resolve Aws Unique Ids
Parameters
value
Only valid when auth_type
is iam
. If set to true
, the bound_iam_principal_arns
are resolved to [AWS Unique
IDs](http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-unique-ids) for the bound principal ARN. This field is ignored when a
bound_iam_principal_arn
ends in a wildcard. Resolving to unique IDs more closely mimics the behavior of AWS services in that if an IAM user or role is deleted and a new one is recreated with the same name, those new users or roles won't get access to roles in Vault that were permissioned to the prior principals of the same name. Defaults totrue
. Once set totrue
, this cannot be changed tofalse
without recreating the role.