AccessGrantPrincipal
The principal receiving the grant. Specify principalId, principalAttributes, or both.
Contents
- principalType
-
The type of principal receiving the grant.
Type: String
Valid Values:
IDC_USER | IDC_GROUP | IAM_USER | IAM_ROLE | IAM_ROOT | ACCESS_PROFILE | ALERT | AGENTRequired: Yes
- principalAttributes
-
Attribute conditions for attribute-based access. When provided, the grant targets any principal matching all specified conditions. Supported only for IDC_USER principals.
Type: Array of AccessGrantPrincipalAttribute objects
Array Members: Minimum number of 0 items. Maximum number of 10 items.
Required: No
- principalId
-
The ID of the principal receiving the grant.
Type: String
Length Constraints: Minimum length of 1. Maximum length of 2048.
Pattern:
[a-zA-Z0-9][a-zA-Z0-9:/_+=,.@-]*Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: