cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
1,610 lines • 118 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
import { aws_iam as iam } from "aws-cdk-lib";
/**
* Statement provider for service [iot](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Iot extends PolicyStatement {
servicePrefix: string;
/**
* Grants permission to accept a pending certificate transfer
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AcceptCertificateTransfer.html
*/
toAcceptCertificateTransfer(): this;
/**
* Grants permission to add a thing to the specified billing group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AddThingToBillingGroup.html
*/
toAddThingToBillingGroup(): this;
/**
* Grants permission to add a thing to the specified thing group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AddThingToThingGroup.html
*/
toAddThingToThingGroup(): this;
/**
* Grants permission to associate SBOM files to a package version
*
* Access Level: Write
*
* Dependent actions:
* - iot:GetIndexingConfiguration
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AssociateSbomWithPackageVersion.html
*/
toAssociateSbomWithPackageVersion(): this;
/**
* Grants permission to associate a group with a continuous job
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AssociateTargetsWithJob.html
*/
toAssociateTargetsWithJob(): this;
/**
* Grants permission to attach a policy to the specified target
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AttachPolicy.html
*/
toAttachPolicy(): this;
/**
* Grants permission to attach the specified policy to the specified principal (certificate or other credential)
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AttachPrincipalPolicy.html
*/
toAttachPrincipalPolicy(): this;
/**
* Grants permission to associate a Device Defender security profile with a thing group or with this account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AttachSecurityProfile.html
*/
toAttachSecurityProfile(): this;
/**
* Grants permission to attach the specified principal to the specified thing
*
* Access Level: Write
*
* Possible conditions:
* - .ifThingArn()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_AttachThingPrincipal.html
*/
toAttachThingPrincipal(): this;
/**
* Grants permission to cancel a mitigation action task that is in progress
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CancelAuditMitigationActionsTask.html
*/
toCancelAuditMitigationActionsTask(): this;
/**
* Grants permission to cancel an audit that is in progress. The audit can be either scheduled or on-demand
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CancelAuditTask.html
*/
toCancelAuditTask(): this;
/**
* Grants permission to cancel a pending transfer for the specified certificate
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CancelCertificateTransfer.html
*/
toCancelCertificateTransfer(): this;
/**
* Grants permission to cancel a Device Defender ML Detect mitigation action
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CancelDetectMitigationActionsTask.html
*/
toCancelDetectMitigationActionsTask(): this;
/**
* Grants permission to cancel a job
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CancelJob.html
*/
toCancelJob(): this;
/**
* Grants permission to cancel a job execution on a particular device
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CancelJobExecution.html
*/
toCancelJobExecution(): this;
/**
* Grants permission to clear the default authorizer
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ClearDefaultAuthorizer.html
*/
toClearDefaultAuthorizer(): this;
/**
* Grants permission to close a tunnel
*
* Access Level: Write
*
* Possible conditions:
* - .ifDelete()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_CloseTunnel.html
*/
toCloseTunnel(): this;
/**
* Grants permission to confirm a http url TopicRuleDestinationDestination
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ConfirmTopicRuleDestination.html
*/
toConfirmTopicRuleDestination(): this;
/**
* Grants permission to connect as the specified client
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html
*/
toConnect(): this;
/**
* Grants permission to create a Device Defender audit suppression
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateAuditSuppression.html
*/
toCreateAuditSuppression(): this;
/**
* Grants permission to create an authorizer
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateAuthorizer.html
*/
toCreateAuthorizer(): this;
/**
* Grants permission to create a billing group
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateBillingGroup.html
*/
toCreateBillingGroup(): this;
/**
* Grants permission to create an X.509 certificate using the specified certificate signing request
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCertificateFromCsr.html
*/
toCreateCertificateFromCsr(): this;
/**
* Grants permission to create a certificate provider
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCertificateProvider.html
*/
toCreateCertificateProvider(): this;
/**
* Grants permission to create a command that can be used to start new executions against a device
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCommand.html
*/
toCreateCommand(): this;
/**
* Grants permission to create a custom metric for device side metric reporting and monitoring
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateCustomMetric.html
*/
toCreateCustomMetric(): this;
/**
* Grants permission to define a dimension that can be used to to limit the scope of a metric used in a security profile
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDimension.html
*/
toCreateDimension(): this;
/**
