UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,470 lines 209 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Dms = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [dms](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdatabasemigrationservice.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Dms extends shared_1.PolicyStatement { /** * Grants permission to add metadata tags to DMS resources, including replication instances, endpoints, security groups, and migration tasks * * Access Level: Tagging * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * https://docs.aws.amazon.com/dms/latest/APIReference/API_AddTagsToResource.html */ toAddTagsToResource() { return this.to('AddTagsToResource'); } /** * Grants permission to apply a pending maintenance action to a resource (for example, to a replication instance) * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ApplyPendingMaintenanceAction.html */ toApplyPendingMaintenanceAction() { return this.to('ApplyPendingMaintenanceAction'); } /** * Grants permission to associate a extension pack * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartExtensionPackAssociation.html */ toAssociateExtensionPack() { return this.to('AssociateExtensionPack'); } /** * Grants permission to start the analysis of up to 20 source databases to recommend target engines for each source database * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_BatchStartRecommendations.html */ toBatchStartRecommendations() { return this.to('BatchStartRecommendations'); } /** * Grants permission to cancel a single metadata model conversion operation that was started with StartMetadataModelConversion * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CancelMetadataModelConversion.html */ toCancelMetadataModelConversion() { return this.to('CancelMetadataModelConversion'); } /** * Grants permission to cancel a single metadata model creation operation that was started with StartMetadataModelCreation * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CancelMetadataModelCreation.html */ toCancelMetadataModelCreation() { return this.to('CancelMetadataModelCreation'); } /** * Grants permission to cancel a single premigration assessment run * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CancelReplicationTaskAssessmentRun.html */ toCancelReplicationTaskAssessmentRun() { return this.to('CancelReplicationTaskAssessmentRun'); } /** * Grants permission to create a database migration using the provided settings * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toCreateDataMigration() { return this.to('CreateDataMigration'); } /** * Grants permission to create an data provider using the provided settings * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateDataProvider.html */ toCreateDataProvider() { return this.to('CreateDataProvider'); } /** * Grants permission to create an endpoint using the provided settings * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateEndpoint.html */ toCreateEndpoint() { return this.to('CreateEndpoint'); } /** * Grants permission to create an AWS DMS event notification subscription * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateEventSubscription.html */ toCreateEventSubscription() { return this.to('CreateEventSubscription'); } /** * Grants permission to create a Fleet Advisor collector using the specified parameters * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateFleetAdvisorCollector.html */ toCreateFleetAdvisorCollector() { return this.to('CreateFleetAdvisorCollector'); } /** * Grants permission to create an instance profile using the provided settings * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateInstanceProfile.html */ toCreateInstanceProfile() { return this.to('CreateInstanceProfile'); } /** * Grants permission to create an migration project using the provided settings * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateMigrationProject.html */ toCreateMigrationProject() { return this.to('CreateMigrationProject'); } /** * Grants permission to DMS to create resources for zero-ETL integrations with self managed databases * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toCreateOutboundIntegration() { return this.to('CreateOutboundIntegration'); } /** * Grants permission to create a replication config using the provided settings * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toCreateReplicationConfig() { return this.to('CreateReplicationConfig'); } /** * Grants permission to create a replication instance using the specified parameters * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateReplicationInstance.html */ toCreateReplicationInstance() { return this.to('CreateReplicationInstance'); } /** * Grants permission to create a replication subnet group given a list of the subnet IDs in a VPC * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateReplicationSubnetGroup.html */ toCreateReplicationSubnetGroup() { return this.to('CreateReplicationSubnetGroup'); } /** * Grants permission to create a replication task using the specified parameters * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * https://docs.aws.amazon.com/dms/latest/APIReference/API_CreateReplicationTask.html */ toCreateReplicationTask() { return this.to('CreateReplicationTask'); } /** * Grants permission to delete the specified certificate * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteCertificate.html */ toDeleteCertificate() { return this.to('DeleteCertificate'); } /** * Grants permission to delete the specified connection between a replication instance and an endpoint * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteConnection.html */ toDeleteConnection() { return this.to('DeleteConnection'); } /** * Grants permission to delete the specified database migration * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toDeleteDataMigration() { return this.to('DeleteDataMigration'); } /** * Grants permission to delete the specified data provider * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteDataProvider.html */ toDeleteDataProvider() { return this.to('DeleteDataProvider'); } /** * Grants permission to delete the specified endpoint * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteEndpoint.html */ toDeleteEndpoint() { return this.to('DeleteEndpoint'); } /** * Grants permission to delete an AWS DMS event subscription * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteEventSubscription.html */ toDeleteEventSubscription() { return this.to('DeleteEventSubscription'); } /** * Grants permission to delete the specified Fleet Advisor collector * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteFleetAdvisorCollector.html */ toDeleteFleetAdvisorCollector() { return this.to('DeleteFleetAdvisorCollector'); } /** * Grants permission to delete the specified Fleet Advisor databases * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteFleetAdvisorDatabases.html */ toDeleteFleetAdvisorDatabases() { return this.to('DeleteFleetAdvisorDatabases'); } /** * Grants permission to delete the specified instance profile * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteInstanceProfile.html */ toDeleteInstanceProfile() { return this.to('DeleteInstanceProfile'); } /** * Grants permission to delete the specified migration project * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteMigrationProject.html */ toDeleteMigrationProject() { return this.to('DeleteMigrationProject'); } /** * Grants permission to delete the specified replication config * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toDeleteReplicationConfig() { return this.to('DeleteReplicationConfig'); } /** * Grants permission to delete the specified replication instance * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteReplicationInstance.html */ toDeleteReplicationInstance() { return this.to('DeleteReplicationInstance'); } /** * Grants permission to deletes a subnet group * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteReplicationSubnetGroup.html */ toDeleteReplicationSubnetGroup() { return this.to('DeleteReplicationSubnetGroup'); } /** * Grants permission to delete the specified replication task * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteReplicationTask.html */ toDeleteReplicationTask() { return this.to('DeleteReplicationTask'); } /** * Grants permission to delete the record of a single premigration assessment run * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DeleteReplicationTaskAssessmentRun.html */ toDeleteReplicationTaskAssessmentRun() { return this.to('DeleteReplicationTaskAssessmentRun'); } /** * Grants permission to list all of the AWS DMS attributes for a customer account * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeAccountAttributes.html */ toDescribeAccountAttributes() { return this.to('DescribeAccountAttributes'); } /** * Grants permission to list individual assessments that you can specify for a new premigration assessment run * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeApplicableIndividualAssessments.html */ toDescribeApplicableIndividualAssessments() { return this.to('DescribeApplicableIndividualAssessments'); } /** * Grants permission to provide a description of the certificate * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeCertificates.html */ toDescribeCertificates() { return this.to('DescribeCertificates'); } /** * Grants permission to describe the status of the connections that have been made between the replication instance and an endpoint * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeConnections.html */ toDescribeConnections() { return this.to('DescribeConnections'); } /** * Grants permission to return information about DMS Schema Conversion project configuration * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeConversionConfiguration.html */ toDescribeConversionConfiguration() { return this.to('DescribeConversionConfiguration'); } /** * Grants permission to return information about database migrations for your account in the specified region * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toDescribeDataMigrations() { return this.to('DescribeDataMigrations'); } /** * Grants permission to return the possible endpoint settings available when you create an endpoint for a specific database engine * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEndpointSettings.html */ toDescribeEndpointSettings() { return this.to('DescribeEndpointSettings'); } /** * Grants permission to return information about the type of endpoints available * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEndpointTypes.html */ toDescribeEndpointTypes() { return this.to('DescribeEndpointTypes'); } /** * Grants permission to return information about the endpoints for your account in the current region * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEndpoints.html */ toDescribeEndpoints() { return this.to('DescribeEndpoints'); } /** * Grants permission to return information about the available versions for DMS replication instances * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEngineVersions.html */ toDescribeEngineVersions() { return this.to('DescribeEngineVersions'); } /** * Grants permission to list categories for all event source types, or, if specified, for a specified source type * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEventCategories.html */ toDescribeEventCategories() { return this.to('DescribeEventCategories'); } /** * Grants permission to list all the event subscriptions for a customer account * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEventSubscriptions.html */ toDescribeEventSubscriptions() { return this.to('DescribeEventSubscriptions'); } /** * Grants permission to list events for a given source identifier and source type * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeEvents.html */ toDescribeEvents() { return this.to('DescribeEvents'); } /** * Grants permission to return a paginated list of Fleet Advisor collectors in your account based on filter settings * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorCollectors.html */ toDescribeFleetAdvisorCollectors() { return this.to('DescribeFleetAdvisorCollectors'); } /** * Grants permission to return a paginated list of Fleet Advisor databases in your account based on filter settings * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorDatabases.html */ toDescribeFleetAdvisorDatabases() { return this.to('DescribeFleetAdvisorDatabases'); } /** * Grants permission to return a paginated list of descriptions of large-scale assessment (LSA) analyses produced by your Fleet Advisor collectors * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorLsaAnalysis.html */ toDescribeFleetAdvisorLsaAnalysis() { return this.to('DescribeFleetAdvisorLsaAnalysis'); } /** * Grants permission to return a paginated list of descriptions of schemas discovered by your Fleet Advisor collectors based on filter settings * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorSchemaObjectSummary.html */ toDescribeFleetAdvisorSchemaObjectSummary() { return this.to('DescribeFleetAdvisorSchemaObjectSummary'); } /** * Grants permission to return a paginated list of schemas discovered by your Fleet Advisor collectors based on filter settings * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorSchemas.html */ toDescribeFleetAdvisorSchemas() { return this.to('DescribeFleetAdvisorSchemas'); } /** * Grants permission to get detailed information about the specified metadata model, including its definition and corresponding converted objects in the target database if applicable * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModel.html */ toDescribeMetadataModel() { return this.to('DescribeMetadataModel'); } /** * Grants permission to get a list of child metadata models for the specified metadata model in the database hierarchy * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModelChildren.html */ toDescribeMetadataModelChildren() { return this.to('DescribeMetadataModelChildren'); } /** * Grants permission to return a paginated list of metadata model creation requests for a migration project * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModelCreations.html */ toDescribeMetadataModelCreations() { return this.to('DescribeMetadataModelCreations'); } /** * Grants permission to return information about start metadata model import operations for a migration project * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModelImports.html */ toDescribeMetadataModelImports() { return this.to('DescribeMetadataModelImports'); } /** * Grants permission to return information about the replication instance types that can be created in the specified region * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeOrderableReplicationInstances.html */ toDescribeOrderableReplicationInstances() { return this.to('DescribeOrderableReplicationInstances'); } /** * Grants permission to return information about pending maintenance actions * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribePendingMaintenanceActions.html */ toDescribePendingMaintenanceActions() { return this.to('DescribePendingMaintenanceActions'); } /** * Grants permission to return a paginated list of descriptions of limitations for recommendations of target AWS engines * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorLsaAnalysis.html */ toDescribeRecommendationLimitations() { return this.to('DescribeRecommendationLimitations'); } /** * Grants permission to return a paginated list of descriptions of target engine recommendations for your source databases * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeRecommendations.html */ toDescribeRecommendations() { return this.to('DescribeRecommendations'); } /** * Grants permission to returns the status of the RefreshSchemas operation * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeRefreshSchemasStatus.html */ toDescribeRefreshSchemasStatus() { return this.to('DescribeRefreshSchemasStatus'); } /** * Grants permission to describe replication configs * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toDescribeReplicationConfigs() { return this.to('DescribeReplicationConfigs'); } /** * Grants permission to return information about the task logs for the specified task * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationInstanceTaskLogs.html */ toDescribeReplicationInstanceTaskLogs() { return this.to('DescribeReplicationInstanceTaskLogs'); } /** * Grants permission to return information about replication instances for your account in the current region * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationInstances.html */ toDescribeReplicationInstances() { return this.to('DescribeReplicationInstances'); } /** * Grants permission to return information about the replication subnet groups * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationSubnetGroups.html */ toDescribeReplicationSubnetGroups() { return