cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
456 lines (455 loc) • 17 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
import { aws_iam as iam } from "aws-cdk-lib";
/**
* Statement provider for service [mediaconvert](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awselementalmediaconvert.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Mediaconvert extends PolicyStatement {
servicePrefix: string;
/**
* Grants permission to associate an AWS Certificate Manager (ACM) Amazon Resource Name (ARN) with AWS Elemental MediaConvert
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/certificates.html
*/
toAssociateCertificate(): this;
/**
* Grants permission to cancel an AWS Elemental MediaConvert job that is waiting in queue
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobs-id.html
*/
toCancelJob(): this;
/**
* Grants permission to create and submit an AWS Elemental MediaConvert job
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifHttpInputsAllowed()
* - .ifHttpsInputsAllowed()
* - .ifS3InputsAllowed()
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobs.html
*/
toCreateJob(): this;
/**
* Grants permission to create an AWS Elemental MediaConvert custom job template
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobs-id.html
*/
toCreateJobTemplate(): this;
/**
* Grants permission to create an AWS Elemental MediaConvert custom output preset
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/presets.html
*/
toCreatePreset(): this;
/**
* Grants permission to create an AWS Elemental MediaConvert job queue
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/queues.html
*/
toCreateQueue(): this;
/**
* Grants permission to share an AWS Elemental MediaConvert job
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/resourceshares.html
*/
toCreateResourceShare(): this;
/**
* Grants permission to delete an AWS Elemental MediaConvert custom job template
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobtemplates-name.html
*/
toDeleteJobTemplate(): this;
/**
* Grants permission to delete an AWS Elemental MediaConvert policy
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/policy.html
*/
toDeletePolicy(): this;
/**
* Grants permission to delete an AWS Elemental MediaConvert custom output preset
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/presets-name.html
*/
toDeletePreset(): this;
/**
* Grants permission to delete an AWS Elemental MediaConvert job queue
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/queues-name.html
*/
toDeleteQueue(): this;
/**
* Grants permission to subscribe to the AWS Elemental MediaConvert service, by sending a request for an account-specific endpoint. All transcoding requests must be sent to the endpoint that the service returns
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/endpoints.html
*/
toDescribeEndpoints(): this;
/**
* Grants permission to remove an association between the Amazon Resource Name (ARN) of an AWS Certificate Manager (ACM) certificate and an AWS Elemental MediaConvert resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/certificates-arn.html
*/
toDisassociateCertificate(): this;
/**
* Grants permission to get an AWS Elemental MediaConvert job
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobs-id.html
*/
toGetJob(): this;
/**
* Grants permission to get an AWS Elemental MediaConvert job template
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobtemplates-name.html
*/
toGetJobTemplate(): this;
/**
* Grants permission to get an AWS Elemental MediaConvert policy
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/policy.html
*/
toGetPolicy(): this;
/**
* Grants permission to get an AWS Elemental MediaConvert output preset
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/presets-name.html
*/
toGetPreset(): this;
/**
* Grants permission to get an AWS Elemental MediaConvert job queue
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/queues-name.html
*/
toGetQueue(): this;
/**
* Grants permission to list AWS Elemental MediaConvert job templates
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobtemplates.html
*/
toListJobTemplates(): this;
/**
* Grants permission to list AWS Elemental MediaConvert jobs
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobs.html
*/
toListJobs(): this;
/**
* Grants permission to list AWS Elemental MediaConvert output presets
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/presets.html
*/
toListPresets(): this;
/**
* Grants permission to list AWS Elemental MediaConvert job queues
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/queues.html
*/
toListQueues(): this;
/**
* Grants permission to retrieve the tags for a MediaConvert queue, preset, or job template
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/tags-arn.html
*/
toListTagsForResource(): this;
/**
* Grants permission to list AWS Elemental MediaConvert job engine versions
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/versions.html
*/
toListVersions(): this;
/**
* Grants permission to probe a file
*
* Access Level: Read
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/probe.html
*/
toProbe(): this;
/**
* Grants permission to put an AWS Elemental MediaConvert policy
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/policy.html
*/
toPutPolicy(): this;
/**
* Grants permission to search AWS Elemental MediaConvert jobs
*
* Access Level: List
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/search.html
*/
toSearchJobs(): this;
/**
* Grants permission to add tags to a MediaConvert queue, preset, or job template
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/tags.html
*/
toTagResource(): this;
/**
* Grants permission to remove tags from a MediaConvert queue, preset, or job template
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/tags-arn.html
*/
toUntagResource(): this;
/**
* Grants permission to update an AWS Elemental MediaConvert custom job template
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobtemplates-name.html
*/
toUpdateJobTemplate(): this;
/**
* Grants permission to update an AWS Elemental MediaConvert custom output preset
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/presets-name.html
*/
toUpdatePreset(): this;
/**
* Grants permission to update an AWS Elemental MediaConvert job queue
*
* Access Level: Write
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/queues-name.html
*/
toUpdateQueue(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type Job to the statement
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobs.html
*
* @param jobId - Identifier for the jobId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onJob(jobId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Queue to the statement
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/queues.html
*
* @param queueName - Identifier for the queueName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onQueue(queueName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type Preset to the statement
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/presets.html
*
* @param presetName - Identifier for the presetName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onPreset(presetName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type JobTemplate to the statement
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/jobtemplates.html
*
* @param jobTemplateName - Identifier for the jobTemplateName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onJobTemplate(jobTemplateName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type CertificateAssociation to the statement
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/certificates.html
*
* @param certificateArn - Identifier for the certificateArn.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onCertificateAssociation(certificateArn: string, account?: string, region?: string, partition?: string): this;
/**
* Filters access by tag key-value pairs in the request
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/tags.html
*
* Applies to actions:
* - .toCreateJob()
* - .toCreateJobTemplate()
* - .toCreatePreset()
* - .toCreateQueue()
* - .toTagResource()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by tag key-value pairs attached to the resource
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/tags.html
*
* Applies to actions:
* - .toCreatePreset()
* - .toCreateQueue()
*
* Applies to resource types:
* - Job
* - Queue
* - Preset
* - JobTemplate
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by tag keys in the request
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/tags.html
*
* Applies to actions:
* - .toCreateJob()
* - .toCreateJobTemplate()
* - .toCreatePreset()
* - .toCreateQueue()
* - .toTagResource()
* - .toUntagResource()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by an HTTP input policy present in the account
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/input-policies.html
*
* Applies to actions:
* - .toCreateJob()
*
* @param value `true` or `false`. **Default:** `true`
*/
ifHttpInputsAllowed(value?: boolean): this;
/**
* Filters access by an HTTPS input policy present in the account
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/input-policies.html
*
* Applies to actions:
* - .toCreateJob()
*
* @param value `true` or `false`. **Default:** `true`
*/
ifHttpsInputsAllowed(value?: boolean): this;
/**
* Filters access by an S3 input policy present in the account
*
* https://docs.aws.amazon.com/mediaconvert/latest/apireference/input-policies.html
*
* Applies to actions:
* - .toCreateJob()
*
* @param value `true` or `false`. **Default:** `true`
*/
ifS3InputsAllowed(value?: boolean): this;
/**
* Statement provider for service [mediaconvert](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awselementalmediaconvert.html).
*
*/
constructor(props?: iam.PolicyStatementProps);
}