cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
1,543 lines • 491 kB
JavaScript
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.S3 = void 0;
const shared_1 = require("../../shared");
/**
* Statement provider for service [s3](https://docs.aws.amazon.com/service-authorization/latest/reference/list_s3.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
class S3 extends shared_1.PolicyStatement {
/**
* Grants permission to abort a multipart upload
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html
*/
toAbortMultipartUpload() {
return this.to('AbortMultipartUpload');
}
/**
* Grants permission to configure server access logs delivery to CloudWatch
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html
*/
toAllowVendedLogDeliveryForResource() {
return this.to('AllowVendedLogDeliveryForResource');
}
/**
* Grants permission to associate Access Grants identity center
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_AssociateAccessGrantsIdentityCenter.html
*/
toAssociateAccessGrantsIdentityCenter() {
return this.to('AssociateAccessGrantsIdentityCenter');
}
/**
* Grants permission to allow circumvention of governance-mode object retention settings
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-managing.html#object-lock-managing-bypass
*/
toBypassGovernanceRetention() {
return this.to('BypassGovernanceRetention');
}
/**
* Grants permission to create Access Grant
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrant.html
*/
toCreateAccessGrant() {
return this.to('CreateAccessGrant');
}
/**
* Grants permission to Create Access Grants Instance
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsInstance.html
*/
toCreateAccessGrantsInstance() {
return this.to('CreateAccessGrantsInstance');
}
/**
* Grants permission to create Access Grants location
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsLocation.html
*/
toCreateAccessGrantsLocation() {
return this.to('CreateAccessGrantsLocation');
}
/**
* Grants permission to create a new access point
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html
*/
toCreateAccessPoint() {
return this.to('CreateAccessPoint');
}
/**
* Grants permission to create an object lambda enabled accesspoint
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPointForObjectLambda.html
*/
toCreateAccessPointForObjectLambda() {
return this.to('CreateAccessPointForObjectLambda');
}
/**
* Grants permission to create a new bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html
*/
toCreateBucket() {
return this.to('CreateBucket');
}
/**
* Grants permission to create a new S3 Metadata configuration for a specified general purpose bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataConfiguration.html
*/
toCreateBucketMetadataTableConfiguration() {
return this.to('CreateBucketMetadataTableConfiguration');
}
/**
* Grants permission to create a new Amazon S3 Batch Operations job
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifAuthType()
* - .ifRequestJobOperation()
* - .ifRequestJobPriority()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateJob.html
*/
toCreateJob() {
return this.to('CreateJob');
}
/**
* Grants permission to create a new Multi-Region Access Point
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateMultiRegionAccessPoint.html
*/
toCreateMultiRegionAccessPoint() {
return this.to('CreateMultiRegionAccessPoint');
}
/**
* Grants permission to create an Amazon S3 Storage Lens group
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateStorageLensGroup.html
*/
toCreateStorageLensGroup() {
return this.to('CreateStorageLensGroup');
}
/**
* Grants permission to delete Access Grant
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrant.html
*/
toDeleteAccessGrant() {
return this.to('DeleteAccessGrant');
}
/**
* Grants permission to Delete Access Grants Instance
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsInstance.html
*/
toDeleteAccessGrantsInstance() {
return this.to('DeleteAccessGrantsInstance');
}
/**
* Grants permission to read Access grants instance resource policy
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsInstanceResourcePolicy.html
*/
toDeleteAccessGrantsInstanceResourcePolicy() {
return this.to('DeleteAccessGrantsInstanceResourcePolicy');
}
/**
* Grants permission to delete Access Grants location
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsLocation.html
*/
toDeleteAccessGrantsLocation() {
return this.to('DeleteAccessGrantsLocation');
}
/**
* Grants permission to delete the access point named in the URI
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html
*/
toDeleteAccessPoint() {
return this.to('DeleteAccessPoint');
}
/**
* Grants permission to delete the object lambda enabled access point named in the URI
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointForObjectLambda.html
*/
