UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,610 lines 118 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [iot](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Iot extends PolicyStatement { servicePrefix: string; /** * Grants permission to accept a pending certificate transfer * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_AcceptCertificateTransfer.html */ toAcceptCertificateTransfer(): this; /** * Grants permission to add a thing to the specified billing group * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_AddThingToBillingGroup.html */ toAddThingToBillingGroup(): this; /** * Grants permission to add a thing to the specified thing group * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_AddThingToThingGroup.html */ toAddThingToThingGroup(): this; /** * Grants permission to associate SBOM files to a package version * * Access Level: Write * * Dependent actions: * - iot:GetIndexingConfiguration * * https://docs.aws.amazon.com/iot/latest/apireference/API_AssociateSbomWithPackageVersion.html */ toAssociateSbomWithPackageVersion(): this; /** * Grants permission to associate a group with a continuous job * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_AssociateTargetsWithJob.html */ toAssociateTargetsWithJob(): this; /** * Grants permission to attach a policy to the specified target * * Access Level: Permissions management * * https://docs.aws.amazon.com/iot/latest/apireference/API_AttachPolicy.html */ toAttachPolicy(): this; /** * Grants permission to attach the specified policy to the specified principal (certificate or other credential) * * Access Level: Permissions management * * https://docs.aws.amazon.com/iot/latest/apireference/API_AttachPrincipalPolicy.html */ toAttachPrincipalPolicy(): this; /** * Grants permission to associate a Device Defender security profile with a thing group or with this account * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_AttachSecurityProfile.html */ toAttachSecurityProfile(): this; /** * Grants permission to attach the specified principal to the specified thing * * Access Level: Write * * Possible conditions: * - .ifThingArn() * * https://docs.aws.amazon.com/iot/latest/apireference/API_AttachThingPrincipal.html */ toAttachThingPrincipal(): this; /** * Grants permission to cancel a mitigation action task that is in progress * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CancelAuditMitigationActionsTask.html */ toCancelAuditMitigationActionsTask(): this; /** * Grants permission to cancel an audit that is in progress. The audit can be either scheduled or on-demand * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CancelAuditTask.html */ toCancelAuditTask(): this; /** * Grants permission to cancel a pending transfer for the specified certificate * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CancelCertificateTransfer.html */ toCancelCertificateTransfer(): this; /** * Grants permission to cancel a Device Defender ML Detect mitigation action * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CancelDetectMitigationActionsTask.html */ toCancelDetectMitigationActionsTask(): this; /** * Grants permission to cancel a job * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CancelJob.html */ toCancelJob(): this; /** * Grants permission to cancel a job execution on a particular device * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CancelJobExecution.html */ toCancelJobExecution(): this; /** * Grants permission to clear the default authorizer * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_ClearDefaultAuthorizer.html */ toClearDefaultAuthorizer(): this; /** * Grants permission to close a tunnel * * Access Level: Write * * Possible conditions: * - .ifDelete() * * https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_CloseTunnel.html */ toCloseTunnel(): this; /** * Grants permission to confirm a http url TopicRuleDestinationDestination * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_ConfirmTopicRuleDestination.html */ toConfirmTopicRuleDestination(): this; /** * Grants permission to connect as the specified client * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html */ toConnect(): this; /** * Grants permission to create a Device Defender audit suppression * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateAuditSuppression.html */ toCreateAuditSuppression(): this; /** * Grants permission to create an authorizer * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateAuthorizer.html */ toCreateAuthorizer(): this; /** * Grants permission to create a billing group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateBillingGroup.html */ toCreateBillingGroup(): this; /** * Grants permission to create an X.509 certificate using the specified certificate signing request * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCertificateFromCsr.html */ toCreateCertificateFromCsr(): this; /** * Grants permission to create a certificate provider * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCertificateProvider.html */ toCreateCertificateProvider(): this; /** * Grants permission to create a command that can be used to start new executions against a device * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCommand.html */ toCreateCommand(): this; /** * Grants permission to create a custom metric for device side metric reporting and monitoring * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCustomMetric.html */ toCreateCustomMetric(): this; /** * Grants permission to define a dimension that can be used to to limit the scope of a metric used in a security profile * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDimension.html */ toCreateDimension(): this; /** * Grants permission to create a domain configuration * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifDomainName() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDomainConfiguration.html */ toCreateDomainConfiguration(): this; /** * Grants permission to create a Dynamic Thing Group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDynamicThingGroup.html */ toCreateDynamicThingGroup(): this; /** * Grants permission to create a fleet metric * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateFleetMetric.html */ toCreateFleetMetric(): this; /** * Grants permission to create a job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateJob.html */ toCreateJob(): this; /** * Grants permission to create a job template * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateJobTemplate.html */ toCreateJobTemplate(): this; /** * Grants permission to create a 2048 bit RSA key pair and issues an X.509 certificate using the issued public key * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateKeysAndCertificate.html */ toCreateKeysAndCertificate(): this; /** * Grants permission to define an action that can be applied to audit findings by using StartAuditMitigationActionsTask * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateMitigationAction.html */ toCreateMitigationAction(): this; /** * Grants permission to create an OTA update job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateOTAUpdate.html */ toCreateOTAUpdate(): this; /** * Grants permission to create a software package that you can deploy to your devices * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iot:GetIndexingConfiguration * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePackage.html */ toCreatePackage(): this; /** * Grants permission to create a version under the specified package * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iot:GetIndexingConfiguration * - s3:GetObjectVersion * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePackageVersion.html */ toCreatePackageVersion(): this; /** * Grants permission to create an AWS IoT policy * * Access Level: Permissions management * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePolicy.html */ toCreatePolicy(): this; /** * Grants permission to create a new version of the specified AWS IoT policy * * Access Level: Permissions management * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePolicyVersion.html */ toCreatePolicyVersion(): this; /** * Grants permission to create a provisioning claim * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningClaim.html */ toCreateProvisioningClaim(): this; /** * Grants permission to create a fleet provisioning template * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningTemplate.html */ toCreateProvisioningTemplate(): this; /** * Grants permission to create a new version of a fleet provisioning template * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningTemplateVersion.html */ toCreateProvisioningTemplateVersion(): this; /** * Grants permission to create a role alias * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateRoleAlias.html */ toCreateRoleAlias(): this; /** * Grants permission to create a scheduled audit that is run at a specified time interval * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateScheduledAudit.html */ toCreateScheduledAudit(): this; /** * Grants permission to create a Device Defender security profile * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateSecurityProfile.html */ toCreateSecurityProfile(): this; /** * Grants permission to create a new AWS IoT stream * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateStream.html */ toCreateStream(): this; /** * Grants permission to create a thing in the thing registry * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThing.html */ toCreateThing(): this; /** * Grants permission to create a thing group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThingGroup.html */ toCreateThingGroup(): this; /** * Grants permission to create a new thing type * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThingType.html */ toCreateThingType(): this; /** * Grants permission to create a rule * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateTopicRule.html */ toCreateTopicRule(): this; /** * Grants permission to create a TopicRuleDestination * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_CreateTopicRuleDestination.html */ toCreateTopicRuleDestination(): this; /** * Grants permission to delete the audit configuration associated with the account * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAccountAuditConfiguration.html */ toDeleteAccountAuditConfiguration(): this; /** * Grants permission to delete a Device Defender audit suppression * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAuditSuppression.html */ toDeleteAuditSuppression(): this; /** * Grants permission to delete the specified authorizer * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAuthorizer.html */ toDeleteAuthorizer(): this; /** * Grants permission to delete the specified billing group * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteBillingGroup.html */ toDeleteBillingGroup(): this; /** * Grants permission to delete a registered CA certificate * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCACertificate.html */ toDeleteCACertificate(): this; /** * Grants permission to delete the specified certificate * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCertificate.html */ toDeleteCertificate(): this; /** * Grants permission to delete a certificate provider * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCertificateProvider.html */ toDeleteCertificateProvider(): this; /** * Grants permission to delete a command * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCommand.html */ toDeleteCommand(): this; /** * Grants