IPrincipal

• Extends: IGrantable

• Implemented By: Group, Role, User, IPrincipal

Represents a logical RAM principal.

An IPrincipal describes a logical entity that can perform ACS API calls against sets of resources, optionally under certain conditions.

Examples of principals are RAM objects that you create, such as Users, Roles or Groups.

Methods

add_to_policy

def add_to_policy(
  statement: typing.Union[IResolvable, typing.List[typing.Union[IResolvable, StatementProperty]]],
  version: typing.Union[str, IResolvable]
) -> ManagedPolicy

Add to the policy of this principal.

statement^Required

• Type: typing.Union[ros_cdk_core.IResolvable, typing.List[typing.Union[ros_cdk_core.IResolvable, StatementProperty]]]

version^Required

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Properties

grant_principal^Required

grant_principal: IPrincipal

• Type: IPrincipal

The principal to grant permissions to.

principal_name^Required

principal_name: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

The principal to grant permissions to.

principal_type^Required

principal_type: str

• Type: str

The principal type, such as 'Group', 'Role', 'User'.