UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,621 lines 124 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [quicksight](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonquicksight.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Quicksight extends PolicyStatement { servicePrefix: string; /** * Grants permission to enable setting default access to AWS resources * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/user/accessing-data-sources.html */ toAccountConfigurations(): this; /** * Grants permission to configure log delivery for QuickSuite instance * * Access Level: Permissions management * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toAllowVendedLogDeliveryForResource(): this; /** * Grants permission to create reviewed answers for a topic * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_BatchCreateTopicReviewedAnswer.html */ toBatchCreateTopicReviewedAnswer(): this; /** * Grants permission to delete one or more knowledge bases * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_BatchDeleteKnowledgeBase.html */ toBatchDeleteKnowledgeBase(): this; /** * Grants permission to delete reviewed answers for a topic * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_BatchDeleteTopicReviewedAnswer.html */ toBatchDeleteTopicReviewedAnswer(): this; /** * Grants permission to get user preferences * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toBatchGetPreferences(): this; /** * Grants permission to update user preferences * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toBatchUpdatePreferences(): this; /** * Grants permission to cancel a SPICE ingestions on a dataset * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CancelIngestion.html */ toCancelIngestion(): this; /** * Grants permission to create an account customization for QuickSight account or namespace * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateAccountCustomization.html */ toCreateAccountCustomization(): this; /** * Grants permission to subscribe to QuickSight * * Access Level: Write * * Possible conditions: * - .ifEdition() * - .ifDirectoryType() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateAccountSubscription.html */ toCreateAccountSubscription(): this; /** * Grants permission to create an action connector * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateActionConnector.html */ toCreateActionConnector(): this; /** * Grants permission to provision Amazon QuickSight administrators, authors, and readers * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toCreateAdmin(): this; /** * Grants permission to create an agent * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateAgent.html */ toCreateAgent(): this; /** * Grants permission to create an analysis from a template * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateAnalysis.html */ toCreateAnalysis(): this; /** * Grants permission to create an Amazon QuickSight brand * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateBrand.html */ toCreateBrand(): this; /** * Grants permission to create a QuickSight custom permissions resource * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateCustomPermissions.html */ toCreateCustomPermissions(): this; /** * Grants permission to create a QuickSight Dashboard * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateDashboard.html */ toCreateDashboard(): this; /** * Grants permission to create a dataset * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - quicksight:PassDataSource * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateDataSet.html */ toCreateDataSet(): this; /** * Grants permission to create a data source * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateDataSource.html */ toCreateDataSource(): this; /** * Grants permission to create a QuickSight email customization template * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/user/customizing-quicksight-email-templates.html */ toCreateEmailCustomizationTemplate(): this; /** * Grants permission to create an extension access * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toCreateExtensionAccess(): this; /** * Grants permission to create a flow * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateFlow.html */ toCreateFlow(): this; /** * Grants permission to create a QuickSight folder * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateFolder.html */ toCreateFolder(): this; /** * Grants permission to add a QuickSight Dashboard, Analysis or Dataset to a QuickSight Folder * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateFolderMembership.html */ toCreateFolderMembership(): this; /** * Grants permission to create a QuickSight group * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateGroup.html */ toCreateGroup(): this; /** * Grants permission to add a QuickSight user to a QuickSight group * * Access Level: Write * * Possible conditions: * - .ifAwsTagKeys() * - .ifAwsRequestTag() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateGroupMembership.html */ toCreateGroupMembership(): this; /** * Grants permission to create an assignment with one specified IAM Policy ARN that will be assigned to specified groups or users of QuickSight * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateIAMPolicyAssignment.html */ toCreateIAMPolicyAssignment(): this; /** * Grants permission to start a SPICE ingestion on a dataset * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateIngestion.html */ toCreateIngestion(): this; /** * Grants permission to create an QuickSight namespace * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - ds:CreateIdentityPoolDirectory * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateNamespace.html */ toCreateNamespace(): this; /** * Grants permission to create an OAuth client application * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateOAuthClientApplication.html */ toCreateOAuthClientApplication(): this; /** * Grants permission to provision Amazon QuickSight readers * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toCreateReader(): this; /** * Grants permission to create a refresh schedule for a dataset * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateRefreshSchedule.html */ toCreateRefreshSchedule(): this; /** * Grants permission to add a group member to a role * * Access Level: Write * * Possible conditions: * - .ifGroup() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateRoleMembership.html */ toCreateRoleMembership(): this; /** * Grants permission to create a space * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateSpace.html */ toCreateSpace(): this; /** * Grants permission to create a template * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateTemplate.html */ toCreateTemplate(): this; /** * Grants permission to create a template alias * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateTemplateAlias.html */ toCreateTemplateAlias(): this; /** * Grants permission to create a theme * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateTheme.html */ toCreateTheme(): this; /** * Grants permission to create an alias for a theme version * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateThemeAlias.html */ toCreateThemeAlias(): this; /** * Grants permission to create a topic * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - quicksight:PassDataSet * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateTopic.html */ toCreateTopic(): this; /** * Grants permission to create a refresh schedule for a topic * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateTopicRefreshSchedule.html */ toCreateTopicRefreshSchedule(): this; /** * Grants permission to provision Amazon QuickSight authors and readers * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toCreateUser(): this; /** * Grants permission to create a vpc connection * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateVPCConnection.html */ toCreateVPCConnection(): this; /** * Grants permission to remove the custom permission associated with an account * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteAccountCustomPermission.html */ toDeleteAccountCustomPermission(): this; /** * Grants permission to delete an account customization for QuickSight account or namespace * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteAccountCustomization.html */ toDeleteAccountCustomization(): this; /** * Grants permission to delete a QuickSight account * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteAccountSubscription.html */ toDeleteAccountSubscription(): this; /** * Grants permission to delete an action connector * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteActionConnector.html */ toDeleteActionConnector(): this; /** * Grants permission to delete an agent * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteAgent.html */ toDeleteAgent(): this; /** * Grants permission to delete an analysis * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteAnalysis.html */ toDeleteAnalysis(): this; /** * Grants permission to delete an Amazon QuickSight brand * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteBrand.html */ toDeleteBrand(): this; /** * Grants permission to delete a brand assignment * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteBrandAssignment.html */ toDeleteBrandAssignment(): this; /** * Grants permission to delete a QuickSight custom permissions resource * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteCustomPermissions.html */ toDeleteCustomPermissions(): this; /** * Grants permission to delete a QuickSight Dashboard * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteDashboard.html */ toDeleteDashboard(): this; /** * Grants permission to delete a dataset * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteDataSet.html */ toDeleteDataSet(): this; /** * Grants permission to delete dataset refresh properties for a dataset * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteDataSetRefreshProperties.html */ toDeleteDataSetRefreshProperties(): this; /** * Grants permission to delete a data source * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteDataSource.html */ toDeleteDataSource(): this; /** * Grants permission to delete linked QBusiness application for QuickSight account * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteDefaultQBusinessApplication.html */ toDeleteDefaultQBusinessApplication(): this; /** * Grants permission to delete a QuickSight email customization template * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/user/customizing-quicksight-email-templates.html */ toDeleteEmailCustomizationTemplate(): this; /** * Grants permission to delete an extension access * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toDeleteExtensionAccess(): this; /** * Grants permission to delete a flow * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteFlow.html */ toDeleteFlow(): this; /** * Grants permission to delete a QuickSight Folder * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteFolder.html */ toDeleteFolder(): this; /** * Grants permission to remove a QuickSight Dashboard, Analysis or Dataset from a QuickSight Folder * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteFolderMembership.html */ toDeleteFolderMembership(): this; /** * Grants permission to remove a user group from QuickSight * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteGroup.html */ toDeleteGroup(): this; /** * Grants permission to remove a user from a group so that he/she is no longer a member of the group * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteGroupMembership.html */ toDeleteGroupMembership(): this; /** * Grants permission to update an existing assignment * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteIAMPolicyAssignment.html */ toDeleteIAMPolicyAssignment(): this; /** * Grants permission to remove AWS services for trusted identity propagation in QuickSight * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteIdentityPropagationConfig.html */ toDeleteIdentityPropagationConfig(): this; /** * Grants permission to delete a knowledge base * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteKnowledgeBase.html */ toDeleteKnowledgeBase(): this; /** * Grants permission to delete a QuickSight namespace * * Access Level: Write * * Dependent actions: * - ds:DeleteDirectory * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteNamespace.html */ toDeleteNamespace(): this; /** * Grants permission to delete an OAuth client application * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteOAuthClientApplication.html */ toDeleteOAuthClientApplication(): this; /** * Grants permission to delete a refresh schedule for a dataset * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteRefreshSchedule.html */ toDeleteRefreshSchedule(): this; /** * Grants permission to remove the custom permission associated with a role * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteRoleCustomPermission.html */ toDeleteRoleCustomPermission(): this; /** * Grants permission to remove a group member from a role * * Access Level: Write * * Possible conditions: * - .ifGroup() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteRoleMembership.html */ toDeleteRoleMembership(): this; /** * Grants permission to delete a space * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteSpace.html */ toDeleteSpace(): this; /** * Grants permission to delete a template * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteTemplate.html */ toDeleteTemplate(): this; /** * Grants permission to delete a template alias * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteTemplateAlias.html */ toDeleteTemplateAlias(): this; /** * Grants permission to delete a theme * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteTheme.html */ toDeleteTheme(): this; /** * Grants permission to delete the alias of a theme * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteThemeAlias.html */ toDeleteThemeAlias(): this; /** * Grants permission to delete a topic * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteTopic.html */ toDeleteTopic(): this; /** * Grants permission to delete a refresh schedule for a topic * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteTopicRefreshSchedule.html */ toDeleteTopicRefreshSchedule(): this; /** * Grants permission to delete a QuickSight user, given the user name * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteUser.html */ toDeleteUser(): this; /** * Grants permission to delete a user identified by its principal ID * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteUserByPrincipalId.html */ toDeleteUserByPrincipalId(): this; /** * Grants permission to remove the custom permission associated with a user * * Access Level: Write * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteUserCustomPermission.html */ toDeleteUserCustomPermission(): this; /** * Grants permission to delete a vpc connection * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteVPCConnection.html */ toDeleteVPCConnection(): this; /** * Grants permission to describe the custom permission associated with an account * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAccountCustomPermission.html */ toDescribeAccountCustomPermission(): this; /** * Grants permission to describe an account customization for QuickSight account or namespace * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAccountCustomization.html */ toDescribeAccountCustomization(): this; /** * Grants permission to describe the administrative account settings for QuickSight account * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAccountSettings.html */ toDescribeAccountSettings(): this; /** * Grants permission to describe a QuickSight account * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAccountSubscription.html */ toDescribeAccountSubscription(): this; /** * Grants permission to describe an action connector * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeActionConnector.html */ toDescribeActionConnector(): this; /** * Grants permission to describe permissions for an action connector * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeActionConnectorPermissions.html */ toDescribeActionConnectorPermissions(): this; /** * Grants permission to describe an agent * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAgent.html */ toDescribeAgent(): this; /** * Grants permission to describe agent's permissions * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAgentPermissions.html */ toDescribeAgentPermissions(): this; /** * Grants permission to describe an analysis * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAnalysis.html */ toDescribeAnalysis(): this; /** * Grants permission to describe permissions for an analysis * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAnalysisPermissions.html */ toDescribeAnalysisPermissions(): this; /** * Grants permission to describe an asset bundle export job * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAssetBundleExportJob.html */ toDescribeAssetBundleExportJob(): this; /** * Grants permission to describe an asset bundle import job * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAssetBundleImportJob.html */ toDescribeAssetBundleImportJob(): this; /** * Grants permission to describe an automation job * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAutomationJob.html */ toDescribeAutomationJob(): this; /** * Grants permission to describe a brand * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeBrand.html */ toDescribeBrand(): this; /** * Grants permission to describe a brand assignment * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeBrandAssignment.html */ toDescribeBrandAssignment(): this; /** * Grants permission to describes the published version of the brand * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeBrandPublishedVersion.html */ toDescribeBrandPublishedVersion(): this; /** * Grants permission to describe chat configuration * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toDescribeChatConfiguration(): this; /** * Grants permission to describe a custom permissions resource in a QuickSight account * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeCustomPermissions.html */ toDescribeCustomPermissions(): this; /** * Grants permission to describe a QuickSight Dashboard * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDashboard.html */ toDescribeDashboard(): this; /** * Grants permission to describe permissions for a QuickSight Dashboard * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDashboardPermissions.html */ toDescribeDashboardPermissions(): this; /** * Grants permission to describe a dashboard snapshot job * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDashboardSnapshotJob.html */ toDescribeDashboardSnapshotJob(): this; /** * Grants permission to describe result of a dashboard snapshot job * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDashboardSnapshotJobResult.html */ toDescribeDashboardSnapshotJobResult(): this; /** * Grants permission to describe dashboards qa configuration * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDashboardsQAConfiguration.html */ toDescribeDashboardsQAConfiguration(): this; /** * Grants permission to describe a dataset * * Access Level: Read * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDataSet.html */ toDescribeDataSet(): this; /** * Grants permission to describe the resource policy of a dataset * * Access Level: Permissions management * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDataSetPermissions.html */ toDescribeDataSetPermissions(): this; /** * Grants permission to describe refresh properties for a