cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
1,045 lines • 102 kB
JavaScript
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.Inspector2 = void 0;
const shared_1 = require("../../shared");
/**
* Statement provider for service [inspector2](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
class Inspector2 extends shared_1.PolicyStatement {
/**
* Grants permission to associate an account with an Amazon Inspector administrator account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_AssociateMember.html
*/
toAssociateMember() {
return this.to('AssociateMember');
}
/**
* Grants permission to associate multiple code repositories with an Amazon Inspector code security scan configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchAssociateCodeSecurityScanConfiguration.html
*/
toBatchAssociateCodeSecurityScanConfiguration() {
return this.to('BatchAssociateCodeSecurityScanConfiguration');
}
/**
* Grants permission to disassociate multiple code repositories from an Amazon Inspector code security scan configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchDisassociateCodeSecurityScanConfiguration.html
*/
toBatchDisassociateCodeSecurityScanConfiguration() {
return this.to('BatchDisassociateCodeSecurityScanConfiguration');
}
/**
* Grants permission to retrieve information about Amazon Inspector accounts for an account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetAccountStatus.html
*/
toBatchGetAccountStatus() {
return this.to('BatchGetAccountStatus');
}
/**
* Grants permission to retrieve code snippet information about one or more code vulnerability findings
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetCodeSnippet.html
*/
toBatchGetCodeSnippet() {
return this.to('BatchGetCodeSnippet');
}
/**
* Grants permission to let a customer get enhanced vulnerability intelligence details for findings
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetFindingDetails.html
*/
toBatchGetFindingDetails() {
return this.to('BatchGetFindingDetails');
}
/**
* Grants permission to retrieve free trial period eligibility about Amazon Inspector accounts for an account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetFreeTrialInfo.html
*/
toBatchGetFreeTrialInfo() {
return this.to('BatchGetFreeTrialInfo');
}
/**
* Grants permission to delegated administrator to retrieve ec2 deep inspection status of member accounts
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetMemberEc2DeepInspectionStatus.html
*/
toBatchGetMemberEc2DeepInspectionStatus() {
return this.to('BatchGetMemberEc2DeepInspectionStatus');
}
/**
* Grants permission to update ec2 deep inspection status by delegated administrator for its associated member accounts
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchUpdateMemberEc2DeepInspectionStatus.html
*/
toBatchUpdateMemberEc2DeepInspectionStatus() {
return this.to('BatchUpdateMemberEc2DeepInspectionStatus');
}
/**
* Grants permission to cancel the generation of a findings report
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_CancelFindingsReport.html
*/
toCancelFindingsReport() {
return this.to('CancelFindingsReport');
}
/**
* Grants permission to cancel the generation of an SBOM report
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_CancelSbomExport.html
*/
toCancelSbomExport() {
return this.to('CancelSbomExport');
}
/**
* Grants permission to create and define the settings for a CIS scan configuration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateCisScanConfiguration.html
*/
toCreateCisScanConfiguration() {
return this.to('CreateCisScanConfiguration');
}
/**
* Grants permission to create a code security integration with a source code repository provider
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateCodeSecurityIntegration.html
*/
toCreateCodeSecurityIntegration() {
return this.to('CreateCodeSecurityIntegration');
}
/**
* Grants permission to create a scan configuration for code security scanning
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateCodeSecurityScanConfiguration.html
*/
toCreateCodeSecurityScanConfiguration() {
return this.to('CreateCodeSecurityScanConfiguration');
}
/**
* Grants permission to create and define the settings for a findings filter
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateFilter.html
*/
toCreateFilter() {
return this.to('CreateFilter');
}
/**
* Grants permission to request the generation of a findings report
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateFindingsReport.html
*/
toCreateFindingsReport() {
return this.to('CreateFindingsReport');
}
/**
* Grants permission to request the generation of an SBOM report
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateSbomExport.html
*/
toCreateSbomExport() {
return this.to('CreateSbomExport');
}
/**
* Grants permission to delete a CIS scan configuration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteCisScanConfiguration.html
*/
toDeleteCisScanConfiguration() {
return this.to('DeleteCisScanConfiguration');
}
/**
* Grants permission to delete a code security integration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteCodeSecurityIntegration.html
