UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

968 lines (967 loc) 32 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [wellarchitected](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswell-architectedtool.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Wellarchitected extends PolicyStatement { servicePrefix: string; /** * Grants permission to associate a lens to the specified workload * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_AssociateLenses.html */ toAssociateLenses(): this; /** * Grants permission to associate a profile to the specified workload * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_AssociateProfiles.html */ toAssociateProfiles(): this; /** * Grants permission to configure the integration * * Access Level: Write * * https://docs.aws.amazon.com/wellarchitected/latest/userguide/setting-up-jira.html */ toConfigureIntegration(): this; /** * Grants permission to an owner of a lens to share with other AWS accounts and IAM users * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateLensShare.html */ toCreateLensShare(): this; /** * Grants permission to create a new lens version * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateLensVersion.html */ toCreateLensVersion(): this; /** * Grants permission to create a new milestone for the specified workload * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateMilestone.html */ toCreateMilestone(): this; /** * Grants permission to create a new profile * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateProfile.html */ toCreateProfile(): this; /** * Grants permission to an owner of a profile to share with other AWS accounts and IAM users * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateProfileShare.html */ toCreateProfileShare(): this; /** * Grants permission to create a new review template * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateReviewTemplate.html */ toCreateReviewTemplate(): this; /** * Grants permission to an owner of a review template to share with other AWS accounts and IAM users * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateTemplateShare.html */ toCreateTemplateShare(): this; /** * Grants permission to create a new workload * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifJiraProjectKey() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateWorkload.html */ toCreateWorkload(): this; /** * Grants permission to share a workload with another account * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateWorkloadShare.html */ toCreateWorkloadShare(): this; /** * Grants permission to delete a lens * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteLens.html */ toDeleteLens(): this; /** * Grants permission to delete an existing lens share * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteLensShare.html */ toDeleteLensShare(): this; /** * Grants permission to delete a profile * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteProfile.html */ toDeleteProfile(): this; /** * Grants permission to delete an existing profile share * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteProfileShare.html */ toDeleteProfileShare(): this; /** * Grants permission to delete an existing review template * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteReviewTemplate.html */ toDeleteReviewTemplate(): this; /** * Grants permission to delete an existing review template share * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteTemplateShare.html */ toDeleteTemplateShare(): this; /** * Grants permission to delete an existing workload * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteWorkload.html */ toDeleteWorkload(): this; /** * Grants permission to delete an existing workload share * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteWorkloadShare.html */ toDeleteWorkloadShare(): this; /** * Grants permission to disassociate a lens from the specified workload * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DisassociateLenses.html */ toDisassociateLenses(): this; /** * Grants permission to disassociate a profile from the specified workload * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DisassociateProfiles.html */ toDisassociateProfiles(): this; /** * Grants permission to export an existing lens * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ExportLens.html */ toExportLens(): this; /** * Grants permission to retrieve the specified answer from the specified lens review * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetAnswer.html */ toGetAnswer(): this; /** * Grants permission to get consolidated report metrics or to generate the consolidated report PDF in this account * * Access Level: Read * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetConsolidatedReport.html */ toGetConsolidatedReport(): this; /** * Grants permission to get all settings for the account * * Access Level: Read * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetGlobalSettings.html */ toGetGlobalSettings(): this; /** * Grants permission to get an existing lens * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteLensShare.html */ toGetLens(): this; /** * Grants permission to retrieve the specified lens review of the specified workload * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetLensReview.html */ toGetLensReview(): this; /** * Grants permission to retrieve the report for the specified lens review * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetLensReviewReport.html */ toGetLensReviewReport(): this; /** * Grants permission to get the difference between the specified lens version and latest available lens version * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetLensVersionDifference.html */ toGetLensVersionDifference(): this; /** * Grants permission to retrieve the specified milestone of the specified workload * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetMilestone.html */ toGetMilestone(): this; /** * Grants permission to retrieve the specified profile * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetProfile.html */ toGetProfile(): this; /** * Grants permission to retrieve the specified profile template * * Access Level: Read * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetProfileTemplate.html */ toGetProfileTemplate(): this; /** * Grants permission to retrieve the specified review template * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetReviewTemplate.html */ toGetReviewTemplate(): this; /** * Grants permission to retrieve the specified answer from the specified review template lens review * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetReviewTemplateAnswer.html */ toGetReviewTemplateAnswer(): this; /** * Grants permission to retrieve the specified lens review of the specified review template * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetReviewTemplateLensReview.html */ toGetReviewTemplateLensReview(): this; /** * Grants permission to retrieve the specified workload * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetWorkload.html */ toGetWorkload(): this; /** * Grants permission to import a new lens * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ImportLens.html */ toImportLens(): this; /** * Grants permission to list the answers from the specified lens review * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListAnswers.html */ toListAnswers(): this; /** * Grants permission to list the check-details for the workload * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListCheckDetails.html */ toListCheckDetails(): this; /** * Grants permission to list the check-summaries for the workload * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListCheckSummaries.html */ toListCheckSummaries(): this; /** * Grants permission to list the improvements of the specified lens review * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListLensReviewImprovements.html */ toListLensReviewImprovements(): this; /** * Grants permission to list the lens reviews of the specified workload * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListLensReviews.html */ toListLensReviews(): this; /** * Grants permission to list all shares created for a lens * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListLensShares.html */ toListLensShares(): this; /** * Grants permission to list the lenses available to this account * * Access Level: List * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListLenses.html */ toListLenses(): this; /** * Grants permission to list the milestones of the specified workload * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListMilestones.html */ toListMilestones(): this; /** * Grants permission to list notifications related to the account or specified resource * * Access Level: List * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListNotifications.html */ toListNotifications(): this; /** * Grants permission to list profile notifications related to specified resource * * Access Level: List * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListProfileNotifications.html */ toListProfileNotifications(): this; /** * Grants permission to list all shares created for a profile * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListProfileShares.html */ toListProfileShares(): this; /** * Grants permission to list the profiles available to this account * * Access Level: List * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListProfiles.html */ toListProfiles(): this; /** * Grants permission to list the answers from the specified review template lens review * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListReviewTemplateAnswers.html */ toListReviewTemplateAnswers(): this; /** * Grants permission to list the review templates available to this account * * Access Level: List * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListReviewTemplates.html */ toListReviewTemplates(): this; /** * Grants permission to list the workload share invitations of the specified account or user * * Access Level: List * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListShareInvitations.html */ toListShareInvitations(): this; /** * Grants permission to list tags for a Well-Architected resource * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListTagsForResource.html */ toListTagsForResource(): this; /** * Grants permission to list all shares created for a review template * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListTemplateShares.html */ toListTemplateShares(): this; /** * Grants permission to list the workload shares of the specified workload * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListWorkloadShares.html */ toListWorkloadShares(): this; /** * Grants permission to list the workloads in this account * * Access Level: List * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListWorkloads.html */ toListWorkloads(): this; /** * Grants permission to tag a Well-Architected resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * - .ifAwsRequestTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_TagResource.html */ toTagResource(): this; /** * Grants permission to untag a Well-Architected resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UntagResource.html */ toUntagResource(): this; /** * Grants permission to update properties of the specified answer * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateAnswer.html */ toUpdateAnswer(): this; /** * Grants permission to manage all settings for the account * * Access Level: Write * * Possible conditions: * - .ifJiraProjectKey() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateGlobalSettings.html */ toUpdateGlobalSettings(): this; /** * Grants permission to update properties of the integration * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateIntegration.html */ toUpdateIntegration(): this; /** * Grants permission to update properties of the specified lens review * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateLensReview.html */ toUpdateLensReview(): this; /** * Grants permission to update properties of the specified profile * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateProfile.html */ toUpdateProfile(): this; /** * Grants permission to update properties of the specified review template * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateReviewTemplate.html */ toUpdateReviewTemplate(): this; /** * Grants permission to update properties of the specified review template answer * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateReviewTemplateAnswer.html */ toUpdateReviewTemplateAnswer(): this; /** * Grants permission to update properties of the specified review template lens review * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateReviewTemplateLensReview.html */ toUpdateReviewTemplateLensReview(): this; /** * Grants permission to update status of the specified workload share invitation * * Access Level: Write * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateShareInvitation.html */ toUpdateShareInvitation(): this; /** * Grants permission to update properties of the specified workload * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * - .ifJiraProjectKey() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateWorkload.html */ toUpdateWorkload(): this; /** * Grants permission to update properties of the specified workload share * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateWorkloadShare.html */ toUpdateWorkloadShare(): this; /** * Grants permission to upgrade the specified lens review to use the latest version of the associated lens * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpgradeLensReview.html */ toUpgradeLensReview(): this; /** * Grants permission to upgrade the specified workload to use the latest version of the associated profile * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpgradeProfileVersion.html */ toUpgradeProfileVersion(): this; /** * Grants permission to upgrade the specified lens review of the specified review template * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpgradeReviewTemplateLensReview.html */ toUpgradeReviewTemplateLensReview(): this; protected accessLevelList: AccessLevelList; /** * Adds a resource of type workload to the statement * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_Workload.html * * @param resourceId - Identifier for the resourceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onWorkload(resourceId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type lens to the statement * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_Lens.html * * @param resourceId - Identifier for the resourceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onLens(resourceId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type profile to the statement * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_Profile.html * * @param resourceId - Identifier for the resourceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onProfile(resourceId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type review-template to the statement * * https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ReviewTemplate.html * * @param resourceId - Identifier for the resourceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAwsResourceTag() */ onReviewTemplate(resourceId: string, account?: string, region?: string, partition?: string): this; /** * Filters access by tag key-value pairs in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag * * Applies to actions: * - .toCreateProfile() * - .toCreateReviewTemplate() * - .toCreateWorkload() * - .toImportLens() * - .toTagResource() * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this; /** * Filters access by tag key-value pairs attached to the resource * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag * * Applies to actions: * - .toAssociateLenses() * - .toAssociateProfiles() * - .toCreateLensShare() * - .toCreateLensVersion() * - .toCreateMilestone() * - .toCreateProfileShare() * - .toCreateTemplateShare() * - .toCreateWorkloadShare() * - .toDeleteLens() * - .toDeleteLensShare() * - .toDeleteProfile() * - .toDeleteProfileShare() * - .toDeleteReviewTemplate() * - .toDeleteTemplateShare() * - .toDeleteWorkload() * - .toDeleteWorkloadShare() * - .toDisassociateLenses() * - .toDisassociateProfiles() * - .toExportLens() * - .toGetAnswer() * - .toGetLens() * - .toGetLensReview() * - .toGetLensReviewReport() * - .toGetLensVersionDifference() * - .toGetMilestone() * - .toGetProfile() * - .toGetReviewTemplate() * - .toGetReviewTemplateAnswer() * - .toGetReviewTemplateLensReview() * - .toGetWorkload() * - .toListAnswers() * - .toListCheckDetails() * - .toListCheckSummaries() * - .toListLensReviewImprovements() * - .toListLensReviews() * - .toListLensShares() * - .toListMilestones() * - .toListProfileShares() * - .toListReviewTemplateAnswers() * - .toListTagsForResource() * - .toListTemplateShares() * - .toListWorkloadShares() * - .toUpdateAnswer() * - .toUpdateIntegration() * - .toUpdateLensReview() * - .toUpdateProfile() * - .toUpdateReviewTemplate() * - .toUpdateReviewTemplateAnswer() * - .toUpdateReviewTemplateLensReview() * - .toUpdateWorkload() * - .toUpdateWorkloadShare() * - .toUpgradeLensReview() * - .toUpgradeProfileVersion() * - .toUpgradeReviewTemplateLensReview() * * Applies to resource types: * - workload * - lens * - profile * - review-template * * @param tagKey The tag key to check * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this; /** * Filters access by tag keys in the request * * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys * * Applies to actions: * - .toCreateProfile() * - .toCreateReviewTemplate() * - .toCreateWorkload() * - .toImportLens() * - .toTagResource() * - .toUntagResource() * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAwsTagKeys(value: string | string[], operator?: Operator | string): this; /** * Filters access by project key * * https://docs.aws.amazon.com/wellarchitected/latest/userguide/security_iam_id-based-policy-examples.html * * Applies to actions: * - .toCreateWorkload() * - .toUpdateGlobalSettings() * - .toUpdateWorkload() * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifJiraProjectKey(value: string | string[], operator?: Operator | string): this; /** * Statement provider for service [wellarchitected](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awswell-architectedtool.html). * */ constructor(props?: iam.PolicyStatementProps); }