cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
854 lines • 83.8 kB
JavaScript
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.PaymentCryptography = void 0;
const shared_1 = require("../../shared");
/**
* Statement provider for service [payment-cryptography](https://docs.aws.amazon.com/service-authorization/latest/reference/list_payment-cryptography.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
class PaymentCryptography extends shared_1.PolicyStatement {
/**
* Grants permission to add replication regions to an existing AWS Payment Cryptography key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_AddKeyReplicationRegions.html
*/
toAddKeyReplicationRegions() {
return this.to('AddKeyReplicationRegions');
}
/**
* Grants permission to associate an MPA approval team with a payment cryptography action
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_AssociateMpaTeam.html
*/
toAssociateMpaTeam() {
return this.to('AssociateMpaTeam');
}
/**
* Grants permission to create a user-friendly name for a Key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateAlias.html
*/
toCreateAlias() {
return this.to('CreateAlias');
}
/**
* Grants permission to create a unique customer managed key in the caller's AWS account and region
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifKeyAlgorithm()
* - .ifKeyClass()
* - .ifKeyUsage()
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html
*/
toCreateKey() {
return this.to('CreateKey');
}
/**
* Grants permission to decrypt ciphertext data to plaintext using symmetric, asymmetric or DUKPT data encryption key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_DecryptData.html
*/
toDecryptData() {
return this.to('DecryptData');
}
/**
* Grants permission to delete the specified alias
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DeleteAlias.html
*/
toDeleteAlias() {
return this.to('DeleteAlias');
}
/**
* Grants permission to schedule the deletion of a Key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DeleteKey.html
*/
toDeleteKey() {
return this.to('DeleteKey');
}
/**
* Grants permission to delete the resource-based policy attached to a key
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DeleteResourcePolicy.html
*/
toDeleteResourcePolicy() {
return this.to('DeleteResourcePolicy');
}
/**
* Grants permission to disable default key replication regions for account-level replication
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DisableDefaultKeyReplicationRegions.html
*/
toDisableDefaultKeyReplicationRegions() {
return this.to('DisableDefaultKeyReplicationRegions');
}
/**
* Grants permission to disassociate an MPA approval team from a payment cryptography action
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DisassociateMpaTeam.html
*/
toDisassociateMpaTeam() {
return this.to('DisassociateMpaTeam');
}
/**
* Grants permission to enable default key replication regions for account-level replication
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_EnableDefaultKeyReplicationRegions.html
*/
toEnableDefaultKeyReplicationRegions() {
return this.to('EnableDefaultKeyReplicationRegions');
}
/**
* Grants permission to encrypt plaintext data to ciphertext using symmetric, asymmetric or DUKPT data encryption key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_EncryptData.html
*/
toEncryptData() {
return this.to('EncryptData');
}
/**
* Grants permission to export a key from the service
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ExportKey.html
*/
toExportKey() {
return this.to('ExportKey');
}
/**
* Grants permission to generate a KekValidationRequest or a KekValidationResponse for node-to-node initialization between payment processing nodes using Australian Standard 2805 (AS2805)
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GenerateAs2805KekValidation.html
*/
toGenerateAs2805KekValidation() {
return this.to('GenerateAs2805KekValidation');
}
/**
* Grants permission to generate card-related data using algorithms such as Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2) or Card Security Codes (CSC) that check the validity of a magnetic stripe card
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GenerateCardValidationData.html
*/
toGenerateCardValidationData() {
return this.to('GenerateCardValidationData');
}
/**
* Grants permission to generate a MAC (Message Authentication Code) cryptogram
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GenerateMac.html
*/
toGenerateMac() {
return this.to('GenerateMac');
}
/**
* Grants permission to generate a MAC (Message Authentication Code) cryptogram
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GenerateMacEmvPinChange.html
*/
toGenerateMacEmvPinChange() {
return this.to('GenerateMacEmvPinChange');
}
/**
* Grants permission to generate pin-related data such as PIN, PIN Verification Value (PVV), PIN Block and PIN Offset during new card issuance or card re-issuance
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_GeneratePinData.html
*/
toGeneratePinData() {
return this.to('GeneratePinData');
}
/**
* Grants permission to return the keyArn associated with an aliasName
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetAlias.html
*/
toGetAlias() {
return this.to('GetAlias');
}
/**
* Grants permission to return the Certificate Signing Request for a public key from a key of class PUBLIC_KEY
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetCertificateSigningRequest.html
*/
toGetCertificateSigningRequest() {
return this.to('GetCertificateSigningRequest');
}
/**
* Grants permission to retrieve the default key replication regions configured at the account level
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetDefaultKeyReplicationRegions.html
*/
toGetDefaultKeyReplicationRegions() {
return this.to('GetDefaultKeyReplicationRegions');
}
/**
* Grants permission to return the detailed information about the specified key
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetKey.html
*/
toGetKey() {
return this.to('GetKey');
}
/**
* Grants permission to retrieve information about an MPA approval team association for a payment cryptography action
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetMpaTeamAssociation.html
*/
toGetMpaTeamAssociation() {
return this.to('GetMpaTeamAssociation');
}
/**
* Grants permission to get the export token and the signing key certificate to initiate a TR-34 key export
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetParametersForExport.html
*/
toGetParametersForExport() {
return this.to('GetParametersForExport');
}
/**
* Grants permission to get the import token and the wrapping key certificate to initiate a TR-34 key import
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetParametersForImport.html
*/
toGetParametersForImport() {
return this.to('GetParametersForImport');
}
/**
* Grants permission to return the public key from a key of class PUBLIC_KEY
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetPublicKeyCertificate.html
*/
toGetPublicKeyCertificate() {
return this.to('GetPublicKeyCertificate');
}
/**
* Grants permission to retrieve the resource-based policy attached to a key
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetResourcePolicy.html
*/
toGetResourcePolicy() {
return this.to('GetResourcePolicy');
}
/**
* Grants permission to imports keys and public key certificates
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifCertificateAuthorityPublicKeyIdentifier()
* - .ifImportKeyMaterial()
* - .ifWrappingKeyIdentifier()
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html
*/
toImportKey() {
return this.to('ImportKey');
}
/**
* Grants permission to return a list of aliases created for all keys in the caller's AWS account and Region
*
* Access Level: List
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ListAliases.html
*/
toListAliases() {
return this.to('ListAliases');
}
/**
* Grants permission to return a list of keys created in the caller's AWS account and Region
*
* Access Level: List
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ListKeys.html
*/
toListKeys() {
return this.to('ListKeys');
}
/**
* Grants permission to return a list of tags created in the caller's AWS account and Region
*
* Access Level: Read
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ListTagsForResource.html
*/
toListTagsForResource() {
return this.to('ListTagsForResource');
}
/**
* Grants permission to attach or replace a resource-based policy on a key
