UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,653 lines 178 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Deadline = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [deadline](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdeadlinecloud.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Deadline extends shared_1.PolicyStatement { /** * Grants permission to associate a member to a farm * * Access Level: Permissions management * * Possible conditions: * - .ifAssociatedMembershipLevel() * - .ifMembershipLevel() * * Dependent actions: * - identitystore:DescribeGroup * - identitystore:DescribeUser * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToFarm.html */ toAssociateMemberToFarm() { return this.to('AssociateMemberToFarm'); } /** * Grants permission to associate a member to a fleet * * Access Level: Permissions management * * Possible conditions: * - .ifAssociatedMembershipLevel() * - .ifMembershipLevel() * * Dependent actions: * - identitystore:DescribeGroup * - identitystore:DescribeUser * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToFleet.html */ toAssociateMemberToFleet() { return this.to('AssociateMemberToFleet'); } /** * Grants permission to associate a member to a job * * Access Level: Permissions management * * Possible conditions: * - .ifAssociatedMembershipLevel() * - .ifMembershipLevel() * * Dependent actions: * - identitystore:DescribeGroup * - identitystore:DescribeUser * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToJob.html */ toAssociateMemberToJob() { return this.to('AssociateMemberToJob'); } /** * Grants permission to associate a member to a queue * * Access Level: Permissions management * * Possible conditions: * - .ifAssociatedMembershipLevel() * - .ifMembershipLevel() * * Dependent actions: * - identitystore:DescribeGroup * - identitystore:DescribeUser * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToQueue.html */ toAssociateMemberToQueue() { return this.to('AssociateMemberToQueue'); } /** * Grants permission to assume a fleet role for read-only access * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeFleetRoleForRead.html */ toAssumeFleetRoleForRead() { return this.to('AssumeFleetRoleForRead'); } /** * Grants permission to assume a fleet role for a worker * * Access Level: Write * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeFleetRoleForWorker.html */ toAssumeFleetRoleForWorker() { return this.to('AssumeFleetRoleForWorker'); } /** * Grants permission to assume a queue role for read-only access * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForRead.html */ toAssumeQueueRoleForRead() { return this.to('AssumeQueueRoleForRead'); } /** * Grants permission to assume a queue role for a user * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForUser.html */ toAssumeQueueRoleForUser() { return this.to('AssumeQueueRoleForUser'); } /** * Grants permission to assume a queue role for a worker * * Access Level: Write * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForWorker.html */ toAssumeQueueRoleForWorker() { return this.to('AssumeQueueRoleForWorker'); } /** * Grants permission to get a job entity for a worker * * Access Level: Read * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_BatchGetJobEntity.html */ toBatchGetJobEntity() { return this.to('BatchGetJobEntity'); } /** * Grants permission to copy a job template to an Amazon S3 bucket * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * - s3:PutObject * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CopyJobTemplate.html */ toCopyJobTemplate() { return this.to('CopyJobTemplate'); } /** * Grants permission to create a budget * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateBudget.html */ toCreateBudget() { return this.to('CreateBudget'); } /** * Grants permission to create a farm * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - deadline:TagResource * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateFarm.html */ toCreateFarm() { return this.to('CreateFarm'); } /** * Grants permission to create a fleet * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - deadline:TagResource * - iam:PassRole * - identitystore:ListGroupMembershipsForMember * - logs:CreateLogGroup * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateFleet.html */ toCreateFleet() { return this.to('CreateFleet'); } /** * Grants permission to create a job * * Access Level: Write * * Dependent actions: * - deadline:GetJobTemplate * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateJob.html */ toCreateJob() { return this.to('CreateJob'); } /** * Grants permission to create a license endpoint for licensed software or products * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - deadline:TagResource * - ec2:CreateTags * - ec2:CreateVpcEndpoint * - ec2:DescribeVpcEndpoints * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateLicenseEndpoint.html */ toCreateLicenseEndpoint() { return this.to('CreateLicenseEndpoint'); } /** * Grants permission to create a limit for a farm * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateLimit.html */ toCreateLimit() { return this.to('CreateLimit'); } /** * Grants permission to create a monitor * * Access Level: Write * * Dependent actions: * - iam:PassRole * - sso:CreateApplication * - sso:DeleteApplication * - sso:PutApplicationAssignmentConfiguration * - sso:PutApplicationAuthenticationMethod * - sso:PutApplicationGrant * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateMonitor.html */ toCreateMonitor() { return this.to('CreateMonitor'); } /** * Grants permission to create a queue * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - deadline:TagResource * - iam:PassRole * - identitystore:ListGroupMembershipsForMember * - logs:CreateLogGroup * - s3:ListBucket * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueue.html */ toCreateQueue() { return this.to('CreateQueue'); } /** * Grants permission to create a queue environment * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueEnvironment.html */ toCreateQueueEnvironment() { return this.to('CreateQueueEnvironment'); } /** * Grants permission to create a queue-fleet association * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueFleetAssociation.html */ toCreateQueueFleetAssociation() { return this.to('CreateQueueFleetAssociation'); } /** * Grants permission to create a queue-limit association * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueLimitAssociation.html */ toCreateQueueLimitAssociation() { return this.to('CreateQueueLimitAssociation'); } /** * Grants permission to create a storage profile for a farm * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateStorageProfile.html */ toCreateStorageProfile() { return this.to('CreateStorageProfile'); } /** * Grants permission to create a worker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - deadline:ListTagsForResource * - deadline:TagResource * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateWorker.html */ toCreateWorker() { return this.to('CreateWorker'); } /** * Grants permission to delete a budget * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteBudget.html */ toDeleteBudget() { return this.to('DeleteBudget'); } /** * Grants permission to delete a farm * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteFarm.html */ toDeleteFarm() { return this.to('DeleteFarm'); } /** * Grants permission to delete a fleet * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteFleet.html */ toDeleteFleet() { return this.to('DeleteFleet'); } /** * Grants permission to delete a license endpoint * * Access Level: Write * * Dependent actions: * - ec2:DeleteVpcEndpoints * - ec2:DescribeVpcEndpoints * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteLicenseEndpoint.html */ toDeleteLicenseEndpoint() { return this.to('DeleteLicenseEndpoint'); } /** * Grants permission to delete a limit * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteLimit.html */ toDeleteLimit() { return this.to('DeleteLimit'); } /** * Grants permission to delete a metered product * * Access Level: Write * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteMeteredProduct.html */ toDeleteMeteredProduct() { return this.to('DeleteMeteredProduct'); } /** * Grants permission to delete a monitor * * Access Level: Write * * Dependent actions: * - sso:DeleteApplication * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteMonitor.html */ toDeleteMonitor() { return this.to('DeleteMonitor'); } /** * Grants permission to delete a queue * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueue.html */ toDeleteQueue() { return this.to('DeleteQueue'); } /** * Grants permission to delete a queue environment * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueEnvironment.html */ toDeleteQueueEnvironment() { return this.to('DeleteQueueEnvironment'); } /** * Grants permission to delete a queue-fleet association * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueFleetAssociation.html */ toDeleteQueueFleetAssociation() { return this.to('DeleteQueueFleetAssociation'); } /** * Grants permission to delete a queue-limit association * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueLimitAssociation.html */ toDeleteQueueLimitAssociation() { return this.to('DeleteQueueLimitAssociation'); } /** * Grants permission to delete a storage profile * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteStorageProfile.html */ toDeleteStorageProfile() { return this.to('DeleteStorageProfile'); } /** * Grants permission to delete a worker * * Access Level: Write * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteWorker.html */ toDeleteWorker() { return this.to('DeleteWorker'); } /** * Grants permission to disassociate a member from a farm * * Access Level: Permissions management * * Possible conditions: * - .ifAssociatedMembershipLevel() * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromFarm.html */ toDisassociateMemberFromFarm() { return this.to('DisassociateMemberFromFarm'); } /** * Grants permission to disassociate a member from a fleet * * Access Level: Permissions management * * Possible conditions: * - .ifAssociatedMembershipLevel() * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromFleet.html */ toDisassociateMemberFromFleet() { return this.to('DisassociateMemberFromFleet'); } /** * Grants permission to disassociate a member from a job * * Access Level: Permissions management * * Possible conditions: * - .ifAssociatedMembershipLevel() * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromJob.html */ toDisassociateMemberFromJob() { return this.to('DisassociateMemberFromJob'); } /** * Grants permission to disassociate a member from a queue * * Access Level: Permissions management * * Possible conditions: * - .ifAssociatedMembershipLevel() * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromQueue.html */ toDisassociateMemberFromQueue() { return this.to('DisassociateMemberFromQueue'); } /** * Grants permission to get the latest version of an application * * Access Level: Read * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetApplicationVersion.html */ toGetApplicationVersion() { return this.to('GetApplicationVersion'); } /** * Grants permission to get a budget * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetBudget.html */ toGetBudget() { return this.to('GetBudget'); } /** * Grants permission to get a farm * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetFarm.html */ toGetFarm() { return this.to('GetFarm'); } /** * Grants permission to get a fleet * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetFleet.html */ toGetFleet() { return