UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,483 lines (1,482 loc) 125 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [glue](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsglue.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Glue extends PolicyStatement { servicePrefix: string; /** * Grants permission to Glue to continuously validate that the target Arn can receive data replicated from the source ARN * * Access Level: Write */ toAuthorizeInboundIntegration(): this; /** * Grants permission to create one or more partitions * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-BatchCreatePartition */ toBatchCreatePartition(): this; /** * Grants permission to delete one or more connections * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-connections.html#aws-glue-api-catalog-connections-BatchDeleteConnection */ toBatchDeleteConnection(): this; /** * Grants permission to delete one or more partitions * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-BatchDeletePartition */ toBatchDeletePartition(): this; /** * Grants permission to delete one or more tables * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-BatchDeleteTable */ toBatchDeleteTable(): this; /** * Grants permission to delete one or more versions of a table * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-DeleteTableVersion */ toBatchDeleteTableVersion(): this; /** * Grants permission to retrieve one or more blueprints * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-BatchGetBlueprints */ toBatchGetBlueprints(): this; /** * Grants permission to retrieve one or more crawlers * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-crawling.html#aws-glue-api-crawler-crawling-BatchGetCrawlers */ toBatchGetCrawlers(): this; /** * Grants permission to retrieve one or more Custom Entity Types * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-sensitive-data-api.html#aws-glue-api-sensitive-data-api-BatchGetCustomEntityTypes */ toBatchGetCustomEntityTypes(): this; /** * Grants permission to retrieve one or more development endpoints * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-dev-endpoint.html#aws-glue-api-dev-endpoint-BatchGetDevEndpoints */ toBatchGetDevEndpoints(): this; /** * Grants permission to retrieve one or more jobs * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-job.html#aws-glue-api-jobs-job-BatchGetJobs */ toBatchGetJobs(): this; /** * Grants permission to retrieve one or more partitions * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-BatchGetPartition */ toBatchGetPartition(): this; /** * Grants permission to batch get stage files for SparkUI * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/monitor-spark-ui.html */ toBatchGetStageFiles(): this; /** * Grants permission to return the configuration for the specified table optimizers * * Access Level: Read * * Dependent actions: * - glue:GetTable * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-table-optimizers.html#aws-glue-api-table-optimizers-BatchGetTableOptimizer */ toBatchGetTableOptimizer(): this; /** * Grants permission to retrieve one or more triggers * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-trigger.html#aws-glue-api-jobs-trigger-BatchGetTriggers */ toBatchGetTriggers(): this; /** * Grants permission to retrieve one or more workflows * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-BatchGetWorkflows */ toBatchGetWorkflows(): this; /** * Grants permission to stop one or more job runs for a job * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-runs.html#aws-glue-api-jobs-runs-BatchStopStartJobRun */ toBatchStopJobRun(): this; /** * Grants permission to update one or more partitions * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-BatchUpdatePartition */ toBatchUpdatePartition(): this; /** * Grants permission to stop a running Data Quality rule recommendation run * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-CancelDataQualityRuleRecommendationRun */ toCancelDataQualityRuleRecommendationRun(): this; /** * Grants permission to stop a running Data Quality ruleset evaluation run * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-CancelDataQualityRulesetEvaluationRun */ toCancelDataQualityRulesetEvaluationRun(): this; /** * Grants permission to stop a running ML Task Run * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-machine-learning-api.html#aws-glue-api-machine-learning-api-CancelMLTaskRun */ toCancelMLTaskRun(): this; /** * Grants permission to cancel a statement in an interactive session * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-interactive-sessions.html#aws-glue-interactive-sessions-CancelStatement */ toCancelStatement(): this; /** * Grants permission to retrieve a check the validity of schema version * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-schema-registry-api.html#aws-glue-api-schema-registry-api-CheckSchemaVersionValidity */ toCheckSchemaVersionValidity(): this; /** * Grants permission to create a blueprint * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-CreateBlueprint */ toCreateBlueprint(): this; /** * Grants permission to create a catalog * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog.html */ toCreateCatalog(): this; /** * Grants permission to create a classifier * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-classifiers.html#aws-glue-api-crawler-classifiers-CreateClassifier */ toCreateClassifier(): this; /** * Grants permission to