iam-floyd
Version:
AWS IAM policy statement generator with fluent interface
1,518 lines • 56.6 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
/**
* Statement provider for service [deadline](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdeadlinecloud.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Deadline extends PolicyStatement {
servicePrefix: string;
/**
* Statement provider for service [deadline](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdeadlinecloud.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
constructor(sid?: string);
/**
* Grants permission to associate a member to a farm
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
* - .ifMembershipLevel()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToFarm.html
*/
toAssociateMemberToFarm(): this;
/**
* Grants permission to associate a member to a fleet
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
* - .ifMembershipLevel()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToFleet.html
*/
toAssociateMemberToFleet(): this;
/**
* Grants permission to associate a member to a job
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
* - .ifMembershipLevel()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToJob.html
*/
toAssociateMemberToJob(): this;
/**
* Grants permission to associate a member to a queue
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
* - .ifMembershipLevel()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToQueue.html
*/
toAssociateMemberToQueue(): this;
/**
* Grants permission to assume a fleet role for read-only access
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeFleetRoleForRead.html
*/
toAssumeFleetRoleForRead(): this;
/**
* Grants permission to assume a fleet role for a worker
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeFleetRoleForWorker.html
*/
toAssumeFleetRoleForWorker(): this;
/**
* Grants permission to assume a queue role for read-only access
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForRead.html
*/
toAssumeQueueRoleForRead(): this;
/**
* Grants permission to assume a queue role for a user
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForUser.html
*/
toAssumeQueueRoleForUser(): this;
/**
* Grants permission to assume a queue role for a worker
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssumeQueueRoleForWorker.html
*/
toAssumeQueueRoleForWorker(): this;
/**
* Grants permission to get a job entity for a worker
*
* Access Level: Read
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_BatchGetJobEntity.html
*/
toBatchGetJobEntity(): this;
/**
* Grants permission to copy a job template to an Amazon S3 bucket
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
* - s3:PutObject
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CopyJobTemplate.html
*/
toCopyJobTemplate(): this;
/**
* Grants permission to create a budget
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateBudget.html
*/
toCreateBudget(): this;
/**
* Grants permission to create a farm
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:TagResource
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateFarm.html
*/
toCreateFarm(): this;
/**
* Grants permission to create a fleet
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:TagResource
* - iam:PassRole
* - identitystore:ListGroupMembershipsForMember
* - logs:CreateLogGroup
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateFleet.html
*/
toCreateFleet(): this;
/**
* Grants permission to create a job
*
* Access Level: Write
*
* Dependent actions:
* - deadline:GetJobTemplate
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateJob.html
*/
toCreateJob(): this;
/**
* Grants permission to create a license endpoint for licensed software or products
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:TagResource
* - ec2:CreateTags
* - ec2:CreateVpcEndpoint
* - ec2:DescribeVpcEndpoints
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateLicenseEndpoint.html
*/
toCreateLicenseEndpoint(): this;
/**
* Grants permission to create a limit for a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateLimit.html
*/
toCreateLimit(): this;
/**
* Grants permission to create a monitor
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
* - sso:CreateApplication
* - sso:DeleteApplication
* - sso:PutApplicationAssignmentConfiguration
* - sso:PutApplicationAuthenticationMethod
* - sso:PutApplicationGrant
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateMonitor.html
*/
toCreateMonitor(): this;
/**
* Grants permission to create a queue
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:TagResource
* - iam:PassRole
* - identitystore:ListGroupMembershipsForMember
* - logs:CreateLogGroup
* - s3:ListBucket
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueue.html
*/
toCreateQueue(): this;
/**
* Grants permission to create a queue environment
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueEnvironment.html
*/
toCreateQueueEnvironment(): this;
/**
* Grants permission to create a queue-fleet association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueFleetAssociation.html
*/
toCreateQueueFleetAssociation(): this;
/**
* Grants permission to create a queue-limit association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateQueueLimitAssociation.html
*/
toCreateQueueLimitAssociation(): this;
/**
* Grants permission to create a storage profile for a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateStorageProfile.html
*/
toCreateStorageProfile(): this;
/**
* Grants permission to create a worker
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - deadline:ListTagsForResource
* - deadline:TagResource
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateWorker.html
*/
toCreateWorker(): this;
/**
* Grants permission to delete a budget
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteBudget.html
*/
toDeleteBudget(): this;
/**
* Grants permission to delete a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteFarm.html
*/
toDeleteFarm(): this;
/**
* Grants permission to delete a fleet
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteFleet.html
*/
toDeleteFleet(): this;
/**
* Grants permission to delete a license endpoint
*
* Access Level: Write
*
* Dependent actions:
* - ec2:DeleteVpcEndpoints
* - ec2:DescribeVpcEndpoints
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteLicenseEndpoint.html
