UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,472 lines 169 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [s3](https://docs.aws.amazon.com/service-authorization/latest/reference/list_s3.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class S3 extends PolicyStatement { servicePrefix: string; /** * Grants permission to abort a multipart upload * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html */ toAbortMultipartUpload(): this; /** * Grants permission to configure server access logs delivery to CloudWatch * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html */ toAllowVendedLogDeliveryForResource(): this; /** * Grants permission to associate Access Grants identity center * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_AssociateAccessGrantsIdentityCenter.html */ toAssociateAccessGrantsIdentityCenter(): this; /** * Grants permission to allow circumvention of governance-mode object retention settings * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-managing.html#object-lock-managing-bypass */ toBypassGovernanceRetention(): this; /** * Grants permission to create Access Grant * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrant.html */ toCreateAccessGrant(): this; /** * Grants permission to Create Access Grants Instance * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsInstance.html */ toCreateAccessGrantsInstance(): this; /** * Grants permission to create Access Grants location * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsLocation.html */ toCreateAccessGrantsLocation(): this; /** * Grants permission to create a new access point * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html */ toCreateAccessPoint(): this; /** * Grants permission to create an object lambda enabled accesspoint * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPointForObjectLambda.html */ toCreateAccessPointForObjectLambda(): this; /** * Grants permission to create a new bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html */ toCreateBucket(): this; /** * Grants permission to create a new S3 Metadata configuration for a specified general purpose bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataConfiguration.html */ toCreateBucketMetadataTableConfiguration(): this; /** * Grants permission to create a new Amazon S3 Batch Operations job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAuthType() * - .ifRequestJobOperation() * - .ifRequestJobPriority() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateJob.html */ toCreateJob(): this; /** * Grants permission to create a new Multi-Region Access Point * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateMultiRegionAccessPoint.html */ toCreateMultiRegionAccessPoint(): this; /** * Grants permission to create an Amazon S3 Storage Lens group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateStorageLensGroup.html */ toCreateStorageLensGroup(): this; /** * Grants permission to delete Access Grant * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrant.html */ toDeleteAccessGrant(): this; /** * Grants permission to Delete Access Grants Instance * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsInstance.html */ toDeleteAccessGrantsInstance(): this; /** * Grants permission to read Access grants instance resource policy * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsInstanceResourcePolicy.html */ toDeleteAccessGrantsInstanceResourcePolicy(): this; /** * Grants permission to delete Access Grants location * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsLocation.html */ toDeleteAccessGrantsLocation(): this; /** * Grants permission to delete the access point named in the URI * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html */ toDeleteAccessPoint(): this; /** * Grants permission to delete the object lambda enabled access point named in the URI * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointForObjectLambda.html */ toDeleteAccessPointForObjectLambda(): this; /** * Grants permission to delete the policy on a specified access point * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html */ toDeleteAccessPointPolicy(): this; /** * Grants permission to delete the policy on a specified object lambda enabled access point * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicyForObjectLambda.html */ toDeleteAccessPointPolicyForObjectLambda(): this; /** * Grants permission to delete the bucket named in the URI * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html */ toDeleteBucket(): this; /** * Grants permission to delete the S3 Metadata configuration for a specified general purpose bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketMetadataConfiguration.html */ toDeleteBucketMetadataTableConfiguration(): this; /** * Grants permission to delete the policy on a specified bucket * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketPolicy.html */ toDeleteBucketPolicy(): this; /** * Grants permission to remove the website configuration for a bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketWebsite.html */ toDeleteBucketWebsite(): this; /** * Grants permission to remove tags from an existing Amazon S3 Batch Operations job * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteJobTagging.html */ toDeleteJobTagging(): this; /** * Grants permission to delete the Multi-Region Access Point named in the URI * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteMultiRegionAccessPoint.html */ toDeleteMultiRegionAccessPoint(): this; /** * Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html */ toDeleteObject(): this; /** * Grants permission to delete an annotation from an object * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html */ toDeleteObjectAnnotation(): this; /** * Grants permission to use the tagging subresource to remove the entire tag set from the specified object * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html */ toDeleteObjectTagging(): this; /** * Grants permission to remove a specific version of an object * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html */ toDeleteObjectVersion(): this; /** * Grants permission to delete an annotation from a specific version of an object * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html */ toDeleteObjectVersionAnnotation(): this; /** * Grants permission to remove the entire tag set for a specific version of the object * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html */ toDeleteObjectVersionTagging(): this; /** * Grants permission to delete an existing Amazon S3 Storage Lens configuration * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensConfiguration.html */ toDeleteStorageLensConfiguration(): this; /** * Grants permission to remove tags from an existing Amazon S3 Storage Lens configuration * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensConfigurationTagging.html */ toDeleteStorageLensConfigurationTagging(): this; /** * Grants permission to delete an existing S3 Storage Lens group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensGroup.html */ toDeleteStorageLensGroup(): this; /** * Grants permission to retrieve the configuration parameters and status for a batch operations job * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DescribeJob.html */ toDescribeJob(): this; /** * Grants permission to retrieve the configurations for a Multi-Region Access Point * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DescribeMultiRegionAccessPointOperation.html */ toDescribeMultiRegionAccessPointOperation(): this; /** * Grants permission to disassociate Access Grants identity center * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DissociateAccessGrantsIdentityCenter.html */ toDissociateAccessGrantsIdentityCenter(): this; /** * Grants permission to uses the accelerate subresource to return the Transfer Acceleration state of a bucket, which is either Enabled or Suspended * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAccelerateConfiguration.html */ toGetAccelerateConfiguration(): this; /** * Grants permission to read Access Grant * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrant.html */ toGetAccessGrant(): this; /** * Grants permission to Read Access Grants Instance * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstance.html */ toGetAccessGrantsInstance(): this; /** * Grants permission to Read Access Grants Instance by prefix * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstanceForPrefix.html */ toGetAccessGrantsInstanceForPrefix(): this; /** * Grants permission to read Access grants instance resource policy * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstanceResourcePolicy.html */ toGetAccessGrantsInstanceResourcePolicy(): this; /** * Grants permission to read Access Grants location * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsLocation.html */ toGetAccessGrantsLocation(): this; /** * Grants permission to return configuration information about the specified access point * * Access Level: Read * * Possible conditions: * - .ifAwsResourceTag() * - .ifAccessPointNetworkOrigin() * - .ifAccessPointTag() * - .ifAuthType() * - .ifDataAccessPointAccount() * - .ifDataAccessPointArn() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html */ toGetAccessPoint(): this; /** * Grants permission to retrieve the configuration of the object lambda enabled access point * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointConfigurationForObjectLambda.html */ toGetAccessPointConfigurationForObjectLambda(): this; /** * Grants permission to create an object lambda enabled accesspoint * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointForObjectLambda.html */ toGetAccessPointForObjectLambda(): this; /** * Grants permission to return the access point policy associated with the specified access point * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html */ toGetAccessPointPolicy(): this; /** * Grants permission to return the access point policy associated with the specified object lambda enabled access point * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyForObjectLambda.html */ toGetAccessPointPolicyForObjectLambda(): this; /** * Grants permission to return the policy status for a specific access point policy * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatus.html */ toGetAccessPointPolicyStatus(): this; /** * Grants permission to return the policy status for a specific object lambda access point policy * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatusForObjectLambda.html */ toGetAccessPointPolicyStatusForObjectLambda(): this; /** * Grants permission to retrieve the PublicAccessBlock configuration for an AWS account * * Access Level: Read * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetPublicAccessBlock.html */ toGetAccountPublicAccessBlock(): this; /** * Grants permission to get an analytics configuration from an Amazon S3 bucket, identified by the analytics configuration ID * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAnalyticsConfiguration.html */ toGetAnalyticsConfiguration(): this; /** * Grants permission to retrieve ABAC configuration for a general purpose bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAbac.html */ toGetBucketAbac(): this; /** * Grants permission to use the acl subresource to return the access control list (ACL) of an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAcl.html */ toGetBucketAcl(): this; /** * Grants permission to return the CORS configuration information set for an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketCors.html */ toGetBucketCORS(): this; /** * Grants permission to return the Region that an Amazon S3 bucket resides in * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLocation.html */ toGetBucketLocation(): this; /** * Grants permission to return the logging status of an Amazon S3 bucket and the permissions users have to view or modify that status * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLogging.html */ toGetBucketLogging(): this; /** * Grants permission to return the S3 Metadata configuration for a specified general purpose bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetadataConfiguration.html */ toGetBucketMetadataTableConfiguration(): this; /** * Grants permission to get the notification configuration of an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketNotification.html */ toGetBucketNotification(): this; /** * Grants permission to get the Object Lock configuration of an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLockConfiguration.html */ toGetBucketObjectLockConfiguration(): this; /** * Grants permission to retrieve ownership controls on a bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketOwnershipControls.html */ toGetBucketOwnershipControls(): this; /** * Grants permission to return the policy of the specified bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicy.html */ toGetBucketPolicy(): this; /** * Grants permission to retrieve the policy status for a specific Amazon S3 bucket, which indicates whether the bucket is public * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicyStatus.html */ toGetBucketPolicyStatus(): this; /** * Grants