},
InboundTokenClaimName: pulumi.String("sub"),
InboundTokenClaimValueType: pulumi.String("STRING"),
},
},
DiscoveryUrl: pulumi.String("https://example.com/.well-known/openid-configuration"),
AllowedAudiences: pulumi.StringArray{
pulumi.String("https://api.example.com"),
},
AllowedClients: pulumi.StringArray{
pulumi.String("client-id-1"),
},
AllowedScopes: pulumi.StringArray{
pulumi.String("read"),
pulumi.String("write"),
},
},
},
AuthorizerType: pulumi.String("CUSTOM_JWT"),
},
Name: pulumi.String("example-registry"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.AgentRegistry.Registry("example", new()
{
DiscoveryConfiguration = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationArgs
{
AuthorizerConfiguration = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationArgs
{
CustomJwtAuthorizer = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerArgs
{
CustomClaims = new[]
{
new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs
{
AuthorizingClaimMatchValue = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs
{
ClaimMatchValue = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs
{
MatchValueString = "authorized-user",
},
ClaimMatchOperator = "EQUALS",
},
InboundTokenClaimName = "sub",
InboundTokenClaimValueType = "STRING",
},
},
DiscoveryUrl = "https://example.com/.well-known/openid-configuration",
AllowedAudiences = new[]
{
"https://api.example.com",
},
AllowedClients = new[]
{
"client-id-1",
},
AllowedScopes = new[]
{
"read",
"write",
},
},
},
AuthorizerType = "CUSTOM_JWT",
},
Name = "example-registry",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.agentregistry.Registry;
import com.pulumi.aws.agentregistry.RegistryArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs;
import com.pulumi.aws.agentregistry.inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Registry("example", RegistryArgs.builder()
.discoveryConfiguration(RegistryDiscoveryConfigurationArgs.builder()
.authorizerConfiguration(RegistryDiscoveryConfigurationAuthorizerConfigurationArgs.builder()
.customJwtAuthorizer(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerArgs.builder()
.customClaims(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs.builder()
.authorizingClaimMatchValue(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs.builder()
.claimMatchValue(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs.builder()
.matchValueString("authorized-user")
.build())
.claimMatchOperator("EQUALS")
.build())
.inboundTokenClaimName("sub")
.inboundTokenClaimValueType("STRING")
.build())
.discoveryUrl("https://example.com/.well-known/openid-configuration")
.allowedAudiences("https://api.example.com")
.allowedClients("client-id-1")
.allowedScopes(
"read",
"write")
.build())
.build())
.authorizerType("CUSTOM_JWT")
.build())
.name("example-registry")
.build());
}
}
resources:
example:
type: aws:agentregistry:Registry
properties:
discoveryConfiguration:
authorizerConfiguration:
customJwtAuthorizer:
customClaims:
- authorizingClaimMatchValue:
claimMatchValue:
matchValueString: authorized-user
claimMatchOperator: EQUALS
inboundTokenClaimName: sub
inboundTokenClaimValueType: STRING
discoveryUrl: https://example.com/.well-known/openid-configuration
allowedAudiences:
- https://api.example.com
allowedClients:
- client-id-1
allowedScopes:
- read
- write
authorizerType: CUSTOM_JWT
name: example-registry
pulumi {
required_providers {
aws = {
source = "pulumi/aws"
}
}
}
resource "aws_agentregistry_registry" "example" {
discovery_configuration = {
authorizer_configuration = {
custom_jwt_authorizer = {
custom_claims = [{
"authorizingClaimMatchValue" = {
"claimMatchValue" = {
"matchValueString" = "authorized-user"
}
"claimMatchOperator" = "EQUALS"
}
"inboundTokenClaimName" = "sub"
"inboundTokenClaimValueType" = "STRING"
}]
discovery_url = "https://example.com/.well-known/openid-configuration"
allowed_audiences = ["https://api.example.com"]
allowed_clients = ["client-id-1"]
allowed_scopes = ["read", "write"]
}
}
authorizer_type = "CUSTOM_JWT"
}
name = "example-registry"
}
Create Registry Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Registry(name: string, args: RegistryArgs, opts?: CustomResourceOptions);@overload
def Registry(resource_name: str,
args: RegistryArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Registry(resource_name: str,
opts: Optional[ResourceOptions] = None,
discovery_configuration: Optional[RegistryDiscoveryConfigurationArgs] = None,
approval_configuration: Optional[RegistryApprovalConfigurationArgs] = None,
auto_detection_configuration: Optional[RegistryAutoDetectionConfigurationArgs] = None,
description: Optional[str] = None,
encryption_configuration: Optional[RegistryEncryptionConfigurationArgs] = None,
name: Optional[str] = None,
region: Optional[str] = None,
tags: Optional[Mapping[str, str]] = None,
timeouts: Optional[RegistryTimeoutsArgs] = None)func NewRegistry(ctx *Context, name string, args RegistryArgs, opts ...ResourceOption) (*Registry, error)public Registry(string name, RegistryArgs args, CustomResourceOptions? opts = null)
public Registry(String name, RegistryArgs args)
public Registry(String name, RegistryArgs args, CustomResourceOptions options)
type: aws:agentregistry:Registry
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "aws_agentregistry_registry" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args RegistryArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args RegistryArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args RegistryArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args RegistryArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args RegistryArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var registryResource = new Aws.AgentRegistry.Registry("registryResource", new()
{
DiscoveryConfiguration = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationArgs
{
AuthorizerType = "string",
AuthorizerConfiguration = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationArgs
{
CustomJwtAuthorizer = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerArgs
{
DiscoveryUrl = "string",
AllowedAudiences = new[]
{
"string",
},
AllowedClients = new[]
{
"string",
},
AllowedScopes = new[]
{
"string",
},
CustomClaims = new[]
{
new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs
{
AuthorizingClaimMatchValue = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs
{
ClaimMatchOperator = "string",
ClaimMatchValue = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs
{
MatchValueString = "string",
MatchValueStringLists = new[]
{
"string",
},
},
},
InboundTokenClaimName = "string",
InboundTokenClaimValueType = "string",
},
},
PrivateEndpoint = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointArgs
{
ManagedVpcResource = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResourceArgs
{
EndpointIpAddressType = "string",
SubnetIds = new[]
{
"string",
},
VpcIdentifier = "string",
RoutingDomain = "string",
