UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,329 lines (1,328 loc) 48.5 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [gamelift](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazongamelift.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Gamelift extends PolicyStatement { servicePrefix: string; /** * Grants permission to register player acceptance or rejection of a proposed FlexMatch match * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_AcceptMatch.html */ toAcceptMatch(): this; /** * Grants permission to locate and reserve a game server to host a new game session * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ClaimGameServer.html */ toClaimGameServer(): this; /** * Grants permission to define a new alias for a fleet * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - gamelift:TagResource * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateAlias.html */ toCreateAlias(): this; /** * Grants permission to create a new game build using files stored in an Amazon S3 bucket * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - gamelift:TagResource * - iam:PassRole * - s3:GetObject * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateBuild.html */ toCreateBuild(): this; /** * Grants permission to create a new container fleet of computing resources to run your game servers * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - ec2:DescribeAvailabilityZones * - ec2:DescribeRegions * - gamelift:TagResource * - iam:PassRole * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateContainerFleet.html */ toCreateContainerFleet(): this; /** * Grants permission to create a new container group definition using images stored in an Amazon ECR repository * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - ecr:BatchGetImage * - ecr:DescribeImages * - ecr:GetAuthorizationToken * - ecr:GetDownloadUrlForLayer * - gamelift:TagResource * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateContainerGroupDefinition.html */ toCreateContainerGroupDefinition(): this; /** * Grants permission to create a new fleet of computing resources to run your game servers * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - ec2:DescribeAvailabilityZones * - ec2:DescribeRegions * - gamelift:TagResource * - iam:PassRole * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateFleet.html */ toCreateFleet(): this; /** * Grants permission to specify additional locations for a fleet * * Access Level: Write * * Dependent actions: * - ec2:DescribeAvailabilityZones * - ec2:DescribeRegions * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateFleetLocations.html */ toCreateFleetLocations(): this; /** * Grants permission to create a new game server group, set up a corresponding Auto Scaling group, and launche instances to host game servers * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - autoscaling:CreateAutoScalingGroup * - autoscaling:DescribeAutoScalingGroups * - autoscaling:PutLifecycleHook * - autoscaling:PutScalingPolicy * - ec2:DescribeAvailabilityZones * - ec2:DescribeSubnets * - events:PutRule * - events:PutTargets * - gamelift:TagResource * - iam:PassRole * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateGameServerGroup.html */ toCreateGameServerGroup(): this; /** * Grants permission to start a new game session on a specified fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateGameSession.html */ toCreateGameSession(): this; /** * Grants permission to set up a new queue for processing game session placement requests * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - gamelift:TagResource * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateGameSessionQueue.html */ toCreateGameSessionQueue(): this; /** * Grants permission to define a new location for a fleet * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - gamelift:TagResource * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateLocation.html */ toCreateLocation(): this; /** * Grants permission to create a new FlexMatch matchmaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - gamelift:TagResource * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateMatchmakingConfiguration.html */ toCreateMatchmakingConfiguration(): this; /** * Grants permission to create a new matchmaking rule set for FlexMatch * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - gamelift:TagResource * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateMatchmakingRuleSet.html */ toCreateMatchmakingRuleSet(): this; /** * Grants permission to reserve an available game session slot for a player * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreatePlayerSession.html */ toCreatePlayerSession(): this; /** * Grants permission to reserve available game session slots for multiple players * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreatePlayerSessions.html */ toCreatePlayerSessions(): this; /** * Grants permission to create a new Realtime Servers script * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - gamelift:TagResource * - iam:PassRole * - s3:GetObject * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateScript.html */ toCreateScript(): this; /** * Grants permission to allow GameLift to create or delete a peering connection between a GameLift fleet VPC and a VPC on another AWS account * * Access Level: Write * * Dependent actions: * - ec2:AcceptVpcPeeringConnection * - ec2:AuthorizeSecurityGroupEgress * - ec2:AuthorizeSecurityGroupIngress * - ec2:CreateRoute * - ec2:DeleteRoute * - ec2:DescribeRouteTables * - ec2:DescribeSecurityGroups * - ec2:RevokeSecurityGroupEgress * - ec2:RevokeSecurityGroupIngress * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateVpcPeeringAuthorization.html */ toCreateVpcPeeringAuthorization(): this; /** * Grants permission to establish a peering connection between your GameLift fleet VPC and a VPC on another account * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_CreateVpcPeeringConnection.html */ toCreateVpcPeeringConnection(): this; /** * Grants permission to delete an alias * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteAlias.html */ toDeleteAlias(): this; /** * Grants permission to delete a game build * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteBuild.html */ toDeleteBuild(): this; /** * Grants permission to delete a container fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteContainerFleet.html */ toDeleteContainerFleet(): this; /** * Grants permission to delete a container group definition * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteContainerGroupDefinition.html */ toDeleteContainerGroupDefinition(): this; /** * Grants permission to delete an empty fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteFleet.html */ toDeleteFleet(): this; /** * Grants permission to delete locations for a fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteFleetLocations.html */ toDeleteFleetLocations(): this; /** * Grants permission to permanently delete a game server group and terminate FleetIQ activity for the corresponding Auto Scaling group * * Access Level: Write * * Dependent actions: * - autoscaling:DeleteAutoScalingGroup * - autoscaling:DescribeAutoScalingGroups * - autoscaling:ExitStandby * - autoscaling:ResumeProcesses * - autoscaling:SetInstanceProtection * - autoscaling:UpdateAutoScalingGroup * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteGameServerGroup.html */ toDeleteGameServerGroup(): this; /** * Grants permission to delete an existing game session queue * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteGameSessionQueue.html */ toDeleteGameSessionQueue(): this; /** * Grants permission to delete a location * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteLocation.html */ toDeleteLocation(): this; /** * Grants permission to delete an existing FlexMatch matchmaker * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteMatchmakingConfiguration.html */ toDeleteMatchmakingConfiguration(): this; /** * Grants permission to delete an existing FlexMatch matchmaking rule set * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteMatchmakingRuleSet.html */ toDeleteMatchmakingRuleSet(): this; /** * Grants permission to delete a set of auto-scaling rules * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteScalingPolicy.html */ toDeleteScalingPolicy(): this; /** * Grants permission to delete a Realtime Servers script * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteScript.html */ toDeleteScript(): this; /** * Grants permission to cancel a VPC peering authorization * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteVpcPeeringAuthorization.html */ toDeleteVpcPeeringAuthorization(): this; /** * Grants permission to remove a peering connection between VPCs * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeleteVpcPeeringConnection.html */ toDeleteVpcPeeringConnection(): this; /** * Grants permission to deregister a compute against a fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeregisterCompute.html */ toDeregisterCompute(): this; /** * Grants permission to remove a game server from a game server group * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DeregisterGameServer.html */ toDeregisterGameServer(): this; /** * Grants permission to retrieve properties for an alias * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeAlias.html */ toDescribeAlias(): this; /** * Grants permission to retrieve properties for a game build * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeBuild.html */ toDescribeBuild(): this; /** * Grants permission to retrieve information for a compute in a fleet * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeCompute.html */ toDescribeCompute(): this; /** * Grants permission to retrieve the properties of an existing container fleet * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeContainerFleet.html */ toDescribeContainerFleet(): this; /** * Grants permission to retrieve the properties of an existing container group definition * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeContainerGroupDefinition.html */ toDescribeContainerGroupDefinition(): this; /** * Grants permission to retrieve the maximum allowed and current usage for EC2 instance types * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeEC2InstanceLimits.html */ toDescribeEC2InstanceLimits(): this; /** * Grants permission to retrieve general properties, including status, for fleets * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetAttributes.html */ toDescribeFleetAttributes(): this; /** * Grants permission to retrieve the current capacity settings for managed fleets * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetCapacity.html */ toDescribeFleetCapacity(): this; /** * Grants permission to retrieve the properties of an existing fleet deployment * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetDeployment.html */ toDescribeFleetDeployment(): this; /** * Grants permission to retrieve entries from a fleet's event log * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetEvents.html */ toDescribeFleetEvents(): this; /** * Grants permission to retrieve general properties, including statuses, for a fleet's locations * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetLocationAttributes.html */ toDescribeFleetLocationAttributes(): this; /** * Grants permission to retrieve the current capacity setting for a fleet's location * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetLocationCapacity.html */ toDescribeFleetLocationCapacity(): this; /** * Grants permission to retrieve utilization statistics for fleet's location * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetLocationUtilization.html */ toDescribeFleetLocationUtilization(): this; /** * Grants permission to retrieve the inbound connection permissions for a fleet * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetPortSettings.html */ toDescribeFleetPortSettings(): this; /** * Grants permission to retrieve utilization statistics for fleets * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetUtilization.html */ toDescribeFleetUtilization(): this; /** * Grants permission to retrieve properties for a game server * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeGameServer.html */ toDescribeGameServer(): this; /** * Grants permission to retrieve properties for a game server group * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeGameServerGroup.html */ toDescribeGameServerGroup(): this; /** * Grants permission to retrieve the status of EC2 instances in a game server group * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeGameServerInstances.html */ toDescribeGameServerInstances(): this; /** * Grants permission to retrieve properties for game sessions in a fleet, including the protection policy * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeGameSessionDetails.html */ toDescribeGameSessionDetails(): this; /** * Grants permission to retrieve details of a game session placement request * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeGameSessionPlacement.html */ toDescribeGameSessionPlacement(): this; /** * Grants permission to retrieve properties for game session queues * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeGameSessionQueues.html */ toDescribeGameSessionQueues(): this; /** * Grants permission to retrieve properties for game sessions in a fleet * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeGameSessions.html */ toDescribeGameSessions(): this; /** * Grants permission to retrieve information about instances in a managed fleet * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeInstances.html */ toDescribeInstances(): this; /** * Grants permission to retrieve details of matchmaking tickets * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeMatchmaking.html */ toDescribeMatchmaking(): this; /** * Grants permission to retrieve properties for FlexMatch matchmakers * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeMatchmakingConfigurations.html */ toDescribeMatchmakingConfigurations(): this; /** * Grants permission to retrieve properties for FlexMatch matchmaking rule sets * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeMatchmakingRuleSets.html */ toDescribeMatchmakingRuleSets(): this; /** * Grants permission to retrieve properties for player sessions in a game session * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribePlayerSessions.html */ toDescribePlayerSessions(): this; /** * Grants permission to retrieve the current runtime configuration for a fleet * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeRuntimeConfiguration.html */ toDescribeRuntimeConfiguration(): this; /** * Grants permission to retrieve all scaling policies that are applied to a fleet * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeScalingPolicies.html */ toDescribeScalingPolicies(): this; /** * Grants permission to retrieve properties for a Realtime Servers script * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeScript.html */ toDescribeScript(): this; /** * Grants permission to retrieve valid VPC peering authorizations * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeVpcPeeringAuthorizations.html */ toDescribeVpcPeeringAuthorizations(): this; /** * Grants permission to retrieve details on active or pending VPC peering connections * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeVpcPeeringConnections.html */ toDescribeVpcPeeringConnections(): this; /** * Grants permission to retrieve credentials to remotely access a compute in a managed fleet * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_GetComputeAccess.html */ toGetComputeAccess(): this; /** * Grants permission to retrieve an authentication token that allows processes on a compute to send requests to the Amazon GameLift service * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_GetComputeAuthToken.html */ toGetComputeAuthToken(): this; /** * Grants permission to retrieve the location of stored logs for a game session * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_GetGameSessionLogUrl.html */ toGetGameSessionLogUrl(): this; /** * Grants permission to request remote access to a specified fleet instance * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_GetInstanceAccess.html */ toGetInstanceAccess(): this; /** * Grants permission to retrieve all aliases that are defined in the current Region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListAliases.html */ toListAliases(): this; /** * Grants permission to retrieve all game build in the current Region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListBuilds.html */ toListBuilds(): this; /** * Grants permission to retrieve all compute resources in the current Region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListCompute.html */ toListCompute(): this; /** * Grants permission to retrieve the properties of all existing container fleets in the current Region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListContainerFleets.html */ toListContainerFleets(): this; /** * Grants permission to retrieve the properties of all versions of an existing container group definition * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListContainerGroupDefinitionVersions.html */ toListContainerGroupDefinitionVersions(): this; /** * Grants permission to retrieve the properties of all existing container group definitions in the current Region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListContainerGroupDefinitions.html */ toListContainerGroupDefinitions(): this; /** * Grants permission to retrieve the properties of all existing fleet deployments in the current Region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListFleetDeployments.html */ toListFleetDeployments(): this; /** * Grants permission to retrieve a list of fleet IDs for all fleets in the current Region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListFleets.html */ toListFleets(): this; /** * Grants permission to retrieve all game server groups that are defined in the current Region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListGameServerGroups.html */ toListGameServerGroups(): this; /** * Grants permission to retrieve all game servers that are currently running in a game server group * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListGameServers.html */ toListGameServers(): this; /** * Grants permission to retrieve all locations in this account * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListLocations.html */ toListLocations(): this; /** * Grants permission to retrieve properties for all