cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
1,226 lines (1,225 loc) • 41.3 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
import { aws_iam as iam } from "aws-cdk-lib";
/**
* Statement provider for service [mgn](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsapplicationmigrationservice.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Mgn extends PolicyStatement {
servicePrefix: string;
/**
* Grants permission to archive an application
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ArchiveApplication.html
*/
toArchiveApplication(): this;
/**
* Grants permission to archive a wave
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ArchiveWave.html
*/
toArchiveWave(): this;
/**
* Grants permission to associate applications to a wave
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_AssociateApplications.html
*/
toAssociateApplications(): this;
/**
* Grants permission to associate source servers to an application
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_AssociateSourceServers.html
*/
toAssociateSourceServers(): this;
/**
* Grants permission to create volume snapshot group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toBatchCreateVolumeSnapshotGroupForMgn(): this;
/**
* Grants permission to batch delete snapshot request
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toBatchDeleteSnapshotRequestForMgn(): this;
/**
* Grants permission to change source server life cycle state
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ChangeServerLifeCycleState.html
*/
toChangeServerLifeCycleState(): this;
/**
* Grants permission to create an application
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_CreateApplication.html
*/
toCreateApplication(): this;
/**
* Grants permission to create connector
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_CreateConnector.html
*/
toCreateConnector(): this;
/**
* Grants permission to create launch configuration template
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_CreateLaunchConfigurationTemplate.html
*/
toCreateLaunchConfigurationTemplate(): this;
/**
* Grants permission to create replication configuration template
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_CreateReplicationConfigurationTemplate.html
*/
toCreateReplicationConfigurationTemplate(): this;
/**
* Grants permission to create vcenter client
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toCreateVcenterClientForMgn(): this;
/**
* Grants permission to create a wave
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_CreateWave.html
*/
toCreateWave(): this;
/**
* Grants permission to delete an application
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DeleteApplication.html
*/
toDeleteApplication(): this;
/**
* Grants permission to delete connector
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DeleteConnector.html
*/
toDeleteConnector(): this;
/**
* Grants permission to delete job
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DeleteJob.html
*/
toDeleteJob(): this;
/**
* Grants permission to delete launch configuration template
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DeleteLaunchConfigurationTemplate.html
*/
toDeleteLaunchConfigurationTemplate(): this;
/**
* Grants permission to delete replication configuration template
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DeleteReplicationConfigurationTemplate.html
*/
toDeleteReplicationConfigurationTemplate(): this;
/**
* Grants permission to delete source server
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DeleteSourceServer.html
*/
toDeleteSourceServer(): this;
/**
* Grants permission to delete vcenter client
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DeleteVcenterClient.html
*/
toDeleteVcenterClient(): this;
/**
* Grants permission to delete a wave
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DeleteWave.html
*/
toDeleteWave(): this;
/**
* Grants permission to describe job log items
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DescribeJobLogItems.html
*/
toDescribeJobLogItems(): this;
/**
* Grants permission to describe jobs
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DescribeJobs.html
*/
toDescribeJobs(): this;
/**
* Grants permission to describe launch configuration template
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DescribeLaunchConfigurationTemplates.html
*/
toDescribeLaunchConfigurationTemplates(): this;
/**
* Grants permission to describe replication configuration template
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DescribeReplicationConfigurationTemplates.html
*/
toDescribeReplicationConfigurationTemplates(): this;
/**
* Grants permission to describe replication server associations
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toDescribeReplicationServerAssociationsForMgn(): this;
/**
* Grants permission to describe snapshots requests
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toDescribeSnapshotRequestsForMgn(): this;
/**
* Grants permission to describe source servers
