UNPKG

aws-iam-policy-types

Version:

Autogenerated Typescript types for AWS IAM Policy and enums for all policy actions

250 lines 11.4 kB
// AUTOGENERATED FILE - DO NOT EDIT /** * All IAM policy actions for AWS Shield (SHIELD) * * Extracted by `aws-iam-policy` from * https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsshield.html * * 2025-02-24T21:49:44.359Z */ export var AwsShieldActions; (function (AwsShieldActions) { /** * Grants permission to authorize the DDoS Response team to access the specified A * mazon S3 bucket containing your flow logs * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_AssociateDRTLogBucket.html */ AwsShieldActions["AssociateDRTLogBucket"] = "shield:AssociateDRTLogBucket"; /** * Grants permission to authorize the DDoS Response team using the specified role, * to access your AWS account to assist with DDoS attack mitigation during potenti * al attacks * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_AssociateDRTRole.html */ AwsShieldActions["AssociateDRTRole"] = "shield:AssociateDRTRole"; /** * Grants permission to add health-based detection to the Shield Advanced protecti * on for a resource * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_AssociateHealthCheck.html */ AwsShieldActions["AssociateHealthCheck"] = "shield:AssociateHealthCheck"; /** * Grants permission to initialize proactive engagement and set the list of contac * ts for the DDoS Response Team (DRT) to use * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_AssociateProactiveEngagementDetails.html */ AwsShieldActions["AssociateProactiveEngagementDetails"] = "shield:AssociateProactiveEngagementDetails"; /** * Grants permission to activate DDoS protection service for a given resource ARN * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_CreateProtection.html */ AwsShieldActions["CreateProtection"] = "shield:CreateProtection"; /** * Grants permission to create a grouping of protected resources so they can be ha * ndled as a collective * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_CreateProtectionGroup.html */ AwsShieldActions["CreateProtectionGroup"] = "shield:CreateProtectionGroup"; /** * Grants permission to activate subscription * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_CreateSubscription.html */ AwsShieldActions["CreateSubscription"] = "shield:CreateSubscription"; /** * Grants permission to delete an existing protection * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DeleteProtection.html */ AwsShieldActions["DeleteProtection"] = "shield:DeleteProtection"; /** * Grants permission to remove the specified protection group * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DeleteProtectionGroup.html */ AwsShieldActions["DeleteProtectionGroup"] = "shield:DeleteProtectionGroup"; /** * Grants permission to deactivate subscription * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DeleteSubscription.html */ AwsShieldActions["DeleteSubscription"] = "shield:DeleteSubscription"; /** * Grants permission to get attack details * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DescribeAttack.html */ AwsShieldActions["DescribeAttack"] = "shield:DescribeAttack"; /** * Grants permission to describe information about the number and type of attacks * AWS Shield has detected in the last year * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DescribeAttackStatistics.html */ AwsShieldActions["DescribeAttackStatistics"] = "shield:DescribeAttackStatistics"; /** * Grants permission to describe the current role and list of Amazon S3 log bucket * s used by the DDoS Response team to access your AWS account while assisting wit * h attack mitigation * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DescribeDRTAccess.html */ AwsShieldActions["DescribeDRTAccess"] = "shield:DescribeDRTAccess"; /** * Grants permission to list the email addresses that the DRT can use to contact y * ou during a suspected attack * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DescribeEmergencyContactSettings.html */ AwsShieldActions["DescribeEmergencyContactSettings"] = "shield:DescribeEmergencyContactSettings"; /** * Grants permission to get protection details * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DescribeProtection.html */ AwsShieldActions["DescribeProtection"] = "shield:DescribeProtection"; /** * Grants permission to describe the specification for the specified protection gr * oup * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DescribeProtectionGroup.html */ AwsShieldActions["DescribeProtectionGroup"] = "shield:DescribeProtectionGroup"; /** * Grants permission to get subscription details, such as start time * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DescribeSubscription.html */ AwsShieldActions["DescribeSubscription"] = "shield:DescribeSubscription"; /** * Grants permission to disable application layer automatic response for Shield Ad * vanced protection for a resource * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DisableApplicationLayerAutomaticResponse.html */ AwsShieldActions["DisableApplicationLayerAutomaticResponse"] = "shield:DisableApplicationLayerAutomaticResponse"; /** * Grants permission to remove authorization from the DDoS Response Team (DRT) to * notify contacts about escalations * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DisableProactiveEngagement.html */ AwsShieldActions["DisableProactiveEngagement"] = "shield:DisableProactiveEngagement"; /** * Grants permission to remove the DDoS Response team's access to the specified Am * azon S3 bucket containing your flow logs * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DisassociateDRTLogBucket.html */ AwsShieldActions["DisassociateDRTLogBucket"] = "shield:DisassociateDRTLogBucket"; /** * Grants permission to remove the DDoS Response team's access to your AWS account * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DisassociateDRTRole.html */ AwsShieldActions["DisassociateDRTRole"] = "shield:DisassociateDRTRole"; /** * Grants permission to remove health-based detection from the Shield Advanced pro * tection for a resource * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_DisassociateHealthCheck.html */ AwsShieldActions["DisassociateHealthCheck"] = "shield:DisassociateHealthCheck"; /** * Grants permission to enable application layer automatic response for Shield Adv * anced protection for a resource * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_EnableApplicationLayerAutomaticResponse.html */ AwsShieldActions["EnableApplicationLayerAutomaticResponse"] = "shield:EnableApplicationLayerAutomaticResponse"; /** * Grants permission to authorize the DDoS Response Team (DRT) to use email and ph * one to notify contacts about escalations * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_EnableProactiveEngagement.html */ AwsShieldActions["EnableProactiveEngagement"] = "shield:EnableProactiveEngagement"; /** * Grants permission to get subscription state * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_GetSubscriptionState.html */ AwsShieldActions["GetSubscriptionState"] = "shield:GetSubscriptionState"; /** * Grants permission to list all existing attacks * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_ListAttacks.html */ AwsShieldActions["ListAttacks"] = "shield:ListAttacks"; /** * Grants permission to retrieve the protection groups for the account * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_ListProtectionGroups.html */ AwsShieldActions["ListProtectionGroups"] = "shield:ListProtectionGroups"; /** * Grants permission to list all existing protections * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_ListProtections.html */ AwsShieldActions["ListProtections"] = "shield:ListProtections"; /** * Grants permission to retrieve the resources that are included in the protection * group * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_ListResourcesInProtectionGroup.html */ AwsShieldActions["ListResourcesInProtectionGroup"] = "shield:ListResourcesInProtectionGroup"; /** * Grants permission to get information about AWS tags for a specified Amazon Reso * urce Name (ARN) in AWS Shield * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_ListTagsForResource.html */ AwsShieldActions["ListTagsForResource"] = "shield:ListTagsForResource"; /** * Grants permission to add or updates tags for a resource in AWS Shield * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_TagResource.html */ AwsShieldActions["TagResource"] = "shield:TagResource"; /** * Grants permission to remove tags from a resource in AWS Shield * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_UntagResource.html */ AwsShieldActions["UntagResource"] = "shield:UntagResource"; /** * Grants permission to update application layer automatic response for Shield Adv * anced protection for a resource * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_UpdateApplicationLayerAutomaticResponse.html */ AwsShieldActions["UpdateApplicationLayerAutomaticResponse"] = "shield:UpdateApplicationLayerAutomaticResponse"; /** * Grants permission to update the details of the list of email addresses that the * DRT can use to contact you during a suspected attack * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_UpdateEmergencyContactSettings.html */ AwsShieldActions["UpdateEmergencyContactSettings"] = "shield:UpdateEmergencyContactSettings"; /** * Grants permission to update an existing protection group * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_UpdateProtectionGroup.html */ AwsShieldActions["UpdateProtectionGroup"] = "shield:UpdateProtectionGroup"; /** * Grants permission to update the details of an existing subscription * * See https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/API_UpdateSubscription.html */ AwsShieldActions["UpdateSubscription"] = "shield:UpdateSubscription"; })(AwsShieldActions || (AwsShieldActions = {})); //# sourceMappingURL=shield.js.map