Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS
  4. API Docs
  5. accountaccess
  6. getEntitlements
Viewing docs for AWS v7.46.0
published on Thursday, Sep 10, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.accountaccess.getEntitlements

aws logo aws logo
Viewing docs for AWS v7.46.0
published on Thursday, Sep 10, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    Lists AWS Account Access Entitlements for a given Application.

    Example Usage

    Filter by Principal

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.accountaccess.getEntitlements({
    filter: {
        principalRole: {
            principal: {
                identityCenter: {
                    userId: "11111111-2222-3333-4444-555555555555",
                },
            },
        },
    },
    applicationArn: exampleAwsAccountaccessApplication.arn,
});

    import pulumi
import pulumi_aws as aws

example = aws.accountaccess.get_entitlements(filter={
        "principal_role": {
            "principal": {
                "identity_center": {
                    "user_id": "11111111-2222-3333-4444-555555555555",
                },
            },
        },
    },
    application_arn=example_aws_accountaccess_application["arn"])

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/accountaccess"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accountaccess.GetEntitlements(ctx, &accountaccess.GetEntitlementsArgs{
			Filter: accountaccess.GetEntitlementsFilter{
				PrincipalRole: accountaccess.GetEntitlementsFilterPrincipalRole{
					Principal: accountaccess.GetEntitlementsFilterPrincipalRolePrincipal{
						IdentityCenter: accountaccess.GetEntitlementsFilterPrincipalRolePrincipalIdentityCenter{
							UserId: pulumi.StringRef("11111111-2222-3333-4444-555555555555"),
						},
					},
				},
			},
			ApplicationArn: exampleAwsAccountaccessApplication.Arn,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = Aws.AccountAccess.GetEntitlements.Invoke(new()
    {
        Filter = new Aws.AccountAccess.Inputs.GetEntitlementsFilterInputArgs
        {
            PrincipalRole = new Aws.AccountAccess.Inputs.GetEntitlementsFilterPrincipalRoleInputArgs
            {
                Principal = new Aws.AccountAccess.Inputs.GetEntitlementsFilterPrincipalRolePrincipalInputArgs
                {
                    IdentityCenter = new Aws.AccountAccess.Inputs.GetEntitlementsFilterPrincipalRolePrincipalIdentityCenterInputArgs
                    {
                        UserId = "11111111-2222-3333-4444-555555555555",
                    },
                },
            },
        },
        ApplicationArn = exampleAwsAccountaccessApplication.Arn,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.accountaccess.AccountaccessFunctions;
import com.pulumi.aws.accountaccess.inputs.GetEntitlementsArgs;
import com.pulumi.aws.accountaccess.inputs.GetEntitlementsFilterArgs;
import com.pulumi.aws.accountaccess.inputs.GetEntitlementsFilterPrincipalRoleArgs;
import com.pulumi.aws.accountaccess.inputs.GetEntitlementsFilterPrincipalRolePrincipalArgs;
import com.pulumi.aws.accountaccess.inputs.GetEntitlementsFilterPrincipalRolePrincipalIdentityCenterArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = AccountaccessFunctions.getEntitlements(GetEntitlementsArgs.builder()
            .filter(GetEntitlementsFilterArgs.builder()
                .principalRole(GetEntitlementsFilterPrincipalRoleArgs.builder()
                    .principal(GetEntitlementsFilterPrincipalRolePrincipalArgs.builder()
                        .identityCenter(GetEntitlementsFilterPrincipalRolePrincipalIdentityCenterArgs.builder()
                            .userId("11111111-2222-3333-4444-555555555555")
                            .build())
                        .build())
                    .build())
                .build())
            .applicationArn(exampleAwsAccountaccessApplication.arn())
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: aws:accountaccess:getEntitlements
      arguments:
        filter:
          principalRole:
            principal:
              identityCenter:
                userId: 11111111-2222-3333-4444-555555555555
        applicationArn: ${exampleAwsAccountaccessApplication.arn}

