OptionalattrApplication-specific attributes describing the principal.
OptionalattributesApplication-specific attributes describing the principal (deprecated).
Use attr instead, for consistency with policy expressions.
A unique identifier for the principal.
OptionalpolicyThe policy version to use when authorizing the principal.
The roles held by the principal.
OptionalscopeThe policy scope to use when authorizing the principal.
A principal (often a user, but potentially another actor like a service account) to authorize.