Uses of Interface
software.amazon.awscdk.services.iam.IPrincipal

Packages that use IPrincipal

Package	Description
software.amazon.awscdk.customresources	AWS CDK Custom Resources
software.amazon.awscdk.pipelines	CDK Pipelines
software.amazon.awscdk.services.autoscaling	Amazon EC2 Auto Scaling Construct Library
software.amazon.awscdk.services.backup	AWS Backup Construct Library
software.amazon.awscdk.services.chatbot	AWS::Chatbot Construct Library
software.amazon.awscdk.services.cloudfront	Amazon CloudFront Construct Library
software.amazon.awscdk.services.cloudfront.experimental
software.amazon.awscdk.services.codebuild	AWS CodeBuild Construct Library
software.amazon.awscdk.services.ec2	Amazon EC2 Construct Library
software.amazon.awscdk.services.eks	Amazon EKS Construct Library
software.amazon.awscdk.services.iam	AWS Identity and Access Management Construct Library
software.amazon.awscdk.services.kms	AWS Key Management Service Construct Library
software.amazon.awscdk.services.lambda	AWS Lambda Construct Library
software.amazon.awscdk.services.route53	Amazon Route53 Construct Library
software.amazon.awscdk.services.stepfunctions	AWS Step Functions Construct Library
software.amazon.awscdk.services.stepfunctions.tasks	Tasks for AWS Step Functions

Uses of IPrincipal in software.amazon.awscdk.customresources

Methods in software.amazon.awscdk.customresources that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	AwsCustomResource.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.pipelines

Methods in software.amazon.awscdk.pipelines that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	CodeBuildStep.getGrantPrincipal() The CodeBuild Project's principal.

Uses of IPrincipal in software.amazon.awscdk.services.autoscaling

Methods in software.amazon.awscdk.services.autoscaling that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	IAutoScalingGroup.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IAutoScalingGroup.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	AutoScalingGroup.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.backup

Methods in software.amazon.awscdk.services.backup that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	BackupSelection.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.chatbot

Methods in software.amazon.awscdk.services.chatbot that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	SlackChannelConfiguration.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	ISlackChannelConfiguration.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	ISlackChannelConfiguration.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.cloudfront

Methods in software.amazon.awscdk.services.cloudfront that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	OriginAccessIdentity.getGrantPrincipal() Derived principal value for bucket access.
IPrincipal	IOriginAccessIdentity.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IOriginAccessIdentity.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.cloudfront.experimental

Methods in software.amazon.awscdk.services.cloudfront.experimental that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	EdgeFunction.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.codebuild

Methods in software.amazon.awscdk.services.codebuild that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	Project.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IProject.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IProject.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.ec2

Methods in software.amazon.awscdk.services.ec2 that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	Instance.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	LaunchTemplate.getGrantPrincipal() Principal to grant permissions to.
IPrincipal	BastionHostLinux.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IInstance.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IInstance.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.eks

Classes in software.amazon.awscdk.services.eks that implement IPrincipal

Modifier and Type	Class and Description
class	ServiceAccount Service Account.

Methods in software.amazon.awscdk.services.eks that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	ServiceAccount.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.iam

Subinterfaces of IPrincipal in software.amazon.awscdk.services.iam

Modifier and Type	Interface and Description
interface	IAssumeRolePrincipal A type of principal that has more control over its own representation in AssumeRolePolicyDocuments.
static interface	IAssumeRolePrincipal.Jsii$Default Internal default implementation for IAssumeRolePrincipal.
interface	IComparablePrincipal Interface for principals that can be compared.
static interface	IComparablePrincipal.Jsii$Default Internal default implementation for IComparablePrincipal.
interface	IGroup Represents an IAM Group.
static interface	IGroup.Jsii$Default Internal default implementation for IGroup.
interface	IIdentity A construct that represents an IAM principal, such as a user, group or role.
static interface	IIdentity.Jsii$Default Internal default implementation for IIdentity.
static interface	IPrincipal.Jsii$Default Internal default implementation for IPrincipal.
interface	IRole A Role object.
static interface	IRole.Jsii$Default Internal default implementation for IRole.
interface	IUser Represents an IAM user.
static interface	IUser.Jsii$Default Internal default implementation for IUser.

