cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
1,653 lines • 178 kB
JavaScript
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.Deadline = void 0;
const shared_1 = require("../../shared");
/**
* Statement provider for service [deadline](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdeadlinecloud.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
class Deadline extends shared_1.PolicyStatement {
/**
* Grants permission to associate a member to a farm
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
* - .ifMembershipLevel()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToFarm.html
*/
toAssociateMemberToFarm() {
return this.to('AssociateMemberToFarm');
}
/**
* Grants permission to associate a member to a fleet
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
* - .ifMembershipLevel()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToFleet.html
*/
toAssociateMemberToFleet() {
return this.to('AssociateMemberToFleet');
}
/**
* Grants permission to associate a member to a job
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
* - .ifMembershipLevel()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToJob.html
*/
toAssociateMemberToJob() {
return this.to('AssociateMemberToJob');
}
/**
* Grants permission to associate a member to a queue
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
* - .ifMembershipLevel()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToQueue.html
*/
toAssociateMemberToQueue() {
return this.to('AssociateMemberToQueue');
}
/**
* Grants permission to assume a fleet role for read-only access
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeFleetRoleForRead.html
*/
toAssumeFleetRoleForRead() {
return this.to('AssumeFleetRoleForRead');
}
/**
* Grants permission to assume a fleet role for a worker
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeFleetRoleForWorker.html
*/
toAssumeFleetRoleForWorker() {
return this.to('AssumeFleetRoleForWorker');
}
/**
* Grants permission to assume a queue role for read-only access
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForRead.html
*/
toAssumeQueueRoleForRead() {
return this.to('AssumeQueueRoleForRead');
}
/**
* Grants permission to assume a queue role for a user
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForUser.html
*/
toAssumeQueueRoleForUser() {
return this.to('AssumeQueueRoleForUser');
}
/**
* Grants permission to assume a queue role for a worker
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForWorker.html
*/
toAssumeQueueRoleForWorker() {
return this.to('AssumeQueueRoleForWorker');
}
/**
* Grants permission to get a job entity for a worker
*
* Access Level: Read
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_BatchGetJobEntity.html
*/
toBatchGetJobEntity() {
return this.to('BatchGetJobEntity');
}
/**
* Grants permission to copy a job template to an Amazon S3 bucket
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
* - s3:PutObject
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CopyJobTemplate.html
*/
toCopyJobTemplate() {
return this.to('CopyJobTemplate');
}
/**
* Grants permission to create a budget
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateBudget.html
*/
toCreateBudget() {
return this.to('CreateBudget');
}
/**
* Grants permission to create a farm
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:TagResource
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateFarm.html
*/
toCreateFarm() {
return this.to('CreateFarm');
}
/**
* Grants permission to create a fleet
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:TagResource
* - iam:PassRole
* - identitystore:ListGroupMembershipsForMember
* - logs:CreateLogGroup
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateFleet.html
*/
toCreateFleet() {
return this.to('CreateFleet');
}
/**
* Grants permission to create a job
*
* Access Level: Write
*
* Dependent actions:
* - deadline:GetJobTemplate
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateJob.html
*/
toCreateJob() {
return this.to('CreateJob');
}
/**
* Grants permission to create a license endpoint for licensed software or products
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:TagResource
* - ec2:CreateTags
* - ec2:CreateVpcEndpoint
* - ec2:DescribeVpcEndpoints
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateLicenseEndpoint.html
*/
toCreateLicenseEndpoint() {
return this.to('CreateLicenseEndpoint');
}
/**
* Grants permission to create a limit for a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateLimit.html
*/
toCreateLimit() {
return this.to('CreateLimit');
}
/**
* Grants permission to create a monitor
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
* - sso:CreateApplication
* - sso:DeleteApplication
* - sso:PutApplicationAssignmentConfiguration
* - sso:PutApplicationAuthenticationMethod
* - sso:PutApplicationGrant
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateMonitor.html
*/
toCreateMonitor() {
return this.to('CreateMonitor');
}
/**
* Grants permission to create a queue
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:TagResource
* - iam:PassRole
* - identitystore:ListGroupMembershipsForMember
* - logs:CreateLogGroup
* - s3:ListBucket
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueue.html
*/
toCreateQueue() {
return this.to('CreateQueue');
}
/**
* Grants permission to create a queue environment
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueEnvironment.html
