aws-iam-policy-types/dist/esm/actions/ds.d.ts

Autogenerated Typescript types for AWS IAM Policy and enums for all policy actions

/**
 * All IAM policy actions for AWS Directory Service (DS)
 *
 * Extracted by `aws-iam-policy` from
 * https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdirectoryservice.html
 *
 * 2025-02-24T21:47:38.408Z
 */
export declare enum AwsDsActions {
    /**
     * Grants permission to accept a directory sharing request that was sent from the
     * directory owner account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_AcceptSharedDirectory.html
     */
    AcceptSharedDirectory = "ds:AcceptSharedDirectory",
    /**
     * Grants permission to access directory data using the Directory Service Data API
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    AccessDSData = "ds:AccessDSData",
    /**
     * Grants permission to add a CIDR address block to correctly route traffic to and
     * from your Microsoft AD on Amazon Web Services
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_AddIpRoutes.html
     */
    AddIpRoutes = "ds:AddIpRoutes",
    /**
     * Grants permission to add two domain controllers in the specified Region for the
     * specified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_AddRegion.html
     */
    AddRegion = "ds:AddRegion",
    /**
     * Grants permission to add or overwrite one or more tags for the specified Amazon
     * Directory Services directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_AddTagsToResource.html
     */
    AddTagsToResource = "ds:AddTagsToResource",
    /**
     * Grants permission to authorize an application for your AWS Directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    AuthorizeApplication = "ds:AuthorizeApplication",
    /**
     * Grants permission to cancel an in-progress schema extension to a Microsoft AD d
     * irectory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CancelSchemaExtension.html
     */
    CancelSchemaExtension = "ds:CancelSchemaExtension",
    /**
     * Grants permission to verify that the alias is available for use
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    CheckAlias = "ds:CheckAlias",
    /**
     * Grants permission to create an AD Connector to connect to an on-premises direct
     * ory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ConnectDirectory.html
     */
    ConnectDirectory = "ds:ConnectDirectory",
    /**
     * Grants permission to create an alias for a directory and assigns the alias to t
     * he directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateAlias.html
     */
    CreateAlias = "ds:CreateAlias",
    /**
     * Grants permission to create a computer account in the specified directory, and
     * joins the computer to the directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateComputer.html
     */
    CreateComputer = "ds:CreateComputer",
    /**
     * Grants permission to create a conditional forwarder associated with your AWS di
     * rectory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateConditionalForwarder.html
     */
    CreateConditionalForwarder = "ds:CreateConditionalForwarder",
    /**
     * Grants permission to create a Simple AD directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateDirectory.html
     */
    CreateDirectory = "ds:CreateDirectory",
    /**
     * Grants permission to create an IdentityPool Directory in the AWS cloud
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    CreateIdentityPoolDirectory = "ds:CreateIdentityPoolDirectory",
    /**
     * Grants permission to create a subscription to forward real time Directory Servi
     * ce domain controller security logs to the specified CloudWatch log group in you
     * r AWS account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateLogSubscription.html
     */
    CreateLogSubscription = "ds:CreateLogSubscription",
    /**
     * Grants permission to create a Microsoft AD in the AWS cloud
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateMicrosoftAD.html
     */
    CreateMicrosoftAD = "ds:CreateMicrosoftAD",
    /**
     * Grants permission to create a snapshot of a Simple AD or Microsoft AD directory
     * in the AWS cloud
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateSnapshot.html
     */
    CreateSnapshot = "ds:CreateSnapshot",
    /**
     * Grants permission to initiate the creation of the AWS side of a trust relations
     * hip between a Microsoft AD in the AWS cloud and an external domain
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateTrust.html
     */
    CreateTrust = "ds:CreateTrust",
    /**
     * Grants permission to delete a conditional forwarder that has been set up for yo
     * ur AWS directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteConditionalForwarder.html
     */
    DeleteConditionalForwarder = "ds:DeleteConditionalForwarder",
    /**
     * Grants permission to delete an AWS Directory Service directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteDirectory.html
     */
    DeleteDirectory = "ds:DeleteDirectory",
    /**
     * Grants permission to delete the specified log subscription
