IamConfig / RoleSetConfig / RoleConfig / AssumedByConfig

Description

AssumedBy configuration

Service principal:

Example

- principal: ec2.amazonaws.com
type: service

Account principals can be defined using either the account ID (with quotes), the account arn or the name assigned to the account in the accounts-config.yaml.

Example

assumedBy:
- type: account
principal: '111111111111'

Example

assumedBy:
- type: account
principal: Audit

Example

assumedBy:
- type: account
principal: 'arn:aws:iam::111111111111:root'
``
@example

assumedBy:

  • type: principalArn principal: 'arn:aws:iam::111122223333:role/path/role-name' ``

Remarks

In order to use a Principal ARN in the assume role policy, the principal must exist.

Hierarchy

  • IAssumedByConfig

Implemented by

Properties

Properties

principal?: string

Type of IAM principal type like service, account, principalArn or provider, which can assume this role.

IAM principal of either service, account, principalArn or provider type.

IAM principal of sns service type (i.e. new ServicePrincipal('sns.amazonaws.com')), which can assume this role.

Generated using TypeDoc