Uses of Class
software.amazon.awscdk.services.iam.PrincipalBase

Packages that use PrincipalBase

Package	Description
software.amazon.awscdk.services.iam	AWS Identity and Access Management Construct Library
software.amazon.awscdk.services.kms	AWS Key Management Service Construct Library

Uses of PrincipalBase in software.amazon.awscdk.services.iam

Subclasses of PrincipalBase in software.amazon.awscdk.services.iam

Modifier and Type	Class	Description
class	AccountPrincipal	Specify AWS account ID as the principal entity in a policy to delegate authority to the account.
class	AccountRootPrincipal	Use the AWS account into which a stack is deployed as the principal entity in a policy.
class	AnyPrincipal	A principal representing all AWS identities in all accounts.
class	ArnPrincipal	Specify a principal by the Amazon Resource Name (ARN).
class	CanonicalUserPrincipal	A policy principal for canonicalUserIds - useful for S3 bucket policies that use Origin Access identities.
class	CompositePrincipal	Represents a principal that has multiple types of principals.
class	FederatedPrincipal	Principal entity that represents a federated identity provider such as Amazon Cognito, that can be used to provide temporary security credentials to users who have been authenticated.
class	OpenIdConnectPrincipal	A principal that represents a federated identity provider as from a OpenID Connect provider.
class	OrganizationPrincipal	A principal that represents an AWS Organization.
class	PrincipalWithConditions	An IAM principal with additional conditions specifying when the policy is in effect.
class	SamlConsolePrincipal	Principal entity that represents a SAML federated identity provider for programmatic and AWS Management Console access.
class	SamlPrincipal	Principal entity that represents a SAML federated identity provider.
class	ServicePrincipal	An IAM principal that represents an AWS service (i.e.
class	SessionTagsPrincipal	Enables session tags on role assumptions from a principal.
class	StarPrincipal	A principal that uses a literal '*' in the IAM JSON language.
class	WebIdentityPrincipal	A principal that represents a federated identity provider as Web Identity such as Cognito, Amazon, Facebook, Google, etc.

Methods in software.amazon.awscdk.services.iam that return PrincipalBase

Modifier and Type	Method	Description
PrincipalBase	ArnPrincipal.inOrganization(String organizationId)	A convenience method for adding a condition that the principal is part of the specified AWS Organization.
PrincipalBase	PrincipalBase.withConditions(Map<String,Object> conditions)	Returns a new PrincipalWithConditions using this principal as the base, with the passed conditions added.
PrincipalBase	PrincipalBase.withSessionTags()	Returns a new principal using this principal as the base, with session tags enabled.

Uses of PrincipalBase in software.amazon.awscdk.services.kms

Subclasses of PrincipalBase in software.amazon.awscdk.services.kms

Modifier and Type	Class	Description
class	ViaServicePrincipal	A principal to allow access to a key if it's being used through another AWS service.