Classes in software.amazon.awscdk.services.iam that implement IPrincipal

Modifier and Type	Class and Description
class	AccountPrincipal Specify AWS account ID as the principal entity in a policy to delegate authority to the account.
class	AccountRootPrincipal Use the AWS account into which a stack is deployed as the principal entity in a policy.
class	AnyPrincipal A principal representing all AWS identities in all accounts.
class	ArnPrincipal Specify a principal by the Amazon Resource Name (ARN).
class	CanonicalUserPrincipal A policy principal for canonicalUserIds - useful for S3 bucket policies that use Origin Access identities.
class	CompositePrincipal Represents a principal that has multiple types of principals.
class	FederatedPrincipal Principal entity that represents a federated identity provider such as Amazon Cognito, that can be used to provide temporary security credentials to users who have been authenticated.
class	Group An IAM Group (collection of IAM users) lets you specify permissions for multiple users, which can make it easier to manage permissions for those users.
static class	IAssumeRolePrincipal.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IComparablePrincipal.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IGroup.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IIdentity.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IPrincipal.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IRole.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IUser.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	LazyRole An IAM role that only gets attached to the construct tree once it gets used, not before.
class	OpenIdConnectPrincipal A principal that represents a federated identity provider as from a OpenID Connect provider.
class	OrganizationPrincipal A principal that represents an AWS Organization.
class	PrincipalBase Base class for policy principals.
class	PrincipalWithConditions An IAM principal with additional conditions specifying when the policy is in effect.
class	Role IAM Role.
class	SamlConsolePrincipal Principal entity that represents a SAML federated identity provider for programmatic and AWS Management Console access.
class	SamlPrincipal Principal entity that represents a SAML federated identity provider.
class	ServicePrincipal An IAM principal that represents an AWS service (i.e.
class	SessionTagsPrincipal Enables session tags on role assumptions from a principal.
class	StarPrincipal A principal that uses a literal '*' in the IAM JSON language.
class	UnknownPrincipal A principal for use in resources that need to have a role but it's unknown.
class	User Define a new IAM user.
class	WebIdentityPrincipal A principal that represents a federated identity provider as Web Identity such as Cognito, Amazon, Facebook, Google, etc.

Methods in software.amazon.awscdk.services.iam that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	LazyRoleProps.Jsii$Proxy.getAssumedBy()
IPrincipal	RoleProps.getAssumedBy() The IAM principal (i.e.
IPrincipal	RoleProps.Jsii$Proxy.getAssumedBy()
IPrincipal	IAssumeRolePrincipal.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IAssumeRolePrincipal.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	UnknownPrincipal.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	Role.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	LazyRole.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IIdentity.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IIdentity.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IUser.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IUser.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IRole.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IRole.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	Group.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IGroup.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IGroup.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	PrincipalBase.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IComparablePrincipal.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IComparablePrincipal.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	User.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IGrantable.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IGrantable.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IGrantable.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IPrincipal.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IPrincipal.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	GrantOnPrincipalAndResourceOptions.getResourcePolicyPrincipal() The principal to use in the statement for the resource policy.
IPrincipal	GrantOnPrincipalAndResourceOptions.Jsii$Proxy.getResourcePolicyPrincipal()

Methods in software.amazon.awscdk.services.iam that return types with arguments of type IPrincipal

Modifier and Type	Method and Description
default List<IPrincipal>	PolicyStatementProps.getNotPrincipals() List of not principals to add to the statement.
List<IPrincipal>	PolicyStatementProps.Jsii$Proxy.getNotPrincipals()
List<IPrincipal>	PolicyStatement.getNotPrincipals() The NotPrincipals added to this statement.
default List<IPrincipal>	PolicyStatementProps.getPrincipals() List of principals to add to the statement.
List<IPrincipal>	PolicyStatementProps.Jsii$Proxy.getPrincipals()
List<IPrincipal>	PolicyStatement.getPrincipals() The Principals added to this statement.