Realtime Servers scripts in the current region * * Access Level: List * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListScripts.html */ toListScripts(): this; /** * Grants permission to retrieve tags for GameLift resources * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ListTagsForResource.html */ toListTagsForResource(): this; /** * Grants permission to create or update a fleet auto-scaling policy * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_PutScalingPolicy.html */ toPutScalingPolicy(): this; /** * Grants permission to register a compute against a fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_RegisterCompute.html */ toRegisterCompute(): this; /** * Grants permission to notify GameLift FleetIQ when a new game server is ready to host gameplay * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_RegisterGameServer.html */ toRegisterGameServer(): this; /** * Grants permission to retrieve fresh upload credentials to use when uploading a new game build * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_RequestUploadCredentials.html */ toRequestUploadCredentials(): this; /** * Grants permission to retrieve the fleet ID associated with an alias * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ResolveAlias.html */ toResolveAlias(): this; /** * Grants permission to reinstate suspended FleetIQ activity for a game server group * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ResumeGameServerGroup.html */ toResumeGameServerGroup(): this; /** * Grants permission to retrieve game sessions that match a set of search criteria * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_SearchGameSessions.html */ toSearchGameSessions(): this; /** * Grants permission to resume auto-scaling activity on a fleet after it was suspended with StopFleetActions() * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_StartFleetActions.html */ toStartFleetActions(): this; /** * Grants permission to send a game session placement request to a game session queue * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_StartGameSessionPlacement.html */ toStartGameSessionPlacement(): this; /** * Grants permission to request FlexMatch matchmaking to fill available player slots in an existing game session * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_StartMatchBackfill.html */ toStartMatchBackfill(): this; /** * Grants permission to request FlexMatch matchmaking for one or a group of players and initiate game session placement * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_StartMatchmaking.html */ toStartMatchmaking(): this; /** * Grants permission to suspend auto-scaling activity on a fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_StopFleetActions.html */ toStopFleetActions(): this; /** * Grants permission to cancel a game session placement request that is in progress * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_StopGameSessionPlacement.html */ toStopGameSessionPlacement(): this; /** * Grants permission to cancel a matchmaking or match backfill request that is in progress * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_StopMatchmaking.html */ toStopMatchmaking(): this; /** * Grants permission to temporarily stop FleetIQ activity for a game server group * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_SuspendGameServerGroup.html */ toSuspendGameServerGroup(): this; /** * Grants permission to tag GameLift resources * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_TagResource.html */ toTagResource(): this; /** * Grants permission to shut down an existing game session * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_TerminateGameSession.html */ toTerminateGameSession(): this; /** * Grants permission to untag GameLift resources * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UntagResource.html */ toUntagResource(): this; /** * Grants permission to update the properties of an existing alias * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateAlias.html */ toUpdateAlias(): this; /** * Grants permission to update an existing build's metadata * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateBuild.html */ toUpdateBuild(): this; /** * Grants permission to update an existing container fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateContainerFleet.html */ toUpdateContainerFleet(): this; /** * Grants permission to update the properties of an existing container group definition * * Access Level: Write * * Dependent actions: * - ecr:BatchGetImage * - ecr:DescribeImages * - ecr:GetAuthorizationToken * - ecr:GetDownloadUrlForLayer * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateContainerGroupDefinition.html */ toUpdateContainerGroupDefinition(): this; /** * Grants permission to update the general properties of an existing fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateFleetAttributes.html */ toUpdateFleetAttributes(): this; /** * Grants permission to adjust a managed fleet's capacity settings * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateFleetCapacity.html */ toUpdateFleetCapacity(): this; /** * Grants permission to adjust a fleet's port settings * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateFleetPortSettings.html */ toUpdateFleetPortSettings(): this; /** * Grants permission to change game server properties, health status, or utilization status * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateGameServer.html */ toUpdateGameServer(): this; /** * Grants permission to update properties for game server group, including allowed instance types * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateGameServerGroup.html */ toUpdateGameServerGroup(): this; /** * Grants permission to update the properties of an existing game session * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateGameSession.html */ toUpdateGameSession(): this; /** * Grants permission to update properties of an existing game session queue * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateGameSessionQueue.html */ toUpdateGameSessionQueue(): this; /** * Grants permission to update properties of an existing FlexMatch matchmaking configuration * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateMatchmakingConfiguration.html */ toUpdateMatchmakingConfiguration(): this; /** * Grants permission to update how server processes are configured on instances in an existing fleet * * Access Level: Write * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateRuntimeConfiguration.html */ toUpdateRuntimeConfiguration(): this; /** * Grants permission to update the metadata and content of an existing Realtime Servers script * * Access Level: Write * * Dependent actions: * - iam:PassRole * - s3:GetObject * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateScript.html */ toUpdateScript(): this; /** * Grants permission to validate the syntax of a FlexMatch matchmaking rule set * * Access Level: Read * * https://docs.aws.amazon.com/gamelift/latest/apireference/API_ValidateMatchmakingRuleSet.html */ toValidateMatchmakingRuleSet(): this; protected accessLevelList: AccessLevelList; /** * Adds a resource of type alias to the statement * * https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-console-aliases.html * * @param aliasId - Identifier for the aliasId. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onAlias(aliasId: string, region?: string, partition?: string): this; /** * Adds a resource of type build to the statement * * https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-console-builds.html * * @param buildId - Identifier for the buildId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onBuild(buildId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type containerGroupDefinition to the statement * * https://docs.aws.amazon.com/gamelift/latest/developerguide/containers-intro.html * * @param name - Identifier for the name. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onContainerGroupDefinition(name: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type containerFleet to the statement * * https://docs.aws.amazon.com/gamelift/latest/developerguide/containers-intro.html * * @param fleetId - Identifier for the fleetId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onContainerFleet(fleetId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type fleet to the statement * * https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-console-fleets.html * * @param fleetId - Identifier for the fleetId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onFleet(fleetId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type gameServerGroup to the statement * * https://docs.aws.amazon.com/gamelift/latest/fleetiqguide/gsg-integrate-gameservergroup.html * * @param gameServerGroupName - Identifier for the gameServerGroupName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onGameServerGroup(gameServerGroupName: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type gameSessionQueue to the statement * * https://docs.aws.amazon.com/gamelift/latest/developerguide/queues-console.html * * @param gameSessionQueueName - Identifier for the gameSessionQueueName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onGameSessionQueue(gameSessionQueueName: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type location to the statement * * https://docs.aws.amazon.com/gamelift/latest/developerguide/fleets-creating-anywhere.html#fleet-anywhere-location * * @param locationId - Identifier for the locationId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onLocation(locationId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type matchmakingConfiguration to the statement * * https://docs.aws.amazon.com/gamelift/latest/flexmatchguide/match-create-configuration.html * * @param matchmakingConfigurationName - Identifier for the matchmakingConfigurationName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onMatchmakingConfiguration(matchmakingConfigurationName: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type matchmakingRuleSet to the statement * * https://docs.aws.amazon.com/gamelift/latest/flexmatchguide/match-rulesets.html * * @param matchmakingRuleSetName - Identifier for the matchmakingRuleSetName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onMatchmakingRuleSet(matchmakingRuleSetName: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type script to the statement * * https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-console-scripts.html * * @param scriptId - Identifier for the scriptId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onScript(scriptId: string, account?: string, region?: string, partition?: string): this; /** * Filters access by the tags that are passed in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag * * Applies to actions: * - .toCreateAlias() * - .toCreateBuild() * - .toCreateContainerFleet() * - .toCreateContainerGroupDefinition() * - .toCreateFleet() * - .toCreateGameServerGroup() * - .toCreateGameSessionQueue() * - .toCreateLocation() * - .toCreateMatchmakingConfiguration() * - .toCreateMatchmakingRuleSet() * - .toCreateScript() * - .toTagResource() * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this; /** * Filters access by the tags associated with the resource * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag * * Applies to resource types: * - alias * - build * - containerGroupDefinition * - containerFleet * - fleet * - gameServerGroup * - gameSessionQueue * - location * - matchmakingConfiguration * - matchmakingRuleSet * - script * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this; /** * Filters access by the tag keys that are passed in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys * * Applies to actions: * - .toCreateAlias() * - .toCreateBuild() * - .toCreateContainerFleet() * - .toCreateContainerGroupDefinition() * - .toCreateFleet() * - .toCreateGameServerGroup() * - .toCreateGameSessionQueue() * - .toCreateLocation() * - .toCreateMatchmakingConfiguration() * - .toCreateMatchmakingRuleSet() * - .toCreateScript() * - .toTagResource() * - .toUntagResource() * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsTagKeys(value: string | string[], operator?: Operator | string): this; /** * Statement provider for service [gamelift](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazongamelift.html). * */ constructor(props?: iam.PolicyStatementProps); }