cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
518 lines (517 loc) • 20.1 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement } from '../../shared';
import { aws_iam as iam } from "aws-cdk-lib";
/**
* Statement provider for service [iotmanagedintegrations](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotmanagedintegrationsfeatureofiotdevicemanagement.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Iotmanagedintegrations extends PolicyStatement {
servicePrefix: string;
/**
* Grants permission to create a product credential locker. This operation will trigger the creation of all the manufacturing resources including Wi-Fi setup key pair and device certificate
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateCredentialLocker.html
*/
toCreateCredentialLocker(): this;
/**
* Grants permission to create a destination
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateDestination.html
*/
toCreateDestination(): this;
/**
* Grants permission to set the event log configuration for the account, a resource type, or a specific resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateEventLogConfiguration.html
*/
toCreateEventLogConfiguration(): this;
/**
* Grants permission to create a Managed Thing
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateManagedThing.html
*/
toCreateManagedThing(): this;
/**
* Grants permission to create a notification configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateNotificationConfiguration.html
*/
toCreateNotificationConfiguration(): this;
/**
* Grants permission to customers to create an OTA task to update their devices
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateOtaTask.html
*/
toCreateOtaTask(): this;
/**
* Grants permission to create an OTA task configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateOtaTaskConfiguration.html
*/
toCreateOtaTaskConfiguration(): this;
/**
* Grants permission to create a new provisioning profile
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateProvisioningProfile.html
*/
toCreateProvisioningProfile(): this;
/**
* Grants permission to delete a Credential Locker. This operation cannot be undone and any existing device won't be able to use the IoT managed integrations Setup
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteCredentialLocker.html
*/
toDeleteCredentialLocker(): this;
/**
* Grants permission to delete a destination
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteDestination.html
*/
toDeleteDestination(): this;
/**
* Grants permission to delete an event log configuration by log configuration ID
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteEventLogConfiguration.html
*/
toDeleteEventLogConfiguration(): this;
/**
* Grants permission to delete a managed thing. If a Controller is deleted, all the devices connected to it will have their status changed to pending. Note, it is not possible to remove a Cloud device
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteManagedThing.html
*/
toDeleteManagedThing(): this;
/**
* Grants permission to delete a notification configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteNotificationConfiguration.html
*/
toDeleteNotificationConfiguration(): this;
/**
* Grants permission to delete an OTA task
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteOtaTask.html
*/
toDeleteOtaTask(): this;
/**
* Grants permission to delete a OTA task configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteOtaTaskConfiguration.html
*/
toDeleteOtaTaskConfiguration(): this;
/**
* Grants permission to delete a provisioning Profile
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteProvisioningProfile.html
*/
toDeleteProvisioningProfile(): this;
/**
* Grants permission to get an existing Credential Locker information
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetCredentialLocker.html
*/
toGetCredentialLocker(): this;
/**
* Grants permission to customers to retrieve the custom endpoint address
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetCustomEndpoint.html
*/
toGetCustomEndpoint(): this;
/**
* Grants permission to get a connector by AWS ARN
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetDefaultEncryptionConfiguration.html
*/
toGetDefaultEncryptionConfiguration(): this;
/**
* Grants permission to get a destination
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetDestination.html
*/
toGetDestination(): this;
/**
* Grants permission to get the current state of a device discovery
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetDeviceDiscovery.html
*/
toGetDeviceDiscovery(): this;
/**
* Grants permission to get an event log configuration by log configuration ID
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetEventLogConfiguration.html
*/
toGetEventLogConfiguration(): this;
/**
* Grants permission to get hub configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetHubConfiguration.html
*/
toGetHubConfiguration(): this;
/**
* Grants permission to get a managed thing
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThing.html
*/
toGetManagedThing(): this;
/**
* Grants permission to get capabilities by ManagedThingId
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThingCapabilities.html
*/
toGetManagedThingCapabilities(): this;
/**
* Grants permission to get the connectivity status of a Managed Thing
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThingConnectivityData.html
*/
toGetManagedThingConnectivityData(): this;
/**
* Grants permission to get metaData info by ManagedThingId
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThingMetaData.html
*/
toGetManagedThingMetaData(): this;
/**
* Grants permission to get managed thing states by managed thing id
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThingState.html
*/
toGetManagedThingState(): this;
/**
* Grants permission to get a notification configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetNotificationConfiguration.html
*/
toGetNotificationConfiguration(): this;
/**
* Grants permission to get the Ota task
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetOtaTask.html
*/
toGetOtaTask(): this;
/**
* Grants permission to get an OTA task configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetOtaTaskConfiguration.html
*/
toGetOtaTaskConfiguration(): this;
/**
* Grants permission to get an existing provisioning profile information
