Dell ObjectScale 1.3 Administration Guide

PDF

Principal types in IAM Policies

This section lists all the supported principal types in IAM policies that allow system account users or IAM users to perform operations.

NOTE:The principal element is not used in IAM identity-based policies. You can use principal elements in trust policies for IAM roles and in resource-based policies (bucket policy and trust policy).

Table 1. Principal Types in IAM Policies
Principal Type	Format
Root user	"Principal": { "AWS": "urn:osc:iam::<account-ID>:root" }
IAM users	"Principal": { "AWS": "urn:osc:iam::<account-ID>:user/<user-name>" }
Federated users (using SAML federation)	"Principal": { "Federated": "urn:osc:iam::<account-ID>:saml-provider/<provider-name>" }
IAM roles	"Principal": { "AWS": "urn:osc:iam::<account-ID>:role/<role-name>" }
Assumed-role sessions	"Principal": { "AWS": "urn:osc:sts::<account-ID>:assumed-role/<role-name>/<role-session-name>" }
Services	"Principal": { "Service": "<service-name>" }
Anonymous users	"Principal" : { "AWS" : "*" }