UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,087 lines (1,086 loc) 40.9 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [iotsitewise](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotsitewise.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Iotsitewise extends PolicyStatement { servicePrefix: string; /** * Grants permission to associate a child asset with a parent asset through a hierarchy * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_AssociateAssets.html */ toAssociateAssets(): this; /** * Grants permission to associate a time series with an asset property * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_AssociateTimeSeriesToAssetProperty.html */ toAssociateTimeSeriesToAssetProperty(): this; /** * Grants permission to associate assets to a project * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_BatchAssociateProjectAssets.html */ toBatchAssociateProjectAssets(): this; /** * Grants permission to disassociate assets from a project * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_BatchDisassociateProjectAssets.html */ toBatchDisassociateProjectAssets(): this; /** * Grants permission to retrieve computed aggregates for multiple asset properties * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_BatchGetAssetPropertyAggregates.html */ toBatchGetAssetPropertyAggregates(): this; /** * Grants permission to retrieve the latest value for multiple asset properties * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_BatchGetAssetPropertyValue.html */ toBatchGetAssetPropertyValue(): this; /** * Grants permission to retrieve the value history for multiple asset properties * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_BatchGetAssetPropertyValueHistory.html */ toBatchGetAssetPropertyValueHistory(): this; /** * Grants permission to put property values for asset properties * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_BatchPutAssetPropertyValue.html */ toBatchPutAssetPropertyValue(): this; /** * Grants permission to create an access policy for a portal or a project * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAccessPolicy.html */ toCreateAccessPolicy(): this; /** * Grants permission to create an asset from an asset model * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAsset.html */ toCreateAsset(): this; /** * Grants permission to create an asset model * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAssetModel.html */ toCreateAssetModel(): this; /** * Grants permission to create an asset model composite model inside an asset model * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAssetModelCompositeModel.html */ toCreateAssetModelCompositeModel(): this; /** * Grants permission to create bulk import job * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateBulkImportJob.html */ toCreateBulkImportJob(): this; /** * Grants permission to create a dashboard in a project * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateDashboard.html */ toCreateDashboard(): this; /** * Grants permission to create a dataset * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateDataset.html */ toCreateDataset(): this; /** * Grants permission to create a gateway * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateGateway.html */ toCreateGateway(): this; /** * Grants permission to create a portal * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sso:CreateManagedApplicationInstance * - sso:DescribeRegisteredRegions * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreatePortal.html */ toCreatePortal(): this; /** * Grants permission to create a project in a portal * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateProject.html */ toCreateProject(): this; /** * Grants permission to delete an access policy * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteAccessPolicy.html */ toDeleteAccessPolicy(): this; /** * Grants permission to delete an asset * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteAsset.html */ toDeleteAsset(): this; /** * Grants permission to delete an asset model * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteAssetModel.html */ toDeleteAssetModel(): this; /** * Grants permission to delete an asset model composite model * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteAssetModelCompositeModel.html */ toDeleteAssetModelCompositeModel(): this; /** * Grants permission to delete a dashboard * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteDashboard.html */ toDeleteDashboard(): this; /** * Grants permission to delete a dataset * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteDataset.html */ toDeleteDataset(): this; /** * Grants permission to delete a gateway * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteGateway.html */ toDeleteGateway(): this; /** * Grants permission to delete a portal * * Access Level: Write * * Dependent actions: * - sso:DeleteManagedApplicationInstance * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeletePortal.html */ toDeletePortal(): this; /** * Grants permission to delete a project * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteProject.html */ toDeleteProject(): this; /** * Grants permission to delete a time series * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DeleteTimeSeries.html */ toDeleteTimeSeries(): this; /** * Grants permission to describe an access policy * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeAccessPolicy.html */ toDescribeAccessPolicy(): this; /** * Grants permission to describe actions * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeAction.html */ toDescribeAction(): this; /** * Grants permission to describe an asset * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeAsset.html */ toDescribeAsset(): this; /** * Grants permission to describe an asset composite model * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeAssetCompositeModel.html */ toDescribeAssetCompositeModel(): this; /** * Grants permission to describe an asset model * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeAssetModel.html */ toDescribeAssetModel(): this; /** * Grants permission to describe an asset model composite model * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeAssetModelCompositeModel.html */ toDescribeAssetModelCompositeModel(): this; /** * Grants permission to describe an asset property * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeAssetProperty.html */ toDescribeAssetProperty(): this; /** * Grants permission to describe bulk import job * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeBulkImportJob.html */ toDescribeBulkImportJob(): this; /** * Grants permission to describe a dashboard * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeDashboard.html */ toDescribeDashboard(): this; /** * Grants permission to describe dataset * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeDataset.html */ toDescribeDataset(): this; /** * Grants permission to describe the default encryption configuration for the AWS account * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeDefaultEncryptionConfiguration.html */ toDescribeDefaultEncryptionConfiguration(): this; /** * Grants permission to describe a gateway * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeGateway.html */ toDescribeGateway(): this; /** * Grants permission to describe a capability configuration for a gateway * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeGatewayCapabilityConfiguration.html */ toDescribeGatewayCapabilityConfiguration(): this; /** * Grants permission to describe logging options for the AWS account * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeLoggingOptions.html */ toDescribeLoggingOptions(): this; /** * Grants permission to describe a portal * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribePortal.html */ toDescribePortal(): this; /** * Grants permission to describe a project * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeProject.html */ toDescribeProject(): this; /** * Grants permission to describe the storage configuration for the AWS account * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeStorageConfiguration.html */ toDescribeStorageConfiguration(): this; /** * Grants permission to describe a time series * * Access Level: Read * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeTimeSeries.html */ toDescribeTimeSeries(): this; /** * Grants permission to disassociate a child asset from a parent asset by a hierarchy * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DisassociateAssets.html */ toDisassociateAssets(): this; /** * Grants permission to disassociate a time series from an asset property * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DisassociateTimeSeriesFromAssetProperty.html */ toDisassociateTimeSeriesFromAssetProperty(): this; /** * Grants permission to allow IoT SiteWise integrate with other services * * Access Level: Write */ toEnableSiteWiseIntegration(): this; /** * Grants permission to execute actions * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ExecuteAction.html */ toExecuteAction(): this; /** * Grants permission to execute query * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ExecuteQuery.html */ toExecuteQuery(): this; /** * Grants permission to retrieve computed aggregates for an asset property * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_GetAssetPropertyAggregates.html */ toGetAssetPropertyAggregates(): this; /** * Grants permission to retrieve the latest value for an asset property * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_GetAssetPropertyValue.html */ toGetAssetPropertyValue(): this; /** * Grants permission to retrieve the value history for an asset property * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_GetAssetPropertyValueHistory.html */ toGetAssetPropertyValueHistory(): this; /** * Grants permission to retrieve interpolated values for an asset property * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_GetInterpolatedAssetPropertyValues.html */ toGetInterpolatedAssetPropertyValues(): this; /** * Grants permission to invoke an assistant * * Access Level: Read * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_InvokeAssistant.html */ toInvokeAssistant(): this; /** * Grants permission to list all access policies for an identity or a resource * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListAccessPolicies.html */ toListAccessPolicies(): this; /** * Grants permission to list all actions * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListActions.html */ toListActions(): this; /** * Grants permission to list all asset model composite models * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListAssetModelCompositeModels.html */ toListAssetModelCompositeModels(): this; /** * Grants permission to list asset model properties * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListAssetModelProperties.html */ toListAssetModelProperties(): this; /** * Grants permission to list all asset models * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListAssetModels.html */ toListAssetModels(): this; /** * Grants permission to list asset properties * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListAssetProperties.html */ toListAssetProperties(): this; /** * Grants permission to list the asset relationship graph for an asset * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListAssetRelationships.html */ toListAssetRelationships(): this; /** * Grants permission to list all assets * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListAssets.html */ toListAssets(): this; /** * Grants permission to list all assets associated with an asset through a hierarchy * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListAssociatedAssets.html */ toListAssociatedAssets(): this; /** * Grants permission to list bulk import jobs * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListBulkImportJobs.html */ toListBulkImportJobs(): this; /** * Grants permission to list all asset model composition relationships * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListCompositionRelationships.html */ toListCompositionRelationships(): this; /** * Grants permission to list all dashboards in a project * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListDashboards.html */ toListDashboards(): this; /** * Grants permission to list all datasets * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListDatasets.html */ toListDatasets(): this; /** * Grants permission to list all gateways * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListGateways.html */ toListGateways(): this; /** * Grants permission to list all portals * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListPortals.html */ toListPortals(): this; /** * Grants permission to list all assets associated with a project * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListProjectAssets.html */ toListProjectAssets(): this; /** * Grants permission to list all projects in a portal * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListProjects.html */ toListProjects(): this; /** * Grants permission to list all tags for a resource * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListTagsForResource.html */ toListTagsForResource(): this; /** * Grants permission to list time series * * Access Level: List * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_ListTimeSeries.html */ toListTimeSeries(): this; /** * Grants permission to set the default encryption configuration for the AWS account * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_PutDefaultEncryptionConfiguration.html */ toPutDefaultEncryptionConfiguration(): this; /** * Grants permission to set logging options for the AWS account * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_PutLoggingOptions.html */ toPutLoggingOptions(): this; /** * Grants permission to configure storage settings for the AWS account * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_PutStorageConfiguration.html */ toPutStorageConfiguration(): this; /** * Grants permission to tag a resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * - .ifAwsRequestTag() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_TagResource.html */ toTagResource(): this; /** * Grants permission to untag a resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UntagResource.html */ toUntagResource(): this; /** * Grants permission to update an access policy * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateAccessPolicy.html */ toUpdateAccessPolicy(): this; /** * Grants permission to update an asset * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateAsset.html */ toUpdateAsset(): this; /** * Grants permission to update an asset model * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateAssetModel.html */ toUpdateAssetModel(): this; /** * Grants permission to update asset model composite model * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateAssetModelCompositeModel.html */ toUpdateAssetModelCompositeModel(): this; /** * Grants permission to update an AssetModel property routing * * Access Level: Write */ toUpdateAssetModelPropertyRouting(): this; /** * Grants permission to update an asset property * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateAssetProperty.html */ toUpdateAssetProperty(): this; /** * Grants permission to update a dashboard * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateDashboard.html */ toUpdateDashboard(): this; /** * Grants permission to update a dataset * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateDataset.html */ toUpdateDataset(): this; /** * Grants permission to update a gateway * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateGateway.html */ toUpdateGateway(): this; /** * Grants permission to update a capability configuration for a gateway * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateGatewayCapabilityConfiguration.html */ toUpdateGatewayCapabilityConfiguration(): this; /** * Grants permission to update a portal * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdatePortal.html */ toUpdatePortal(): this; /** * Grants permission to update a project * * Access Level: Write * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_UpdateProject.html */ toUpdateProject(): this; protected accessLevelList: AccessLevelList; /** * Adds a resource of type asset to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAsset.html * * @param assetId - Identifier for the assetId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onAsset(assetId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type asset-model to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAssetModel.html * * @param assetModelId - Identifier for the assetModelId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onAssetModel(assetModelId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type time-series to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_DescribeTimeSeries.html * * @param timeSeriesId - Identifier for the timeSeriesId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onTimeSeries(timeSeriesId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type gateway to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateGateway.html * * @param gatewayId - Identifier for the gatewayId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onGateway(gatewayId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type portal to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreatePortal.html * * @param portalId - Identifier for the portalId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onPortal(portalId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type project to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateProject.html * * @param projectId - Identifier for the projectId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onProject(projectId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type dashboard to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateDashboard.html * * @param dashboardId - Identifier for the dashboardId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onDashboard(dashboardId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type access-policy to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateAccessPolicy.html * * @param accessPolicyId - Identifier for the accessPolicyId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onAccessPolicy(accessPolicyId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type dataset to the statement * * https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_CreateDataset.html * * @param datasetId - Identifier for the datasetId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onDataset(datasetId: string, account?: string, region?: string, partition?: string): this; /** * Filters access by the tag key-value pairs in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag * * Applies to actions: * - .toCreateAccessPolicy() * - .toCreateAsset() * - .toCreateAssetModel() * - .toCreateDashboard() * - .toCreateDataset() * - .toCreateGateway() * - .toCreatePortal() * - .toCreateProject() * - .toDescribeTimeSeries() * - .toTagResource() * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this; /** * Filters access by the tags attached to the resource * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag * * Applies to actions: * - .toListTagsForResource() * * Applies to resource types: * - asset * - asset-model * - time-series * - gateway * - portal * - project * - dashboard * - access-policy * - dataset * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this; /** * Filters access by the tag keys in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys * * Applies to actions: * - .toCreateAccessPolicy() * - .toCreateAsset() * - .toCreateAssetModel() * - .toCreateDashboard() * - .toCreateDataset() * - .toCreateGateway() * - .toCreatePortal() * - .toCreateProject() * - .toDescribeTimeSeries() * - .toTagResource() * - .toUntagResource() * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsTagKeys(value: string | string[], operator?: Operator | string): this; /** * Filters access by an asset hierarchy path, which is the string of asset IDs in the asset's hierarchy, each separated by a forward slash * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAssetHierarchyPath(value: string | string[], operator?: Operator | string): this; /** * Filters access by the ID of a child asset being associated whith a parent asset * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifChildAssetId(value: string | string[], operator?: Operator | string): this; /** * Filters access by the ID of an AWS Single Sign-On group * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifGroup(value: string | string[], operator?: Operator | string): this; /** * Filters access by the ID of an AWS IAM identity * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifIam(value: string | string[], operator?: Operator | string): this; /** * Filters access by data streams associated with or not associated with asset properties * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifIsAssociatedWithAssetProperty(value: string | string[], operator?: Operator | string): this; /** * Filters access by the ID of a portal * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifPortal(value: string | string[], operator?: Operator | string): this; /** * Filters access by the ID of a project * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifProject(value: string | string[], operator?: Operator | string): this; /** * Filters access by the property alias * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifPropertyAlias(value: string | string[], operator?: Operator | string): this; /** * Filters access by the ID of an asset property * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifPropertyId(value: string | string[], operator?: Operator | string): this; /** * Filters access by the ID of an AWS Single Sign-On user * * https://docs.aws.amazon.com/iot-sitewise/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifUser(value: string | string[], operator?: Operator | string): this; /** * Statement provider for service [iotsitewise](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotsitewise.html). * */ constructor(props?: iam.PolicyStatementProps); }