permission to retrieve the PublicAccessBlock configuration for an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetPublicAccessBlock.html */ toGetBucketPublicAccessBlock(): this; /** * Grants permission to return the request payment configuration for an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketRequestPayment.html */ toGetBucketRequestPayment(): this; /** * Grants permission to return the tag set associated with an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketTagging.html */ toGetBucketTagging(): this; /** * Grants permission to return the versioning state of an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketVersioning.html */ toGetBucketVersioning(): this; /** * Grants permission to return the website configuration for an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketWebsite.html */ toGetBucketWebsite(): this; /** * Grants permission to get Access * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetDataAccess.html */ toGetDataAccess(): this; /** * Grants permission to return the default encryption configuration an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html */ toGetEncryptionConfiguration(): this; /** * Grants permission to get an or list all Amazon S3 Intelligent Tiering configuration in a S3 Bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketIntelligentTieringConfiguration.html */ toGetIntelligentTieringConfiguration(): this; /** * Grants permission to return an inventory configuration from an Amazon S3 bucket, identified by the inventory configuration ID * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketInventoryConfiguration.html */ toGetInventoryConfiguration(): this; /** * Grants permission to return the tag set of an existing Amazon S3 Batch Operations job * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetJobTagging.html */ toGetJobTagging(): this; /** * Grants permission to return the lifecycle configuration information set on an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html */ toGetLifecycleConfiguration(): this; /** * Grants permission to get a metrics configuration from an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetricsConfiguration.html */ toGetMetricsConfiguration(): this; /** * Grants permission to return configuration information about the specified Multi-Region Access Point * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPoint.html */ toGetMultiRegionAccessPoint(): this; /** * Grants permission to return the access point policy associated with the specified Multi-Region Access Point * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointPolicy.html */ toGetMultiRegionAccessPointPolicy(): this; /** * Grants permission to return the policy status for a specific Multi-Region Access Point policy * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointPolicyStatus.html */ toGetMultiRegionAccessPointPolicyStatus(): this; /** * Grants permission to return the route configuration for a Multi-Region Access Point * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointRoutes.html */ toGetMultiRegionAccessPointRoutes(): this; /** * Grants permission to retrieve objects from Amazon S3 * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html */ toGetObject(): this; /** * Grants permission to return the access control list (ACL) of an object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html */ toGetObjectAcl(): this; /** * Grants permission to retrieve an annotation from an object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html */ toGetObjectAnnotation(): this; /** * Grants permission to retrieve attributes related to a specific object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html */ toGetObjectAttributes(): this; /** * Grants permission to get an object's current Legal Hold status * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLegalHold.html */ toGetObjectLegalHold(): this; /** * Grants permission to retrieve the retention settings for an object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectRetention.html */ toGetObjectRetention(): this; /** * Grants permission to return the tag set of an object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTagging.html */ toGetObjectTagging(): this; /** * Grants permission to return torrent files from an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTorrent.html */ toGetObjectTorrent(): this; /** * Grants permission to retrieve a specific version of an object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html */ toGetObjectVersion(): this; /** * Grants permission to return the access control list (ACL) of a specific object version * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html */ toGetObjectVersionAcl(): this; /** * Grants permission to retrieve an annotation from a specific version of an object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html */ toGetObjectVersionAnnotation(): this; /** * Grants permission to get an object version annotation for replication * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html */ toGetObjectVersionAnnotationForReplication(): this; /** * Grants permission to retrieve attributes related to a specific version of an object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html */ toGetObjectVersionAttributes(): this; /** * Grants permission to replicate both unencrypted objects and objects encrypted with SSE-S3 or SSE-KMS * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-config-for-kms-objects.html */ toGetObjectVersionForReplication(): this; /** * Grants permission to return the tag set for a specific version of the object * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html */ toGetObjectVersionTagging(): this; /** * Grants permission to get Torrent files about a different version using the versionId subresource * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTorrent.html */ toGetObjectVersionTorrent(): this; /** * Grants permission to get the replication configuration information set on an Amazon S3 bucket * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketReplication.html */ toGetReplicationConfiguration(): this; /** * Grants permission to get an Amazon S3 Storage Lens configuration * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensConfiguration.html */ toGetStorageLensConfiguration(): this; /** * Grants permission to get the tag set of an existing Amazon S3 Storage Lens configuration * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensConfigurationTagging.html */ toGetStorageLensConfigurationTagging(): this; /** * Grants permission to get an