Package com.pulumi.aws.iam.inputs

Class OpenIdConnectProviderState.Builder

  • Enclosing class:
    OpenIdConnectProviderState
    public static final class OpenIdConnectProviderState.Builder
extends java.lang.Object

    • Method Detail

      • arn

        public OpenIdConnectProviderState.Builder arn​(@Nullable
                                              com.pulumi.core.Output<java.lang.String> arn)
        Parameters:
        arn - ARN assigned by AWS for this provider.
        Returns:
        builder

      • clientIdLists

        public OpenIdConnectProviderState.Builder clientIdLists​(@Nullable
                                                        com.pulumi.core.Output<java.util.List<java.lang.String>> clientIdLists)
        Parameters:
        clientIdLists - List of client IDs (audiences) that identify the application registered with the OpenID Connect provider. This is the value sent as the `clientId` parameter in OAuth requests.
        Returns:
        builder

      • clientIdLists

        public OpenIdConnectProviderState.Builder clientIdLists​(java.util.List<java.lang.String> clientIdLists)
        Parameters:
        clientIdLists - List of client IDs (audiences) that identify the application registered with the OpenID Connect provider. This is the value sent as the `clientId` parameter in OAuth requests.
        Returns:
        builder

      • clientIdLists

        public OpenIdConnectProviderState.Builder clientIdLists​(java.lang.String... clientIdLists)
        Parameters:
        clientIdLists - List of client IDs (audiences) that identify the application registered with the OpenID Connect provider. This is the value sent as the `clientId` parameter in OAuth requests.
        Returns:
        builder

      • tags

        public OpenIdConnectProviderState.Builder tags​(@Nullable
                                               com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tags)
        Parameters:
        tags - Map of resource tags for the IAM OIDC provider. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tags

        public OpenIdConnectProviderState.Builder tags​(java.util.Map<java.lang.String,​java.lang.String> tags)
        Parameters:
        tags - Map of resource tags for the IAM OIDC provider. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tagsAll

        public OpenIdConnectProviderState.Builder tagsAll​(@Nullable
                                                  com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tagsAll)
        Parameters:
        tagsAll - Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
        Returns:
        builder

      • tagsAll

        public OpenIdConnectProviderState.Builder tagsAll​(java.util.Map<java.lang.String,​java.lang.String> tagsAll)
        Parameters:
        tagsAll - Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
        Returns:
        builder

      • thumbprintLists

        public OpenIdConnectProviderState.Builder thumbprintLists​(@Nullable
                                                          com.pulumi.core.Output<java.util.List<java.lang.String>> thumbprintLists)
        Parameters:
        thumbprintLists - List of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificate(s). For certain OIDC identity providers (e.g., Auth0, GitHub, GitLab, Google, or those using an Amazon S3-hosted JWKS endpoint), AWS relies on its own library of trusted root certificate authorities (CAs) for validation instead of using any configured thumbprints. In these cases, any configured `thumbprintList` is retained in the configuration but not used for verification. For other IdPs, if no `thumbprintList` is provided, IAM automatically retrieves and uses the top intermediate CA thumbprint from the OIDC IdP server certificate. However, if a `thumbprintList` is initially configured and later removed, Terraform does not prompt IAM to retrieve a thumbprint the same way. Instead, it continues using the original thumbprint list from the initial configuration. This differs from the behavior when creating an `aws.iam.OpenIdConnectProvider` without a `thumbprintList`.
        Returns:
        builder

      • thumbprintLists

        public OpenIdConnectProviderState.Builder thumbprintLists​(java.util.List<java.lang.String> thumbprintLists)
        Parameters:
        thumbprintLists - List of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificate(s). For certain OIDC identity providers (e.g., Auth0, GitHub, GitLab, Google, or those using an Amazon S3-hosted JWKS endpoint), AWS relies on its own library of trusted root certificate authorities (CAs) for validation instead of using any configured thumbprints. In these cases, any configured `thumbprintList` is retained in the configuration but not used for verification. For other IdPs, if no `thumbprintList` is provided, IAM automatically retrieves and uses the top intermediate CA thumbprint from the OIDC IdP server certificate. However, if a `thumbprintList` is initially configured and later removed, Terraform does not prompt IAM to retrieve a thumbprint the same way. Instead, it continues using the original thumbprint list from the initial configuration. This differs from the behavior when creating an `aws.iam.OpenIdConnectProvider` without a `thumbprintList`.
        Returns:
        builder

      • thumbprintLists

        public OpenIdConnectProviderState.Builder thumbprintLists​(java.lang.String... thumbprintLists)
        Parameters:
        thumbprintLists - List of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificate(s). For certain OIDC identity providers (e.g., Auth0, GitHub, GitLab, Google, or those using an Amazon S3-hosted JWKS endpoint), AWS relies on its own library of trusted root certificate authorities (CAs) for validation instead of using any configured thumbprints. In these cases, any configured `thumbprintList` is retained in the configuration but not used for verification. For other IdPs, if no `thumbprintList` is provided, IAM automatically retrieves and uses the top intermediate CA thumbprint from the OIDC IdP server certificate. However, if a `thumbprintList` is initially configured and later removed, Terraform does not prompt IAM to retrieve a thumbprint the same way. Instead, it continues using the original thumbprint list from the initial configuration. This differs from the behavior when creating an `aws.iam.OpenIdConnectProvider` without a `thumbprintList`.
        Returns:
        builder

      • url

        public OpenIdConnectProviderState.Builder url​(@Nullable
                                              com.pulumi.core.Output<java.lang.String> url)
        Parameters:
        url - URL of the identity provider, corresponding to the `iss` claim.
        Returns:
        builder

      • url

        public OpenIdConnectProviderState.Builder url​(java.lang.String url)
        Parameters:
        url - URL of the identity provider, corresponding to the `iss` claim.
        Returns:
        builder