@Generated(value="jsii-pacmak/1.58.0 (build f8ba112)", date="2022-05-27T16:27:55.333Z") public class ArnPrincipal extends PrincipalBase
You can specify AWS accounts, IAM users, Federated SAML users, IAM roles, and specific assumed-role sessions. You cannot specify IAM groups or instance profiles as principals
Example:
NetworkLoadBalancer networkLoadBalancer1; NetworkLoadBalancer networkLoadBalancer2; VpcEndpointService.Builder.create(this, "EndpointService") .vpcEndpointServiceLoadBalancers(List.of(networkLoadBalancer1, networkLoadBalancer2)) .acceptanceRequired(true) .allowedPrincipals(List.of(new ArnPrincipal("arn:aws:iam::123456789012:root"))) .build();
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html
IAssumeRolePrincipal.Jsii$Default
IComparablePrincipal.Jsii$Default
Modifier | Constructor and Description |
---|---|
protected |
ArnPrincipal(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) |
protected |
ArnPrincipal(software.amazon.jsii.JsiiObjectRef objRef) |
Modifier and Type | Method and Description |
---|---|
java.lang.String |
dedupeString()
Return whether or not this principal is equal to the given principal.
|
java.lang.String |
getArn()
Amazon Resource Name (ARN) of the principal entity (i.e.
|
PrincipalPolicyFragment |
getPolicyFragment()
Return the policy fragment that identifies this principal in a Policy.
|
PrincipalBase |
inOrganization(java.lang.String organizationId)
A convenience method for adding a condition that the principal is part of the specified AWS Organization.
|
java.lang.String |
toString()
Returns a string representation of an object.
|
addToAssumeRolePolicy, addToPolicy, addToPrincipalPolicy, getAssumeRoleAction, getGrantPrincipal, getPrincipalAccount, toJSON, withConditions, withSessionTags
protected ArnPrincipal(software.amazon.jsii.JsiiObjectRef objRef)
protected ArnPrincipal(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
public java.lang.String dedupeString()
dedupeString
in interface IComparablePrincipal
dedupeString
in class PrincipalBase
public PrincipalBase inOrganization(java.lang.String organizationId)
organizationId
- This parameter is required.public java.lang.String toString()
toString
in class PrincipalBase
public java.lang.String getArn()
public PrincipalPolicyFragment getPolicyFragment()
getPolicyFragment
in interface IPrincipal
getPolicyFragment
in class PrincipalBase