public class Principal extends Object
Statement
object, not directly the Policy
object.
The principal is A in the statement "A has permission to do B to C where D applies."
In an access control policy statement, you can set the principal to all
authenticated AWS users through the AllUsers
member. This
is useful when you don't want to restrict access based on the identity of the
requester, but instead on other identifying characteristics such as the
requester's IP address.
Modifier and Type | Class and Description |
---|---|
static class |
Principal.Services
The services who have the right to do the assume the role
action.
|
static class |
Principal.WebIdentityProviders
Web identity providers, such as Login with Amazon, Facebook, or Google.
|
Modifier and Type | Field and Description |
---|---|
static Principal |
AllUsers
Principal instance that includes all users, including anonymous users.
|
Constructor and Description |
---|
Principal(Principal.Services service)
Constructs a new principal with the specified AWS web service which
is being allowed or denied access to a resource through an access control
policy.
|
Principal(Principal.WebIdentityProviders webIdentityProvider)
Constructs a new principal with the specified web identity provider.
|
Principal(String accountId)
Constructs a new principal with the specified AWS account ID.
|
Modifier and Type | Method and Description |
---|---|
String |
getId()
Returns the unique ID for this principal.
|
String |
getProvider()
Returns the provider for this principal, which indicates in what group of
users this principal resides.
|
public static final Principal AllUsers
This is useful when you don't want to restrict access based on the identity of the requester, but instead on other identifying characteristics such as the requester's IP address.
public Principal(Principal.Services service)
service
- An AWS service.public Principal(String accountId)
accountId
- An AWS account ID.public Principal(Principal.WebIdentityProviders webIdentityProvider)
webIdentityProvider
- An web identity provider.public String getProvider()
public String getId()
Copyright © 2013 Amazon Web Services, Inc. All Rights Reserved.