iam-floyd
Version:
AWS IAM policy statement generator with fluent interface
975 lines • 98 kB
JavaScript
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.Codebuild = void 0;
const shared_1 = require("../../shared");
/**
* Statement provider for service [codebuild](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodebuild.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
class Codebuild extends shared_1.PolicyStatement {
/**
* Statement provider for service [codebuild](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscodebuild.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
constructor(sid) {
super(sid);
this.servicePrefix = 'codebuild';
this.accessLevelList = {
Write: [
'BatchDeleteBuilds',
'BatchPutCodeCoverages',
'BatchPutTestCases',
'CreateFleet',
'CreateProject',
'CreateReport',
'CreateReportGroup',
'CreateWebhook',
'DeleteBuildBatch',
'DeleteFleet',
'DeleteOAuthToken',
'DeleteProject',
'DeleteReport',
'DeleteReportGroup',
'DeleteSourceCredentials',
'DeleteWebhook',
'ImportSourceCredentials',
'InvalidateProjectCache',
'PersistOAuthToken',
'RetryBuild',
'RetryBuildBatch',
'StartBuild',
'StartBuildBatch',
'StartCommandExecution',
'StartSandbox',
'StartSandboxConnection',
'StopBuild',
'StopBuildBatch',
'StopSandbox',
'UpdateFleet',
'UpdateProject',
'UpdateProjectVisibility',
'UpdateReport',
'UpdateReportGroup',
'UpdateWebhook'
],
Read: [
'BatchGetBuildBatches',
'BatchGetBuilds',
'BatchGetCommandExecutions',
'BatchGetFleets',
'BatchGetProjects',
'BatchGetReportGroups',
'BatchGetReports',
'BatchGetSandboxes',
'DescribeCodeCoverages',
'DescribeTestCases',
'GetReportGroupTrend',
'GetResourcePolicy'
],
'Permissions management': [
'DeleteResourcePolicy',
'PutResourcePolicy'
],
List: [
'ListBuildBatches',
'ListBuildBatchesForProject',
'ListBuilds',
'ListBuildsForProject',
'ListCommandExecutionsForSandbox',
'ListConnectedOAuthAccounts',
'ListCuratedEnvironmentImages',
'ListFleets',
'ListProjects',
'ListReportGroups',
'ListReports',
'ListReportsForReportGroup',
'ListRepositories',
'ListSandboxes',
'ListSandboxesForProject',
'ListSharedProjects',
'ListSharedReportGroups',
'ListSourceCredentials'
]
};
}
/**
* Grants permission to delete one or more builds
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchDeleteBuilds.html
*/
toBatchDeleteBuilds() {
return this.to('BatchDeleteBuilds');
}
/**
* Grants permission to get information about one or more build batches
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchGetBuildBatches.html
*/
toBatchGetBuildBatches() {
return this.to('BatchGetBuildBatches');
}
/**
* Grants permission to get information about one or more builds
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchGetBuilds.html
*/
toBatchGetBuilds() {
return this.to('BatchGetBuilds');
}
/**
* Grants permission to get information about one or more command executions
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchGetCommandExecutions.html
*/
toBatchGetCommandExecutions() {
return this.to('BatchGetCommandExecutions');
}
/**
* Grants permission to return an array of the Fleet objects specified by the input parameter
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchGetFleets.html
*/
toBatchGetFleets() {
return this.to('BatchGetFleets');
}
/**
* Grants permission to get information about one or more build projects
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchGetProjects.html
*/
toBatchGetProjects() {
return this.to('BatchGetProjects');
}
/**
* Grants permission to return an array of ReportGroup objects that are specified by the input reportGroupArns parameter
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchGetReportGroups.html
*/
toBatchGetReportGroups() {
return this.to('BatchGetReportGroups');
}
/**
* Grants permission to return an array of the Report objects specified by the input reportArns parameter
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchGetReports.html
*/
toBatchGetReports() {
return this.to('BatchGetReports');
}
/**
* Grants permission to get information about one or more sandboxes
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_BatchGetSandboxes.html
*/
toBatchGetSandboxes() {
return this.to('BatchGetSandboxes');
}
/**
* Grants permission to add or update information about a report
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#console-policies
*/
toBatchPutCodeCoverages() {
return this.to('BatchPutCodeCoverages');
}
/**
* Grants permission to add or update information about a report
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#console-policies
*/
toBatchPutTestCases() {
return this.to('BatchPutTestCases');
}
/**
* Grants permission to create a compute fleet
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_CreateFleet.html
*/
toCreateFleet() {
return this.to('CreateFleet');
}
/**
* Grants permission to create a build project
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_CreateProject.html
*/
toCreateProject() {
return this.to('CreateProject');
}
/**
* Grants permission to create a report. A report is created when tests specified in the buildspec file for a report groups run during the build of a project
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#console-policies
*/
toCreateReport() {
return this.to('CreateReport');
}
/**
* Grants permission to create a report group
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_CreateReportGroup.html
*/
toCreateReportGroup() {
return this.to('CreateReportGroup');
}
/**
* Grants permission to create webhook. For an existing AWS CodeBuild build project that has its source code stored in a GitHub or Bitbucket repository, enables AWS CodeBuild to start rebuilding the source code every time a code change is pushed to the repository
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_CreateWebhook.html