create settings for a column statistics task * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-column-statistics.html#aws-glue-api-crawler-column-statistics-CreateColumnStatisticsTaskSettings */ toCreateColumnStatisticsTaskSettings(): this; /** * Grants permission to create a connection * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-connections.html#aws-glue-api-catalog-connections-CreateConnection */ toCreateConnection(): this; /** * Grants permission to create a crawler * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-crawling.html#aws-glue-api-crawler-crawling-CreateCrawler */ toCreateCrawler(): this; /** * Grants permission to create a Custom Entity Type * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-sensitive-data-api.html#aws-glue-api-sensitive-data-api-CreateCustomEntityType */ toCreateCustomEntityType(): this; /** * Grants permission to create a Data Quality ruleset * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-CreateDataQualityRuleset */ toCreateDataQualityRuleset(): this; /** * Grants permission to create a database * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-databases.html#aws-glue-api-catalog-databases-CreateDatabase */ toCreateDatabase(): this; /** * Grants permission to create a development endpoint * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-dev-endpoint.html#aws-glue-api-dev-endpoint-CreateDevEndpoint */ toCreateDevEndpoint(): this; /** * Grants permission to connect Glue with Identity Center * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/security-trusted-identity-propagation-getting-started.html#security-trusted-identity-propagation-connecting */ toCreateGlueIdentityCenterConfiguration(): this; /** * Grants permission to the source principal to create an inbound integration for data to be replicated from the source into the target * * Access Level: Write */ toCreateInboundIntegration(): this; /** * Grants permission to create an integration * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - kms:CreateGrant * - kms:DescribeKey * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-CreateIntegration */ toCreateIntegration(): this; /** * Grants permission to create integration resource property * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-CreateIntegrationResourceProperty */ toCreateIntegrationResourceProperty(): this; /** * Grants permission to create integration table properties * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-CreateIntegrationTableProperties */ toCreateIntegrationTableProperties(): this; /** * Grants permission to create a job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifVpcIds() * - .ifSubnetIds() * - .ifSecurityGroupIds() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-job.html#aws-glue-api-jobs-job-CreateJob */ toCreateJob(): this; /** * Grants permission to create an ML Transform * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-machine-learning-api.html#aws-glue-api-machine-learning-api-CreateMLTransform */ toCreateMLTransform(): this; /** * Grants permission to create a partition * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-CreatePartition */ toCreatePartition(): this; /** * Grants permission to create a specified partition index in an existing table * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-CreatePartitionIndex */ toCreatePartitionIndex(): this; /** * Grants permission to create a new schema registry * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-schema-registry-api.html#aws-glue-api-schema-registry-api-CreateRegistry */ toCreateRegistry(): this; /** * Grants permission to create a new schema container * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-schema-registry-api.html#aws-glue-api-schema-registry-api-CreateSchema */ toCreateSchema(): this; /** * Grants permission to create a script * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-etl-script-generation.html#aws-glue-api-etl-script-generation-CreateScript */ toCreateScript(): this; /** * Grants permission to create a security configuration * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-security.html#aws-glue-api-jobs-security-CreateSecurityConfiguration */ toCreateSecurityConfiguration(): this; /** * Grants permission to create an interactive session * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifVpcIds() * - .ifSubnetIds() * - .ifSecurityGroupIds() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-interactive-sessions.html#aws-glue-api-interactive-sessions-CreateSession */ toCreateSession(): this; /** * Grants permission to create a table * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-CreateTable */ toCreateTable(): this; /** * Grants permission to create a new table optimizer for a specific function. Compaction is the only currently supported optimizer type * * Access Level: Write * * Dependent actions: * - glue:GetTable * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-table-optimizers.html#aws-glue-api-table-optimizers-CreateTableOptimizer */ toCreateTableOptimizer(): this; /** * Grants permission to create a trigger * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-trigger.html#aws-glue-api-jobs-trigger-CreateTrigger */ toCreateTrigger(): this; /** * Grants permission to create a usage profile * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-usage-profiles.html#aws-glue-api-usage-profiles-CreateUsageProfile */ toCreateUsageProfile(): this; /** * Grants