* Grants permission to create a domain configuration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifDomainName()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDomainConfiguration.html
*/
toCreateDomainConfiguration(): this;
/**
* Grants permission to create a Dynamic Thing Group
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateDynamicThingGroup.html
*/
toCreateDynamicThingGroup(): this;
/**
* Grants permission to create a fleet metric
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateFleetMetric.html
*/
toCreateFleetMetric(): this;
/**
* Grants permission to create a job
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateJob.html
*/
toCreateJob(): this;
/**
* Grants permission to create a job template
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateJobTemplate.html
*/
toCreateJobTemplate(): this;
/**
* Grants permission to create a 2048 bit RSA key pair and issues an X.509 certificate using the issued public key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateKeysAndCertificate.html
*/
toCreateKeysAndCertificate(): this;
/**
* Grants permission to define an action that can be applied to audit findings by using StartAuditMitigationActionsTask
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateMitigationAction.html
*/
toCreateMitigationAction(): this;
/**
* Grants permission to create an OTA update job
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateOTAUpdate.html
*/
toCreateOTAUpdate(): this;
/**
* Grants permission to create a software package that you can deploy to your devices
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iot:GetIndexingConfiguration
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePackage.html
*/
toCreatePackage(): this;
/**
* Grants permission to create a version under the specified package
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iot:GetIndexingConfiguration
* - s3:GetObjectVersion
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePackageVersion.html
*/
toCreatePackageVersion(): this;
/**
* Grants permission to create an AWS IoT policy
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePolicy.html
*/
toCreatePolicy(): this;
/**
* Grants permission to create a new version of the specified AWS IoT policy
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreatePolicyVersion.html
*/
toCreatePolicyVersion(): this;
/**
* Grants permission to create a provisioning claim
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningClaim.html
*/
toCreateProvisioningClaim(): this;
/**
* Grants permission to create a fleet provisioning template
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iam:PassRole
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningTemplate.html
*/
toCreateProvisioningTemplate(): this;
/**
* Grants permission to create a new version of a fleet provisioning template
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateProvisioningTemplateVersion.html
*/
toCreateProvisioningTemplateVersion(): this;
/**
* Grants permission to create a role alias
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iam:PassRole
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateRoleAlias.html
*/
toCreateRoleAlias(): this;
/**
* Grants permission to create a scheduled audit that is run at a specified time interval
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateScheduledAudit.html
*/
toCreateScheduledAudit(): this;
/**
* Grants permission to create a Device Defender security profile
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateSecurityProfile.html
*/
toCreateSecurityProfile(): this;
/**
* Grants permission to create a new AWS IoT stream
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateStream.html
*/
toCreateStream(): this;
/**
* Grants permission to create a thing in the thing registry
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThing.html
*/
toCreateThing(): this;
/**
* Grants permission to create a thing group
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThingGroup.html
*/
toCreateThingGroup(): this;
/**
* Grants permission to create a new thing type
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateThingType.html
*/
toCreateThingType(): this;
/**
* Grants permission to create a rule
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateTopicRule.html
*/
toCreateTopicRule(): this;
/**
* Grants permission to create a TopicRuleDestination
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_CreateTopicRuleDestination.html
*/
toCreateTopicRuleDestination(): this;
/**
* Grants permission to delete the audit configuration associated with the account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAccountAuditConfiguration.html
*/
toDeleteAccountAuditConfiguration(): this;
/**
* Grants permission to delete a Device Defender audit suppression
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAuditSuppression.html
*/
toDeleteAuditSuppression(): this;
/**
* Grants permission to delete the specified authorizer
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteAuthorizer.html
*/
toDeleteAuthorizer(): this;
/**
* Grants permission to delete the specified billing group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteBillingGroup.html
*/
toDeleteBillingGroup(): this;
/**
* Grants permission to delete a registered CA certificate
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCACertificate.html
*/
toDeleteCACertificate(): this;
/**
* Grants permission to delete the specified certificate
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCertificate.html
*/
toDeleteCertificate(): this;
/**
* Grants permission to delete a certificate provider
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCertificateProvider.html
*/
toDeleteCertificateProvider(): this;
/**
* Grants permission to delete a command
