Uses of Interface
software.amazon.awscdk.services.iam.IPrincipal

Packages that use IPrincipal

Package	Description
software.amazon.awscdk.customresources	AWS CDK Custom Resources
software.amazon.awscdk.services.autoscaling	Amazon EC2 Auto Scaling Construct Library
software.amazon.awscdk.services.backup	AWS Backup Construct Library
software.amazon.awscdk.services.chatbot	AWS::Chatbot Construct Library
software.amazon.awscdk.services.cloudfront	Amazon CloudFront Construct Library
software.amazon.awscdk.services.cloudfront.experimental
software.amazon.awscdk.services.codebuild	AWS CodeBuild Construct Library
software.amazon.awscdk.services.ec2	Amazon EC2 Construct Library
software.amazon.awscdk.services.eks	Amazon EKS Construct Library
software.amazon.awscdk.services.iam	AWS Identity and Access Management Construct Library
software.amazon.awscdk.services.kms	AWS Key Management Service Construct Library
software.amazon.awscdk.services.lambda	AWS Lambda Construct Library
software.amazon.awscdk.services.route53	Amazon Route53 Construct Library
software.amazon.awscdk.services.stepfunctions	AWS Step Functions Construct Library
software.amazon.awscdk.services.stepfunctions.tasks	Tasks for AWS Step Functions

Uses of IPrincipal in software.amazon.awscdk.customresources

Methods in software.amazon.awscdk.customresources that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	AwsCustomResource.getGrantPrincipal() (experimental) The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.autoscaling

Methods in software.amazon.awscdk.services.autoscaling that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	IAutoScalingGroup.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IAutoScalingGroup.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	AutoScalingGroup.getGrantPrincipal() (experimental) The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.backup

Methods in software.amazon.awscdk.services.backup that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	BackupSelection.getGrantPrincipal() (experimental) The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.chatbot

Methods in software.amazon.awscdk.services.chatbot that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	SlackChannelConfiguration.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	ISlackChannelConfiguration.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	ISlackChannelConfiguration.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.cloudfront

Methods in software.amazon.awscdk.services.cloudfront that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	IOriginAccessIdentity.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IOriginAccessIdentity.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	OriginAccessIdentity.getGrantPrincipal() (experimental) Derived principal value for bucket access.

Uses of IPrincipal in software.amazon.awscdk.services.cloudfront.experimental

Methods in software.amazon.awscdk.services.cloudfront.experimental that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	EdgeFunction.getGrantPrincipal() (experimental) The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.codebuild

Methods in software.amazon.awscdk.services.codebuild that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	Project.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IProject.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IProject.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.ec2

Methods in software.amazon.awscdk.services.ec2 that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	BastionHostLinux.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IInstance.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IInstance.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	Instance.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	LaunchTemplate.getGrantPrincipal() (experimental) Principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.eks

Classes in software.amazon.awscdk.services.eks that implement IPrincipal

Modifier and Type	Class and Description
class	ServiceAccount (experimental) Service Account.

Methods in software.amazon.awscdk.services.eks that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	ServiceAccount.getGrantPrincipal() (experimental) The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.iam

Subinterfaces of IPrincipal in software.amazon.awscdk.services.iam

Modifier and Type	Interface and Description
interface	IGroup (experimental) Represents an IAM Group.
static interface	IGroup.Jsii$Default Internal default implementation for IGroup.
interface	IIdentity (experimental) A construct that represents an IAM principal, such as a user, group or role.
static interface	IIdentity.Jsii$Default Internal default implementation for IIdentity.
static interface	IPrincipal.Jsii$Default Internal default implementation for IPrincipal.
interface	IRole (experimental) A Role object.
static interface	IRole.Jsii$Default Internal default implementation for IRole.
interface	IUser (experimental) Represents an IAM user.
static interface	IUser.Jsii$Default Internal default implementation for IUser.