SecurityGroupIds = new[]
{
"string",
},
Tags =
{
{ "string", "string" },
},
},
SelfManagedLatticeResource = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResourceArgs
{
ResourceConfigurationIdentifier = "string",
},
},
PrivateEndpointOverrides = new[]
{
new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArgs
{
Domain = "string",
PrivateEndpoint = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointArgs
{
ManagedVpcResource = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResourceArgs
{
EndpointIpAddressType = "string",
SubnetIds = new[]
{
"string",
},
VpcIdentifier = "string",
RoutingDomain = "string",
SecurityGroupIds = new[]
{
"string",
},
Tags =
{
{ "string", "string" },
},
},
SelfManagedLatticeResource = new Aws.AgentRegistry.Inputs.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResourceArgs
{
ResourceConfigurationIdentifier = "string",
},
},
},
},
},
},
},
ApprovalConfiguration = new Aws.AgentRegistry.Inputs.RegistryApprovalConfigurationArgs
{
AutoApprovalRules = new[]
{
"string",
},
},
AutoDetectionConfiguration = new Aws.AgentRegistry.Inputs.RegistryAutoDetectionConfigurationArgs
{
Enabled = false,
Scope = "string",
},
Description = "string",
EncryptionConfiguration = new Aws.AgentRegistry.Inputs.RegistryEncryptionConfigurationArgs
{
KmsKeyArn = "string",
},
Name = "string",
Region = "string",
Tags =
{
{ "string", "string" },
},
Timeouts = new Aws.AgentRegistry.Inputs.RegistryTimeoutsArgs
{
Create = "string",
Delete = "string",
Update = "string",
},
});
example, err := agentregistry.NewRegistry(ctx, "registryResource", &agentregistry.RegistryArgs{
DiscoveryConfiguration: &agentregistry.RegistryDiscoveryConfigurationArgs{
AuthorizerType: pulumi.String("string"),
AuthorizerConfiguration: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationArgs{
CustomJwtAuthorizer: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerArgs{
DiscoveryUrl: pulumi.String("string"),
AllowedAudiences: pulumi.StringArray{
pulumi.String("string"),
},
AllowedClients: pulumi.StringArray{
pulumi.String("string"),
},
AllowedScopes: pulumi.StringArray{
pulumi.String("string"),
},
CustomClaims: agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArray{
&agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs{
AuthorizingClaimMatchValue: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs{
ClaimMatchOperator: pulumi.String("string"),
ClaimMatchValue: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs{
MatchValueString: pulumi.String("string"),
MatchValueStringLists: pulumi.StringArray{
pulumi.String("string"),
},
},
},
InboundTokenClaimName: pulumi.String("string"),
InboundTokenClaimValueType: pulumi.String("string"),
},
},
PrivateEndpoint: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointArgs{
ManagedVpcResource: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResourceArgs{
EndpointIpAddressType: pulumi.String("string"),
SubnetIds: pulumi.StringArray{
pulumi.String("string"),
},
VpcIdentifier: pulumi.String("string"),
RoutingDomain: pulumi.String("string"),
SecurityGroupIds: pulumi.StringArray{
pulumi.String("string"),
},
Tags: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
SelfManagedLatticeResource: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResourceArgs{
ResourceConfigurationIdentifier: pulumi.String("string"),
},
},
PrivateEndpointOverrides: agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArray{
&agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArgs{
Domain: pulumi.String("string"),
PrivateEndpoint: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointArgs{
ManagedVpcResource: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResourceArgs{
EndpointIpAddressType: pulumi.String("string"),
SubnetIds: pulumi.StringArray{
pulumi.String("string"),
},
VpcIdentifier: pulumi.String("string"),
RoutingDomain: pulumi.String("string"),
SecurityGroupIds: pulumi.StringArray{
pulumi.String("string"),
},
Tags: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
SelfManagedLatticeResource: &agentregistry.RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResourceArgs{
ResourceConfigurationIdentifier: pulumi.String("string"),
},
},
},
},
},
},
},
ApprovalConfiguration: &agentregistry.RegistryApprovalConfigurationArgs{
AutoApprovalRules: pulumi.StringArray{
pulumi.String("string"),
},
},
AutoDetectionConfiguration: &agentregistry.RegistryAutoDetectionConfigurationArgs{
Enabled: pulumi.Bool(false),
Scope: pulumi.String("string"),
},
Description: pulumi.String("string"),
EncryptionConfiguration: &agentregistry.RegistryEncryptionConfigurationArgs{
KmsKeyArn: pulumi.String("string"),
},
Name: pulumi.String("string"),
Region: pulumi.String("string"),
Tags: pulumi.StringMap{
"string": pulumi.String("string"),
},
Timeouts: &agentregistry.RegistryTimeoutsArgs{
Create: pulumi.String("string"),
Delete: pulumi.String("string"),
Update: pulumi.String("string"),
},
})
resource "aws_agentregistry_registry" "registryResource" {
lifecycle {
create_before_destroy = true
}
discovery_configuration = {
authorizer_type = "string"
authorizer_configuration = {
custom_jwt_authorizer = {
discovery_url = "string"
allowed_audiences = ["string"]
allowed_clients = ["string"]
allowed_scopes = ["string"]
custom_claims = [{
authorizing_claim_match_value = {
claim_match_operator = "string"
claim_match_value = {
match_value_string = "string"
match_value_string_lists = ["string"]
}
}
inbound_token_claim_name = "string"
inbound_token_claim_value_type = "string"
}]
private_endpoint = {
managed_vpc_resource = {
endpoint_ip_address_type = "string"
subnet_ids = ["string"]
vpc_identifier = "string"
routing_domain = "string"
security_group_ids = ["string"]
tags = {
"string" = "string"
}
}
self_managed_lattice_resource = {
resource_configuration_identifier = "string"
}
}
private_endpoint_overrides = [{
domain = "string"
private_endpoint = {
managed_vpc_resource = {
endpoint_ip_address_type = "string"
subnet_ids = ["string"]
vpc_identifier = "string"
routing_domain = "string"
security_group_ids = ["string"]
tags = {
"string" = "string"
}
}
self_managed_lattice_resource = {
resource_configuration_identifier = "string"
}
}
}]
}
}
}
approval_configuration = {
auto_approval_rules = ["string"]
}
auto_detection_configuration = {
enabled = false
scope = "string"
}
description = "string"
encryption_configuration = {
kms_key_arn = "string"
}
name = "string"
region = "string"
tags = {
"string" = "string"
}
timeouts = {
create = "string"
delete = "string"
update = "string"
}
}
var registryResource = new com.pulumi.aws.agentregistry.Registry("registryResource", com.pulumi.aws.agentregistry.RegistryArgs.builder()
.discoveryConfiguration(RegistryDiscoveryConfigurationArgs.builder()
.authorizerType("string")
.authorizerConfiguration(RegistryDiscoveryConfigurationAuthorizerConfigurationArgs.builder()
.customJwtAuthorizer(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerArgs.builder()