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DescribeSourceServers.html
*/
toDescribeSourceServers(): this;
/**
* Grants permission to describe vcenter clients
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DescribeVcenterClients.html
*/
toDescribeVcenterClients(): this;
/**
* Grants permission to disassociate applications from a wave
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DisassociateApplications.html
*/
toDisassociateApplications(): this;
/**
* Grants permission to disassociate source servers from an application
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DisassociateSourceServers.html
*/
toDisassociateSourceServers(): this;
/**
* Grants permission to disconnect source server from service
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_DisconnectFromService.html
*/
toDisconnectFromService(): this;
/**
* Grants permission to finalize cutover
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_FinalizeCutover.html
*/
toFinalizeCutover(): this;
/**
* Grants permission to get agent command
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toGetAgentCommandForMgn(): this;
/**
* Grants permission to get agent confirmed resume info
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toGetAgentConfirmedResumeInfoForMgn(): this;
/**
* Grants permission to get agent installation assets
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toGetAgentInstallationAssetsForMgn(): this;
/**
* Grants permission to get agent replication info
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toGetAgentReplicationInfoForMgn(): this;
/**
* Grants permission to get agent runtime configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toGetAgentRuntimeConfigurationForMgn(): this;
/**
* Grants permission to get agent snapshots credits
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toGetAgentSnapshotCreditsForMgn(): this;
/**
* Grants permission to get channel commands
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toGetChannelCommandsForMgn(): this;
/**
* Grants permission to get launch configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_GetLaunchConfiguration.html
*/
toGetLaunchConfiguration(): this;
/**
* Grants permission to get replication configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_GetReplicationConfiguration.html
*/
toGetReplicationConfiguration(): this;
/**
* Grants permission to get vcenter client commands
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toGetVcenterClientCommandsForMgn(): this;
/**
* Grants permission to initialize service
*
* Access Level: Write
*
* Dependent actions:
* - iam:AddRoleToInstanceProfile
* - iam:CreateInstanceProfile
* - iam:CreateServiceLinkedRole
* - iam:GetInstanceProfile
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_InitializeService.html
*/
toInitializeService(): this;
/**
* Grants permission to issue a client certificate
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toIssueClientCertificateForMgn(): this;
/**
* Grants permission to list application summaries
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListApplications.html
*/
toListApplications(): this;
/**
* Grants permission to list connectors
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListConnectors.html
*/
toListConnectors(): this;
/**
* Grants permission to list the errors of an export task
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListExportErrors.html
*/
toListExportErrors(): this;
/**
* Grants permission to list export tasks
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListExports.html
*/
toListExports(): this;
/**
* Grants permission to list the errors of an import task
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListImportErrors.html
*/
toListImportErrors(): this;
/**
* Grants permission to list the import tasks
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListImports.html
*/
toListImports(): this;
/**
* Grants permission to list managed accounts
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListManagedAccounts.html
*/
toListManagedAccounts(): this;
/**
* Grants permission to list source server action documents
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListSourceServerActions.html
*/
toListSourceServerActions(): this;
/**
* Grants permission to list tags for a resource
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListTagsForResource.html
*/
toListTagsForResource(): this;
/**
* Grants permission to list launch configuration template action documents
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListTemplateActions.html
*/
toListTemplateActions(): this;
/**
* Grants permission to list wave summaries
*
* Access Level: List
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListWaves.html
*/
toListWaves(): this;
/**
* Grants permission to mark source server as archived
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_MarkAsArchived.html
*/
toMarkAsArchived(): this;
/**
* Grants permission to notify agent authentication