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCommand.html
*/
toDeleteCommand(): this;
/**
* Grants permission to delete a command execution
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCommandExecution.html
*/
toDeleteCommandExecution(): this;
/**
* Grants permission to disconnect the specified connection
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html
*/
toDeleteConnection(): this;
/**
* Grants permission to deletes the specified custom metric from your AWS account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteCustomMetric.html
*/
toDeleteCustomMetric(): this;
/**
* Grants permission to remove the specified dimension from your AWS account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDimension.html
*/
toDeleteDimension(): this;
/**
* Grants permission to delete a domain configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDomainConfiguration.html
*/
toDeleteDomainConfiguration(): this;
/**
* Grants permission to delete the specified Dynamic Thing Group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteDynamicThingGroup.html
*/
toDeleteDynamicThingGroup(): this;
/**
* Grants permission to delete the specified fleet metric
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteFleetMetric.html
*/
toDeleteFleetMetric(): this;
/**
* Grants permission to delete a job and its related job executions
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJob.html
*/
toDeleteJob(): this;
/**
* Grants permission to delete a job execution
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJobExecution.html
*/
toDeleteJobExecution(): this;
/**
* Grants permission to delete a job template
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteJobTemplate.html
*/
toDeleteJobTemplate(): this;
/**
* Grants permission to delete a defined mitigation action from your AWS account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteMitigationAction.html
*/
toDeleteMitigationAction(): this;
/**
* Grants permission to delete an OTA update job
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteOTAUpdate.html
*/
toDeleteOTAUpdate(): this;
/**
* Grants permission to delete a package
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePackage.html
*/
toDeletePackage(): this;
/**
* Grants permission to delete a version of the specified package
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePackageVersion.html
*/
toDeletePackageVersion(): this;
/**
* Grants permission to delete the specified policy
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePolicy.html
*/
toDeletePolicy(): this;
/**
* Grants permission to Delete the specified version of the specified policy
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeletePolicyVersion.html
*/
toDeletePolicyVersion(): this;
/**
* Grants permission to delete a fleet provisioning template
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteProvisioningTemplate.html
*/
toDeleteProvisioningTemplate(): this;
/**
* Grants permission to delete a fleet provisioning template version
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteProvisioningTemplateVersion.html
*/
toDeleteProvisioningTemplateVersion(): this;
/**
* Grants permission to delete a CA certificate registration code
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteRegistrationCode.html
*/
toDeleteRegistrationCode(): this;
/**
* Grants permission to delete the specified role alias
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteRoleAlias.html
*/
toDeleteRoleAlias(): this;
/**
* Grants permission to delete a scheduled audit
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteScheduledAudit.html
*/
toDeleteScheduledAudit(): this;
/**
* Grants permission to delete a Device Defender security profile
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteSecurityProfile.html
*/
toDeleteSecurityProfile(): this;
/**
* Grants permission to delete a specified stream
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteStream.html
*/
toDeleteStream(): this;
/**
* Grants permission to delete the specified thing
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThing.html
*/
toDeleteThing(): this;
/**
* Grants permission to delete the specified thing group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThingGroup.html
*/
toDeleteThingGroup(): this;
/**
* Grants permission to delete the specified thing shadow
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html
*/
toDeleteThingShadow(): this;
/**
* Grants permission to delete the specified thing type
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteThingType.html
*/
toDeleteThingType(): this;
/**
* Grants permission to delete the specified rule
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteTopicRule.html
*/
toDeleteTopicRule(): this;
/**
* Grants permission to delete a TopicRuleDestination
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteTopicRuleDestination.html
*/
toDeleteTopicRuleDestination(): this;
/**
* Grants permission to delete the specified v2 logging level
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeleteV2LoggingLevel.html
*/
toDeleteV2LoggingLevel(): this;
/**
* Grants permission to deprecate the specified thing type
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DeprecateThingType.html
*/
toDeprecateThingType(): this;
/**
* Grants permission to get information about audit configurations for the account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAccountAuditConfiguration.html
*/
toDescribeAccountAuditConfiguration(): this;
/**
* Grants permission to get information about a single audit finding. Properties include the reason for noncompliance, the severity of the issue, and when the audit that returned the finding was started
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditFinding.html
