This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.
AWS::BedrockAgentCore::OAuth2CredentialProvider CustomOauth2ProviderConfigInput
Input configuration for a custom OAuth2 provider.
Syntax
To declare this entity in your CloudFormation template, use the following syntax:
JSON
{ "ClientId" :String, "ClientSecret" :String, "ClientSecretConfig" :SecretReference, "ClientSecretSource" :String, "OauthDiscovery" :Oauth2Discovery, "OnBehalfOfTokenExchangeConfig" :OnBehalfOfTokenExchangeConfig}
YAML
ClientId:StringClientSecret:StringClientSecretConfig:SecretReferenceClientSecretSource:StringOauthDiscovery:Oauth2DiscoveryOnBehalfOfTokenExchangeConfig:OnBehalfOfTokenExchangeConfig
Properties
ClientId-
The client ID for the custom OAuth2 provider.
Required: No
Type: String
Minimum:
1Maximum:
256Update requires: No interruption
ClientSecret-
The client secret for the custom OAuth2 provider.
Required: No
Type: String
Minimum:
1Maximum:
2048Update requires: No interruption
ClientSecretConfigProperty description not available.
Required: No
Type: SecretReference
Update requires: No interruption
ClientSecretSourceProperty description not available.
Required: No
Type: String
Allowed values:
MANAGED | EXTERNALUpdate requires: No interruption
OauthDiscovery-
The OAuth2 discovery information for the custom provider.
Required: Yes
Type: Oauth2Discovery
Update requires: No interruption
OnBehalfOfTokenExchangeConfig-
The configuration for on-behalf-of token exchange. This enables authentication flows that use RFC 8693 token exchange or RFC 7523 JWT authorization grants.
Required: No
Type: OnBehalfOfTokenExchangeConfig
Update requires: No interruption
