UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

981 lines 91.6 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Guardduty = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [guardduty](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonguardduty.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Guardduty extends shared_1.PolicyStatement { /** * Grants permission to accept invitations to become a GuardDuty member account * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_AcceptAdministratorInvitation.html */ toAcceptAdministratorInvitation() { return this.to('AcceptAdministratorInvitation'); } /** * Grants permission to accept invitations to become a GuardDuty member account * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_AcceptInvitation.html */ toAcceptInvitation() { return this.to('AcceptInvitation'); } /** * Grants permission to archive GuardDuty findings * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ArchiveFindings.html */ toArchiveFindings() { return this.to('ArchiveFindings'); } /** * Grants permission to create a detector * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateDetector.html */ toCreateDetector() { return this.to('CreateDetector'); } /** * Grants permission to create GuardDuty filters. A filters defines finding attributes and conditions used to filter findings * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateFilter.html */ toCreateFilter() { return this.to('CreateFilter'); } /** * Grants permission to create an IPSet * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:DeleteRolePolicy * - iam:PutRolePolicy * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateIPSet.html */ toCreateIPSet() { return this.to('CreateIPSet'); } /** * Grants permission to create GuardDuty member accounts, where the account used to create a member becomes the GuardDuty administrator account * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html */ toCreateMembers() { return this.to('CreateMembers'); } /** * Grants permission to create a publishing destination * * Access Level: Write * * Dependent actions: * - s3:GetObject * - s3:ListBucket * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreatePublishingDestination.html */ toCreatePublishingDestination() { return this.to('CreatePublishingDestination'); } /** * Grants permission to create sample findings * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateSampleFindings.html */ toCreateSampleFindings() { return this.to('CreateSampleFindings'); } /** * Grants permission to create GuardDuty ThreatIntelSets, where a ThreatIntelSet consists of known malicious IP addresses used by GuardDuty to generate findings * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateThreatIntelSet.html */ toCreateThreatIntelSet() { return this.to('CreateThreatIntelSet'); } /** * Grants permission to decline invitations to become a GuardDuty member account * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeclineInvitations.html */ toDeclineInvitations() { return this.to('DeclineInvitations'); } /** * Grants permission to delete GuardDuty detectors * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteDetector.html */ toDeleteDetector() { return this.to('DeleteDetector'); } /** * Grants permission to delete GuardDuty filters * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteFilter.html */ toDeleteFilter() { return this.to('DeleteFilter'); } /** * Grants permission to delete GuardDuty IPSets * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteIPSet.html */ toDeleteIPSet() { return this.to('DeleteIPSet'); } /** * Grants permission to delete invitations to become a GuardDuty member account * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteInvitations.html */ toDeleteInvitations() { return this.to('DeleteInvitations'); } /** * Grants permission to delete GuardDuty member accounts * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html */ toDeleteMembers() { return this.to('DeleteMembers'); } /** * Grants permission to delete a publishing destination * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeletePublishingDestination.html */ toDeletePublishingDestination() { return this.to('DeletePublishingDestination'); } /** * Grants permission to delete GuardDuty ThreatIntelSets * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteThreatIntelSet.html */ toDeleteThreatIntelSet() { return this.to('DeleteThreatIntelSet'); } /** * Grants permission to retrieve details about malware scans * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribeMalwareScans.html */ toDescribeMalwareScans() { return this.to('DescribeMalwareScans'); } /** * Grants permission to retrieve details about the delegated administrator associated with a GuardDuty detector * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribeOrganizationConfiguration.html */ toDescribeOrganizationConfiguration() { return this.to('DescribeOrganizationConfiguration'); } /** * Grants permission to retrieve details about a publishing destination * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribePublishingDestination.html */ toDescribePublishingDestination() { return this.to('DescribePublishingDestination'); } /** * Grants permission to disable the organization delegated administrator for GuardDuty * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisableOrganizationAdminAccount.html */ toDisableOrganizationAdminAccount() { return this.to('DisableOrganizationAdminAccount'); } /** * Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateFromAdministratorAccount.html */ toDisassociateFromAdministratorAccount() { return this.to('DisassociateFromAdministratorAccount'); } /** * Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateFromMasterAccount.html */ toDisassociateFromMasterAccount() { return this.to('DisassociateFromMasterAccount'); } /** * Grants permission to disassociate GuardDuty member accounts from their administrator GuardDuty account * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateMembers.html */ toDisassociateMembers() { return this.to('DisassociateMembers'); } /** * Grants permission to enable an organization delegated administrator for GuardDuty * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_EnableOrganizationAdminAccount.html */ toEnableOrganizationAdminAccount() { return this.to('EnableOrganizationAdminAccount'); } /** * Grants permission to retrieve details of the GuardDuty administrator account associated with a member account * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetAdministratorAccount.html */ toGetAdministratorAccount() { return this.to('GetAdministratorAccount'); } /** * Grants permission to list Amazon GuardDuty coverage statistics for the specified GuardDuty account in a Region * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetCoverageStatistics.html */ toGetCoverageStatistics() { return this.to('GetCoverageStatistics'); } /** * Grants permission to retrieve GuardDuty detectors * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetDetector.html */ toGetDetector() { return this.to('GetDetector'); } /** * Grants permission to retrieve GuardDuty filters * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetFilter.html */ toGetFilter() { return this.to('GetFilter'); } /** * Grants permission to retrieve GuardDuty findings * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetFindings.html */ toGetFindings() { return this.to('GetFindings'); } /** * Grants permission to retrieve a list of GuardDuty finding statistics * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetFindingsStatistics.html */ toGetFindingsStatistics() { return this.to('GetFindingsStatistics'); } /** * Grants permission to retrieve GuardDuty IPSets * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetIPSet.html */ toGetIPSet() { return this.to('GetIPSet'); } /** * Grants permission to retrieve the count of all GuardDuty invitations sent to a specified account, which does not include the accepted invitation * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetInvitationsCount.html */ toGetInvitationsCount() { return this.to('GetInvitationsCount'); } /** * Grants permission to retrieve the malware scan settings * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMalwareScanSettings.html */ toGetMalwareScanSettings() { return this.to('GetMalwareScanSettings'); } /** * Grants permission to retrieve details of the GuardDuty administrator account associated with a member account * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMasterAccount.html */ toGetMasterAccount() { return this.to('GetMasterAccount'); } /** * Grants permission to describe which data sources are enabled for member accounts detectors * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMemberDetectors.html */ toGetMemberDetectors() { return this.to('GetMemberDetectors'); } /** * Grants permission to retrieve the member accounts associated with an administrator account * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMembers.html */ toGetMembers() { return this.to('GetMembers'); } /** * Grants permission to retrieve GuardDuty protection plan coverage statistics for member accounts in a Region * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetOrganizationStatistics.html */ toGetOrganizationStatistics() { return this.to('GetOrganizationStatistics'); } /** * Grants permission to provide the number of days left for each data source used in the free trial period * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetRemainingFreeTrialDays.html */ toGetRemainingFreeTrialDays() { return this.to('GetRemainingFreeTrialDays'); } /** * Grants permission to retrieve GuardDuty ThreatIntelSets * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetThreatIntelSet.html */ toGetThreatIntelSet() { return this.to('GetThreatIntelSet'); } /** * Grants permission to list Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetUsageStatistics.html */ toGetUsageStatistics() { return this.to('GetUsageStatistics'); } /** * Grants permission to invite other AWS accounts to enable GuardDuty and become GuardDuty member accounts * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html */ toInviteMembers() { return this.to('InviteMembers'); } /** * Grants permission to list all the resource details for a given account in a Region * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListCoverage.html */ toListCoverage() { return this.to('ListCoverage'); } /** * Grants permission to retrieve a list of GuardDuty detectors * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html */ toListDetectors() { return this.to('ListDetectors'); } /** * Grants permission to retrieve a list of GuardDuty filters * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListFilters.html */ toListFilters() { return this.to('ListFilters'); } /** * Grants permission to retrieve a list of GuardDuty findings * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListFindings.html */ toListFindings() { return this.to('ListFindings'); } /** * Grants permission to retrieve a list of GuardDuty IPSets * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListIPSets.html */ toListIPSets() { return this.to('ListIPSets'); } /** * Grants permission to retrieve a list of all of the GuardDuty membership invitations that were sent to an AWS account * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListInvitations.html */ toListInvitations() { return this.to('ListInvitations'); } /** * Grants permission to retrieve a list of GuardDuty member accounts associated with an administrator account * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMembers.html */ toListMembers() { return this.to('ListMembers'); } /** * Grants permission to list details about the organization delegated administrator for GuardDuty * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListOrganizationAdminAccounts.html */ toListOrganizationAdminAccounts() { return this.to('ListOrganizationAdminAccounts'); } /** * Grants permission to retrieve a list of publishing destinations * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListPublishingDestinations.html */ toListPublishingDestinations() { return this.to('ListPublishingDestinations'); } /** * Grants permission to retrieve a list of tags associated with a GuardDuty resource * * Access Level: Read * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListTagsForResource.html */ toListTagsForResource() { return this.to('ListTagsForResource'); } /** * Grants permission to retrieve a list of GuardDuty ThreatIntelSets * * Access Level: List * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListThreatIntelSets.html */ toListThreatIntelSets() { return this.to('ListThreatIntelSets'); } /** * Grants permission to send security telemetry for a specific GuardDuty account in a Region * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SendSecurityTelemetry.html */ toSendSecurityTelemetry() { return this.to('SendSecurityTelemetry'); } /** * Grants permission to initiate a new malware scan * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_StartMalwareScan.html */ toStartMalwareScan() { return this.to('StartMalwareScan'); } /** * Grants permission to a GuardDuty administrator account to monitor findings from GuardDuty member accounts * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_StartMonitoringMembers.html */ toStartMonitoringMembers() { return this.to('StartMonitoringMembers'); } /** * Grants permission to disable monitoring findings from member accounts * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_StopMonitoringMembers.html */ toStopMonitoringMembers() { return this.to('StopMonitoringMembers'); } /** * Grants permission to add tags to a GuardDuty resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_TagResource.html */ toTagResource() { return this.to('TagResource'); } /** * Grants permission to unarchive GuardDuty findings * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UnarchiveFindings.html */ toUnarchiveFindings() { return this.to('UnarchiveFindings'); } /** * Grants permission to remove tags from a GuardDuty resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UntagResource.html */ toUntagResource() { return this.to('UntagResource'); } /** * Grants permission to update GuardDuty detectors * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateDetector.html */ toUpdateDetector() { return this.to('UpdateDetector'); } /** * Grants permission to updates GuardDuty filters * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateFilter.html */ toUpdateFilter() { return this.to('UpdateFilter'); } /** * Grants permission to update findings feedback to mark GuardDuty findings as useful or not useful * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateFindingsFeedback.html */ toUpdateFindingsFeedback() { return this.to('UpdateFindingsFeedback'); } /** * Grants permission to update GuardDuty IPSets * * Access Level: Write * * Dependent actions: * - iam:DeleteRolePolicy * - iam:PutRolePolicy * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateIPSet.html */ toUpdateIPSet() { return this.to('UpdateIPSet'); } /** * Grants permission to update the malware scan settings * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateMalwareScanSettings.html */ toUpdateMalwareScanSettings() { return this.to('UpdateMalwareScanSettings'); } /** * Grants permission to update which data sources are enabled for member accounts detectors * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateMemberDetectors.html */ toUpdateMemberDetectors() { return this.to('UpdateMemberDetectors'); } /** * Grants permission to update the delegated administrator configuration associated with a GuardDuty detector * * Access Level: Write * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateOrganizationConfiguration.html */ toUpdateOrganizationConfiguration() { return this.to('UpdateOrganizationConfiguration'); } /** * Grants permission to update a publishing destination * * Access Level: Write * * Dependent actions: * - s3:GetObject * - s3:ListBucket * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdatePublishingDestination.html */ toUpdatePublishingDestination() { return this.to('UpdatePublishingDestination'); } /** * Grants permission to updates the GuardDuty ThreatIntelSets * * Access Level: Write * * Dependent actions: * - iam:DeleteRolePolicy * - iam:PutRolePolicy * * https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateThreatIntelSet.html */ toUpdateThreatIntelSet() { return this.to('UpdateThreatIntelSet'); } /** * Adds a resource of type detector to the statement * * https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources * * @param detectorId - Identifier for the detectorId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onDetector(detectorId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:guardduty:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:detector/${detectorId}`); } /** * Adds a resource of type filter to the statement * * https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources * * @param detectorId - Identifier for the detectorId. * @param filterName - Identifier for the filterName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onFilter(detectorId, filterName, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:guardduty:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:detector/${detectorId}/filter/${filterName}`); } /** * Adds a resource of type ipset to the statement * * https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources * * @param detectorId - Identifier for the detectorId. * @param iPSetId - Identifier for the iPSetId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onIpset(detectorId, iPSetId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:guardduty:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:detector/${detectorId}/ipset/${iPSetId}`); } /** * Adds a resource of type threatintelset to the statement * * https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources * * @param detectorId - Identifier for the detectorId. * @param threatIntelSetId - Identifier for the threatIntelSetId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onThreatintelset(detectorId, threatIntelSetId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:guardduty:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:detector/${detectorId}/threatintelset/${threatIntelSetId}`); } /** * Adds a resource of type publishingDestination to the statement * * https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources * * @param detectorId - Identifier for the detectorId. * @param publishingDestinationId - Identifier for the publishingDestinationId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. */ onPublishingDestination(detectorId, publishingDestinationId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:guardduty:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:detector/${detectorId}/publishingDestination/${publishingDestinationId}`); } /** * Filters access by tag key-value pairs in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag * * Applies to actions: * - .toCreateDetector() * - .toCreateFilter() * - .toCreateIPSet() * - .toCreateThreatIntelSet() * - .toTagResource() * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsRequestTag(tagKey, value, operator) { return this.if(`aws:RequestTag/${tagKey}`, value, operator ?? 'StringLike'); } /** * Filters access by tag key-value pairs attached to the resource * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag * * Applies to resource types: * - detector * - filter * - ipset * - threatintelset * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsResourceTag(tagKey, value, operator) { return this.if(`aws:ResourceTag/${tagKey}`, value, operator ?? 'StringLike'); } /** * Filters access by tag keys in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys * * Applies to actions: * - .toCreateDetector() * - .toCreateFilter() * - .toCreateIPSet() * - .toCreateThreatIntelSet() * - .toTagResource() * - .toUntagResource() * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsTagKeys(value, operator) { return this.if(`aws:TagKeys`, value, operator ?? 'StringLike'); } /** * Statement provider for service [guardduty](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonguardduty.html). * */ constructor(props) { super(props); this.servicePrefix = 'guardduty'; this.accessLevelList = { Write: [ 'AcceptAdministratorInvitation', 'AcceptInvitation', 'ArchiveFindings', 'CreateDetector', 'CreateFilter', 'CreateIPSet', 'CreateMembers', 'CreatePublishingDestination', 'CreateSampleFindings', 'CreateThreatIntelSet', 'DeclineInvitations', 'DeleteDetector', 'DeleteFilter', 'DeleteIPSet', 'DeleteInvitations', 'DeleteMembers', 'DeletePublishingDestination', 'DeleteThreatIntelSet', 'DisableOrganizationAdminAccount', 'DisassociateFromAdministratorAccount', 'DisassociateFromMasterAccount', 'DisassociateMembers', 'EnableOrganizationAdminAccount', 'InviteMembers', 'SendSecurityTelemetry', 'StartMalwareScan', 'StartMonitoringMembers', 'StopMonitoringMembers', 'UnarchiveFindings', 'UpdateDetector', 'UpdateFilter', 'UpdateFindingsFeedback', 'UpdateIPSet', 'UpdateMalwareScanSettings', 'UpdateMemberDetectors', 'UpdateOrganizationConfiguration', 'UpdatePublishingDestination', 'UpdateThreatIntelSet' ], Read: [ 'DescribeMalwareScans', 'DescribeOrganizationConfiguration', 'DescribePublishingDestination', 'GetAdministratorAccount', 'GetCoverageStatistics', 'GetDetector', 'GetFilter', 'GetFindings', 'GetFindingsStatistics', 'GetIPSet', 'GetInvitationsCount', 'GetMalwareScanSettings', 'GetMasterAccount', 'GetMemberDetectors', 'GetMembers', 'GetOrganizationStatistics', 'GetRemainingFreeTrialDays', 'GetThreatIntelSet', 'GetUsageStatistics', 'ListTagsForResource' ], List: [ 'ListCoverage', 'ListDetectors', 'ListFilters', 'ListFindings', 'ListIPSets', 'ListInvitations', 'ListMembers', 'ListOrganizationAdminAccounts', 'ListPublishingDestinations', 'ListThreatIntelSets' ], Tagging: [ 'TagResource', 'UntagResource' ] }; } } exports.Guardduty = Guardduty; //# sourceMappingURL=data:application/json;base64,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