*/
toDescribeAuditFinding(): this;
/**
* Grants permission to get information about an audit mitigation task that is used to apply mitigation actions to a set of audit findings
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditMitigationActionsTask.html
*/
toDescribeAuditMitigationActionsTask(): this;
/**
* Grants permission to get information about a Device Defender audit suppression
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditSuppression.html
*/
toDescribeAuditSuppression(): this;
/**
* Grants permission to get information about a Device Defender audit
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditTask.html
*/
toDescribeAuditTask(): this;
/**
* Grants permission to describe an authorizer
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuthorizer.html
*/
toDescribeAuthorizer(): this;
/**
* Grants permission to get information about the specified billing group
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeBillingGroup.html
*/
toDescribeBillingGroup(): this;
/**
* Grants permission to describe a registered CA certificate
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCACertificate.html
*/
toDescribeCACertificate(): this;
/**
* Grants permission to get information about the specified certificate
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCertificate.html
*/
toDescribeCertificate(): this;
/**
* Grants permission to describe a certificate provider
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCertificateProvider.html
*/
toDescribeCertificateProvider(): this;
/**
* Grants permission to describe a custom metric that is defined in your AWS account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeCustomMetric.html
*/
toDescribeCustomMetric(): this;
/**
* Grants permission to describe the default authorizer
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDefaultAuthorizer.html
*/
toDescribeDefaultAuthorizer(): this;
/**
* Grants permission to describe a Device Defender ML Detect mitigation action
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDetectMitigationActionsTask.html
*/
toDescribeDetectMitigationActionsTask(): this;
/**
* Grants permission to get details about a dimension that is defined in your AWS account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDimension.html
*/
toDescribeDimension(): this;
/**
* Grants permission to get information about the domain configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeDomainConfiguration.html
*/
toDescribeDomainConfiguration(): this;
/**
* Grants permission to describe the encryption configuration for the account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEncryptionConfiguration.html
*/
toDescribeEncryptionConfiguration(): this;
/**
* Grants permission to get a unique endpoint specific to the AWS account making the call
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEndpoint.html
*/
toDescribeEndpoint(): this;
/**
* Grants permission to get account event configurations
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeEventConfigurations.html
*/
toDescribeEventConfigurations(): this;
/**
* Grants permission to get information about the specified fleet metric
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeFleetMetric.html
*/
toDescribeFleetMetric(): this;
/**
* Grants permission to get information about the specified index
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeIndex.html
*/
toDescribeIndex(): this;
/**
* Grants permission to describe a job
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJob.html
*/
toDescribeJob(): this;
/**
* Grants permission to describe a job execution
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJobExecution.html
*/
toDescribeJobExecution(): this;
/**
* Grants permission to describe a job template
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeJobTemplate.html
*/
toDescribeJobTemplate(): this;
/**
* Grants permission to describe a managed job template
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeManagedJobTemplate.html
*/
toDescribeManagedJobTemplate(): this;
/**
* Grants permission to get information about a mitigation action
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeMitigationAction.html
*/
toDescribeMitigationAction(): this;
/**
* Grants permission to get information about a fleet provisioning template
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeProvisioningTemplate.html
*/
toDescribeProvisioningTemplate(): this;
/**
* Grants permission to get information about a fleet provisioning template version
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeProvisioningTemplateVersion.html
*/
toDescribeProvisioningTemplateVersion(): this;
/**
* Grants permission to describe a role alias
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeRoleAlias.html
*/
toDescribeRoleAlias(): this;
/**
* Grants permission to get information about a scheduled audit
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeScheduledAudit.html
*/
toDescribeScheduledAudit(): this;
/**
* Grants permission to get information about a Device Defender security profile
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeSecurityProfile.html
*/
toDescribeSecurityProfile(): this;
/**
* Grants permission to get information about the specified stream
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeStream.html
*/
toDescribeStream(): this;
/**
* Grants permission to get information about the specified thing
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThing.html
*/
toDescribeThing(): this;
/**
* Grants permission to get information about the specified thing group
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingGroup.html
*/
toDescribeThingGroup(): this;
/**