*/
toDeleteCodeSecurityIntegration() {
return this.to('DeleteCodeSecurityIntegration');
}
/**
* Grants permission to delete a code security scan configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteCodeSecurityScanConfiguration.html
*/
toDeleteCodeSecurityScanConfiguration() {
return this.to('DeleteCodeSecurityScanConfiguration');
}
/**
* Grants permission to delete a findings filter
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteFilter.html
*/
toDeleteFilter() {
return this.to('DeleteFilter');
}
/**
* Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS organization
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_DescribeOrganizationConfiguration.html
*/
toDescribeOrganizationConfiguration() {
return this.to('DescribeOrganizationConfiguration');
}
/**
* Grants permission to disable an Amazon Inspector account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_Disable.html
*/
toDisable() {
return this.to('Disable');
}
/**
* Grants permission to disable an account as the delegated Amazon Inspector administrator account for an AWS organization
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_DisableDelegatedAdminAccount.html
*/
toDisableDelegatedAdminAccount() {
return this.to('DisableDelegatedAdminAccount');
}
/**
* Grants permission to an Amazon Inspector administrator account to disassociate from an Inspector member account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_DisassociateMember.html
*/
toDisassociateMember() {
return this.to('DisassociateMember');
}
/**
* Grants permission to enable and specify the configuration settings for a new Amazon Inspector account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_Enable.html
*/
toEnable() {
return this.to('Enable');
}
/**
* Grants permission to enable an account as the delegated Amazon Inspector administrator account for an AWS organization
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_EnableDelegatedAdminAccount.html
*/
toEnableDelegatedAdminAccount() {
return this.to('EnableDelegatedAdminAccount');
}
/**
* Grants permission to retrieve a report containing information about completed CIS scans
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCisScanReport.html
*/
toGetCisScanReport() {
return this.to('GetCisScanReport');
}
/**
* Grants permission to retrieve information about all details pertaining to one CIS scan and one targeted resource
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCisScanResultDetails.html
*/
toGetCisScanResultDetails() {
return this.to('GetCisScanResultDetails');
}
/**
* Grants permission to get cluster information for a given a continuously scanned amazon Ecr image
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetClustersForImage.html
*/
toGetClustersForImage() {
return this.to('GetClustersForImage');
}
/**
* Grants permission to retrieve information about a code security integration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCodeSecurityIntegration.html
*/
toGetCodeSecurityIntegration() {
return this.to('GetCodeSecurityIntegration');
}
/**
* Grants permission to retrieve information about a specific code security scan
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCodeSecurityScan.html
*/
toGetCodeSecurityScan() {
return this.to('GetCodeSecurityScan');
}
/**
* Grants permission to retrieve information about a code security scan configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCodeSecurityScanConfiguration.html
*/
toGetCodeSecurityScanConfiguration() {
return this.to('GetCodeSecurityScanConfiguration');
}
/**
* Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetConfiguration.html
*/
toGetConfiguration() {
return this.to('GetConfiguration');
}
/**
* Grants permission to retrieve information about the Amazon Inspector administrator account for an account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetDelegatedAdminAccount.html
*/
toGetDelegatedAdminAccount() {
return this.to('GetDelegatedAdminAccount');
}
/**
* Grants permission to retrieve ec2 deep inspection configuration for standalone accounts, delegated administrator and member account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetEc2DeepInspectionConfiguration.html
*/
toGetEc2DeepInspectionConfiguration() {
return this.to('GetEc2DeepInspectionConfiguration');
}
/**
* Grants permission to retrieve information about the KMS key used to encrypt code snippets with
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetEncryptionKey.html
*/
toGetEncryptionKey() {
return this.to('GetEncryptionKey');
}
/**
* Grants permission to retrieve status for a requested findings report
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetFindingsReportStatus.html
*/
toGetFindingsReportStatus() {
return this.to('GetFindingsReportStatus');
}
/**
* Grants permission to retrieve information about an account that's associated with an Amazon Inspector administrator account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetMember.html
*/
toGetMember() {
return this.to('GetMember');
}
/**
* Grants permission to retrieve a requested SBOM report
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetSbomExport.html
*/
