cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
1,000 lines (999 loc) • 38.3 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
import { aws_iam as iam } from "aws-cdk-lib";
/**
* Statement provider for service [mediaconnect](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awselementalmediaconnect.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Mediaconnect extends PolicyStatement {
servicePrefix: string;
/**
* Grants permission to add outputs to an existing bridge
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_AddBridgeOutputs.html
*/
toAddBridgeOutputs(): this;
/**
* Grants permission to add sources to an existing bridge
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_AddBridgeSources.html
*/
toAddBridgeSources(): this;
/**
* Grants permission to add media streams to any flow
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_AddFlowMediaStreams.html
*/
toAddFlowMediaStreams(): this;
/**
* Grants permission to add outputs to any flow
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_AddFlowOutputs.html
*/
toAddFlowOutputs(): this;
/**
* Grants permission to add sources to any flow
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_AddFlowSources.html
*/
toAddFlowSources(): this;
/**
* Grants permission to add VPC interfaces to any flow
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_AddFlowVpcInterfaces.html
*/
toAddFlowVpcInterfaces(): this;
/**
* Grants permission to associate a router network interface
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_AssociateRouterNetworkInterface.html
*/
toAssociateRouterNetworkInterface(): this;
/**
* Grants permission to create bridges
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_CreateBridge.html
*/
toCreateBridge(): this;
/**
* Grants permission to create flows
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_CreateFlow.html
*/
toCreateFlow(): this;
/**
* Grants permission to create gateways
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_CreateGateway.html
*/
toCreateGateway(): this;
/**
* Grants permission to create a new router input in AWS Elemental MediaConnect
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - ec2:CreateNetworkInterface
* - iam:PassRole
* - mediaconnect:AssociateRouterNetworkInterface
* - mediaconnect:CreateRouterInput
* - mediaconnect:TagResource
* - mediaconnect:UpdateFlowOutput
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_CreateRouterInput.html
*/
toCreateRouterInput(): this;
/**
* Grants permission to create a new router network interface in AWS Elemental MediaConnect
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iam:CreateServiceLinkedRole
* - mediaconnect:CreateRouterNetworkInterface
* - mediaconnect:TagResource
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_CreateRouterNetworkInterface.html
*/
toCreateRouterNetworkInterface(): this;
/**
* Grants permission to create a new router output in AWS Elemental MediaConnect
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - ec2:CreateNetworkInterface
* - iam:PassRole
* - mediaconnect:AssociateRouterNetworkInterface
* - mediaconnect:CreateRouterOutput
* - mediaconnect:TagResource
* - mediaconnect:UpdateFlowSource
* - medialive:UpdateInput
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_CreateRouterOutput.html
*/
toCreateRouterOutput(): this;
/**
* Grants permission to delete bridges
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DeleteBridge.html
*/
toDeleteBridge(): this;
/**
* Grants permission to delete flows
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DeleteFlow.html
*/
toDeleteFlow(): this;
/**
* Grants permission to delete gateways
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DeleteGateway.html
*/
toDeleteGateway(): this;
/**
* Grants permission to delete a router input in AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DeleteRouterInput.html
*/
toDeleteRouterInput(): this;
/**
* Grants permission to delete a router network interface from AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DeleteRouterNetworkInterface.html
*/
toDeleteRouterNetworkInterface(): this;
/**
* Grants permission to delete a router output from AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DeleteRouterOutput.html
*/
toDeleteRouterOutput(): this;
/**
* Grants permission to deregister gateway instance
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DeregisterGatewayInstance.html
*/
toDeregisterGatewayInstance(): this;
/**
* Grants permission to display the details of a bridge
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DescribeBridge.html
*/
toDescribeBridge(): this;
/**
* Grants permission to display the details of a flow including the flow ARN, name, and Availability Zone, as well as details about the source, outputs, and entitlements
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DescribeFlow.html
*/
toDescribeFlow(): this;
/**
* Grants permission to view information about the flow's source transport stream and programs
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DescribeFlowSourceMetadata.html
*/
toDescribeFlowSourceMetadata(): this;
/**
* Grants permission to view flow's source thumbnail
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DescribeFlowSourceThumbnail.html
*/
toDescribeFlowSourceThumbnail(): this;
/**
* Grants permission to display the details of a gateway including the gateway ARN, name, and CIDR blocks, as well as details about the networks
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DescribeGateway.html
*/
toDescribeGateway(): this;
/**
* Grants permission to display the details of a gateway instance
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DescribeGatewayInstance.html
*/
toDescribeGatewayInstance(): this;
/**
* Grants permission to display the details of an offering
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DescribeOffering.html
*/
toDescribeOffering(): this;
/**
* Grants permission to display the details of a reservation
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DescribeReservation.html
*/
toDescribeReservation(): this;
/**
* Grants permission to discover gateway poll endpoint
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_DiscoverGatewayPollEndpoint.html
*/
toDiscoverGatewayPollEndpoint(): this;
/**
* Grants permission to retrieve information about a specific router input in AWS Elemental MediaConnect
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_GetRouterInput.html
*/
toGetRouterInput(): this;
/**
* Grants permission to retrieve metadata about a router input source in AWS Elemental MediaConnect
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_GetRouterInputSourceMetadata.html
*/
toGetRouterInputSourceMetadata(): this;
/**
* Grants permission to retrieve the thumbnail for a router input in AWS Elemental MediaConnect
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_GetRouterInputThumbnail.html
*/
toGetRouterInputThumbnail(): this;
/**
* Grants permission to retrieve information about a specific router network interface in AWS Elemental MediaConnect
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_GetRouterNetworkInterface.html
*/
toGetRouterNetworkInterface(): this;
/**
* Grants permission to retrieve information about a specific router output in AWS Elemental MediaConnect
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_GetRouterOutput.html
*/
toGetRouterOutput(): this;
/**
* Grants permission to grant entitlements on any flow
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_GrantFlowEntitlements.html
*/
toGrantFlowEntitlements(): this;
/**
* Grants permission to display a list of bridges that are associated with this account and an optionally specified Arn
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListBridges.html
*/
toListBridges(): this;
/**
* Grants permission to display a list of all entitlements that have been granted to the account
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListEntitlements.html
*/
toListEntitlements(): this;
/**
* Grants permission to display a list of flows that are associated with this account
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListFlows.html
*/
toListFlows(): this;
/**
* Grants permission to display a list of instances that are associated with this gateway
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListGatewayInstances.html
*/
toListGatewayInstances(): this;
/**
* Grants permission to display a list of gateways that are associated with this account
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListGateways.html
*/
toListGateways(): this;
/**
* Grants permission to display a list of all offerings that are available to the account in the current AWS Region
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListOfferings.html
*/
toListOfferings(): this;
/**
* Grants permission to display a list of all reservations that have been purchased by the account in the current AWS Region
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListReservations.html
*/
toListReservations(): this;
/**
* Grants permission to retrieve a list of router inputs in AWS Elemental MediaConnect
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListRouterInputs.html
*/
toListRouterInputs(): this;
/**
* Grants permission to retrieve a list of router network interfaces in AWS Elemental MediaConnect
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListRouterNetworkInterfaces.html
*/
toListRouterNetworkInterfaces(): this;
/**
* Grants permission to retrieve a list of router outputs in AWS Elemental MediaConnect
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListRouterOutputs.html
*/
toListRouterOutputs(): this;
/**
* Grants permission to display a list of all tags associated with a resource
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_ListTagsForResource.html
*/
toListTagsForResource(): this;
/**
* Grants permission to poll gateway
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_PollGateway.html
*/
toPollGateway(): this;
/**
* Grants permission to purchase an offering
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_PurchaseOffering.html
*/
toPurchaseOffering(): this;
/**
* Grants permission to remove an output of an existing bridge
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RemoveBridgeOutput.html
*/
toRemoveBridgeOutput(): this;
/**
* Grants permission to remove a source of an existing bridge
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RemoveBridgeSource.html
*/
toRemoveBridgeSource(): this;
/**
* Grants permission to remove media streams from any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RemoveFlowMediaStream.html
*/
toRemoveFlowMediaStream(): this;
/**
* Grants permission to remove outputs from any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RemoveFlowOutput.html
*/
toRemoveFlowOutput(): this;
/**
