iam:Agent
iam:Agent from the iam matrix.
Extends: iam:Principal, matrix:Resource, iam:Assumable
Properties
iam:hasRole (optional)
Assigns a role to a principal.
hasRole must reference a Role
A principal can have multiple roles. Effective permissions are the union of all assigned roles' identity policies.
Values:
- iam:FullAccessRole: Grants complete access to all workspace actions.
- iam:SystemAdminRole: Grants full read, write, and invocation access to all system-defined resources.
- iam:SystemReadRole: Grants read access and action invocation on system-defined resources.
label (required, min 1)
Validation shape for agent label. Agents must have a human-readable label.
Agent must have an rdfs:label with a language tag