AWS::DevOpsAgent::Service AzureIdentityServiceDetails - AWS CloudFormation
SyntaxProperties
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::DevOpsAgent::Service AzureIdentityServiceDetails

Configuration details for registering an Azure identity using federated identity credentials.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "ClientId" : String,
  "TenantId" : String,
  "WebIdentityRoleArn" : String,
  "WebIdentityTokenAudiences" : [ String, ... ]
}

YAML

  ClientId: String
  TenantId: String
  WebIdentityRoleArn: String
  WebIdentityTokenAudiences: 
    - String

Properties

ClientId

The application (client) ID of the Microsoft Entra application.

Required: Yes

Type: String

Pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

Update requires: No interruption

TenantId

The Microsoft Entra ID tenant identifier.

Required: Yes

Type: String

Pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

Update requires: No interruption

WebIdentityRoleArn

The ARN of the IAM role used for web identity token exchange.

Required: Yes

Type: String

Pattern: ^arn:aws[a-zA-Z-]*:iam::[0-9]{12}:role/.+$

Update requires: No interruption

WebIdentityTokenAudiences

The list of audiences for the web identity token.

Required: Yes

Type: Array of String

Minimum: 1

Update requires: No interruption