this.to('GetFleet'); } /** * Grants permission to get a job * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetJob.html */ toGetJob() { return this.to('GetJob'); } /** * Grants permission to read job template * * Access Level: Read */ toGetJobTemplate() { return this.to('GetJobTemplate'); } /** * Grants permission to get a license endpoint * * Access Level: Read * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetLicenseEndpoint.html */ toGetLicenseEndpoint() { return this.to('GetLicenseEndpoint'); } /** * Grants permission to get a limit * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetLimit.html */ toGetLimit() { return this.to('GetLimit'); } /** * Grants permission to get a monitor * * Access Level: Read * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetMonitor.html */ toGetMonitor() { return this.to('GetMonitor'); } /** * Grants permission to get a queue * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueue.html */ toGetQueue() { return this.to('GetQueue'); } /** * Grants permission to get a queue environment * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueEnvironment.html */ toGetQueueEnvironment() { return this.to('GetQueueEnvironment'); } /** * Grants permission to get a queue-fleet association * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueFleetAssociation.html */ toGetQueueFleetAssociation() { return this.to('GetQueueFleetAssociation'); } /** * Grants permission to get a queue-limit association * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueLimitAssociation.html */ toGetQueueLimitAssociation() { return this.to('GetQueueLimitAssociation'); } /** * Grants permission to get a session for a job * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSession.html */ toGetSession() { return this.to('GetSession'); } /** * Grants permission to get a session action for a job * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSessionAction.html */ toGetSessionAction() { return this.to('GetSessionAction'); } /** * Grants permission to get all collected statistics for sessions * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSessionsStatisticsAggregation.html */ toGetSessionsStatisticsAggregation() { return this.to('GetSessionsStatisticsAggregation'); } /** * Grants permission to get a step in a job * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStep.html */ toGetStep() { return this.to('GetStep'); } /** * Grants permission to get a storage profile * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStorageProfile.html */ toGetStorageProfile() { return this.to('GetStorageProfile'); } /** * Grants permission to get a storage profile for a queue * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStorageProfileForQueue.html */ toGetStorageProfileForQueue() { return this.to('GetStorageProfileForQueue'); } /** * Grants permission to get a job task * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetTask.html */ toGetTask() { return this.to('GetTask'); } /** * Grants permission to get a worker * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetWorker.html */ toGetWorker() { return this.to('GetWorker'); } /** * Grants permission to list all available metered products within a license endpoint * * Access Level: List * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListAvailableMeteredProducts.html */ toListAvailableMeteredProducts() { return this.to('ListAvailableMeteredProducts'); } /** * Grants permission to list all budgets for a farm * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListBudgets.html */ toListBudgets() { return this.to('ListBudgets'); } /** * Grants permission to list all members of a farm * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFarmMembers.html */ toListFarmMembers() { return this.to('ListFarmMembers'); } /** * Grants permission to list all farms * * Access Level: List * * Possible conditions: * - .ifPrincipalId() * - .ifRequesterPrincipalId() * * Dependent actions: * - identitystore:DescribeGroup * - identitystore:DescribeUser * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFarms.html */ toListFarms() { return this.to('ListFarms'); } /** * Grants permission to list all members of a fleet * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFleetMembers.html */ toListFleetMembers() { return this.to('ListFleetMembers'); } /** * Grants permission to list all fleets * * Access Level: List * * Possible conditions: * - .ifPrincipalId() * - .ifRequesterPrincipalId() * * Dependent actions: * - identitystore:DescribeGroup * - identitystore:DescribeUser * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFleets.html */ toListFleets() { return this.to('ListFleets'); } /** * Grants permission to list all members of a job * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobMembers.html */ toListJobMembers() { return this.to('ListJobMembers'); } /** * Grants permission to get a job's parameter definitions in the job template * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobParameterDefinitions.html */ toListJobParameterDefinitions() { return this.to('ListJobParameterDefinitions'); } /** * Grants permission to list all jobs in a queue * * Access Level: List * * Possible conditions: * - .ifPrincipalId() * - .ifRequesterPrincipalId() * * Dependent actions: * - identitystore:DescribeGroup * - identitystore:DescribeUser * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobs.html */ toListJobs() { return this.to('ListJobs'); } /** * Grants permission to list all license endpoints * * Access Level: List * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListLicenseEndpoints.html */ toListLicenseEndpoints() { return this.to('ListLicenseEndpoints'); } /** * Grants permission to list all limits in a farm * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListLimits.html */ toListLimits() { return