UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,045 lines 102 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Inspector2 = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [inspector2](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Inspector2 extends shared_1.PolicyStatement { /** * Grants permission to associate an account with an Amazon Inspector administrator account * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_AssociateMember.html */ toAssociateMember() { return this.to('AssociateMember'); } /** * Grants permission to associate multiple code repositories with an Amazon Inspector code security scan configuration * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchAssociateCodeSecurityScanConfiguration.html */ toBatchAssociateCodeSecurityScanConfiguration() { return this.to('BatchAssociateCodeSecurityScanConfiguration'); } /** * Grants permission to disassociate multiple code repositories from an Amazon Inspector code security scan configuration * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchDisassociateCodeSecurityScanConfiguration.html */ toBatchDisassociateCodeSecurityScanConfiguration() { return this.to('BatchDisassociateCodeSecurityScanConfiguration'); } /** * Grants permission to retrieve information about Amazon Inspector accounts for an account * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetAccountStatus.html */ toBatchGetAccountStatus() { return this.to('BatchGetAccountStatus'); } /** * Grants permission to retrieve code snippet information about one or more code vulnerability findings * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetCodeSnippet.html */ toBatchGetCodeSnippet() { return this.to('BatchGetCodeSnippet'); } /** * Grants permission to let a customer get enhanced vulnerability intelligence details for findings * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetFindingDetails.html */ toBatchGetFindingDetails() { return this.to('BatchGetFindingDetails'); } /** * Grants permission to retrieve free trial period eligibility about Amazon Inspector accounts for an account * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetFreeTrialInfo.html */ toBatchGetFreeTrialInfo() { return this.to('BatchGetFreeTrialInfo'); } /** * Grants permission to delegated administrator to retrieve ec2 deep inspection status of member accounts * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchGetMemberEc2DeepInspectionStatus.html */ toBatchGetMemberEc2DeepInspectionStatus() { return this.to('BatchGetMemberEc2DeepInspectionStatus'); } /** * Grants permission to update ec2 deep inspection status by delegated administrator for its associated member accounts * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_BatchUpdateMemberEc2DeepInspectionStatus.html */ toBatchUpdateMemberEc2DeepInspectionStatus() { return this.to('BatchUpdateMemberEc2DeepInspectionStatus'); } /** * Grants permission to cancel the generation of a findings report * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_CancelFindingsReport.html */ toCancelFindingsReport() { return this.to('CancelFindingsReport'); } /** * Grants permission to cancel the generation of an SBOM report * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_CancelSbomExport.html */ toCancelSbomExport() { return this.to('CancelSbomExport'); } /** * Grants permission to create and define the settings for a CIS scan configuration * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateCisScanConfiguration.html */ toCreateCisScanConfiguration() { return this.to('CreateCisScanConfiguration'); } /** * Grants permission to create a code security integration with a source code repository provider * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateCodeSecurityIntegration.html */ toCreateCodeSecurityIntegration() { return this.to('CreateCodeSecurityIntegration'); } /** * Grants permission to create a scan configuration for code security scanning * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateCodeSecurityScanConfiguration.html */ toCreateCodeSecurityScanConfiguration() { return this.to('CreateCodeSecurityScanConfiguration'); } /** * Grants permission to create and define the settings for a findings filter * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateFilter.html */ toCreateFilter() { return this.to('CreateFilter'); } /** * Grants permission to request the generation of a findings report * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateFindingsReport.html */ toCreateFindingsReport() { return this.to('CreateFindingsReport'); } /** * Grants permission to request the generation of an SBOM report * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateSbomExport.html */ toCreateSbomExport() { return this.to('CreateSbomExport'); } /** * Grants permission to delete a CIS scan configuration * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteCisScanConfiguration.html */ toDeleteCisScanConfiguration() { return this.to('DeleteCisScanConfiguration'); } /** * Grants permission to delete a code security integration * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteCodeSecurityIntegration.html */ toDeleteCodeSecurityIntegration() { return this.to('DeleteCodeSecurityIntegration'); } /** * Grants permission to delete a code security scan configuration * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteCodeSecurityScanConfiguration.html */ toDeleteCodeSecurityScanConfiguration() { return this.to('DeleteCodeSecurityScanConfiguration'); } /** * Grants permission to delete a findings filter * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteFilter.html */ toDeleteFilter() { return this.to('DeleteFilter'); } /** * Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS organization * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_DescribeOrganizationConfiguration.html */ toDescribeOrganizationConfiguration() { return this.to('DescribeOrganizationConfiguration'); } /** * Grants permission to disable an Amazon Inspector account * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_Disable.html */ toDisable() { return this.to('Disable'); } /** * Grants permission to disable an account as the delegated Amazon Inspector administrator account for an AWS organization * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_DisableDelegatedAdminAccount.html */ toDisableDelegatedAdminAccount() { return this.to('DisableDelegatedAdminAccount'); } /** * Grants permission to an Amazon Inspector administrator account to disassociate from an Inspector member account * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_DisassociateMember.html */ toDisassociateMember() { return this.to('DisassociateMember'); } /** * Grants permission to enable and specify the configuration settings for a new Amazon Inspector account * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_Enable.html */ toEnable() { return this.to('Enable'); } /** * Grants permission to enable an account as the delegated Amazon Inspector administrator account for an AWS organization * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_EnableDelegatedAdminAccount.html */ toEnableDelegatedAdminAccount() { return this.to('EnableDelegatedAdminAccount'); } /** * Grants permission to retrieve a report containing information about completed CIS scans * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCisScanReport.html */ toGetCisScanReport() { return this.to('GetCisScanReport'); } /** * Grants permission to retrieve information about all details pertaining to one CIS scan and one targeted resource * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCisScanResultDetails.html */ toGetCisScanResultDetails() { return this.to('GetCisScanResultDetails'); } /** * Grants permission to get cluster information for a given a continuously scanned amazon Ecr image * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetClustersForImage.html */ toGetClustersForImage() { return this.to('GetClustersForImage'); } /** * Grants permission to retrieve information about a code security integration * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCodeSecurityIntegration.html */ toGetCodeSecurityIntegration() { return this.to('GetCodeSecurityIntegration'); } /** * Grants permission to retrieve information about a specific code security scan * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCodeSecurityScan.html */ toGetCodeSecurityScan() { return this.to('GetCodeSecurityScan'); } /** * Grants permission to retrieve information about a code security scan configuration * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCodeSecurityScanConfiguration.html */ toGetCodeSecurityScanConfiguration() { return this.to('GetCodeSecurityScanConfiguration'); } /** * Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS account * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetConfiguration.html */ toGetConfiguration() { return this.to('GetConfiguration'); } /** * Grants permission to retrieve information about the Amazon Inspector administrator account for an account * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetDelegatedAdminAccount.html */ toGetDelegatedAdminAccount() { return this.to('GetDelegatedAdminAccount'); } /** * Grants permission to retrieve ec2 deep inspection configuration for standalone accounts, delegated administrator and member account * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetEc2DeepInspectionConfiguration.html */ toGetEc2DeepInspectionConfiguration() { return this.to('GetEc2DeepInspectionConfiguration'); } /** * Grants permission to retrieve information about the KMS key used to encrypt code snippets with * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetEncryptionKey.html */ toGetEncryptionKey() { return this.to('GetEncryptionKey'); } /** * Grants permission to retrieve status for a requested findings report * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetFindingsReportStatus.html */ toGetFindingsReportStatus() { return this.to('GetFindingsReportStatus'); } /** * Grants permission to retrieve information about an account that's associated with an Amazon Inspector administrator account * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetMember.html */ toGetMember() { return this.to('GetMember'); } /** * Grants permission to retrieve a requested SBOM report * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetSbomExport.html */ toGetSbomExport() { return this.to('GetSbomExport'); } /** * Grants permission to retrieve feature configuration permissions associated with an Amazon Inspector account within an organization * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListAccountPermissions.html */ toListAccountPermissions() { return this.to('ListAccountPermissions'); } /** * Grants permission to retrieve information about all CIS scan configurations * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanConfigurations.html */ toListCisScanConfigurations() { return this.to('ListCisScanConfigurations'); } /** * Grants permission to retrieve information about all checks pertaining to one CIS scan * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanResultsAggregatedByChecks.html */ toListCisScanResultsAggregatedByChecks() { return this.to('ListCisScanResultsAggregatedByChecks'); } /** * Grants permission to retrieve information about all resources pertaining to one CIS scan * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanResultsAggregatedByTargetResource.html */ toListCisScanResultsAggregatedByTargetResource() { return this.to('ListCisScanResultsAggregatedByTargetResource'); } /** * Grants permission to retrieve information about completed CIS scans * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScans.html */ toListCisScans() { return this.to('ListCisScans'); } /** * Grants permission to list all code security integrations in your account * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCodeSecurityIntegrations.html */ toListCodeSecurityIntegrations() { return this.to('ListCodeSecurityIntegrations'); } /** * Grants permission to list the associations between code repositories and Amazon Inspector code security scan configurations * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCodeSecurityScanConfigurationAssociations.html */ toListCodeSecurityScanConfigurationAssociations() { return this.to('ListCodeSecurityScanConfigurationAssociations'); } /** * Grants permission to list all code security scan configurations in your account * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCodeSecurityScanConfigurations.html */ toListCodeSecurityScanConfigurations() { return this.to('ListCodeSecurityScanConfigurations'); } /** * Grants permission to retrieve the types of statistics Amazon Inspector can generate for resources Inspector monitors * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCoverage.html */ toListCoverage() { return this.to('ListCoverage'); } /** * Grants permission to retrieve statistical data and other information about the resources Amazon Inspector monitors * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCoverageStatistics.html */ toListCoverageStatistics() { return this.to('ListCoverageStatistics'); } /** * Grants permission to retrieve information about the delegated Amazon Inspector administrator account for an AWS organization * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListDelegatedAdminAccounts.html */ toListDelegatedAdminAccounts() { return this.to('ListDelegatedAdminAccounts'); } /** * Grants permission to retrieve information about all findings filters * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListFilters.html */ toListFilters() { return this.to('ListFilters'); } /** * Grants permission to retrieve statistical data and other information about Amazon Inspector findings * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListFindingAggregations.html */ toListFindingAggregations() { return this.to('ListFindingAggregations'); } /** * Grants permission to retrieve a subset of information about one or more findings * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListFindings.html */ toListFindings() { return this.to('ListFindings'); } /** * Grants permission to retrieve information about the Amazon Inspector member accounts that are associated with an Inspector administrator account * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListMembers.html */ toListMembers() { return this.to('ListMembers'); } /** * Grants permission to retrieve the tags for an Amazon Inspector resource * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListTagsForResource.html */ toListTagsForResource() { return this.to('ListTagsForResource'); } /** * Grants permission to retrieve aggregated usage data for an account * * Access Level: List * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListUsageTotals.html */ toListUsageTotals() { return this.to('ListUsageTotals'); } /** * Grants permission to let a customer reset to use an Amazon-owned KMS key to encrypt code snippets with * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_ResetEncryptionKey.html */ toResetEncryptionKey() { return this.to('ResetEncryptionKey'); } /** * Grants permission to list Amazon Inspector coverage details for a specific vulnerability * * Access Level: Read * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_SearchVulnerabilities.html */ toSearchVulnerabilities() { return this.to('SearchVulnerabilities'); } /** * Grants permission to