---
title: "GET /things/{thingName}/principals"
method: GET
path: "/things/{thingName}/principals"
---

# GET /things/{thingName}/principals

`GET /things/{thingName}/principals`

Lists the principals associated with the specified thing. A principal can be X.509 certificates, IAM users, groups, and roles, Amazon Cognito identities or federated identities.

Requires permission to access the [ListThingPrincipals](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.

## Path parameters

- `thingName` string, required

## Query parameters

- `nextToken` string
- `maxResults` integer

## Response `200`

Success

- ListThingPrincipalsResponse — The output from the ListThingPrincipals operation.
  - `principals` PrincipalArn[] — The principals associated with the thing.
  - `nextToken` string — The token to use to get the next set of results, or <b>null</b> if there are no additional results.

## Other responses

- `480` — InvalidRequestException
- `481` — ThrottlingException
- `482` — UnauthorizedException
- `483` — ServiceUnavailableException
- `484` — InternalFailureException
- `485` — ResourceNotFoundException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/revisions/deef5c4b09f0/schema)