*/
toCreateQueueEnvironment() {
return this.to('CreateQueueEnvironment');
}
/**
* Grants permission to create a queue-fleet association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueFleetAssociation.html
*/
toCreateQueueFleetAssociation() {
return this.to('CreateQueueFleetAssociation');
}
/**
* Grants permission to create a queue-limit association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueLimitAssociation.html
*/
toCreateQueueLimitAssociation() {
return this.to('CreateQueueLimitAssociation');
}
/**
* Grants permission to create a storage profile for a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateStorageProfile.html
*/
toCreateStorageProfile() {
return this.to('CreateStorageProfile');
}
/**
* Grants permission to create a worker
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:ListTagsForResource
* - deadline:TagResource
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateWorker.html
*/
toCreateWorker() {
return this.to('CreateWorker');
}
/**
* Grants permission to delete a budget
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteBudget.html
*/
toDeleteBudget() {
return this.to('DeleteBudget');
}
/**
* Grants permission to delete a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteFarm.html
*/
toDeleteFarm() {
return this.to('DeleteFarm');
}
/**
* Grants permission to delete a fleet
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteFleet.html
*/
toDeleteFleet() {
return this.to('DeleteFleet');
}
/**
* Grants permission to delete a license endpoint
*
* Access Level: Write
*
* Dependent actions:
* - ec2:DeleteVpcEndpoints
* - ec2:DescribeVpcEndpoints
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteLicenseEndpoint.html
*/
toDeleteLicenseEndpoint() {
return this.to('DeleteLicenseEndpoint');
}
/**
* Grants permission to delete a limit
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteLimit.html
*/
toDeleteLimit() {
return this.to('DeleteLimit');
}
/**
* Grants permission to delete a metered product
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteMeteredProduct.html
*/
toDeleteMeteredProduct() {
return this.to('DeleteMeteredProduct');
}
/**
* Grants permission to delete a monitor
*
* Access Level: Write
*
* Dependent actions:
* - sso:DeleteApplication
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteMonitor.html
*/
toDeleteMonitor() {
return this.to('DeleteMonitor');
}
/**
* Grants permission to delete a queue
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueue.html
*/
toDeleteQueue() {
return this.to('DeleteQueue');
}
/**
* Grants permission to delete a queue environment
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueEnvironment.html
*/
toDeleteQueueEnvironment() {
return this.to('DeleteQueueEnvironment');
}
/**
* Grants permission to delete a queue-fleet association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueFleetAssociation.html
*/
toDeleteQueueFleetAssociation() {
return this.to('DeleteQueueFleetAssociation');
}
/**
* Grants permission to delete a queue-limit association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueLimitAssociation.html
*/
toDeleteQueueLimitAssociation() {
return this.to('DeleteQueueLimitAssociation');
}
/**
* Grants permission to delete a storage profile
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteStorageProfile.html
*/
toDeleteStorageProfile() {
return this.to('DeleteStorageProfile');
}
/**
* Grants permission to delete a worker
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteWorker.html
*/
toDeleteWorker() {
return this.to('DeleteWorker');
}
/**
* Grants permission to disassociate a member from a farm
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromFarm.html
*/
toDisassociateMemberFromFarm() {
return this.to('DisassociateMemberFromFarm');
}
/**
* Grants permission to disassociate a member from a fleet
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromFleet.html
*/
toDisassociateMemberFromFleet() {
return this.to('DisassociateMemberFromFleet');
}
/**
* Grants permission to disassociate a member from a job
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromJob.html
*/
toDisassociateMemberFromJob() {
return this.to('DisassociateMemberFromJob');
}
/**
* Grants permission to disassociate a member from a queue
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromQueue.html
*/
toDisassociateMemberFromQueue() {
return this.to('DisassociateMemberFromQueue');
}
/**
* Grants permission to get the latest version of an application
*
* Access Level: Read
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetApplicationVersion.html
*/
toGetApplicationVersion() {
return this.to('GetApplicationVersion');
}
/**
* Grants permission to get a budget
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetBudget.html
*/
toGetBudget() {
return this.to('GetBudget');
}
/**
* Grants permission to get a farm
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetFarm.html
*/
toGetFarm() {
return this.to('GetFarm');
}
/**
* Grants permission to get a fleet
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetFleet.html
*/
toGetFleet() {
return this.to('GetFleet');
}
/**
* Grants permission to get a job
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetJob.html
*/
toGetJob() {
return this.to('GetJob');
}
/**
* Grants permission to read job template
*
* Access Level: Read
*/
toGetJobTemplate() {
return this.to('GetJobTemplate');
}
/**