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteLogSubscription.html
     */
    DeleteLogSubscription = "ds:DeleteLogSubscription",
    /**
     * Grants permission to delete a directory snapshot
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteSnapshot.html
     */
    DeleteSnapshot = "ds:DeleteSnapshot",
    /**
     * Grants permission to delete an existing trust relationship between your Microso
     * ft AD in the AWS cloud and an external domain
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteTrust.html
     */
    DeleteTrust = "ds:DeleteTrust",
    /**
     * Grants permission to delete from the system the certificate that was registered
     * for a secured LDAP connection
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeregisterCertificate.html
     */
    DeregisterCertificate = "ds:DeregisterCertificate",
    /**
     * Grants permission to remove the specified directory as a publisher to the speci
     * fied SNS topic
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeregisterEventTopic.html
     */
    DeregisterEventTopic = "ds:DeregisterEventTopic",
    /**
     * Grants permission to display information about the certificate registered for a
     * secured LDAP connection
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeCertificate.html
     */
    DescribeCertificate = "ds:DescribeCertificate",
    /**
     * Grants permission to retrieve information about the type of client authenticati
     * on for the specified directory, if the type is specified. If no type is specifi
     * ed, information about all client authentication types that are supported for th
     * e specified directory is retrieved. Currently, only SmartCard is supported
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeClientAuthenticationSettings.html
     */
    DescribeClientAuthenticationSettings = "ds:DescribeClientAuthenticationSettings",
    /**
     * Grants permission to obtain information about the conditional forwarders for th
     * is account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeConditionalForwarders.html
     */
    DescribeConditionalForwarders = "ds:DescribeConditionalForwarders",
    /**
     * Grants permission to obtain information about the directories that belong to th
     * is account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeDirectories.html
     */
    DescribeDirectories = "ds:DescribeDirectories",
    /**
     * Grants permission to describe the Directory Service Data API status for the spe
     * cified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeDirectoryDataAccess.html
     */
    DescribeDirectoryDataAccess = "ds:DescribeDirectoryDataAccess",
    /**
     * Grants permission to provide information about any domain controllers in your d
     * irectory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeDomainControllers.html
     */
    DescribeDomainControllers = "ds:DescribeDomainControllers",
    /**
     * Grants permission to obtain information about which SNS topics receive status m
     * essages from the specified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeEventTopics.html
     */
    DescribeEventTopics = "ds:DescribeEventTopics",
    /**
     * Grants permission to describe the status of LDAP security for the specified dir
     * ectory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeLDAPSSettings.html
     */
    DescribeLDAPSSettings = "ds:DescribeLDAPSSettings",
    /**
     * Grants permission to provide information about the Regions that are configured
     * for multi-Region replication
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeRegions.html
     */
    DescribeRegions = "ds:DescribeRegions",
    /**
     * Grants permission to retrieve information about the configurable settings for t
     * he specified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeSettings.html
     */
    DescribeSettings = "ds:DescribeSettings",
    /**
     * Grants permission to return the shared directories in your account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeSharedDirectories.html
     */
    DescribeSharedDirectories = "ds:DescribeSharedDirectories",
    /**
     * Grants permission to obtain information about the directory snapshots that belo
     * ng to this account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeSnapshots.html
     */
    DescribeSnapshots = "ds:DescribeSnapshots",
    /**
     * Grants permission to obtain information about the trust relationships for this
     * account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeTrusts.html
     */
    DescribeTrusts = "ds:DescribeTrusts",
    /**
     * Grants permission to describe the updates of a directory for a particular updat
     * e type
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeUpdateDirectory.html
     */
    DescribeUpdateDirectory = "ds:DescribeUpdateDirectory",
    /**
     * Grants permission to disable alternative client authentication methods for the
     * specified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableClientAuthentication.html
     */
    DisableClientAuthentication = "ds:DisableClientAuthentication",
    /**