* Grants permission to get information about the bulk thing registration task
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingRegistrationTask.html
*/
toDescribeThingRegistrationTask(): this;
/**
* Grants permission to get information about the specified thing type
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeThingType.html
*/
toDescribeThingType(): this;
/**
* Grants permission to describe a tunnel
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_iot-secure-tunneling_DescribeTunnel.html
*/
toDescribeTunnel(): this;
/**
* Grants permission to detach a policy from the specified target
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DetachPolicy.html
*/
toDetachPolicy(): this;
/**
* Grants permission to remove the specified policy from the specified certificate
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DetachPrincipalPolicy.html
*/
toDetachPrincipalPolicy(): this;
/**
* Grants permission to disassociate a Device Defender security profile from a thing group or from this account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DetachSecurityProfile.html
*/
toDetachSecurityProfile(): this;
/**
* Grants permission to detach the specified principal from the specified thing
*
* Access Level: Write
*
* Possible conditions:
* - .ifThingArn()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DetachThingPrincipal.html
*/
toDetachThingPrincipal(): this;
/**
* Grants permission to disable the specified rule
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DisableTopicRule.html
*/
toDisableTopicRule(): this;
/**
* Grants permission to disassociate SBOM files from a package version
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_DisassociateSbomFromPackageVersion.html
*/
toDisassociateSbomFromPackageVersion(): this;
/**
* Grants permission to enable the specified rule
*
* Access Level: Write
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_EnableTopicRule.html
*/
toEnableTopicRule(): this;
/**
* Grants permission to fetch a Device Defender's ML Detect Security Profile training model's status
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetBehaviorModelTrainingSummaries.html
*/
toGetBehaviorModelTrainingSummaries(): this;
/**
* Grants permission to get buckets aggregation for IoT fleet index
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetBucketsAggregation.html
*/
toGetBucketsAggregation(): this;
/**
* Grants permission to get cardinality for IoT fleet index
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetCardinality.html
*/
toGetCardinality(): this;
/**
* Grants permission to get the information about the command
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetCommand.html
*/
toGetCommand(): this;
/**
* Grants permission to get the information of a command execution
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetCommandExecution.html
*/
toGetCommandExecution(): this;
/**
* Grants permission to retrieve the specified connection information
*
* Access Level: Write
*
* Possible conditions:
* - .ifIncludeSocketInformation()
*
* https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html
*/
toGetConnection(): this;
/**
* Grants permission to get effective policies
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetEffectivePolicies.html
*/
toGetEffectivePolicies(): this;
/**
* Grants permission to get current fleet indexing configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetIndexingConfiguration.html
*/
toGetIndexingConfiguration(): this;
/**
* Grants permission to get a job document
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetJobDocument.html
*/
toGetJobDocument(): this;
/**
* Grants permission to get the logging options
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetLoggingOptions.html
*/
toGetLoggingOptions(): this;
/**
* Grants permission to get the information about the OTA update job
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetOTAUpdate.html
*/
toGetOTAUpdate(): this;
/**
* Grants permission to get the information about the package
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackage.html
*/
toGetPackage(): this;
/**
* Grants permission to get the package configuration of the account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackageConfiguration.html
*/
toGetPackageConfiguration(): this;
/**
* Grants permission to get the version of the package
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetPackageVersion.html
*/
toGetPackageVersion(): this;
/**
* Grants permission to get percentiles for IoT fleet index
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetPercentiles.html
*/
toGetPercentiles(): this;
/**
* Grants permission to get information about the specified policy with the policy document of the default version
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetPolicy.html
*/
toGetPolicy(): this;
/**
* Grants permission to get information about the specified policy version
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetPolicyVersion.html
*/
toGetPolicyVersion(): this;
/**
* Grants permission to get a registration code used to register a CA certificate with AWS IoT
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetRegistrationCode.html
*/
toGetRegistrationCode(): this;
/**
* Grants permission to get the retained message on the specified topic
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html
*/
toGetRetainedMessage(): this;
/**
* Grants permission to get statistics for IoT fleet index
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetStatistics.html
*/
toGetStatistics(): this;
/**
* Grants permission to get the thing's connectivity data
*
* Access Level: Read
*
* Possible conditions:
* - .ifIncludeSocketInformation()
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetThingConnectivityData.html