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetProvisioningProfile.html
*/
toGetProvisioningProfile(): this;
/**
* Grants permission to get runtime log configuration for a specific managed thing or for all managed things as a group
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetRuntimeLogConfiguration.html
*/
toGetRuntimeLogConfiguration(): this;
/**
* Grants permission to get a schema version with the provided information
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetSchemaVersion.html
*/
toGetSchemaVersion(): this;
/**
* Grants permission to list the existing Credential Locker
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListCredentialLockers.html
*/
toListCredentialLockers(): this;
/**
* Grants permission to list all the destinations
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListDestinations.html
*/
toListDestinations(): this;
/**
* Grants permission to list all event log configurations for account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListEventLogConfigurations.html
*/
toListEventLogConfigurations(): this;
/**
* Grants permission to list Schemas Associated With Managed Thing
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListManagedThingSchemas.html
*/
toListManagedThingSchemas(): this;
/**
* Grants permission to list all the managed things
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListManagedThings.html
*/
toListManagedThings(): this;
/**
* Grants permission to list all the notification configurations
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListNotificationConfigurations.html
*/
toListNotificationConfigurations(): this;
/**
* Grants permission to list all the OTA task configurations
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListOtaTaskConfigurations.html
*/
toListOtaTaskConfigurations(): this;
/**
* Grants permission to list all the Ota task executions
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListOtaTaskExecutions.html
*/
toListOtaTaskExecutions(): this;
/**
* Grants permission to list all the OTA tasks
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListOtaTasks.html
*/
toListOtaTasks(): this;
/**
* Grants permission to list the existing provisioning profile
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListProvisioningProfiles.html
*/
toListProvisioningProfiles(): this;
/**
* Grants permission to list schema versions with the provided information
*
* Access Level: List
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListSchemaVersions.html
*/
toListSchemaVersions(): this;
/**
* Grants permission to associate KMS key with IoT managed integrations
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_PutDefaultEncryptionConfiguration.html
*/
toPutDefaultEncryptionConfiguration(): this;
/**
* Grants permission to update a hub configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_PutHubConfiguration.html
*/
toPutHubConfiguration(): this;
/**
* Grants permission to set the runtime log configuration for a specific managed thing or for all managed things as a group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_PutRuntimeLogConfiguration.html
*/
toPutRuntimeLogConfiguration(): this;
/**
* Grants permission to customers to request us to manage the server trust for them or bring their own external server trusts for the custom domain
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_RegisterCustomEndpoint.html
*/
toRegisterCustomEndpoint(): this;
/**
* Grants permission to reset a runtime log configuration for a specific managed thing or for all managed things as a group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ResetRuntimeLogConfiguration.html
*/
toResetRuntimeLogConfiguration(): this;
/**
* Grants permission to use the SendManagedThingCommand API to send commands to managed things
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_SendManagedThingCommand.html
*/
toSendManagedThingCommand(): this;
/**
* Grants permission to request to start device discovery
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_StartDeviceDiscovery.html
*/
toStartDeviceDiscovery(): this;
/**
* Grants permission to update a destination
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateDestination.html
*/
toUpdateDestination(): this;
/**
* Grants permission to update an event log configuration by log configuration ID
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateEventLogConfiguration.html
*/
toUpdateEventLogConfiguration(): this;
/**
* Grants permission to update a managed thing
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateManagedThing.html
*/
toUpdateManagedThing(): this;
/**
* Grants permission to update a notification configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateNotificationConfiguration.html
*/
toUpdateNotificationConfiguration(): this;
/**
* Grants permission to update an OTA Task
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateOtaTask.html
*/
toUpdateOtaTask(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type CredentialLockerResource to the statement
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/
*
* @param identifier - Identifier for the identifier.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onCredentialLockerResource(identifier: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type ManagedThingResource to the statement
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/
*
* @param identifier - Identifier for the identifier.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onManagedThingResource(identifier: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type OtaTaskResource to the statement
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/
*
* @param identifier - Identifier for the identifier.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onOtaTaskResource(identifier: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type ProvisioningProfileResource to the statement
*
* https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/
*
* @param identifier - Identifier for the identifier.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onProvisioningProfileResource(identifier: string, account?: string, region?: string, partition?: string): this;
/**
* Statement provider for service [iotmanagedintegrations](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotmanagedintegrationsfeatureofiotdevicemanagement.html).
*
*/
constructor(props?: iam.PolicyStatementProps);
}