PrincipalRoleEntitlementDetails

Contains detailed information about a principal-to-role entitlement, including the target account.

account

The 12-digit AWS account ID where the IAM role resides.

Type: String

Length Constraints: Fixed length of 12.

Pattern: [0-9]{12}

Required: Yes

principal

The principal (user or group) that is granted access to assume the IAM role.

Type: Principal object

Note: This object is a Union. Only one member of this object can be specified or returned.

Required: Yes

roleArn

The ARN of the IAM role that the principal can assume.

Type: String

Pattern: arn:[a-z0-9-]+:iam::[0-9]{12}:role/([a-zA-Z0-9+=,.@_-]+/)*[a-zA-Z0-9+=,.@_-]+

Required: Yes

accountName

The friendly name of the AWS account where the IAM role resides.

Type: String

Required: No

Contents