.discoveryUrl("string")
.allowedAudiences("string")
.allowedClients("string")
.allowedScopes("string")
.customClaims(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs.builder()
.authorizingClaimMatchValue(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs.builder()
.claimMatchOperator("string")
.claimMatchValue(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs.builder()
.matchValueString("string")
.matchValueStringLists("string")
.build())
.build())
.inboundTokenClaimName("string")
.inboundTokenClaimValueType("string")
.build())
.privateEndpoint(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointArgs.builder()
.managedVpcResource(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResourceArgs.builder()
.endpointIpAddressType("string")
.subnetIds("string")
.vpcIdentifier("string")
.routingDomain("string")
.securityGroupIds("string")
.tags(Map.of("string", "string"))
.build())
.selfManagedLatticeResource(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResourceArgs.builder()
.resourceConfigurationIdentifier("string")
.build())
.build())
.privateEndpointOverrides(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArgs.builder()
.domain("string")
.privateEndpoint(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointArgs.builder()
.managedVpcResource(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResourceArgs.builder()
.endpointIpAddressType("string")
.subnetIds("string")
.vpcIdentifier("string")
.routingDomain("string")
.securityGroupIds("string")
.tags(Map.of("string", "string"))
.build())
.selfManagedLatticeResource(RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResourceArgs.builder()
.resourceConfigurationIdentifier("string")
.build())
.build())
.build())
.build())
.build())
.build())
.approvalConfiguration(RegistryApprovalConfigurationArgs.builder()
.autoApprovalRules("string")
.build())
.autoDetectionConfiguration(RegistryAutoDetectionConfigurationArgs.builder()
.enabled(false)
.scope("string")
.build())
.description("string")
.encryptionConfiguration(RegistryEncryptionConfigurationArgs.builder()
.kmsKeyArn("string")
.build())
.name("string")
.region("string")
.tags(Map.of("string", "string"))
.timeouts(RegistryTimeoutsArgs.builder()
.create("string")
.delete("string")
.update("string")
.build())
.build());
registry_resource = aws.agentregistry.Registry("registryResource",
discovery_configuration={
"authorizer_type": "string",
"authorizer_configuration": {
"custom_jwt_authorizer": {
"discovery_url": "string",
"allowed_audiences": ["string"],
"allowed_clients": ["string"],
"allowed_scopes": ["string"],
"custom_claims": [{
"authorizing_claim_match_value": {
"claim_match_operator": "string",
"claim_match_value": {
"match_value_string": "string",
"match_value_string_lists": ["string"],
},
},
"inbound_token_claim_name": "string",
"inbound_token_claim_value_type": "string",
}],
"private_endpoint": {
"managed_vpc_resource": {
"endpoint_ip_address_type": "string",
"subnet_ids": ["string"],
"vpc_identifier": "string",
"routing_domain": "string",
"security_group_ids": ["string"],
"tags": {
"string": "string",
},
},
"self_managed_lattice_resource": {
"resource_configuration_identifier": "string",
},
},
"private_endpoint_overrides": [{
"domain": "string",
"private_endpoint": {
"managed_vpc_resource": {
"endpoint_ip_address_type": "string",
"subnet_ids": ["string"],
"vpc_identifier": "string",
"routing_domain": "string",
"security_group_ids": ["string"],
"tags": {
"string": "string",
},
},
"self_managed_lattice_resource": {
"resource_configuration_identifier": "string",
},
},
}],
},
},
},
approval_configuration={
"auto_approval_rules": ["string"],
},
auto_detection_configuration={
"enabled": False,
"scope": "string",
},
description="string",
encryption_configuration={
"kms_key_arn": "string",
},
name="string",
region="string",
tags={
"string": "string",
},
timeouts={
"create": "string",
"delete": "string",
"update": "string",
})
const registryResource = new aws.agentregistry.Registry("registryResource", {
discoveryConfiguration: {
authorizerType: "string",
authorizerConfiguration: {
customJwtAuthorizer: {
discoveryUrl: "string",
allowedAudiences: ["string"],
allowedClients: ["string"],
allowedScopes: ["string"],
customClaims: [{
authorizingClaimMatchValue: {
claimMatchOperator: "string",
claimMatchValue: {
matchValueString: "string",
matchValueStringLists: ["string"],
},
},
inboundTokenClaimName: "string",
inboundTokenClaimValueType: "string",
}],
privateEndpoint: {
managedVpcResource: {
endpointIpAddressType: "string",
subnetIds: ["string"],
vpcIdentifier: "string",
routingDomain: "string",
securityGroupIds: ["string"],
tags: {
string: "string",
},
},
selfManagedLatticeResource: {
resourceConfigurationIdentifier: "string",
},
},
privateEndpointOverrides: [{
domain: "string",
privateEndpoint: {
managedVpcResource: {
endpointIpAddressType: "string",
subnetIds: ["string"],
vpcIdentifier: "string",
routingDomain: "string",
securityGroupIds: ["string"],
tags: {
string: "string",
},
},
selfManagedLatticeResource: {
resourceConfigurationIdentifier: "string",
},
},
}],
},
},
},
approvalConfiguration: {
autoApprovalRules: ["string"],
},
autoDetectionConfiguration: {
enabled: false,
scope: "string",
},
description: "string",
encryptionConfiguration: {
kmsKeyArn: "string",
},
name: "string",
region: "string",
tags: {
string: "string",
},
timeouts: {
create: "string",
"delete": "string",
update: "string",
},
});
type: aws:agentregistry:Registry
properties:
approvalConfiguration:
autoApprovalRules:
- string
autoDetectionConfiguration:
enabled: false
scope: string
description: string
discoveryConfiguration:
authorizerConfiguration:
customJwtAuthorizer:
allowedAudiences:
- string
allowedClients:
- string
allowedScopes:
- string
customClaims:
- authorizingClaimMatchValue:
claimMatchOperator: string
claimMatchValue:
matchValueString: string
matchValueStringLists:
- string
inboundTokenClaimName: string
inboundTokenClaimValueType: string
discoveryUrl: string
privateEndpoint:
managedVpcResource:
endpointIpAddressType: string
routingDomain: string
securityGroupIds:
- string
subnetIds:
- string
tags:
string: string
vpcIdentifier: string
selfManagedLatticeResource:
resourceConfigurationIdentifier: string
privateEndpointOverrides:
- domain: string
privateEndpoint:
managedVpcResource:
endpointIpAddressType: string
routingDomain: string
securityGroupIds:
- string
subnetIds:
- string
tags:
string: string
vpcIdentifier: string
selfManagedLatticeResource:
resourceConfigurationIdentifier: string
authorizerType: string
encryptionConfiguration:
kmsKeyArn: string
name: string
region: string
tags:
string: string
timeouts:
create: string
delete: string
update: string
Registry Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Registry resource accepts the following input properties:
- Discovery
Configuration RegistryDiscovery Configuration - Discovery configuration for the registry. See below.