permission to delete a command execution * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCommandExecution.html */ toDeleteCommandExecution(): this; /** * Grants permission to disconnect the specified connection * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html */ toDeleteConnection(): this; /** * Grants permission to deletes the specified custom metric from your AWS account * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCustomMetric.html */ toDeleteCustomMetric(): this; /** * Grants permission to remove the specified dimension from your AWS account * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDimension.html */ toDeleteDimension(): this; /** * Grants permission to delete a domain configuration * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDomainConfiguration.html */ toDeleteDomainConfiguration(): this; /** * Grants permission to delete the specified Dynamic Thing Group * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDynamicThingGroup.html */ toDeleteDynamicThingGroup(): this; /** * Grants permission to delete the specified fleet metric * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteFleetMetric.html */ toDeleteFleetMetric(): this; /** * Grants permission to delete a job and its related job executions * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJob.html */ toDeleteJob(): this; /** * Grants permission to delete a job execution * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJobExecution.html */ toDeleteJobExecution(): this; /** * Grants permission to delete a job template * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJobTemplate.html */ toDeleteJobTemplate(): this; /** * Grants permission to delete a defined mitigation action from your AWS account * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteMitigationAction.html */ toDeleteMitigationAction(): this; /** * Grants permission to delete an OTA update job * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteOTAUpdate.html */ toDeleteOTAUpdate(): this; /** * Grants permission to delete a package * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePackage.html */ toDeletePackage(): this; /** * Grants permission to delete a version of the specified package * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePackageVersion.html */ toDeletePackageVersion(): this; /** * Grants permission to delete the specified policy * * Access Level: Permissions management * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePolicy.html */ toDeletePolicy(): this; /** * Grants permission to Delete the specified version of the specified policy * * Access Level: Permissions management * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePolicyVersion.html */ toDeletePolicyVersion(): this; /** * Grants permission to delete a fleet provisioning template * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteProvisioningTemplate.html */ toDeleteProvisioningTemplate(): this; /** * Grants permission to delete a fleet provisioning template version * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteProvisioningTemplateVersion.html */ toDeleteProvisioningTemplateVersion(): this; /** * Grants permission to delete a CA certificate registration code * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteRegistrationCode.html */ toDeleteRegistrationCode(): this; /** * Grants permission to delete the specified role alias * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteRoleAlias.html */ toDeleteRoleAlias(): this; /** * Grants permission to delete a scheduled audit * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteScheduledAudit.html */ toDeleteScheduledAudit(): this; /** * Grants permission to delete a Device Defender security profile * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteSecurityProfile.html */ toDeleteSecurityProfile(): this; /** * Grants permission to delete a specified stream * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteStream.html */ toDeleteStream(): this; /** * Grants permission to delete the specified thing * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThing.html */ toDeleteThing(): this; /** * Grants permission to delete the specified thing group * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThingGroup.html */ toDeleteThingGroup(): this; /** * Grants permission to delete the specified thing shadow * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html */ toDeleteThingShadow(): this; /** * Grants permission to delete the specified thing type * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThingType.html */ toDeleteThingType(): this; /** * Grants permission to delete the specified rule * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteTopicRule.html */ toDeleteTopicRule(): this; /** * Grants permission to delete a TopicRuleDestination * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteTopicRuleDestination.html */ toDeleteTopicRuleDestination(): this; /** * Grants permission to delete the specified v2 logging level * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteV2LoggingLevel.html */ toDeleteV2LoggingLevel(): this; /** * Grants permission to deprecate the specified thing type * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DeprecateThingType.html */ toDeprecateThingType(): this; /** * Grants permission to get information about audit configurations for the account * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAccountAuditConfiguration.html */ toDescribeAccountAuditConfiguration(): this; /** * Grants permission to get information about a single audit finding. Properties include the reason for noncompliance, the severity of the issue, and when the audit that returned the finding was started * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditFinding.html */ toDescribeAuditFinding(): this; /** * Grants permission to get information about an audit mitigation task that is used to apply mitigation actions to a set of audit findings * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditMitigationActionsTask.html */ toDescribeAuditMitigationActionsTask(): this; /** * Grants permission to get information about a Device Defender audit suppression * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditSuppression.html */ toDescribeAuditSuppression(): this; /** * Grants permission to get information about a Device Defender audit * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditTask.html */ toDescribeAuditTask(): this; /** * Grants permission to describe an authorizer * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuthorizer.html */ toDescribeAuthorizer(): this; /** * Grants permission to get information about the specified billing group * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeBillingGroup.html */ toDescribeBillingGroup(): this; /** * Grants permission to describe a registered CA certificate * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCACertificate.html */ toDescribeCACertificate(): this; /** * Grants permission to get information about the specified certificate * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCertificate.html */ toDescribeCertificate(): this; /** * Grants permission to describe a certificate provider * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCertificateProvider.html */ toDescribeCertificateProvider(): this; /** * Grants permission to describe a custom metric that is defined in your AWS account * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCustomMetric.html */ toDescribeCustomMetric(): this; /** * Grants permission to describe the default authorizer * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDefaultAuthorizer.html */ toDescribeDefaultAuthorizer(): this; /** * Grants permission to describe a Device Defender ML Detect mitigation action * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDetectMitigationActionsTask.html */ toDescribeDetectMitigationActionsTask(): this; /** * Grants permission to get details about a dimension that is defined in your AWS account * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDimension.html */ toDescribeDimension(): this; /** * Grants permission to get information about the domain configuration * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDomainConfiguration.html */ toDescribeDomainConfiguration(): this; /** * Grants permission to describe the encryption configuration for the account * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEncryptionConfiguration.html */ toDescribeEncryptionConfiguration(): this; /** * Grants permission to get a unique endpoint specific to the AWS account making the call * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEndpoint.html */ toDescribeEndpoint(): this; /** * Grants permission to get account event configurations * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEventConfigurations.html */ toDescribeEventConfigurations(): this; /** * Grants permission to get information about the specified fleet metric * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeFleetMetric.html */ toDescribeFleetMetric(): this; /** * Grants permission to get information about the specified index * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeIndex.html */ toDescribeIndex(): this; /** * Grants permission to describe a job * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJob.html */ toDescribeJob(): this; /** * Grants permission to describe a job execution * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJobExecution.html */ toDescribeJobExecution(): this; /** * Grants permission to describe a job template * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJobTemplate.html */ toDescribeJobTemplate(): this; /** * Grants permission to describe a managed job template * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeManagedJobTemplate.html */ toDescribeManagedJobTemplate(): this; /** * Grants permission to get information about a mitigation action * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeMitigationAction.html */ toDescribeMitigationAction(): this; /** * Grants permission to get information about a fleet provisioning template * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeProvisioningTemplate.html */ toDescribeProvisioningTemplate(): this; /** * Grants permission to get information about a fleet provisioning template version * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeProvisioningTemplateVersion.html */ toDescribeProvisioningTemplateVersion(): this; /** * Grants permission to describe a role alias * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeRoleAlias.html */ toDescribeRoleAlias(): this; /** * Grants permission to get information about a scheduled audit * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeScheduledAudit.html */ toDescribeScheduledAudit(): this; /** * Grants permission to get information about a Device Defender security profile * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeSecurityProfile.html */ toDescribeSecurityProfile(): this; /** * Grants permission to get information about the specified stream * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeStream.html */ toDescribeStream(): this; /** * Grants permission to get information about the specified thing * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThing.html */ toDescribeThing(): this; /** * Grants permission to get information about the specified thing group * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingGroup.html */ toDescribeThingGroup(): this; /** * Grants permission to get information