toGetSbomExport() {
return this.to('GetSbomExport');
}
/**
* Grants permission to retrieve feature configuration permissions associated with an Amazon Inspector account within an organization
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListAccountPermissions.html
*/
toListAccountPermissions() {
return this.to('ListAccountPermissions');
}
/**
* Grants permission to retrieve information about all CIS scan configurations
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanConfigurations.html
*/
toListCisScanConfigurations() {
return this.to('ListCisScanConfigurations');
}
/**
* Grants permission to retrieve information about all checks pertaining to one CIS scan
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanResultsAggregatedByChecks.html
*/
toListCisScanResultsAggregatedByChecks() {
return this.to('ListCisScanResultsAggregatedByChecks');
}
/**
* Grants permission to retrieve information about all resources pertaining to one CIS scan
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanResultsAggregatedByTargetResource.html
*/
toListCisScanResultsAggregatedByTargetResource() {
return this.to('ListCisScanResultsAggregatedByTargetResource');
}
/**
* Grants permission to retrieve information about completed CIS scans
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScans.html
*/
toListCisScans() {
return this.to('ListCisScans');
}
/**
* Grants permission to list all code security integrations in your account
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCodeSecurityIntegrations.html
*/
toListCodeSecurityIntegrations() {
return this.to('ListCodeSecurityIntegrations');
}
/**
* Grants permission to list the associations between code repositories and Amazon Inspector code security scan configurations
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCodeSecurityScanConfigurationAssociations.html
*/
toListCodeSecurityScanConfigurationAssociations() {
return this.to('ListCodeSecurityScanConfigurationAssociations');
}
/**
* Grants permission to list all code security scan configurations in your account
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCodeSecurityScanConfigurations.html
*/
toListCodeSecurityScanConfigurations() {
return this.to('ListCodeSecurityScanConfigurations');
}
/**
* Grants permission to retrieve the types of statistics Amazon Inspector can generate for resources Inspector monitors
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCoverage.html
*/
toListCoverage() {
return this.to('ListCoverage');
}
/**
* Grants permission to retrieve statistical data and other information about the resources Amazon Inspector monitors
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCoverageStatistics.html
*/
toListCoverageStatistics() {
return this.to('ListCoverageStatistics');
}
/**
* Grants permission to retrieve information about the delegated Amazon Inspector administrator account for an AWS organization
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListDelegatedAdminAccounts.html
*/
toListDelegatedAdminAccounts() {
return this.to('ListDelegatedAdminAccounts');
}
/**
* Grants permission to retrieve information about all findings filters
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListFilters.html
*/
toListFilters() {
return this.to('ListFilters');
}
/**
* Grants permission to retrieve statistical data and other information about Amazon Inspector findings
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListFindingAggregations.html
*/
toListFindingAggregations() {
return this.to('ListFindingAggregations');
}
/**
* Grants permission to retrieve a subset of information about one or more findings
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListFindings.html
*/
toListFindings() {
return this.to('ListFindings');
}
/**
* Grants permission to retrieve information about the Amazon Inspector member accounts that are associated with an Inspector administrator account
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListMembers.html
*/
toListMembers() {
return this.to('ListMembers');
}
/**
* Grants permission to retrieve the tags for an Amazon Inspector resource
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListTagsForResource.html
*/
toListTagsForResource() {
return this.to('ListTagsForResource');
}
/**
* Grants permission to retrieve aggregated usage data for an account
*
* Access Level: List
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListUsageTotals.html
*/
toListUsageTotals() {
return this.to('ListUsageTotals');
}
/**
* Grants permission to let a customer reset to use an Amazon-owned KMS key to encrypt code snippets with
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_ResetEncryptionKey.html
*/
toResetEncryptionKey() {
return this.to('ResetEncryptionKey');
}
/**
* Grants permission to list Amazon Inspector coverage details for a specific vulnerability
*
* Access Level: Read
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_SearchVulnerabilities.html
*/
toSearchVulnerabilities() {
return this.to('SearchVulnerabilities');
}
/**
* Grants permission to send CIS health for a CIS scan
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_SendCisSessionHealth.html