- Approval
Configuration RegistryApproval Configuration - Approval configuration for registry records. See below.
- Auto
Detection RegistryConfiguration Auto Detection Configuration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- Description string
- Description of the registry. Maximum length of 4096 characters.
- Encryption
Configuration RegistryEncryption Configuration - Server-side encryption configuration for the registry. See below.
- Name string
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Dictionary<string, string>
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - Timeouts
Registry
Timeouts
- Discovery
Configuration RegistryDiscovery Configuration Args - Discovery configuration for the registry. See below.
- Approval
Configuration RegistryApproval Configuration Args - Approval configuration for registry records. See below.
- Auto
Detection RegistryConfiguration Auto Detection Configuration Args - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- Description string
- Description of the registry. Maximum length of 4096 characters.
- Encryption
Configuration RegistryEncryption Configuration Args - Server-side encryption configuration for the registry. See below.
- Name string
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- map[string]string
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - Timeouts
Registry
Timeouts Args
- discovery_
configuration object - Discovery configuration for the registry. See below.
- approval_
configuration object - Approval configuration for registry records. See below.
- auto_
detection_ objectconfiguration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description string
- Description of the registry. Maximum length of 4096 characters.
- encryption_
configuration object - Server-side encryption configuration for the registry. See below.
- name string
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- map(string)
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - timeouts object
- discovery
Configuration RegistryDiscovery Configuration - Discovery configuration for the registry. See below.
- approval
Configuration RegistryApproval Configuration - Approval configuration for registry records. See below.
- auto
Detection RegistryConfiguration Auto Detection Configuration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description String
- Description of the registry. Maximum length of 4096 characters.
- encryption
Configuration RegistryEncryption Configuration - Server-side encryption configuration for the registry. See below.
- name String
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Map<String,String>
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - timeouts
Registry
Timeouts
- discovery
Configuration RegistryDiscovery Configuration - Discovery configuration for the registry. See below.
- approval
Configuration RegistryApproval Configuration - Approval configuration for registry records. See below.
- auto
Detection RegistryConfiguration Auto Detection Configuration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description string
- Description of the registry. Maximum length of 4096 characters.
- encryption
Configuration RegistryEncryption Configuration - Server-side encryption configuration for the registry. See below.
- name string
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- {[key: string]: string}
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - timeouts
Registry
Timeouts
- discovery_
configuration RegistryDiscovery Configuration Args - Discovery configuration for the registry. See below.
- approval_
configuration RegistryApproval Configuration Args - Approval configuration for registry records. See below.
- auto_
detection_ Registryconfiguration Auto Detection Configuration Args - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description str
- Description of the registry. Maximum length of 4096 characters.
- encryption_
configuration RegistryEncryption Configuration Args - Server-side encryption configuration for the registry. See below.
- name str
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region str
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Mapping[str, str]
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - timeouts
Registry
Timeouts Args
- discovery
Configuration Property Map - Discovery configuration for the registry. See below.
- approval
Configuration Property Map - Approval configuration for registry records. See below.
- auto
Detection Property MapConfiguration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description String
- Description of the registry. Maximum length of 4096 characters.
- encryption
Configuration Property Map - Server-side encryption configuration for the registry. See below.
- name String
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Map<String>
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - timeouts Property Map
Outputs
All input properties are implicitly available as output properties. Additionally, the Registry resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Registry
Arn string - ARN of the registry.
- Registry
Id string - Unique identifier of the registry.
- Dictionary<string, string>
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block.
- Id string
- The provider-assigned unique ID for this managed resource.
- Registry
Arn string - ARN of the registry.
- Registry
Id string - Unique identifier of the registry.
- map[string]string
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block.
- id string
- The provider-assigned unique ID for this managed resource.
- registry_
arn string - ARN of the registry.
- registry_
id string - Unique identifier of the registry.
- map(string)
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block.
- id String
- The provider-assigned unique ID for this managed resource.
- registry
Arn String - ARN of the registry.
- registry
Id String - Unique identifier of the registry.
- Map<String,String>
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block.
- id string
- The provider-assigned unique ID for this managed resource.
- registry
Arn string - ARN of the registry.
- registry
Id string - Unique identifier of the registry.
- {[key: string]: string}
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block.
- id str
- The provider-assigned unique ID for this managed resource.
- registry_
arn str - ARN of the registry.
- registry_
id str - Unique identifier of the registry.
- Mapping[str, str]
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block.
- id String
- The provider-assigned unique ID for this managed resource.
- registry
Arn String - ARN of the registry.
- registry
Id String - Unique identifier of the registry.
- Map<String>
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block.
Look up Existing Registry Resource
Get an existing Registry resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: RegistryState, opts?: CustomResourceOptions): Registry@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
approval_configuration: Optional[RegistryApprovalConfigurationArgs] = None,
auto_detection_configuration: Optional[RegistryAutoDetectionConfigurationArgs] = None,
description: Optional[str] = None,
discovery_configuration: Optional[RegistryDiscoveryConfigurationArgs] = None,
encryption_configuration: Optional[RegistryEncryptionConfigurationArgs] = None,
name: Optional[str] = None,
region: Optional[str] = None,
registry_arn: Optional[str] = None,
registry_id: Optional[str] = None,
tags: Optional[Mapping[str, str]] = None,
tags_all: Optional[Mapping[str, str]] = None,
timeouts: Optional[RegistryTimeoutsArgs] = None) -> Registryfunc GetRegistry(ctx *Context, name string, id IDInput, state *RegistryState, opts ...ResourceOption) (*Registry, error)public static Registry Get(string name, Input<string> id, RegistryState? state, CustomResourceOptions? opts = null)public static Registry get(String name, Output<String> id, RegistryState state, CustomResourceOptions options)resources: _: type: aws:agentregistry:Registry get: id: ${id}import {
to = aws_agentregistry_registry.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Approval
Configuration RegistryApproval Configuration - Approval configuration for registry records. See below.
- Auto
Detection RegistryConfiguration Auto Detection Configuration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- Description string
- Description of the registry. Maximum length of 4096 characters.
- Discovery
Configuration RegistryDiscovery Configuration - Discovery configuration for the registry. See below.
- Encryption
Configuration RegistryEncryption Configuration - Server-side encryption configuration for the registry. See below.
- Name string
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Registry
Arn string - ARN of the registry.
- Registry
Id string - Unique identifier of the registry.
- Dictionary<string, string>
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - Dictionary<string, string>
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block. - Timeouts
Registry
Timeouts
- Approval
Configuration RegistryApproval Configuration Args - Approval configuration for registry records. See below.
