cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
415 lines (414 loc) • 16.7 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement } from '../../shared';
import { aws_iam as iam } from "aws-cdk-lib";
/**
* Statement provider for service [appmesh-preview](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsappmeshpreview.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class AppmeshPreview extends PolicyStatement {
servicePrefix: string;
/**
* Grants permission to create a gateway route that is associated with a virtual gateway
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_CreateGatewayRoute.html
*/
toCreateGatewayRoute(): this;
/**
* Grants permission to create a service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_CreateMesh.html
*/
toCreateMesh(): this;
/**
* Grants permission to create a route that is associated with a virtual router
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_CreateRoute.html
*/
toCreateRoute(): this;
/**
* Grants permission to create a virtual gateway within a service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_CreateVirtualGateway.html
*/
toCreateVirtualGateway(): this;
/**
* Grants permission to create a virtual node within a service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_CreateVirtualNode.html
*/
toCreateVirtualNode(): this;
/**
* Grants permission to create a virtual router within a service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_CreateVirtualRouter.html
*/
toCreateVirtualRouter(): this;
/**
* Grants permission to create a virtual service within a service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_CreateVirtualService.html
*/
toCreateVirtualService(): this;
/**
* Grants permission to delete an existing gateway route
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DeleteGatewayRoute.html
*/
toDeleteGatewayRoute(): this;
/**
* Grants permission to delete an existing service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DeleteMesh.html
*/
toDeleteMesh(): this;
/**
* Grants permission to delete the RAM access control policy for a mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
*/
toDeleteMeshPolicy(): this;
/**
* Grants permission to delete an existing route
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DeleteRoute.html
*/
toDeleteRoute(): this;
/**
* Grants permission to delete an existing virtual gateway
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DeleteVirtualGateway.html
*/
toDeleteVirtualGateway(): this;
/**
* Grants permission to delete an existing virtual node
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DeleteVirtualNode.html
*/
toDeleteVirtualNode(): this;
/**
* Grants permission to delete an existing virtual router
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DeleteVirtualRouter.html
*/
toDeleteVirtualRouter(): this;
/**
* Grants permission to delete an existing virtual service
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DeleteVirtualService.html
*/
toDeleteVirtualService(): this;
/**
* Grants permission to describe an existing gateway route
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DescribeGatewayRoute.html
*/
toDescribeGatewayRoute(): this;
/**
* Grants permission to describe an existing service mesh
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DescribeMesh.html
*/
toDescribeMesh(): this;
/**
* Grants permission to describe an existing route
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DescribeRoute.html
*/
toDescribeRoute(): this;
/**
* Grants permission to describe an existing virtual gateway
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DescribeVirtualGateway.html
*/
toDescribeVirtualGateway(): this;
/**
* Grants permission to describe an existing virtual node
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DescribeVirtualNode.html
*/
toDescribeVirtualNode(): this;
/**
* Grants permission to describe an existing virtual router
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DescribeVirtualRouter.html
*/
toDescribeVirtualRouter(): this;
/**
* Grants permission to describe an existing virtual service
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_DescribeVirtualService.html
*/
toDescribeVirtualService(): this;
/**
* Grants permission to read the RAM access control policy for a mesh
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
*/
toGetMeshPolicy(): this;
/**
* Grants permission to list existing gateway routes in a service mesh
*
* Access Level: List
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_ListGatewayRoutes.html
*/
toListGatewayRoutes(): this;
/**
* Grants permission to list existing service meshes
*
* Access Level: List
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_ListMeshes.html
*/
toListMeshes(): this;
/**
* Grants permission to list existing routes in a service mesh
*
* Access Level: List
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_ListRoutes.html
*/
toListRoutes(): this;
/**
* Grants permission to list existing virtual gateways in a service mesh
*
* Access Level: List
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_ListVirtualGateways.html
*/
toListVirtualGateways(): this;
/**
* Grants permission to list existing virtual nodes
*
* Access Level: List
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_ListVirtualNodes.html
*/
toListVirtualNodes(): this;
/**
* Grants permission to list existing virtual routers in a service mesh
*
* Access Level: List
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_ListVirtualRouters.html
*/
toListVirtualRouters(): this;
/**
* Grants permission to list existing virtual services in a service mesh
*
* Access Level: List
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_ListVirtualServices.html
*/
toListVirtualServices(): this;
/**
* Grants permission to define the RAM access control policy for a mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
*/
toPutMeshPolicy(): this;
/**
* Grants permission to receive streamed resources for an App Mesh endpoint (VirtualNode/VirtualGateway)
*
* Access Level: Read
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/envoy.html
*/
toStreamAggregatedResources(): this;
/**
* Grants permission to update an existing gateway route for a specified service mesh and virtual gateway
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_UpdateGatewayRoute.html
*/
toUpdateGatewayRoute(): this;
/**
* Grants permission to update an existing service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_UpdateMesh.html
*/
toUpdateMesh(): this;
/**
* Grants permission to update an existing route for a specified service mesh and virtual router
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_UpdateRoute.html
*/
toUpdateRoute(): this;
/**
* Grants permission to update an existing virtual gateway in a specified service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_UpdateVirtualGateway.html
*/
toUpdateVirtualGateway(): this;
/**
* Grants permission to update an existing virtual node in a specified service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_UpdateVirtualNode.html
*/
toUpdateVirtualNode(): this;
/**
* Grants permission to update an existing virtual router in a specified service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_UpdateVirtualRouter.html
*/
toUpdateVirtualRouter(): this;
/**
* Grants permission to update an existing virtual service in a specified service mesh
*
* Access Level: Write
*
* https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_UpdateVirtualService.html
*/
toUpdateVirtualService(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type mesh to the statement
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/meshes.html
*
* @param meshName - Identifier for the meshName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onMesh(meshName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type virtualService to the statement
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual_services.html
*
* @param meshName - Identifier for the meshName.
* @param virtualServiceName - Identifier for the virtualServiceName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onVirtualService(meshName: string, virtualServiceName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type virtualNode to the statement
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual_nodes.html
*
* @param meshName - Identifier for the meshName.
* @param virtualNodeName - Identifier for the virtualNodeName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onVirtualNode(meshName: string, virtualNodeName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type virtualRouter to the statement
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual_routers.html
*
* @param meshName - Identifier for the meshName.
* @param virtualRouterName - Identifier for the virtualRouterName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onVirtualRouter(meshName: string, virtualRouterName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type route to the statement
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/routes.html
*
* @param meshName - Identifier for the meshName.
* @param virtualRouterName - Identifier for the virtualRouterName.
* @param routeName - Identifier for the routeName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onRoute(meshName: string, virtualRouterName: string, routeName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type virtualGateway to the statement
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual_gateways.html
*
* @param meshName - Identifier for the meshName.
* @param virtualGatewayName - Identifier for the virtualGatewayName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onVirtualGateway(meshName: string, virtualGatewayName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type gatewayRoute to the statement
*
* https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual_gateways.html
*
* @param meshName - Identifier for the meshName.
* @param virtualGatewayName - Identifier for the virtualGatewayName.
* @param gatewayRouteName - Identifier for the gatewayRouteName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onGatewayRoute(meshName: string, virtualGatewayName: string, gatewayRouteName: string, account?: string, region?: string, partition?: string): this;
/**
* Statement provider for service [appmesh-preview](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsappmeshpreview.html).
*
*/
constructor(props?: iam.PolicyStatementProps);
}