Interface IAssumeRolePrincipal

Namespace

Amazon.CDK.AWS.IAM

Assembly

Amazon.CDK.AWS.IAM.dll

A type of principal that has more control over its own representation in AssumeRolePolicyDocuments.

public interface IAssumeRolePrincipal : IPrincipal, IGrantable

Inherited Members

IPrincipal.AddToPolicy(PolicyStatement)

IPrincipal.AddToPrincipalPolicy(PolicyStatement)

IPrincipal.AssumeRoleAction

IPrincipal.PolicyFragment

IPrincipal.PrincipalAccount

IGrantable.GrantPrincipal

Remarks

More complex types of identity providers need more control over Role's policy documents than simply { Effect: 'Allow', Action: 'AssumeRole', Principal: <Whatever> }.

If that control is necessary, they can implement IAssumeRolePrincipal to get full access to a Role's AssumeRolePolicyDocument.

Methods

AddToAssumeRolePolicy(PolicyDocument)

Add the princpial to the AssumeRolePolicyDocument.

void AddToAssumeRolePolicy(PolicyDocument document)

Parameters

document PolicyDocument

Remarks

Add the statements to the AssumeRolePolicyDocument necessary to give this principal permissions to assume the given role.