about the bulk thing registration task * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingRegistrationTask.html */ toDescribeThingRegistrationTask(): this; /** * Grants permission to get information about the specified thing type * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingType.html */ toDescribeThingType(): this; /** * Grants permission to describe a tunnel * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_DescribeTunnel.html */ toDescribeTunnel(): this; /** * Grants permission to detach a policy from the specified target * * Access Level: Permissions management * * https://docs.aws.amazon.com/iot/latest/apireference/API_DetachPolicy.html */ toDetachPolicy(): this; /** * Grants permission to remove the specified policy from the specified certificate * * Access Level: Permissions management * * https://docs.aws.amazon.com/iot/latest/apireference/API_DetachPrincipalPolicy.html */ toDetachPrincipalPolicy(): this; /** * Grants permission to disassociate a Device Defender security profile from a thing group or from this account * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DetachSecurityProfile.html */ toDetachSecurityProfile(): this; /** * Grants permission to detach the specified principal from the specified thing * * Access Level: Write * * Possible conditions: * - .ifThingArn() * * https://docs.aws.amazon.com/iot/latest/apireference/API_DetachThingPrincipal.html */ toDetachThingPrincipal(): this; /** * Grants permission to disable the specified rule * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DisableTopicRule.html */ toDisableTopicRule(): this; /** * Grants permission to disassociate SBOM files from a package version * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_DisassociateSbomFromPackageVersion.html */ toDisassociateSbomFromPackageVersion(): this; /** * Grants permission to enable the specified rule * * Access Level: Write * * https://docs.aws.amazon.com/iot/latest/apireference/API_EnableTopicRule.html */ toEnableTopicRule(): this; /** * Grants permission to fetch a Device Defender's ML Detect Security Profile training model's status * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetBehaviorModelTrainingSummaries.html */ toGetBehaviorModelTrainingSummaries(): this; /** * Grants permission to get buckets aggregation for IoT fleet index * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetBucketsAggregation.html */ toGetBucketsAggregation(): this; /** * Grants permission to get cardinality for IoT fleet index * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetCardinality.html */ toGetCardinality(): this; /** * Grants permission to get the information about the command * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetCommand.html */ toGetCommand(): this; /** * Grants permission to get the information of a command execution * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetCommandExecution.html */ toGetCommandExecution(): this; /** * Grants permission to retrieve the specified connection information * * Access Level: Write * * Possible conditions: * - .ifIncludeSocketInformation() * * https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html */ toGetConnection(): this; /** * Grants permission to get effective policies * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetEffectivePolicies.html */ toGetEffectivePolicies(): this; /** * Grants permission to get current fleet indexing configuration * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetIndexingConfiguration.html */ toGetIndexingConfiguration(): this; /** * Grants permission to get a job document * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetJobDocument.html */ toGetJobDocument(): this; /** * Grants permission to get the logging options * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetLoggingOptions.html */ toGetLoggingOptions(): this; /** * Grants permission to get the information about the OTA update job * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetOTAUpdate.html */ toGetOTAUpdate(): this; /** * Grants permission to get the information about the package * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackage.html */ toGetPackage(): this; /** * Grants permission to get the package configuration of the account * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackageConfiguration.html */ toGetPackageConfiguration(): this; /** * Grants permission to get the version of the package * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackageVersion.html */ toGetPackageVersion(): this; /** * Grants permission to get percentiles for IoT fleet index * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetPercentiles.html */ toGetPercentiles(): this; /** * Grants permission to get information about the specified policy with the policy document of the default version * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetPolicy.html */ toGetPolicy(): this; /** * Grants permission to get information about the specified policy version * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetPolicyVersion.html */ toGetPolicyVersion(): this; /** * Grants permission to get a registration code used to register a CA certificate with AWS IoT * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetRegistrationCode.html */ toGetRegistrationCode(): this; /** * Grants permission to get the retained message on the specified topic * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html */ toGetRetainedMessage(): this; /** * Grants permission to get statistics for IoT fleet index * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetStatistics.html */ toGetStatistics(): this; /** * Grants permission to get the thing's connectivity data * * Access Level: Read * * Possible conditions: * - .ifIncludeSocketInformation() * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetThingConnectivityData.html */ toGetThingConnectivityData(): this; /** * Grants permission to get the thing shadow * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html */ toGetThingShadow(): this; /** * Grants permission to get information about the specified rule * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetTopicRule.html */ toGetTopicRule(): this; /** * Grants permission to get a TopicRuleDestination * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetTopicRuleDestination.html */ toGetTopicRuleDestination(): this; /** * Grants permission to get v2 logging options * * Access Level: Read * * https://docs.aws.amazon.com/iot/latest/apireference/API_GetV2LoggingOptions.html */ toGetV2LoggingOptions(): this; /** * Grants permission to list the active violations for a given Device Defender security profile or Thing * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListActiveViolations.html */ toListActiveViolations(): this; /** * Grants permission to list the policies attached to the specified thing group * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListAttachedPolicies.html */ toListAttachedPolicies(): this; /** * Grants permission to list the findings (results) of a Device Defender audit or of the audits performed during a specified time period * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditFindings.html */ toListAuditFindings(): this; /** * Grants permission to get the status of audit mitigation action tasks that were executed * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditMitigationActionsExecutions.html */ toListAuditMitigationActionsExecutions(): this; /** * Grants permission to get a list of audit mitigation action tasks that match the specified filters * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditMitigationActionsTasks.html */ toListAuditMitigationActionsTasks(): this; /** * Grants permission to list your Device Defender audit suppressions * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditSuppressions.html */ toListAuditSuppressions(): this; /** * Grants permission to list the Device Defender audits that have been performed during a given time period * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditTasks.html */ toListAuditTasks(): this; /** * Grants permission to list the authorizers registered in your account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuthorizers.html */ toListAuthorizers(): this; /** * Grants permission to list all billing groups * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListBillingGroups.html */ toListBillingGroups(): this; /** * Grants permission to list the CA certificates registered for your AWS account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListCACertificates.html */ toListCACertificates(): this; /** * Grants permission to list certificate providers in the account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificateProviders.html */ toListCertificateProviders(): this; /** * Grants permission to list your certificates * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificates.html */ toListCertificates(): this; /** * Grants permission to list the device certificates signed by the specified CA certificate * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificatesByCA.html */ toListCertificatesByCA(): this; /** * Grants permission to list commands executions in the account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListCommandExecutions.html */ toListCommandExecutions(): this; /** * Grants permission to list commands in the account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListCommands.html */ toListCommands(): this; /** * Grants permission to list the custom metrics in your AWS account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListCustomMetrics.html */ toListCustomMetrics(): this; /** * Grants permission to lists mitigation actions executions for a Device Defender ML Detect Security Profile * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListDetectMitigationActionsExecutions.html */ toListDetectMitigationActionsExecutions(): this; /** * Grants permission to list Device Defender ML Detect mitigation actions tasks * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListDetectMitigationActionsTasks.html */ toListDetectMitigationActionsTasks(): this; /** * Grants permission to list the dimensions that are defined for your AWS account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListDimensions.html */ toListDimensions(): this; /** * Grants permission to list the domain configuration created by your AWS account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListDomainConfigurations.html */ toListDomainConfigurations(): this; /** * Grants permission to list the fleet metrics in your account * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListFleetMetrics.html */ toListFleetMetrics(): this; /** * Grants permission to list all indices for fleet index * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListIndices.html */ toListIndices(): this; /** * Grants permission to list the job executions for a job * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobExecutionsForJob.html */ toListJobExecutionsForJob(): this; /** * Grants permission to list the job executions for the specified thing * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobExecutionsForThing.html */ toListJobExecutionsForThing(): this; /** * Grants permission to list job templates * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobTemplates.html */ toListJobTemplates(): this; /** * Grants permission to list jobs * * Access Level: List * * https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobs.html */ toListJobs(): th