toDeleteAccessPointForObjectLambda() {
return this.to('DeleteAccessPointForObjectLambda');
}
/**
* Grants permission to delete the policy on a specified access point
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html
*/
toDeleteAccessPointPolicy() {
return this.to('DeleteAccessPointPolicy');
}
/**
* Grants permission to delete the policy on a specified object lambda enabled access point
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicyForObjectLambda.html
*/
toDeleteAccessPointPolicyForObjectLambda() {
return this.to('DeleteAccessPointPolicyForObjectLambda');
}
/**
* Grants permission to delete the bucket named in the URI
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html
*/
toDeleteBucket() {
return this.to('DeleteBucket');
}
/**
* Grants permission to delete the S3 Metadata configuration for a specified general purpose bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketMetadataConfiguration.html
*/
toDeleteBucketMetadataTableConfiguration() {
return this.to('DeleteBucketMetadataTableConfiguration');
}
/**
* Grants permission to delete the policy on a specified bucket
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketPolicy.html
*/
toDeleteBucketPolicy() {
return this.to('DeleteBucketPolicy');
}
/**
* Grants permission to remove the website configuration for a bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketWebsite.html
*/
toDeleteBucketWebsite() {
return this.to('DeleteBucketWebsite');
}
/**
* Grants permission to remove tags from an existing Amazon S3 Batch Operations job
*
* Access Level: Tagging, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteJobTagging.html
*/
toDeleteJobTagging() {
return this.to('DeleteJobTagging');
}
/**
* Grants permission to delete the Multi-Region Access Point named in the URI
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteMultiRegionAccessPoint.html
*/
toDeleteMultiRegionAccessPoint() {
return this.to('DeleteMultiRegionAccessPoint');
}
/**
* Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html
*/
toDeleteObject() {
return this.to('DeleteObject');
}
/**
* Grants permission to delete an annotation from an object
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html
*/
toDeleteObjectAnnotation() {
return this.to('DeleteObjectAnnotation');
}
/**
* Grants permission to use the tagging subresource to remove the entire tag set from the specified object
*
* Access Level: Tagging, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html
*/
toDeleteObjectTagging() {
return this.to('DeleteObjectTagging');
}
/**
* Grants permission to remove a specific version of an object
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html
*/
toDeleteObjectVersion() {
return this.to('DeleteObjectVersion');
}
/**
* Grants permission to delete an annotation from a specific version of an object
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html
*/
toDeleteObjectVersionAnnotation() {
return this.to('DeleteObjectVersionAnnotation');
}
/**
* Grants permission to remove the entire tag set for a specific version of the object
*
* Access Level: Tagging, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html
*/
toDeleteObjectVersionTagging() {
return this.to('DeleteObjectVersionTagging');
}
/**
* Grants permission to delete an existing Amazon S3 Storage Lens configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensConfiguration.html
*/
toDeleteStorageLensConfiguration() {
return this.to('DeleteStorageLensConfiguration');
}
/**
* Grants permission to remove tags from an existing Amazon S3 Storage Lens configuration
*
* Access Level: Tagging, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensConfigurationTagging.html
*/
toDeleteStorageLensConfigurationTagging() {
return this.to('DeleteStorageLensConfigurationTagging');
}
/**
* Grants permission to delete an existing S3 Storage Lens group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensGroup.html
*/
toDeleteStorageLensGroup() {
return this.to('DeleteStorageLensGroup');
}
/**
* Grants permission to retrieve the configuration parameters and status for a batch operations job
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DescribeJob.html
*/
toDescribeJob() {
return this.to('DescribeJob');
}
/**
* Grants permission to retrieve the configurations for a Multi-Region Access Point
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DescribeMultiRegionAccessPointOperation.html
*/
toDescribeMultiRegionAccessPointOperation() {
return this.to('DescribeMultiRegionAccessPointOperation');
}
/**
* Grants permission to disassociate Access Grants identity center
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DissociateAccessGrantsIdentityCenter.html
*/
toDissociateAccessGrantsIdentityCenter() {
return this.to('DissociateAccessGrantsIdentityCenter');
}
/**