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_PutResourcePolicy.html
*/
toPutResourcePolicy() {
return this.to('PutResourcePolicy');
}
/**
* Grants permission to re-encrypt ciphertext using DUKPT, Symmetric and Asymmetric Data Encryption Keys
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_ReEncryptData.html
*/
toReEncryptData() {
return this.to('ReEncryptData');
}
/**
* Grants permission to remove replication regions from an existing AWS Payment Cryptography key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_RemoveKeyReplicationRegions.html
*/
toRemoveKeyReplicationRegions() {
return this.to('RemoveKeyReplicationRegions');
}
/**
* Grants permission to cancel a scheduled key deletion if at any point during the waiting period a Key needs to be revived
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_RestoreKey.html
*/
toRestoreKey() {
return this.to('RestoreKey');
}
/**
* Grants permission to enable a disabled Key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_StartKeyUsage.html
*/
toStartKeyUsage() {
return this.to('StartKeyUsage');
}
/**
* Grants permission to disable an enabled Key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_StopKeyUsage.html
*/
toStopKeyUsage() {
return this.to('StopKeyUsage');
}
/**
* Grants permission to add or overwrites one or more tags for the specified resource
*
* Access Level: Tagging, Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_TagResource.html
*/
toTagResource() {
return this.to('TagResource');
}
/**
* Grants permission to translate wrapping key type for a wrapped key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_TranslateKeyMaterial.html
*/
toTranslateKeyMaterial() {
return this.to('TranslateKeyMaterial');
}
/**
* Grants permission to translate encrypted PIN block from and to ISO 9564 formats 0,1,3,4
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_TranslatePinData.html
*/
toTranslatePinData() {
return this.to('TranslatePinData');
}
/**
* Grants permission to remove the specified tag or tags from the specified resource
*
* Access Level: Tagging, Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_UntagResource.html
*/
toUntagResource() {
return this.to('UntagResource');
}
/**
* Grants permission to change the key to which an alias is assigned, or unassign it from its current key
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_UpdateAlias.html
*/
toUpdateAlias() {
return this.to('UpdateAlias');
}
/**
* Grants permission to verify Authorization Request Cryptogram (ARQC) for a EMV chip payment card authorization
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_VerifyAuthRequestCryptogram.html
*/
toVerifyAuthRequestCryptogram() {
return this.to('VerifyAuthRequestCryptogram');
}
/**
* Grants permission to verify card-related validation data using algorithms such as Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2) and Card Security Codes (CSC)
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_VerifyCardValidationData.html
*/
toVerifyCardValidationData() {
return this.to('VerifyCardValidationData');
}
/**
* Grants permission to verify MAC (Message Authentication Code) of input data against a provided MAC
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_VerifyMac.html
*/
toVerifyMac() {
return this.to('VerifyMac');
}
/**
* Grants permission to verify pin-related data such as PIN and PIN Offset using algorithms including VISA PVV and IBM3624
*
* Access Level: Write
*
* https://docs.aws.amazon.com/payment-cryptography/latest/DataAPIReference/API_VerifyPinData.html
*/
toVerifyPinData() {
return this.to('VerifyPinData');
}
/**
* Adds a resource of type alias to the statement
*
* @param alias - Identifier for the alias.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifResourceAliases()
*/
onAlias(alias, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:payment-cryptography:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:alias/${alias}`);
}
/**
* Adds a resource of type approval-team to the statement
*
* https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html
*