* Grants permission to get a license endpoint
*
* Access Level: Read
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetLicenseEndpoint.html
*/
toGetLicenseEndpoint() {
return this.to('GetLicenseEndpoint');
}
/**
* Grants permission to get a limit
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetLimit.html
*/
toGetLimit() {
return this.to('GetLimit');
}
/**
* Grants permission to get a monitor
*
* Access Level: Read
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetMonitor.html
*/
toGetMonitor() {
return this.to('GetMonitor');
}
/**
* Grants permission to get a queue
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueue.html
*/
toGetQueue() {
return this.to('GetQueue');
}
/**
* Grants permission to get a queue environment
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueEnvironment.html
*/
toGetQueueEnvironment() {
return this.to('GetQueueEnvironment');
}
/**
* Grants permission to get a queue-fleet association
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueFleetAssociation.html
*/
toGetQueueFleetAssociation() {
return this.to('GetQueueFleetAssociation');
}
/**
* Grants permission to get a queue-limit association
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueLimitAssociation.html
*/
toGetQueueLimitAssociation() {
return this.to('GetQueueLimitAssociation');
}
/**
* Grants permission to get a session for a job
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSession.html
*/
toGetSession() {
return this.to('GetSession');
}
/**
* Grants permission to get a session action for a job
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSessionAction.html
*/
toGetSessionAction() {
return this.to('GetSessionAction');
}
/**
* Grants permission to get all collected statistics for sessions
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSessionsStatisticsAggregation.html
*/
toGetSessionsStatisticsAggregation() {
return this.to('GetSessionsStatisticsAggregation');
}
/**
* Grants permission to get a step in a job
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStep.html
*/
toGetStep() {
return this.to('GetStep');
}
/**
* Grants permission to get a storage profile
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStorageProfile.html
*/
toGetStorageProfile() {
return this.to('GetStorageProfile');
}
/**
* Grants permission to get a storage profile for a queue
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStorageProfileForQueue.html
*/
toGetStorageProfileForQueue() {
return this.to('GetStorageProfileForQueue');
}
/**
* Grants permission to get a job task
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetTask.html
*/
toGetTask() {
return this.to('GetTask');
}
/**
* Grants permission to get a worker
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetWorker.html
*/
toGetWorker() {
return this.to('GetWorker');
}
/**
* Grants permission to list all available metered products within a license endpoint
*
* Access Level: List
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListAvailableMeteredProducts.html
*/
toListAvailableMeteredProducts() {
return this.to('ListAvailableMeteredProducts');
}
/**
* Grants permission to list all budgets for a farm
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListBudgets.html
*/
toListBudgets() {
return this.to('ListBudgets');
}
/**
* Grants permission to list all members of a farm
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFarmMembers.html
*/
toListFarmMembers() {
return this.to('ListFarmMembers');
}
/**
* Grants permission to list all farms
*
* Access Level: List
*
* Possible conditions:
* - .ifPrincipalId()
* - .ifRequesterPrincipalId()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFarms.html
*/
toListFarms() {
return this.to('ListFarms');
}
/**
* Grants permission to list all members of a fleet
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFleetMembers.html
*/
toListFleetMembers() {
return this.to('ListFleetMembers');
}
/**
* Grants permission to list all fleets
*
* Access Level: List
*
* Possible conditions:
* - .ifPrincipalId()
* - .ifRequesterPrincipalId()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFleets.html
*/
toListFleets() {
return this.to('ListFleets');
}
/**
* Grants permission to list all members of a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobMembers.html
*/
toListJobMembers() {
return this.to('ListJobMembers');
}
/**
* Grants permission to get a job's parameter definitions in the job template
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobParameterDefinitions.html
*/
toListJobParameterDefinitions() {
return this.to('ListJobParameterDefinitions');
}
/**
* Grants permission to list all jobs in a queue
*
* Access Level: List
*
* Possible conditions:
* - .ifPrincipalId()
* - .ifRequesterPrincipalId()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobs.html
*/
toListJobs() {
return this.to('ListJobs');
}
/**
* Grants permission to list all license endpoints
*
* Access Level: List
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListLicenseEndpoints.html
*/
toListLicenseEndpoints() {
return this.to('ListLicenseEndpoints');
}
/**
* Grants permission to list all limits in a farm
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListLimits.html
*/
toListLimits() {
return this.to('ListLimits');
}
/**
* Grants permission to list all metered products in a license endpoint
*
* Access Level: List
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListMeteredProducts.html
