cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
640 lines (639 loc) • 28.1 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
import { aws_iam as iam } from "aws-cdk-lib";
/**
* Statement provider for service [observabilityadmin](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatchobservabilityadminservice.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Observabilityadmin extends PolicyStatement {
servicePrefix: string;
/**
* Grants permission to create a new organization centralization rule with the specified name for the organization
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsTagKeys()
* - .ifAwsRequestTag()
* - .ifCentralizationSourceRegions()
* - .ifCentralizationDestinationRegion()
* - .ifCentralizationBackupRegion()
* - .ifCentralizationRuleName()
* - .ifCentralizationSourceId()
* - .ifCentralizationDestinationAccount()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CreateCentralizationRuleForOrganization.html
*/
toCreateCentralizationRuleForOrganization(): this;
/**
* Grants permission to create a new s3 table integration with the specified configuration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsTagKeys()
* - .ifAwsRequestTag()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CreateS3TableIntegration.html
*/
toCreateS3TableIntegration(): this;
/**
* Grants permission to create a new telemetry pipeline with the specified name and configuration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsTagKeys()
* - .ifAwsRequestTag()
* - .ifSourceType()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CreateTelemetryPipeline.html
*/
toCreateTelemetryPipeline(): this;
/**
* Grants permission to create a new telemetry rule with the specified name for the account
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsTagKeys()
* - .ifAwsRequestTag()
* - .ifTargetRegions()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CreateTelemetryRule.html
*/
toCreateTelemetryRule(): this;
/**
* Grants permission to create a new organization telemetry rule with the specified name for the organization
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsTagKeys()
* - .ifAwsRequestTag()
* - .ifTargetRegions()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CreateTelemetryRuleForOrganization.html
*/
toCreateTelemetryRuleForOrganization(): this;
/**
* Grants permission to delete an organization centralization rule with the specified name for the organization
*
* Access Level: Write
*
* Possible conditions:
* - .ifCentralizationRuleName()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_DeleteCentralizationRuleForOrganization.html
*/
toDeleteCentralizationRuleForOrganization(): this;
/**
* Grants permission to delete the s3 table integration with the specified arn
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_DeleteS3TableIntegration.html
*/
toDeleteS3TableIntegration(): this;
/**
* Grants permission to delete the telemetry pipeline with the specified arn
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_DeleteTelemetryPipeline.html
*/
toDeleteTelemetryPipeline(): this;
/**
* Grants permission to delete a telemetry rule with the specified name for the account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_DeleteTelemetryRule.html
*/
toDeleteTelemetryRule(): this;
/**
* Grants permission to delete an organization telemetry rule with the specified name for the organization
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_DeleteTelemetryRuleForOrganization.html
*/
toDeleteTelemetryRuleForOrganization(): this;
/**
* Grants permission to retrieve the specified organization centralization rule for the organization
*
* Access Level: Read
*
* Possible conditions:
* - .ifCentralizationRuleName()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetCentralizationRuleForOrganization.html
*/
toGetCentralizationRuleForOrganization(): this;
/**
* Grants permission to retrieve the specified s3 table integration for the account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetS3TableIntegration.html
*/
toGetS3TableIntegration(): this;
/**
* Grants permission to retrieve the status of the Resource tags for telemetry feature for the account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetTelemetryEnrichmentStatus.html
*/
toGetTelemetryEnrichmentStatus(): this;
/**
* Grants permission to retrieve the Telemetry Config feature status for the account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetTelemetryEvaluationStatus.html
*/
toGetTelemetryEvaluationStatus(): this;
/**
* Grants permission to retrieve the Telemetry Config feature status for the organization
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetTelemetryEvaluationStatusForOrganization.html
*/
toGetTelemetryEvaluationStatusForOrganization(): this;
/**
* Grants permission to Get the telemetry pipeline with the specified name or arn
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetTelemetryPipeline.html
*/
toGetTelemetryPipeline(): this;
/**
* Grants permission to retrieve the specified telemetry rule for the account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetTelemetryRule.html
*/
toGetTelemetryRule(): this;
/**
* Grants permission to retrieve the specified organization telemetry rule for the organization
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_GetTelemetryRuleForOrganization.html
*/
toGetTelemetryRuleForOrganization(): this;
/**
* Grants permission to list the centralization rules for the organization
*
* Access Level: List
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListCentralizationRulesForOrganization.html
*/
toListCentralizationRulesForOrganization(): this;
/**
* Grants permission to retrieve telemetry configurations for resources associated with the account
*
* Access Level: Read
*
* Possible conditions:
* - .ifTargetRegions()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListResourceTelemetry.html
*/
toListResourceTelemetry(): this;
/**
* Grants permission to retrieve telemetry configurations for resources associated with accounts in the organization