- Auto
Detection RegistryConfiguration Auto Detection Configuration Args - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- Description string
- Description of the registry. Maximum length of 4096 characters.
- Discovery
Configuration RegistryDiscovery Configuration Args - Discovery configuration for the registry. See below.
- Encryption
Configuration RegistryEncryption Configuration Args - Server-side encryption configuration for the registry. See below.
- Name string
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Registry
Arn string - ARN of the registry.
- Registry
Id string - Unique identifier of the registry.
- map[string]string
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - map[string]string
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block. - Timeouts
Registry
Timeouts Args
- approval_
configuration object - Approval configuration for registry records. See below.
- auto_
detection_ objectconfiguration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description string
- Description of the registry. Maximum length of 4096 characters.
- discovery_
configuration object - Discovery configuration for the registry. See below.
- encryption_
configuration object - Server-side encryption configuration for the registry. See below.
- name string
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- registry_
arn string - ARN of the registry.
- registry_
id string - Unique identifier of the registry.
- map(string)
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - map(string)
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block. - timeouts object
- approval
Configuration RegistryApproval Configuration - Approval configuration for registry records. See below.
- auto
Detection RegistryConfiguration Auto Detection Configuration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description String
- Description of the registry. Maximum length of 4096 characters.
- discovery
Configuration RegistryDiscovery Configuration - Discovery configuration for the registry. See below.
- encryption
Configuration RegistryEncryption Configuration - Server-side encryption configuration for the registry. See below.
- name String
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- registry
Arn String - ARN of the registry.
- registry
Id String - Unique identifier of the registry.
- Map<String,String>
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - Map<String,String>
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block. - timeouts
Registry
Timeouts
- approval
Configuration RegistryApproval Configuration - Approval configuration for registry records. See below.
- auto
Detection RegistryConfiguration Auto Detection Configuration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description string
- Description of the registry. Maximum length of 4096 characters.
- discovery
Configuration RegistryDiscovery Configuration - Discovery configuration for the registry. See below.
- encryption
Configuration RegistryEncryption Configuration - Server-side encryption configuration for the registry. See below.
- name string
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- registry
Arn string - ARN of the registry.
- registry
Id string - Unique identifier of the registry.
- {[key: string]: string}
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - {[key: string]: string}
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block. - timeouts
Registry
Timeouts
- approval_
configuration RegistryApproval Configuration Args - Approval configuration for registry records. See below.
- auto_
detection_ Registryconfiguration Auto Detection Configuration Args - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description str
- Description of the registry. Maximum length of 4096 characters.
- discovery_
configuration RegistryDiscovery Configuration Args - Discovery configuration for the registry. See below.
- encryption_
configuration RegistryEncryption Configuration Args - Server-side encryption configuration for the registry. See below.
- name str
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region str
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- registry_
arn str - ARN of the registry.
- registry_
id str - Unique identifier of the registry.
- Mapping[str, str]
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - Mapping[str, str]
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block. - timeouts
Registry
Timeouts Args
- approval
Configuration Property Map - Approval configuration for registry records. See below.
- auto
Detection Property MapConfiguration - Auto-detection configuration for the registry. When provided, the registry is automatically populated with resources discovered according to the configuration. See below.
- description String
- Description of the registry. Maximum length of 4096 characters.
- discovery
Configuration Property Map - Discovery configuration for the registry. See below.
- encryption
Configuration Property Map - Server-side encryption configuration for the registry. See below.
- name String
Name of the registry. Must start with a letter or digit. Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen), . (dot), and / (forward slash). The name can have up to 64 characters.
The following arguments are optional:
- region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- registry
Arn String - ARN of the registry.
- registry
Id String - Unique identifier of the registry.
- Map<String>
- Map of tags assigned to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level. - Map<String>
- Map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block. - timeouts Property Map
Supporting Types
RegistryApprovalConfiguration, RegistryApprovalConfigurationArgs
- Auto
Approval List<string>Rules - Set of rules that determine which registry records are automatically approved on submission. Valid values:
APPROVE_ALL. When omitted or empty, submitted records require manual review.
- Auto
Approval []stringRules - Set of rules that determine which registry records are automatically approved on submission. Valid values:
APPROVE_ALL. When omitted or empty, submitted records require manual review.
- auto_
approval_ list(string)rules - Set of rules that determine which registry records are automatically approved on submission. Valid values:
APPROVE_ALL. When omitted or empty, submitted records require manual review.
- auto
Approval List<String>Rules - Set of rules that determine which registry records are automatically approved on submission. Valid values:
APPROVE_ALL. When omitted or empty, submitted records require manual review.
- auto
Approval string[]Rules - Set of rules that determine which registry records are automatically approved on submission. Valid values:
APPROVE_ALL. When omitted or empty, submitted records require manual review.
- auto_
approval_ Sequence[str]rules - Set of rules that determine which registry records are automatically approved on submission. Valid values:
APPROVE_ALL. When omitted or empty, submitted records require manual review.
- auto
Approval List<String>Rules - Set of rules that determine which registry records are automatically approved on submission. Valid values:
APPROVE_ALL. When omitted or empty, submitted records require manual review.
RegistryAutoDetectionConfiguration, RegistryAutoDetectionConfigurationArgs
RegistryDiscoveryConfiguration, RegistryDiscoveryConfigurationArgs
- string
- Type of authorizer that controls how consumers access the registry's search and MCP invoke operations. Valid values:
AWS_IAM,CUSTOM_JWT. -
Registry
Discovery Configuration Authorizer Configuration - Authorizer configuration for the registry. Required when
authorizerTypeisCUSTOM_JWT. See below.
- string
- Type of authorizer that controls how consumers access the registry's search and MCP invoke operations. Valid values:
AWS_IAM,CUSTOM_JWT. -
Registry
Discovery Configuration Authorizer Configuration - Authorizer configuration for the registry. Required when
authorizerTypeisCUSTOM_JWT. See below.
- string
- Type of authorizer that controls how consumers access the registry's search and MCP invoke operations. Valid values:
AWS_IAM,CUSTOM_JWT. - object
- Authorizer configuration for the registry. Required when
authorizerTypeisCUSTOM_JWT. See below.
- String
- Type of authorizer that controls how consumers access the registry's search and MCP invoke operations. Valid values:
AWS_IAM,CUSTOM_JWT. -
Registry
Discovery Configuration Authorizer Configuration - Authorizer configuration for the registry. Required when
authorizerTypeisCUSTOM_JWT. See below.
- string
- Type of authorizer that controls how consumers access the registry's search and MCP invoke operations. Valid values:
AWS_IAM,CUSTOM_JWT. -
Registry
Discovery Configuration Authorizer Configuration - Authorizer configuration for the registry. Required when
authorizerTypeisCUSTOM_JWT. See below.