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_accountaccess_getentitlements" "example" {
  filter = {
    principal_role = {
      principal = {
        identity_center = {
          user_id = "11111111-2222-3333-4444-555555555555"
        }
      }
    }
  }
  application_arn = exampleAwsAccountaccessApplication.arn
}

    Filter by Target Account

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.accountaccess.getEntitlements({
    filter: {
        principalRole: {
            accountId: "123456789012",
        },
    },
    applicationArn: exampleAwsAccountaccessApplication.arn,
});

    import pulumi
import pulumi_aws as aws

example = aws.accountaccess.get_entitlements(filter={
        "principal_role": {
            "account_id": "123456789012",
        },
    },
    application_arn=example_aws_accountaccess_application["arn"])

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/accountaccess"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accountaccess.GetEntitlements(ctx, &accountaccess.GetEntitlementsArgs{
			Filter: accountaccess.GetEntitlementsFilter{
				PrincipalRole: accountaccess.GetEntitlementsFilterPrincipalRole{
					AccountId: pulumi.StringRef("123456789012"),
				},
			},
			ApplicationArn: exampleAwsAccountaccessApplication.Arn,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = Aws.AccountAccess.GetEntitlements.Invoke(new()
    {
        Filter = new Aws.AccountAccess.Inputs.GetEntitlementsFilterInputArgs
        {
            PrincipalRole = new Aws.AccountAccess.Inputs.GetEntitlementsFilterPrincipalRoleInputArgs
            {
                AccountId = "123456789012",
            },
        },
        ApplicationArn = exampleAwsAccountaccessApplication.Arn,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.accountaccess.AccountaccessFunctions;
import com.pulumi.aws.accountaccess.inputs.GetEntitlementsArgs;
import com.pulumi.aws.accountaccess.inputs.GetEntitlementsFilterArgs;
import com.pulumi.aws.accountaccess.inputs.GetEntitlementsFilterPrincipalRoleArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = AccountaccessFunctions.getEntitlements(GetEntitlementsArgs.builder()
            .filter(GetEntitlementsFilterArgs.builder()
                .principalRole(GetEntitlementsFilterPrincipalRoleArgs.builder()
                    .accountId("123456789012")
                    .build())
                .build())
            .applicationArn(exampleAwsAccountaccessApplication.arn())
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: aws:accountaccess:getEntitlements
      arguments:
        filter:
          principalRole:
            accountId: '123456789012'
        applicationArn: ${exampleAwsAccountaccessApplication.arn}

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_accountaccess_getentitlements" "example" {
  filter = {
    principal_role = {
      account_id = "123456789012"
    }
  }
  application_arn = exampleAwsAccountaccessApplication.arn
}

    Using getEntitlements

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getEntitlements(args: GetEntitlementsArgs, opts?: InvokeOptions): Promise<GetEntitlementsResult>
function getEntitlementsOutput(args: GetEntitlementsOutputArgs, opts?: InvokeOutputOptions): Output<GetEntitlementsResult>
    def get_entitlements(application_arn: Optional[str] = None,
                     filter: Optional[GetEntitlementsFilter] = None,
                     region: Optional[str] = None,
                     opts: Optional[InvokeOptions] = None) -> GetEntitlementsResult
def get_entitlements_output(application_arn: pulumi.Input[Optional[str]] = None,
                     filter: pulumi.Input[Optional[GetEntitlementsFilterArgs]] = None,
                     region: pulumi.Input[Optional[str]] = None,
                     opts: Optional[InvokeOutputOptions] = None) -> Output[GetEntitlementsResult]
    func GetEntitlements(ctx *Context, args *GetEntitlementsArgs, opts ...InvokeOption) (*GetEntitlementsResult, error)
func GetEntitlementsOutput(ctx *Context, args *GetEntitlementsOutputArgs, opts ...InvokeOption) GetEntitlementsResultOutput

    > Note: This function is named GetEntitlements in the Go SDK.