* Grants permission to remove sources from any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RemoveFlowSource.html
*/
toRemoveFlowSource(): this;
/**
* Grants permission to remove VPC interfaces from any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RemoveFlowVpcInterface.html
*/
toRemoveFlowVpcInterface(): this;
/**
* Grants permission to restart a router input in AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RestartRouterInput.html
*/
toRestartRouterInput(): this;
/**
* Grants permission to restart a router output in AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RestartRouterOutput.html
*/
toRestartRouterOutput(): this;
/**
* Grants permission to revoke entitlements on any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_RevokeFlowEntitlement.html
*/
toRevokeFlowEntitlement(): this;
/**
* Grants permission to start flows
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_StartFlow.html
*/
toStartFlow(): this;
/**
* Grants permission to start a router input in AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_StartRouterInput.html
*/
toStartRouterInput(): this;
/**
* Grants permission to start a router output in AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_StartRouterOutput.html
*/
toStartRouterOutput(): this;
/**
* Grants permission to stop flows
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_StopFlow.html
*/
toStopFlow(): this;
/**
* Grants permission to stop a router input in AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_StopRouterInput.html
*/
toStopRouterInput(): this;
/**
* Grants permission to stops a router output in AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_StopRouterOutput.html
*/
toStopRouterOutput(): this;
/**
* Grants permission to submit gateway state change
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_SubmitGatewayStateChange.html
*/
toSubmitGatewayStateChange(): this;
/**
* Grants permission to associate tags with resources
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_TagResource.html
*/
toTagResource(): this;
/**
* Grants permission to associate a router input with a router output in AWS Elemental MediaConnect
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_TakeRouterInput.html
*/
toTakeRouterInput(): this;
/**
* Grants permission to remove tags from resources
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UntagResource.html
*/
toUntagResource(): this;
/**
* Grants permission to update bridges
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateBridge.html
*/
toUpdateBridge(): this;
/**
* Grants permission to update an output of an existing bridge
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateBridgeOutput.html
*/
toUpdateBridgeOutput(): this;
/**
* Grants permission to update a source of an existing bridge
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateBridgeSource.html
*/
toUpdateBridgeSource(): this;
/**
* Grants permission to update the state of an existing bridge
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateBridgeState.html
*/
toUpdateBridgeState(): this;
/**
* Grants permission to update flows
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateFlow.html
*/
toUpdateFlow(): this;
/**
* Grants permission to update entitlements on any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateFlowEntitlement.html
*/
toUpdateFlowEntitlement(): this;
/**
* Grants permission to update media streams on any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateFlowMediaStream.html
*/
toUpdateFlowMediaStream(): this;
/**
* Grants permission to update outputs on any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateFlowOutput.html
*/
toUpdateFlowOutput(): this;
/**
* Grants permission to update the source of any flow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateFlowSource.html
*/
toUpdateFlowSource(): this;
/**
* Grants permission to update the configuration of an existing Gateway Instance
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateGatewayInstance.html
*/
toUpdateGatewayInstance(): this;
/**
* Grants permission to update the configuration of a router input in AWS Elemental MediaConnect
*
* Access Level: Write
*
* Dependent actions:
* - ec2:CreateNetworkInterface
* - iam:PassRole
* - mediaconnect:AssociateRouterNetworkInterface
* - mediaconnect:UpdateFlowOutput
* - mediaconnect:UpdateRouterInput
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateRouterInput.html
*/
toUpdateRouterInput(): this;
/**
* Grants permission to updated the configuration of a router network interface in AWS Elemental MediaConnect
*
* Access Level: Write
*
* Dependent actions:
* - iam:CreateServiceLinkedRole
* - mediaconnect:UpdateRouterNetworkInterface
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateRouterNetworkInterface.html
*/
toUpdateRouterNetworkInterface(): this;
/**
* Grants permission to update the configuration of a router output in AWS Elemental MediaConnect
*
* Access Level: Write
*
* Dependent actions:
* - ec2:CreateNetworkInterface
* - iam:PassRole
* - mediaconnect:AssociateRouterNetworkInterface
* - mediaconnect:UpdateFlowSource
* - mediaconnect:UpdateRouterOutput
* - medialive:UpdateInput
*
* https://docs.aws.amazon.com/mediaconnect/latest/api/API_UpdateRouterOutput.html
*/
toUpdateRouterOutput(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type Bridge to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/gateway-components-bridges.html
*
* @param bridgeId - Identifier for the bridgeId.
* @param bridgeName - Identifier for the bridgeName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onBridge(bridgeId: string, bridgeName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Entitlement to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/entitlements.html
*
* @param flowId - Identifier for the flowId.
* @param entitlementName - Identifier for the entitlementName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onEntitlement(flowId: string, entitlementName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Flow to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/flows.html
*
* @param flowId - Identifier for the flowId.
* @param flowName - Identifier for the flowName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onFlow(flowId: string, flowName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Gateway to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/gateway.html
*
* @param gatewayId - Identifier for the gatewayId.
* @param gatewayName - Identifier for the gatewayName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onGateway(gatewayId: string, gatewayName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type GatewayInstance to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/gateway-components-instances.html
*
* @param gatewayId - Identifier for the gatewayId.
* @param gatewayName - Identifier for the gatewayName.
* @param instanceId - Identifier for the instanceId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onGatewayInstance(gatewayId: string, gatewayName: string, instanceId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type MediaStream to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/media-streams.html
*
* @param flowId - Identifier for the flowId.
* @param flowName - Identifier for the flowName.
* @param mediaStreamName - Identifier for the mediaStreamName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onMediaStream(flowId: string, flowName: string, mediaStreamName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Offering to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/offerings.html
*
* @param offeringId - Identifier for the offeringId.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onOffering(offeringId: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Output to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/outputs.html
*
* @param outputId - Identifier for the outputId.
* @param outputName - Identifier for the outputName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onOutput(outputId: string, outputName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Reservation to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/reservations.html
*
* @param reservationId - Identifier for the reservationId.
* @param reservationName - Identifier for the reservationName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onReservation(reservationId: string, reservationName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type RouterInput to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/managing-router-io.html
*
* @param routerInputId - Identifier for the routerInputId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onRouterInput(routerInputId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type RouterNetworkInterface to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/managing-router-network-interfaces.html
*
* @param routerNetworkInterfaceId - Identifier for the routerNetworkInterfaceId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onRouterNetworkInterface(routerNetworkInterfaceId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type RouterOutput to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/managing-router-io.html
*
* @param routerOutputId - Identifier for the routerOutputId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onRouterOutput(routerOutputId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Source to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/sources.html
*
* @param sourceId - Identifier for the sourceId.
* @param sourceName - Identifier for the sourceName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onSource(sourceId: string, sourceName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type VpcInterface to the statement
*
* https://docs.aws.amazon.com/mediaconnect/latest/ug/vpc-interfaces.html
*
* @param flowId - Identifier for the flowId.
* @param flowName - Identifier for the flowName.
* @param vpcInterfaceName - Identifier for the vpcInterfaceName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onVpcInterface(flowId: string, flowName: string, vpcInterfaceName: string, account?: string, region?: string, partition?: string): this;
/**
* Filters access by tags that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to actions:
* - .toAddFlowMediaStreams()
* - .toAddFlowOutputs()
* - .toAddFlowSources()
* - .toAddFlowVpcInterfaces()
* - .toCreateFlow()
* - .toCreateRouterInput()
* - .toCreateRouterNetworkInterface()
* - .toCreateRouterOutput()
* - .toGrantFlowEntitlements()
* - .toTagResource()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by tags associated with the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to resource types:
* - Entitlement
* - Flow
* - MediaStream
* - Output
* - RouterInput
* - RouterNetworkInterface
* - RouterOutput
* - Source
* - VpcInterface
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by tag keys that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toAddFlowMediaStreams()
* - .toAddFlowOutputs()
* - .toAddFlowSources()
* - .toAddFlowVpcInterfaces()
* - .toCreateFlow()
* - .toCreateRouterInput()
* - .toCreateRouterNetworkInterface()
* - .toCreateRouterOutput()
* - .toGrantFlowEntitlements()
* - .toTagResource()
* - .toUntagResource()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value: string | string[], operator?: Operator | string): this;
/**
* Statement provider for service [mediaconnect](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awselementalmediaconnect.html).
*
*/
constructor(props?: iam.PolicyStatementProps);
}