* Grants permission to uses the accelerate subresource to return the Transfer Acceleration state of a bucket, which is either Enabled or Suspended
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAccelerateConfiguration.html
*/
toGetAccelerateConfiguration() {
return this.to('GetAccelerateConfiguration');
}
/**
* Grants permission to read Access Grant
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrant.html
*/
toGetAccessGrant() {
return this.to('GetAccessGrant');
}
/**
* Grants permission to Read Access Grants Instance
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstance.html
*/
toGetAccessGrantsInstance() {
return this.to('GetAccessGrantsInstance');
}
/**
* Grants permission to Read Access Grants Instance by prefix
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstanceForPrefix.html
*/
toGetAccessGrantsInstanceForPrefix() {
return this.to('GetAccessGrantsInstanceForPrefix');
}
/**
* Grants permission to read Access grants instance resource policy
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstanceResourcePolicy.html
*/
toGetAccessGrantsInstanceResourcePolicy() {
return this.to('GetAccessGrantsInstanceResourcePolicy');
}
/**
* Grants permission to read Access Grants location
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsLocation.html
*/
toGetAccessGrantsLocation() {
return this.to('GetAccessGrantsLocation');
}
/**
* Grants permission to return configuration information about the specified access point
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifAccessPointNetworkOrigin()
* - .ifAccessPointTag()
* - .ifAuthType()
* - .ifDataAccessPointAccount()
* - .ifDataAccessPointArn()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html
*/
toGetAccessPoint() {
return this.to('GetAccessPoint');
}
/**
* Grants permission to retrieve the configuration of the object lambda enabled access point
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointConfigurationForObjectLambda.html
*/
toGetAccessPointConfigurationForObjectLambda() {
return this.to('GetAccessPointConfigurationForObjectLambda');
}
/**
* Grants permission to create an object lambda enabled accesspoint
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointForObjectLambda.html
*/
toGetAccessPointForObjectLambda() {
return this.to('GetAccessPointForObjectLambda');
}
/**
* Grants permission to return the access point policy associated with the specified access point
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html
*/
toGetAccessPointPolicy() {
return this.to('GetAccessPointPolicy');
}
/**
* Grants permission to return the access point policy associated with the specified object lambda enabled access point
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyForObjectLambda.html
*/
toGetAccessPointPolicyForObjectLambda() {
return this.to('GetAccessPointPolicyForObjectLambda');
}
/**
* Grants permission to return the policy status for a specific access point policy
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatus.html
*/
toGetAccessPointPolicyStatus() {
return this.to('GetAccessPointPolicyStatus');
}
/**
* Grants permission to return the policy status for a specific object lambda access point policy
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatusForObjectLambda.html
*/
toGetAccessPointPolicyStatusForObjectLambda() {
return this.to('GetAccessPointPolicyStatusForObjectLambda');
}
/**
* Grants permission to retrieve the PublicAccessBlock configuration for an AWS account
*
* Access Level: Read
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetPublicAccessBlock.html
*/
toGetAccountPublicAccessBlock() {
return this.to('GetAccountPublicAccessBlock');
}
/**
* Grants permission to get an analytics configuration from an Amazon S3 bucket, identified by the analytics configuration ID
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAnalyticsConfiguration.html
*/
toGetAnalyticsConfiguration() {
return this.to('GetAnalyticsConfiguration');
}
/**
* Grants permission to retrieve ABAC configuration for a general purpose bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAbac.html
*/
toGetBucketAbac() {
return this.to('GetBucketAbac');
}
/**
* Grants permission to use the acl subresource to return the access control list (ACL) of an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAcl.html
*/
toGetBucketAcl() {
return this.to('GetBucketAcl');
}
/**
* Grants permission to return the CORS configuration information set for an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketCors.html
*/
toGetBucketCORS() {
return this.to('GetBucketCORS');
}
/**
* Grants permission to return the Region that an Amazon S3 bucket resides in
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLocation.html
*/
toGetBucketLocation() {
return this.to('GetBucketLocation');
}
/**
* Grants permission to return the logging status of an Amazon S3 bucket and the permissions users have to view or modify that status
