View a markdown version of this page

IamPrincipal - Amazon Bedrock AgentCore Control Plane

IamPrincipal

An IAM principal specification for rule matching.

Contents

arn

The Amazon Resource Name (ARN) of the IAM principal. Supports user, role, and assumed-role ARNs. Wildcards can be used with the StringLike operator.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 2048.

Pattern: (arn:aws[a-zA-Z-]*:iam::(\d{12}|\*):(user|role)/[\w+=,.@*?/-]+|arn:aws[a-zA-Z-]*:sts::(\d{12}|\*):assumed-role/[\w+=,.@*?/-]+)

Required: Yes

operator

The match operator. StringEquals requires an exact match. StringLike supports wildcard patterns using * and ?.

Type: String

Valid Values: StringEquals | StringLike

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: