UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

518 lines (517 loc) 20.1 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [iotmanagedintegrations](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotmanagedintegrationsfeatureofiotdevicemanagement.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Iotmanagedintegrations extends PolicyStatement { servicePrefix: string; /** * Grants permission to create a product credential locker. This operation will trigger the creation of all the manufacturing resources including Wi-Fi setup key pair and device certificate * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateCredentialLocker.html */ toCreateCredentialLocker(): this; /** * Grants permission to create a destination * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateDestination.html */ toCreateDestination(): this; /** * Grants permission to set the event log configuration for the account, a resource type, or a specific resource * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateEventLogConfiguration.html */ toCreateEventLogConfiguration(): this; /** * Grants permission to create a Managed Thing * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateManagedThing.html */ toCreateManagedThing(): this; /** * Grants permission to create a notification configuration * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateNotificationConfiguration.html */ toCreateNotificationConfiguration(): this; /** * Grants permission to customers to create an OTA task to update their devices * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateOtaTask.html */ toCreateOtaTask(): this; /** * Grants permission to create an OTA task configuration * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateOtaTaskConfiguration.html */ toCreateOtaTaskConfiguration(): this; /** * Grants permission to create a new provisioning profile * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_CreateProvisioningProfile.html */ toCreateProvisioningProfile(): this; /** * Grants permission to delete a Credential Locker. This operation cannot be undone and any existing device won't be able to use the IoT managed integrations Setup * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteCredentialLocker.html */ toDeleteCredentialLocker(): this; /** * Grants permission to delete a destination * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteDestination.html */ toDeleteDestination(): this; /** * Grants permission to delete an event log configuration by log configuration ID * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteEventLogConfiguration.html */ toDeleteEventLogConfiguration(): this; /** * Grants permission to delete a managed thing. If a Controller is deleted, all the devices connected to it will have their status changed to pending. Note, it is not possible to remove a Cloud device * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteManagedThing.html */ toDeleteManagedThing(): this; /** * Grants permission to delete a notification configuration * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteNotificationConfiguration.html */ toDeleteNotificationConfiguration(): this; /** * Grants permission to delete an OTA task * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteOtaTask.html */ toDeleteOtaTask(): this; /** * Grants permission to delete a OTA task configuration * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteOtaTaskConfiguration.html */ toDeleteOtaTaskConfiguration(): this; /** * Grants permission to delete a provisioning Profile * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_DeleteProvisioningProfile.html */ toDeleteProvisioningProfile(): this; /** * Grants permission to get an existing Credential Locker information * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetCredentialLocker.html */ toGetCredentialLocker(): this; /** * Grants permission to customers to retrieve the custom endpoint address * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetCustomEndpoint.html */ toGetCustomEndpoint(): this; /** * Grants permission to get a connector by AWS ARN * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetDefaultEncryptionConfiguration.html */ toGetDefaultEncryptionConfiguration(): this; /** * Grants permission to get a destination * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetDestination.html */ toGetDestination(): this; /** * Grants permission to get the current state of a device discovery * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetDeviceDiscovery.html */ toGetDeviceDiscovery(): this; /** * Grants permission to get an event log configuration by log configuration ID * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetEventLogConfiguration.html */ toGetEventLogConfiguration(): this; /** * Grants permission to get hub configuration * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetHubConfiguration.html */ toGetHubConfiguration(): this; /** * Grants permission to get a managed thing * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThing.html */ toGetManagedThing(): this; /** * Grants permission to get capabilities by ManagedThingId * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThingCapabilities.html */ toGetManagedThingCapabilities(): this; /** * Grants permission to get the connectivity status of a Managed Thing * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThingConnectivityData.html */ toGetManagedThingConnectivityData(): this; /** * Grants permission to get metaData info by ManagedThingId * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThingMetaData.html */ toGetManagedThingMetaData(): this; /** * Grants permission to get managed thing states by managed thing id * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetManagedThingState.html */ toGetManagedThingState(): this; /** * Grants permission to get a notification configuration * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetNotificationConfiguration.html */ toGetNotificationConfiguration(): this; /** * Grants permission to get the Ota task * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetOtaTask.html */ toGetOtaTask(): this; /** * Grants permission to get an OTA task configuration * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetOtaTaskConfiguration.html */ toGetOtaTaskConfiguration(): this; /** * Grants permission to get an existing provisioning profile information * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetProvisioningProfile.html */ toGetProvisioningProfile(): this; /** * Grants permission to get runtime log configuration for a specific managed thing or for all managed things as a group * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetRuntimeLogConfiguration.html */ toGetRuntimeLogConfiguration(): this; /** * Grants permission to get a schema version with the provided information * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_GetSchemaVersion.html */ toGetSchemaVersion(): this; /** * Grants permission to list the existing Credential Locker * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListCredentialLockers.html */ toListCredentialLockers(): this; /** * Grants permission to list all the destinations * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListDestinations.html */ toListDestinations(): this; /** * Grants permission to list all event log configurations for account * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListEventLogConfigurations.html */ toListEventLogConfigurations(): this; /** * Grants permission to list Schemas Associated With Managed Thing * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListManagedThingSchemas.html */ toListManagedThingSchemas(): this; /** * Grants permission to list all the managed things * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListManagedThings.html */ toListManagedThings(): this; /** * Grants permission to list all the notification configurations * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListNotificationConfigurations.html */ toListNotificationConfigurations(): this; /** * Grants permission to list all the OTA task configurations * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListOtaTaskConfigurations.html */ toListOtaTaskConfigurations(): this; /** * Grants permission to list all the Ota task executions * * Access Level: Read * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListOtaTaskExecutions.html */ toListOtaTaskExecutions(): this; /** * Grants permission to list all the OTA tasks * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListOtaTasks.html */ toListOtaTasks(): this; /** * Grants permission to list the existing provisioning profile * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListProvisioningProfiles.html */ toListProvisioningProfiles(): this; /** * Grants permission to list schema versions with the provided information * * Access Level: List * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ListSchemaVersions.html */ toListSchemaVersions(): this; /** * Grants permission to associate KMS key with IoT managed integrations * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_PutDefaultEncryptionConfiguration.html */ toPutDefaultEncryptionConfiguration(): this; /** * Grants permission to update a hub configuration * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_PutHubConfiguration.html */ toPutHubConfiguration(): this; /** * Grants permission to set the runtime log configuration for a specific managed thing or for all managed things as a group * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_PutRuntimeLogConfiguration.html */ toPutRuntimeLogConfiguration(): this; /** * Grants permission to customers to request us to manage the server trust for them or bring their own external server trusts for the custom domain * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_RegisterCustomEndpoint.html */ toRegisterCustomEndpoint(): this; /** * Grants permission to reset a runtime log configuration for a specific managed thing or for all managed things as a group * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_ResetRuntimeLogConfiguration.html */ toResetRuntimeLogConfiguration(): this; /** * Grants permission to use the SendManagedThingCommand API to send commands to managed things * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_SendManagedThingCommand.html */ toSendManagedThingCommand(): this; /** * Grants permission to request to start device discovery * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_StartDeviceDiscovery.html */ toStartDeviceDiscovery(): this; /** * Grants permission to update a destination * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateDestination.html */ toUpdateDestination(): this; /** * Grants permission to update an event log configuration by log configuration ID * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateEventLogConfiguration.html */ toUpdateEventLogConfiguration(): this; /** * Grants permission to update a managed thing * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateManagedThing.html */ toUpdateManagedThing(): this; /** * Grants permission to update a notification configuration * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateNotificationConfiguration.html */ toUpdateNotificationConfiguration(): this; /** * Grants permission to update an OTA Task * * Access Level: Write * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/API_UpdateOtaTask.html */ toUpdateOtaTask(): this; protected accessLevelList: AccessLevelList; /** * Adds a resource of type CredentialLockerResource to the statement * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/ * * @param identifier - Identifier for the identifier. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. */ onCredentialLockerResource(identifier: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type ManagedThingResource to the statement * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/ * * @param identifier - Identifier for the identifier. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. */ onManagedThingResource(identifier: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type OtaTaskResource to the statement * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/ * * @param identifier - Identifier for the identifier. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. */ onOtaTaskResource(identifier: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type ProvisioningProfileResource to the statement * * https://docs.aws.amazon.com/iotmanagedintegrations/latest/APIReference/ * * @param identifier - Identifier for the identifier. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. */ onProvisioningProfileResource(identifier: string, account?: string, region?: string, partition?: string): this; /** * Statement provider for service [iotmanagedintegrations](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotmanagedintegrationsfeatureofiotdevicemanagement.html). * */ constructor(props?: iam.PolicyStatementProps); }