permission to create a function definition * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-functions.html#aws-glue-api-catalog-functions-CreateUserDefinedFunction */ toCreateUserDefinedFunction(): this; /** * Grants permission to create a workflow * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-CreateWorkflow */ toCreateWorkflow(): this; /** * Grants permission to delete a blueprint * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-DeleteBlueprint */ toDeleteBlueprint(): this; /** * Grants permission to delete a catalog * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog.html */ toDeleteCatalog(): this; /** * Grants permission to delete a classifier * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-classifiers.html#aws-glue-api-crawler-classifiers-DeleteClassifier */ toDeleteClassifier(): this; /** * Grants permission to delete the partition column statistics of a column * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-DeleteColumnStatisticsForPartition */ toDeleteColumnStatisticsForPartition(): this; /** * Grants permission to delete the table statistics of columns * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-DeleteColumnStatisticsForTable */ toDeleteColumnStatisticsForTable(): this; /** * Grants permission to delete settings for a column statistics task * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-column-statistics.html#aws-glue-api-crawler-column-statistics-DeleteColumnStatisticsTaskSettings */ toDeleteColumnStatisticsTaskSettings(): this; /** * Grants permission to delete a connection * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-connections.html#aws-glue-api-catalog-connections-DeleteConnection */ toDeleteConnection(): this; /** * Grants permission to delete connection type * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/glue-connections.html#connection-type-permissions-operations */ toDeleteConnectionType(): this; /** * Grants permission to delete a crawler * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-crawling.html#aws-glue-api-crawler-crawling-DeleteCrawler */ toDeleteCrawler(): this; /** * Grants permission to delete a Custom Entity Type * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-sensitive-data-api.html#aws-glue-api-sensitive-data-api-DeleteCustomEntityType */ toDeleteCustomEntityType(): this; /** * Grants permission to delete a Data Quality ruleset * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-DeleteDataQualityRuleset */ toDeleteDataQualityRuleset(): this; /** * Grants permission to delete a database * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-databases.html#aws-glue-api-catalog-databases-DeleteDatabase */ toDeleteDatabase(): this; /** * Grants permission to delete a development endpoint * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-dev-endpoint.html#aws-glue-api-dev-endpoint-DeleteDevEndpoint */ toDeleteDevEndpoint(): this; /** * Grants permission to disconnect Glue with Identity Center * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/security-trusted-identity-propagation-getting-started.html#security-trusted-identity-propagation-connecting */ toDeleteGlueIdentityCenterConfiguration(): this; /** * Grants permission to delete an integration * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-DeleteIntegration */ toDeleteIntegration(): this; /** * Grants permission to delete the integration resource property * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-DeleteIntegrationResourceProperty */ toDeleteIntegrationResourceProperty(): this; /** * Grants permission to delete integration table properties * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-DeleteIntegrationTableProperties */ toDeleteIntegrationTableProperties(): this; /** * Grants permission to delete a job * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-job.html#aws-glue-api-jobs-job-DeleteJob */ toDeleteJob(): this; /** * Grants permission to delete an ML Transform * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-machine-learning-api.html#aws-glue-api-machine-learning-api-DeleteMLTransform */ toDeleteMLTransform(): this; /** * Grants permission to delete a partition * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-DeletePartition */ toDeletePartition(): this; /** * Grants permission to delete a specified partition index from an existing table * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-DeletePartitionIndex */ toDeletePartitionIndex(): this; /** * Grants permission to delete a schema registry * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-schema-registry-api.html#aws-glue-api-schema-registry-api-DeleteRegistry */ toDeleteRegistry(): this; /** * Grants permission to delete a resource policy * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-security.html#aws-glue-api-jobs-security-DeleteResourcePolicy */ toDeleteResourcePolicy(): this; /** * Grants permission to delete a schema container * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-schema-registry-api.html#aws-glue-api-schema-registry-api-DeleteSchema */ toDeleteSchema(): this; /** * Grants permission to delete a range of schema versions * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-schema-registry-api.html#aws-glue-api-schema-registry-api-DeleteSchemaVersions */ toDeleteSchemaVersions(): this; /** * Grants permission to delete a security configuration * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-security.html#aws-glue-api-jobs-security-DeleteSecurityConfiguration */ toDeleteSecurityConfiguration(): this; /** * Grants permission to delete an interactive session after stopping the session if not already stopped * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-interactive-sessions.html#aws-glue-interactive-sessions-DeleteSession */ toDeleteSession(): this; /** * Grants permission to delete a table * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-DeleteTable */ toDeleteTable(): this; /** * Grants permission to delete an optimizer and all associated metadata for a table. The optimization will no longer be performed on the table * * Access Level: Write * * Dependent actions: * - glue:GetTable * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-table-optimizers.html#aws-glue-api-table-optimizers-DeleteTableOptimizer */ toDeleteTableOptimizer(): this; /** * Grants permission to delete a version of a table * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-DeleteTableVersion */ toDeleteTableVersion(): this; /** * Grants permission to delete a trigger * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-trigger.html#aws-glue-api-jobs-trigger-DeleteTrigger */ toDeleteTrigger(): this; /** * Grants permission to delete a usage profile * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-usage-profiles.html#aws-glue-api-usage-profiles-DeleteUsageProfile */ toDeleteUsageProfile(): this; /** * Grants permission to delete a function definition * * Access Level: Write * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-functions.html#aws-glue-api-catalog-functions-DeleteUserDefinedFunction */ toDeleteUserDefinedFunction(): this; /** * Grants permission to delete a workflow * * Access Level: Write * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-DeleteWorkflow */ toDeleteWorkflow(): this; /** * Grants permission to terminate Glue Studio Notebook session * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/ug/notebook-getting-started.html#create-notebook-permissions-operations */ toDeregisterDataPreview(): this; /** * Grants permission to describe connection type in glue * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/glue-connections.html#connection-type-permissions-operations */ toDescribeConnectionType(): this; /** * Grants permission to describe entity in glue studio * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/glue-connections.html#connection-type-permissions-operations */ toDescribeEntity(): this; /** * Grants permission to list the inbound integrations * * Access Level: List * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-DescribeInboundIntegrations */ toDescribeInboundIntegrations(): this; /** * Grants permission to describe zero-ETL integrations * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-DescribeIntegrations */ toDescribeIntegrations(): this; /** * Grants permission to read and write redshift federated resources * * Access Level: Write * * Possible conditions: * - .ifEnabledForRedshiftAutoDiscovery() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog.html */ toFederateAuthorization(): this; /** * Grants permission to retrieve a blueprint * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-GetBlueprint */ toGetBlueprint(): this; /** * Grants permission to retrieve a blueprint run * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-GetBlueprintRun */ toGetBlueprintRun(): this; /** * Grants permission to retrieve all runs of a blueprint * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-workflow.html#aws-glue-api-workflow-GetBlueprintRuns */ toGetBlueprintRuns(): this; /** * Grants permission to retrieve a catalog * * Access Level: Read * * Possible conditions: * - .ifEnabledForRedshiftAutoDiscovery() * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog.html */ toGetCatalog(): this; /** * Grants permission to retrieve the catalog import status * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-migration.html#aws-glue-api-catalog-migration-GetCatalogImportStatus */ toGetCatalogImportStatus(): this; /** * Grants permission to retrieve all catalogs * * Access Level: Read * * Possible conditions: * - .ifEnabledForRedshiftAutoDiscovery() * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog.html */ toGetCatalogs(): this; /** * Grants permission to retrieve a classifier * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-classifiers.html#aws-glue-api-crawler-classifiers-GetClassifier */ toGetClassifier(): this; /** * Grants permission to list all classifiers * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-classifiers.html#aws-glue-api-crawler-classifiers-GetClassifiers */ toGetClassifiers(): this; /** * Grants permission to retrieve partition statistics of columns * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-GetColumnStatisticsForPartition */ toGetColumnStatisticsForPartition(): this; /** * Grants permission to retrieve table statistics of columns * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-GetColumnStatisticsForTable */ toGetColumnStatisticsForTable(): this; /** * Grants permission to retrieve Column Statistics run information for the table based on run-id * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-column-statistics.html#aws-glue-api-crawler-column-statistics-GetColumnStatisticsTaskRun */ toGetColumnStatisticsTaskRun(): this; /** * Grants permission to retrieve Column Statistics run information for the table based on run-ids * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-column-statistics.html#aws-glue-api-crawler-column-statistics-GetColumnStatisticsTaskRuns */ toGetColumnStatisticsTaskRuns(): this; /** * Grants permission to retrieve settings for a column statistics task * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-column-statistics.html#aws-glue-api-crawler-column-statistics-GetColumnStatisticsTaskSettings */ toGetColumnStatisticsTaskSettings(): this; /** * Grants permission to get generated response for a completion request in Glue from AWS Q * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api.html# */ toGetCompletion(): this; /** * Grants permission to retrieve a connection * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-connections.html#aws-glue-api-catalog-connections-GetConnection */ toGetConnection(): this; /** * Grants permission to retrieve a list of connections * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-connections.html#aws-glue-api-catalog-connections-GetConnections */ toGetConnections(): this; /** * Grants permission to retrieve a crawler * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-crawling.html#aws-glue-api-crawler-crawling-GetCrawler */ toGetCrawler(): this; /** * Grants permission to retrieve metrics about crawlers * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-crawling.html#aws-glue-api-crawler-crawling-GetCrawlerMetrics */ toGetCrawlerMetrics(): this; /** * Grants permission to retrieve all crawlers * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-crawling.html#aws-glue-api-crawler-crawling-GetCrawlers */ toGetCrawlers(): this; /** * Grants permission to read a Custom Entity Type * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-sensitive-data-api.html#aws-glue-api-sensitive-data-api-GetCustomEntityType */ toGetCustomEntityType(): this; /** * Grants permission to generate presigned url for accessing spark live UI * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-interactive-sessions.html */ toGetDashboardUrl(): this; /** * Grants permission to retrieve catalog encryption settings * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-security.html#aws-glue-api-jobs-security-GetDataCatalogEncryptionSettings */ toGetDataCatalogEncryptionSettings(): this; /** * Grants permission to get Data Preview Statement * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/ug/notebook-getting-started.html#create-notebook-permissions-operations */ toGetDataPreviewStatement(): this; /** * Grants permission to retrieve the training status of the prediction model for a statistic * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-GetDataQualityModel */ toGetDataQualityModel(): this; /** * Grants permission to retrieve the predictions for a statistic from the latest model * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-GetDataQualityModelResult */ toGetDataQualityModelResult(): this; /** * Grants permission to retrieve a Data Quality result * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-GetDataQualityResult */ toGetDataQualityResult(): this; /** * Grants permission to retrieve a Data Quality rule recommendation run * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-GetDataQualityRuleRecommendationRun */ toGetDataQualityRuleRecommendationRun(): this; /** * Grants permission to retrieve a Data Quality ruleset * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-GetDataQualityRuleset */ toGetDataQualityRuleset(): this; /** * Grants permission to retrieve a Data Quality rule recommendation run * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-data-quality-api.html#aws-glue-api-data-quality-api-GetDataQualityRulesetEvaluationRun */ toGetDataQualityRulesetEvaluationRun(): this; /** * Grants permission to retrieve a database * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-databases.html#aws-glue-api-catalog-databases-GetDatabase */ toGetDatabase(): this; /** * Grants permission to retrieve all databases * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * - .ifFederatedAuthorizationSource() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-databases.html#aws-glue-api-catalog-databases-GetDatabases */ toGetDatabases(): this; /** * Grants permission to transform a script into a directed acyclic graph (DAG) * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-etl-script-generation.html#aws-glue-api-etl-script-generation-GetDataflowGraph */ toGetDataflowGraph(): this; /** * Grants permission to retrieve a development endpoint * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-dev-endpoint.html#aws-glue-api-dev-endpoint-GetDevEndpoint */ toGetDevEndpoint(): this; /** * Grants permission to retrieve all development endpoints * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-dev-endpoint.html#aws-glue-api-dev-endpoint-GetDevEndpoints */ toGetDevEndpoints(): this; /** * Grants permission to preview entity records in glue * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/glue-connections.html#connection-type-permissions-operations */ toGetEntityRecords(): this; /** * Grants permission to get environment details for SparkUI * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/monitor-spark-ui.html */ toGetEnvironment(): this; /** * Grants permission to get executors for SparkUI * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/monitor-spark-ui.html */ toGetExecutors(): this; /** * Grants permission to get executor threads for SparkUI * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/monitor-spark-ui.html */ toGetExecutorsThreads(): this; /** * Transforms a directed acyclic graph (DAG) into code * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-etl-script-generation.html#aws-glue-api-etl-script-generation-GetGeneratedCode */ toGetGeneratedCode(): this; /** * Grants permission to retrieve the managed Idc application * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/security-trusted-identity-propagation-getting-started.html#security-trusted-identity-propagation-connecting */ toGetGlueIdentityCenterConfiguration(): this; /** * Grants permission to retrieve the integration resource property * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-GetIntegrationResourceProperty */ toGetIntegrationResourceProperty(): this; /** * Grants permission to retrieve the integration table properties * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-GetIntegrationTableProperties */ toGetIntegrationTableProperties(): this; /** * Grants permission to retrieve a job * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-job.html#aws-glue-api-jobs-job-GetJob */ toGetJob(): this; /** * Grants permission to retrieve a job bookmark * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-runs.html#aws-glue-api-jobs-job-GetJobBookmark */ toGetJobBookmark(): this; /** * Grants permission to retrieve a job run * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-runs.html#aws-glue-api-jobs-runs-GetJobRun */ toGetJobRun(): this; /** * Grants permission to retrieve all job runs of a job * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-runs.html#aws-glue-api-jobs-runs-GetJobRuns */ toGetJobRuns(): this; /** * Grants permission to retrieve an upgrade analysis for a job * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-upgrade-analysis.html#aws-glue-api-upgrade-analysis-GetJobUpgradeAnalysis */ toGetJobUpgradeAnalysis(): this; /** * Grants permission to retrieve all current jobs * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-job.html#aws-glue-api-jobs-job-GetJobs */ toGetJobs(): this; /** * Grants permission to get log parsing status for SparkUI * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/monitor-spark-ui.html */ toGetLogParsingStatus(): this; /** * Grants permission to retrieve an ML Task Run * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-machine-learning-api.html#aws-glue-api-machine-learning-api-GetMLTaskRun */ toGetMLTaskRun(): this; /** * Grants permission to retrieve all ML Task Runs * * Access Level: List * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-machine-learning-api.html#aws-glue-api-machine-learning-api-GetMLTaskRuns */ toGetMLTaskRuns(): this; /** * Grants permission to retrieve an ML Transform * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-machine-learning-api.html#aws-glue-api-machine-learning-api-GetMLTransform */ toGetMLTransform(): this; /** * Grants permission to retrieve all ML Transforms * * Access Level: List * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-machine-learning-api.html#aws-glue-api-machine-learning-api-GetMLTransforms */ toGetMLTransforms(): this; /** * Grants permission to create a mapping * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-etl-script-generation.html#aws-glue-api-etl-script-generation-GetMapping */ toGetMapping(): this; /** * Grants permission to retrieve Glue Studio Notebooks session status * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/ug/notebook-getting-started.html#create-notebook-permissions-operations */ toGetNotebookInstanceStatus(): this; /** * Grants permission to retrieve a partition * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-GetPartition */ toGetPartition(): this; /** * Grants permission to retrieve partition indexes for a table * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-GetPartitionIndexes */ toGetPartitionIndexes(): this; /** * Grants permission to retrieve the partitions of a table * * Access Level: Read * * Possible conditions: * - .ifLakeFormationPermissions() * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-partitions.html#aws-glue-api-catalog-partitions-GetPartitions */ toGetPartitions(): this; /** * Grants permission to retrieve a mapping for a script * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-etl-script-generation.html#aws-glue-api-etl-script-generation-GetPlan */ toGetPlan(): this; /** * Grants permission to get queries for SparkUI * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/monitor-spark-ui.html */ toGetQueries(): this; /** * Grants permission to get a specific query for SparkUI * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/dg/monitor-spark-ui.html */ toGetQuery(): this; /** * Grants permission to get the result of a Data Preparation Recipe statement * * Access Level: Permissions management * * https://docs.aws.amazon.com/glue/latest/ug/setting-up.html#getting-started-min-privs */ toGetRecipeAction(): this; /** * Grants permission to retrieve a schema registry * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-schema-registry-api.html#aws-glue-api-schema-registry-api-GetRegistry */ toGetRegistry(): this; /** * Grants permission to retrieve resource policies * * Access Level: Read * * https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-jobs-security.html#aws-glue-api-jobs-security-GetResourcePolicies */ toGetResourcePolicies(): this; /** * Grants permission to retrieve a resource policy * * Access Level: Read *