{
  "$schema": "https://json-schema.org/draft/2019-09/schema",
  "$id": "https://www.krakend.io/schema/v3.0/auth/aws-sigv4.json",
  "title": "aws-sigv4 Authentication",
  "description": "Enterprise only. Enables AWS Sigv4 authentication between KrakenD and Google Cloud service account.\n\nSee: https://www.krakend.io/docs/enterprise/authentication/aws-sigv4/",
  "type": "object",
  "required": [ "region", "service" ],
  "properties": {
    "assume_role_arn": {
      "title": "Assume Role ARN",
      "description": "The Amazon Resource Name (ARN) of the role to assume.\n\nSee: https://www.krakend.io/docs/enterprise/authentication/aws-sigv4/",
      "examples": [ "arn:aws:sts::{account ID}:assumed-role/{resource}" ],
      "type": "string",
      "@sensitive": 1
    },
    "debug": {
      "title": "Debug",
      "description": "Enables debug logging for AWS Sigv4 signing process.\n\nSee: https://www.krakend.io/docs/enterprise/authentication/aws-sigv4/",
      "default": false,
      "type": "boolean"
    },
    "region": {
      "title": "Region",
      "description": "The AWS region where the service is deployed.\n\nSee: https://www.krakend.io/docs/enterprise/authentication/aws-sigv4/",
      "examples": [ "us-east-1" ],
      "type": "string",
      "@sensitive": 1
    },
    "service": {
      "title": "Service",
      "description": "The name of the service in AWS you'd like to sign the request.\n\nSee: https://www.krakend.io/docs/enterprise/authentication/aws-sigv4/",
      "examples": [ "dynamodb" ],
      "type": "string",
      "@sensitive": 1
    },
    "sts_region": {
      "title": "STS Region",
      "description": "The AWS region where the STS service is deployed.\n\nSee: https://www.krakend.io/docs/enterprise/authentication/aws-sigv4/",
      "examples": [ "us-west-1" ],
      "type": "string",
      "@sensitive": 1
    }
  },
  "patternProperties": {
    "^[@$_#]": true
  },
  "additionalProperties": false
}