*/
toSendCisSessionHealth() {
return this.to('SendCisSessionHealth');
}
/**
* Grants permission to send CIS telemetry for a CIS scan
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_SendCisSessionTelemetry.html
*/
toSendCisSessionTelemetry() {
return this.to('SendCisSessionTelemetry');
}
/**
* Grants permission to start a CIS scan session
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_StartCisSession.html
*/
toStartCisSession() {
return this.to('StartCisSession');
}
/**
* Grants permission to initiate a code security scan on a specified repository
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_StartCodeSecurityScan.html
*/
toStartCodeSecurityScan() {
return this.to('StartCodeSecurityScan');
}
/**
* Grants permission to stop a CIS scan session
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_StopCisSession.html
*/
toStopCisSession() {
return this.to('StopCisSession');
}
/**
* Grants permission to add or update the tags for an Amazon Inspector resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_TagResource.html
*/
toTagResource() {
return this.to('TagResource');
}
/**
* Grants permission to remove tags from an Amazon Inspector resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UntagResource.html
*/
toUntagResource() {
return this.to('UntagResource');
}
/**
* Grants permission to update the settings for a CIS scan configuration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateCisScanConfiguration.html
*/
toUpdateCisScanConfiguration() {
return this.to('UpdateCisScanConfiguration');
}
/**
* Grants permission to update an existing code security integration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateCodeSecurityIntegration.html
*/
toUpdateCodeSecurityIntegration() {
return this.to('UpdateCodeSecurityIntegration');
}
/**
* Grants permission to update an existing code security scan configuration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateCodeSecurityScanConfiguration.html
*/
toUpdateCodeSecurityScanConfiguration() {
return this.to('UpdateCodeSecurityScanConfiguration');
}
/**
* Grants permission to update information about the Amazon Inspector configuration settings for an AWS account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateConfiguration.html
*/
toUpdateConfiguration() {
return this.to('UpdateConfiguration');
}
/**
* Grants permission to update ec2 deep inspection configuration by delegated administrator, member and standalone account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateEc2DeepInspectionConfiguration.html
*/
toUpdateEc2DeepInspectionConfiguration() {
return this.to('UpdateEc2DeepInspectionConfiguration');
}
/**
* Grants permission to let a customer use a KMS key to encrypt code snippets with
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateEncryptionKey.html
*/
toUpdateEncryptionKey() {
return this.to('UpdateEncryptionKey');
}
/**
* Grants permission to update the settings for a findings filter
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateFilter.html
*/
toUpdateFilter() {
return this.to('UpdateFilter');
}
/**
* Grants permission to update ec2 deep inspection configuration by delegated administrator for its associated member accounts
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateOrgEc2DeepInspectionConfiguration.html
*/
toUpdateOrgEc2DeepInspectionConfiguration() {
return this.to('UpdateOrgEc2DeepInspectionConfiguration');
}
/**
* Grants permission to update Amazon Inspector configuration settings for an AWS organization
*
* Access Level: Write
*
* https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateOrganizationConfiguration.html
*/
toUpdateOrganizationConfiguration() {
return this.to('UpdateOrganizationConfiguration');
}
/**
* Adds a resource of type Filter to the statement
*
* https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html
*
* @param ownerId - Identifier for the ownerId.
* @param filterId - Identifier for the filterId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onFilter(ownerId, filterId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:owner/${ownerId}/filter/${filterId}`);
}
/**
* Adds a resource of type Finding to the statement
*
* https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html
*
* @param findingId - Identifier for the findingId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onFinding(findingId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:finding/${findingId}`);
}
/**
* Adds a resource of type CIS Scan Configuration to the statement
*
* https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html
*
* @param ownerId - Identifier for the ownerId.
* @param cISScanConfigurationId - Identifier for the cISScanConfigurationId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onCISScanConfiguration(ownerId, cISScanConfigurationId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:owner/${ownerId}/cis-configuration/${cISScanConfigurationId}`);
}
/**
* Adds a resource of type Code Security Scan Configuration to the statement
*
* https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html
*
* @param ownerId - Identifier for the ownerId.