Classes in software.amazon.awscdk.services.iam that implement IPrincipal

Modifier and Type	Class and Description
class	AccountPrincipal (experimental) Specify AWS account ID as the principal entity in a policy to delegate authority to the account.
class	AccountRootPrincipal (experimental) Use the AWS account into which a stack is deployed as the principal entity in a policy.
class	AnyPrincipal (experimental) A principal representing all identities in all accounts.
class	ArnPrincipal (experimental) Specify a principal by the Amazon Resource Name (ARN).
class	CanonicalUserPrincipal (experimental) A policy principal for canonicalUserIds - useful for S3 bucket policies that use Origin Access identities.
class	CompositePrincipal (experimental) Represents a principal that has multiple types of principals.
class	FederatedPrincipal (experimental) Principal entity that represents a federated identity provider such as Amazon Cognito, that can be used to provide temporary security credentials to users who have been authenticated.
class	Group (experimental) An IAM Group (collection of IAM users) lets you specify permissions for multiple users, which can make it easier to manage permissions for those users.
static class	IGroup.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IIdentity.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IPrincipal.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IRole.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IUser.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	LazyRole (experimental) An IAM role that only gets attached to the construct tree once it gets used, not before.
class	OpenIdConnectPrincipal (experimental) A principal that represents a federated identity provider as from a OpenID Connect provider.
class	OrganizationPrincipal (experimental) A principal that represents an AWS Organization.
class	PrincipalBase (experimental) Base class for policy principals.
class	PrincipalWithConditions (experimental) An IAM principal with additional conditions specifying when the policy is in effect.
class	Role (experimental) IAM Role.
class	SamlConsolePrincipal (experimental) Principal entity that represents a SAML federated identity provider for programmatic and AWS Management Console access.
class	SamlPrincipal (experimental) Principal entity that represents a SAML federated identity provider.
class	ServicePrincipal (experimental) An IAM principal that represents an AWS service (i.e.
class	UnknownPrincipal (experimental) A principal for use in resources that need to have a role but it's unknown.
class	User (experimental) Define a new IAM user.
class	WebIdentityPrincipal (experimental) A principal that represents a federated identity provider as Web Identity such as Cognito, Amazon, Facebook, Google, etc.

Methods in software.amazon.awscdk.services.iam that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	LazyRoleProps.Jsii$Proxy.getAssumedBy()
IPrincipal	RoleProps.getAssumedBy() (experimental) The IAM principal (i.e.
IPrincipal	RoleProps.Jsii$Proxy.getAssumedBy()
IPrincipal	IIdentity.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IIdentity.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	Group.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	PrincipalWithConditions.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	LazyRole.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	Role.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	PrincipalBase.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	UnknownPrincipal.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	User.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IRole.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IRole.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IGroup.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IGroup.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IGrantable.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IGrantable.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IGrantable.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IPrincipal.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IPrincipal.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IUser.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IUser.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	GrantOnPrincipalAndResourceOptions.getResourcePolicyPrincipal() (experimental) The principal to use in the statement for the resource policy.
IPrincipal	GrantOnPrincipalAndResourceOptions.Jsii$Proxy.getResourcePolicyPrincipal()
IPrincipal	PrincipalBase.withConditions(Map<String,Object> conditions) (experimental) Returns a new PrincipalWithConditions using this principal as the base, with the passed conditions added.

Methods in software.amazon.awscdk.services.iam that return types with arguments of type IPrincipal

Modifier and Type	Method and Description
default List<IPrincipal>	PolicyStatementProps.getNotPrincipals() (experimental) List of not principals to add to the statement.
List<IPrincipal>	PolicyStatementProps.Jsii$Proxy.getNotPrincipals()
default List<IPrincipal>	PolicyStatementProps.getPrincipals() (experimental) List of principals to add to the statement.
List<IPrincipal>	PolicyStatementProps.Jsii$Proxy.getPrincipals()

Methods in software.amazon.awscdk.services.iam with parameters of type IPrincipal

Modifier and Type	Method and Description
void	PolicyStatement.addNotPrincipals(IPrincipal... notPrincipals) (experimental) Specify principals that is not allowed or denied access to the "NotPrincipal" section of a policy statement.
void	PolicyStatement.addPrincipals(IPrincipal... principals) (experimental) Adds principals to the "Principal" section of a policy statement.
LazyRoleProps.Builder	LazyRoleProps.Builder.assumedBy(IPrincipal assumedBy) Sets the value of RoleProps.getAssumedBy()
LazyRole.Builder	LazyRole.Builder.assumedBy(IPrincipal assumedBy) (experimental) The IAM principal (i.e.
Role.Builder	Role.Builder.assumedBy(IPrincipal assumedBy) (experimental) The IAM principal (i.e.
RoleProps.Builder	RoleProps.Builder.assumedBy(IPrincipal assumedBy) Sets the value of RoleProps.getAssumedBy()
Grant	LazyRole.grant(IPrincipal identity, String... actions) (experimental) Grant the actions defined in actions to the identity Principal on this resource.
Grant	Role.grant(IPrincipal grantee, String... actions) (experimental) Grant the actions defined in actions to the identity Principal on this resource.
Grant	IRole.grant(IPrincipal grantee, String... actions) (experimental) Grant the actions defined in actions to the identity Principal on this resource.
Grant	IRole.Jsii$Proxy.grant(IPrincipal grantee, String... actions) (experimental) Grant the actions defined in actions to the identity Principal on this resource.
default Grant	IRole.Jsii$Default.grant(IPrincipal grantee, String... actions) (experimental) Grant the actions defined in actions to the identity Principal on this resource.
Grant	LazyRole.grantPassRole(IPrincipal identity) (experimental) Grant permissions to the given principal to pass this role.
Grant	Role.grantPassRole(IPrincipal identity) (experimental) Grant permissions to the given principal to pass this role.
Grant	IRole.grantPassRole(IPrincipal grantee) (experimental) Grant permissions to the given principal to pass this role.
Grant	IRole.Jsii$Proxy.grantPassRole(IPrincipal grantee) (experimental) Grant permissions to the given principal to pass this role.
default Grant	IRole.Jsii$Default.grantPassRole(IPrincipal grantee) (experimental) Grant permissions to the given principal to pass this role.
GrantOnPrincipalAndResourceOptions.Builder	GrantOnPrincipalAndResourceOptions.Builder.resourcePolicyPrincipal(IPrincipal resourcePolicyPrincipal) Sets the value of GrantOnPrincipalAndResourceOptions.getResourcePolicyPrincipal()