send CIS health for a CIS scan * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_SendCisSessionHealth.html */ toSendCisSessionHealth() { return this.to('SendCisSessionHealth'); } /** * Grants permission to send CIS telemetry for a CIS scan * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_SendCisSessionTelemetry.html */ toSendCisSessionTelemetry() { return this.to('SendCisSessionTelemetry'); } /** * Grants permission to start a CIS scan session * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_StartCisSession.html */ toStartCisSession() { return this.to('StartCisSession'); } /** * Grants permission to initiate a code security scan on a specified repository * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_StartCodeSecurityScan.html */ toStartCodeSecurityScan() { return this.to('StartCodeSecurityScan'); } /** * Grants permission to stop a CIS scan session * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_StopCisSession.html */ toStopCisSession() { return this.to('StopCisSession'); } /** * Grants permission to add or update the tags for an Amazon Inspector resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_TagResource.html */ toTagResource() { return this.to('TagResource'); } /** * Grants permission to remove tags from an Amazon Inspector resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsResourceTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UntagResource.html */ toUntagResource() { return this.to('UntagResource'); } /** * Grants permission to update the settings for a CIS scan configuration * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateCisScanConfiguration.html */ toUpdateCisScanConfiguration() { return this.to('UpdateCisScanConfiguration'); } /** * Grants permission to update an existing code security integration * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateCodeSecurityIntegration.html */ toUpdateCodeSecurityIntegration() { return this.to('UpdateCodeSecurityIntegration'); } /** * Grants permission to update an existing code security scan configuration * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateCodeSecurityScanConfiguration.html */ toUpdateCodeSecurityScanConfiguration() { return this.to('UpdateCodeSecurityScanConfiguration'); } /** * Grants permission to update information about the Amazon Inspector configuration settings for an AWS account * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateConfiguration.html */ toUpdateConfiguration() { return this.to('UpdateConfiguration'); } /** * Grants permission to update ec2 deep inspection configuration by delegated administrator, member and standalone account * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateEc2DeepInspectionConfiguration.html */ toUpdateEc2DeepInspectionConfiguration() { return this.to('UpdateEc2DeepInspectionConfiguration'); } /** * Grants permission to let a customer use a KMS key to encrypt code snippets with * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateEncryptionKey.html */ toUpdateEncryptionKey() { return this.to('UpdateEncryptionKey'); } /** * Grants permission to update the settings for a findings filter * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateFilter.html */ toUpdateFilter() { return this.to('UpdateFilter'); } /** * Grants permission to update ec2 deep inspection configuration by delegated administrator for its associated member accounts * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateOrgEc2DeepInspectionConfiguration.html */ toUpdateOrgEc2DeepInspectionConfiguration() { return this.to('UpdateOrgEc2DeepInspectionConfiguration'); } /** * Grants permission to update Amazon Inspector configuration settings for an AWS organization * * Access Level: Write * * https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateOrganizationConfiguration.html */ toUpdateOrganizationConfiguration() { return this.to('UpdateOrganizationConfiguration'); } /** * Adds a resource of type Filter to the statement * * https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html * * @param ownerId - Identifier for the ownerId. * @param filterId - Identifier for the filterId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onFilter(ownerId, filterId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:owner/${ownerId}/filter/${filterId}`); } /** * Adds a resource of type Finding to the statement * * https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html * * @param findingId - Identifier for the findingId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. */ onFinding(findingId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:finding/${findingId}`); } /** * Adds a resource of type CIS Scan Configuration to the statement * * https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html * * @param ownerId - Identifier for the ownerId. * @param cISScanConfigurationId - Identifier for the cISScanConfigurationId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onCISScanConfiguration(ownerId, cISScanConfigurationId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:owner/${ownerId}/cis-configuration/${cISScanConfigurationId}`); } /** * Adds a resource of