    public static class GetEntitlements 
{
    public static Task<GetEntitlementsResult> InvokeAsync(GetEntitlementsArgs args, InvokeOptions? opts = null)
    public static Output<GetEntitlementsResult> Invoke(GetEntitlementsInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetEntitlementsResult> Invoke(GetEntitlementsInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetEntitlementsResult> getEntitlements(GetEntitlementsArgs args, InvokeOptions options)
public static Output<GetEntitlementsResult> getEntitlements(GetEntitlementsArgs args, InvokeOptions options)
public static Output<GetEntitlementsResult> getEntitlements(GetEntitlementsArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: aws:accountaccess/getEntitlements:getEntitlements
  arguments:
    # arguments dictionary
    data "aws_accountaccess_get_entitlements" "name" {
    # arguments
}

    The following arguments are supported:

    ApplicationArn string
    ARN of the parent Application to list Entitlements within.
    Filter GetEntitlementsFilter

    Filter criteria to narrow the entitlements returned. You can filter by principal, IAM role, or account. See filter Block below.

    The following arguments are optional:

    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    ApplicationArn string
    ARN of the parent Application to list Entitlements within.
    Filter GetEntitlementsFilter

    Filter criteria to narrow the entitlements returned. You can filter by principal, IAM role, or account. See filter Block below.

    The following arguments are optional:

    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    application_arn string
    ARN of the parent Application to list Entitlements within.
    filter object

    Filter criteria to narrow the entitlements returned. You can filter by principal, IAM role, or account. See filter Block below.

    The following arguments are optional:

    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    applicationArn String
    ARN of the parent Application to list Entitlements within.
    filter GetEntitlementsFilter

    Filter criteria to narrow the entitlements returned. You can filter by principal, IAM role, or account. See filter Block below.

    The following arguments are optional:

    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    applicationArn string
    ARN of the parent Application to list Entitlements within.
    filter GetEntitlementsFilter

    Filter criteria to narrow the entitlements returned. You can filter by principal, IAM role, or account. See filter Block below.

    The following arguments are optional:

    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    application_arn str
    ARN of the parent Application to list Entitlements within.
    filter GetEntitlementsFilter

    Filter criteria to narrow the entitlements returned. You can filter by principal, IAM role, or account. See filter Block below.

    The following arguments are optional:

    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    applicationArn String
    ARN of the parent Application to list Entitlements within.
    filter Property Map

    Filter criteria to narrow the entitlements returned. You can filter by principal, IAM role, or account. See filter Block below.

    The following arguments are optional:

    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.

    getEntitlements Result

    The following output properties are available:

    ApplicationArn string
    Entitlements List<GetEntitlementsEntitlement>
    List of matching Entitlements. See entitlements Block below.
    Filter GetEntitlementsFilter
    Region string
    ApplicationArn string
    Entitlements []GetEntitlementsEntitlement
    List of matching Entitlements. See entitlements Block below.
    Filter GetEntitlementsFilter
    Region string
    application_arn string
    entitlements list(object)
    List of matching Entitlements. See entitlements Block below.
    filter object
    region string
    applicationArn String
    entitlements List<GetEntitlementsEntitlement>
    List of matching Entitlements. See entitlements Block below.
    filter GetEntitlementsFilter
    region String
    applicationArn string
    entitlements GetEntitlementsEntitlement[]
    List of matching Entitlements. See entitlements Block below.
    filter GetEntitlementsFilter
    region string
    application_arn str
    entitlements Sequence[GetEntitlementsEntitlement]
    List of matching Entitlements. See entitlements Block below.
    filter GetEntitlementsFilter
    region str
    applicationArn String
    entitlements List<Property Map>
    List of matching Entitlements. See entitlements Block below.
    filter Property Map
    region String