*/
toDeleteLicenseEndpoint(): this;
/**
* Grants permission to delete a limit
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteLimit.html
*/
toDeleteLimit(): this;
/**
* Grants permission to delete a metered product
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteMeteredProduct.html
*/
toDeleteMeteredProduct(): this;
/**
* Grants permission to delete a monitor
*
* Access Level: Write
*
* Dependent actions:
* - sso:DeleteApplication
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteMonitor.html
*/
toDeleteMonitor(): this;
/**
* Grants permission to delete a queue
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueue.html
*/
toDeleteQueue(): this;
/**
* Grants permission to delete a queue environment
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueEnvironment.html
*/
toDeleteQueueEnvironment(): this;
/**
* Grants permission to delete a queue-fleet association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueFleetAssociation.html
*/
toDeleteQueueFleetAssociation(): this;
/**
* Grants permission to delete a queue-limit association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteQueueLimitAssociation.html
*/
toDeleteQueueLimitAssociation(): this;
/**
* Grants permission to delete a storage profile
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteStorageProfile.html
*/
toDeleteStorageProfile(): this;
/**
* Grants permission to delete a worker
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DeleteWorker.html
*/
toDeleteWorker(): this;
/**
* Grants permission to disassociate a member from a farm
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromFarm.html
*/
toDisassociateMemberFromFarm(): this;
/**
* Grants permission to disassociate a member from a fleet
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromFleet.html
*/
toDisassociateMemberFromFleet(): this;
/**
* Grants permission to disassociate a member from a job
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromJob.html
*/
toDisassociateMemberFromJob(): this;
/**
* Grants permission to disassociate a member from a queue
*
* Access Level: Permissions management
*
* Possible conditions:
* - .ifAssociatedMembershipLevel()
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_DisassociateMemberFromQueue.html
*/
toDisassociateMemberFromQueue(): this;
/**
* Grants permission to get the latest version of an application
*
* Access Level: Read
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetApplicationVersion.html
*/
toGetApplicationVersion(): this;
/**
* Grants permission to get a budget
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetBudget.html
*/
toGetBudget(): this;
/**
* Grants permission to get a farm
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetFarm.html
*/
toGetFarm(): this;
/**
* Grants permission to get a fleet
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetFleet.html
*/
toGetFleet(): this;
/**
* Grants permission to get a job
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetJob.html
*/
toGetJob(): this;
/**
* Grants permission to read job template
*
* Access Level: Read
*/
toGetJobTemplate(): this;
/**
* Grants permission to get a license endpoint
*
* Access Level: Read
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetLicenseEndpoint.html
*/
toGetLicenseEndpoint(): this;
/**
* Grants permission to get a limit
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetLimit.html
*/
toGetLimit(): this;
/**
* Grants permission to get a monitor
*
* Access Level: Read
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetMonitor.html
*/
toGetMonitor(): this;
/**
* Grants permission to get a queue
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueue.html
*/
toGetQueue(): this;
/**
* Grants permission to get a queue environment
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueEnvironment.html
*/
toGetQueueEnvironment(): this;
/**
* Grants permission to get a queue-fleet association
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueFleetAssociation.html
*/
toGetQueueFleetAssociation(): this;
/**
* Grants permission to get a queue-limit association
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetQueueLimitAssociation.html
*/
toGetQueueLimitAssociation(): this;
/**
* Grants permission to get a session for a job
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSession.html
*/
toGetSession(): this;
/**
* Grants permission to get a session action for a job
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSessionAction.html
*/
toGetSessionAction(): this;
/**
* Grants permission to get all collected statistics for sessions
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetSessionsStatisticsAggregation.html
*/
toGetSessionsStatisticsAggregation(): this;
/**
* Grants permission to get a step in a job
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStep.html
*/
toGetStep(): this;
/**
* Grants permission to get a storage profile
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStorageProfile.html
*/
toGetStorageProfile(): this;
/**
* Grants permission to get a storage profile for a queue
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetStorageProfileForQueue.html
*/
toGetStorageProfileForQueue(): this;
/**
* Grants permission to get a job task
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetTask.html
*/
toGetTask(): this;
/**
* Grants permission to get a worker
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_GetWorker.html
*/
toGetWorker(): this;
/**
* Grants permission to list all available metered products within a license endpoint
*
* Access Level: List
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListAvailableMeteredProducts.html
*/
toListAvailableMeteredProducts(): this;
/**
* Grants permission to list all budgets for a farm
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListBudgets.html
*/
toListBudgets(): this;
/**
* Grants permission to list all members of a farm
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFarmMembers.html
*/
toListFarmMembers(): this;
/**
* Grants permission to list all farms
*
* Access Level: List
*
* Possible conditions:
* - .ifPrincipalId()
* - .ifRequesterPrincipalId()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFarms.html
*/
toListFarms(): this;
/**
* Grants permission to list all members of a fleet
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFleetMembers.html
