aws-iam-policy-types/dist/esm/actions/controltower.js

Autogenerated Typescript types for AWS IAM Policy and enums for all policy actions

// AUTOGENERATED FILE - DO NOT EDIT
/**
 * All IAM policy actions for AWS Control Tower (CONTROLTOWER)
 *
 * Extracted by `aws-iam-policy` from
 * https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html
 *
 * 2025-02-24T21:47:27.879Z
 */
export var AwsControltowerActions;
(function (AwsControltowerActions) {
    /**
     * Grants permission to create a landing zone
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_CreateLandingZone.html
     */
    AwsControltowerActions["CreateLandingZone"] = "controltower:CreateLandingZone";
    /**
     * Grants permission to create an account managed by AWS Control Tower
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
     */
    AwsControltowerActions["CreateManagedAccount"] = "controltower:CreateManagedAccount";
    /**
     * Grants permission to delete AWS Control Tower landing zone
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_DeleteLandingZone.html
     */
    AwsControltowerActions["DeleteLandingZone"] = "controltower:DeleteLandingZone";
    /**
     * Grants permission to deregister an account created through the account factory
     * from AWS Control Tower
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
     */
    AwsControltowerActions["DeregisterManagedAccount"] = "controltower:DeregisterManagedAccount";
    /**
     * Grants permission to deregister an organizational unit from AWS Control Tower m
     * anagement
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
     */
    AwsControltowerActions["DeregisterOrganizationalUnit"] = "controltower:DeregisterOrganizationalUnit";
    /**
     * Grants permission to describe the current account factory configuration
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
     */
    AwsControltowerActions["DescribeAccountFactoryConfig"] = "controltower:DescribeAccountFactoryConfig";
    /**
     * Grants permission to describe resources managed by core accounts in AWS Control
     * Tower
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#what-shared
     */
    AwsControltowerActions["DescribeCoreService"] = "controltower:DescribeCoreService";
    /**
     * Grants permission to describe a guardrail
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
     */
    AwsControltowerActions["DescribeGuardrail"] = "controltower:DescribeGuardrail";
    /**
     * Grants permission to describe a guardrail for a organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
     */
    AwsControltowerActions["DescribeGuardrailForTarget"] = "controltower:DescribeGuardrailForTarget";
    /**
     * Grants permission to describe the current Landing Zone configuration
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/step-two.html
     */
    AwsControltowerActions["DescribeLandingZoneConfiguration"] = "controltower:DescribeLandingZoneConfiguration";
    /**
     * Grants permission to describe an account created through account factory
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
     */
    AwsControltowerActions["DescribeManagedAccount"] = "controltower:DescribeManagedAccount";
    /**
     * Grants permission to describe an AWS Organizations organizational unit managed
     * by AWS Control Tower
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
     */
    AwsControltowerActions["DescribeManagedOrganizationalUnit"] = "controltower:DescribeManagedOrganizationalUnit";
    /**
     * Grants permission to describe a Register Organizational Unit Operation
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html
     */
    AwsControltowerActions["DescribeRegisterOrganizationalUnitOperation"] = "controltower:DescribeRegisterOrganizationalUnitOperation";
    /**
     * Grants permission to describe the current AWS Control Tower IAM Identity Center
     * configuration
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/sso.html
     */
    AwsControltowerActions["DescribeSingleSignOn"] = "controltower:DescribeSingleSignOn";
    /**
     * Grants permission to disable a Baseline on a target
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_DisableBaseline.html
     */
    AwsControltowerActions["DisableBaseline"] = "controltower:DisableBaseline";
    /**
     * Grants permission to remove a control from an organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_DisableControl.html
     */
    AwsControltowerActions["DisableControl"] = "controltower:DisableControl";
    /**
     * Grants permission to disable a guardrail from an organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls-on-ou.html
     */
    AwsControltowerActions["DisableGuardrail"] = "controltower:DisableGuardrail";
    /**
     * Grants permission to enable a Baseline on a target
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableBaseline.html
     */
    AwsControltowerActions["EnableBaseline"] = "controltower:EnableBaseline";
    /**
     * Grants permission to activate a control for an organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableControl.html
     */
    AwsControltowerActions["EnableControl"] = "controltower:EnableControl";
    /**
     * Grants permission to enable a guardrail to an organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls-on-ou.html
     */
    AwsControltowerActions["EnableGuardrail"] = "controltower:EnableGuardrail";
    /**
     * Grants permission to describe an account email and validate that it exists