*/
toCreateWebhook() {
return this.to('CreateWebhook');
}
/**
* Grants permission to delete a build batch
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DeleteBuildBatch.html
*/
toDeleteBuildBatch() {
return this.to('DeleteBuildBatch');
}
/**
* Grants permission to delete a compute fleet
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DeleteFleet.html
*/
toDeleteFleet() {
return this.to('DeleteFleet');
}
/**
* Grants permission to delete an OAuth token from a connected third-party OAuth provider. Only used in the AWS CodeBuild console
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#console-policies
*/
toDeleteOAuthToken() {
return this.to('DeleteOAuthToken');
}
/**
* Grants permission to delete a build project
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DeleteProject.html
*/
toDeleteProject() {
return this.to('DeleteProject');
}
/**
* Grants permission to delete a report
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DeleteReport.html
*/
toDeleteReport() {
return this.to('DeleteReport');
}
/**
* Grants permission to delete a report group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DeleteReportGroup.html
*/
toDeleteReportGroup() {
return this.to('DeleteReportGroup');
}
/**
* Grants permission to delete a resource policy for the associated project or report group
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DeleteResourcePolicy.html
*/
toDeleteResourcePolicy() {
return this.to('DeleteResourcePolicy');
}
/**
* Grants permission to delete a set of GitHub, GitHub Enterprise, or Bitbucket source credentials
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DeleteSourceCredentials.html
*/
toDeleteSourceCredentials() {
return this.to('DeleteSourceCredentials');
}
/**
* Grants permission to delete webhook. For an existing AWS CodeBuild build project that has its source code stored in a GitHub or Bitbucket repository, stops AWS CodeBuild from rebuilding the source code every time a code change is pushed to the repository
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DeleteWebhook.html
*/
toDeleteWebhook() {
return this.to('DeleteWebhook');
}
/**
* Grants permission to return an array of CodeCoverage objects
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DescribeCodeCoverages.html
*/
toDescribeCodeCoverages() {
return this.to('DescribeCodeCoverages');
}
/**
* Grants permission to return an array of TestCase objects
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_DescribeTestCases.html
*/
toDescribeTestCases() {
return this.to('DescribeTestCases');
}
/**
* Grants permission to analyze and accumulate test report values for the test reports in the specified report group
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_GetReportGroupTrend.html
*/
toGetReportGroupTrend() {
return this.to('GetReportGroupTrend');
}
/**
* Grants permission to return a resource policy for the specified project or report group
*
* Access Level: Read
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_GetResourcePolicy.html
*/
toGetResourcePolicy() {
return this.to('GetResourcePolicy');
}
/**
* Grants permission to import the source repository credentials for an AWS CodeBuild project that has its source code stored in a GitHub, GitHub Enterprise, or Bitbucket repository
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ImportSourceCredentials.html
*/
toImportSourceCredentials() {
return this.to('ImportSourceCredentials');
}
/**
* Grants permission to reset the cache for a project
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_InvalidateProjectCache.html
*/
toInvalidateProjectCache() {
return this.to('InvalidateProjectCache');
}
/**
* Grants permission to get a list of build batch IDs, with each build batch ID representing a single build batch
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListBuildBatches.html
*/
toListBuildBatches() {
return this.to('ListBuildBatches');
}
/**
* Grants permission to get a list of build batch IDs for the specified build project, with each build batch ID representing a single build batch
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListBuildBatchesForProject.html
*/
toListBuildBatchesForProject() {
return this.to('ListBuildBatchesForProject');
}
/**
* Grants permission to get a list of build IDs, with each build ID representing a single build
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListBuilds.html
*/
toListBuilds() {
return this.to('ListBuilds');
}
/**
* Grants permission to get a list of build IDs for the specified build project, with each build ID representing a single build
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListBuildsForProject.html
*/
toListBuildsForProject() {
return this.to('ListBuildsForProject');
}
/**
* Grants permission to get a list of command execution IDs for the specified sandbox, with each command execution ID representing a single command execution
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListCommandExecutionsForSandbox.html
*/
toListCommandExecutionsForSandbox() {
return this.to('ListCommandExecutionsForSandbox');
}
/**
* Grants permission to list connected third-party OAuth providers. Only used in the AWS CodeBuild console
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#console-policies
*/
toListConnectedOAuthAccounts() {
return this.to('ListConnectedOAuthAccounts');
}
/**
* Grants permission to get information about Docker images that are managed by AWS CodeBuild
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListCuratedEnvironmentImages.html
*/
toListCuratedEnvironmentImages() {
return this.to('ListCuratedEnvironmentImages');
}
/**
* Grants permission to get a list of compute fleet ARNs, with each compute fleet ARN representing a single fleet