Method parameters in software.amazon.awscdk.services.iam with type arguments of type IPrincipal

Modifier and Type	Method and Description
PolicyStatement.Builder	PolicyStatement.Builder.notPrincipals(List<? extends IPrincipal> notPrincipals) (experimental) List of not principals to add to the statement.
PolicyStatementProps.Builder	PolicyStatementProps.Builder.notPrincipals(List<? extends IPrincipal> notPrincipals) Sets the value of PolicyStatementProps.getNotPrincipals()
PolicyStatement.Builder	PolicyStatement.Builder.principals(List<? extends IPrincipal> principals) (experimental) List of principals to add to the statement.
PolicyStatementProps.Builder	PolicyStatementProps.Builder.principals(List<? extends IPrincipal> principals) Sets the value of PolicyStatementProps.getPrincipals()

Constructors in software.amazon.awscdk.services.iam with parameters of type IPrincipal

Constructor and Description
Jsii$Proxy(IPrincipal assumedBy, String description, List<String> externalIds, Map<String,? extends PolicyDocument> inlinePolicies, List<? extends IManagedPolicy> managedPolicies, Duration maxSessionDuration, String path, IManagedPolicy permissionsBoundary, String roleName) Constructor that initializes the object based on literal property values passed by the LazyRoleProps.Builder.
Jsii$Proxy(IPrincipal assumedBy, String description, List<String> externalIds, Map<String,? extends PolicyDocument> inlinePolicies, List<? extends IManagedPolicy> managedPolicies, Duration maxSessionDuration, String path, IManagedPolicy permissionsBoundary, String roleName) Constructor that initializes the object based on literal property values passed by the RoleProps.Builder.
Jsii$Proxy(IResourceWithPolicy resource, IPrincipal resourcePolicyPrincipal, List<String> resourceSelfArns, List<String> actions, IGrantable grantee, List<String> resourceArns) Constructor that initializes the object based on literal property values passed by the GrantOnPrincipalAndResourceOptions.Builder.
PrincipalWithConditions(IPrincipal principal, Map<String,Object> conditions)

Constructor parameters in software.amazon.awscdk.services.iam with type arguments of type IPrincipal

Constructor and Description
Jsii$Proxy(List<String> actions, Map<String,? extends Object> conditions, Effect effect, List<String> notActions, List<? extends IPrincipal> notPrincipals, List<String> notResources, List<? extends IPrincipal> principals, List<String> resources, String sid) Constructor that initializes the object based on literal property values passed by the PolicyStatementProps.Builder.
Jsii$Proxy(List<String> actions, Map<String,? extends Object> conditions, Effect effect, List<String> notActions, List<? extends IPrincipal> notPrincipals, List<String> notResources, List<? extends IPrincipal> principals, List<String> resources, String sid) Constructor that initializes the object based on literal property values passed by the PolicyStatementProps.Builder.

Uses of IPrincipal in software.amazon.awscdk.services.kms

Classes in software.amazon.awscdk.services.kms that implement IPrincipal

Modifier and Type	Class and Description
class	ViaServicePrincipal (experimental) A principal to allow access to a key if it's being used through another AWS service.