this.to('DescribeReplicationSubnetGroups'); } /** * Grants permission to describe replication table statistics * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toDescribeReplicationTableStatistics() { return this.to('DescribeReplicationTableStatistics'); } /** * Grants permission to return the latest task assessment results from Amazon S3 * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationTaskAssessmentResults.html */ toDescribeReplicationTaskAssessmentResults() { return this.to('DescribeReplicationTaskAssessmentResults'); } /** * Grants permission to return a paginated list of premigration assessment runs based on filter settings * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationTaskAssessmentRuns.html */ toDescribeReplicationTaskAssessmentRuns() { return this.to('DescribeReplicationTaskAssessmentRuns'); } /** * Grants permission to return a paginated list of individual assessments based on filter settings * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationTaskIndividualAssessments.html */ toDescribeReplicationTaskIndividualAssessments() { return this.to('DescribeReplicationTaskIndividualAssessments'); } /** * Grants permission to return information about replication tasks for your account in the current region * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeReplicationTasks.html */ toDescribeReplicationTasks() { return this.to('DescribeReplicationTasks'); } /** * Grants permission to describe replications * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toDescribeReplications() { return this.to('DescribeReplications'); } /** * Grants permission to return information about the schema for the specified endpoint * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeSchemas.html */ toDescribeSchemas() { return this.to('DescribeSchemas'); } /** * Grants permission to return table statistics on the database migration task, including table name, rows inserted, rows updated, and rows deleted * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeTableStatistics.html */ toDescribeTableStatistics() { return this.to('DescribeTableStatistics'); } /** * Grants permission to export the specified metadata model assessment * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ExportMetadataModelAssessment.html */ toExportMetadataModelAssessment() { return this.to('ExportMetadataModelAssessment'); } /** * Grants permission to convert source selection rules into their target counterparts for schema conversion operations * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_GetTargetSelectionRules.html */ toGetTargetSelectionRules() { return this.to('GetTargetSelectionRules'); } /** * Grants permission to upload the specified certificate * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ImportCertificate.html */ toImportCertificate() { return this.to('ImportCertificate'); } /** * Grants permission to list the AWS DMS attributes for a data providers * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeDataProviders.html */ toListDataProviders() { return this.to('ListDataProviders'); } /** * Grants permission to list the AWS DMS attributes for a extension packs * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeExtensionPackAssociations.html */ toListExtensionPacks() { return this.to('ListExtensionPacks'); } /** * Grants permission to list the AWS DMS attributes for a instance profiles * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeInstanceProfiles.html */ toListInstanceProfiles() { return this.to('ListInstanceProfiles'); } /** * Grants permission to list the AWS DMS attributes for a metadata model assessment action items. Note. Despite this action requires StartMetadataModelImport, the latter does not currently authorize the described Schema Conversion operation * * Access Level: Read * * Dependent actions: * - dms:StartMetadataModelImport * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toListMetadataModelAssessmentActionItems() { return this.to('ListMetadataModelAssessmentActionItems'); } /** * Grants permission to list the AWS DMS attributes for a metadata model assessments * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ListMetadataModelExports.html */ toListMetadataModelAssessments() { return this.to('ListMetadataModelAssessments'); } /** * Grants permission to list the AWS DMS attributes for a metadata model conversions * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeMetadataModelConversions.html */ toListMetadataModelConversions() { return this.to('ListMetadataModelConversions'); } /** * Grants permission to list the AWS DMS attributes for a metadata model exports * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toListMetadataModelExports() { return this.to('ListMetadataModelExports'); } /** * Grants permission to list the AWS DMS attributes for a migration projects. Note. Despite this action requires DescribeMigrationProjects and DescribeConversionConfiguration, both required actions do not currently authorize the described Schema Conversion operation * * Access Level: Read * * Dependent actions: * - dms:DescribeConversionConfiguration * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toListMigrationProjects() { return this.to('ListMigrationProjects'); } /** * Grants permission to list all tags for an AWS DMS resource * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ListTagsForResource.html */ toListTagsForResource() { return this.to('ListTagsForResource'); } /** * Grants permission to modify the specified database migration * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toModifyDataMigration() { return this.to('ModifyDataMigration'); } /** * Grants permission to modify the specified endpoint * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyEndpoint.html */ toModifyEndpoint() { return this.to('ModifyEndpoint'); } /** * Grants permission to modify an existing AWS DMS event notification subscription * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyEventSubscription.html */ toModifyEventSubscription() { return this.to('ModifyEventSubscription'); } /** * Grants permission to modify the name and description of the specified Fleet Advisor collector * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toModifyFleetAdvisorCollector() { return this.to('ModifyFleetAdvisorCollector'); } /** * Grants permission to modify the status of the specified Fleet Advisor collector * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toModifyFleetAdvisorCollectorStatuses() { return this.to('ModifyFleetAdvisorCollectorStatuses'); } /** * Grants permission to DMS to modify resources for zero-ETL integrations with self managed databases * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toModifyOutboundIntegration() { return this.to('ModifyOutboundIntegration'); } /** * Grants permission to modify the specified replication config * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toModifyReplicationConfig() { return this.to('ModifyReplicationConfig'); } /** * Grants permission to modify the replication instance to apply new settings * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyReplicationInstance.html */ toModifyReplicationInstance() { return this.to('ModifyReplicationInstance'); } /** * Grants permission to modify the settings for the specified replication subnet group * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyReplicationSubnetGroup.html */ toModifyReplicationSubnetGroup() { return this.to('ModifyReplicationSubnetGroup'); } /** * Grants permission to modify the specified replication task * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyReplicationTask.html */ toModifyReplicationTask() { return this.to('ModifyReplicationTask'); } /** * Grants permission to move the specified replication task to a different replication instance * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_MoveReplicationTask.html */ toMoveReplicationTask() { return this.to('MoveReplicationTask'); } /** * Grants permission to reboot a replication instance. Rebooting results in a momentary outage, until the replication instance becomes available again * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_RebootReplicationInstance.html */ toRebootReplicationInstance() { return this.to('RebootReplicationInstance'); } /** * Grants permission to populate the schema for the specified endpoint * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_RefreshSchemas.html */ toRefreshSchemas() { return this.to('RefreshSchemas'); } /** * Grants permission to reload the target database table with the source for a replication * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toReloadReplicationTables() { return this.to('ReloadReplicationTables'); } /** * Grants permission to reload the target database table with the source data * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ReloadTables.html */ toReloadTables() { return this.to('ReloadTables'); } /** * Grants permission to remove metadata tags from a DMS resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/dms/latest/APIReference/API_RemoveTagsFromResource.html */ toRemoveTagsFromResource() { return this.to('RemoveTagsFromResource'); } /** * Grants permission to run a large-scale assessment (LSA) analysis on every Fleet Advisor collector in your account * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_RunFleetAdvisorLsaAnalysis.html */ toRunFleetAdvisorLsaAnalysis() { return this.to('RunFleetAdvisorLsaAnalysis'); } /** * Grants permission to start the database migration * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toStartDataMigration() { return this.to('StartDataMigration'); } /** * Grants permission to start a new assessment of metadata model * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelAssessment.html */ toStartMetadataModelAssessment() { return this.to('StartMetadataModelAssessment'); } /** * Grants permission to start a new conversion of metadata model * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelConversion.html */ toStartMetadataModelConversion() { return this.to('StartMetadataModelConversion'); } /** * Grants permission to create source metadata model of the given type with the specified properties for schema conversion operations * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelCreation.html */ toStartMetadataModelCreation() { return this.to('StartMetadataModelCreation'); } /** * Grants permission to start a new export of metadata model as script * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelExportAsScript.html */ toStartMetadataModelExportAsScripts() { return this.to('StartMetadataModelExportAsScripts'); } /** * Grants permission to start a new export of metadata model to target * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelExportToTarget.html */ toStartMetadataModelExportToTarget() { return this.to('StartMetadataModelExportToTarget'); } /** * Grants permission to start a new import of metadata model * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartMetadataModelImport.html */ toStartMetadataModelImport() { return this.to('StartMetadataModelImport'); } /** * Grants permission to start the analysis of your source database to provide recommendations of target engines * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartRecommendations.html */ toStartRecommendations() { return this.to('StartRecommendations'); } /** * Grants permission to start a replication * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toStartReplication() { return this.to('StartReplication'); } /** * Grants permission to start the replication task * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartReplicationTask.html */ toStartReplicationTask() { return this.to('StartReplicationTask'); } /** * Grants permission to start the replication task assessment for unsupported data types in the source database * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartReplicationTaskAssessment.html */ toStartReplicationTaskAssessment() { return this.to('StartReplicationTaskAssessment'); } /** * Grants permission to start a new premigration assessment run for one or more individual assessments of a migration task * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StartReplicationTaskAssessmentRun.html */ toStartReplicationTaskAssessmentRun() { return this.to('StartReplicationTaskAssessmentRun'); } /** * Grants permission to stop the database migration * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toStopDataMigration() { return this.to('StopDataMigration'); } /** * Grants permission to stop a replication * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toStopReplication() { return this.to('StopReplication'); } /** * Grants permission to stop the replication task * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_StopReplicationTask.html */ toStopReplicationTask() { return this.to('StopReplicationTask'); } /** * Grants permission to test the connection between the replication instance and the endpoint * * Access Level: Read * * https://docs.aws.amazon.com/dms/latest/APIReference/API_TestConnection.html */ toTestConnection() { return this.to('TestConnection'); } /** * Grants permission to update a conversion configuration * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyConversionConfiguration.html */ toUpdateConversionConfiguration() { return this.to('UpdateConversionConfiguration'); } /** * Grants permission to update the specified data provider * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyDataProvider.html */ toUpdateDataProvider() { return this.to('UpdateDataProvider'); } /** * Grants permission to update the specified instance profile * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyInstanceProfile.html */ toUpdateInstanceProfile() { return this.to('UpdateInstanceProfile'); } /** * Grants permission to update the specified migration project * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_ModifyMigrationProject.html */ toUpdateMigrationProject() { return this.to('UpdateMigrationProject'); } /** * Grants permission to migrate DMS subcriptions to Eventbridge * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/API_UpdateSubscriptionsToEventBridge.html */ toUpdateSubscriptionsToEventBridge() { return this.to('UpdateSubscriptionsToEventBridge'); } /** * Grants permission to upload files to your Amazon S3 bucket * * Access Level: Write * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html */ toUploadFileMetadataList() { return this.to('UploadFileMetadataList'); } /** * Adds a resource of type Certificate to the statement * * https://docs.aws.amazon.com/dms/latest/APIReference/API_Certificate.html * * @param resourceName - Identifier for the resourceName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() * - .ifCertTag() */ onCertificate(resourceName, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:dms:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:cert:${resourceName}`); } /** * Adds a resource of type DataProvider to the statement * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html * * @param resourceName - Identifier for the resourceName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() * - .ifDataProviderTag() */ onDataProvider(resourceName, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:dms:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:data-provider:${resourceName}`); } /** * Adds a resource of type DataMigration to the statement * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html * * @param resourceName - Identifier for the resourceName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() * - .ifDataMigrationTag() */ onDataMigration(resourceName, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:dms:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:data-migration:${resourceName}`); } /** * Adds a resource of type Endpoint to the statement * * https://docs.aws.amazon.com/dms/latest/APIReference/API_Endpoint.html * * @param resourceName - Identifier for the resourceName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() * - .ifEndpointTag() */ onEndpoint(resourceName, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:dms:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:endpoint:${resourceName}`); } /** * Adds a resource of type EventSubscription to the statement * * https://docs.aws.amazon.com/dms/latest/APIReference/API_EventSubscription.html * * @param resourceName - Identifier for the resourceName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() * - .ifEsTag() */ onEventSubscription(resourceName, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:dms:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:es:${resourceName}`); } /** * Adds a resource of type InstanceProfile to the statement * * https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html * * @param resourceName - Identifier for the resourceName. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the defaul