     * Grants permission to disable the Directory Service Data API for the specified d
     * irectory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableDirectoryDataAccess.html
     */
    DisableDirectoryDataAccess = "ds:DisableDirectoryDataAccess",
    /**
     * Grants permission to deactivate LDAP secure calls for the specified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableLDAPS.html
     */
    DisableLDAPS = "ds:DisableLDAPS",
    /**
     * Grants permission to disable multi-factor authentication (MFA) with the Remote
     * Authentication Dial In User Service (RADIUS) server for an AD Connector directo
     * ry
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableRadius.html
     */
    DisableRadius = "ds:DisableRadius",
    /**
     * Grants permission to disable AWS Management Console access for identity in your
     * AWS Directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    DisableRoleAccess = "ds:DisableRoleAccess",
    /**
     * Grants permission to disable single-sign on for a directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableSso.html
     */
    DisableSso = "ds:DisableSso",
    /**
     * Grants permission to enable alternative client authentication methods for the s
     * pecified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableClientAuthentication.html
     */
    EnableClientAuthentication = "ds:EnableClientAuthentication",
    /**
     * Grants permission to enable the Directory Service Data API for the specified di
     * rectory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableDirectoryDataAccess.html
     */
    EnableDirectoryDataAccess = "ds:EnableDirectoryDataAccess",
    /**
     * Grants permission to activate the switch for the specific directory to always u
     * se LDAP secure calls
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableLDAPS.html
     */
    EnableLDAPS = "ds:EnableLDAPS",
    /**
     * Grants permission to enable multi-factor authentication (MFA) with the Remote A
     * uthentication Dial In User Service (RADIUS) server for an AD Connector director
     * y
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableRadius.html
     */
    EnableRadius = "ds:EnableRadius",
    /**
     * Grants permission to enable AWS Management Console access for identity in your
     * AWS Directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    EnableRoleAccess = "ds:EnableRoleAccess",
    /**
     * Grants permission to enable single-sign on for a directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableSso.html
     */
    EnableSso = "ds:EnableSso",
    /**
     * Grants permission to retrieve the details of the authorized applications on a d
     * irectory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    GetAuthorizedApplicationDetails = "ds:GetAuthorizedApplicationDetails",
    /**
     * Grants permission to obtain directory limit information for the current region
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_GetDirectoryLimits.html
     */
    GetDirectoryLimits = "ds:GetDirectoryLimits",
    /**
     * Grants permission to obtain the manual snapshot limits for a directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_GetSnapshotLimits.html
     */
    GetSnapshotLimits = "ds:GetSnapshotLimits",
    /**
     * Grants permission to obtain the AWS applications authorized for a directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    ListAuthorizedApplications = "ds:ListAuthorizedApplications",
    /**
     * Grants permission to list all the certificates registered for a secured LDAP co
     * nnection, for the specified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListCertificates.html
     */
    ListCertificates = "ds:ListCertificates",
    /**
     * Grants permission to list the address blocks that you have added to a directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListIpRoutes.html
     */
    ListIpRoutes = "ds:ListIpRoutes",
    /**
     * Grants permission to list the active log subscriptions for the AWS account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListLogSubscriptions.html
     */
    ListLogSubscriptions = "ds:ListLogSubscriptions",
    /**
     * Grants permission to list all schema extensions applied to a Microsoft AD Direc
     * tory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListSchemaExtensions.html
     */
    ListSchemaExtensions = "ds:ListSchemaExtensions",
    /**
     * Grants permission to list all tags on an Amazon Directory Services directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListTagsForResource.html
     */
    ListTagsForResource = "ds:ListTagsForResource",
    /**
     * Grants permission to register a certificate for secured LDAP connection
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RegisterCertificate.html
     */
    RegisterCertificate = "ds:RegisterCertificate",
    /**
     * Grants permission to associate a directory with an SNS topic
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RegisterEventTopic.html
     */
    RegisterEventTopic = "ds:RegisterEventTopic",
    /**
     * Grants permission to reject a directory sharing request that was sent from the
