AWS::BedrockAgentCore::OAuth2CredentialProvider CustomOauth2ProviderConfigInput - AWS CloudFormation
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::BedrockAgentCore::OAuth2CredentialProvider CustomOauth2ProviderConfigInput

Input configuration for a custom OAuth2 provider.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

Properties

ClientId

The client ID for the custom OAuth2 provider.

Required: No

Type: String

Minimum: 1

Maximum: 256

Update requires: No interruption

ClientSecret

The client secret for the custom OAuth2 provider.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

OauthDiscovery

The OAuth2 discovery information for the custom provider.

Required: Yes

Type: Oauth2Discovery

Update requires: No interruption

OnBehalfOfTokenExchangeConfig

The configuration for on-behalf-of token exchange. This enables authentication flows that use RFC 8693 token exchange or RFC 7523 JWT authorization grants.

Required: No

Type: OnBehalfOfTokenExchangeConfig

Update requires: No interruption