Skip to content

IPrincipal

Represents a logical RAM principal.

An IPrincipal describes a logical entity that can perform ACS API calls against sets of resources, optionally under certain conditions.

Examples of principals are RAM objects that you create, such as Users, Roles or Groups.

Methods

Name Description
addToPolicy Add to the policy of this principal.

addToPolicy

public addToPolicy(policyDocument: PolicyDocumentProperty): ManagedPolicy

Add to the policy of this principal.

policyDocumentRequired


Properties

Name Type Description
grantPrincipal IPrincipal The principal to grant permissions to.
principalName string | @alicloud/ros-cdk-core.IResolvable The principal to grant permissions to.
principalType string The principal type, such as 'Group', 'Role', 'User'.

grantPrincipalRequired

public readonly grantPrincipal: IPrincipal;

The principal to grant permissions to.


principalNameRequired

public readonly principalName: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

The principal to grant permissions to.


principalTypeRequired

public readonly principalType: string;
  • Type: string

The principal type, such as 'Group', 'Role', 'User'.