Package com.pulumi.aws.iam

Class OpenIdConnectProviderArgs.Builder

  • Enclosing class:
    OpenIdConnectProviderArgs
    public static final class OpenIdConnectProviderArgs.Builder
extends java.lang.Object

    • Method Detail

      • clientIdLists

        public OpenIdConnectProviderArgs.Builder clientIdLists​(com.pulumi.core.Output<java.util.List<java.lang.String>> clientIdLists)
        Parameters:
        clientIdLists - List of client IDs (audiences) that identify the application registered with the OpenID Connect provider. This is the value sent as the `clientId` parameter in OAuth requests.
        Returns:
        builder

      • clientIdLists

        public OpenIdConnectProviderArgs.Builder clientIdLists​(java.util.List<java.lang.String> clientIdLists)
        Parameters:
        clientIdLists - List of client IDs (audiences) that identify the application registered with the OpenID Connect provider. This is the value sent as the `clientId` parameter in OAuth requests.
        Returns:
        builder

      • clientIdLists

        public OpenIdConnectProviderArgs.Builder clientIdLists​(java.lang.String... clientIdLists)
        Parameters:
        clientIdLists - List of client IDs (audiences) that identify the application registered with the OpenID Connect provider. This is the value sent as the `clientId` parameter in OAuth requests.
        Returns:
        builder

      • tags

        public OpenIdConnectProviderArgs.Builder tags​(@Nullable
                                              com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tags)
        Parameters:
        tags - Map of resource tags for the IAM OIDC provider. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tags

        public OpenIdConnectProviderArgs.Builder tags​(java.util.Map<java.lang.String,​java.lang.String> tags)
        Parameters:
        tags - Map of resource tags for the IAM OIDC provider. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • thumbprintLists

        public OpenIdConnectProviderArgs.Builder thumbprintLists​(@Nullable
                                                         com.pulumi.core.Output<java.util.List<java.lang.String>> thumbprintLists)
        Parameters:
        thumbprintLists - List of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificate(s). For certain OIDC identity providers (e.g., Auth0, GitHub, GitLab, Google, or those using an Amazon S3-hosted JWKS endpoint), AWS relies on its own library of trusted root certificate authorities (CAs) for validation instead of using any configured thumbprints. In these cases, any configured `thumbprintList` is retained in the configuration but not used for verification. For other IdPs, if no `thumbprintList` is provided, IAM automatically retrieves and uses the top intermediate CA thumbprint from the OIDC IdP server certificate. However, if a `thumbprintList` is initially configured and later removed, Terraform does not prompt IAM to retrieve a thumbprint the same way. Instead, it continues using the original thumbprint list from the initial configuration. This differs from the behavior when creating an `aws.iam.OpenIdConnectProvider` without a `thumbprintList`.
        Returns:
        builder

      • thumbprintLists

        public OpenIdConnectProviderArgs.Builder thumbprintLists​(java.util.List<java.lang.String> thumbprintLists)
        Parameters:
        thumbprintLists - List of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificate(s). For certain OIDC identity providers (e.g., Auth0, GitHub, GitLab, Google, or those using an Amazon S3-hosted JWKS endpoint), AWS relies on its own library of trusted root certificate authorities (CAs) for validation instead of using any configured thumbprints. In these cases, any configured `thumbprintList` is retained in the configuration but not used for verification. For other IdPs, if no `thumbprintList` is provided, IAM automatically retrieves and uses the top intermediate CA thumbprint from the OIDC IdP server certificate. However, if a `thumbprintList` is initially configured and later removed, Terraform does not prompt IAM to retrieve a thumbprint the same way. Instead, it continues using the original thumbprint list from the initial configuration. This differs from the behavior when creating an `aws.iam.OpenIdConnectProvider` without a `thumbprintList`.
        Returns:
        builder

      • thumbprintLists

        public OpenIdConnectProviderArgs.Builder thumbprintLists​(java.lang.String... thumbprintLists)
        Parameters:
        thumbprintLists - List of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificate(s). For certain OIDC identity providers (e.g., Auth0, GitHub, GitLab, Google, or those using an Amazon S3-hosted JWKS endpoint), AWS relies on its own library of trusted root certificate authorities (CAs) for validation instead of using any configured thumbprints. In these cases, any configured `thumbprintList` is retained in the configuration but not used for verification. For other IdPs, if no `thumbprintList` is provided, IAM automatically retrieves and uses the top intermediate CA thumbprint from the OIDC IdP server certificate. However, if a `thumbprintList` is initially configured and later removed, Terraform does not prompt IAM to retrieve a thumbprint the same way. Instead, it continues using the original thumbprint list from the initial configuration. This differs from the behavior when creating an `aws.iam.OpenIdConnectProvider` without a `thumbprintList`.
        Returns:
        builder

      • url

        public OpenIdConnectProviderArgs.Builder url​(com.pulumi.core.Output<java.lang.String> url)
        Parameters:
        url - URL of the identity provider, corresponding to the `iss` claim.
        Returns:
        builder

      • url

        public OpenIdConnectProviderArgs.Builder url​(java.lang.String url)
        Parameters:
        url - URL of the identity provider, corresponding to the `iss` claim.
        Returns:
        builder