    Supporting Types

    GetEntitlementsEntitlement

    CreatedAt string
    Date and time when the Entitlement was created in RFC 3339 format.
    EntitlementId string
    Service-assigned unique identifier for the Entitlement.
    Entitlements List<GetEntitlementsEntitlementEntitlement>
    Principal-role entitlement configuration. See entitlements.entitlement Block below.
    CreatedAt string
    Date and time when the Entitlement was created in RFC 3339 format.
    EntitlementId string
    Service-assigned unique identifier for the Entitlement.
    Entitlements []GetEntitlementsEntitlementEntitlement
    Principal-role entitlement configuration. See entitlements.entitlement Block below.
    created_at string
    Date and time when the Entitlement was created in RFC 3339 format.
    entitlement_id string
    Service-assigned unique identifier for the Entitlement.
    entitlements list(object)
    Principal-role entitlement configuration. See entitlements.entitlement Block below.
    createdAt String
    Date and time when the Entitlement was created in RFC 3339 format.
    entitlementId String
    Service-assigned unique identifier for the Entitlement.
    entitlements List<GetEntitlementsEntitlementEntitlement>
    Principal-role entitlement configuration. See entitlements.entitlement Block below.
    createdAt string
    Date and time when the Entitlement was created in RFC 3339 format.
    entitlementId string
    Service-assigned unique identifier for the Entitlement.
    entitlements GetEntitlementsEntitlementEntitlement[]
    Principal-role entitlement configuration. See entitlements.entitlement Block below.
    created_at str
    Date and time when the Entitlement was created in RFC 3339 format.
    entitlement_id str
    Service-assigned unique identifier for the Entitlement.
    entitlements Sequence[GetEntitlementsEntitlementEntitlement]
    Principal-role entitlement configuration. See entitlements.entitlement Block below.
    createdAt String
    Date and time when the Entitlement was created in RFC 3339 format.
    entitlementId String
    Service-assigned unique identifier for the Entitlement.
    entitlements List<Property Map>
    Principal-role entitlement configuration. See entitlements.entitlement Block below.

    GetEntitlementsEntitlementEntitlement

    PrincipalRoles List<GetEntitlementsEntitlementEntitlementPrincipalRole>
    Principal-role entitlement configuration. See entitlements.entitlement.principal_role Block below.
    PrincipalRoles []GetEntitlementsEntitlementEntitlementPrincipalRole
    Principal-role entitlement configuration. See entitlements.entitlement.principal_role Block below.
    principal_roles list(object)
    Principal-role entitlement configuration. See entitlements.entitlement.principal_role Block below.
    principalRoles List<GetEntitlementsEntitlementEntitlementPrincipalRole>
    Principal-role entitlement configuration. See entitlements.entitlement.principal_role Block below.
    principalRoles GetEntitlementsEntitlementEntitlementPrincipalRole[]
    Principal-role entitlement configuration. See entitlements.entitlement.principal_role Block below.
    principal_roles Sequence[GetEntitlementsEntitlementEntitlementPrincipalRole]
    Principal-role entitlement configuration. See entitlements.entitlement.principal_role Block below.
    principalRoles List<Property Map>
    Principal-role entitlement configuration. See entitlements.entitlement.principal_role Block below.

    GetEntitlementsEntitlementEntitlementPrincipalRole

    AccountId string
    12-digit AWS account ID for the target role.
    AccountName string
    Human-readable name of the target account.
    Principals List<GetEntitlementsEntitlementEntitlementPrincipalRolePrincipal>
    IAM Identity Center principal granted access. See entitlements.entitlement.principal_role.principal Block below.
    RoleArn string
    Target IAM role ARN.
    AccountId string
    12-digit AWS account ID for the target role.
    AccountName string
    Human-readable name of the target account.
    Principals []GetEntitlementsEntitlementEntitlementPrincipalRolePrincipal
    IAM Identity Center principal granted access. See entitlements.entitlement.principal_role.principal Block below.
    RoleArn string
    Target IAM role ARN.
    account_id string
    12-digit AWS account ID for the target role.
    account_name string
    Human-readable name of the target account.
    principals list(object)
    IAM Identity Center principal granted access. See entitlements.entitlement.principal_role.principal Block below.
    role_arn string
    Target IAM role ARN.
    accountId String
    12-digit AWS account ID for the target role.
    accountName String
    Human-readable name of the target account.
    principals List<GetEntitlementsEntitlementEntitlementPrincipalRolePrincipal>
    IAM Identity Center principal granted access. See entitlements.entitlement.principal_role.principal Block below.
    roleArn String
    Target IAM role ARN.
    accountId string
    12-digit AWS account ID for the target role.
    accountName string
    Human-readable name of the target account.
    principals GetEntitlementsEntitlementEntitlementPrincipalRolePrincipal[]
    IAM Identity Center principal granted access. See entitlements.entitlement.principal_role.principal Block below.
    roleArn string
    Target IAM role ARN.
    account_id str
    12-digit AWS account ID for the target role.
    account_name str
    Human-readable name of the target account.
    principals Sequence[GetEntitlementsEntitlementEntitlementPrincipalRolePrincipal]
    IAM Identity Center principal granted access. See entitlements.entitlement.principal_role.principal Block below.
    role_arn str
    Target IAM role ARN.
    accountId String
    12-digit AWS account ID for the target role.
    accountName String
    Human-readable name of the target account.
    principals List<Property Map>
    IAM Identity Center principal granted access. See entitlements.entitlement.principal_role.principal Block below.
    roleArn String
    Target IAM role ARN.

