> ## Documentation Index
> Fetch the complete documentation index at: https://cdktn.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Python: S3BackendAssumeRoleWithWebIdentityConfig

> CDKTN Core API Reference for S3BackendAssumeRoleWithWebIdentityConfig in Python.

## Initializer <a name="Initializer" id="cdktn.S3BackendAssumeRoleWithWebIdentityConfig.Initializer" />

```python theme={null}
import cdktn

cdktn.S3BackendAssumeRoleWithWebIdentityConfig(
  duration: str = None,
  policy: str = None,
  policy_arns: typing.List[str] = None,
  role_arn: str = None,
  session_name: str = None,
  web_identity_token: str = None,
  web_identity_token_file: str = None
)
```

## Properties <a name="Properties" id="Properties" />

| **Name**                                                                                                                            | **Type**                       | **Description**                                                                                                                           |
| ----------------------------------------------------------------------------------------------------------------------------------- | ------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------- |
| <code><a href="#cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.duration">duration</a></code>                               | <code>str</code>               | (Optional) The duration individual credentials will be valid.                                                                             |
| <code><a href="#cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.policy">policy</a></code>                                   | <code>str</code>               | (Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.                                     |
| <code><a href="#cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.policyArns">policy\_arns</a></code>                         | <code>typing.List\[str]</code> | (Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed. |
| <code><a href="#cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.roleArn">role\_arn</a></code>                               | <code>str</code>               | (Required) Amazon Resource Name (ARN) of the IAM Role to assume.                                                                          |
| <code><a href="#cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.sessionName">session\_name</a></code>                       | <code>str</code>               | (Optional) Session name to use when assuming the role.                                                                                    |
| <code><a href="#cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.webIdentityToken">web\_identity\_token</a></code>           | <code>str</code>               | (Optional) The value of a web identity token from an OpenID Connect (OIDC) or OAuth provider.                                             |
| <code><a href="#cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.webIdentityTokenFile">web\_identity\_token\_file</a></code> | <code>str</code>               | (Optional) File containing a web identity token from an OpenID Connect (OIDC) or OAuth provider.                                          |

***

### `duration`<sup>Optional</sup> <a name="duration" id="cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.duration" />

```python theme={null}
duration: str
```

* *Type:* str

(Optional) The duration individual credentials will be valid.

Credentials are automatically renewed up to the maximum defined by the AWS account.
Specified using the format \< hours >h\< minutes >m\< seconds >s with any unit being optional.
For example, an hour and a half can be specified as 1h30m or 90m.
Must be between 15 minutes (15m) and 12 hours (12h).

***

### `policy`<sup>Optional</sup> <a name="policy" id="cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.policy" />

```python theme={null}
policy: str
```

* *Type:* str

(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.

***

### `policy_arns`<sup>Optional</sup> <a name="policy_arns" id="cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.policyArns" />

```python theme={null}
policy_arns: typing.List[str]
```

* *Type:* typing.List\[str]

(Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.

***

### `role_arn`<sup>Optional</sup> <a name="role_arn" id="cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.roleArn" />

```python theme={null}
role_arn: str
```

* *Type:* str

(Required) Amazon Resource Name (ARN) of the IAM Role to assume.

Can also be set with the AWS\_ROLE\_ARN environment variable.

***

### `session_name`<sup>Optional</sup> <a name="session_name" id="cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.sessionName" />

```python theme={null}
session_name: str
```

* *Type:* str

(Optional) Session name to use when assuming the role.

Can also be set with the AWS\_ROLE\_SESSION\_NAME environment variable.

***

### `web_identity_token`<sup>Optional</sup> <a name="web_identity_token" id="cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.webIdentityToken" />

```python theme={null}
web_identity_token: str
```

* *Type:* str

(Optional) The value of a web identity token from an OpenID Connect (OIDC) or OAuth provider.

One of web\_identity\_token or web\_identity\_token\_file is required.

***

### `web_identity_token_file`<sup>Optional</sup> <a name="web_identity_token_file" id="cdktn.S3BackendAssumeRoleWithWebIdentityConfig.property.webIdentityTokenFile" />

```python theme={null}
web_identity_token_file: str
```

* *Type:* str

(Optional) File containing a web identity token from an OpenID Connect (OIDC) or OAuth provider.

One of web\_identity\_token\_file or web\_identity\_token is required.
Can also be set with the AWS\_WEB\_IDENTITY\_TOKEN\_FILE environment variable.

***