*/
toGetThingConnectivityData(): this;
/**
* Grants permission to get the thing shadow
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/developerguide/policy-actions.html
*/
toGetThingShadow(): this;
/**
* Grants permission to get information about the specified rule
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetTopicRule.html
*/
toGetTopicRule(): this;
/**
* Grants permission to get a TopicRuleDestination
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetTopicRuleDestination.html
*/
toGetTopicRuleDestination(): this;
/**
* Grants permission to get v2 logging options
*
* Access Level: Read
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_GetV2LoggingOptions.html
*/
toGetV2LoggingOptions(): this;
/**
* Grants permission to list the active violations for a given Device Defender security profile or Thing
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListActiveViolations.html
*/
toListActiveViolations(): this;
/**
* Grants permission to list the policies attached to the specified thing group
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListAttachedPolicies.html
*/
toListAttachedPolicies(): this;
/**
* Grants permission to list the findings (results) of a Device Defender audit or of the audits performed during a specified time period
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditFindings.html
*/
toListAuditFindings(): this;
/**
* Grants permission to get the status of audit mitigation action tasks that were executed
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditMitigationActionsExecutions.html
*/
toListAuditMitigationActionsExecutions(): this;
/**
* Grants permission to get a list of audit mitigation action tasks that match the specified filters
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditMitigationActionsTasks.html
*/
toListAuditMitigationActionsTasks(): this;
/**
* Grants permission to list your Device Defender audit suppressions
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditSuppressions.html
*/
toListAuditSuppressions(): this;
/**
* Grants permission to list the Device Defender audits that have been performed during a given time period
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuditTasks.html
*/
toListAuditTasks(): this;
/**
* Grants permission to list the authorizers registered in your account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListAuthorizers.html
*/
toListAuthorizers(): this;
/**
* Grants permission to list all billing groups
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListBillingGroups.html
*/
toListBillingGroups(): this;
/**
* Grants permission to list the CA certificates registered for your AWS account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListCACertificates.html
*/
toListCACertificates(): this;
/**
* Grants permission to list certificate providers in the account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificateProviders.html
*/
toListCertificateProviders(): this;
/**
* Grants permission to list your certificates
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificates.html
*/
toListCertificates(): this;
/**
* Grants permission to list the device certificates signed by the specified CA certificate
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListCertificatesByCA.html
*/
toListCertificatesByCA(): this;
/**
* Grants permission to list commands executions in the account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListCommandExecutions.html
*/
toListCommandExecutions(): this;
/**
* Grants permission to list commands in the account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListCommands.html
*/
toListCommands(): this;
/**
* Grants permission to list the custom metrics in your AWS account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListCustomMetrics.html
*/
toListCustomMetrics(): this;
/**
* Grants permission to lists mitigation actions executions for a Device Defender ML Detect Security Profile
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListDetectMitigationActionsExecutions.html
*/
toListDetectMitigationActionsExecutions(): this;
/**
* Grants permission to list Device Defender ML Detect mitigation actions tasks
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListDetectMitigationActionsTasks.html
*/
toListDetectMitigationActionsTasks(): this;
/**
* Grants permission to list the dimensions that are defined for your AWS account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListDimensions.html
*/
toListDimensions(): this;
/**
* Grants permission to list the domain configuration created by your AWS account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListDomainConfigurations.html
*/
toListDomainConfigurations(): this;
/**
* Grants permission to list the fleet metrics in your account
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListFleetMetrics.html
*/
toListFleetMetrics(): this;
/**
* Grants permission to list all indices for fleet index
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListIndices.html
*/
toListIndices(): this;
/**
* Grants permission to list the job executions for a job
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobExecutionsForJob.html
*/
toListJobExecutionsForJob(): this;
/**
* Grants permission to list the job executions for the specified thing
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobExecutionsForThing.html
*/
toListJobExecutionsForThing(): this;
/**
* Grants permission to list job templates
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobTemplates.html
*/
toListJobTemplates(): this;
/**
* Grants permission to list jobs
*
* Access Level: List
*
* https://docs.aws.amazon.com/iot/latest/apireference/API_ListJobs.html
*/
toListJobs(): th