UNPKG

aws-iam-policy-types

Version:

Autogenerated Typescript types for AWS IAM Policy and enums for all policy actions

564 lines 25.3 kB
// AUTOGENERATED FILE - DO NOT EDIT /** * All IAM policy actions for AWS Directory Service (DS) * * Extracted by `aws-iam-policy` from * https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdirectoryservice.html * * 2025-02-24T21:47:38.408Z */ export var AwsDsActions; (function (AwsDsActions) { /** * Grants permission to accept a directory sharing request that was sent from the * directory owner account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_AcceptSharedDirectory.html */ AwsDsActions["AcceptSharedDirectory"] = "ds:AcceptSharedDirectory"; /** * Grants permission to access directory data using the Directory Service Data API * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["AccessDSData"] = "ds:AccessDSData"; /** * Grants permission to add a CIDR address block to correctly route traffic to and * from your Microsoft AD on Amazon Web Services * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_AddIpRoutes.html */ AwsDsActions["AddIpRoutes"] = "ds:AddIpRoutes"; /** * Grants permission to add two domain controllers in the specified Region for the * specified directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_AddRegion.html */ AwsDsActions["AddRegion"] = "ds:AddRegion"; /** * Grants permission to add or overwrite one or more tags for the specified Amazon * Directory Services directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_AddTagsToResource.html */ AwsDsActions["AddTagsToResource"] = "ds:AddTagsToResource"; /** * Grants permission to authorize an application for your AWS Directory * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["AuthorizeApplication"] = "ds:AuthorizeApplication"; /** * Grants permission to cancel an in-progress schema extension to a Microsoft AD d * irectory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CancelSchemaExtension.html */ AwsDsActions["CancelSchemaExtension"] = "ds:CancelSchemaExtension"; /** * Grants permission to verify that the alias is available for use * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["CheckAlias"] = "ds:CheckAlias"; /** * Grants permission to create an AD Connector to connect to an on-premises direct * ory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ConnectDirectory.html */ AwsDsActions["ConnectDirectory"] = "ds:ConnectDirectory"; /** * Grants permission to create an alias for a directory and assigns the alias to t * he directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateAlias.html */ AwsDsActions["CreateAlias"] = "ds:CreateAlias"; /** * Grants permission to create a computer account in the specified directory, and * joins the computer to the directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateComputer.html */ AwsDsActions["CreateComputer"] = "ds:CreateComputer"; /** * Grants permission to create a conditional forwarder associated with your AWS di * rectory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateConditionalForwarder.html */ AwsDsActions["CreateConditionalForwarder"] = "ds:CreateConditionalForwarder"; /** * Grants permission to create a Simple AD directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateDirectory.html */ AwsDsActions["CreateDirectory"] = "ds:CreateDirectory"; /** * Grants permission to create an IdentityPool Directory in the AWS cloud * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["CreateIdentityPoolDirectory"] = "ds:CreateIdentityPoolDirectory"; /** * Grants permission to create a subscription to forward real time Directory Servi * ce domain controller security logs to the specified CloudWatch log group in you * r AWS account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateLogSubscription.html */ AwsDsActions["CreateLogSubscription"] = "ds:CreateLogSubscription"; /** * Grants permission to create a Microsoft AD in the AWS cloud * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateMicrosoftAD.html */ AwsDsActions["CreateMicrosoftAD"] = "ds:CreateMicrosoftAD"; /** * Grants permission to create a snapshot of a Simple AD or Microsoft AD directory * in the AWS cloud * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateSnapshot.html */ AwsDsActions["CreateSnapshot"] = "ds:CreateSnapshot"; /** * Grants permission to initiate the creation of the AWS side of a trust relations * hip between a Microsoft AD in the AWS cloud and an external domain * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateTrust.html */ AwsDsActions["CreateTrust"] = "ds:CreateTrust"; /** * Grants permission to delete a conditional forwarder that has been set up for yo * ur AWS directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteConditionalForwarder.html */ AwsDsActions["DeleteConditionalForwarder"] = "ds:DeleteConditionalForwarder"; /** * Grants permission to delete an AWS Directory Service directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteDirectory.html */ AwsDsActions["DeleteDirectory"] = "ds:DeleteDirectory"; /** * Grants permission to delete the specified log subscription * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteLogSubscription.html */ AwsDsActions["DeleteLogSubscription"] = "ds:DeleteLogSubscription"; /** * Grants permission to delete a directory snapshot * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteSnapshot.html */ AwsDsActions["DeleteSnapshot"] = "ds:DeleteSnapshot"; /** * Grants permission to delete an existing trust relationship between your Microso * ft AD in the AWS cloud and an external domain * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteTrust.html */ AwsDsActions["DeleteTrust"] = "ds:DeleteTrust"; /** * Grants permission to delete from the system the certificate that was registered * for a secured LDAP connection * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeregisterCertificate.html */ AwsDsActions["DeregisterCertificate"] = "ds:DeregisterCertificate"; /** * Grants permission to remove the specified directory as a publisher to the speci * fied SNS topic * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeregisterEventTopic.html */ AwsDsActions["DeregisterEventTopic"] = "ds:DeregisterEventTopic"; /** * Grants permission to display information about the certificate registered for a * secured LDAP connection * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeCertificate.html */ AwsDsActions["DescribeCertificate"] = "ds:DescribeCertificate"; /** * Grants permission to retrieve information about the type of client authenticati * on for the specified directory, if the type is specified. If no type is specifi * ed, information about all client authentication types that are supported for th * e specified directory is retrieved. Currently, only SmartCard is supported * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeClientAuthenticationSettings.html */ AwsDsActions["DescribeClientAuthenticationSettings"] = "ds:DescribeClientAuthenticationSettings"; /** * Grants permission to obtain information about the conditional forwarders for th * is account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeConditionalForwarders.html */ AwsDsActions["DescribeConditionalForwarders"] = "ds:DescribeConditionalForwarders"; /** * Grants permission to obtain information about the directories that belong to th * is account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeDirectories.html */ AwsDsActions["DescribeDirectories"] = "ds:DescribeDirectories"; /** * Grants permission to describe the Directory Service Data API status for the spe * cified directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeDirectoryDataAccess.html */ AwsDsActions["DescribeDirectoryDataAccess"] = "ds:DescribeDirectoryDataAccess"; /** * Grants permission to provide information about any domain controllers in your d * irectory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeDomainControllers.html */ AwsDsActions["DescribeDomainControllers"] = "ds:DescribeDomainControllers"; /** * Grants permission to obtain information about which SNS topics receive status m * essages from the specified directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeEventTopics.html */ AwsDsActions["DescribeEventTopics"] = "ds:DescribeEventTopics"; /** * Grants permission to describe the status of LDAP security for the specified dir * ectory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeLDAPSSettings.html */ AwsDsActions["DescribeLDAPSSettings"] = "ds:DescribeLDAPSSettings"; /** * Grants permission to provide information about the Regions that are configured * for multi-Region replication * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeRegions.html */ AwsDsActions["DescribeRegions"] = "ds:DescribeRegions"; /** * Grants permission to retrieve information about the configurable settings for t * he specified directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeSettings.html */ AwsDsActions["DescribeSettings"] = "ds:DescribeSettings"; /** * Grants permission to return the shared directories in your account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeSharedDirectories.html */ AwsDsActions["DescribeSharedDirectories"] = "ds:DescribeSharedDirectories"; /** * Grants permission to obtain information about the directory snapshots that belo * ng to this account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeSnapshots.html */ AwsDsActions["DescribeSnapshots"] = "ds:DescribeSnapshots"; /** * Grants permission to obtain information about the trust relationships for this * account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeTrusts.html */ AwsDsActions["DescribeTrusts"] = "ds:DescribeTrusts"; /** * Grants permission to describe the updates of a directory for a particular updat * e type * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeUpdateDirectory.html */ AwsDsActions["DescribeUpdateDirectory"] = "ds:DescribeUpdateDirectory"; /** * Grants permission to disable alternative client authentication methods for the * specified directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableClientAuthentication.html */ AwsDsActions["DisableClientAuthentication"] = "ds:DisableClientAuthentication"; /** * Grants permission to