Amazon S3 Storage Lens dashboard * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_dashboard.html */ toGetStorageLensDashboard(): this; /** * Grants permission to get an Amazon S3 Storage Lens group * * Access Level: Read * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensGroup.html */ toGetStorageLensGroup(): this; /** * Grants permission to list Access Grant * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrants.html */ toListAccessGrants(): this; /** * Grants permission to List Access Grants Instances * * Access Level: List * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrantsInstances.html */ toListAccessGrantsInstances(): this; /** * Grants permission to list Access Grants locations * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrantsLocations.html */ toListAccessGrantsLocations(): this; /** * Grants permission to list access points * * Access Level: List * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPoints.html */ toListAccessPoints(): this; /** * Grants permission to list object lambda enabled accesspoints * * Access Level: List * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPointsForObjectLambda.html */ toListAccessPointsForObjectLambda(): this; /** * Grants permission to list all buckets owned by the authenticated sender of the request * * Access Level: List * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListBuckets.html */ toListAllMyBuckets(): this; /** * Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000) * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectsV2.html */ toListBucket(): this; /** * Grants permission to list in-progress multipart uploads * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html */ toListBucketMultipartUploads(): this; /** * Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectVersions.html */ toListBucketVersions(): this; /** * Grants permission to list caller's Access Grant * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListCallerAccessGrants.html */ toListCallerAccessGrants(): this; /** * Grants permission to list current jobs and jobs that have ended recently * * Access Level: List * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListJobs.html */ toListJobs(): this; /** * Grants permission to list Multi-Region Access Points * * Access Level: List * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListMultiRegionAccessPoints.html */ toListMultiRegionAccessPoints(): this; /** * Grants permission to list the parts that have been uploaded for a specific multipart upload * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html */ toListMultipartUploadParts(): this; /** * Grants permission to list annotations on an object * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html */ toListObjectAnnotations(): this; /** * Grants permission to list annotations on a specific version of an object * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html */ toListObjectVersionAnnotations(): this; /** * Grants permission to list Amazon S3 Storage Lens configurations * * Access Level: List * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensConfigurations.html */ toListStorageLensConfigurations(): this; /** * Grants permission to list S3 Storage Lens groups * * Access Level: List * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensGroups.html */ toListStorageLensGroups(): this; /** * Grants permission to list the tags attached to the specified resource * * Access Level: List * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListTagsForResource.html */ toListTagsForResource(): this; /** * Grants permission to change replica ownership * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-change-owner.html#repl-ownership-add-role-permission */ toObjectOwnerOverrideToBucketOwner(): this; /** * Grants permission to use the accelerate subresource to set the Transfer Acceleration state of an existing S3 bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAccelerateConfiguration.html */ toPutAccelerateConfiguration(): this; /** * Grants permission to put Access grants instance resource policy * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessGrantsInstanceResourcePolicy.html */ toPutAccessGrantsInstanceResourcePolicy(): this; /** * Grants permission to set the configuration of the object lambda enabled access point * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointConfigurationForObjectLambda.html */ toPutAccessPointConfigurationForObjectLambda(): this; /** * Grants permission to associate an access policy with a specified access point * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html */ toPutAccessPointPolicy(): this; /** * Grants permission to associate an access policy with a specified object lambda enabled access point * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicyForObjectLambda.html */ toPutAccessPointPolicyForObjectLambda(): this; /** * Grants permission to associate public access block configurations with a specified access point, while creating a access point * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html#access-control-block-public-access-examples-access-point */ toPutAccessPointPublicAccessBlock(): this; /** * Grants permission to create or modify the PublicAccessBlock configuration for an AWS account * * Access Level: Permissions management, Write * * Possible conditions: * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutPublicAccessBlock.html */ toPutAccountPublicAccessBlock(): this; /** * Grants permission to set an analytics configuration for the bucket, specified by the analytics configuration ID * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAnalyticsConfiguration.html */ toPutAnalyticsConfiguration(): this; /** * Grants permission to set ABAC configuration for a general purpose bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAbac.html */ toPutBucketAbac(): this; /** * Grants permission to set the permissions on an existing bucket using access control lists (ACLs) * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAcl.html */ toPutBucketAcl(): this; /** * Grants permission to set the CORS configuration for an Amazon S3 bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketCors.html */ toPutBucketCORS(): this; /** * Grants permission to set the logging parameters for an Amazon S3 bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLogging.html */ toPutBucketLogging(): this; /** * Grants permission to receive notifications when certain events happen in an Amazon S3 bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketNotification.html */ toPutBucketNotification(): this; /** * Grants permission to put Object Lock configuration on a specific bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLockConfiguration.html */ toPutBucketObjectLockConfiguration(): this; /** * Grants permission to add, replace or delete ownership controls on a bucket * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketOwnershipControls.html */ toPutBucketOwnershipControls(): this; /** * Grants permission to add or replace a bucket policy on a bucket * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketPolicy.html */ toPutBucketPolicy(): this; /** * Grants permission to create or modify the PublicAccessBlock configuration for a specific Amazon S3 bucket * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutPublicAccessBlock.html */ toPutBucketPublicAccessBlock(): this; /** * Grants permission to set the request payment configuration of a bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketRequestPayment.html */ toPutBucketRequestPayment(): this; /** * Grants permission to add a set of tags to an existing Amazon S3 bucket * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketTagging.html */ toPutBucketTagging(): this; /** * Grants permission to set the versioning state of an existing Amazon S3 bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketVersioning.html */ toPutBucketVersioning(): this; /** * Grants permission to set the configuration of the website that is specified in the website subresource * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketWebsite.html */ toPutBucketWebsite(): this; /** * Grants permission to set the encryption configuration for an Amazon S3 bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html */ toPutEncryptionConfiguration(): this; /** * Grants permission to create new or update or delete an existing Amazon S3 Intelligent Tiering configuration * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketIntelligentTieringConfiguration.html */ toPutIntelligentTieringConfiguration(): this; /** * Grants permission to add an inventory configuration to the bucket, identified by the inventory ID * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketInventoryConfiguration.html */ toPutInventoryConfiguration(): this; /** * Grants permission to replace tags on an existing Amazon S3 Batch Operations job * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutJobTagging.html */ toPutJobTagging(): this; /** * Grants permission to create a new lifecycle configuration for the bucket or replace an existing lifecycle configuration * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html */ toPutLifecycleConfiguration(): this; /** * Grants permission to set or update a metrics configuration for the CloudWatch request metrics from an Amazon S3 bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketMetricsConfiguration.html */ toPutMetricsConfiguration(): this; /** * Grants permission to associate an access policy with a specified Multi-Region Access Point * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutMultiRegionAccessPointPolicy.html */ toPutMultiRegionAccessPointPolicy(): this; /** * Grants permission to add an object to a bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html */ toPutObject(): this; /** * Grants permission to set the access control list (ACL) permissions for new or existing objects in an S3 bucket * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAcl.html */ toPutObjectAcl(): this; /** * Grants permission to add or replace an annotation on an object * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html */ toPutObjectAnnotation(): this; /** * Grants permission to apply a Legal Hold configuration to the specified object * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLegalHold.html */ toPutObjectLegalHold(): this; /** * Grants permission to place an Object Retention configuration on an object * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectRetention.html */ toPutObjectRetention(): this; /** * Grants permission to set the supplied tag-set to an object that already exists in a bucket * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html */ toPutObjectTagging(): this; /** * Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket * * Access Level: Permissions management, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAcl.html */ toPutObjectVersionAcl(): this; /** * Grants permission to add or replace an annotation on a specific version of an object * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html */ toPutObjectVersionAnnotation(): this; /** * Grants permission to set the supplied tag-set for a specific version of an object * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html */ toPutObjectVersionTagging(): this; /** * Grants permission to create a new replication configuration or replace an existing one * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketReplication.html */ toPutReplicationConfiguration(): this; /** * Grants permission to create or update an Amazon S3 Storage Lens configuration * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAuthType() * - .ifResourceAccount() * - .ifSignatureAge() * - .ifSignatureversion() * - .ifTlsVersion() * - .ifXAmzContentSha256() * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutStorageLensConfiguration.html */ toPutStorageLensConfiguration(): this; /** * Grants permission to put or replace tags on an existing Amazon S3 Storage Lens configuration * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutStorageLensConfigurationTagging.html */ toPutStorageLensConfigurationTagging(): this; /** * Grants permission to replicate delete markers to the destination bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html */ toReplicateDelete(): this; /** * Grants permission to replicate objects and object tags to the destination bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html */ toReplicateObject(): this; /** * Grants permission to replicate annotations to the destination bucket * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html */ toReplicateObjectAnnotation(): this; /** * Grants permission to replicate object tags to the destination bucket * * Access Level: Tagging, Write * * https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html */ toReplicateTags(): this; /** * Grants permission to restore an archived copy of an object back into Amazon S3 * * Access Level: Write * * https://docs.aws.amazon.com/AmazonS3/latest/API/API_RestoreObject.html */ toRestoreObject(): this; /** * Grants permission to submit a route configuration updat