AWS AWSCloudFormation high security documentation change
Summary
Added detailed documentation for JWT validation parameters including audience, client IDs, scopes, and discovery URL.
Security assessment
Documents critical JWT validation controls. Misconfiguration of these parameters could allow token forgery or unauthorized access.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gateway-customjwtauthorizerconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gateway-customjwtauthorizerconfiguration.md index 93533e8a0..b22669b59 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gateway-customjwtauthorizerconfiguration.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-gateway-customjwtauthorizerconfiguration.md @@ -9 +9 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `CustomJWTAuthorizerConfiguration` property type specifies Property description not available. for an [AWS::BedrockAgentCore::Gateway](./aws-resource-bedrockagentcore-gateway.html). +Configuration for inbound JWT-based authorization, specifying how incoming requests should be authenticated. @@ -46 +46 @@ To declare this entity in your CloudFormation template, use the following syntax -The allowed audience authorized for the gateway target. +Represents individual audience values that are validated in the incoming JWT token validation process. @@ -59 +59 @@ _Required_ : No -Property description not available. +Represents individual client IDs that are validated in the incoming JWT token validation process. @@ -72 +72 @@ _Required_ : No -Property description not available. +An array of scopes that are allowed to access the token. @@ -85 +85 @@ _Required_ : No -Property description not available. +An array of objects that define a custom claim validation name, value, and operation @@ -98 +98 @@ _Required_ : No -The discovery URL for the authorizer configuration. +This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.