*/
toListFleetMembers(): this;
/**
* Grants permission to list all fleets
*
* Access Level: List
*
* Possible conditions:
* - .ifPrincipalId()
* - .ifRequesterPrincipalId()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListFleets.html
*/
toListFleets(): this;
/**
* Grants permission to list all members of a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobMembers.html
*/
toListJobMembers(): this;
/**
* Grants permission to get a job's parameter definitions in the job template
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobParameterDefinitions.html
*/
toListJobParameterDefinitions(): this;
/**
* Grants permission to list all jobs in a queue
*
* Access Level: List
*
* Possible conditions:
* - .ifPrincipalId()
* - .ifRequesterPrincipalId()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListJobs.html
*/
toListJobs(): this;
/**
* Grants permission to list all license endpoints
*
* Access Level: List
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListLicenseEndpoints.html
*/
toListLicenseEndpoints(): this;
/**
* Grants permission to list all limits in a farm
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListLimits.html
*/
toListLimits(): this;
/**
* Grants permission to list all metered products in a license endpoint
*
* Access Level: List
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListMeteredProducts.html
*/
toListMeteredProducts(): this;
/**
* Grants permission to list all monitors
*
* Access Level: List
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListMonitors.html
*/
toListMonitors(): this;
/**
* Grants permission to list all queue environments to which a queue is associated
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueEnvironments.html
*/
toListQueueEnvironments(): this;
/**
* Grants permission to list all queue-fleet associations
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueFleetAssociations.html
*/
toListQueueFleetAssociations(): this;
/**
* Grants permission to list all queue-limit associations
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueLimitAssociations.html
*/
toListQueueLimitAssociations(): this;
/**
* Grants permission to list all members in a queue
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueueMembers.html
*/
toListQueueMembers(): this;
/**
* Grants permission to list all queues on a farm
*
* Access Level: List
*
* Possible conditions:
* - .ifPrincipalId()
* - .ifRequesterPrincipalId()
*
* Dependent actions:
* - identitystore:DescribeGroup
* - identitystore:DescribeUser
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListQueues.html
*/
toListQueues(): this;
/**
* Grants permission to list all session actions for a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessionActions.html
*/
toListSessionActions(): this;
/**
* Grants permission to list all sessions for a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessions.html
*/
toListSessions(): this;
/**
* Grants permission to list all sessions for a worker
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSessionsForWorker.html
*/
toListSessionsForWorker(): this;
/**
* Grants permission to list the step consumers for a job step
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStepConsumers.html
*/
toListStepConsumers(): this;
/**
* Grants permission to list dependencies for a job step
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStepDependencies.html
*/
toListStepDependencies(): this;
/**
* Grants permission to list all steps for a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListSteps.html
*/
toListSteps(): this;
/**
* Grants permission to list all storage profiles in a farm
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStorageProfiles.html
*/
toListStorageProfiles(): this;
/**
* Grants permission to list all storage profiles in a queue
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListStorageProfilesForQueue.html
*/
toListStorageProfilesForQueue(): this;
/**
* Grants permission to list all tags on specified Deadline Cloud resources
*
* Access Level: List
*
* Possible conditions:
* - .ifCalledAction()
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListTagsForResource.html
*/
toListTagsForResource(): this;
/**
* Grants permission to list all tasks for a job
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListTasks.html
*/
toListTasks(): this;
/**
* Grants permission to list all workers in a fleet
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_ListWorkers.html
*/
toListWorkers(): this;
/**
* Grants permission to add a metered product to a license endpoint
*
* Access Level: Write
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_PutMeteredProduct.html
*/
toPutMeteredProduct(): this;
/**
* Grants permission to search for jobs in multiple queues
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchJobs.html
*/
toSearchJobs(): this;
/**
* Grants permission to search the steps within a single job or to search the steps for multiple queues
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchSteps.html
*/
toSearchSteps(): this;
/**
* Grants permission to search the tasks within a single job or to search the tasks for multiple queues
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchTasks.html
*/
toSearchTasks(): this;
/**
* Grants permission to search for workers in multiple fleets
*
* Access Level: List
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_SearchWorkers.html
*/
toSearchWorkers(): this;
/**
* Grants permission to get all collected statistics for sessions
*
* Access Level: Read
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_StartSessionsStatisticsAggregation.html
*/
toStartSessionsStatisticsAggregation(): this;
/**
* Grants permission to add or overwrite one or more tags for the specified Deadline Cloud resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifCalledAction()
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_TagResource.html
*/
toTagResource(): this;
/**
* Grants permission to disassociate one or more tags from the specified Deadline Cloud resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UntagResource.html
*/
toUntagResource(): this;
/**
* Grants permission to update a budget
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateBudget.html
*/
toUpdateBudget(): this;
/**
* Grants permission to update a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFarm.html
