Hi ! Is it possible to use regular expression to match `principal`to an

id

in a PrincipalPolicy?

Hey - principal policies currently target a single principal so it is a direct match only. What is your use case for regex? We can look at adding it in the future.

I'd like to grant admin-like authorization for people from my organization. I want to use emails as id for Principals, so I wondered if I could use Principal override to grant these authorizations by matching our organization domain against the PrincipalPolicy `principal`property instead of setting a condition in each resource.

Got it. A way to approach this is to create a derived role which is activated based on the email address regex in a condition. This derived role can then be added to a wildcard rules on each resource. It is a bit more flexible this way as you can then control which specific actions these ‘admin-like’ users can do.

Ok thank you 🙂, that was the way I did it until I thought about principal policies.

Whatever is easiest for you, but everything will end up in a Github issue anyway so you have visibility