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toNotifyAgentAuthenticationForMgn(): this;
/**
* Grants permission to notify agent is connected
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toNotifyAgentConnectedForMgn(): this;
/**
* Grants permission to notify agent is disconnected
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toNotifyAgentDisconnectedForMgn(): this;
/**
* Grants permission to notify agent replication progress
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toNotifyAgentReplicationProgressForMgn(): this;
/**
* Grants permission to notify vcenter client started
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toNotifyVcenterClientStartedForMgn(): this;
/**
* Grants permission to pause replication
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_PauseReplication.html
*/
toPauseReplication(): this;
/**
* Grants permission to put source server action document
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_PutSourceServerAction.html
*/
toPutSourceServerAction(): this;
/**
* Grants permission to put launch configuration template action document
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_PutTemplateAction.html
*/
toPutTemplateAction(): this;
/**
* Grants permission to register agent
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toRegisterAgentForMgn(): this;
/**
* Grants permission to remove source server action document
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_RemoveSourceServerAction.html
*/
toRemoveSourceServerAction(): this;
/**
* Grants permission to remove launch configuration template action document
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_RemoveTemplateAction.html
*/
toRemoveTemplateAction(): this;
/**
* Grants permission to resume replication
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_ResumeReplication.html
*/
toResumeReplication(): this;
/**
* Grants permission to retry replication
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_RetryDataReplication.html
*/
toRetryDataReplication(): this;
/**
* Grants permission to send agent logs
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toSendAgentLogsForMgn(): this;
/**
* Grants permission to send agent metrics
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toSendAgentMetricsForMgn(): this;
/**
* Grants permission to send channel command result
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toSendChannelCommandResultForMgn(): this;
/**
* Grants permission to send client logs
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toSendClientLogsForMgn(): this;
/**
* Grants permission to send client metrics
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toSendClientMetricsForMgn(): this;
/**
* Grants permission to send vcenter client command result
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toSendVcenterClientCommandResultForMgn(): this;
/**
* Grants permission to send vcenter client logs
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toSendVcenterClientLogsForMgn(): this;
/**
* Grants permission to send vcenter client metrics
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toSendVcenterClientMetricsForMgn(): this;
/**
* Grants permission to start cutover
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - ec2:AttachVolume
* - ec2:AuthorizeSecurityGroupEgress
* - ec2:AuthorizeSecurityGroupIngress
* - ec2:CreateLaunchTemplate
* - ec2:CreateLaunchTemplateVersion
* - ec2:CreateSecurityGroup
* - ec2:CreateSnapshot
* - ec2:CreateTags
* - ec2:CreateVolume
* - ec2:DeleteLaunchTemplateVersions
* - ec2:DeleteSnapshot
* - ec2:DeleteVolume
* - ec2:DescribeAccountAttributes
* - ec2:DescribeAvailabilityZones
* - ec2:DescribeImages
* - ec2:DescribeInstanceAttribute
* - ec2:DescribeInstanceStatus
* - ec2:DescribeInstanceTypes
* - ec2:DescribeInstances
* - ec2:DescribeLaunchTemplateVersions
* - ec2:DescribeLaunchTemplates
* - ec2:DescribeSecurityGroups
* - ec2:DescribeSnapshots
* - ec2:DescribeSubnets
* - ec2:DescribeVolumes
* - ec2:DetachVolume
* - ec2:ModifyInstanceAttribute
* - ec2:ModifyLaunchTemplate
* - ec2:ReportInstanceStatus
* - ec2:RevokeSecurityGroupEgress
* - ec2:RunInstances
* - ec2:StartInstances
* - ec2:StopInstances
* - ec2:TerminateInstances
* - iam:PassRole
* - mgn:ListTagsForResource
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartCutover.html
*/
toStartCutover(): this;
/**
* Grants permission to start an export task
*
* Access Level: Write
*
* Dependent actions:
* - ec2:DescribeLaunchTemplateVersions
* - mgn:DescribeSourceServers
* - mgn:GetLaunchConfiguration
* - mgn:ListApplications
* - mgn:ListWaves
* - s3:PutObject
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartExport.html
*/
toStartExport(): this;
/**
* Grants permission to create an import task
*
* Access Level: Write
*
* Dependent actions:
* - ec2:CreateLaunchTemplateVersion
* - ec2:DescribeLaunchTemplateVersions
* - ec2:ModifyLaunchTemplate
* - mgn:DescribeSourceServers
* - mgn:GetLaunchConfiguration
* - mgn:ListApplications
* - mgn:ListWaves
* - mgn:TagResource