    GetEntitlementsEntitlementEntitlementPrincipalRolePrincipal

    IdentityCenters List<GetEntitlementsEntitlementEntitlementPrincipalRolePrincipalIdentityCenter>
    IAM Identity Center principal. See entitlements.entitlement.principal_role.principal.identity_center Block below.
    IdentityCenters []GetEntitlementsEntitlementEntitlementPrincipalRolePrincipalIdentityCenter
    IAM Identity Center principal. See entitlements.entitlement.principal_role.principal.identity_center Block below.
    identity_centers list(object)
    IAM Identity Center principal. See entitlements.entitlement.principal_role.principal.identity_center Block below.
    identityCenters List<GetEntitlementsEntitlementEntitlementPrincipalRolePrincipalIdentityCenter>
    IAM Identity Center principal. See entitlements.entitlement.principal_role.principal.identity_center Block below.
    identityCenters GetEntitlementsEntitlementEntitlementPrincipalRolePrincipalIdentityCenter[]
    IAM Identity Center principal. See entitlements.entitlement.principal_role.principal.identity_center Block below.
    identity_centers Sequence[GetEntitlementsEntitlementEntitlementPrincipalRolePrincipalIdentityCenter]
    IAM Identity Center principal. See entitlements.entitlement.principal_role.principal.identity_center Block below.
    identityCenters List<Property Map>
    IAM Identity Center principal. See entitlements.entitlement.principal_role.principal.identity_center Block below.

    GetEntitlementsEntitlementEntitlementPrincipalRolePrincipalIdentityCenter

    GroupId string
    IAM Identity Center group ID.
    UserId string
    IAM Identity Center user ID.
    GroupId string
    IAM Identity Center group ID.
    UserId string
    IAM Identity Center user ID.
    group_id string
    IAM Identity Center group ID.
    user_id string
    IAM Identity Center user ID.
    groupId String
    IAM Identity Center group ID.
    userId String
    IAM Identity Center user ID.
    groupId string
    IAM Identity Center group ID.
    userId string
    IAM Identity Center user ID.
    group_id str
    IAM Identity Center group ID.
    user_id str
    IAM Identity Center user ID.
    groupId String
    IAM Identity Center group ID.
    userId String
    IAM Identity Center user ID.

    GetEntitlementsFilter

    PrincipalRole GetEntitlementsFilterPrincipalRole
    principal-to-role filter criteria for narrowing entitlement results. See filter.principal_role Block below.
    PrincipalRole GetEntitlementsFilterPrincipalRole
    principal-to-role filter criteria for narrowing entitlement results. See filter.principal_role Block below.
    principal_role object
    principal-to-role filter criteria for narrowing entitlement results. See filter.principal_role Block below.
    principalRole GetEntitlementsFilterPrincipalRole
    principal-to-role filter criteria for narrowing entitlement results. See filter.principal_role Block below.
    principalRole GetEntitlementsFilterPrincipalRole
    principal-to-role filter criteria for narrowing entitlement results. See filter.principal_role Block below.
    principal_role GetEntitlementsFilterPrincipalRole
    principal-to-role filter criteria for narrowing entitlement results. See filter.principal_role Block below.
    principalRole Property Map
    principal-to-role filter criteria for narrowing entitlement results. See filter.principal_role Block below.

