View a markdown version of this page

PrincipalRoleEntitlement - Account access manager

PrincipalRoleEntitlement

Specifies a principal-to-role entitlement that grants an IAM Identity Center principal permission to assume an IAM role.

Contents

principal

The principal (user or group) that is granted access to assume the IAM role.

Type: Principal object

Note: This object is a Union. Only one member of this object can be specified or returned.

Required: Yes

roleArn

The ARN of the IAM role that the principal can assume.

Type: String

Pattern: arn:[a-z0-9-]+:iam::[0-9]{12}:role/([a-zA-Z0-9+=,.@_-]+/)*[a-zA-Z0-9+=,.@_-]+

Required: Yes

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: