aws_sso_trusted_token_issuer

account_id

Type: STRING

name

Type: STRING
Provider name: Name
Description: The name of the trusted token issuer configuration in the instance of IAM Identity Center.

tags

Type: UNORDERED_LIST_STRING

trusted_token_issuer_arn

Type: STRING
Provider name: TrustedTokenIssuerArn
Description: The ARN of the trusted token issuer configuration in the instance of IAM Identity Center.

trusted_token_issuer_configuration

Type: STRUCT
Provider name: TrustedTokenIssuerConfiguration
Description: A structure the describes the settings that apply of this trusted token issuer.

• oidc_jwt_configuration
  Type: STRUCT
  Provider name: OidcJwtConfiguration
  Description: A structure that describes the settings for a trusted token issuer that works with OpenID Connect (OIDC) by using JSON Web Tokens (JWT).
  
  • claim_attribute_path
    Type: STRING
    Provider name: ClaimAttributePath
    Description: The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by this JMESPath expression is compared against the attribute mapped by IdentityStoreAttributePath when a trusted token issuer token is exchanged for an IAM Identity Center token.
    
  • identity_store_attribute_path
    Type: STRING
    Provider name: IdentityStoreAttributePath
    Description: The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by ClaimAttributePath when a trusted token issuer token is exchanged for an IAM Identity Center token.
    
  • issuer_url
    Type: STRING
    Provider name: IssuerUrl
    Description: The URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain the information required to verify the tokens that the trusted token issuer generates.
    
  • jwks_retrieval_option
    Type: STRING
    Provider name: JwksRetrievalOption
    Description: The method that the trusted token issuer can use to retrieve the JSON Web Key Set used to verify a JWT.
    

trusted_token_issuer_type

Type: STRING
Provider name: TrustedTokenIssuerType
Description: The type of trusted token issuer.