Class DomainAdvancedSecurityOptionsJwtOptionsArgs


  • public final class DomainAdvancedSecurityOptionsJwtOptionsArgs
    extends com.pulumi.resources.ResourceArgs
    • Method Detail

      • enabled

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> enabled()
        Returns:
        Whether JWT authentication is enabled.
      • jwksUrl

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> jwksUrl()
        Returns:
        URL endpoint that hosts the JSON Web Key Set (JWKS) containing public keys used to verify JWT signatures. This argument can be specified only with OpenSearch versions 3.3 and later. At least one of `jwksUrl` or `publicKey` must be specified when `enabled` is set to `true`.
      • publicKey

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> publicKey()
        Returns:
        PEM-encoded public key used to verify JWT signatures. At least one of `jwksUrl` or `publicKey` must be specified when `enabled` is set to `true`. If both `jwksUrl` and `publicKey` are specified, `publicKey` is ignored.
      • rolesKey

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> rolesKey()
        Returns:
        Element of the JWT assertion to use for roles. Default is `roles`.
      • subjectKey

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> subjectKey()
        Returns:
        Element of the JWT assertion to use for the user name. Default is `sub`.