AWS::EC2::VerifiedAccessTrustProvider
Describes a Verified Access trust provider.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "Type" : "AWS::EC2::VerifiedAccessTrustProvider", "Properties" : { "Description" :String, "DeviceOptions" :DeviceOptions, "DeviceTrustProviderType" :String, "OidcOptions" :OidcOptions, "PolicyReferenceName" :String, "Tags" :[ Tag, ... ], "TrustProviderType" :String, "UserTrustProviderType" :String} }
YAML
Type: AWS::EC2::VerifiedAccessTrustProvider Properties: Description:StringDeviceOptions:DeviceOptionsDeviceTrustProviderType:StringOidcOptions:OidcOptionsPolicyReferenceName:StringTags:- TagTrustProviderType:StringUserTrustProviderType:String
Properties
Description-
A description for the Amazon Verified Access trust provider.
Required: No
Type: String
Update requires: No interruption
DeviceOptions-
The options for device-identity trust provider.
Required: No
Type: DeviceOptions
Update requires: Replacement
DeviceTrustProviderType-
The type of device-based trust provider.
Required: No
Type: String
Allowed values:
crowdstrike | jamfUpdate requires: Replacement
OidcOptions-
The options for an OpenID Connect-compatible user-identity trust provider.
Required: No
Type: OidcOptions
Update requires: No interruption
PolicyReferenceName-
The identifier to be used when working with policy rules.
Required: Yes
Type: String
Update requires: Replacement
Tags-
The tags.
Required: No
Type: List of Tag
Update requires: No interruption
TrustProviderType-
The type of Verified Access trust provider.
Required: Yes
Type: String
Allowed values:
device | userUpdate requires: Replacement
UserTrustProviderType-
The type of user-based trust provider.
Required: No
Type: String
Allowed values:
iam-identity-center | oidcUpdate requires: Replacement
Return values
Ref
When you pass the logical ID of this resource to the intrinsic Reffunction, Refreturns the ID of the Verified Access trust provider.
For more information about using the Reffunction, see Ref.
Fn::GetAtt
The Fn::GetAttintrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.
For more information about using the Fn::GetAttintrinsic function, see Fn::GetAtt.