AWS::CloudWatch::DomainAccessGrantForOrganization OrganizationAccessGrantPrincipal - AWS CloudFormation
SyntaxProperties
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::CloudWatch::DomainAccessGrantForOrganization OrganizationAccessGrantPrincipal

The principal the grant is issued to. Supply PrincipalId, or PrincipalAttributes for an attribute-based grant.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "PrincipalAttributes" : [ PrincipalAttribute, ... ],
  "PrincipalId" : String,
  "PrincipalType" : String
}

Properties

PrincipalAttributes

Attribute key-value pairs that select the principals the grant applies to.

Required: No

Type: Array of PrincipalAttribute

Maximum: 10

Update requires: Replacement

PrincipalId

The identifier of the principal, such as an IAM role ARN or an Identity Center user ID.

Required: No

Type: String

Pattern: ^[a-zA-Z0-9][a-zA-Z0-9:/_+=,.@-]*$

Minimum: 1

Maximum: 2048

Update requires: Replacement

PrincipalType

The type of principal the grant is issued to.

Required: Yes

Type: String

Allowed values: IDC_USER | IDC_GROUP | IAM_USER | IAM_ROLE | IAM_ROOT

Update requires: Replacement