- str
- Type of authorizer that controls how consumers access the registry's search and MCP invoke operations. Valid values:
AWS_IAM,CUSTOM_JWT. -
Registry
Discovery Configuration Authorizer Configuration - Authorizer configuration for the registry. Required when
authorizerTypeisCUSTOM_JWT. See below.
- String
- Type of authorizer that controls how consumers access the registry's search and MCP invoke operations. Valid values:
AWS_IAM,CUSTOM_JWT. - Property Map
- Authorizer configuration for the registry. Required when
authorizerTypeisCUSTOM_JWT. See below.
RegistryDiscoveryConfigurationAuthorizerConfiguration, RegistryDiscoveryConfigurationAuthorizerConfigurationArgs
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer - Configuration for a custom JWT authorizer.
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer - Configuration for a custom JWT authorizer.
- object
- Configuration for a custom JWT authorizer.
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer - Configuration for a custom JWT authorizer.
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer - Configuration for a custom JWT authorizer.
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer - Configuration for a custom JWT authorizer.
- Property Map
- Configuration for a custom JWT authorizer.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizer, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerArgs
- Discovery
Url string - OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
- Allowed
Audiences List<string> - Audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
- Allowed
Clients List<string> - Client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
- Allowed
Scopes List<string> - Scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
- Custom
Claims List<RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim> - Custom claims for additional JWT validation beyond standard OIDC claims. See below.
- Private
Endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint - Private endpoint used to reach the identity provider's discovery URL over a private network path. See below.
- Private
Endpoint List<RegistryOverrides Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override> - Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints. See below.
- Discovery
Url string - OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
- Allowed
Audiences []string - Audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
- Allowed
Clients []string - Client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
- Allowed
Scopes []string - Scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
- Custom
Claims []RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim - Custom claims for additional JWT validation beyond standard OIDC claims. See below.
- Private
Endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint - Private endpoint used to reach the identity provider's discovery URL over a private network path. See below.
- Private
Endpoint []RegistryOverrides Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override - Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints. See below.
- discovery_
url string - OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
- allowed_
audiences list(string) - Audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
- allowed_
clients list(string) - Client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
- allowed_
scopes list(string) - Scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
- custom_
claims list(object) - Custom claims for additional JWT validation beyond standard OIDC claims. See below.
- private_
endpoint object - Private endpoint used to reach the identity provider's discovery URL over a private network path. See below.
- private_
endpoint_ list(object)overrides - Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints. See below.
- discovery
Url String - OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
- allowed
Audiences List<String> - Audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
- allowed
Clients List<String> - Client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
- allowed
Scopes List<String> - Scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
- custom
Claims List<RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim> - Custom claims for additional JWT validation beyond standard OIDC claims. See below.
- private
Endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint - Private endpoint used to reach the identity provider's discovery URL over a private network path. See below.
- private
Endpoint List<RegistryOverrides Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override> - Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints. See below.
- discovery
Url string - OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
- allowed
Audiences string[] - Audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
- allowed
Clients string[] - Client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
- allowed
Scopes string[] - Scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
- custom
Claims RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim[] - Custom claims for additional JWT validation beyond standard OIDC claims. See below.
- private
Endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint - Private endpoint used to reach the identity provider's discovery URL over a private network path. See below.
- private
Endpoint RegistryOverrides Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override[] - Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints. See below.
- discovery_
url str - OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
- allowed_
audiences Sequence[str] - Audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
- allowed_
clients Sequence[str] - Client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
- allowed_
scopes Sequence[str] - Scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
- custom_
claims Sequence[RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim] - Custom claims for additional JWT validation beyond standard OIDC claims. See below.
- private_
endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint - Private endpoint used to reach the identity provider's discovery URL over a private network path. See below.
- private_
endpoint_ Sequence[Registryoverrides Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override] - Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints. See below.
- discovery
Url String - OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
- allowed
Audiences List<String> - Audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
- allowed
Clients List<String> - Client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
- allowed
Scopes List<String> - Scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
- custom
Claims List<Property Map> - Custom claims for additional JWT validation beyond standard OIDC claims. See below.
- private
Endpoint Property Map - Private endpoint used to reach the identity provider's discovery URL over a private network path. See below.
- private
Endpoint List<Property Map>Overrides - Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints. See below.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaim, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value - Claim match criteria. See below.
- Inbound
Token stringClaim Name - Name of the claim to validate in the inbound JWT token. Must contain only letters, numbers, and the characters
_,.,-,:. - Inbound
Token stringClaim Value Type - Type of the claim value. Valid values:
STRING,STRING_ARRAY.
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value - Claim match criteria. See below.
- Inbound
Token stringClaim Name - Name of the claim to validate in the inbound JWT token. Must contain only letters, numbers, and the characters
_,.,-,:. - Inbound
Token stringClaim Value Type - Type of the claim value. Valid values:
STRING,STRING_ARRAY.
- object
- Claim match criteria. See below.
- inbound_
token_ stringclaim_ name - Name of the claim to validate in the inbound JWT token. Must contain only letters, numbers, and the characters
_,.,-,:. - inbound_
token_ stringclaim_ value_ type - Type of the claim value. Valid values:
STRING,STRING_ARRAY.
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value - Claim match criteria. See below.
- inbound
Token StringClaim Name - Name of the claim to validate in the inbound JWT token. Must contain only letters, numbers, and the characters
_,.,-,:. - inbound
Token StringClaim Value Type - Type of the claim value. Valid values:
STRING,STRING_ARRAY.
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value - Claim match criteria. See below.
- inbound
Token stringClaim Name - Name of the claim to validate in the inbound JWT token. Must contain only letters, numbers, and the characters
_,.,-,:. - inbound
Token stringClaim Value Type - Type of the claim value. Valid values:
STRING,STRING_ARRAY.
-
Registry
Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value - Claim match criteria. See below.
- inbound_
token_ strclaim_ name - Name of the claim to validate in the inbound JWT token. Must contain only letters, numbers, and the characters
_,.,-,:. - inbound_
token_ strclaim_ value_ type - Type of the claim value. Valid values:
STRING,STRING_ARRAY.
- Property Map
- Claim match criteria. See below.
- inbound
Token StringClaim Name - Name of the claim to validate in the inbound JWT token. Must contain only letters, numbers, and the characters
_,.,-,:. - inbound
Token StringClaim Value Type - Type of the claim value. Valid values:
STRING,STRING_ARRAY.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValue, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs
- Claim
Match stringOperator - Operator used to match claim values. Valid values:
EQUALS,CONTAINS,CONTAINS_ANY. - Claim
Match RegistryValue Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value Claim Match Value - Value to match against. See below.
