Class: AWSCDK::Verifiedpermissions::CfnIdentitySource::OpenIdConnectGroupConfigurationProperty

Inherits:

Jsii::Struct

• Object
• Jsii::Struct
• AWSCDK::Verifiedpermissions::CfnIdentitySource::OpenIdConnectGroupConfigurationProperty

Defined in:

verifiedpermissions/cfn_identity_source.rb

Overview

The claim in OIDC identity provider tokens that indicates a user's group membership, and the entity type that you want to map it to.

For example, this object can map the contents of a groups claim to MyCorp::UserGroup .

This data type is part of a OpenIdConnectConfiguration structure, which is a parameter of CreateIdentitySource .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectgroupconfiguration.html

Instance Attribute Summary

• #group_claim ⇒ String readonly

  The token claim that you want Verified Permissions to interpret as group membership.

• #group_entity_type ⇒ String readonly

  The policy store entity type that you want to map your users' group claim to.

Class Method Summary

• .jsii_properties ⇒ Object

Instance Method Summary

• #initialize(group_claim:, group_entity_type:) ⇒ OpenIdConnectGroupConfigurationProperty constructor

  A new instance of OpenIdConnectGroupConfigurationProperty.

• #to_jsii ⇒ Object

Constructor Details

#initialize(group_claim:, group_entity_type:) ⇒ OpenIdConnectGroupConfigurationProperty

Returns a new instance of OpenIdConnectGroupConfigurationProperty.

Parameters:

• group_claim (String) —

  The token claim that you want Verified Permissions to interpret as group membership.

• group_entity_type (String) —

  The policy store entity type that you want to map your users' group claim to.

# File 'verifiedpermissions/cfn_identity_source.rb', line 889

def initialize(group_claim:, group_entity_type:)
  @group_claim = group_claim
  Jsii::Type.check_type(@group_claim, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "groupClaim")
  @group_entity_type = group_entity_type
  Jsii::Type.check_type(@group_entity_type, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "groupEntityType")
end

Instance Attribute Details

#group_claim ⇒ String (readonly)

The token claim that you want Verified Permissions to interpret as group membership.

For example, groups .

Returns:

• (String)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectgroupconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectgroupconfiguration-groupclaim

# File 'verifiedpermissions/cfn_identity_source.rb', line 902

def group_claim
  @group_claim
end

#group_entity_type ⇒ String (readonly)

The policy store entity type that you want to map your users' group claim to.

For example, MyCorp::UserGroup . A group entity type is an entity that can have a user entity type as a member.

Returns:

• (String)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-verifiedpermissions-identitysource-openidconnectgroupconfiguration.html#cfn-verifiedpermissions-identitysource-openidconnectgroupconfiguration-groupentitytype

# File 'verifiedpermissions/cfn_identity_source.rb', line 909

def group_entity_type
  @group_entity_type
end

Class Method Details

.jsii_properties ⇒ Object

# File 'verifiedpermissions/cfn_identity_source.rb', line 911

def self.jsii_properties
  {
    :group_claim => "groupClaim",
    :group_entity_type => "groupEntityType",
  }
end

Instance Method Details

#to_jsii ⇒ Object

# File 'verifiedpermissions/cfn_identity_source.rb', line 918

def to_jsii
  result = {}
  result.merge!({
    "groupClaim" => @group_claim,
    "groupEntityType" => @group_entity_type,
  })
  result.compact
end