dataset * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDataSetRefreshProperties.html */ toDescribeDataSetRefreshProperties(): this; /** * Grants permission to describe a data source * * Access Level: Read * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDataSource.html */ toDescribeDataSource(): this; /** * Grants permission to describe the resource policy of a data source * * Access Level: Permissions management * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDataSourcePermissions.html */ toDescribeDataSourcePermissions(): this; /** * Grants permission to describe linked QBusiness application Id for QuickSight account * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeDefaultQBusinessApplication.html */ toDescribeDefaultQBusinessApplication(): this; /** * Grants permission to describe a QuickSight email customization template * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/customizing-quicksight-email-templates.html */ toDescribeEmailCustomizationTemplate(): this; /** * Grants permission to describe an extension access * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toDescribeExtensionAccess(): this; /** * Grants permission to describe a flow * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeFlow.html */ toDescribeFlow(): this; /** * Grants permission to describe a QuickSight Folder * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeFolder.html */ toDescribeFolder(): this; /** * Grants permission to describe permissions for a QuickSight Folder * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeFolderPermissions.html */ toDescribeFolderPermissions(): this; /** * Grants permission to describe resolved permissions for a QuickSight Folder * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeFolderResolvedPermissions.html */ toDescribeFolderResolvedPermissions(): this; /** * Grants permission to describe a QuickSight group * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeGroup.html */ toDescribeGroup(): this; /** * Grants permission to describe a QuickSight group member * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeGroupMembership.html */ toDescribeGroupMembership(): this; /** * Grants permission to describe an existing assignment * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeIAMPolicyAssignment.html */ toDescribeIAMPolicyAssignment(): this; /** * Grants permission to describe a SPICE ingestion on a dataset * * Access Level: Read * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeIngestion.html */ toDescribeIngestion(): this; /** * Grants permission to describe the IP restrictions for QuickSight account * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeIpRestriction.html */ toDescribeIpRestriction(): this; /** * Grants permission to describe QuickSight key registration * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeKeyRegistration.html */ toDescribeKeyRegistration(): this; /** * Grants permission to describe a knowledge base * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeKnowledgeBase.html */ toDescribeKnowledgeBase(): this; /** * Grants permission to describe the resource policy of a knowledge base * * Access Level: Permissions management * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeKnowledgeBasePermissions.html */ toDescribeKnowledgeBasePermissions(): this; /** * Grants permission to describe a QuickSight namespace * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeNamespace.html */ toDescribeNamespace(): this; /** * Grants permission to describe an OAuth client application * * Access Level: Read * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeOAuthClientApplication.html */ toDescribeOAuthClientApplication(): this; /** * Grants permission to describe a personalization configuration * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeQPersonalizationConfiguration.html */ toDescribeQPersonalizationConfiguration(): this; /** * Grants permission to describe index capacity * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toDescribeQuickIndexCapacity(): this; /** * Grants permission to describe QuickSight Q Search configuration * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeQuickSightQSearchConfiguration.html */ toDescribeQuickSightQSearchConfiguration(): this; /** * Grants permission to describe a refresh schedule for a dataset * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeRefreshSchedule.html */ toDescribeRefreshSchedule(): this; /** * Grants permission to describe the custom permission associated with a role * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeRoleCustomPermission.html */ toDescribeRoleCustomPermission(): this; /** * Grants permission to describe the administrative self upgrade configuration associated with an account * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeSelfUpgradeConfiguration.html */ toDescribeSelfUpgradeConfiguration(): this; /** * Grants permission to describe a space * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeSpace.html */ toDescribeSpace(): this; /** * Grants permission to describe permissions for a space * * Access Level: Permissions management * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeSpacePermissions.html */ toDescribeSpacePermissions(): this; /** * Grants permission to describe a template * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeTemplate.html */ toDescribeTemplate(): this; /** * Grants permission to describe a template alias * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeTemplateAlias.html */ toDescribeTemplateAlias(): this; /** * Grants permission to describe permissions for a template * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeTemplatePermissions.html */ toDescribeTemplatePermissions(): this; /** * Grants permission to describe a theme * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeTheme.html */ toDescribeTheme(): this; /** * Grants permission to describe a theme alias * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeThemeAlias.html */ toDescribeThemeAlias(): this; /** * Grants permission to describe permissions for a theme * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeThemePermissions.html */ toDescribeThemePermissions(): this; /** * Grants permission to describe a topic * * Access Level: Read * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeTopic.html */ toDescribeTopic(): this; /** * Grants permission to describe the resource policy of a topic * * Access Level: Permissions management * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeTopicPermissions.html */ toDescribeTopicPermissions(): this; /** * Grants permission to describe the refresh status of a topic * * Access Level: Read * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeTopicRefresh.html */ toDescribeTopicRefresh(): this; /** * Grants permission to describe a refresh schedule for a topic * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeTopicRefreshSchedule.html */ toDescribeTopicRefreshSchedule(): this; /** * Grants permission to describe a QuickSight user given the user name * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeUser.html */ toDescribeUser(): this; /** * Grants permission to describe a vpc connection * * Access Level: Read * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeVPCConnection.html */ toDescribeVPCConnection(): this; /** * Grants permission to generate a URL used to embed a QuickSight Dashboard or Q Topic for a user not registered with QuickSight * * Access Level: Write * * Possible conditions: * - .ifAllowedEmbeddingDomains() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GenerateEmbedUrlForAnonymousUser.html */ toGenerateEmbedUrlForAnonymousUser(): this; /** * Grants permission to generate a URL used to embed a QuickSight Dashboard for a user registered with QuickSight * * Access Level: Write * * Possible conditions: * - .ifAllowedEmbeddingDomains() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GenerateEmbedUrlForRegisteredUser.html */ toGenerateEmbedUrlForRegisteredUser(): this; /** * Grants permission to generate a URL used to embed a QuickSight Experience for a user registered with QuickSight using Identity-enhanced role session * * Access Level: Write * * Possible conditions: * - .ifAllowedEmbeddingDomains() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GenerateEmbedUrlForRegisteredUserWithIdentity.html */ toGenerateEmbedUrlForRegisteredUserWithIdentity(): this; /** * Grants permission to get a URL used to embed a QuickSight Dashboard for a user not registered with QuickSight * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toGetAnonymousUserEmbedUrl(): this; /** * Grants permission to get an auth code representing a QuickSight user * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toGetAuthCode(): this; /** * Grants permission to get information about the custom permissions in an account * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toGetCustomPermissionsSummary(): this; /** * Grants permission to get a URL used to embed a QuickSight Dashboard * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GetDashboardEmbedUrl.html */ toGetDashboardEmbedUrl(): this; /** * Grants permission to get metadata for a flow * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GetFlowMetadata.html */ toGetFlowMetadata(): this; /** * Grants permission to get permissions for a flow * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GetFlowPermissions.html */ toGetFlowPermissions(): this; /** * Grants permission to use Amazon QuickSight, in Enterprise edition, to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toGetGroupMapping(): this; /** * Grants permission to get identity context for a user * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GetIdentityContext.html */ toGetIdentityContext(): this; /** * Grants permission to get a URL to embed QuickSight console experience * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GetSessionEmbedUrl.html */ toGetSessionEmbedUrl(): this; /** * Grants permission to list action connectors * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListActionConnectors.html */ toListActionConnectors(): this; /** * Grants permission to list agents * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListAgents.html */ toListAgents(): this; /** * Grants permission to list all analyses in an account * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListAnalyses.html */ toListAnalyses(): this; /** * Grants permission to list all asset bundle export jobs * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListAssetBundleExportJobs.html */ toListAssetBundleExportJobs(): this; /** * Grants permission to list all asset bundle import jobs * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListAssetBundleImportJobs.html */ toListAssetBundleImportJobs(): this; /** * Grants permission to lists all brands in an Amazon QuickSight account * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListBrands.html */ toListBrands(): this; /** * Grants permission to list custom permissions resources in QuickSight account * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListCustomPermissions.html */ toListCustomPermissions(): this; /** * Grants permission to list all registered customer managed keys * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/user/key-management.html */ toListCustomerManagedKeys(): this; /** * Grants permission to list all versions of a QuickSight Dashboard * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListDashboardVersions.html */ toListDashboardVersions(): this; /** * Grants permission to list all Dashboards in a QuickSight Account * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListDashboards.html */ toListDashboards(): this; /** * Grants permission to list all datasets * * Access Level: List * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListDataSets.html */ toListDataSets(): this; /** * Grants permission to list all data sources * * Access Level: List * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListDataSources.html */ toListDataSources(): this; /** * Grants permission to list extension accesses * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html */ toListExtensionAccesses(): this; /** * Grants permission to list all flows in an Amazon QuickSight account * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListFlows.html */ toListFlows(): this; /** * Grants permission to list all members in a folder * * Access Level: Read * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListFolderMembers.html */ toListFolderMembers(): this; /** * Grants permission to list all Folders in a QuickSight Account * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListFolders.html */ toListFolders(): this; /** * Grants permission to list all Folders in which a QuickSight resource is a member * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListFoldersForResource.html */ toListFoldersForResource(): this; /** * Grants permission to list member users in a group * * Access Level: List * * https://docs.aws.amazon.com/quicksight/latest/APIReferenc