this.to('ListLimits'); } /** * Grants permission to list all metered products in a license endpoint * * Access Level: List * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListMeteredProducts.html */ toListMeteredProducts() { return this.to('ListMeteredProducts'); } /** * Grants permission to list all monitors * * Access Level: List * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListMonitors.html */ toListMonitors() { return this.to('ListMonitors'); } /** * Grants permission to list all queue environments to which a queue is associated * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueEnvironments.html */ toListQueueEnvironments() { return this.to('ListQueueEnvironments'); } /** * Grants permission to list all queue-fleet associations * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueFleetAssociations.html */ toListQueueFleetAssociations() { return this.to('ListQueueFleetAssociations'); } /** * Grants permission to list all queue-limit associations * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueLimitAssociations.html */ toListQueueLimitAssociations() { return this.to('ListQueueLimitAssociations'); } /** * Grants permission to list all members in a queue * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueMembers.html */ toListQueueMembers() { return this.to('ListQueueMembers'); } /** * Grants permission to list all queues on a farm * * Access Level: List * * Possible conditions: * - .ifPrincipalId() * - .ifRequesterPrincipalId() * * Dependent actions: * - identitystore:DescribeGroup * - identitystore:DescribeUser * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueues.html */ toListQueues() { return this.to('ListQueues'); } /** * Grants permission to list all session actions for a job * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessionActions.html */ toListSessionActions() { return this.to('ListSessionActions'); } /** * Grants permission to list all sessions for a job * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessions.html */ toListSessions() { return this.to('ListSessions'); } /** * Grants permission to list all sessions for a worker * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessionsForWorker.html */ toListSessionsForWorker() { return this.to('ListSessionsForWorker'); } /** * Grants permission to list the step consumers for a job step * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStepConsumers.html */ toListStepConsumers() { return this.to('ListStepConsumers'); } /** * Grants permission to list dependencies for a job step * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStepDependencies.html */ toListStepDependencies() { return this.to('ListStepDependencies'); } /** * Grants permission to list all steps for a job * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSteps.html */ toListSteps() { return this.to('ListSteps'); } /** * Grants permission to list all storage profiles in a farm * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStorageProfiles.html */ toListStorageProfiles() { return this.to('ListStorageProfiles'); } /** * Grants permission to list all storage profiles in a queue * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStorageProfilesForQueue.html */ toListStorageProfilesForQueue() { return this.to('ListStorageProfilesForQueue'); } /** * Grants permission to list all tags on specified Deadline Cloud resources * * Access Level: List * * Possible conditions: * - .ifCalledAction() * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListTagsForResource.html */ toListTagsForResource() { return this.to('ListTagsForResource'); } /** * Grants permission to list all tasks for a job * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListTasks.html */ toListTasks() { return this.to('ListTasks'); } /** * Grants permission to list all workers in a fleet * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListWorkers.html */ toListWorkers() { return this.to('ListWorkers'); } /** * Grants permission to add a metered product to a license endpoint * * Access Level: Write * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_PutMeteredProduct.html */ toPutMeteredProduct() { return this.to('PutMeteredProduct'); } /** * Grants permission to search for jobs in multiple queues * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchJobs.html */ toSearchJobs() { return this.to('SearchJobs'); } /** * Grants permission to search the steps within a single job or to search the steps for multiple queues * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchSteps.html */ toSearchSteps() { return this.to('SearchSteps'); } /** * Grants permission to search the tasks within a single job or to search the tasks for multiple queues * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchTasks.html */ toSearchTasks() { return this.to('SearchTasks'); } /** * Grants permission to search for workers in multiple fleets * * Access Level: List * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchWorkers.html */ toSearchWorkers() { return this.to('SearchWorkers'); } /** * Grants permission to get all collected statistics for sessions * * Access Level: Read * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_StartSessionsStatisticsAggregation.html */ toStartSessionsStatisticsAggregation() { return this.to('StartSessionsStatisticsAggregation'); } /** * Grants permission to add or overwrite one or more tags for the specified Deadline Cloud resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifCalledAction() * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_TagResource.html */ toTagResource() { return this.to('TagResource'); } /** * Grants permission to disassociate one or more tags from the specified Deadline Cloud resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UntagResource.html */ toUntagResource() { return this.to('UntagResource'); } /** * Grants permission to update a budget * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateBudget.html */ toUpdateBudget() { return this.to('UpdateBudget'); } /** * Grants permission to update a farm * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFarm.html */ toUpdateFarm() { return this.to('UpdateFarm'); } /** * Grants permission to update a fleet * * Access Level: Write * * Dependent actions: * - iam:PassRole * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFleet.html */ toUpdateFleet() { return this.to('UpdateFleet'); } /** * Grants permission to update a job * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateJob.html */ toUpdateJob() { return this.to('UpdateJob'); } /** * Grants permission to update a limit for a farm * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateLimit.html */ toUpdateLimit() { return this.to('UpdateLimit'); } /** * Grants permission to update a monitor * * Access Level: Write * * Dependent actions: * - iam:PassRole * - sso:PutApplicationGrant * - sso:UpdateApplication * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateMonitor.html */ toUpdateMonitor() { return this.to('UpdateMonitor'); } /** * Grants permission to update a queue * * Access Level: Write * * Dependent actions: * - iam:PassRole * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueue.html */ toUpdateQueue() { return this.to('UpdateQueue'); } /** * Grants permission to update a queue environment * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueEnvironment.html */ toUpdateQueueEnvironment() { return this.to('UpdateQueueEnvironment'); } /** * Grants permission to update a queue-fleet association * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueFleetAssociation.html */ toUpdateQueueFleetAssociation() { return this.to('UpdateQueueFleetAssociation'); } /** * Grants permission to update a queue-limit association * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueLimitAssociation.html */ toUpdateQueueLimitAssociation() { return this.to('UpdateQueueLimitAssociation'); } /** * Grants permission to update a session for a job * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateSession.html */ toUpdateSession() { return this.to('UpdateSession'); } /** * Grants permission to update a step for a job * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateStep.html */ toUpdateStep() { return this.to('UpdateStep'); } /** * Grants permission to update a storage profile for a farm * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateStorageProfile.html */ toUpdateStorageProfile() { return this.to('UpdateStorageProfile'); } /** * Grants permission to update a task * * Access Level: Write * * Dependent actions: * - identitystore:ListGroupMembershipsForMember * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateTask.html */ toUpdateTask() { return this.to('UpdateTask'); } /** * Grants permission to update a worker * * Access Level: Write * * Dependent actions: * - logs:CreateLogStream * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateWorker.html */ toUpdateWorker() { return this.to('UpdateWorker'); } /** * Grants permission to update the schedule for a worker * * Access Level: Write * * Dependent actions: * - logs:CreateLogStream * * https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateWorkerSchedule.html */ toUpdateWorkerSchedule() { return this.to('UpdateWorkerSchedule'); } /** * Adds a resource of type budget to the statement * * https://docs.aws.amazon.com/deadline-cloud/latest/userguide/manage-costs.html * * @param farmId - Identifier for the farmId. * @param budgetId - Identifier for the budgetId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifFarmMembershipLevels() */ onBudget(farmId, budgetId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:deadline:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:farm/${farmId}/budget/${budgetId}`); } /** * Adds a resource of type farm to the statement * * https://docs.aws.amazon.com/deadline-cloud/latest/userguide/farms.html * * @param farmId - Identifier for the farmId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() * - .ifFarmMembershipLevels() */ onFarm(farmId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:deadline:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:farm/${farmId}`); } /** * Adds a resource of type fleet to the statement * * https://docs.aws.amazon.com/deadline-cloud/latest/userguide/manage-fleets.html * * @param farmId - Identifier for the farmId. * @param fleetId - Identifier for the fleetId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() * - .ifFarmMembershipLevels() * - .ifFleetMembershipLevels() */ onFleet(farmId, fleetId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:deadline:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:farm/${farmId}/fleet/${fleetId}`); } /** * Adds a resource of type job to the statement * * https://docs.aws.amazon.com/deadline-cloud/latest/userguide/deadline-cloud-jobs.html * * @param farmId - Identifier for the farmId. * @param queueId - Identifier for the queueId. * @param jobId - Identifier for the jobId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifFarmMembershipLevels() * - .ifJobMembershipLevels() * - .ifQueueMembershipLevels() */ onJob(farmId, queueId, jobId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:deadline:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:farm/${farmId}/queue/${queueId}/job/${jobId}`); } /** * Adds a resource of type license-endpoint to the statement * * https://docs.aws.amazon.com/deadline-cloud/latest/userguide/cmf-ubl.html * * @param licenseEndpointId - Identifier for the licenseEndpointId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onLicenseEndpoint(licenseEndpointId, account, region, partit