java.lang.Object
- com.pulumi.resources.Resource
- - com.pulumi.resources.CustomResource
  - - com.pulumi.aws.iam.OpenIdConnectProvider

public class OpenIdConnectProvider
extends com.pulumi.resources.CustomResource

Provides an IAM OpenID Connect provider. ## Example Usage ### Basic Usage

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.iam.OpenIdConnectProvider;
 import com.pulumi.aws.iam.OpenIdConnectProviderArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var default_ = new OpenIdConnectProvider("default", OpenIdConnectProviderArgs.builder()
             .url("https://accounts.google.com")
             .clientIdLists("266362248691-342342xasdasdasda-apps.googleusercontent.com")
             .thumbprintLists("cf23df2207d99a74fbe169e3eba035e633b65d94")
             .build());
 
     }
 }

### Without A Thumbprint

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.iam.OpenIdConnectProvider;
 import com.pulumi.aws.iam.OpenIdConnectProviderArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var default_ = new OpenIdConnectProvider("default", OpenIdConnectProviderArgs.builder()
             .url("https://accounts.google.com")
             .clientIdLists("266362248691-342342xasdasdasda-apps.googleusercontent.com")
             .build());
 
     }
 }

## Import ### Identity Schema #### Required - `arn` (String) ARN of the IAM OpenID Connect provider. Using `pulumi import`, import IAM OpenID Connect Providers using the `arn`. For example: ```sh $ pulumi import aws:iam/openIdConnectProvider:OpenIdConnectProvider default arn:aws:iam::123456789012:oidc-provider/accounts.google.com ```

Nested Class Summary
- Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource
  com.pulumi.resources.CustomResource.CustomResourceInternal
- Nested classes/interfaces inherited from class com.pulumi.resources.Resource
  com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

Field Summary
- Fields inherited from class com.pulumi.resources.Resource
  childResources, remote

Constructor Summary

Constructors
Constructor	Description
`OpenIdConnectProvider(java.lang.String name)`
`OpenIdConnectProvider(java.lang.String name, OpenIdConnectProviderArgs args)`
`OpenIdConnectProvider(java.lang.String name, OpenIdConnectProviderArgs args, com.pulumi.resources.CustomResourceOptions options)`

Method Summary

All Methods Static Methods Instance Methods Concrete Methods
Modifier and Type	Method	Description
`com.pulumi.core.Output<java.lang.String>`	`arn()`
`com.pulumi.core.Output<java.util.List<java.lang.String>>`	`clientIdLists()`
`static OpenIdConnectProvider`	`get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, OpenIdConnectProviderState state, com.pulumi.resources.CustomResourceOptions options)`	Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
`com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>>`	`tags()`
`com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>>`	`tagsAll()`
`com.pulumi.core.Output<java.util.List<java.lang.String>>`	`thumbprintLists()`
`com.pulumi.core.Output<java.lang.String>`	`url()`

Methods inherited from class com.pulumi.resources.CustomResource
getId, id, idFuture

Methods inherited from class com.pulumi.resources.Resource
getChildResources, getResourceName, getResourceType, getUrn, pulumiChildResources, pulumiResourceName, pulumiResourceType, urn

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

- Constructor Detail
  - OpenIdConnectProvider
```
public OpenIdConnectProvider(java.lang.String name)
```
    Parameters:
    
    name - The _unique_ name of the resulting resource.
  - OpenIdConnectProvider
```
public OpenIdConnectProvider(java.lang.String name,
                             OpenIdConnectProviderArgs args)
```
    Parameters:
    
    name - The _unique_ name of the resulting resource.
    
    args - The arguments to use to populate this resource's properties.
  - OpenIdConnectProvider
```
public OpenIdConnectProvider(java.lang.String name,
                             OpenIdConnectProviderArgs args,
                             @Nullable
                             com.pulumi.resources.CustomResourceOptions options)
```
    Parameters:
    
    name - The _unique_ name of the resulting resource.
    
    args - The arguments to use to populate this resource's properties.
    
    options - A bag of options that control this resource's behavior.
- Method Detail
  - arn
```
public com.pulumi.core.Output<java.lang.String> arn()
```
    Returns:
    
    ARN assigned by AWS for this provider.
  - clientIdLists
```
public com.pulumi.core.Output<java.util.List<java.lang.String>> clientIdLists()
```
    Returns:
    
    List of client IDs (audiences) that identify the application registered with the OpenID Connect provider. This is the value sent as the `clientId` parameter in OAuth requests.
  - tags
```
public com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>> tags()
```
    Returns:
    
    Map of resource tags for the IAM OIDC provider. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
  - tagsAll
```
public com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>> tagsAll()
```
    Returns:
    
    Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
  - thumbprintLists
```
public com.pulumi.core.Output<java.util.List<java.lang.String>> thumbprintLists()
```
    Returns:
    
    List of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificate(s). For certain OIDC identity providers (e.g., Auth0, GitHub, GitLab, Google, or those using an Amazon S3-hosted JWKS endpoint), AWS relies on its own library of trusted root certificate authorities (CAs) for validation instead of using any configured thumbprints. In these cases, any configured `thumbprintList` is retained in the configuration but not used for verification. For other IdPs, if no `thumbprintList` is provided, IAM automatically retrieves and uses the top intermediate CA thumbprint from the OIDC IdP server certificate. However, if a `thumbprintList` is initially configured and later removed, Terraform does not prompt IAM to retrieve a thumbprint the same way. Instead, it continues using the original thumbprint list from the initial configuration. This differs from the behavior when creating an `aws.iam.OpenIdConnectProvider` without a `thumbprintList`.
  - url
```
public com.pulumi.core.Output<java.lang.String> url()
```
    Returns:
    
    URL of the identity provider, corresponding to the `iss` claim.
  - get
```
public static OpenIdConnectProvider get(java.lang.String name,
                                        com.pulumi.core.Output<java.lang.String> id,
                                        @Nullable
                                        OpenIdConnectProviderState state,
                                        @Nullable
                                        com.pulumi.resources.CustomResourceOptions options)
```
    Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
    
    Parameters:
    
    name - The _unique_ name of the resulting resource.
    
    id - The _unique_ provider ID of the resource to lookup.
    
    state -
    
    options - Optional settings to control the behavior of the CustomResource.

Class OpenIdConnectProvider

Nested Class Summary

Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

Nested classes/interfaces inherited from class com.pulumi.resources.Resource

Field Summary

Fields inherited from class com.pulumi.resources.Resource

Constructor Summary

Method Summary

Methods inherited from class com.pulumi.resources.CustomResource

Methods inherited from class com.pulumi.resources.Resource

Methods inherited from class java.lang.Object

Constructor Detail

OpenIdConnectProvider

OpenIdConnectProvider

OpenIdConnectProvider

Method Detail

arn

clientIdLists

tags

tagsAll

thumbprintLists

url

get