* @param approvalTeamId - Identifier for the approvalTeamId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onApprovalTeam(approvalTeamId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:mpa:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:approval-team/${approvalTeamId}`);
}
/**
* Adds a resource of type key to the statement
*
* @param keyId - Identifier for the keyId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifResourceAliases()
*/
onKey(keyId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:payment-cryptography:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:key/${keyId}`);
}
/**
* Filters access by both the key and value of the tag in the request for the specified operation
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateKey()
* - .toDeleteAlias()
* - .toGetAlias()
* - .toImportKey()
* - .toTagResource()
* - .toUpdateAlias()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey, value, operator) {
return this.if(`aws:RequestTag/${tagKey}`, value, operator ?? 'StringLike');
}
/**
* Filters access by tags assigned to a key for the specified operation
*
* https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/security_iam_service-with-iam.html#security_iam_service-with-iam-tags
*
* Applies to actions:
* - .toAddKeyReplicationRegions()
* - .toAssociateMpaTeam()
* - .toCreateAlias()
* - .toDecryptData()
* - .toDeleteKey()
* - .toDeleteResourcePolicy()
* - .toDisassociateMpaTeam()
* - .toEncryptData()
* - .toExportKey()
* - .toGenerateAs2805KekValidation()
* - .toGenerateCardValidationData()
* - .toGenerateMac()
* - .toGenerateMacEmvPinChange()
* - .toGeneratePinData()
* - .toGetAlias()
* - .toGetCertificateSigningRequest()
* - .toGetKey()
* - .toGetMpaTeamAssociation()
* - .toGetPublicKeyCertificate()
* - .toGetResourcePolicy()
* - .toListTagsForResource()
* - .toPutResourcePolicy()
* - .toReEncryptData()
* - .toRemoveKeyReplicationRegions()
* - .toRestoreKey()
* - .toStartKeyUsage()
* - .toStopKeyUsage()
* - .toTagResource()
* - .toTranslateKeyMaterial()
* - .toTranslatePinData()
* - .toUntagResource()
* - .toUpdateAlias()
* - .toVerifyAuthRequestCryptogram()
* - .toVerifyCardValidationData()
* - .toVerifyMac()
* - .toVerifyPinData()
*
* Applies to resource types:
* - approval-team
* - key
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey, value, operator) {
return this.if(`aws:ResourceTag/${tagKey}`, value, operator ?? 'StringLike');
}
/**
* Filters access by the tag keys in the request for the specified operation
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toCreateKey()
* - .toDeleteAlias()
* - .toGetAlias()
* - .toImportKey()
* - .toTagResource()
* - .toUntagResource()
* - .toUpdateAlias()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value, operator) {
return this.if(`aws:TagKeys`, value, operator ?? 'StringLike');
}
/**
* Filters access by the CertificateAuthorityPublicKeyIdentifier specified in the request or the ImportKey, and ExportKey operations
*
* Applies to actions:
* - .toExportKey()
* - .toImportKey()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifCertificateAuthorityPublicKeyIdentifier(value, operator) {
return this.if(`CertificateAuthorityPublicKeyIdentifier`, value, operator ?? 'StringLike');
}
/**
* Filters access by the type of key material being imported [RootCertificatePublicKey, TrustedCertificatePublicKey, Tr34KeyBlock, Tr31KeyBlock, DiffieHellmanTr31KeyBlock, As2805KeyCryptogram, KeyCryptogram] for the ImportKey operation
*
* Applies to actions:
* - .toImportKey()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifImportKeyMaterial(value, operator) {
return this.if(`ImportKeyMaterial`, value, operator ?? 'StringLike');
}
/**
* Filters access by KeyAlgorithm specified in the request for the CreateKey operation
*
* Applies to actions:
* - .toCreateKey()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifKeyAlgorithm(value, operator) {
return this.if(`KeyAlgorithm`, value, operator ?? 'StringLike');
}
/**
* Filters access by KeyClass specified in the request for the CreateKey operation
*
* Applies to actions:
* - .toCreateKey()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifKeyClass(value, operator) {
return this.if(`KeyClass`, value, operator ?? 'StringLike');
}
/**
* Filters access by KeyClass specified in the request or associated with a key for the CreateKey operation
