Class AmazonSecurityTokenServiceProperties

java.lang.Object
org.apereo.cas.configuration.model.support.aws.BaseAmazonWebServicesProperties
org.apereo.cas.configuration.model.support.aws.AmazonSecurityTokenServiceProperties
All Implemented Interfaces:
Serializable, CasFeatureModule

@RequiresModule(name="cas-server-support-aws") public class AmazonSecurityTokenServiceProperties extends BaseAmazonWebServicesProperties
Since:
6.4.0
See Also:
  • Constructor Details

    • AmazonSecurityTokenServiceProperties

      public AmazonSecurityTokenServiceProperties()
  • Method Details

    • getPrincipalAttributeName

      public String getPrincipalAttributeName()
      Attribute name that must be found and resolved for the principal to authorize the user to proceed with obtaining credentials.
    • getPrincipalAttributeValue

      public String getPrincipalAttributeValue()
      Attribute value, defined as a regex pattern that must be found and resolved for the principal to authorize the user to proceed with obtaining credentials.
    • isRbacEnabled

      public boolean isRbacEnabled()
      When set to true, credentials will be obtained based on roles as attributes resolved for the user. Typically, you could use roles wthin your account or for cross-account access.

      When set to true, the getPrincipalAttributeName() must contain roleArns as values.

    • setPrincipalAttributeName

      public AmazonSecurityTokenServiceProperties setPrincipalAttributeName(String principalAttributeName)
      Attribute name that must be found and resolved for the principal to authorize the user to proceed with obtaining credentials.
      Returns:
      this.
    • setPrincipalAttributeValue

      public AmazonSecurityTokenServiceProperties setPrincipalAttributeValue(String principalAttributeValue)
      Attribute value, defined as a regex pattern that must be found and resolved for the principal to authorize the user to proceed with obtaining credentials.
      Returns:
      this.
    • setRbacEnabled

      public AmazonSecurityTokenServiceProperties setRbacEnabled(boolean rbacEnabled)
      When set to true, credentials will be obtained based on roles as attributes resolved for the user. Typically, you could use roles wthin your account or for cross-account access.

      When set to true, the getPrincipalAttributeName() must contain roleArns as values.

      Returns:
      this.