create_workload_identity ¶

def create_workload_identity(
    self,
    name: "capo_bedrock_agentcore_control.types.workload_identity_name_type.WorkloadIdentityNameType",
    *,
    config_overrides: Optional[BedrockAgentCoreControlClientConfig] = None,
    allowed_resource_oauth2_return_urls: Optional[
        "capo_bedrock_agentcore_control.types.resource_oauth2_return_url_list_type.ResourceOauth2ReturnUrlListType"
    ] = None,
    tags: Optional["capo_bedrock_agentcore_control.types.tags_map.TagsMap"] = None,
) -> "capo_bedrock_agentcore_control.types.create_workload_identity_response.CreateWorkloadIdentityResponse":
    """<p>Creates a new workload identity.</p>

    Args:
        name: <p>The name of the workload identity. The name must be unique within your account.</p>
        allowed_resource_oauth2_return_urls: <p>The list of allowed OAuth2 return URLs for resources associated with this workload identity.</p>
        tags: <p>A map of tag keys and values to assign to the workload identity. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.</p>

    Raises:
        capo_bedrock_agentcore_control.errors.access_denied_exception.AccessDeniedException: <p>This exception is thrown when a request is denied per access permissions</p>
        capo_bedrock_agentcore_control.errors.internal_server_exception.InternalServerException: <p>This exception is thrown if there was an unexpected error during processing of request</p>
        capo_bedrock_agentcore_control.errors.resource_not_found_exception.ResourceNotFoundException: <p>This exception is thrown when a resource referenced by the operation does not exist</p>
        capo_bedrock_agentcore_control.errors.throttling_exception.ThrottlingException: <p>This exception is thrown when the number of requests exceeds the limit</p>
        capo_bedrock_agentcore_control.errors.unauthorized_exception.UnauthorizedException: <p>This exception is thrown when the JWT bearer token is invalid or not found for OAuth bearer token based access</p>
        capo_bedrock_agentcore_control.errors.validation_exception.ValidationException: <p>The input fails to satisfy the constraints specified by the service.</p>
        capo_bedrock_agentcore_control.errors.UnknownServiceError: The service returned an error code this client does not model.
    """

    def _handler(
        req: "OperationRequest[capo_bedrock_agentcore_control.types.create_workload_identity_request.CreateWorkloadIdentityRequest]",
    ) -> OperationResponse[
        "capo_bedrock_agentcore_control.types.create_workload_identity_response.CreateWorkloadIdentityResponse"
    ]:
        import capo_bedrock_agentcore_control._operations.amazon_bedrock_agent_core_control.create_workload_identity

        output, http_response = (
            capo_bedrock_agentcore_control._operations.amazon_bedrock_agent_core_control.create_workload_identity.create_workload_identity(
                req.options, req.input
            )
        )
        return OperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides, OperationLogging("CreateWorkloadIdentity")
    )
    input_: capo_bedrock_agentcore_control.types.create_workload_identity_request.CreateWorkloadIdentityRequest = {
        "name": name
    }
    if allowed_resource_oauth2_return_urls is not None:
        input_["allowed_resource_oauth2_return_urls"] = (
            allowed_resource_oauth2_return_urls
        )
    if tags is not None:
        input_["tags"] = tags

    response = execute_pipeline(
        OperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    response.response.close()
    return response.output