* @param codeSecurityScanConfigurationId - Identifier for the codeSecurityScanConfigurationId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onCodeSecurityScanConfiguration(ownerId, codeSecurityScanConfigurationId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:owner/${ownerId}/codesecurity-configuration/${codeSecurityScanConfigurationId}`);
}
/**
* Adds a resource of type Code Security Integration to the statement
*
* https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html
*
* @param codeSecurityIntegrationId - Identifier for the codeSecurityIntegrationId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onCodeSecurityIntegration(codeSecurityIntegrationId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:codesecurity-integration/${codeSecurityIntegrationId}`);
}
/**
* Filters access by the presence of tag key-value pairs in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateCisScanConfiguration()
* - .toCreateCodeSecurityIntegration()
* - .toCreateCodeSecurityScanConfiguration()
* - .toCreateFilter()
* - .toTagResource()
* - .toUpdateFilter()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey, value, operator) {
return this.if(`aws:RequestTag/${tagKey}`, value, operator ?? 'StringLike');
}
/**
* Filters access by tag key-value pairs attached to the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to actions:
* - .toCreateCisScanConfiguration()
* - .toDeleteCisScanConfiguration()
* - .toTagResource()
* - .toUntagResource()
* - .toUpdateCisScanConfiguration()
* - .toUpdateCodeSecurityIntegration()
* - .toUpdateCodeSecurityScanConfiguration()
*
* Applies to resource types:
* - Filter
* - CIS Scan Configuration
* - Code Security Scan Configuration
* - Code Security Integration
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey, value, operator) {
return this.if(`aws:ResourceTag/${tagKey}`, value, operator ?? 'StringLike');
}
/**
* Filters access by the presence of tag keys in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toCreateCisScanConfiguration()
* - .toCreateCodeSecurityIntegration()
* - .toCreateCodeSecurityScanConfiguration()
* - .toCreateFilter()
* - .toTagResource()
* - .toUntagResource()
* - .toUpdateFilter()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value, operator) {
return this.if(`aws:TagKeys`, value, operator ?? 'StringLike');
}
/**
* Statement provider for service [inspector2](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html).
*
*/
constructor(props) {
super(props);
this.servicePrefix = 'inspector2';
this.accessLevelList = {
Write: [
'AssociateMember',
'BatchAssociateCodeSecurityScanConfiguration',
'BatchDisassociateCodeSecurityScanConfiguration',
'BatchUpdateMemberEc2DeepInspectionStatus',
'CancelFindingsReport',
'CancelSbomExport',
'CreateCisScanConfiguration',
'CreateCodeSecurityIntegration',
'CreateCodeSecurityScanConfiguration',
'CreateFilter',
'CreateFindingsReport',
'CreateSbomExport',
'DeleteCisScanConfiguration',
'DeleteCodeSecurityIntegration',
'DeleteCodeSecurityScanConfiguration',
'DeleteFilter',
'Disable',
'DisableDelegatedAdminAccount',
'DisassociateMember',
'Enable',
'EnableDelegatedAdminAccount',
'ResetEncryptionKey',
'SendCisSessionHealth',
'SendCisSessionTelemetry',
'StartCisSession',
'StartCodeSecurityScan',
'StopCisSession',
'UpdateCisScanConfiguration',
'UpdateCodeSecurityIntegration',
'UpdateCodeSecurityScanConfiguration',
'UpdateConfiguration',
'UpdateEc2DeepInspectionConfiguration',
'UpdateEncryptionKey',
'UpdateFilter',
'UpdateOrgEc2DeepInspectionConfiguration',
'UpdateOrganizationConfiguration'
],
Read: [
'BatchGetAccountStatus',
'BatchGetCodeSnippet',
'BatchGetFindingDetails',
'BatchGetFreeTrialInfo',
'BatchGetMemberEc2DeepInspectionStatus',
'DescribeOrganizationConfiguration',
'GetCisScanReport',
'GetClustersForImage',
'GetCodeSecurityIntegration',
'GetCodeSecurityScan',
'GetCodeSecurityScanConfiguration',
'GetConfiguration',
'GetDelegatedAdminAccount',
'GetEc2DeepInspectionConfiguration',
'GetEncryptionKey',
'GetFindingsReportStatus',
'GetMember',
'GetSbomExport',
'ListTagsForResource',
'SearchVulnerabilities'
],
List: [
'GetCisScanResultDetails',
'ListAccountPermissions',
'ListCisScanConfigurations',
'ListCisScanResultsAggregatedByChecks',
'ListCisScanResultsAggregatedByTargetResource',
'ListCisScans',
'ListCodeSecurityIntegrations',
'ListCodeSecurityScanConfigurationAssociations',
'ListCodeSecurityScanConfigurations',
'ListCoverage',
'ListCoverageStatistics',
'ListDelegatedAdminAccounts',
'ListFilters',
'ListFindingAggregations',
'ListFindings',
'ListMembers',
'ListUsageTotals'
],
Tagging: [
'TagResource',
'UntagResource'
]
};
}
}
exports.Inspector2 = Inspector2;
//# sourceMappingURL=data:application/json;base64,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