Methods in software.amazon.awscdk.services.iam with parameters of type IPrincipal

Modifier and Type	Method and Description
void	PolicyStatement.addNotPrincipals(IPrincipal... notPrincipals) Specify principals that is not allowed or denied access to the "NotPrincipal" section of a policy statement.
CompositePrincipal	CompositePrincipal.addPrincipals(IPrincipal... principals) Adds IAM principals to the composite principal.
void	PolicyStatement.addPrincipals(IPrincipal... principals) Adds principals to the "Principal" section of a policy statement.
Role.Builder	Role.Builder.assumedBy(IPrincipal assumedBy) The IAM principal (i.e.
LazyRole.Builder	LazyRole.Builder.assumedBy(IPrincipal assumedBy) The IAM principal (i.e.
LazyRoleProps.Builder	LazyRoleProps.Builder.assumedBy(IPrincipal assumedBy) Sets the value of RoleProps.getAssumedBy()
RoleProps.Builder	RoleProps.Builder.assumedBy(IPrincipal assumedBy) Sets the value of RoleProps.getAssumedBy()
static String	ComparablePrincipal.dedupeStringFor(IPrincipal x) Return the dedupeString of the given principal, if available.
Grant	Role.grant(IPrincipal grantee, String... actions) Grant the actions defined in actions to the identity Principal on this resource.
Grant	LazyRole.grant(IPrincipal identity, String... actions) Grant the actions defined in actions to the identity Principal on this resource.
Grant	IRole.grant(IPrincipal grantee, String... actions) Grant the actions defined in actions to the identity Principal on this resource.
Grant	IRole.Jsii$Proxy.grant(IPrincipal grantee, String... actions) Grant the actions defined in actions to the identity Principal on this resource.
default Grant	IRole.Jsii$Default.grant(IPrincipal grantee, String... actions) Grant the actions defined in actions to the identity Principal on this resource.
Grant	Role.grantAssumeRole(IPrincipal identity) Grant permissions to the given principal to assume this role.
Grant	LazyRole.grantAssumeRole(IPrincipal identity) Grant permissions to the given principal to assume this role.
Grant	IRole.grantAssumeRole(IPrincipal grantee) Grant permissions to the given principal to assume this role.
Grant	IRole.Jsii$Proxy.grantAssumeRole(IPrincipal grantee) Grant permissions to the given principal to assume this role.
default Grant	IRole.Jsii$Default.grantAssumeRole(IPrincipal grantee) Grant permissions to the given principal to assume this role.
Grant	Role.grantPassRole(IPrincipal identity) Grant permissions to the given principal to pass this role.
Grant	LazyRole.grantPassRole(IPrincipal identity) Grant permissions to the given principal to pass this role.
Grant	IRole.grantPassRole(IPrincipal grantee) Grant permissions to the given principal to pass this role.
Grant	IRole.Jsii$Proxy.grantPassRole(IPrincipal grantee) Grant permissions to the given principal to pass this role.
default Grant	IRole.Jsii$Default.grantPassRole(IPrincipal grantee) Grant permissions to the given principal to pass this role.
static Boolean	ComparablePrincipal.isComparablePrincipal(IPrincipal x) Whether or not the given principal is a comparable principal.
GrantOnPrincipalAndResourceOptions.Builder	GrantOnPrincipalAndResourceOptions.Builder.resourcePolicyPrincipal(IPrincipal resourcePolicyPrincipal) Sets the value of GrantOnPrincipalAndResourceOptions.getResourcePolicyPrincipal()

Method parameters in software.amazon.awscdk.services.iam with type arguments of type IPrincipal

Modifier and Type	Method and Description
PolicyStatementProps.Builder	PolicyStatementProps.Builder.notPrincipals(List<? extends IPrincipal> notPrincipals) Sets the value of PolicyStatementProps.getNotPrincipals()
PolicyStatement.Builder	PolicyStatement.Builder.notPrincipals(List<? extends IPrincipal> notPrincipals) List of not principals to add to the statement.
PolicyStatementProps.Builder	PolicyStatementProps.Builder.principals(List<? extends IPrincipal> principals) Sets the value of PolicyStatementProps.getPrincipals()
PolicyStatement.Builder	PolicyStatement.Builder.principals(List<? extends IPrincipal> principals) List of principals to add to the statement.

Constructors in software.amazon.awscdk.services.iam with parameters of type IPrincipal

Constructor and Description
CompositePrincipal(IPrincipal... principals)
PrincipalWithConditions(IPrincipal principal, Map<String,Object> conditions)
SessionTagsPrincipal(IPrincipal principal)

Uses of IPrincipal in software.amazon.awscdk.services.kms

Classes in software.amazon.awscdk.services.kms that implement IPrincipal

Modifier and Type	Class and Description
class	ViaServicePrincipal A principal to allow access to a key if it's being used through another AWS service.

Methods in software.amazon.awscdk.services.kms that return types with arguments of type IPrincipal

Modifier and Type	Method and Description
default List<IPrincipal>	KeyProps.getAdmins() A list of principals to add as key administrators to the key policy.
List<IPrincipal>	KeyProps.Jsii$Proxy.getAdmins()

Method parameters in software.amazon.awscdk.services.kms with type arguments of type IPrincipal

Modifier and Type	Method and Description
KeyProps.Builder	KeyProps.Builder.admins(List<? extends IPrincipal> admins) Sets the value of KeyProps.getAdmins()
Key.Builder	Key.Builder.admins(List<? extends IPrincipal> admins) A list of principals to add as key administrators to the key policy.

Constructors in software.amazon.awscdk.services.kms with parameters of type IPrincipal

Constructor and Description
ViaServicePrincipal(String serviceName, IPrincipal basePrincipal)

Uses of IPrincipal in software.amazon.awscdk.services.lambda

Methods in software.amazon.awscdk.services.lambda that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	Alias.getGrantPrincipal() The principal this Lambda Function is running as.
IPrincipal	Function.getGrantPrincipal() The principal this Lambda Function is running as.
abstract IPrincipal	FunctionBase.getGrantPrincipal() The principal this Lambda Function is running as.
IPrincipal	IAlias.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IAlias.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	SingletonFunction.getGrantPrincipal() The principal this Lambda Function is running as.
IPrincipal	IFunction.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IFunction.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	IVersion.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IVersion.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	Version.getGrantPrincipal() The principal this Lambda Function is running as.
IPrincipal	Permission.getPrincipal() The entity for which you are granting permission to invoke the Lambda function.
IPrincipal	Permission.Jsii$Proxy.getPrincipal()

Methods in software.amazon.awscdk.services.lambda with parameters of type IPrincipal

Modifier and Type	Method and Description
Permission.Builder	Permission.Builder.principal(IPrincipal principal) Sets the value of Permission.getPrincipal()

Uses of IPrincipal in software.amazon.awscdk.services.route53

Methods in software.amazon.awscdk.services.route53 that return IPrincipal

Modifier and Type	Method and Description
default IPrincipal	PublicHostedZoneProps.getCrossAccountZoneDelegationPrincipal() A principal which is trusted to assume a role for zone delegation.
IPrincipal	PublicHostedZoneProps.Jsii$Proxy.getCrossAccountZoneDelegationPrincipal()

Methods in software.amazon.awscdk.services.route53 with parameters of type IPrincipal

Modifier and Type	Method and Description
PublicHostedZone.Builder	PublicHostedZone.Builder.crossAccountZoneDelegationPrincipal(IPrincipal crossAccountZoneDelegationPrincipal) A principal which is trusted to assume a role for zone delegation.
PublicHostedZoneProps.Builder	PublicHostedZoneProps.Builder.crossAccountZoneDelegationPrincipal(IPrincipal crossAccountZoneDelegationPrincipal) Sets the value of PublicHostedZoneProps.getCrossAccountZoneDelegationPrincipal()

Uses of IPrincipal in software.amazon.awscdk.services.stepfunctions

Methods in software.amazon.awscdk.services.stepfunctions that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	StateMachine.getGrantPrincipal() The principal this state machine is running as.
IPrincipal	IStateMachine.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	IStateMachine.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.

Uses of IPrincipal in software.amazon.awscdk.services.stepfunctions.tasks

Methods in software.amazon.awscdk.services.stepfunctions.tasks that return IPrincipal

Modifier and Type	Method and Description
IPrincipal	ISageMakerTask.Jsii$Proxy.getGrantPrincipal() The principal to grant permissions to.
default IPrincipal	ISageMakerTask.Jsii$Default.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	SageMakerCreateTrainingJob.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	EmrContainersStartJobRun.getGrantPrincipal() The principal to grant permissions to.
IPrincipal	SageMakerCreateModel.getGrantPrincipal() The principal to grant permissions to.