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLogging.html
*/
toGetBucketLogging() {
return this.to('GetBucketLogging');
}
/**
* Grants permission to return the S3 Metadata configuration for a specified general purpose bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetadataConfiguration.html
*/
toGetBucketMetadataTableConfiguration() {
return this.to('GetBucketMetadataTableConfiguration');
}
/**
* Grants permission to get the notification configuration of an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketNotification.html
*/
toGetBucketNotification() {
return this.to('GetBucketNotification');
}
/**
* Grants permission to get the Object Lock configuration of an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLockConfiguration.html
*/
toGetBucketObjectLockConfiguration() {
return this.to('GetBucketObjectLockConfiguration');
}
/**
* Grants permission to retrieve ownership controls on a bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketOwnershipControls.html
*/
toGetBucketOwnershipControls() {
return this.to('GetBucketOwnershipControls');
}
/**
* Grants permission to return the policy of the specified bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicy.html
*/
toGetBucketPolicy() {
return this.to('GetBucketPolicy');
}
/**
* Grants permission to retrieve the policy status for a specific Amazon S3 bucket, which indicates whether the bucket is public
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicyStatus.html
*/
toGetBucketPolicyStatus() {
return this.to('GetBucketPolicyStatus');
}
/**
* Grants permission to retrieve the PublicAccessBlock configuration for an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetPublicAccessBlock.html
*/
toGetBucketPublicAccessBlock() {
return this.to('GetBucketPublicAccessBlock');
}
/**
* Grants permission to return the request payment configuration for an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketRequestPayment.html
*/
toGetBucketRequestPayment() {
return this.to('GetBucketRequestPayment');
}
/**
* Grants permission to return the tag set associated with an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketTagging.html
*/
toGetBucketTagging() {
return this.to('GetBucketTagging');
}
/**
* Grants permission to return the versioning state of an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketVersioning.html
*/
toGetBucketVersioning() {
return this.to('GetBucketVersioning');
}
/**
* Grants permission to return the website configuration for an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketWebsite.html
*/
toGetBucketWebsite() {
return this.to('GetBucketWebsite');
}
/**
* Grants permission to get Access
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetDataAccess.html
*/
toGetDataAccess() {
return this.to('GetDataAccess');
}
/**
* Grants permission to return the default encryption configuration an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html
*/
toGetEncryptionConfiguration() {
return this.to('GetEncryptionConfiguration');
}
/**
* Grants permission to get an or list all Amazon S3 Intelligent Tiering configuration in a S3 Bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketIntelligentTieringConfiguration.html
*/
toGetIntelligentTieringConfiguration() {
return this.to('GetIntelligentTieringConfiguration');
}
/**
* Grants permission to return an inventory configuration from an Amazon S3 bucket, identified by the inventory configuration ID
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketInventoryConfiguration.html
*/
toGetInventoryConfiguration() {
return this.to('GetInventoryConfiguration');
}
/**
* Grants permission to return the tag set of an existing Amazon S3 Batch Operations job
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetJobTagging.html
*/
toGetJobTagging() {
return this.to('GetJobTagging');
}
/**
* Grants permission to return the lifecycle configuration information set on an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html
*/
toGetLifecycleConfiguration() {
return this.to('GetLifecycleConfiguration');
}
/**
* Grants permission to get a metrics configuration from an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetricsConfiguration.html
*/
toGetMetricsConfiguration() {
return this.to('GetMetricsConfiguration');
}
/**
* Grants permission to return configuration information about the specified Multi-Region Access Point
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPoint.html
*/
toGetMultiRegionAccessPoint() {
return this.to('GetMultiRegionAccessPoint');
}
/**
* Grants permission to return the access point policy associated with the specified Multi-Region Access Point
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointPolicy.html
*/
toGetMultiRegionAccessPointPolicy() {
return this.to('GetMultiRegionAccessPointPolicy');
}