disable the Directory Service Data API for the specified d * irectory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableDirectoryDataAccess.html */ AwsDsActions["DisableDirectoryDataAccess"] = "ds:DisableDirectoryDataAccess"; /** * Grants permission to deactivate LDAP secure calls for the specified directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableLDAPS.html */ AwsDsActions["DisableLDAPS"] = "ds:DisableLDAPS"; /** * Grants permission to disable multi-factor authentication (MFA) with the Remote * Authentication Dial In User Service (RADIUS) server for an AD Connector directo * ry * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableRadius.html */ AwsDsActions["DisableRadius"] = "ds:DisableRadius"; /** * Grants permission to disable AWS Management Console access for identity in your * AWS Directory * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["DisableRoleAccess"] = "ds:DisableRoleAccess"; /** * Grants permission to disable single-sign on for a directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableSso.html */ AwsDsActions["DisableSso"] = "ds:DisableSso"; /** * Grants permission to enable alternative client authentication methods for the s * pecified directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableClientAuthentication.html */ AwsDsActions["EnableClientAuthentication"] = "ds:EnableClientAuthentication"; /** * Grants permission to enable the Directory Service Data API for the specified di * rectory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableDirectoryDataAccess.html */ AwsDsActions["EnableDirectoryDataAccess"] = "ds:EnableDirectoryDataAccess"; /** * Grants permission to activate the switch for the specific directory to always u * se LDAP secure calls * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableLDAPS.html */ AwsDsActions["EnableLDAPS"] = "ds:EnableLDAPS"; /** * Grants permission to enable multi-factor authentication (MFA) with the Remote A * uthentication Dial In User Service (RADIUS) server for an AD Connector director * y * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableRadius.html */ AwsDsActions["EnableRadius"] = "ds:EnableRadius"; /** * Grants permission to enable AWS Management Console access for identity in your * AWS Directory * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["EnableRoleAccess"] = "ds:EnableRoleAccess"; /** * Grants permission to enable single-sign on for a directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableSso.html */ AwsDsActions["EnableSso"] = "ds:EnableSso"; /** * Grants permission to retrieve the details of the authorized applications on a d * irectory * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["GetAuthorizedApplicationDetails"] = "ds:GetAuthorizedApplicationDetails"; /** * Grants permission to obtain directory limit information for the current region * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_GetDirectoryLimits.html */ AwsDsActions["GetDirectoryLimits"] = "ds:GetDirectoryLimits"; /** * Grants permission to obtain the manual snapshot limits for a directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_GetSnapshotLimits.html */ AwsDsActions["GetSnapshotLimits"] = "ds:GetSnapshotLimits"; /** * Grants permission to obtain the AWS applications authorized for a directory * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["ListAuthorizedApplications"] = "ds:ListAuthorizedApplications"; /** * Grants permission to list all the certificates registered for a secured LDAP co * nnection, for the specified directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListCertificates.html */ AwsDsActions["ListCertificates"] = "ds:ListCertificates"; /** * Grants permission to list the address blocks that you have added to a directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListIpRoutes.html */ AwsDsActions["ListIpRoutes"] = "ds:ListIpRoutes"; /** * Grants permission to list the active log subscriptions for the AWS account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListLogSubscriptions.html */ AwsDsActions["ListLogSubscriptions"] = "ds:ListLogSubscriptions"; /** * Grants permission to list all schema extensions applied to a Microsoft AD Direc * tory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListSchemaExtensions.html */ AwsDsActions["ListSchemaExtensions"] = "ds:ListSchemaExtensions"; /** * Grants permission to list all tags on an Amazon Directory Services directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListTagsForResource.html */ AwsDsActions["ListTagsForResource"] = "ds:ListTagsForResource"; /** * Grants permission to register a certificate for secured LDAP connection * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RegisterCertificate.html */ AwsDsActions["RegisterCertificate"] = "ds:RegisterCertificate"; /** * Grants permission to associate a directory with an SNS topic * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RegisterEventTopic.html */ AwsDsActions["RegisterEventTopic"] = "ds:RegisterEventTopic"; /** * Grants permission to reject a directory sharing request that was sent from the * directory