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListFleets.html
*/
toListFleets() {
return this.to('ListFleets');
}
/**
* Grants permission to get a list of build project names, with each build project name representing a single build project
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListProjects.html
*/
toListProjects() {
return this.to('ListProjects');
}
/**
* Grants permission to return a list of report group ARNs. Each report group ARN represents one report group
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListReportGroups.html
*/
toListReportGroups() {
return this.to('ListReportGroups');
}
/**
* Grants permission to return a list of report ARNs. Each report ARN representing one report
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListReports.html
*/
toListReports() {
return this.to('ListReports');
}
/**
* Grants permission to return a list of report ARNs that belong to the specified report group. Each report ARN represents one report
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListReportsForReportGroup.html
*/
toListReportsForReportGroup() {
return this.to('ListReportsForReportGroup');
}
/**
* Grants permission to list source code repositories from a connected third-party OAuth provider. Only used in the AWS CodeBuild console
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#console-policies
*/
toListRepositories() {
return this.to('ListRepositories');
}
/**
* Grants permission to get a list of sandbox IDs, with each sandbox ID representing a single sandbox
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListSandboxes.html
*/
toListSandboxes() {
return this.to('ListSandboxes');
}
/**
* Grants permission to get a list of sandbox IDs for the specified sandbox project, with each sandbox ID representing a single sandbox
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListSandboxesForProject.html
*/
toListSandboxesForProject() {
return this.to('ListSandboxesForProject');
}
/**
* Grants permission to return a list of project ARNs that have been shared with the requester. Each project ARN represents one project
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListSharedProjects.html
*/
toListSharedProjects() {
return this.to('ListSharedProjects');
}
/**
* Grants permission to return a list of report group ARNs that have been shared with the requester. Each report group ARN represents one report group
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListSharedReportGroups.html
*/
toListSharedReportGroups() {
return this.to('ListSharedReportGroups');
}
/**
* Grants permission to return a list of SourceCredentialsInfo objects
*
* Access Level: List
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ListSourceCredentials.html
*/
toListSourceCredentials() {
return this.to('ListSourceCredentials');
}
/**
* Grants permission to save an OAuth token from a connected third-party OAuth provider. Only used in the AWS CodeBuild console
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#console-policies
*/
toPersistOAuthToken() {
return this.to('PersistOAuthToken');
}
/**
* Grants permission to create a resource policy for the associated project or report group
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_PutResourcePolicy.html
*/
toPutResourcePolicy() {
return this.to('PutResourcePolicy');
}
/**
* Grants permission to retry a build
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_RetryBuild.html
*/
toRetryBuild() {
return this.to('RetryBuild');
}
/**
* Grants permission to retry a build batch
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_RetryBuildBatch.html
*/
toRetryBuildBatch() {
return this.to('RetryBuildBatch');
}
/**
* Grants permission to start running a build
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartBuild.html
*/
toStartBuild() {
return this.to('StartBuild');
}
/**
* Grants permission to start running a build batch
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartBuildBatch.html
*/
toStartBuildBatch() {
return this.to('StartBuildBatch');
}
/**
* Grants permission to start running a command execution
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartCommandExecution.html
*/
toStartCommandExecution() {
return this.to('StartCommandExecution');
}
/**
* Grants permission to start running a sandbox
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartSandbox.html
*/
toStartSandbox() {
return this.to('StartSandbox');
}
/**
* Grants permission to establish a connection to the sandbox
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StartSandboxConnection.html
*/
toStartSandboxConnection() {
return this.to('StartSandboxConnection');
}
/**
* Grants permission to attempt to stop running a build
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StopBuild.html
*/
toStopBuild() {
return this.to('StopBuild');
}
/**
* Grants permission to attempt to stop running a build batch
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StopBuildBatch.html
*/
toStopBuildBatch() {
return this.to('StopBuildBatch');
}
/**
* Grants permission to attempt to stop running a sandbox
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_StopSandbox.html
*/
toStopSandbox() {
return this.to('StopSandbox');
}
/**
* Grants permission to change the settings of an existing compute fleet
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_UpdateFleet.html
*/
toUpdateFleet() {
return this.to('UpdateFleet');
}
/**
* Grants permission to change the settings of an existing build project
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_UpdateProject.html
*/
toUpdateProject() {
return this.to('UpdateProject');
}
/**
* Grants permission to change the public visibility of a project and its builds
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_UpdateProjectVisibility.html
*/