/**
* Grants permission to return the policy status for a specific Multi-Region Access Point policy
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointPolicyStatus.html
*/
toGetMultiRegionAccessPointPolicyStatus() {
return this.to('GetMultiRegionAccessPointPolicyStatus');
}
/**
* Grants permission to return the route configuration for a Multi-Region Access Point
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointRoutes.html
*/
toGetMultiRegionAccessPointRoutes() {
return this.to('GetMultiRegionAccessPointRoutes');
}
/**
* Grants permission to retrieve objects from Amazon S3
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html
*/
toGetObject() {
return this.to('GetObject');
}
/**
* Grants permission to return the access control list (ACL) of an object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html
*/
toGetObjectAcl() {
return this.to('GetObjectAcl');
}
/**
* Grants permission to retrieve an annotation from an object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html
*/
toGetObjectAnnotation() {
return this.to('GetObjectAnnotation');
}
/**
* Grants permission to retrieve attributes related to a specific object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html
*/
toGetObjectAttributes() {
return this.to('GetObjectAttributes');
}
/**
* Grants permission to get an object's current Legal Hold status
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLegalHold.html
*/
toGetObjectLegalHold() {
return this.to('GetObjectLegalHold');
}
/**
* Grants permission to retrieve the retention settings for an object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectRetention.html
*/
toGetObjectRetention() {
return this.to('GetObjectRetention');
}
/**
* Grants permission to return the tag set of an object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTagging.html
*/
toGetObjectTagging() {
return this.to('GetObjectTagging');
}
/**
* Grants permission to return torrent files from an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTorrent.html
*/
toGetObjectTorrent() {
return this.to('GetObjectTorrent');
}
/**
* Grants permission to retrieve a specific version of an object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html
*/
toGetObjectVersion() {
return this.to('GetObjectVersion');
}
/**
* Grants permission to return the access control list (ACL) of a specific object version
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html
*/
toGetObjectVersionAcl() {
return this.to('GetObjectVersionAcl');
}
/**
* Grants permission to retrieve an annotation from a specific version of an object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html
*/
toGetObjectVersionAnnotation() {
return this.to('GetObjectVersionAnnotation');
}
/**
* Grants permission to get an object version annotation for replication
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html
*/
toGetObjectVersionAnnotationForReplication() {
return this.to('GetObjectVersionAnnotationForReplication');
}
/**
* Grants permission to retrieve attributes related to a specific version of an object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html
*/
toGetObjectVersionAttributes() {
return this.to('GetObjectVersionAttributes');
}
/**
* Grants permission to replicate both unencrypted objects and objects encrypted with SSE-S3 or SSE-KMS
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-config-for-kms-objects.html
*/
toGetObjectVersionForReplication() {
return this.to('GetObjectVersionForReplication');
}
/**
* Grants permission to return the tag set for a specific version of the object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html
*/
toGetObjectVersionTagging() {
return this.to('GetObjectVersionTagging');
}
/**
* Grants permission to get Torrent files about a different version using the versionId subresource
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTorrent.html
*/
toGetObjectVersionTorrent() {
return this.to('GetObjectVersionTorrent');
}
/**
* Grants permission to get the replication configuration information set on an Amazon S3 bucket
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketReplication.html
*/
toGetReplicationConfiguration() {
return this.to('GetReplicationConfiguration');
}
/**
* Grants permission to get an Amazon S3 Storage Lens configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensConfiguration.html
*/
toGetStorageLensConfiguration() {
return this.to('GetStorageLensConfiguration');
}
/**
* Grants permission to get the tag set of an existing Amazon S3 Storage Lens configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensConfigurationTagging.html
*/
toGetStorageLensConfigurationTagging() {
return this.to('GetStorageLensConfigurationTagging');
}
/**
* Grants permission to get an Amazon S3 Storage Lens dashboard
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_dashboard.html