Methods in software.amazon.awscdk.services.kms that return types with arguments of type IPrincipal

Modifier and Type	Method and Description
default List<IPrincipal>	KeyProps.getAdmins() (experimental) A list of principals to add as key administrators to the key policy.
List<IPrincipal>	KeyProps.Jsii$Proxy.getAdmins()

Method parameters in software.amazon.awscdk.services.kms with type arguments of type IPrincipal

Modifier and Type	Method and Description
Key.Builder	Key.Builder.admins(List<? extends IPrincipal> admins) (experimental) A list of principals to add as key administrators to the key policy.
KeyProps.Builder	KeyProps.Builder.admins(List<? extends IPrincipal> admins) Sets the value of KeyProps.getAdmins()

Constructors in software.amazon.awscdk.services.kms with parameters of type IPrincipal

Constructor and Description
ViaServicePrincipal(String serviceName, IPrincipal basePrincipal)

Constructor parameters in software.amazon.awscdk.services.kms with type arguments of type IPrincipal

Constructor and Description
Jsii$Proxy(List<? extends IPrincipal> admins, String alias, String description, Boolean enabled, Boolean enableKeyRotation, KeySpec keySpec, KeyUsage keyUsage, Duration pendingWindow, PolicyDocument policy, RemovalPolicy removalPolicy) Constructor that initializes the object based on literal property values passed by the KeyProps.Builder.

Uses of IPrincipal in software.amazon.awscdk.services.lambda

Methods in software.amazon.awscdk.services.lambda that return IPrincipal

Modifier and Type	Method and Description
abstract IPrincipal	FunctionBase.getGrantPrincipal() (experimental) The principal this Lambda Function is running as.
IPrincipal	IVersion.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IVersion.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	Alias.getGrantPrincipal() (experimental) The principal this Lambda Function is running as.
IPrincipal	Version.getGrantPrincipal() (experimental) The principal this Lambda Function is running as.
IPrincipal	Function.getGrantPrincipal() (experimental) The principal this Lambda Function is running as.
IPrincipal	SingletonFunction.getGrantPrincipal() (experimental) The principal this Lambda Function is running as.
IPrincipal	IAlias.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IAlias.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	IFunction.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IFunction.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	Permission.getPrincipal() (experimental) The entity for which you are granting permission to invoke the Lambda function.
IPrincipal	Permission.Jsii$Proxy.getPrincipal()

Methods in software.amazon.awscdk.services.lambda with parameters of type IPrincipal

Modifier and Type	Method and Description
Permission.Builder	Permission.Builder.principal(IPrincipal principal) Sets the value of Permission.getPrincipal()

Constructors in software.amazon.awscdk.services.lambda with parameters of type IPrincipal

Constructor and Description
Jsii$Proxy(IPrincipal principal, String action, String eventSourceToken, software.constructs.Construct scope, String sourceAccount, String sourceArn) Constructor that initializes the object based on literal property values passed by the Permission.Builder.

Uses of IPrincipal in software.amazon.awscdk.services.route53

Methods in software.amazon.awscdk.services.route53 that return IPrincipal

Modifier and Type	Method and Description
default IPrincipal	PublicHostedZoneProps.getCrossAccountZoneDelegationPrincipal() (experimental) A principal which is trusted to assume a role for zone delegation.
IPrincipal	PublicHostedZoneProps.Jsii$Proxy.getCrossAccountZoneDelegationPrincipal()

Methods in software.amazon.awscdk.services.route53 with parameters of type IPrincipal

Modifier and Type	Method and Description
PublicHostedZone.Builder	PublicHostedZone.Builder.crossAccountZoneDelegationPrincipal(IPrincipal crossAccountZoneDelegationPrincipal) (experimental) A principal which is trusted to assume a role for zone delegation.
PublicHostedZoneProps.Builder	PublicHostedZoneProps.Builder.crossAccountZoneDelegationPrincipal(IPrincipal crossAccountZoneDelegationPrincipal) Sets the value of PublicHostedZoneProps.getCrossAccountZoneDelegationPrincipal()

Constructors in software.amazon.awscdk.services.route53 with parameters of type IPrincipal

Constructor and Description
Jsii$Proxy(Boolean caaAmazon, IPrincipal crossAccountZoneDelegationPrincipal, String crossAccountZoneDelegationRoleName, String zoneName, String comment, String queryLogsLogGroupArn) Constructor that initializes the object based on literal property values passed by the PublicHostedZoneProps.Builder.

Uses of IPrincipal in software.amazon.awscdk.services.stepfunctions

Methods in software.amazon.awscdk.services.stepfunctions that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	StateMachine.getGrantPrincipal() (experimental) The principal this state machine is running as.
IPrincipal	IStateMachine.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	IStateMachine.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.stepfunctions.tasks

Methods in software.amazon.awscdk.services.stepfunctions.tasks that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	SageMakerCreateModel.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	ISageMakerTask.Jsii$Proxy.getGrantPrincipal() (experimental) The principal to grant permissions to.
default IPrincipal	ISageMakerTask.Jsii$Default.getGrantPrincipal() (experimental) The principal to grant permissions to.
IPrincipal	SageMakerCreateTrainingJob.getGrantPrincipal() (experimental) The principal to grant permissions to.