     * directory owner account
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RejectSharedDirectory.html
     */
    RejectSharedDirectory = "ds:RejectSharedDirectory",
    /**
     * Grants permission to remove IP address blocks from a directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RemoveIpRoutes.html
     */
    RemoveIpRoutes = "ds:RemoveIpRoutes",
    /**
     * Grants permission to stop all replication and removes the domain controllers fr
     * om the specified Region. You cannot remove the primary Region with this operati
     * on
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RemoveRegion.html
     */
    RemoveRegion = "ds:RemoveRegion",
    /**
     * Grants permission to remove tags from an Amazon Directory Services directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RemoveTagsFromResource.html
     */
    RemoveTagsFromResource = "ds:RemoveTagsFromResource",
    /**
     * Grants permission to reset the password for any user in your AWS Managed Micros
     * oft AD or Simple AD directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ResetUserPassword.html
     */
    ResetUserPassword = "ds:ResetUserPassword",
    /**
     * Grants permission to restore a directory using an existing directory snapshot
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RestoreFromSnapshot.html
     */
    RestoreFromSnapshot = "ds:RestoreFromSnapshot",
    /**
     * Grants permission to share a specified directory in your AWS account (directory
     * owner) with another AWS account (directory consumer). With this operation you c
     * an use your directory from any AWS account and from any Amazon VPC within an AW
     * S Region
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ShareDirectory.html
     */
    ShareDirectory = "ds:ShareDirectory",
    /**
     * Grants permission to apply a schema extension to a Microsoft AD directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_StartSchemaExtension.html
     */
    StartSchemaExtension = "ds:StartSchemaExtension",
    /**
     * Grants permission to unauthorize an application from your AWS Directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    UnauthorizeApplication = "ds:UnauthorizeApplication",
    /**
     * Grants permission to stop the directory sharing between the directory owner and
     * consumer accounts
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UnshareDirectory.html
     */
    UnshareDirectory = "ds:UnshareDirectory",
    /**
     * Grants permission to update an authorized application for your AWS Directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    UpdateAuthorizedApplication = "ds:UpdateAuthorizedApplication",
    /**
     * Grants permission to update a conditional forwarder that has been set up for yo
     * ur AWS directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateConditionalForwarder.html
     */
    UpdateConditionalForwarder = "ds:UpdateConditionalForwarder",
    /**
     * Grants permission to update the configurations like service account credentials
     * or DNS server IP addresses for the specified directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html
     */
    UpdateDirectory = "ds:UpdateDirectory",
    /**
     * Grants permission to update the directory for a particular update type
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateDirectorySetup.html
     */
    UpdateDirectorySetup = "ds:UpdateDirectorySetup",
    /**
     * Grants permission to add or remove domain controllers to or from the directory.
     * Based on the difference between current value and new value (provided through t
     * his API call), domain controllers will be added or removed. It may take up to 4
     * 5 minutes for any new domain controllers to become fully active once the reques
     * ted number of domain controllers is updated. During this time, you cannot make
     * another update request
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateNumberOfDomainControllers.html
     */
    UpdateNumberOfDomainControllers = "ds:UpdateNumberOfDomainControllers",
    /**
     * Grants permission to update the Remote Authentication Dial In User Service (RAD
     * IUS) server information for an AD Connector directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateRadius.html
     */
    UpdateRadius = "ds:UpdateRadius",
    /**
     * Grants permission to update the configurable settings for the specified directo
     * ry
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateSettings.html
     */
    UpdateSettings = "ds:UpdateSettings",
    /**
     * Grants permission to update the trust that has been set up between your AWS Man
     * aged Microsoft AD directory and an on-premises Active Directory
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateTrust.html
     */
    UpdateTrust = "ds:UpdateTrust",
    /**
     * Grants permission to verify a trust relationship between your Microsoft AD in t
     * he AWS cloud and an external domain
     *
     * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_VerifyTrust.html
     */
    VerifyTrust = "ds:VerifyTrust"
}