type Code Security Scan Configuration to the statement * * https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html * * @param ownerId - Identifier for the ownerId. * @param codeSecurityScanConfigurationId - Identifier for the codeSecurityScanConfigurationId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onCodeSecurityScanConfiguration(ownerId, codeSecurityScanConfigurationId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:owner/${ownerId}/codesecurity-configuration/${codeSecurityScanConfigurationId}`); } /** * Adds a resource of type Code Security Integration to the statement * * https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html * * @param codeSecurityIntegrationId - Identifier for the codeSecurityIntegrationId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onCodeSecurityIntegration(codeSecurityIntegrationId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:inspector2:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:codesecurity-integration/${codeSecurityIntegrationId}`); } /** * Filters access by the presence of tag key-value pairs in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag * * Applies to actions: * - .toCreateCisScanConfiguration() * - .toCreateCodeSecurityIntegration() * - .toCreateCodeSecurityScanConfiguration() * - .toCreateFilter() * - .toTagResource() * - .toUpdateFilter() * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsRequestTag(tagKey, value, operator) { return this.if(`aws:RequestTag/${tagKey}`, value, operator ?? 'StringLike'); } /** * Filters access by tag key-value pairs attached to the resource * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag * * Applies to actions: * - .toCreateCisScanConfiguration() * - .toDeleteCisScanConfiguration() * - .toTagResource() * - .toUntagResource() * - .toUpdateCisScanConfiguration() * - .toUpdateCodeSecurityIntegration() * - .toUpdateCodeSecurityScanConfiguration() * * Applies to resource types: * - Filter * - CIS Scan Configuration * - Code Security Scan Configuration * - Code Security Integration * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsResourceTag(tagKey, value, operator) { return this.if(`aws:ResourceTag/${tagKey}`, value, operator ?? 'StringLike'); } /** * Filters access by the presence of tag keys in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys * * Applies to actions: * - .toCreateCisScanConfiguration() * - .toCreateCodeSecurityIntegration() * - .toCreateCodeSecurityScanConfiguration() * - .toCreateFilter() * - .toTagResource() * - .toUntagResource() * - .toUpdateFilter() * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsTagKeys(value, operator) { return this.if(`aws:TagKeys`, value, operator ?? 'StringLike'); } /** * Statement provider for service [inspector2](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html). * */ constructor(props) { super(props); this.servicePrefix = 'inspector2'; this.accessLevelList = { Write: [ 'AssociateMember', 'BatchAssociateCodeSecurityScanConfiguration', 'BatchDisassociateCodeSecurityScanConfiguration', 'BatchUpdateMemberEc2DeepInspectionStatus', 'CancelFindingsReport', 'CancelSbomExport', 'CreateCisScanConfiguration', 'CreateCodeSecurityIntegration', 'CreateCodeSecurityScanConfiguration', 'CreateFilter', 'CreateFindingsReport', 'CreateSbomExport', 'DeleteCisScanConfiguration', 'DeleteCodeSecurityIntegration', 'DeleteCodeSecurityScanConfiguration', 'DeleteFilter', 'Disable', 'DisableDelegatedAdminAccount', 'DisassociateMember', 'Enable', 'EnableDelegatedAdminAccount', 'ResetEncryptionKey', 'SendCisSessionHealth', 'SendCisSessionTelemetry', 'StartCisSession', 'StartCodeSecurityScan', 'StopCisSession', 'UpdateCisScanConfiguration', 'UpdateCodeSecurityIntegration', 'UpdateCodeSecurityScanConfiguration', 'UpdateConfiguration', 'UpdateEc2DeepInspectionConfiguration', 'UpdateEncryptionKey', 'UpdateFilter', 'UpdateOrgEc2DeepInspectionConfiguration', 'UpdateOrganizationConfiguration' ], Read: [ 'BatchGetAccountStatus', 'BatchGetCodeSnippet', 'BatchGetFindingDetails', 'BatchGetFreeTrialInfo', 'BatchGetMemberEc2DeepInspectionStatus', 'DescribeOrganizationConfiguration', 'GetCisScanReport', 'GetClustersForImage', 'GetCodeSecurityIntegration', 'GetCodeSecurityScan', 'GetCodeSecurityScanConfiguration', 'GetConfiguration', 'GetDelegatedAdminAccount', 'GetEc2DeepInspectionConfiguration', 'GetEncryptionKey', 'GetFindingsReportStatus', 'GetMember', 'GetSbomExport', 'ListTagsForResource', 'SearchVulnerabilities' ], List: [ 'GetCisScanResultDetails', 'ListAccountPermissions', 'ListCisScanConfigurations', 'ListCisScanResultsAggregatedByChecks', 'ListCisScanResultsAggregatedByTargetResource', 'ListCisScans', 'ListCodeSecurityIntegrations', 'ListCodeSecurityScanConfigurationAssociations', 'ListCodeSecurityScanConfigurations', 'ListCoverage', 'ListCoverageStatistics', 'ListDelegatedAdminAccounts', 'ListFilters', 'ListFindingAggregations', 'ListFindings', 'ListMembers', 'ListUsageTotals' ], Tagging: [ 'TagResource', 'UntagResource' ] }; } } exports.Inspector2 = Inspector2; //# sourceMappingURL=data:application/json;base64,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