* - mgn:UpdateLaunchConfiguration
* - s3:PutObject
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartImport.html
*/
toStartImport(): this;
/**
* Grants permission to start replication
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartReplication.html
*/
toStartReplication(): this;
/**
* Grants permission to start test
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - ec2:AttachVolume
* - ec2:AuthorizeSecurityGroupEgress
* - ec2:AuthorizeSecurityGroupIngress
* - ec2:CreateLaunchTemplate
* - ec2:CreateLaunchTemplateVersion
* - ec2:CreateSecurityGroup
* - ec2:CreateSnapshot
* - ec2:CreateTags
* - ec2:CreateVolume
* - ec2:DeleteLaunchTemplateVersions
* - ec2:DeleteSnapshot
* - ec2:DeleteVolume
* - ec2:DescribeAccountAttributes
* - ec2:DescribeAvailabilityZones
* - ec2:DescribeImages
* - ec2:DescribeInstanceAttribute
* - ec2:DescribeInstanceStatus
* - ec2:DescribeInstanceTypes
* - ec2:DescribeInstances
* - ec2:DescribeLaunchTemplateVersions
* - ec2:DescribeLaunchTemplates
* - ec2:DescribeSecurityGroups
* - ec2:DescribeSnapshots
* - ec2:DescribeSubnets
* - ec2:DescribeVolumes
* - ec2:DetachVolume
* - ec2:ModifyInstanceAttribute
* - ec2:ModifyLaunchTemplate
* - ec2:ReportInstanceStatus
* - ec2:RevokeSecurityGroupEgress
* - ec2:RunInstances
* - ec2:StartInstances
* - ec2:StopInstances
* - ec2:TerminateInstances
* - iam:PassRole
* - mgn:ListTagsForResource
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartTest.html
*/
toStartTest(): this;
/**
* Grants permission to stop replication
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_StopReplication.html
*/
toStopReplication(): this;
/**
* Grants permission to assign a resource tag
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifCreateAction()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_TagResource.html
*/
toTagResource(): this;
/**
* Grants permission to terminate target instances
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - ec2:DeleteVolume
* - ec2:DescribeInstances
* - ec2:DescribeVolumes
* - ec2:TerminateInstances
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_TerminateTargetInstances.html
*/
toTerminateTargetInstances(): this;
/**
* Grants permission to unarchive an application
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UnarchiveApplication.html
*/
toUnarchiveApplication(): this;
/**
* Grants permission to unarchive a wave
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UnarchiveWave.html
*/
toUnarchiveWave(): this;
/**
* Grants permission to untag a resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UntagResource.html
*/
toUntagResource(): this;
/**
* Grants permission to update agent backlog
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toUpdateAgentBacklogForMgn(): this;
/**
* Grants permission to update agent conversion info
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toUpdateAgentConversionInfoForMgn(): this;
/**
* Grants permission to update agent replication info
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toUpdateAgentReplicationInfoForMgn(): this;
/**
* Grants permission to update agent replication process state
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toUpdateAgentReplicationProcessStateForMgn(): this;
/**
* Grants permission to update agent source properties
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toUpdateAgentSourcePropertiesForMgn(): this;
/**
* Grants permission to update an application
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateApplication.html
*/
toUpdateApplication(): this;
/**
* Grants permission to update connector
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateConnector.html
*/
toUpdateConnector(): this;
/**
* Grants permission to update launch configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateLaunchConfiguration.html
*/
toUpdateLaunchConfiguration(): this;
/**
* Grants permission to update launch configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateLaunchConfigurationTemplate.html
*/
toUpdateLaunchConfigurationTemplate(): this;
/**
* Grants permission to update replication configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateReplicationConfiguration.html
*/
toUpdateReplicationConfiguration(): this;
/**
* Grants permission to update replication configuration template
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateReplicationConfigurationTemplate.html
*/
toUpdateReplicationConfigurationTemplate(): this;
/**
* Grants permission to update source server
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateSourceServer.html
*/
toUpdateSourceServer(): this;
/**
* Grants permission to update source server replication type
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateSourceServerReplicationType.html
*/
toUpdateSourceServerReplicationType(): this;
/**
* Grants permission to update a wave
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mgn/latest/APIReference/API_UpdateWave.html
*/
toUpdateWave(): this;
/**
* Grants permission to verify client role