*
* Access Level: Read
*
* Possible conditions:
* - .ifTargetRegions()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListResourceTelemetryForOrganization.html
*/
toListResourceTelemetryForOrganization(): this;
/**
* Grants permission to list s3 table integrations for the account
*
* Access Level: List
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListS3TableIntegrations.html
*/
toListS3TableIntegrations(): this;
/**
* Grants permission to list the tags for the specified resource
*
* Access Level: List
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListTagsForResource.html
*/
toListTagsForResource(): this;
/**
* Grants permission to List telemetry pipelines for the account
*
* Access Level: List
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListTelemetryPipelines.html
*/
toListTelemetryPipelines(): this;
/**
* Grants permission to list the telemetry rules for the account
*
* Access Level: List
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListTelemetryRules.html
*/
toListTelemetryRules(): this;
/**
* Grants permission to list the telemetry rules for the organization
*
* Access Level: List
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ListTelemetryRulesForOrganization.html
*/
toListTelemetryRulesForOrganization(): this;
/**
* Grants permission to enable the Resource tags for telemetry feature for the account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StartTelemetryEnrichment.html
*/
toStartTelemetryEnrichment(): this;
/**
* Grants permission to start the Telemetry Config feature for the account
*
* Access Level: Write
*
* Possible conditions:
* - .ifTargetRegions()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StartTelemetryEvaluation.html
*/
toStartTelemetryEvaluation(): this;
/**
* Grants permission to start the Telemetry Config feature for the organization
*
* Access Level: Write
*
* Possible conditions:
* - .ifTargetRegions()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StartTelemetryEvaluationForOrganization.html
*/
toStartTelemetryEvaluationForOrganization(): this;
/**
* Grants permission to disable the Resource tags for telemetry feature for the account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StopTelemetryEnrichment.html
*/
toStopTelemetryEnrichment(): this;
/**
* Grants permission to stop the Telemetry Config feature for the account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StopTelemetryEvaluation.html
*/
toStopTelemetryEvaluation(): this;
/**
* Grants permission to stop the Telemetry Config feature for the organization
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_StopTelemetryEvaluationForOrganization.html
*/
toStopTelemetryEvaluationForOrganization(): this;
/**
* Grants permission to add or update the specified tags for the specified resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
* - .ifAwsRequestTag()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_TagResource.html
*/
toTagResource(): this;
/**
* Grants permission to Test a telemetry pipeline configuration with sample data
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_TestTelemetryPipeline.html
*/
toTestTelemetryPipeline(): this;
/**
* Grants permission to remove the specified tags from the specified resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_UntagResource.html
*/
toUntagResource(): this;
/**
* Grants permission to update the specified centralization rule for the organization
*
* Access Level: Write
*
* Possible conditions:
* - .ifCentralizationSourceRegions()
* - .ifCentralizationDestinationRegion()
* - .ifCentralizationBackupRegion()
* - .ifCentralizationRuleName()
* - .ifCentralizationSourceId()
* - .ifCentralizationDestinationAccount()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_UpdateCentralizationRuleForOrganization.html
*/
toUpdateCentralizationRuleForOrganization(): this;
/**
* Grants permission to Update the telemetry pipeline with the specified arn
*
* Access Level: Write
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_UpdateTelemetryPipeline.html
*/
toUpdateTelemetryPipeline(): this;
/**
* Grants permission to update the specified telemetry rule for the account
*
* Access Level: Write
*
* Possible conditions:
* - .ifTargetRegions()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_UpdateTelemetryRule.html
*/
toUpdateTelemetryRule(): this;
/**
* Grants permission to update the specified telemetry rule for the organization
*
* Access Level: Write
*
* Possible conditions:
* - .ifTargetRegions()
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_UpdateTelemetryRuleForOrganization.html
*/
toUpdateTelemetryRuleForOrganization(): this;
/**
* Grants permission to Validate a telemetry pipeline configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_ValidateTelemetryPipelineConfiguration.html
*/
toValidateTelemetryPipelineConfiguration(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type telemetry-rule to the statement
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_TelemetryRule.html
*
* @param telemetryRuleName - Identifier for the telemetryRuleName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onTelemetryRule(telemetryRuleName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type organization-telemetry-rule to the statement
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_TelemetryRule.html
*
* @param telemetryRuleName - Identifier for the telemetryRuleName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onOrganizationTelemetryRule(telemetryRuleName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type organization-centralization-rule to the statement
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CentralizationRule.html
*
* @param centralizationRuleName - Identifier for the centralizationRuleName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onOrganizationCentralizationRule(centralizationRuleName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type telemetry-pipeline to the statement
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_TelemetryPipeline.html
*
* @param telemetryPipelineIdentifier - Identifier for the telemetryPipelineIdentifier.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onTelemetryPipeline(telemetryPipelineIdentifier: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type s3tableintegration to the statement
*
* https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_S3TableIntegration.html
*
* @param s3TableIntegrationIdentifier - Identifier for the s3TableIntegrationIdentifier.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onS3tableintegration(s3TableIntegrationIdentifier: string, account?: string, region?: string, partition?: string): this;
/**
* Filters access by the tags that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateCentralizationRuleForOrganization()
* - .toCreateS3TableIntegration()
* - .toCreateTelemetryPipeline()
* - .toCreateTelemetryRule()
* - .toCreateTelemetryRuleForOrganization()
* - .toTagResource()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the tags associated with the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to resource types:
* - telemetry-rule
* - organization-telemetry-rule
* - organization-centralization-rule
* - telemetry-pipeline
* - s3tableintegration
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the tag keys that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toCreateCentralizationRuleForOrganization()
* - .toCreateS3TableIntegration()
* - .toCreateTelemetryPipeline()
* - .toCreateTelemetryRule()
* - .toCreateTelemetryRuleForOrganization()
* - .toTagResource()
* - .toUntagResource()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the backup region that is passed in the request
*
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/reference_policies_condition-keys.htmlcondition-keys-observabilityadmin.html#condition-keys-centralizationbackupregion
*
* Applies to actions:
* - .toCreateCentralizationRuleForOrganization()
* - .toUpdateCentralizationRuleForOrganization()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifCentralizationBackupRegion(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the destination account that is passed in the request
*
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/reference_policies_condition-keys.htmlcondition-keys-observabilityadmin.html#condition-keys-centralizationdestinationaccount
*
* Applies to actions:
* - .toCreateCentralizationRuleForOrganization()
* - .toUpdateCentralizationRuleForOrganization()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifCentralizationDestinationAccount(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the destination region that is passed in the request
*
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/reference_policies_condition-keys.htmlcondition-keys-observabilityadmin.html#condition-keys-centralizationdestinationregion
*
* Applies to actions:
* - .toCreateCentralizationRuleForOrganization()
* - .toUpdateCentralizationRuleForOrganization()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifCentralizationDestinationRegion(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the name of the centralization rule that is passed in the request
*
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/reference_policies_condition-keys.htmlcondition-keys-observabilityadmin.html#condition-keys-centralizationrulename
*
* Applies to actions:
* - .toCreateCentralizationRuleForOrganization()
* - .toDeleteCentralizationRuleForOrganization()
* - .toGetCentralizationRuleForOrganization()
* - .toUpdateCentralizationRuleForOrganization()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifCentralizationRuleName(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the source account, organizational unit, or organization IDs that is passed in the request
*
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/reference_policies_condition-keys.htmlcondition-keys-observabilityadmin.html#condition-keys-centralizationsourceid
*
* Applies to actions:
* - .toCreateCentralizationRuleForOrganization()
* - .toUpdateCentralizationRuleForOrganization()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifCentralizationSourceId(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the source regions that are passed in the request
*
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/reference_policies_condition-keys.htmlcondition-keys-observabilityadmin.html#condition-keys-centralizationsourceregions
*
* Applies to actions:
* - .toCreateCentralizationRuleForOrganization()
* - .toUpdateCentralizationRuleForOrganization()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifCentralizationSourceRegions(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the source type that is passed in the request
*
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/reference_policies_condition-keys.htmlcondition-keys-observabilityadmin.html#condition-keys-sourcetype
*
* Applies to actions:
* - .toCreateTelemetryPipeline()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifSourceType(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the regions that are targetted by the request
*
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/reference_policies_condition-keys.htmlcondition-keys-observabilityadmin.html#condition-keys-targetregions
*
* Applies to actions:
* - .toCreateTelemetryRule()
* - .toCreateTelemetryRuleForOrganization()
* - .toListResourceTelemetry()
* - .toListResourceTelemetryForOrganization()
* - .toStartTelemetryEvaluation()
* - .toStartTelemetryEvaluationForOrganization()
* - .toUpdateTelemetryRule()
* - .toUpdateTelemetryRuleForOrganization()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifTargetRegions(value: string | string[], operator?: Operator | string): this;
/**
* Statement provider for service [observabilityadmin](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatchobservabilityadminservice.html).
*
*/
constructor(props?: iam.PolicyStatementProps);
}