iam-floyd
Version:
AWS IAM policy statement generator with fluent interface
888 lines • 81.2 kB
JavaScript
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.Controltower = void 0;
const shared_1 = require("../../shared");
/**
* Statement provider for service [controltower](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
class Controltower extends shared_1.PolicyStatement {
/**
* Statement provider for service [controltower](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscontroltower.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
constructor(sid) {
super(sid);
this.servicePrefix = 'controltower';
this.accessLevelList = {
Write: [
'CreateLandingZone',
'CreateManagedAccount',
'DeleteLandingZone',
'DeregisterManagedAccount',
'DeregisterOrganizationalUnit',
'DisableBaseline',
'DisableControl',
'DisableGuardrail',
'EnableBaseline',
'EnableControl',
'EnableGuardrail',
'ManageOrganizationalUnit',
'ResetEnabledBaseline',
'ResetEnabledControl',
'ResetLandingZone',
'SetupLandingZone',
'UpdateAccountFactoryConfig',
'UpdateEnabledBaseline',
'UpdateEnabledControl',
'UpdateLandingZone'
],
Read: [
'DescribeAccountFactoryConfig',
'DescribeCoreService',
'DescribeGuardrail',
'DescribeGuardrailForTarget',
'DescribeLandingZoneConfiguration',
'DescribeManagedAccount',
'DescribeManagedOrganizationalUnit',
'DescribeRegisterOrganizationalUnitOperation',
'DescribeSingleSignOn',
'GetAccountInfo',
'GetAvailableUpdates',
'GetBaseline',
'GetBaselineOperation',
'GetControlOperation',
'GetEnabledBaseline',
'GetEnabledControl',
'GetGuardrailComplianceStatus',
'GetHomeRegion',
'GetLandingZone',
'GetLandingZoneDriftStatus',
'GetLandingZoneOperation',
'GetLandingZoneStatus',
'ListDriftDetails',
'ListExternalConfigRuleCompliance',
'ListTagsForResource',
'PerformPreLaunchChecks'
],
List: [
'ListBaselines',
'ListControlOperations',
'ListDirectoryGroups',
'ListEnabledBaselines',
'ListEnabledControls',
'ListEnabledGuardrails',
'ListExtendGovernancePrecheckDetails',
'ListGuardrailViolations',
'ListGuardrails',
'ListGuardrailsForTarget',
'ListLandingZoneOperations',
'ListLandingZones',
'ListManagedAccounts',
'ListManagedAccountsForGuardrail',
'ListManagedAccountsForParent',
'ListManagedOrganizationalUnits',
'ListManagedOrganizationalUnitsForGuardrail'
],
Tagging: [
'TagResource',
'UntagResource'
]
};
}
/**
* Grants permission to create a landing zone
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - controltower:TagResource
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_CreateLandingZone.html
*/
toCreateLandingZone() {
return this.to('CreateLandingZone');
}
/**
* Grants permission to create an account managed by AWS Control Tower
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
*/
toCreateManagedAccount() {
return this.to('CreateManagedAccount');
}
/**
* Grants permission to delete AWS Control Tower landing zone
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_DeleteLandingZone.html
*/
toDeleteLandingZone() {
return this.to('DeleteLandingZone');
}
/**
* Grants permission to deregister an account created through the account factory from AWS Control Tower
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
*/
toDeregisterManagedAccount() {
return this.to('DeregisterManagedAccount');
}
/**
* Grants permission to deregister an organizational unit from AWS Control Tower management
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
*/
toDeregisterOrganizationalUnit() {
return this.to('DeregisterOrganizationalUnit');
}
/**
* Grants permission to describe the current account factory configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
*/
toDescribeAccountFactoryConfig() {
return this.to('DescribeAccountFactoryConfig');
}
/**
* Grants permission to describe resources managed by core accounts in AWS Control Tower
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#what-shared
*/
toDescribeCoreService() {
return this.to('DescribeCoreService');
}
/**
* Grants permission to describe a guardrail
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
*/
toDescribeGuardrail() {
return this.to('DescribeGuardrail');
}
/**
* Grants permission to describe a guardrail for a organizational unit
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
*/
toDescribeGuardrailForTarget() {
return this.to('DescribeGuardrailForTarget');
}
/**
* Grants permission to describe the current Landing Zone configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/step-two.html
*/
toDescribeLandingZoneConfiguration() {
return this.to('DescribeLandingZoneConfiguration');
}
/**
* Grants permission to describe an account created through account factory
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
*/
toDescribeManagedAccount() {
return this.to('DescribeManagedAccount');
}
/**
* Grants permission to describe an AWS Organizations organizational unit managed by AWS Control Tower