    GetEntitlementsFilterPrincipalRole

    AccountId string
    AWS account ID to filter entitlements by.
    Principal GetEntitlementsFilterPrincipalRolePrincipal
    principal to filter entitlements by. See filter.principal_role.principal Block below.
    RoleArn string
    IAM role ARN to filter entitlements by.
    AccountId string
    AWS account ID to filter entitlements by.
    Principal GetEntitlementsFilterPrincipalRolePrincipal
    principal to filter entitlements by. See filter.principal_role.principal Block below.
    RoleArn string
    IAM role ARN to filter entitlements by.
    account_id string
    AWS account ID to filter entitlements by.
    principal object
    principal to filter entitlements by. See filter.principal_role.principal Block below.
    role_arn string
    IAM role ARN to filter entitlements by.
    accountId String
    AWS account ID to filter entitlements by.
    principal GetEntitlementsFilterPrincipalRolePrincipal
    principal to filter entitlements by. See filter.principal_role.principal Block below.
    roleArn String
    IAM role ARN to filter entitlements by.
    accountId string
    AWS account ID to filter entitlements by.
    principal GetEntitlementsFilterPrincipalRolePrincipal
    principal to filter entitlements by. See filter.principal_role.principal Block below.
    roleArn string
    IAM role ARN to filter entitlements by.
    account_id str
    AWS account ID to filter entitlements by.
    principal GetEntitlementsFilterPrincipalRolePrincipal
    principal to filter entitlements by. See filter.principal_role.principal Block below.
    role_arn str
    IAM role ARN to filter entitlements by.
    accountId String
    AWS account ID to filter entitlements by.
    principal Property Map
    principal to filter entitlements by. See filter.principal_role.principal Block below.
    roleArn String
    IAM role ARN to filter entitlements by.

    GetEntitlementsFilterPrincipalRolePrincipal

    IdentityCenter GetEntitlementsFilterPrincipalRolePrincipalIdentityCenter
    IAM Identity Center principal filter criteria. See filter.principal_role.principal.identity_center Block below.
    IdentityCenter GetEntitlementsFilterPrincipalRolePrincipalIdentityCenter
    IAM Identity Center principal filter criteria. See filter.principal_role.principal.identity_center Block below.
    identity_center object
    IAM Identity Center principal filter criteria. See filter.principal_role.principal.identity_center Block below.
    identityCenter GetEntitlementsFilterPrincipalRolePrincipalIdentityCenter
    IAM Identity Center principal filter criteria. See filter.principal_role.principal.identity_center Block below.
    identityCenter GetEntitlementsFilterPrincipalRolePrincipalIdentityCenter
    IAM Identity Center principal filter criteria. See filter.principal_role.principal.identity_center Block below.
    identity_center GetEntitlementsFilterPrincipalRolePrincipalIdentityCenter
    IAM Identity Center principal filter criteria. See filter.principal_role.principal.identity_center Block below.
    identityCenter Property Map
    IAM Identity Center principal filter criteria. See filter.principal_role.principal.identity_center Block below.

    GetEntitlementsFilterPrincipalRolePrincipalIdentityCenter

    GroupId string
    IAM Identity Center group ID.
    UserId string
    IAM Identity Center user ID.
    GroupId string
    IAM Identity Center group ID.
    UserId string
    IAM Identity Center user ID.
    group_id string
    IAM Identity Center group ID.
    user_id string
    IAM Identity Center user ID.
    groupId String
    IAM Identity Center group ID.
    userId String
    IAM Identity Center user ID.
    groupId string
    IAM Identity Center group ID.
    userId string
    IAM Identity Center user ID.
    group_id str
    IAM Identity Center group ID.
    user_id str
    IAM Identity Center user ID.
    groupId String
    IAM Identity Center group ID.
    userId String
    IAM Identity Center user ID.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo aws logo
    Viewing docs for AWS v7.46.0
    published on Thursday, Sep 10, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial