pub struct CreateOpenIDConnectProviderRequest {
pub client_id_list: Option<Vec<String>>,
pub tags: Option<Vec<Tag>>,
pub thumbprint_list: Vec<String>,
pub url: String,
}
Fields
client_id_list: Option<Vec<String>>
A list of client IDs (also known as audiences). When a mobile or web app registers with an OpenID Connect provider, they establish a value that identifies the application. (This is the value that's sent as the client_id
parameter on OAuth requests.)
You can register multiple client IDs with the same provider. For example, you might have multiple applications that use the same OIDC provider. You cannot register more than 100 client IDs with a single IAM OIDC provider.
There is no defined format for a client ID. The CreateOpenIDConnectProviderRequest
operation accepts client IDs up to 255 characters long.
A list of tags that you want to attach to the new IAM OpenID Connect (OIDC) provider. Each tag consists of a key name and an associated value. For more information about tagging, see Tagging IAM resources in the IAM User Guide.
If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created.
thumbprint_list: Vec<String>
A list of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificates. Typically this list includes only one entry. However, IAM lets you have up to five thumbprints for an OIDC provider. This lets you maintain multiple thumbprints if the identity provider is rotating certificates.
The server certificate thumbprint is the hex-encoded SHA-1 hash value of the X.509 certificate used by the domain where the OpenID Connect provider makes its keys available. It is always a 40-character string.
You must provide at least one thumbprint when creating an IAM OIDC provider. For example, assume that the OIDC provider is server.example.com
and the provider stores its keys at https://keys.server.example.com/openid-connect. In that case, the thumbprint string would be the hex-encoded SHA-1 hash value of the certificate used by https://keys.server.example.com.
For more information about obtaining the OIDC provider's thumbprint, see Obtaining the thumbprint for an OpenID Connect provider in the IAM User Guide.
url: String
The URL of the identity provider. The URL must begin with https://
and should correspond to the iss
claim in the provider's OpenID Connect ID tokens. Per the OIDC standard, path components are allowed but query parameters are not. Typically the URL consists of only a hostname, like https://server.example.org
or https://example.com
.
You cannot register the same provider multiple times in a single AWS account. If you try to submit a URL that has already been used for an OpenID Connect provider in the AWS account, you will get an error.
Trait Implementations
sourceimpl Clone for CreateOpenIDConnectProviderRequest
impl Clone for CreateOpenIDConnectProviderRequest
sourcefn clone(&self) -> CreateOpenIDConnectProviderRequest
fn clone(&self) -> CreateOpenIDConnectProviderRequest
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source
. Read more
sourceimpl Default for CreateOpenIDConnectProviderRequest
impl Default for CreateOpenIDConnectProviderRequest
sourcefn default() -> CreateOpenIDConnectProviderRequest
fn default() -> CreateOpenIDConnectProviderRequest
Returns the “default value” for a type. Read more
sourceimpl PartialEq<CreateOpenIDConnectProviderRequest> for CreateOpenIDConnectProviderRequest
impl PartialEq<CreateOpenIDConnectProviderRequest> for CreateOpenIDConnectProviderRequest
sourcefn eq(&self, other: &CreateOpenIDConnectProviderRequest) -> bool
fn eq(&self, other: &CreateOpenIDConnectProviderRequest) -> bool
This method tests for self
and other
values to be equal, and is used
by ==
. Read more
sourcefn ne(&self, other: &CreateOpenIDConnectProviderRequest) -> bool
fn ne(&self, other: &CreateOpenIDConnectProviderRequest) -> bool
This method tests for !=
.
impl StructuralPartialEq for CreateOpenIDConnectProviderRequest
Auto Trait Implementations
impl RefUnwindSafe for CreateOpenIDConnectProviderRequest
impl Send for CreateOpenIDConnectProviderRequest
impl Sync for CreateOpenIDConnectProviderRequest
impl Unpin for CreateOpenIDConnectProviderRequest
impl UnwindSafe for CreateOpenIDConnectProviderRequest
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<T> Instrument for T
impl<T> Instrument for T
sourcefn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
sourcefn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcefn clone_into(&self, target: &mut T)
fn clone_into(&self, target: &mut T)
toowned_clone_into
)Uses borrowed data to replace owned data, usually by cloning. Read more
sourceimpl<T> WithSubscriber for T
impl<T> WithSubscriber for T
sourcefn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
Attaches the provided Subscriber
to this type, returning a
WithDispatch
wrapper. Read more
sourcefn with_current_subscriber(self) -> WithDispatch<Self>
fn with_current_subscriber(self) -> WithDispatch<Self>
Attaches the current default Subscriber
to this type, returning a
WithDispatch
wrapper. Read more