---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_sso_trusted_token_issuer{% #aws_sso_trusted_token_issuer %}

## `account_id`{% #account_id %}

**Type**: `STRING`

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `Name`**Description**: The name of the trusted token issuer configuration in the instance of IAM Identity Center.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `trusted_token_issuer_arn`{% #trusted_token_issuer_arn %}

**Type**: `STRING`**Provider name**: `TrustedTokenIssuerArn`**Description**: The ARN of the trusted token issuer configuration in the instance of IAM Identity Center.

## `trusted_token_issuer_configuration`{% #trusted_token_issuer_configuration %}

**Type**: `STRUCT`**Provider name**: `TrustedTokenIssuerConfiguration`**Description**: A structure the describes the settings that apply of this trusted token issuer.

- `oidc_jwt_configuration`**Type**: `STRUCT`**Provider name**: `OidcJwtConfiguration`**Description**: A structure that describes the settings for a trusted token issuer that works with OpenID Connect (OIDC) by using JSON Web Tokens (JWT).
  - `claim_attribute_path`**Type**: `STRING`**Provider name**: `ClaimAttributePath`**Description**: The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by this JMESPath expression is compared against the attribute mapped by `IdentityStoreAttributePath` when a trusted token issuer token is exchanged for an IAM Identity Center token.
  - `identity_store_attribute_path`**Type**: `STRING`**Provider name**: `IdentityStoreAttributePath`**Description**: The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by `ClaimAttributePath` when a trusted token issuer token is exchanged for an IAM Identity Center token.
  - `issuer_url`**Type**: `STRING`**Provider name**: `IssuerUrl`**Description**: The URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain the information required to verify the tokens that the trusted token issuer generates.
  - `jwks_retrieval_option`**Type**: `STRING`**Provider name**: `JwksRetrievalOption`**Description**: The method that the trusted token issuer can use to retrieve the JSON Web Key Set used to verify a JWT.

## `trusted_token_issuer_type`{% #trusted_token_issuer_type %}

**Type**: `STRING`**Provider name**: `TrustedTokenIssuerType`**Description**: The type of trusted token issuer.