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/accounts.html
     */
    AwsControltowerActions["GetAccountInfo"] = "controltower:GetAccountInfo";
    /**
     * Grants permission to list available updates for the current AWS Control Tower d
     * eployment
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/configuration-updates.html
     */
    AwsControltowerActions["GetAvailableUpdates"] = "controltower:GetAvailableUpdates";
    /**
     * Grants permission to get Baseline details
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaseline.html
     */
    AwsControltowerActions["GetBaseline"] = "controltower:GetBaseline";
    /**
     * Grants permission to get the current status of a particular Baseline operation
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaselineOperation.html
     */
    AwsControltowerActions["GetBaselineOperation"] = "controltower:GetBaselineOperation";
    /**
     * Grants permission to get the current status of a particular EnabledControl or D
     * isableControl operation
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetControlOperation.html
     */
    AwsControltowerActions["GetControlOperation"] = "controltower:GetControlOperation";
    /**
     * Grants permission to get an enabled Baseline
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledBaseline.html
     */
    AwsControltowerActions["GetEnabledBaseline"] = "controltower:GetEnabledBaseline";
    /**
     * Grants permission to get an enabled control from an organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledControl.html
     */
    AwsControltowerActions["GetEnabledControl"] = "controltower:GetEnabledControl";
    /**
     * Grants permission to get the current compliance status of a guardrail
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
     */
    AwsControltowerActions["GetGuardrailComplianceStatus"] = "controltower:GetGuardrailComplianceStatus";
    /**
     * Grants permission to get the home region of the AWS Control Tower setup
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#region-how
     */
    AwsControltowerActions["GetHomeRegion"] = "controltower:GetHomeRegion";
    /**
     * Grants permission to get the current status of the landing zone setup
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZone.html
     */
    AwsControltowerActions["GetLandingZone"] = "controltower:GetLandingZone";
    /**
     * Grants permission to get the current landing zone drift status
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/drift.html
     */
    AwsControltowerActions["GetLandingZoneDriftStatus"] = "controltower:GetLandingZoneDriftStatus";
    /**
     * Grants permission to get the current status of a particular landing zone operat
     * ion
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZoneOperation.html
     */
    AwsControltowerActions["GetLandingZoneOperation"] = "controltower:GetLandingZoneOperation";
    /**
     * Grants permission to get the current status of the landing zone setup
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two
     */
    AwsControltowerActions["GetLandingZoneStatus"] = "controltower:GetLandingZoneStatus";
    /**
     * Grants permission to list Baselines
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListBaselines.html
     */
    AwsControltowerActions["ListBaselines"] = "controltower:ListBaselines";
    /**
     * Grants permission to list all control operations
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListControlOperations.html
     */
    AwsControltowerActions["ListControlOperations"] = "controltower:ListControlOperations";
    /**
     * Grants permission to list the current directory groups available through IAM Id
     * entity Center
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/sso.html
     */
    AwsControltowerActions["ListDirectoryGroups"] = "controltower:ListDirectoryGroups";
    /**
     * Grants permission to list occurrences of drift in AWS Control Tower
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/drift.html
     */
    AwsControltowerActions["ListDriftDetails"] = "controltower:ListDriftDetails";
    /**
     * Grants permission to list enabled Baselines
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledBaselines.html
     */
    AwsControltowerActions["ListEnabledBaselines"] = "controltower:ListEnabledBaselines";
    /**
     * Grants permission to list all enabled controls in a specified organizational un
     * it
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledControls.html
     */
    AwsControltowerActions["ListEnabledControls"] = "controltower:ListEnabledControls";
    /**
     * Grants permission to list currently enabled guardrails
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
     */
    AwsControltowerActions["ListEnabledGuardrails"] = "controltower:ListEnabledGuardrails";
    /**
     * Grants permission to list Precheck details for an Organizational Unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html
     */
    AwsControltowerActions["ListExtendGovernancePrecheckDetails"] = "controltower:ListExtendGovernancePrecheckDetails";
    /**
     * Grants permission to list the compliance of external AWS Config rules
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/review-compliance.html
     */
    AwsControltowerActions["ListExternalConfigRuleCompliance"] = "controltower:ListExternalConfigRuleCompliance";
    /**
     * Grants permission to list existing guardrail violations
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
     */