*/
toListMeteredProducts() {
return this.to('ListMeteredProducts');
}
/**
* Grants permission to list all monitors
*
* Access Level: List
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListMonitors.html
*/
toListMonitors() {
return this.to('ListMonitors');
}
/**
* Grants permission to list all queue environments to which a queue is associated
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueEnvironments.html
*/
toListQueueEnvironments() {
return this.to('ListQueueEnvironments');
}
/**
* Grants permission to list all queue-fleet associations
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueFleetAssociations.html
*/
toListQueueFleetAssociations() {
return this.to('ListQueueFleetAssociations');
}
/**
* Grants permission to list all queue-limit associations
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueLimitAssociations.html
*/
toListQueueLimitAssociations() {
return this.to('ListQueueLimitAssociations');
}
/**
* Grants permission to list all members in a queue
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueMembers.html
*/
toListQueueMembers() {
return this.to('ListQueueMembers');
}
/**
* Grants permission to list all queues on a farm
*
* Access Level: List
*
* Possible conditions:
* - .ifPrincipalId()
* - .ifRequesterPrincipalId()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueues.html
*/
toListQueues() {
return this.to('ListQueues');
}
/**
* Grants permission to list all session actions for a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessionActions.html
*/
toListSessionActions() {
return this.to('ListSessionActions');
}
/**
* Grants permission to list all sessions for a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessions.html
*/
toListSessions() {
return this.to('ListSessions');
}
/**
* Grants permission to list all sessions for a worker
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessionsForWorker.html
*/
toListSessionsForWorker() {
return this.to('ListSessionsForWorker');
}
/**
* Grants permission to list the step consumers for a job step
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStepConsumers.html
*/
toListStepConsumers() {
return this.to('ListStepConsumers');
}
/**
* Grants permission to list dependencies for a job step
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStepDependencies.html
*/
toListStepDependencies() {
return this.to('ListStepDependencies');
}
/**
* Grants permission to list all steps for a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSteps.html
*/
toListSteps() {
return this.to('ListSteps');
}
/**
* Grants permission to list all storage profiles in a farm
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStorageProfiles.html
*/
toListStorageProfiles() {
return this.to('ListStorageProfiles');
}
/**
* Grants permission to list all storage profiles in a queue
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStorageProfilesForQueue.html
*/
toListStorageProfilesForQueue() {
return this.to('ListStorageProfilesForQueue');
}
/**
* Grants permission to list all tags on specified Deadline Cloud resources
*
* Access Level: List
*
* Possible conditions:
* - .ifCalledAction()
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListTagsForResource.html
*/
toListTagsForResource() {
return this.to('ListTagsForResource');
}
/**
* Grants permission to list all tasks for a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListTasks.html
*/
toListTasks() {
return this.to('ListTasks');
}
/**
* Grants permission to list all workers in a fleet
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListWorkers.html
*/
toListWorkers() {
return this.to('ListWorkers');
}
/**
* Grants permission to add a metered product to a license endpoint
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_PutMeteredProduct.html
*/
toPutMeteredProduct() {
return this.to('PutMeteredProduct');
}
/**
* Grants permission to search for jobs in multiple queues
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchJobs.html
*/
toSearchJobs() {
return this.to('SearchJobs');
}
/**
* Grants permission to search the steps within a single job or to search the steps for multiple queues
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchSteps.html
*/
toSearchSteps() {
return this.to('SearchSteps');
}
/**
* Grants permission to search the tasks within a single job or to search the tasks for multiple queues
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchTasks.html
*/
toSearchTasks() {
return this.to('SearchTasks');
}
/**
* Grants permission to search for workers in multiple fleets
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchWorkers.html
*/
toSearchWorkers() {
return this.to('SearchWorkers');
}
/**
* Grants permission to get all collected statistics for sessions
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_StartSessionsStatisticsAggregation.html
*/
toStartSessionsStatisticsAggregation() {
return this.to('StartSessionsStatisticsAggregation');
}
/**
* Grants permission to add or overwrite one or more tags for the specified Deadline Cloud resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifCalledAction()
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_TagResource.html
*/
toTagResource() {
return this.to('TagResource');
}
/**
* Grants permission to disassociate one or more tags from the specified Deadline Cloud resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UntagResource.html
