Ravi Sir's Cards › AWS
IAM user or federation?
This comparison card contrasts IAM user or federation. ${aws:username} homes Works for classic IAM users. It also notes empty for many federated sessions. aws:PrincipalTag homes: Maps IdP claims to session tags for SSO users. The card pairs ${aws:username} homes with IAM-user shops, and aws:PrincipalTag homes with sSO-first orgs.
Read card text
What this card says
IAM user or federation?
${aws:username} homes
Works for classic IAM users; empty for many federated sessions.
aws:PrincipalTag homes
Maps IdP claims to session tags for SSO users.
Key points
Alice IAM user home/alice/*.
Okta groups → tenant tag folders.
Example
Resource …/${aws:username}/* / …/${aws:PrincipalTag/tenant}/*
Use when
IAM-user shops.
SSO-first orgs.