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mgn/latest/ug/mgn-apis.html
*/
toVerifyClientRoleForMgn(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type JobResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/launching-target-servers.html
*
* @param jobID - Identifier for the jobID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onJobResource(jobID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type ReplicationConfigurationTemplateResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/replication-settings-template.html
*
* @param replicationConfigurationTemplateID - Identifier for the replicationConfigurationTemplateID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onReplicationConfigurationTemplateResource(replicationConfigurationTemplateID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type LaunchConfigurationTemplateResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/post-launch-settings.html
*
* @param launchConfigurationTemplateID - Identifier for the launchConfigurationTemplateID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onLaunchConfigurationTemplateResource(launchConfigurationTemplateID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type VcenterClientResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/agentless-mgn.html
*
* @param vcenterClientID - Identifier for the vcenterClientID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onVcenterClientResource(vcenterClientID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type SourceServerResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/source-servers.html
*
* @param sourceServerID - Identifier for the sourceServerID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onSourceServerResource(sourceServerID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type ApplicationResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/applications.html
*
* @param applicationID - Identifier for the applicationID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onApplicationResource(applicationID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type WaveResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/waves.html
*
* @param waveID - Identifier for the waveID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onWaveResource(waveID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type ImportResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/imports.html
*
* @param importID - Identifier for the importID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onImportResource(importID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type ExportResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/exports.html
*
* @param exportID - Identifier for the exportID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onExportResource(exportID: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type ConnectorResource to the statement
*
* https://docs.aws.amazon.com/mgn/latest/ug/connectors.html
*
* @param connectorID - Identifier for the connectorID.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onConnectorResource(connectorID: string, account?: string, region?: string, partition?: string): this;
/**
* Filters access by presence of tag key-value pairs in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateApplication()
* - .toCreateConnector()
* - .toCreateLaunchConfigurationTemplate()
* - .toCreateReplicationConfigurationTemplate()
* - .toCreateVcenterClientForMgn()
* - .toCreateWave()
* - .toRegisterAgentForMgn()
* - .toStartCutover()
* - .toStartTest()
* - .toTagResource()
* - .toTerminateTargetInstances()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by tag key-value pairs attached to the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to resource types:
* - JobResource
* - ReplicationConfigurationTemplateResource
* - LaunchConfigurationTemplateResource
* - VcenterClientResource
* - SourceServerResource
* - ApplicationResource
* - WaveResource
* - ImportResource
* - ExportResource
* - ConnectorResource
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by presence of tag keys in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toCreateApplication()
* - .toCreateConnector()
* - .toCreateLaunchConfigurationTemplate()
* - .toCreateReplicationConfigurationTemplate()
* - .toCreateVcenterClientForMgn()
* - .toCreateWave()
* - .toRegisterAgentForMgn()
* - .toStartCutover()
* - .toStartTest()
* - .toTagResource()
* - .toTerminateTargetInstances()
* - .toUntagResource()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the name of a resource-creating API action
*
* https://docs.aws.amazon.com/mgn/latest/ug/supported-iam-actions-tagging.html
*
* Applies to actions:
* - .toTagResource()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifCreateAction(value: string | string[], operator?: Operator | string): this;
/**
* Statement provider for service [mgn](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsapplicationmigrationservice.html).
*
*/
constructor(props?: iam.PolicyStatementProps);
}