{
  "typeName" : "AWS::ServiceCatalog::PortfolioPrincipalAssociation",
  "description" : "Resource Type definition for AWS::ServiceCatalog::PortfolioPrincipalAssociation",
  "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-servicecatalog/tree/master/aws-servicecatalog-portfolioprincipalassociation.git",
  "additionalProperties" : false,
  "properties" : {
    "PrincipalARN" : {
      "type" : "string",
      "description" : "The ARN of the principal (user, role, or group).",
      "pattern" : "arn:(aws|aws-cn|aws-us-gov):iam::[0-9]*:(role|user|group)\\/.*"
    },
    "AcceptLanguage" : {
      "type" : "string",
      "description" : "The language code."
    },
    "PortfolioId" : {
      "type" : "string",
      "description" : "The portfolio identifier."
    },
    "PrincipalType" : {
      "type" : "string",
      "description" : "The principal type. The supported value is IAM if you use a fully defined Amazon Resource Name (ARN), or IAM_PATTERN if you use an ARN with no accountID, with or without wildcard characters."
    }
  },
  "required" : [ "PrincipalType" ],
  "createOnlyProperties" : [ "/properties/AcceptLanguage", "/properties/PortfolioId", "/properties/PrincipalARN", "/properties/PrincipalType" ],
  "writeOnlyProperties" : [ "/properties/AcceptLanguage" ],
  "primaryIdentifier" : [ "/properties/PortfolioId", "/properties/PrincipalARN" ],
  "tagging" : {
    "taggable" : false
  },
  "handlers" : {
    "read" : {
      "permissions" : [ "servicecatalog:ListPrincipalsForPortfolio" ]
    },
    "create" : {
      "permissions" : [ "servicecatalog:AssociatePrincipalWithPortfolio", "servicecatalog:ListPrincipalsForPortfolio", "iam:GetUser", "iam:GetRole", "iam:GetGroup" ]
    },
    "list" : {
      "handlerSchema" : {
        "properties" : {
          "PortfolioId" : {
            "$ref" : "resource-schema.json#/properties/PortfolioId"
          }
        },
        "required" : [ "PortfolioId" ]
      },
      "permissions" : [ "servicecatalog:ListPrincipalsForPortfolio" ]
    },
    "delete" : {
      "permissions" : [ "servicecatalog:DisassociatePrincipalFromPortfolio", "servicecatalog:ListPrincipalsForPortfolio", "iam:GetUser", "iam:GetRole", "iam:GetGroup" ]
    }
  }
}