    AwsControltowerActions["ListGuardrailViolations"] = "controltower:ListGuardrailViolations";
    /**
     * Grants permission to list all available guardrails
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
     */
    AwsControltowerActions["ListGuardrails"] = "controltower:ListGuardrails";
    /**
     * Grants permission to list guardrails and their current state for a organization
     * al unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
     */
    AwsControltowerActions["ListGuardrailsForTarget"] = "controltower:ListGuardrailsForTarget";
    /**
     * Grants permission to list all landing zone operations
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZoneOperations.html
     */
    AwsControltowerActions["ListLandingZoneOperations"] = "controltower:ListLandingZoneOperations";
    /**
     * Grants permission to list all landing zones
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZones.html
     */
    AwsControltowerActions["ListLandingZones"] = "controltower:ListLandingZones";
    /**
     * Grants permission to list accounts managed through AWS Control Tower
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
     */
    AwsControltowerActions["ListManagedAccounts"] = "controltower:ListManagedAccounts";
    /**
     * Grants permission to list managed accounts with a specified guardrail applied
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
     */
    AwsControltowerActions["ListManagedAccountsForGuardrail"] = "controltower:ListManagedAccountsForGuardrail";
    /**
     * Grants permission to list managed accounts under an organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
     */
    AwsControltowerActions["ListManagedAccountsForParent"] = "controltower:ListManagedAccountsForParent";
    /**
     * Grants permission to list organizational units managed by AWS Control Tower
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
     */
    AwsControltowerActions["ListManagedOrganizationalUnits"] = "controltower:ListManagedOrganizationalUnits";
    /**
     * Grants permission to list managed organizational units that have a specified gu
     * ardrail applied
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
     */
    AwsControltowerActions["ListManagedOrganizationalUnitsForGuardrail"] = "controltower:ListManagedOrganizationalUnitsForGuardrail";
    /**
     * Grants permission to list the tags for a resource
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListTagsForResource.html
     */
    AwsControltowerActions["ListTagsForResource"] = "controltower:ListTagsForResource";
    /**
     * Grants permission to set up an organizational unit to be managed by AWS Control
     * Tower
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
     */
    AwsControltowerActions["ManageOrganizationalUnit"] = "controltower:ManageOrganizationalUnit";
    /**
     * Grants permission to perform validations in an account
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-prereqs.html
     */
    AwsControltowerActions["PerformPreLaunchChecks"] = "controltower:PerformPreLaunchChecks";
    /**
     * Grants permission to reset an enabled Baseline
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledBaseline.html
     */
    AwsControltowerActions["ResetEnabledBaseline"] = "controltower:ResetEnabledBaseline";
    /**
     * Grants permission to reset an enabled control for an organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledControl.html
     */
    AwsControltowerActions["ResetEnabledControl"] = "controltower:ResetEnabledControl";
    /**
     * Grants permission to reset a landing zone
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetLandingZone.html
     */
    AwsControltowerActions["ResetLandingZone"] = "controltower:ResetLandingZone";
    /**
     * Grants permission to set up or update AWS Control Tower landing zone
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two
     */
    AwsControltowerActions["SetupLandingZone"] = "controltower:SetupLandingZone";
    /**
     * Grants permission to add tags to a resource
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_TagResource.html
     */
    AwsControltowerActions["TagResource"] = "controltower:TagResource";
    /**
     * Grants permission to remove tags from a resource
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_UntagResource.html
     */
    AwsControltowerActions["UntagResource"] = "controltower:UntagResource";
    /**
     * Grants permission to update the account factory configuration
     *
     * See https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
     */
    AwsControltowerActions["UpdateAccountFactoryConfig"] = "controltower:UpdateAccountFactoryConfig";
    /**
     * Grants permission to update an enabled Baseline
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledBaseline.html
     */
    AwsControltowerActions["UpdateEnabledBaseline"] = "controltower:UpdateEnabledBaseline";
    /**
     * Grants permission to update an enabled control for an organizational unit
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledControl.html
     */
    AwsControltowerActions["UpdateEnabledControl"] = "controltower:UpdateEnabledControl";
    /**
     * Grants permission to update a landing zone
     *
     * See https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateLandingZone.html
     */
    AwsControltowerActions["UpdateLandingZone"] = "controltower:UpdateLandingZone";
})(AwsControltowerActions || (AwsControltowerActions = {}));
//# sourceMappingURL=controltower.js.map