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
*/
toDescribeManagedOrganizationalUnit() {
return this.to('DescribeManagedOrganizationalUnit');
}
/**
* Grants permission to describe a Register Organizational Unit Operation
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html
*/
toDescribeRegisterOrganizationalUnitOperation() {
return this.to('DescribeRegisterOrganizationalUnitOperation');
}
/**
* Grants permission to describe the current AWS Control Tower IAM Identity Center configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/sso.html
*/
toDescribeSingleSignOn() {
return this.to('DescribeSingleSignOn');
}
/**
* Grants permission to disable a Baseline on a target
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_DisableBaseline.html
*/
toDisableBaseline() {
return this.to('DisableBaseline');
}
/**
* Grants permission to remove a control from an organizational unit
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_DisableControl.html
*/
toDisableControl() {
return this.to('DisableControl');
}
/**
* Grants permission to disable a guardrail from an organizational unit
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls-on-ou.html
*/
toDisableGuardrail() {
return this.to('DisableGuardrail');
}
/**
* Grants permission to enable a Baseline on a target
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - controltower:TagResource
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableBaseline.html
*/
toEnableBaseline() {
return this.to('EnableBaseline');
}
/**
* Grants permission to activate a control for an organizational unit
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - controltower:TagResource
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableControl.html
*/
toEnableControl() {
return this.to('EnableControl');
}
/**
* Grants permission to enable a guardrail to an organizational unit
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls-on-ou.html
*/
toEnableGuardrail() {
return this.to('EnableGuardrail');
}
/**
* Grants permission to describe an account email and validate that it exists
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/accounts.html
*/
toGetAccountInfo() {
return this.to('GetAccountInfo');
}
/**
* Grants permission to list available updates for the current AWS Control Tower deployment
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/configuration-updates.html
*/
toGetAvailableUpdates() {
return this.to('GetAvailableUpdates');
}
/**
* Grants permission to get Baseline details
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaseline.html
*/
toGetBaseline() {
return this.to('GetBaseline');
}
/**
* Grants permission to get the current status of a particular Baseline operation
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaselineOperation.html
*/
toGetBaselineOperation() {
return this.to('GetBaselineOperation');
}
/**
* Grants permission to get the current status of a particular EnabledControl or DisableControl operation
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetControlOperation.html
*/
toGetControlOperation() {
return this.to('GetControlOperation');
}
/**
* Grants permission to get an enabled Baseline
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledBaseline.html
*/
toGetEnabledBaseline() {
return this.to('GetEnabledBaseline');
}
/**
* Grants permission to get an enabled control from an organizational unit
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledControl.html
*/
toGetEnabledControl() {
return this.to('GetEnabledControl');
}
/**
* Grants permission to get the current compliance status of a guardrail
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
*/
toGetGuardrailComplianceStatus() {
return this.to('GetGuardrailComplianceStatus');
}
/**
* Grants permission to get the home region of the AWS Control Tower setup
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#region-how
*/
toGetHomeRegion() {
return this.to('GetHomeRegion');
}
/**
* Grants permission to get the current status of the landing zone setup
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZone.html
*/
toGetLandingZone() {
return this.to('GetLandingZone');
}
/**
* Grants permission to get the current landing zone drift status
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/drift.html
*/
toGetLandingZoneDriftStatus() {
return this.to('GetLandingZoneDriftStatus');
}
/**
* Grants permission to get the current status of a particular landing zone operation
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZoneOperation.html
*/
toGetLandingZoneOperation() {
return this.to('GetLandingZoneOperation');
}
/**
* Grants permission to get the current status of the landing zone setup
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two
*/
toGetLandingZoneStatus() {
return this.to('GetLandingZoneStatus');