*/
toUpdateFarm(): this;
/**
* Grants permission to update a fleet
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFleet.html
*/
toUpdateFleet(): this;
/**
* Grants permission to update a job
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateJob.html
*/
toUpdateJob(): this;
/**
* Grants permission to update a limit for a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateLimit.html
*/
toUpdateLimit(): this;
/**
* Grants permission to update a monitor
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
* - sso:PutApplicationGrant
* - sso:UpdateApplication
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateMonitor.html
*/
toUpdateMonitor(): this;
/**
* Grants permission to update a queue
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueue.html
*/
toUpdateQueue(): this;
/**
* Grants permission to update a queue environment
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueEnvironment.html
*/
toUpdateQueueEnvironment(): this;
/**
* Grants permission to update a queue-fleet association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueFleetAssociation.html
*/
toUpdateQueueFleetAssociation(): this;
/**
* Grants permission to update a queue-limit association
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateQueueLimitAssociation.html
*/
toUpdateQueueLimitAssociation(): this;
/**
* Grants permission to update a session for a job
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateSession.html
*/
toUpdateSession(): this;
/**
* Grants permission to update a step for a job
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateStep.html
*/
toUpdateStep(): this;
/**
* Grants permission to update a storage profile for a farm
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateStorageProfile.html
*/
toUpdateStorageProfile(): this;
/**
* Grants permission to update a task
*
* Access Level: Write
*
* Dependent actions:
* - identitystore:ListGroupMembershipsForMember
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateTask.html
*/
toUpdateTask(): this;
/**
* Grants permission to update a worker
*
* Access Level: Write
*
* Dependent actions:
* - logs:CreateLogStream
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateWorker.html
*/
toUpdateWorker(): this;
/**
* Grants permission to update the schedule for a worker
*
* Access Level: Write
*
* Dependent actions:
* - logs:CreateLogStream
*
* https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateWorkerSchedule.html
*/
toUpdateWorkerSchedule(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type budget to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/manage-costs.html
*
* @param farmId - Identifier for the farmId.
* @param budgetId - Identifier for the budgetId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifFarmMembershipLevels()
*/
onBudget(farmId: string, budgetId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type farm to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/farms.html
*
* @param farmId - Identifier for the farmId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifFarmMembershipLevels()
*/
onFarm(farmId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type fleet to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/manage-fleets.html
*
* @param farmId - Identifier for the farmId.
* @param fleetId - Identifier for the fleetId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifFarmMembershipLevels()
* - .ifFleetMembershipLevels()
*/
onFleet(farmId: string, fleetId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type job to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/deadline-cloud-jobs.html
*
* @param farmId - Identifier for the farmId.
* @param queueId - Identifier for the queueId.
* @param jobId - Identifier for the jobId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifFarmMembershipLevels()
* - .ifJobMembershipLevels()
* - .ifQueueMembershipLevels()
*/
onJob(farmId: string, queueId: string, jobId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type license-endpoint to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/cmf-ubl.html
*
* @param licenseEndpointId - Identifier for the licenseEndpointId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onLicenseEndpoint(licenseEndpointId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type metered-product to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/cmf-ubl.html
*
* @param licenseEndpointId - Identifier for the licenseEndpointId.
* @param productId - Identifier for the productId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onMeteredProduct(licenseEndpointId: string, productId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type monitor to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/working-with-deadline-monitor.html
*
* @param monitorId - Identifier for the monitorId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onMonitor(monitorId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type queue to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/queues.html
*
* @param farmId - Identifier for the farmId.
* @param queueId - Identifier for the queueId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifFarmMembershipLevels()
* - .ifQueueMembershipLevels()
*/
onQueue(farmId: string, queueId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type worker to the statement
*
* https://docs.aws.amazon.com/deadline-cloud/latest/userguide/security-iam.html
*
* @param farmId - Identifier for the farmId.
* @param fleetId - Identifier for the fleetId.
* @param workerId - Identifier for the workerId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
* - .ifFarmMembershipLevels()
* - .ifFleetMembershipLevels()
*/
onWorker(farmId: string, fleetId: string, workerId: string, account?: string, region?: string, partition?: string): this;
/**
* Filters access by the tags that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateFarm()
* - .toCreateFleet()
* - .toCreateLicenseEndpoint()
* - .toCreateQueue()
* - .toCreateWorker()
* - .toTagResource()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the tags associated with the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to resource types:
* - farm
* - fleet
* - license-endpoint
* - queue
* - worker
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the tag keys that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_poli