*/
toUntagResource() {
return this.to('UntagResource');
}
/**
* Grants permission to update a budget
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateBudget.html
*/
toUpdateBudget() {
return this.to('UpdateBudget');
}
/**
* Grants permission to update a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFarm.html
*/
toUpdateFarm() {
return this.to('UpdateFarm');
}
/**
* Grants permission to update a fleet
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFleet.html
*/
toUpdateFleet() {
return this.to('UpdateFleet');
}
/**
* Grants permission to update a job
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateJob.html
*/
toUpdateJob() {
return this.to('UpdateJob');
}
/**
* Grants permission to update a limit for a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateLimit.html
*/
toUpdateLimit() {
return this.to('UpdateLimit');
}
/**
* Grants permission to update a monitor
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
* - sso:PutApplicationGrant
* - sso:UpdateApplication
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateMonitor.html
*/
toUpdateMonitor() {
return this.to('UpdateMonitor');
}
/**
* Grants permission to update a queue
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueue.html
*/
toUpdateQueue() {
return this.to('UpdateQueue');
}
/**
* Grants permission to update a queue environment
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueEnvironment.html
*/
toUpdateQueueEnvironment() {
return this.to('UpdateQueueEnvironment');
}
/**
* Grants permission to update a queue-fleet association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueFleetAssociation.html
*/
toUpdateQueueFleetAssociation() {
return this.to('UpdateQueueFleetAssociation');
}
/**
* Grants permission to update a queue-limit association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueLimitAssociation.html
*/
toUpdateQueueLimitAssociation() {
return this.to('UpdateQueueLimitAssociation');
}
/**
* Grants permission to update a session for a job
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateSession.html
*/
toUpdateSession() {
return this.to('UpdateSession');
}
/**
* Grants permission to update a step for a job
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateStep.html
*/
toUpdateStep() {
return this.to('UpdateStep');
}
/**
* Grants permission to update a storage profile for a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateStorageProfile.html
*/
toUpdateStorageProfile() {
return this.to('UpdateStorageProfile');
}
/**
* Grants permission to update a task
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateTask.html
*/
toUpdateTask() {
return this.to('UpdateTask');
}
/**
* Grants permission to update a worker
*
* Access Level: Write
*
* Dependent actions:
* - logs:CreateLogStream
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateWorker.html
*/
toUpdateWorker() {
return this.to('UpdateWorker');
}
/**
* Grants permission to update the schedule for a worker
*
* Access Level: Write
*
* Dependent actions:
* - logs:CreateLogStream
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateWorkerSchedule.html
*/
toUpdateWorkerSchedule() {
return this.to('UpdateWorkerSchedule');
}
/**
* Adds a resource of type budget to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/manage-costs.html
*
* @param farmId - Identifier for the farmId.
* @param budgetId - Identifier for the budgetId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifFarmMembershipLevels()
*/
onBudget(farmId, budgetId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:deadline:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:farm/${farmId}/budget/${budgetId}`);
}
/**
* Adds a resource of type farm to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/farms.html
*
* @param farmId - Identifier for the farmId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifFarmMembershipLevels()
*/
onFarm(farmId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:deadline:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:farm/${farmId}`);
}
/**
* Adds a resource of type fleet to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/manage-fleets.html
*
* @param farmId - Identifier for the farmId.
* @param fleetId - Identifier for the fleetId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifFarmMembershipLevels()
* - .ifFleetMembershipLevels()
*/
onFleet(farmId, fleetId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:deadline:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:farm/${farmId}/fleet/${fleetId}`);
}
/**
* Adds a resource of type job to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/deadline-cloud-jobs.html
*
* @param farmId - Identifier for the farmId.
* @param queueId - Identifier for the queueId.
* @param jobId - Identifier for the jobId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifFarmMembershipLevels()
* - .ifJobMembershipLevels()
* - .ifQueueMembershipLevels()
*/
onJob(farmId, queueId, jobId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:deadline:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:farm/${farmId}/queue/${queueId}/job/${jobId}`);
}
/**
* Adds a resource of type license-endpoint to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/cmf-ubl.html
*
* @param licenseEndpointId - Identifier for the licenseEndpointId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onLicenseEndpoint(licenseEndpointId, account, region, partit