}
/**
* Grants permission to list Baselines
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListBaselines.html
*/
toListBaselines() {
return this.to('ListBaselines');
}
/**
* Grants permission to list all control operations
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListControlOperations.html
*/
toListControlOperations() {
return this.to('ListControlOperations');
}
/**
* Grants permission to list the current directory groups available through IAM Identity Center
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/sso.html
*/
toListDirectoryGroups() {
return this.to('ListDirectoryGroups');
}
/**
* Grants permission to list occurrences of drift in AWS Control Tower
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/drift.html
*/
toListDriftDetails() {
return this.to('ListDriftDetails');
}
/**
* Grants permission to list enabled Baselines
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledBaselines.html
*/
toListEnabledBaselines() {
return this.to('ListEnabledBaselines');
}
/**
* Grants permission to list all enabled controls in a specified organizational unit
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledControls.html
*/
toListEnabledControls() {
return this.to('ListEnabledControls');
}
/**
* Grants permission to list currently enabled guardrails
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
*/
toListEnabledGuardrails() {
return this.to('ListEnabledGuardrails');
}
/**
* Grants permission to list Precheck details for an Organizational Unit
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html
*/
toListExtendGovernancePrecheckDetails() {
return this.to('ListExtendGovernancePrecheckDetails');
}
/**
* Grants permission to list the compliance of external AWS Config rules
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/review-compliance.html
*/
toListExternalConfigRuleCompliance() {
return this.to('ListExternalConfigRuleCompliance');
}
/**
* Grants permission to list existing guardrail violations
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
*/
toListGuardrailViolations() {
return this.to('ListGuardrailViolations');
}
/**
* Grants permission to list all available guardrails
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
*/
toListGuardrails() {
return this.to('ListGuardrails');
}
/**
* Grants permission to list guardrails and their current state for a organizational unit
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/controls.html
*/
toListGuardrailsForTarget() {
return this.to('ListGuardrailsForTarget');
}
/**
* Grants permission to list all landing zone operations
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZoneOperations.html
*/
toListLandingZoneOperations() {
return this.to('ListLandingZoneOperations');
}
/**
* Grants permission to list all landing zones
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZones.html
*/
toListLandingZones() {
return this.to('ListLandingZones');
}
/**
* Grants permission to list accounts managed through AWS Control Tower
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
*/
toListManagedAccounts() {
return this.to('ListManagedAccounts');
}
/**
* Grants permission to list managed accounts with a specified guardrail applied
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
*/
toListManagedAccountsForGuardrail() {
return this.to('ListManagedAccountsForGuardrail');
}
/**
* Grants permission to list managed accounts under an organizational unit
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
*/
toListManagedAccountsForParent() {
return this.to('ListManagedAccountsForParent');
}
/**
* Grants permission to list organizational units managed by AWS Control Tower
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
*/
toListManagedOrganizationalUnits() {
return this.to('ListManagedOrganizationalUnits');
}
/**
* Grants permission to list managed organizational units that have a specified guardrail applied
*
* Access Level: List
*
* https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
*/
toListManagedOrganizationalUnitsForGuardrail() {
return this.to('ListManagedOrganizationalUnitsForGuardrail');
}
/**
* Grants permission to list the tags for a resource
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListTagsForResource.html
*/
toListTagsForResource() {
return this.to('ListTagsForResource');
}
/**
* Grants permission to set up an organizational unit to be managed by AWS Control Tower
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html
*/
toManageOrganizationalUnit() {
return this.to('ManageOrganizationalUnit');
}
/**
* Grants permission to perform validations in an account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-prereqs.html
*/
toPerformPreLaunchChecks() {
return this.to('PerformPreLaunchChecks');
}
/**
* Grants permission to reset an enabled Baseline