toUpdateProjectVisibility() {
return this.to('UpdateProjectVisibility');
}
/**
* Grants permission to update information about a report
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#console-policies
*/
toUpdateReport() {
return this.to('UpdateReport');
}
/**
* Grants permission to change the settings of an existing report group
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_UpdateReportGroup.html
*/
toUpdateReportGroup() {
return this.to('UpdateReportGroup');
}
/**
* Grants permission to update the webhook associated with an AWS CodeBuild build project
*
* Access Level: Write
*
* https://docs.aws.amazon.com/codebuild/latest/APIReference/API_UpdateWebhook.html
*/
toUpdateWebhook() {
return this.to('UpdateWebhook');
}
/**
* Adds a resource of type build to the statement
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#arn-formats
*
* @param buildId - Identifier for the buildId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onBuild(buildId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:codebuild:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:build/${buildId}`);
}
/**
* Adds a resource of type build-batch to the statement
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#arn-formats
*
* @param buildBatchId - Identifier for the buildBatchId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onBuildBatch(buildBatchId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:codebuild:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:build-batch/${buildBatchId}`);
}
/**
* Adds a resource of type project to the statement
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#arn-formats
*
* @param projectName - Identifier for the projectName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onProject(projectName, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:codebuild:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:project/${projectName}`);
}
/**
* Adds a resource of type report-group to the statement
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#arn-formats
*
* @param reportGroupName - Identifier for the reportGroupName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onReportGroup(reportGroupName, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:codebuild:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:report-group/${reportGroupName}`);
}
/**
* Adds a resource of type report to the statement
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#arn-formats
*
* @param reportGroupName - Identifier for the reportGroupName.
* @param reportId - Identifier for the reportId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onReport(reportGroupName, reportId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:codebuild:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:report/${reportGroupName}:${reportId}`);
}
/**
* Adds a resource of type fleet to the statement
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#arn-formats
*
* @param fleetName - Identifier for the fleetName.
* @param fleetId - Identifier for the fleetId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onFleet(fleetName, fleetId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:codebuild:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:fleet/${fleetName}:${fleetId}`);
}
/**
* Adds a resource of type sandbox to the statement
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#arn-formats
*
* @param sandboxId - Identifier for the sandboxId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onSandbox(sandboxId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:codebuild:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:sandbox/${sandboxId}`);
}
/**
* Filters access by actions based on the presence of tag key-value pairs in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateFleet()
* - .toCreateProject()
* - .toCreateReportGroup()
* - .toUpdateFleet()
* - .toUpdateProject()
* - .toUpdateProjectVisibility()
* - .toUpdateReportGroup()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey, value, operator) {
return this.if(`aws:RequestTag/${tagKey}`, value, operator ?? 'StringLike');
}
/**
* Filters access by actions based on tag key-value pairs attached to the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to resource types:
* - project
* - report-group
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey, value, operator) {
return this.if(`aws:ResourceTag/${tagKey}`, value, operator ?? 'StringLike');
}
/**
* Filters access by actions based on the presence of tag keys in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toCreateFleet()
* - .toCreateProject()
* - .toCreateReportGroup()
* - .toUpdateFleet()
* - .toUpdateProject()
* - .toUpdateProjectVisibility()
* - .toUpdateReportGroup()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value, operator) {
return this.if(`aws:TagKeys`, value, operator ?? 'StringLike');
}
/**
* Filters access by the ARN of the AWS CodeBuild build from which the request originated
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-permissions-reference.html
*
* @param value The value(s) to check
* @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
*/
ifBuildArn(value, operator) {
return this.if(`buildArn`, value, operator ?? 'ArnLike');
}
/**
* Filters access by the ARN of the AWS CodeBuild project from which the request originated
*
* https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-permissions-reference.html
*
* @param value The value(s) to check
* @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
*/
ifProjectArn(value, operator) {
return this.if(`projectArn`, value, operator ?? 'ArnLike');
}
}
exports.Codebuild = Codebuild;
//# sourceMappingURL=data:application/json;base64,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