*
* Applies to actions:
* - .toCreateKey()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifKeyUsage(value, operator) {
return this.if(`KeyUsage`, value, operator ?? 'StringLike');
}
/**
* Filters access by aliases in the request for the specified operation
*
* Applies to actions:
* - .toAddKeyReplicationRegions()
* - .toDecryptData()
* - .toDeleteKey()
* - .toEncryptData()
* - .toExportKey()
* - .toGenerateAs2805KekValidation()
* - .toGenerateCardValidationData()
* - .toGenerateMac()
* - .toGenerateMacEmvPinChange()
* - .toGeneratePinData()
* - .toGetCertificateSigningRequest()
* - .toGetKey()
* - .toGetPublicKeyCertificate()
* - .toReEncryptData()
* - .toRemoveKeyReplicationRegions()
* - .toRestoreKey()
* - .toStartKeyUsage()
* - .toStopKeyUsage()
* - .toTranslateKeyMaterial()
* - .toTranslatePinData()
* - .toVerifyAuthRequestCryptogram()
* - .toVerifyCardValidationData()
* - .toVerifyMac()
* - .toVerifyPinData()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifRequestAlias(value, operator) {
return this.if(`RequestAlias`, value, operator ?? 'StringLike');
}
/**
* Filters access by aliases associated with a key for the specified operation
*
* Applies to actions:
* - .toAddKeyReplicationRegions()
* - .toCreateAlias()
* - .toDecryptData()
* - .toDeleteAlias()
* - .toDeleteKey()
* - .toDeleteResourcePolicy()
* - .toEncryptData()
* - .toExportKey()
* - .toGenerateAs2805KekValidation()
* - .toGenerateCardValidationData()
* - .toGenerateMac()
* - .toGenerateMacEmvPinChange()
* - .toGeneratePinData()
* - .toGetAlias()
* - .toGetCertificateSigningRequest()
* - .toGetKey()
* - .toGetPublicKeyCertificate()
* - .toGetResourcePolicy()
* - .toListTagsForResource()
* - .toPutResourcePolicy()
* - .toReEncryptData()
* - .toRemoveKeyReplicationRegions()
* - .toRestoreKey()
* - .toStartKeyUsage()
* - .toStopKeyUsage()
* - .toTagResource()
* - .toTranslateKeyMaterial()
* - .toTranslatePinData()
* - .toUntagResource()
* - .toUpdateAlias()
* - .toVerifyAuthRequestCryptogram()
* - .toVerifyCardValidationData()
* - .toVerifyMac()
* - .toVerifyPinData()
*
* Applies to resource types:
* - alias
* - key
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifResourceAliases(value, operator) {
return this.if(`ResourceAliases`, value, operator ?? 'StringLike');
}
/**
* Filters access by the WrappingKeyIdentifier specified in the request for the ImportKey, and ExportKey operations
*
* Applies to actions:
* - .toExportKey()
* - .toImportKey()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifWrappingKeyIdentifier(value, operator) {
return this.if(`WrappingKeyIdentifier`, value, operator ?? 'StringLike');
}
/**
* Statement provider for service [payment-cryptography](https://docs.aws.amazon.com/service-authorization/latest/reference/list_payment-cryptography.html).
*
*/
constructor(props) {
super(props);
this.servicePrefix = 'payment-cryptography';
this.accessLevelList = {
Write: [
'AddKeyReplicationRegions',
'AssociateMpaTeam',
'CreateAlias',
'CreateKey',
'DecryptData',
'DeleteAlias',
'DeleteKey',
'DeleteResourcePolicy',
'DisableDefaultKeyReplicationRegions',
'DisassociateMpaTeam',
'EnableDefaultKeyReplicationRegions',
'EncryptData',
'ExportKey',
'GenerateAs2805KekValidation',
'GenerateCardValidationData',
'GenerateMac',
'GenerateMacEmvPinChange',
'GeneratePinData',
'ImportKey',
'PutResourcePolicy',
'ReEncryptData',
'RemoveKeyReplicationRegions',
'RestoreKey',
'StartKeyUsage',
'StopKeyUsage',
'TagResource',
'TranslateKeyMaterial',
'TranslatePinData',
'UntagResource',
'UpdateAlias',
'VerifyAuthRequestCryptogram',
'VerifyCardValidationData',
'VerifyMac',
'VerifyPinData'
],
'Permissions management': [
'DeleteResourcePolicy',
'PutResourcePolicy'
],
Read: [
'GetAlias',
'GetCertificateSigningRequest',
'GetDefaultKeyReplicationRegions',
'GetKey',
'GetMpaTeamAssociation',
'GetParametersForExport',
'GetParametersForImport',
'GetPublicKeyCertificate',
'GetResourcePolicy',
'ListTagsForResource'
],
List: [
'ListAliases',
'ListKeys'
],
Tagging: [
'TagResource',
'UntagResource'
]
};
}
}
exports.PaymentCryptography = PaymentCryptography;
//# sourceMappingURL=data:application/json;base64,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