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledBaseline.html
*/
toResetEnabledBaseline() {
return this.to('ResetEnabledBaseline');
}
/**
* Grants permission to reset an enabled control for an organizational unit
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledControl.html
*/
toResetEnabledControl() {
return this.to('ResetEnabledControl');
}
/**
* Grants permission to reset a landing zone
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetLandingZone.html
*/
toResetLandingZone() {
return this.to('ResetLandingZone');
}
/**
* Grants permission to set up or update AWS Control Tower landing zone
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two
*/
toSetupLandingZone() {
return this.to('SetupLandingZone');
}
/**
* Grants permission to add tags to a resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_TagResource.html
*/
toTagResource() {
return this.to('TagResource');
}
/**
* Grants permission to remove tags from a resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_UntagResource.html
*/
toUntagResource() {
return this.to('UntagResource');
}
/**
* Grants permission to update the account factory configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html
*/
toUpdateAccountFactoryConfig() {
return this.to('UpdateAccountFactoryConfig');
}
/**
* Grants permission to update an enabled Baseline
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledBaseline.html
*/
toUpdateEnabledBaseline() {
return this.to('UpdateEnabledBaseline');
}
/**
* Grants permission to update an enabled control for an organizational unit
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledControl.html
*/
toUpdateEnabledControl() {
return this.to('UpdateEnabledControl');
}
/**
* Grants permission to update a landing zone
*
* Access Level: Write
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateLandingZone.html
*/
toUpdateLandingZone() {
return this.to('UpdateLandingZone');
}
/**
* Adds a resource of type EnabledControl to the statement
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableControl.html
*
* @param enabledControlId - Identifier for the enabledControlId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onEnabledControl(enabledControlId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:controltower:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:enabledcontrol/${enabledControlId}`);
}
/**
* Adds a resource of type Baseline to the statement
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaseline.html
*
* @param baselineId - Identifier for the baselineId.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onBaseline(baselineId, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:controltower:${region ?? this.defaultRegion}::baseline/${baselineId}`);
}
/**
* Adds a resource of type EnabledBaseline to the statement
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_EnableBaseline.html
*
* @param enabledBaselineId - Identifier for the enabledBaselineId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onEnabledBaseline(enabledBaselineId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:controltower:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:enabledbaseline/${enabledBaselineId}`);
}
/**
* Adds a resource of type LandingZone to the statement
*
* https://docs.aws.amazon.com/controltower/latest/APIReference/API_CreateLandingZone.html
*
* @param landingZoneId - Identifier for the landingZoneId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onLandingZone(landingZoneId, account, region, partition) {
return this.on(`arn:${partition ?? this.defaultPartition}:controltower:${region ?? this.defaultRegion}:${account ?? this.defaultAccount}:landingzone/${landingZoneId}`);
}
/**
* Filters access by the tags that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateLandingZone()
* - .toEnableBaseline()
* - .toEnableControl()
* - .toTagResource()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey, value, operator) {
return this.if(`aws:RequestTag/${tagKey}`, value, operator ?? 'StringLike');
}
/**
* Filters access by the tags associated with the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to resource types:
* - EnabledControl
* - EnabledBaseline
* - LandingZone
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey, value, operator) {
return this.if(`aws:ResourceTag/${tagKey}`, value, operator ?? 'StringLike');
}
/**
* Filters access by the tag keys that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toCreateLandingZone()
* - .toEnableBaseline()
* - .toEnableControl()
* - .toTagResource()
* - .toUntagResource()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value, operator) {
return this.if(`aws:TagKeys`, value, operator ?? 'StringLike');
}
}
exports.Controltower = Controltower;
//# sourceMappingURL=data:application/json;base64,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