View a markdown version of this page

IamPrincipal - Amazon Bedrock AgentCore Control Plane
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

IamPrincipal

An IAM principal specification for rule matching.

Contents

arn

The Amazon Resource Name (ARN) of the IAM principal. Supports user, role, and assumed-role ARNs. Wildcards can be used with the StringLike operator.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 2048.

Pattern: (arn:aws[a-zA-Z-]*:iam::(\d{12}|\*):(user|role)/[\w+=,.@*?/-]+|arn:aws[a-zA-Z-]*:sts::(\d{12}|\*):assumed-role/[\w+=,.@*?/-]+)

Required: Yes

operator

The match operator. StringEquals requires an exact match. StringLike supports wildcard patterns using * and ?.

Type: String

Valid Values: StringEquals | StringLike

Required: No

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: