UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,483 lines 139 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Resiliencehub = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [resiliencehub](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsresiliencehub.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Resiliencehub extends shared_1.PolicyStatement { /** * Grants permission to accept resource grouping recommendations * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_AcceptResourceGroupingRecommendations.html */ toAcceptResourceGroupingRecommendations() { return this.to('AcceptResourceGroupingRecommendations'); } /** * Grants permission to add draft application version resource mappings * * Access Level: Write * * Dependent actions: * - cloudformation:DescribeStacks * - cloudformation:ListStackResources * - resource-groups:GetGroup * - resource-groups:ListGroupResources * - servicecatalog:GetApplication * - servicecatalog:ListAssociatedResources * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_AddDraftAppVersionResourceMappings.html */ toAddDraftAppVersionResourceMappings() { return this.to('AddDraftAppVersionResourceMappings'); } /** * Grants permission to include or exclude one or more operational recommendations * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_BatchUpdateRecommendationStatus.html */ toBatchUpdateRecommendationStatus() { return this.to('BatchUpdateRecommendationStatus'); } /** * Grants permission to create application * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateApp.html */ toCreateApp() { return this.to('CreateApp'); } /** * Grants permission to create application app component * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateAppVersionAppComponent.html */ toCreateAppVersionAppComponent() { return this.to('CreateAppVersionAppComponent'); } /** * Grants permission to create application resource * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateAppVersionResource.html */ toCreateAppVersionResource() { return this.to('CreateAppVersionResource'); } /** * Grants permission to create an assertion for a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateAssertion.html */ toCreateAssertion() { return this.to('CreateAssertion'); } /** * Grants permission to create an input source for a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateInputSource.html */ toCreateInputSource() { return this.to('CreateInputSource'); } /** * Grants permission to create a resilience policy that defines availability and disaster recovery requirements * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreatePolicy.html */ toCreatePolicy() { return this.to('CreatePolicy'); } /** * Grants permission to create recommendation template * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - s3:CreateBucket * - s3:ListBucket * - s3:PutObject * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateRecommendationTemplate.html */ toCreateRecommendationTemplate() { return this.to('CreateRecommendationTemplate'); } /** * Grants permission to create a report for a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateReport.html */ toCreateReport() { return this.to('CreateReport'); } /** * Grants permission to create resiliency policy * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateResiliencyPolicy.html */ toCreateResiliencyPolicy() { return this.to('CreateResiliencyPolicy'); } /** * Grants permission to create a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateService.html */ toCreateService() { return this.to('CreateService'); } /** * Grants permission to create a service function * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateServiceFunction.html */ toCreateServiceFunction() { return this.to('CreateServiceFunction'); } /** * Grants permission to create service function resources * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateServiceFunctionResources.html */ toCreateServiceFunctionResources() { return this.to('CreateServiceFunctionResources'); } /** * Grants permission to create a system that represents a logical grouping of services * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateSystem.html */ toCreateSystem() { return this.to('CreateSystem'); } /** * Grants permission to create a user journey within a system * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateUserJourney.html */ toCreateUserJourney() { return this.to('CreateUserJourney'); } /** * Grants permission to batch delete application * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteApp.html */ toDeleteApp() { return this.to('DeleteApp'); } /** * Grants permission to batch delete application assessment * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppAssessment.html */ toDeleteAppAssessment() { return this.to('DeleteAppAssessment'); } /** * Grants permission to remove application input source * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppInputSource.html */ toDeleteAppInputSource() { return this.to('DeleteAppInputSource'); } /** * Grants permission to delete application app component * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppVersionAppComponent.html */ toDeleteAppVersionAppComponent() { return this.to('DeleteAppVersionAppComponent'); } /** * Grants permission to delete application resource * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppVersionResource.html */ toDeleteAppVersionResource() { return this.to('DeleteAppVersionResource'); } /** * Grants permission to delete an assertion * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAssertion.html */ toDeleteAssertion() { return this.to('DeleteAssertion'); } /** * Grants permission to delete an input source * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteInputSource.html */ toDeleteInputSource() { return this.to('DeleteInputSource'); } /** * Grants permission to delete a resilience policy * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeletePolicy.html */ toDeletePolicy() { return this.to('DeletePolicy'); } /** * Grants permission to batch delete recommendation template * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteRecommendationTemplate.html */ toDeleteRecommendationTemplate() { return this.to('DeleteRecommendationTemplate'); } /** * Grants permission to batch delete resiliency policy * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteResiliencyPolicy.html */ toDeleteResiliencyPolicy() { return this.to('DeleteResiliencyPolicy'); } /** * Grants permission to delete a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteService.html */ toDeleteService() { return this.to('DeleteService'); } /** * Grants permission to delete a service function * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteServiceFunction.html */ toDeleteServiceFunction() { return this.to('DeleteServiceFunction'); } /** * Grants permission to delete service function resources * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteServiceFunctionResources.html */ toDeleteServiceFunctionResources() { return this.to('DeleteServiceFunctionResources'); } /** * Grants permission to delete a system * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteSystem.html */ toDeleteSystem() { return this.to('DeleteSystem'); } /** * Grants permission to delete a user journey * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteUserJourney.html */ toDeleteUserJourney() { return this.to('DeleteUserJourney'); } /** * Grants permission to describe application * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeApp.html */ toDescribeApp() { return this.to('DescribeApp'); } /** * Grants permission to describe application assessment * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppAssessment.html */ toDescribeAppAssessment() { return this.to('DescribeAppAssessment'); } /** * Grants permission to describe application version * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersion.html */ toDescribeAppVersion() { return this.to('DescribeAppVersion'); } /** * Grants permission to describe application version app component * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersionAppComponent.html */ toDescribeAppVersionAppComponent() { return this.to('DescribeAppVersionAppComponent'); } /** * Grants permission to describe application version resource * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersionResource.html */ toDescribeAppVersionResource() { return this.to('DescribeAppVersionResource'); } /** * Grants permission to describe application resolution * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersionResourcesResolutionStatus.html */ toDescribeAppVersionResourcesResolutionStatus() { return this.to('DescribeAppVersionResourcesResolutionStatus'); } /** * Grants permission to describe application version template * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppVersionTemplate.html */ toDescribeAppVersionTemplate() { return this.to('DescribeAppVersionTemplate'); } /** * Grants permission to describe draft application version resources import status * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeDraftAppVersionResourcesImportStatus.html */ toDescribeDraftAppVersionResourcesImportStatus() { return this.to('DescribeDraftAppVersionResourcesImportStatus'); } /** * Grants permission to describe metrics export * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeMetricsExport.html */ toDescribeMetricsExport() { return this.to('DescribeMetricsExport'); } /** * Grants permission to describe resiliency policy * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeResiliencyPolicy.html */ toDescribeResiliencyPolicy() { return this.to('DescribeResiliencyPolicy'); } /** * Grants permission to describe the latest status of the grouping recommendation process * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeResourceGroupingRecommendationTask.html */ toDescribeResourceGroupingRecommendationTask() { return this.to('DescribeResourceGroupingRecommendationTask'); } /** * Grants permission to retrieve a failure mode finding * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetFailureModeFinding.html */ toGetFailureModeFinding() { return this.to('GetFailureModeFinding'); } /** * Grants permission to retrieve a resilience policy * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetPolicy.html */ toGetPolicy() { return this.to('GetPolicy'); } /** * Grants permission to retrieve a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetService.html */ toGetService() { return this.to('GetService'); } /** * Grants permission to retrieve a system * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetSystem.html */ toGetSystem() { return this.to('GetSystem'); } /** * Grants permission to retrieve a user journey * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_GetUserJourney.html */ toGetUserJourney() { return this.to('GetUserJourney'); } /** * Grants permission to import a V1 app into the V2 resource model * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ImportApp.html */ toImportApp() { return this.to('ImportApp'); } /** * Grants permission to import a V1 policy into V2 * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ImportPolicy.html */ toImportPolicy() { return this.to('ImportPolicy'); } /** * Grants permission to import resources to draft application version * * Access Level: Write * * Dependent actions: * - cloudformation:DescribeStacks * - cloudformation:ListStackResources * - resource-groups:GetGroup * - resource-groups:ListGroupResources * - servicecatalog:GetApplication * - servicecatalog:ListAssociatedResources * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ImportResourcesToDraftAppVersion.html */ toImportResourcesToDraftAppVersion() { return this.to('ImportResourcesToDraftAppVersion'); } /** * Grants permission to list alarm recommendation * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAlarmRecommendations.html */ toListAlarmRecommendations() { return this.to('ListAlarmRecommendations'); } /** * Grants permission to list compliance drifts that were detected while running an assessment * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppAssessmentComplianceDrifts.html */ toListAppAssessmentComplianceDrifts() { return this.to('ListAppAssessmentComplianceDrifts'); } /** * Grants permission to list resource drifts that were detected while running an assessment * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppAssessmentResourceDrifts.html */ toListAppAssessmentResourceDrifts() { return this.to('ListAppAssessmentResourceDrifts'); } /** * Grants permission to list application assessment * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppAssessments.html */ toListAppAssessments() { return this.to('ListAppAssessments'); } /** * Grants permission to list app component compliances * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppComponentCompliances.html */ toListAppComponentCompliances() { return this.to('ListAppComponentCompliances'); } /** * Grants permission to list app component recommendations * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppComponentRecommendations.html */ toListAppComponentRecommendations() { return this.to('ListAppComponentRecommendations'); } /** * Grants permission to list application input sources * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppInputSources.html */ toListAppInputSources() { return this.to('ListAppInputSources'); } /** * Grants permission to list application version app components * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppVersionAppComponents.html */ toListAppVersionAppComponents() { return this.to('ListAppVersionAppComponents'); } /** * Grants permission to application version resource mappings * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppVersionResourceMappings.html */ toListAppVersionResourceMappings() { return this.to('ListAppVersionResourceMappings'); } /** * Grants permission to list application resources * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppVersionResources.html */ toListAppVersionResources() { return this.to('ListAppVersionResources'); } /** * Grants permission to list application version * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAppVersions.html */ toListAppVersions() { return this.to('ListAppVersions'); } /** * Grants permission to list applications * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListApps.html */ toListApps() { return this.to('ListApps'); } /** * Grants permission to list assertions for a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAssertions.html */ toListAssertions() { return this.to('ListAssertions'); } /** * Grants permission to list dependencies discovered for services * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListDependencies.html */ toListDependencies() { return this.to('ListDependencies'); } /** * Grants permission to list failure mode assessments * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListFailureModeAssessments.html */ toListFailureModeAssessments() { return this.to('ListFailureModeAssessments'); } /** * Grants permission to list failure mode findings * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListFailureModeFindings.html */ toListFailureModeFindings() { return this.to('ListFailureModeFindings'); } /** * Grants permission to list input sources for a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListInputSources.html */ toListInputSources() { return this.to('ListInputSources'); } /** * Grants permission to list metrics * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListMetrics.html */ toListMetrics() { return this.to('ListMetrics'); } /** * Grants permission to list resilience policies * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListPolicies.html */ toListPolicies() { return this.to('ListPolicies'); } /** * Grants permission to list recommendation templates * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListRecommendationTemplates.html */ toListRecommendationTemplates() { return this.to('ListRecommendationTemplates'); } /** * Grants permission to list reports * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListReports.html */ toListReports() { return this.to('ListReports'); } /** * Grants permission to list resiliency policies * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListResiliencyPolicies.html */ toListResiliencyPolicies() { return this.to('ListResiliencyPolicies'); } /** * Grants permission to list resource grouping recommendations * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListResourceGroupingRecommendations.html */ toListResourceGroupingRecommendations() { return this.to('ListResourceGroupingRecommendations'); } /** * Grants permission to list resources for a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListResources.html */ toListResources() { return this.to('ListResources'); } /** * Grants permission to list events for a service * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListServiceEvents.html */ toListServiceEvents() { return this.to('ListServiceEvents'); } /** * Grants permission to list service functions * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListServiceFunctions.html */ toListServiceFunctions() { return this.to('ListServiceFunctions'); } /** * Grants permission to list service topology edges * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListServiceTopologyEdges.html */ toListServiceTopologyEdges() { return this.to('ListServiceTopologyEdges'); } /** * Grants permission to list services * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListServices.html */ toListServices() { return this.to('ListServices'); } /** * Grants permission to list SOP recommendations * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListSopRecommendations.html */ toListSopRecommendations() { return this.to('ListSopRecommendations'); } /** * Grants permission to list suggested resiliency policies * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListSuggestedResiliencyPolicies.html */ toListSuggestedResiliencyPolicies() { return this.to('ListSuggestedResiliencyPolicies'); } /** * Grants permission to list events for a system * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListSystemEvents.html */ toListSystemEvents() { return this.to('ListSystemEvents'); } /** * Grants permission to list systems * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListSystems.html */ toListSystems() { return this.to('ListSystems'); } /** * Grants permission to list tags for a resource * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListTagsForResource.html */ toListTagsForResource() { return this.to('ListTagsForResource'); } /** * Grants permission to list test recommendations * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListTestRecommendations.html */ toListTestRecommendations() { return this.to('ListTestRecommendations'); } /** * Grants permission to list unsupported application version resources * * Access Level: List * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListUnsupportedAppVersionResources.html */ toListUnsupportedAppVersionResources() { return this.to('ListUnsupportedAppVersionResources'); } /** * Grants permission to list user journeys for a system * * Access Level: Read * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListUserJourneys.html */ toListUserJourneys() { return this.to('ListUserJourneys'); } /** * Grants permission to publish application version * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_PublishAppVersion.html */ toPublishAppVersion() { return this.to('PublishAppVersion'); } /** * Grants permission to put draft application version template * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_PutDraftAppVersionTemplate.html */ toPutDraftAppVersionTemplate() { return this.to('PutDraftAppVersionTemplate'); } /** * Grants permission to reject resource grouping recommendations * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_RejectResourceGroupingRecommendations.html */ toRejectResourceGroupingRecommendations() { return this.to('RejectResourceGroupingRecommendations'); } /** * Grants permission to remove draft application version mappings * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_RemoveDraftAppVersionResourceMappings.html */ toRemoveDraftAppVersionResourceMappings() { return this.to('RemoveDraftAppVersionResourceMappings'); } /** * Grants permission to resolve application version resources * * Access Level: Write * * Dependent actions: * - cloudformation:DescribeStacks * - cloudformation:ListStackResources * - resource-groups:GetGroup * - resource-groups:ListGroupResources * - servicecatalog:GetApplication * - servicecatalog:ListAssociatedResources * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ResolveAppVersionResources.html */ toResolveAppVersionResources() { return this.to('ResolveAppVersionResources'); } /** * Grants permission to create application assessment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - cloudformation:DescribeStacks * - cloudformation:ListStackResources * - cloudwatch:DescribeAlarms * - cloudwatch:GetMetricData * - cloudwatch:GetMetricStatistics * - cloudwatch:PutMetricData * - ec2:DescribeRegions * - fis:GetExperimentTemplate * - fis:ListExperimentTemplates * - fis:ListExperiments * - resource-groups:GetGroup * - resource-groups:ListGroupResources * - servicecatalog:GetApplication * - servicecatalog:ListAssociatedResources * - ssm:GetParametersByPath * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartAppAssessment.html */ toStartAppAssessment() { return this.to('StartAppAssessment'); } /** * Grants permission to start a failure mode assessment * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartFailureModeAssessment.html */ toStartFailureModeAssessment() { return this.to('StartFailureModeAssessment'); } /** * Grants permission to start the metrics export * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartMetricsExport.html */ toStartMetricsExport() { return this.to('StartMetricsExport'); } /** * Grants permission to start the grouping recommendation generation process * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartResourceGroupingRecommendationTask.html */ toStartResourceGroupingRecommendationTask() { return this.to('StartResourceGroupingRecommendationTask'); } /** * Grants permission to assign a resource tag * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_TagResource.html */ toTagResource() { return this.to('TagResource'); } /** * Grants permission to untag a resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UntagResource.html */ toUntagResource() { return this.to('UntagResource'); } /** * Grants permission to update application * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateApp.html */ toUpdateApp() { return this.to('UpdateApp'); } /** * Grants permission to update application version * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersion.html */ toUpdateAppVersion() { return this.to('UpdateAppVersion'); } /** * Grants permission to update application app component * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersionAppComponent.html */ toUpdateAppVersionAppComponent() { return this.to('UpdateAppVersionAppComponent'); } /** * Grants permission to update application resource * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersionResource.html */ toUpdateAppVersionResource() { return this.to('UpdateAppVersionResource'); } /** * Grants permission to update an assertion * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAssertion.html */ toUpdateAssertion() { return this.to('UpdateAssertion'); } /** * Grants permission to update a dependency classification * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateDependency.html */ toUpdateDependency() { return this.to('UpdateDependency'); } /** * Grants permission to update a failure mode finding * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateFailureModeFinding.html */ toUpdateFailureModeFinding() { return this.to('UpdateFailureModeFinding'); } /** * Grants permission to update a resilience policy * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdatePolicy.html */ toUpdatePolicy() { return this.to('UpdatePolicy'); } /** * Grants permission to update resiliency policy * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateResiliencyPolicy.html */ toUpdateResiliencyPolicy() { return this.to('UpdateResiliencyPolicy'); } /** * Grants permission to update a service * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateService.html */ toUpdateService() { return this.to('UpdateService'); } /** * Grants permission to update a service function * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateServiceFunction.html */ toUpdateServiceFunction() { return this.to('UpdateServiceFunction'); } /** * Grants permission to update a system * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateSystem.html */ toUpdateSystem() { return this.to('UpdateSystem'); } /** * Grants permission to update a user journey * * Access Level: Write * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateUserJourney.html */ toUpdateUserJourney() { return this.to('UpdateUserJourney'); } /** * Adds a resource of type resiliency-policy to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ResiliencyPolicy.html * * @param resiliencyPolicyId - Identifier for the resiliencyPolicyId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onResiliencyPolicy(resiliencyPolicyId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:resiliencehub:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:resiliency-policy/${resiliencyPolicyId}`); } /** * Adds a resource of type application to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_App.html * * @param appId - Identifier for the appId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onApplication(appId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:resiliencehub:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:app/${appId}`); } /** * Adds a resource of type app-assessment to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_AppAssessment.html * * @param appAssessmentId - Identifier for the appAssessmentId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onAppAssessment(appAssessmentId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:resiliencehub:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:app-assessment/${appAssessmentId}`); } /** * Adds a resource of type recommendation-template to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_RecommendationTemplate.html * * @param recommendationTemplateId - Identifier for the recommendationTemplateId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onRecommendationTemplate(recommendationTemplateId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:resiliencehub:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:recommendation-template/${recommendationTemplateId}`); } /** * Adds a resource of type policy to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_Policy.html * * @param policyId - Identifier for the policyId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onPolicy(policyId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:resiliencehub:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:policy/${policyId}`); } /** * Adds a resource of type service to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_Service.html * * @param serviceId - Identifier for the serviceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onService(serviceId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:resiliencehub:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:service/${serviceId}`); } /** * Adds a resource of type system to the statement * * https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_System.html * * @param systemId - Identifier for the systemId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onSystem(systemId, account, region, partition) { return this.on(`arn:${partition ?? this.defaultPartition}:resiliencehub:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:system/${systemId}`); } /** * Filters access by the presence of tag key-value pairs in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag * * Applies to actions: * - .toCreateApp() * - .toCreatePolicy() * - .toCreateRecommendationTemplate() * - .toCreateResiliencyPolicy() * - .toCreateService() * - .toCreateSystem() * - .toImportApp() * - .toImportPolicy() * - .toStartAppAssessment() * - .toTagResource() * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsRequestTag(tagKey, value, operator) { return this.if(`aws:RequestTag/${tagKey}`, value, operator ?? 'StringLike'); } /** * Filters access by tag key-value pairs attached to the resource * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag * * Applies to actions: * - .toCreateAssertion() * - .toCreateInputSource() * - .toCreateReport() * - .toCreateService() * - .toCreateServiceFunction() * - .toCreateServiceFunctionResources() * - .toCreateUserJourney() * - .toDeleteAssertion() * - .toDeleteInputSource() * - .toDeletePolicy() * - .toDeleteService() * - .toDeleteServiceFunction() * - .toDeleteServiceFunctionResources() * - .toDeleteSystem() * - .toDeleteUserJourney() * - .toGetFailureModeFinding() * - .toGetPolicy() * - .toGetService() * - .toGetSystem() * - .toGetUserJourney() * - .toImportApp() * - .toImportPolicy() * - .toListAssertions() * - .toListFailureModeAssessments() * - .toListFailureModeFindings() * - .toListInputSources() * - .toListReports() * - .toListResources() * - .toListServiceEvents() * - .toListServiceFunctions() * - .toListServiceTopologyEdges() * - .toListSystemEvents() * - .toListUserJourneys() * - .toStartFailureModeAssessment() * - .toUpdateAssertion() * - .toUpdateDependency() * - .toUpdateFailureModeFinding() * - .toUpdatePolicy() * - .toUpdateService() * - .toUpdateServiceFunction() * - .toUpdateSystem() * - .toUpdateUserJourney() * * Applies to resource types: * - resiliency-policy * - application * - app-assessment * - recommendation-template * - policy * - service * - system * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsResourceTag(tagKey, value, operator) { return this.if(`aws:ResourceTag/${tagKey}`, value, operator ?? 'StringLike'); } /** * Filters access by the tag keys that are passed in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys * * Applies to actions: * - .toCreateApp() * - .toCreatePolicy() * - .toCreateRecommendationTemplate() * - .toCreateResiliencyPolicy() * - .toCreateService() * - .toCreateSystem() * - .toImportApp() * - .toImportPolicy() * - .toStartAppAssessment() * - .toTagResource() * - .toUntagResource() * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsTagKeys(value, operator) { return this.if(`aws:TagKeys`, value, operator ?? 'StringLike'); } /** * Statement provider for service [resiliencehub](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsresiliencehub.html). * */ constructor(props) { super(props); this.servicePrefix = 'resiliencehub'; this.accessLevelList = { Write: [ 'AcceptResourceGroupingRecommendations', 'AddDraftAppVersionResourceMappings', 'BatchUpdateRecommendationStatus', 'CreateApp', 'CreateAppVersionAppComponent', 'CreateAppVersionResource', 'CreateAssertion', 'CreateInputSource', 'CreatePolicy', 'CreateRecommendationTemplate', 'CreateReport', 'CreateResiliencyPolicy', 'CreateService', 'CreateServiceFunction', 'CreateServiceFunctionResources', 'CreateSystem', 'CreateUserJourney', 'DeleteApp', 'DeleteAppAssessment', 'DeleteAppInputSource', 'DeleteAppVersionAppComponent', 'DeleteAppVersionResource', 'DeleteAssertion', 'DeleteInputSource', 'DeletePolicy', 'DeleteRecommendationTemplate', 'DeleteResiliencyPolicy', 'DeleteService', 'DeleteServiceFunction', 'DeleteServiceFunctionResources', 'DeleteSystem', 'DeleteUserJourney', 'ImportApp', 'ImportPolicy', 'ImportResourcesToDraftAppVersion', 'PublishAppVersion', 'PutDraftAppVersionTemplate', 'RejectResourceGroupingRecommendations', 'RemoveDraftAppVersionResourceMappings', 'ResolveAppVersionResources', 'StartAppAssessment', 'StartFailureModeAssessment', 'StartMetricsExport', 'StartResourceGroupingRecommendationTask', 'UpdateApp', 'UpdateAppVersion', 'UpdateAppVersionAppComponent', 'UpdateAppVersionResource', 'UpdateAssertion', 'UpdateDependency', 'UpdateFailureModeFinding', 'UpdatePolicy', 'UpdateResiliencyPolicy', 'Updat