cdk-iam-floyd

import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [resiliencehub](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsresiliencehub.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Resiliencehub extends PolicyStatement { servicePrefix: string; /** * Grants permission to accept resource grouping recommendations * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_AcceptResourceGroupingRecommendations.html */ toAcceptResourceGroupingRecommendations(): this; /** * Grants permission to add draft application version resource mappings * * Access Level: Write * * Dependent actions: * - cloudformation:DescribeStacks * - cloudformation:ListStackResources * - resource-groups:GetGroup * - resource-groups:ListGroupResources * - servicecatalog:GetApplication * - servicecatalog:ListAssociatedResources * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_AddDraftAppVersionResourceMappings.html */ toAddDraftAppVersionResourceMappings(): this; /** * Grants permission to include or exclude one or more operational recommendations * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_BatchUpdateRecommendationStatus.html */ toBatchUpdateRecommendationStatus(): this; /** * Grants permission to create application * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateApp.html */ toCreateApp(): this; /** * Grants permission to create application app component * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateAppVersionAppComponent.html */ toCreateAppVersionAppComponent(): this; /** * Grants permission to create application resource * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateAppVersionResource.html */ toCreateAppVersionResource(): this; /** * Grants permission to create an assertion for a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateAssertion.html */ toCreateAssertion(): this; /** * Grants permission to create an input source for a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateInputSource.html */ toCreateInputSource(): this; /** * Grants permission to create a resilience policy that defines availability and disaster recovery requirements * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreatePolicy.html */ toCreatePolicy(): this; /** * Grants permission to create recommendation template * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - s3:CreateBucket * - s3:ListBucket * - s3:PutObject * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateRecommendationTemplate.html */ toCreateRecommendationTemplate(): this; /** * Grants permission to create a report for a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateReport.html */ toCreateReport(): this; /** * Grants permission to create resiliency policy * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateResiliencyPolicy.html */ toCreateResiliencyPolicy(): this; /** * Grants permission to create a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateService.html */ toCreateService(): this; /** * Grants permission to create a service function * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateServiceFunction.html */ toCreateServiceFunction(): this; /** * Grants permission to create service function resources * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateServiceFunctionResources.html */ toCreateServiceFunctionResources(): this; /** * Grants permission to create a system that represents a logical grouping of services * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateSystem.html */ toCreateSystem(): this; /** * Grants permission to create a user journey within a system * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateUserJourney.html */ toCreateUserJourney(): this; /** * Grants permission to batch delete application * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteApp.html */ toDeleteApp(): this; /** * Grants permission to batch delete application assessment * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppAssessment.html */ toDeleteAppAssessment(): this; /** * Grants permission to remove application input source * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppInputSource.html */ toDeleteAppInputSource(): this; /** * Grants permission to delete application app component * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppVersionAppComponent.html */ toDeleteAppVersionAppComponent(): this; /** * Grants permission to delete application resource * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppVersionResource.html */ toDeleteAppVersionResource(): this; /** * Grants permission to delete an assertion * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAssertion.html */ toDeleteAssertion(): this; /** * Grants permission to delete an input source * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteInputSource.html */ toDeleteInputSource(): this; /** * Grants permission to delete a resilience policy * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeletePolicy.html */ toDeletePolicy(): this; /** * Grants permission to batch delete recommendation template * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteRecommendationTemplate.html */ toDeleteRecommendationTemplate(): this; /** * Grants permission to batch delete resiliency policy * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteResiliencyPolicy.html */ toDeleteResiliencyPolicy(): this; /** * Grants permission to delete a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteService.html */ toDeleteService(): this; /** * Grants permission to delete a service function * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteServiceFunction.html */ toDeleteServiceFunction(): this; /** * Grants permission to delete service function resources * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteServiceFunctionResources.html */ toDeleteServiceFunctionResources(): this; /** * Grants permission to delete a system * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteSystem.html */ toDeleteSystem(): this; /** * Grants permission to delete a user journey * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteUserJourney.html */ toDeleteUserJourney(): this; /** * Grants permission to describe application * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeApp.html */ toDescribeApp(): this; /** * Grants permission to describe application assessment * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppAssessment.html */ toDescribeAppAssessment(): this; /** * Grants permission to describe application version * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersion.html */ toDescribeAppVersion(): this; /** * Grants permission to describe application version app component * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersionAppComponent.html */ toDescribeAppVersionAppComponent(): this; /** * Grants permission to describe application version resource * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersionResource.html */ toDescribeAppVersionResource(): this; /** * Grants permission to describe application resolution * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersionResourcesResolutionStatus.html */ toDescribeAppVersionResourcesResolutionStatus(): this; /** * Grants permission to describe application version template * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersionTemplate.html */ toDescribeAppVersionTemplate(): this; /** * Grants permission to describe draft application version resources import status * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeDraftAppVersionResourcesImportStatus.html */ toDescribeDraftAppVersionResourcesImportStatus(): this; /** * Grants permission to describe metrics export * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeMetricsExport.html */ toDescribeMetricsExport(): this; /** * Grants permission to describe resiliency policy * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeResiliencyPolicy.html */ toDescribeResiliencyPolicy(): this; /** * Grants permission to describe the latest status of the grouping recommendation process * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeResourceGroupingRecommendationTask.html */ toDescribeResourceGroupingRecommendationTask(): this; /** * Grants permission to retrieve a failure mode finding * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetFailureModeFinding.html */ toGetFailureModeFinding(): this; /** * Grants permission to retrieve a resilience policy * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetPolicy.html */ toGetPolicy(): this; /** * Grants permission to retrieve a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetService.html */ toGetService(): this; /** * Grants permission to retrieve a system * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetSystem.html */ toGetSystem(): this; /** * Grants permission to retrieve a user journey * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetUserJourney.html */ toGetUserJourney(): this; /** * Grants permission to import a V1 app into the V2 resource model * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ImportApp.html */ toImportApp(): this; /** * Grants permission to import a V1 policy into V2 * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ImportPolicy.html */ toImportPolicy(): this; /** * Grants permission to import resources to draft application version * * Access Level: Write * * Dependent actions: * - cloudformation:DescribeStacks * - cloudformation:ListStackResources * - resource-groups:GetGroup * - resource-groups:ListGroupResources * - servicecatalog:GetApplication * - servicecatalog:ListAssociatedResources * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ImportResourcesToDraftAppVersion.html */ toImportResourcesToDraftAppVersion(): this; /** * Grants permission to list alarm recommendation * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAlarmRecommendations.html */ toListAlarmRecommendations(): this; /** * Grants permission to list compliance drifts that were detected while running an assessment * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppAssessmentComplianceDrifts.html */ toListAppAssessmentComplianceDrifts(): this; /** * Grants permission to list resource drifts that were detected while running an assessment * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppAssessmentResourceDrifts.html */ toListAppAssessmentResourceDrifts(): this; /** * Grants permission to list application assessment * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppAssessments.html */ toListAppAssessments(): this; /** * Grants permission to list app component compliances * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppComponentCompliances.html */ toListAppComponentCompliances(): this; /** * Grants permission to list app component recommendations * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppComponentRecommendations.html */ toListAppComponentRecommendations(): this; /** * Grants permission to list application input sources * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppInputSources.html */ toListAppInputSources(): this; /** * Grants permission to list application version app components * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppVersionAppComponents.html */ toListAppVersionAppComponents(): this; /** * Grants permission to application version resource mappings * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppVersionResourceMappings.html */ toListAppVersionResourceMappings(): this; /** * Grants permission to list application resources * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppVersionResources.html */ toListAppVersionResources(): this; /** * Grants permission to list application version * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppVersions.html */ toListAppVersions(): this; /** * Grants permission to list applications * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListApps.html */ toListApps(): this; /** * Grants permission to list assertions for a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAssertions.html */ toListAssertions(): this; /** * Grants permission to list dependencies discovered for services * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListDependencies.html */ toListDependencies(): this; /** * Grants permission to list failure mode assessments * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListFailureModeAssessments.html */ toListFailureModeAssessments(): this; /** * Grants permission to list failure mode findings * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListFailureModeFindings.html */ toListFailureModeFindings(): this; /** * Grants permission to list input sources for a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListInputSources.html */ toListInputSources(): this; /** * Grants permission to list metrics * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListMetrics.html */ toListMetrics(): this; /** * Grants permission to list resilience policies * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListPolicies.html */ toListPolicies(): this; /** * Grants permission to list recommendation templates * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListRecommendationTemplates.html */ toListRecommendationTemplates(): this; /** * Grants permission to list reports * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListReports.html */ toListReports(): this; /** * Grants permission to list resiliency policies * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListResiliencyPolicies.html */ toListResiliencyPolicies(): this; /** * Grants permission to list resource grouping recommendations * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListResourceGroupingRecommendations.html */ toListResourceGroupingRecommendations(): this; /** * Grants permission to list resources for a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListResources.html */ toListResources(): this; /** * Grants permission to list events for a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListServiceEvents.html */ toListServiceEvents(): this; /** * Grants permission to list service functions * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListServiceFunctions.html */ toListServiceFunctions(): this; /** * Grants permission to list service topology edges * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListServiceTopologyEdges.html */ toListServiceTopologyEdges(): this; /** * Grants permission to list services * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListServices.html */ toListServices(): this; /** * Grants permission to list SOP recommendations * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListSopRecommendations.html */ toListSopRecommendations(): this; /** * Grants permission to list suggested resiliency policies * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListSuggestedResiliencyPolicies.html */ toListSuggestedResiliencyPolicies(): this; /** * Grants permission to list events for a system * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListSystemEvents.html */ toListSystemEvents(): this; /** * Grants permission to list systems * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListSystems.html */ toListSystems(): this; /** * Grants permission to list tags for a resource * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListTagsForResource.html */ toListTagsForResource(): this; /** * Grants permission to list test recommendations * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListTestRecommendations.html */ toListTestRecommendations(): this; /** * Grants permission to list unsupported application version resources * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListUnsupportedAppVersionResources.html */ toListUnsupportedAppVersionResources(): this; /** * Grants permission to list user journeys for a system * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListUserJourneys.html */ toListUserJourneys(): this; /** * Grants permission to publish application version * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_PublishAppVersion.html */ toPublishAppVersion(): this; /** * Grants permission to put draft application version template * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_PutDraftAppVersionTemplate.html */ toPutDraftAppVersionTemplate(): this; /** * Grants permission to reject resource grouping recommendations * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_RejectResourceGroupingRecommendations.html */ toRejectResourceGroupingRecommendations(): this; /** * Grants permission to remove draft application version mappings * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_RemoveDraftAppVersionResourceMappings.html */ toRemoveDraftAppVersionResourceMappings(): this; /** * Grants permission to resolve application version resources * * Access Level: Write * * Dependent actions: * - cloudformation:DescribeStacks * - cloudformation:ListStackResources * - resource-groups:GetGroup * - resource-groups:ListGroupResources * - servicecatalog:GetApplication * - servicecatalog:ListAssociatedResources * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ResolveAppVersionResources.html */ toResolveAppVersionResources(): this; /** * Grants permission to create application assessment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - cloudformation:DescribeStacks * - cloudformation:ListStackResources * - cloudwatch:DescribeAlarms * - cloudwatch:GetMetricData * - cloudwatch:GetMetricStatistics * - cloudwatch:PutMetricData * - ec2:DescribeRegions * - fis:GetExperimentTemplate * - fis:ListExperimentTemplates * - fis:ListExperiments * - resource-groups:GetGroup * - resource-groups:ListGroupResources * - servicecatalog:GetApplication * - servicecatalog:ListAssociatedResources * - ssm:GetParametersByPath * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartAppAssessment.html */ toStartAppAssessment(): this; /** * Grants permission to start a failure mode assessment * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartFailureModeAssessment.html */ toStartFailureModeAssessment(): this; /** * Grants permission to start the metrics export * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartMetricsExport.html */ toStartMetricsExport(): this; /** * Grants permission to start the grouping recommendation generation process * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartResourceGroupingRecommendationTask.html */ toStartResourceGroupingRecommendationTask(): this; /** * Grants permission to assign a resource tag * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_TagResource.html */ toTagResource(): this; /** * Grants permission to untag a resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UntagResource.html */ toUntagResource(): this; /** * Grants permission to update application * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateApp.html */ toUpdateApp(): this; /** * Grants permission to update application version * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersion.html */ toUpdateAppVersion(): this; /** * Grants permission to update application app component * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersionAppComponent.html */ toUpdateAppVersionAppComponent(): this; /** * Grants permission to update application resource * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersionResource.html */ toUpdateAppVersionResource(): this; /** * Grants permission to update an assertion * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAssertion.html */ toUpdateAssertion(): this; /** * Grants permission to update a dependency classification * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateDependency.html */ toUpdateDependency(): this; /** * Grants permission to update a failure mode finding * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateFailureModeFinding.html */ toUpdateFailureModeFinding(): this; /** * Grants permission to update a resilience policy * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdatePolicy.html */ toUpdatePolicy(): this; /** * Grants permission to update resiliency policy * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateResiliencyPolicy.html */ toUpdateResiliencyPolicy(): this; /** * Grants permission to update a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateService.html */ toUpdateService(): this; /** * Grants permission to update a service function * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateServiceFunction.html */ toUpdateServiceFunction(): this; /** * Grants permission to update a system * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateSystem.html */ toUpdateSystem(): this; /** * Grants permission to update a user journey * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateUserJourney.html */ toUpdateUserJourney(): this; protected accessLevelList: AccessLevelList; /** * Adds a resource of type resiliency-policy to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ResiliencyPolicy.html * * @param resiliencyPolicyId - Identifier for the resiliencyPolicyId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onResiliencyPolicy(resiliencyPolicyId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type application to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_App.html * * @param appId - Identifier for the appId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onApplication(appId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type app-assessment to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_AppAssessment.html * * @param appAssessmentId - Identifier for the appAssessmentId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onAppAssessment(appAssessmentId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type recommendation-template to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_RecommendationTemplate.html * * @param recommendationTemplateId - Identifier for the recommendationTemplateId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onRecommendationTemplate(recommendationTemplateId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type policy to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_Policy.html * * @param policyId - Identifier for the policyId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onPolicy(policyId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type service to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_Service.html * * @param serviceId - Identifier for the serviceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onService(serviceId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type system to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_System.html * * @param systemId - Identifier for the systemId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onSystem(systemId: string, account?: string, region?: string, partition?: string): this; /** * Filters access by the presence of tag key-value pairs in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag * * Applies to actions: * - .toCreateApp() * - .toCreatePolicy() * - .toCreateRecommendationTemplate() * - .toCreateResiliencyPolicy() * - .toCreateService() * - .toCreateSystem() * - .toImportApp() * - .toImportPolicy() * - .toStartAppAssessment() * - .toTagResource() * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this; /** * Filters access by tag key-value pairs attached to the resource * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag * * Applies to actions: * - .toCreateAssertion() * - .toCreateInputSource() * - .toCreateReport() * - .toCreateService() * - .toCreateServiceFunction() * - .toCreateServiceFunctionResources() * - .toCreateUserJourney() * - .toDeleteAssertion() * - .toDeleteInputSource() * - .toDeletePolicy() * - .toDeleteService() * - .toDeleteServiceFunction() * - .toDeleteServiceFunctionResources() * - .toDeleteSystem() * - .toDeleteUserJourney() * - .toGetFailureModeFinding() * - .toGetPolicy() * - .toGetService() * - .toGetSystem() * - .toGetUserJourney() * - .toImportApp() * - .toImportPolicy() * - .toListAssertions() * - .toListFailureModeAssessments() * - .toListFailureModeFindings() * - .toListInputSources() * - .toListReports() * - .toListResources() * - .toListServiceEvents() * - .toListServiceFunctions() * - .toListServiceTopologyEdges() * - .toListSystemEvents() * - .toListUserJourneys() * - .toStartFailureModeAssessment() * - .toUpdateAssertion() * - .toUpdateDependency() * - .toUpdateFailureModeFinding() * - .toUpdatePolicy() * - .toUpdateService() * - .toUpdateServiceFunction() * - .toUpdateSystem() * - .toUpdateUserJourney() * * Applies to resource types: * - resiliency-policy * - application * - app-assessment * - recommendation-template * - policy * - service * - system * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this; /** * Filters access by the tag keys that are passed in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys * * Applies to actions: * - .toCreateApp() * - .toCreatePolicy() * - .toCreateRecommendationTemplate() * - .toCreateResiliencyPolicy() * - .toCreateService() * - .toCreateSystem() * - .toImportApp() * - .toImportPolicy() * - .toStartAppAssessment() * - .toTagResource() * - .toUntagResource() * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsTagKeys(value: string | string[], operator?: Operator | string): this; /** * Statement provider for service [resiliencehub](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsresiliencehub.html). * */ constructor(props?: iam.PolicyStatementProps); }