*/
toGetStorageLensDashboard() {
return this.to('GetStorageLensDashboard');
}
/**
* Grants permission to get an Amazon S3 Storage Lens group
*
* Access Level: Read
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensGroup.html
*/
toGetStorageLensGroup() {
return this.to('GetStorageLensGroup');
}
/**
* Grants permission to list Access Grant
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrants.html
*/
toListAccessGrants() {
return this.to('ListAccessGrants');
}
/**
* Grants permission to List Access Grants Instances
*
* Access Level: List
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrantsInstances.html
*/
toListAccessGrantsInstances() {
return this.to('ListAccessGrantsInstances');
}
/**
* Grants permission to list Access Grants locations
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrantsLocations.html
*/
toListAccessGrantsLocations() {
return this.to('ListAccessGrantsLocations');
}
/**
* Grants permission to list access points
*
* Access Level: List
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPoints.html
*/
toListAccessPoints() {
return this.to('ListAccessPoints');
}
/**
* Grants permission to list object lambda enabled accesspoints
*
* Access Level: List
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPointsForObjectLambda.html
*/
toListAccessPointsForObjectLambda() {
return this.to('ListAccessPointsForObjectLambda');
}
/**
* Grants permission to list all buckets owned by the authenticated sender of the request
*
* Access Level: List
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListBuckets.html
*/
toListAllMyBuckets() {
return this.to('ListAllMyBuckets');
}
/**
* Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectsV2.html
*/
toListBucket() {
return this.to('ListBucket');
}
/**
* Grants permission to list in-progress multipart uploads
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html
*/
toListBucketMultipartUploads() {
return this.to('ListBucketMultipartUploads');
}
/**
* Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectVersions.html
*/
toListBucketVersions() {
return this.to('ListBucketVersions');
}
/**
* Grants permission to list caller's Access Grant
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListCallerAccessGrants.html
*/
toListCallerAccessGrants() {
return this.to('ListCallerAccessGrants');
}
/**
* Grants permission to list current jobs and jobs that have ended recently
*
* Access Level: List
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListJobs.html
*/
toListJobs() {
return this.to('ListJobs');
}
/**
* Grants permission to list Multi-Region Access Points
*
* Access Level: List
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListMultiRegionAccessPoints.html
*/
toListMultiRegionAccessPoints() {
return this.to('ListMultiRegionAccessPoints');
}
/**
* Grants permission to list the parts that have been uploaded for a specific multipart upload
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html
*/
toListMultipartUploadParts() {
return this.to('ListMultipartUploadParts');
}
/**
* Grants permission to list annotations on an object
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html
*/
toListObjectAnnotations() {
return this.to('ListObjectAnnotations');
}
/**
* Grants permission to list annotations on a specific version of an object
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html
*/
toListObjectVersionAnnotations() {
return this.to('ListObjectVersionAnnotations');
}
/**
* Grants permission to list Amazon S3 Storage Lens configurations
*
* Access Level: List
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensConfigurations.html
*/
toListStorageLensConfigurations() {
return this.to('ListStorageLensConfigurations');
}
/**
* Grants permission to list S3 Storage Lens groups
*
* Access Level: List
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensGroups.html
*/
toListStorageLensGroups() {
return this.to('ListStorageLensGroups');
}
/**
* Grants permission to list the tags attached to the specified resource
*
* Access Level: List
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListTagsForResource.html
*/
toListTagsForResource() {
return this.to('ListTagsForResource');
}
/**
* Grants permission to change replica ownership
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-change-owner.html#repl-ownership-add-role-permission
*/
toObjectOwnerOverrideToBucketOwner() {
return this.to('ObjectOwnerOverrideToBucketOwner');
}
/**
* Grants permission to use the accelerate subresource to set the Transfer Acceleration state of an existing S3 bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAccelerateConfiguration.html
*/
toPutAccelerateConfiguration() {
return this.to('PutAccelerateConfiguration');
}
/**
* Grants permission to put Access grants instance resource policy
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessGrantsInstanceResourcePolicy.html
*/
toPutAccessGrantsInstanceResourcePolicy() {
return this.to('PutAccessGrantsInstanceResourcePolicy');
}
/**
* Grants permission to set the configuration of the object lambda enabled access point
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointConfigurationForObjectLambda.html
*/
toPutAccessPointConfigurationForObjectLambda() {
return this.to('PutAccessPointConfigurationForObjectLambda');
}
/**
* Grants permission to associate an access policy with a specified access point
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html
*/
toPutAccessPointPolicy() {
return this.to('PutAccessPointPolicy');
}
/**
* Grants permission to associate an access policy with a specified object lambda enabled access point
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicyForObjectLambda.html
*/
toPutAccessPointPolicyForObjectLambda() {
return this.to('PutAccessPointPolicyForObjectLambda');
}
/**
* Grants permission to associate public access block configurations with a specified access point, while creating a access point
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html#access-control-block-public-access-examples-access-point
*/
toPutAccessPointPublicAccessBlock() {
return this.to('PutAccessPointPublicAccessBlock');
}
/**
* Grants permission to create or modify the PublicAccessBlock configuration for an AWS account
*
* Access Level: Permissions management, Write
*
* Possible conditions:
* - .ifAuthType()
* - .ifResourceAccount()
* - .ifSignatureAge()
* - .ifSignatureversion()
* - .ifTlsVersion()
* - .ifXAmzContentSha256()
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutPublicAccessBlock.html
*/
toPutAccountPublicAccessBlock() {
return this.to('PutAccountPublicAccessBlock');
}
/**
* Grants permission to set an analytics configuration for the bucket, specified by the analytics configuration ID
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAnalyticsConfiguration.html
*/
toPutAnalyticsConfiguration() {
return this.to('PutAnalyticsConfiguration');
}
/**
* Grants permission to set ABAC configuration for a general purpose bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAbac.html
*/
toPutBucketAbac() {
return this.to('PutBucketAbac');
}
/**
* Grants permission to set the permissions on an existing bucket using access control lists (ACLs)
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAcl.html
*/
toPutBucketAcl() {
return this.to('PutBucketAcl');
}
/**
* Grants permission to set the CORS configuration for an Amazon S3 bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketCors.html
*/
toPutBucketCORS() {
return this.to('PutBucketCORS');
}
/**
* Grants permission to set the logging parameters for an Amazon S3 bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLogging.html
*/
toPutBucketLogging() {
return this.to('PutBucketLogging');
}
/**
* Grants permission to receive notifications when certain events happen in an Amazon S3 bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketNotification.html
*/
toPutBucketNotification() {
return this.to('PutBucketNotification');
}
/**
* Grants permission to put Object Lock configuration on a specific bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLockConfiguration.html
*/
toPutBucketObjectLockConfiguration() {
return this.to('PutBucketObjectLockConfiguration');
}
/**
* Grants permission to add, replace or delete ownership controls on a bucket
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketOwnershipControls.html
*/
toPutBucketOwnershipControls() {
return this.to('PutBucketOwnershipControls');
}
/**
* Grants permission to add or replace a bucket policy on a bucket
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketPolicy.html
*/
toPutBucketPolicy() {
return this.to('PutBucketPolicy');
}
/**
* Grants permission to create or modify the PublicAccessBlock configuration for a specific Amazon S3 bucket
*
* Access Level: Permissions management, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutPublicAccessBlock.html
*/
toPutBucketPublicAccessBlock() {
return this.to('PutBucketPublicAccessBlock');
}
/**
* Grants permission to set the request payment configuration of a bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketRequestPayment.html
*/
toPutBucketRequestPayment() {
return this.to('PutBucketRequestPayment');
}
/**
* Grants permission to add a set of tags to an existing Amazon S3 bucket
*
* Access Level: Tagging, Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketTagging.html
*/
toPutBucketTagging() {
return this.to('PutBucketTagging');
}
/**
* Grants permission to set the versioning state of an existing Amazon S3 bucket
*
* Access Level: Write
*
* https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketVersioning.html
*/
toPutBucketVersioning() {
return this.to('PutBucketVe