owner account * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RejectSharedDirectory.html */ AwsDsActions["RejectSharedDirectory"] = "ds:RejectSharedDirectory"; /** * Grants permission to remove IP address blocks from a directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RemoveIpRoutes.html */ AwsDsActions["RemoveIpRoutes"] = "ds:RemoveIpRoutes"; /** * Grants permission to stop all replication and removes the domain controllers fr * om the specified Region. You cannot remove the primary Region with this operati * on * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RemoveRegion.html */ AwsDsActions["RemoveRegion"] = "ds:RemoveRegion"; /** * Grants permission to remove tags from an Amazon Directory Services directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RemoveTagsFromResource.html */ AwsDsActions["RemoveTagsFromResource"] = "ds:RemoveTagsFromResource"; /** * Grants permission to reset the password for any user in your AWS Managed Micros * oft AD or Simple AD directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ResetUserPassword.html */ AwsDsActions["ResetUserPassword"] = "ds:ResetUserPassword"; /** * Grants permission to restore a directory using an existing directory snapshot * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_RestoreFromSnapshot.html */ AwsDsActions["RestoreFromSnapshot"] = "ds:RestoreFromSnapshot"; /** * Grants permission to share a specified directory in your AWS account (directory * owner) with another AWS account (directory consumer). With this operation you c * an use your directory from any AWS account and from any Amazon VPC within an AW * S Region * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ShareDirectory.html */ AwsDsActions["ShareDirectory"] = "ds:ShareDirectory"; /** * Grants permission to apply a schema extension to a Microsoft AD directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_StartSchemaExtension.html */ AwsDsActions["StartSchemaExtension"] = "ds:StartSchemaExtension"; /** * Grants permission to unauthorize an application from your AWS Directory * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["UnauthorizeApplication"] = "ds:UnauthorizeApplication"; /** * Grants permission to stop the directory sharing between the directory owner and * consumer accounts * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UnshareDirectory.html */ AwsDsActions["UnshareDirectory"] = "ds:UnshareDirectory"; /** * Grants permission to update an authorized application for your AWS Directory * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["UpdateAuthorizedApplication"] = "ds:UpdateAuthorizedApplication"; /** * Grants permission to update a conditional forwarder that has been set up for yo * ur AWS directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateConditionalForwarder.html */ AwsDsActions["UpdateConditionalForwarder"] = "ds:UpdateConditionalForwarder"; /** * Grants permission to update the configurations like service account credentials * or DNS server IP addresses for the specified directory * * See https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html */ AwsDsActions["UpdateDirectory"] = "ds:UpdateDirectory"; /** * Grants permission to update the directory for a particular update type * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateDirectorySetup.html */ AwsDsActions["UpdateDirectorySetup"] = "ds:UpdateDirectorySetup"; /** * Grants permission to add or remove domain controllers to or from the directory. * Based on the difference between current value and new value (provided through t * his API call), domain controllers will be added or removed. It may take up to 4 * 5 minutes for any new domain controllers to become fully active once the reques * ted number of domain controllers is updated. During this time, you cannot make * another update request * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateNumberOfDomainControllers.html */ AwsDsActions["UpdateNumberOfDomainControllers"] = "ds:UpdateNumberOfDomainControllers"; /** * Grants permission to update the Remote Authentication Dial In User Service (RAD * IUS) server information for an AD Connector directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateRadius.html */ AwsDsActions["UpdateRadius"] = "ds:UpdateRadius"; /** * Grants permission to update the configurable settings for the specified directo * ry * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateSettings.html */ AwsDsActions["UpdateSettings"] = "ds:UpdateSettings"; /** * Grants permission to update the trust that has been set up between your AWS Man * aged Microsoft AD directory and an on-premises Active Directory * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateTrust.html */ AwsDsActions["UpdateTrust"] = "ds:UpdateTrust"; /** * Grants permission to verify a trust relationship between your Microsoft AD in t * he AWS cloud and an external domain * * See https://docs.aws.amazon.com/directoryservice/latest/devguide/API_VerifyTrust.html */ AwsDsActions["VerifyTrust"] = "ds:VerifyTrust"; })(AwsDsActions || (AwsDsActions = {})); //# sourceMappingURL=ds.js.map