- Claim
Match stringOperator - Operator used to match claim values. Valid values:
EQUALS,CONTAINS,CONTAINS_ANY. - Claim
Match RegistryValue Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value Claim Match Value - Value to match against. See below.
- claim_
match_ stringoperator - Operator used to match claim values. Valid values:
EQUALS,CONTAINS,CONTAINS_ANY. - claim_
match_ objectvalue - Value to match against. See below.
- claim
Match StringOperator - Operator used to match claim values. Valid values:
EQUALS,CONTAINS,CONTAINS_ANY. - claim
Match RegistryValue Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value Claim Match Value - Value to match against. See below.
- claim
Match stringOperator - Operator used to match claim values. Valid values:
EQUALS,CONTAINS,CONTAINS_ANY. - claim
Match RegistryValue Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value Claim Match Value - Value to match against. See below.
- claim_
match_ stroperator - Operator used to match claim values. Valid values:
EQUALS,CONTAINS,CONTAINS_ANY. - claim_
match_ Registryvalue Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Custom Claim Authorizing Claim Match Value Claim Match Value - Value to match against. See below.
- claim
Match StringOperator - Operator used to match claim values. Valid values:
EQUALS,CONTAINS,CONTAINS_ANY. - claim
Match Property MapValue - Value to match against. See below.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValue, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs
- Match
Value stringString - Single string value to match. Must contain only letters, numbers, and the characters
_,.,-,:. - Match
Value List<string>String Lists - Set of string values to match. Each value must contain only letters, numbers, and the characters
_,.,-,:.
- Match
Value stringString - Single string value to match. Must contain only letters, numbers, and the characters
_,.,-,:. - Match
Value []stringString Lists - Set of string values to match. Each value must contain only letters, numbers, and the characters
_,.,-,:.
- match_
value_ stringstring - Single string value to match. Must contain only letters, numbers, and the characters
_,.,-,:. - match_
value_ list(string)string_ lists - Set of string values to match. Each value must contain only letters, numbers, and the characters
_,.,-,:.
- match
Value StringString - Single string value to match. Must contain only letters, numbers, and the characters
_,.,-,:. - match
Value List<String>String Lists - Set of string values to match. Each value must contain only letters, numbers, and the characters
_,.,-,:.
- match
Value stringString - Single string value to match. Must contain only letters, numbers, and the characters
_,.,-,:. - match
Value string[]String Lists - Set of string values to match. Each value must contain only letters, numbers, and the characters
_,.,-,:.
- match_
value_ strstring - Single string value to match. Must contain only letters, numbers, and the characters
_,.,-,:. - match_
value_ Sequence[str]string_ lists - Set of string values to match. Each value must contain only letters, numbers, and the characters
_,.,-,:.
- match
Value StringString - Single string value to match. Must contain only letters, numbers, and the characters
_,.,-,:. - match
Value List<String>String Lists - Set of string values to match. Each value must contain only letters, numbers, and the characters
_,.,-,:.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpoint, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointArgs
- Managed
Vpc RegistryResource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- Self
Managed RegistryLattice Resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- Managed
Vpc RegistryResource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- Self
Managed RegistryLattice Resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed_
vpc_ objectresource - Private endpoint backed by a service-managed VPC resource. See below.
- self_
managed_ objectlattice_ resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed
Vpc RegistryResource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- self
Managed RegistryLattice Resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed
Vpc RegistryResource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- self
Managed RegistryLattice Resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed_
vpc_ Registryresource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- self_
managed_ Registrylattice_ resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed
Vpc Property MapResource - Private endpoint backed by a service-managed VPC resource. See below.
- self
Managed Property MapLattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResource, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResourceArgs
- Endpoint
Ip stringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - Subnet
Ids List<string> - IDs of the subnets in which the private endpoint network interfaces are placed.
- Vpc
Identifier string - ID of the VPC in which the private endpoint is provisioned.
- Routing
Domain string - Routing domain used to resolve traffic through the private endpoint.
- Security
Group List<string>Ids - IDs of the security groups associated with the private endpoint network interfaces.
- Dictionary<string, string>
- Tags applied to the service-managed VPC resource.
- Endpoint
Ip stringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - Subnet
Ids []string - IDs of the subnets in which the private endpoint network interfaces are placed.
- Vpc
Identifier string - ID of the VPC in which the private endpoint is provisioned.
- Routing
Domain string - Routing domain used to resolve traffic through the private endpoint.
- Security
Group []stringIds - IDs of the security groups associated with the private endpoint network interfaces.
- map[string]string
- Tags applied to the service-managed VPC resource.
- endpoint_
ip_ stringaddress_ type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet_
ids list(string) - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc_
identifier string - ID of the VPC in which the private endpoint is provisioned.
- routing_
domain string - Routing domain used to resolve traffic through the private endpoint.
- security_
group_ list(string)ids - IDs of the security groups associated with the private endpoint network interfaces.
- map(string)
- Tags applied to the service-managed VPC resource.
- endpoint
Ip StringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet
Ids List<String> - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc
Identifier String - ID of the VPC in which the private endpoint is provisioned.
- routing
Domain String - Routing domain used to resolve traffic through the private endpoint.
- security
Group List<String>Ids - IDs of the security groups associated with the private endpoint network interfaces.
- Map<String,String>
- Tags applied to the service-managed VPC resource.
- endpoint
Ip stringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet
Ids string[] - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc
Identifier string - ID of the VPC in which the private endpoint is provisioned.
- routing
Domain string - Routing domain used to resolve traffic through the private endpoint.
- security
Group string[]Ids - IDs of the security groups associated with the private endpoint network interfaces.
- {[key: string]: string}
- Tags applied to the service-managed VPC resource.
- endpoint_
ip_ straddress_ type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet_
ids Sequence[str] - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc_
identifier str - ID of the VPC in which the private endpoint is provisioned.
- routing_
domain str - Routing domain used to resolve traffic through the private endpoint.
- security_
group_ Sequence[str]ids - IDs of the security groups associated with the private endpoint network interfaces.
- Mapping[str, str]
- Tags applied to the service-managed VPC resource.
- endpoint
Ip StringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet
Ids List<String> - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc
Identifier String - ID of the VPC in which the private endpoint is provisioned.
- routing
Domain String - Routing domain used to resolve traffic through the private endpoint.
- security
Group List<String>Ids - IDs of the security groups associated with the private endpoint network interfaces.
- Map<String>
- Tags applied to the service-managed VPC resource.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverride, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArgs
- Domain string
- Domain name to which this private endpoint override applies.
- Private
Endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint - Private endpoint used to reach the specified domain. See above.
- Domain string
- Domain name to which this private endpoint override applies.
- Private
Endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint - Private endpoint used to reach the specified domain. See above.
- domain string
- Domain name to which this private endpoint override applies.
