LangChain Reference home page

GitHub
Main Docs

Overview
Client
AsyncClient
Run Helpers
Run Trees
Evaluation
Schemas
Utilities
Wrappers
Anonymizer
Testing
Expect API
Middleware
Pytest Plugin
Deployment SDK

⌘I

LangChain Assistant

Ask a question to get started

Enter to send•Shift+Enter new line

Menu

Overview Client AsyncClient Run Helpers Run Trees Evaluation Schemas Utilities Wrappers Anonymizer Testing Expect API Middleware Pytest Plugin Deployment SDK

Language

Theme

Pythonlangsmithtypessandboxesbox_create_paramsProxyConfigRuleAwsSandboxesProxyAwsRoleConfig

Class●Since v0.14

ProxyConfigRuleAwsSandboxesProxyAwsRoleConfig

Copy

ProxyConfigRuleAwsSandboxesProxyAwsRoleConfig()

Bases

TypedDict

Constructors

Attributes

View source on GitHub

constructor

__init__

Name	Type
role_arn	Required[str]
subject_scope	str

role_arn: Required[str]

subject_scope: str

IAM role to assume with AssumeRoleWithWebIdentity, using a short-lived OIDC token LangSmith signs for this workspace. The role's trust policy must trust LangSmith's issuer for the token subject. Credentials renew automatically, and access follows the role's effective AWS permissions. Mutually exclusive with static keys, and cannot be changed after creation.

SubjectScope picks the token subject the role trusts: "workspace" (the default) or "tag:", which must be one of the sandbox's tag_value_ids. Only valid with role_arn.