software.amazon.awscdk.services.iam

Class WebIdentityPrincipal

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.services.iam.PrincipalBase

software.amazon.awscdk.services.iam.FederatedPrincipal

software.amazon.awscdk.services.iam.WebIdentityPrincipal

All Implemented Interfaces:

IAssumeRolePrincipal, IComparablePrincipal, IGrantable, IPrincipal

Direct Known Subclasses:

OpenIdConnectPrincipal

@Generated(value="jsii-pacmak/1.71.0 (build f1f58ae)",
           date="2022-11-29T04:32:15.389Z")
public class WebIdentityPrincipal
extends FederatedPrincipal

A principal that represents a federated identity provider as Web Identity such as Cognito, Amazon, Facebook, Google, etc.

Example:

 WebIdentityPrincipal principal = new WebIdentityPrincipal("cognito-identity.amazonaws.com", Map.of(
         "StringEquals", Map.of("cognito-identity.amazonaws.com:aud", "us-east-2:12345678-abcd-abcd-abcd-123456"),
         "ForAnyValue:StringLike", Map.of("cognito-identity.amazonaws.com:amr", "unauthenticated")));
 

Nested Class Summary

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.iam.IAssumeRolePrincipal

IAssumeRolePrincipal.Jsii$Default

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.iam.IComparablePrincipal

IComparablePrincipal.Jsii$Default

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	WebIdentityPrincipal(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	WebIdentityPrincipal(software.amazon.jsii.JsiiObjectRef objRef)
	WebIdentityPrincipal(java.lang.String identityProvider, java.util.Map<java.lang.String,java.lang.Object> conditions)

Method Summary

Modifier and Type	Method and Description
PrincipalPolicyFragment	getPolicyFragment() Return the policy fragment that identifies this principal in a Policy.
java.lang.String	toString() Returns a string representation of an object.

Methods inherited from class software.amazon.awscdk.services.iam.FederatedPrincipal

dedupeString, getAssumeRoleAction, getConditions, getFederated

Methods inherited from class software.amazon.awscdk.services.iam.PrincipalBase

addToAssumeRolePolicy, addToPolicy, addToPrincipalPolicy, getGrantPrincipal, getPrincipalAccount, toJSON, withConditions, withSessionTags

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

WebIdentityPrincipal

protected WebIdentityPrincipal(software.amazon.jsii.JsiiObjectRef objRef)

WebIdentityPrincipal

protected WebIdentityPrincipal(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

WebIdentityPrincipal

public WebIdentityPrincipal(java.lang.String identityProvider,
                            java.util.Map<java.lang.String,java.lang.Object> conditions)

Parameters:

identityProvider - identity provider (i.e. 'cognito-identity.amazonaws.com' for users authenticated through Cognito). This parameter is required.

conditions - The conditions under which the policy is in effect.

Method Detail

toString

public java.lang.String toString()

Returns a string representation of an object.

Overrides:

toString in class FederatedPrincipal

getPolicyFragment

public PrincipalPolicyFragment getPolicyFragment()

Return the policy fragment that identifies this principal in a Policy.

Specified by:

getPolicyFragment in interface IPrincipal

Overrides:

getPolicyFragment in class FederatedPrincipal