- private_
endpoint object - Private endpoint used to reach the specified domain. See above.
- domain String
- Domain name to which this private endpoint override applies.
- private
Endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint - Private endpoint used to reach the specified domain. See above.
- domain string
- Domain name to which this private endpoint override applies.
- private
Endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint - Private endpoint used to reach the specified domain. See above.
- domain str
- Domain name to which this private endpoint override applies.
- private_
endpoint RegistryDiscovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint - Private endpoint used to reach the specified domain. See above.
- domain String
- Domain name to which this private endpoint override applies.
- private
Endpoint Property Map - Private endpoint used to reach the specified domain. See above.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpoint, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointArgs
- Managed
Vpc RegistryResource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- Self
Managed RegistryLattice Resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- Managed
Vpc RegistryResource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- Self
Managed RegistryLattice Resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed_
vpc_ objectresource - Private endpoint backed by a service-managed VPC resource. See below.
- self_
managed_ objectlattice_ resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed
Vpc RegistryResource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- self
Managed RegistryLattice Resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed
Vpc RegistryResource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- self
Managed RegistryLattice Resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed_
vpc_ Registryresource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Managed Vpc Resource - Private endpoint backed by a service-managed VPC resource. See below.
- self_
managed_ Registrylattice_ resource Discovery Configuration Authorizer Configuration Custom Jwt Authorizer Private Endpoint Override Private Endpoint Self Managed Lattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
- managed
Vpc Property MapResource - Private endpoint backed by a service-managed VPC resource. See below.
- self
Managed Property MapLattice Resource - Private endpoint backed by a self-managed VPC Lattice resource configuration. See below.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResource, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResourceArgs
- Endpoint
Ip stringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - Subnet
Ids List<string> - IDs of the subnets in which the private endpoint network interfaces are placed.
- Vpc
Identifier string - ID of the VPC in which the private endpoint is provisioned.
- Routing
Domain string - Routing domain used to resolve traffic through the private endpoint.
- Security
Group List<string>Ids - IDs of the security groups associated with the private endpoint network interfaces.
- Dictionary<string, string>
- Tags applied to the service-managed VPC resource.
- Endpoint
Ip stringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - Subnet
Ids []string - IDs of the subnets in which the private endpoint network interfaces are placed.
- Vpc
Identifier string - ID of the VPC in which the private endpoint is provisioned.
- Routing
Domain string - Routing domain used to resolve traffic through the private endpoint.
- Security
Group []stringIds - IDs of the security groups associated with the private endpoint network interfaces.
- map[string]string
- Tags applied to the service-managed VPC resource.
- endpoint_
ip_ stringaddress_ type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet_
ids list(string) - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc_
identifier string - ID of the VPC in which the private endpoint is provisioned.
- routing_
domain string - Routing domain used to resolve traffic through the private endpoint.
- security_
group_ list(string)ids - IDs of the security groups associated with the private endpoint network interfaces.
- map(string)
- Tags applied to the service-managed VPC resource.
- endpoint
Ip StringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet
Ids List<String> - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc
Identifier String - ID of the VPC in which the private endpoint is provisioned.
- routing
Domain String - Routing domain used to resolve traffic through the private endpoint.
- security
Group List<String>Ids - IDs of the security groups associated with the private endpoint network interfaces.
- Map<String,String>
- Tags applied to the service-managed VPC resource.
- endpoint
Ip stringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet
Ids string[] - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc
Identifier string - ID of the VPC in which the private endpoint is provisioned.
- routing
Domain string - Routing domain used to resolve traffic through the private endpoint.
- security
Group string[]Ids - IDs of the security groups associated with the private endpoint network interfaces.
- {[key: string]: string}
- Tags applied to the service-managed VPC resource.
- endpoint_
ip_ straddress_ type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet_
ids Sequence[str] - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc_
identifier str - ID of the VPC in which the private endpoint is provisioned.
- routing_
domain str - Routing domain used to resolve traffic through the private endpoint.
- security_
group_ Sequence[str]ids - IDs of the security groups associated with the private endpoint network interfaces.
- Mapping[str, str]
- Tags applied to the service-managed VPC resource.
- endpoint
Ip StringAddress Type - IP address type used by the private endpoint, either
IPV4orIPV6. - subnet
Ids List<String> - IDs of the subnets in which the private endpoint network interfaces are placed.
- vpc
Identifier String - ID of the VPC in which the private endpoint is provisioned.
- routing
Domain String - Routing domain used to resolve traffic through the private endpoint.
- security
Group List<String>Ids - IDs of the security groups associated with the private endpoint network interfaces.
- Map<String>
- Tags applied to the service-managed VPC resource.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResource, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResourceArgs
- Resource
Configuration stringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- Resource
Configuration stringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource_
configuration_ stringidentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource
Configuration StringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource
Configuration stringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource_
configuration_ stridentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource
Configuration StringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResource, RegistryDiscoveryConfigurationAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResourceArgs
- Resource
Configuration stringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- Resource
Configuration stringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource_
configuration_ stringidentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource
Configuration StringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource
Configuration stringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource_
configuration_ stridentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
- resource
Configuration StringIdentifier - Identifier of the VPC Lattice resource configuration, specified as a resource configuration ID or ARN.
RegistryEncryptionConfiguration, RegistryEncryptionConfigurationArgs
- Kms
Key stringArn - ARN of the customer-managed AWS KMS key used to encrypt the registry's content.
- Kms
Key stringArn - ARN of the customer-managed AWS KMS key used to encrypt the registry's content.
- kms_
key_ stringarn - ARN of the customer-managed AWS KMS key used to encrypt the registry's content.
- kms
Key StringArn - ARN of the customer-managed AWS KMS key used to encrypt the registry's content.
- kms
Key stringArn - ARN of the customer-managed AWS KMS key used to encrypt the registry's content.
- kms_
key_ strarn - ARN of the customer-managed AWS KMS key used to encrypt the registry's content.
- kms
Key StringArn - ARN of the customer-managed AWS KMS key used to encrypt the registry's content.
RegistryTimeouts, RegistryTimeoutsArgs
- Create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- Delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- Update string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- Create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- Delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- Update string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- update string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- update String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- update string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- update str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- create String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- update String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
Import
Identity Schema
Required
registryId(String) Registry ID.
Optional
accountId(String) AWS Account where this resource is managed.region(String) Region where this resource is managed.
Using pulumi import, import an Agent Registry Registry by registry ID. For example:
$ pulumi import aws:agentregistry/registry:Registry example registry-id-12345678
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- AWS Classic pulumi/pulumi-aws
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
awsTerraform Provider.
Viewing docs for AWS v7.50.0
published on Thursday, Oct 8, 2026 by Pulumi
published on Thursday, Oct 8, 2026 by Pulumi