UNPKG

iam-floyd

Version:

AWS IAM policy statement generator with fluent interface

1,544 lines 102 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; /** * Statement provider for service [rds](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonrds.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Rds extends PolicyStatement { servicePrefix: string; /** * Statement provider for service [rds](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonrds.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ constructor(sid?: string); /** * Grants permission to associate an Identity and Access Management (IAM) role from an Aurora DB cluster * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_AddRoleToDBCluster.html */ toAddRoleToDBCluster(): this; /** * Grants permission to associate an AWS Identity and Access Management (IAM) role with a DB instance * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_AddRoleToDBInstance.html */ toAddRoleToDBInstance(): this; /** * Grants permission to add a source identifier to an existing RDS event notification subscription * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_AddSourceIdentifierToSubscription.html */ toAddSourceIdentifierToSubscription(): this; /** * Grants permission to add metadata tags to an Amazon RDS resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_AddTagsToResource.html */ toAddTagsToResource(): this; /** * Grants permission to apply a pending maintenance action to a resource * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ApplyPendingMaintenanceAction.html */ toApplyPendingMaintenanceAction(): this; /** * Grants permission to enable ingress to a DBSecurityGroup using one of two forms of authorization * * Access Level: Permissions management * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_AuthorizeDBSecurityGroupIngress.html */ toAuthorizeDBSecurityGroupIngress(): this; /** * Grants permission to backtrack a DB cluster to a specific time, without creating a new DB cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_BacktrackDBCluster.html */ toBacktrackDBCluster(): this; /** * Grants permission to cancel an export task in progress * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CancelExportTask.html */ toCancelExportTask(): this; /** * Grants permission to copy a custom engine version * * Access Level: Write * * https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonrds.html */ toCopyCustomDBEngineVersion(): this; /** * Grants permission to copy the specified DB cluster parameter group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CopyDBClusterParameterGroup.html */ toCopyDBClusterParameterGroup(): this; /** * Grants permission to create a snapshot of a DB cluster * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CopyDBClusterSnapshot.html */ toCopyDBClusterSnapshot(): this; /** * Grants permission to copy the specified DB parameter group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CopyDBParameterGroup.html */ toCopyDBParameterGroup(): this; /** * Grants permission to copy the specified DB snapshot * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifCopyOptionGroup() * * Dependent actions: * - rds:AddTagsToResource * - rds:CopyCustomDBEngineVersion * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CopyDBSnapshot.html */ toCopyDBSnapshot(): this; /** * Grants permission to copy the specified option group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CopyOptionGroup.html */ toCopyOptionGroup(): this; /** * Grants permission to create a blue-green deployment for a given source cluster or instance * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsResourceTag() * - .ifAwsTagKeys() * - .ifClusterTag() * - .ifClusterPgTag() * - .ifDbTag() * - .ifPgTag() * - .ifReqTag() * - .ifDatabaseEngine() * - .ifDatabaseName() * - .ifStorageEncrypted() * - .ifDatabaseClass() * - .ifStorageSize() * - .ifMultiAz() * - .ifPiops() * - .ifVpc() * * Dependent actions: * - rds:AddTagsToResource * - rds:CreateDBCluster * - rds:CreateDBClusterEndpoint * - rds:CreateDBInstance * - rds:CreateDBInstanceReadReplica * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateBlueGreenDeployment.html */ toCreateBlueGreenDeployment(): this; /** * Grants permission to create a custom engine version * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:CreateServiceLinkedRole * - mediaimport:CreateDatabaseBinarySnapshot * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateCustomDBEngineVersion.html */ toCreateCustomDBEngineVersion(): this; /** * Grants permission to create a new DB cluster * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * - .ifDatabaseEngine() * - .ifDatabaseName() * - .ifStorageEncrypted() * - .ifDatabaseClass() * - .ifStorageSize() * - .ifPiops() * - .ifManageMasterUserPassword() * * Dependent actions: * - iam:PassRole * - kms:CreateGrant * - kms:Decrypt * - kms:DescribeKey * - kms:GenerateDataKey * - rds:AddTagsToResource * - rds:CreateDBInstance * - secretsmanager:CreateSecret * - secretsmanager:TagResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBCluster.html */ toCreateDBCluster(): this; /** * Grants permission to create a new custom endpoint and associates it with an Amazon Aurora DB cluster or Amazon DocumentDB cluster * * Access Level: Write * * Possible conditions: * - .ifEndpointType() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBClusterEndpoint.html */ toCreateDBClusterEndpoint(): this; /** * Grants permission to create a new DB cluster parameter group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBClusterParameterGroup.html */ toCreateDBClusterParameterGroup(): this; /** * Grants permission to create a snapshot of a DB cluster * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBClusterSnapshot.html */ toCreateDBClusterSnapshot(): this; /** * Grants permission to create a new DB instance * * Access Level: Write * * Possible conditions: * - .ifBackupTarget() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * - .ifManageMasterUserPassword() * * Dependent actions: * - iam:PassRole * - kms:CreateGrant * - kms:Decrypt * - kms:DescribeKey * - kms:GenerateDataKey * - rds:AddTagsToResource * - rds:CreateTenantDatabase * - secretsmanager:CreateSecret * - secretsmanager:TagResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.html */ toCreateDBInstance(): this; /** * Grants permission to create a DB instance that acts as a Read Replica of a source DB instance * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - iam:PassRole * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstanceReadReplica.html */ toCreateDBInstanceReadReplica(): this; /** * Grants permission to create a new DB parameter group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBParameterGroup.html */ toCreateDBParameterGroup(): this; /** * Grants permission to create a database proxy * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBProxy.html */ toCreateDBProxy(): this; /** * Grants permission to create a database proxy endpoint * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBProxyEndpoint.html */ toCreateDBProxyEndpoint(): this; /** * Grants permission to create a new DB security group. DB security groups control access to a DB instance * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBSecurityGroup.html */ toCreateDBSecurityGroup(): this; /** * Grants permission to create a new Aurora Limitless Database DB shard group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBShardGroup.html */ toCreateDBShardGroup(): this; /** * Grants permission to create a DBSnapshot * * Access Level: Write * * Possible conditions: * - .ifBackupTarget() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBSnapshot.html */ toCreateDBSnapshot(): this; /** * Grants permission to create a new DB subnet group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBSubnetGroup.html */ toCreateDBSubnetGroup(): this; /** * Grants permission to create an RDS event notification subscription * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateEventSubscription.html */ toCreateEventSubscription(): this; /** * Grants permission to create an Aurora global database or DocumentDB global database spread across multiple regions * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateGlobalCluster.html */ toCreateGlobalCluster(): this; /** * Grants permission to create an Aurora zero-ETL integration with Redshift * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - kms:CreateGrant * - kms:DescribeKey * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateIntegration.html */ toCreateIntegration(): this; /** * Grants permission to create a new option group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateOptionGroup.html */ toCreateOptionGroup(): this; /** * Grants permission to create a new tenant database * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifTenantDatabaseName() * * Dependent actions: * - rds:AddTagsToResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateTenantDatabase.html */ toCreateTenantDatabase(): this; /** * Grants permission to access a resource in the remote Region when executing cross-Region operations, such as cross-Region snapshot copy or cross-Region read replica creation * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/security_iam_service-with-iam.html#UsingWithRDS.IAM.Conditions */ toCrossRegionCommunication(): this; /** * Grants permission to delete blue green deployments * * Access Level: Write * * Possible conditions: * - .ifAwsResourceTag() * * Dependent actions: * - rds:DeleteDBCluster * - rds:DeleteDBClusterEndpoint * - rds:DeleteDBInstance * - rds:PromoteReadReplica * - rds:PromoteReadReplicaDBCluster * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteBlueGreenDeployment.html */ toDeleteBlueGreenDeployment(): this; /** * Grants permission to delete an existing custom engine version * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteCustomDBEngineVersion.html */ toDeleteCustomDBEngineVersion(): this; /** * Grants permission to delete a previously provisioned DB cluster * * Access Level: Write * * Dependent actions: * - rds:AddTagsToResource * - rds:CreateDBClusterSnapshot * - rds:DeleteDBInstance * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBCluster.html */ toDeleteDBCluster(): this; /** * Grants permission to delete cluster automated backups based on the source cluster's DbClusterResourceId value or the restorable cluster's resource ID * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBClusterAutomatedBackup.html */ toDeleteDBClusterAutomatedBackup(): this; /** * Grants permission to delete a custom endpoint and removes it from an Amazon Aurora DB cluster or Amazon DocumentDB cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBClusterEndpoint.html */ toDeleteDBClusterEndpoint(): this; /** * Grants permission to delete a specified DB cluster parameter group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBClusterParameterGroup.html */ toDeleteDBClusterParameterGroup(): this; /** * Grants permission to delete a DB cluster snapshot * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBClusterSnapshot.html */ toDeleteDBClusterSnapshot(): this; /** * Grants permission to delete a previously provisioned DB instance * * Access Level: Write * * Dependent actions: * - rds:AddTagsToResource * - rds:CreateDBSnapshot * - rds:DeleteTenantDatabase * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBInstance.html */ toDeleteDBInstance(): this; /** * Grants permission to delete automated backups based on the source instance's DbiResourceId value or the restorable instance's resource ID * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBInstanceAutomatedBackup.html */ toDeleteDBInstanceAutomatedBackup(): this; /** * Grants permission to delete a specified DBParameterGroup * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBParameterGroup.html */ toDeleteDBParameterGroup(): this; /** * Grants permission to delete a database proxy * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBProxy.html */ toDeleteDBProxy(): this; /** * Grants permission to delete a database proxy endpoint * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBProxyEndpoint.html */ toDeleteDBProxyEndpoint(): this; /** * Grants permission to delete a DB security group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSecurityGroup.html */ toDeleteDBSecurityGroup(): this; /** * Grants permission to delete an Aurora Limitless Database DB shard group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBShardGroup.html */ toDeleteDBShardGroup(): this; /** * Grants permission to delete a DBSnapshot * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSnapshot.html */ toDeleteDBSnapshot(): this; /** * Grants permission to delete a DB subnet group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSubnetGroup.html */ toDeleteDBSubnetGroup(): this; /** * Grants permission to delete an RDS event notification subscription * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteEventSubscription.html */ toDeleteEventSubscription(): this; /** * Grants permission to delete a global database cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteGlobalCluster.html */ toDeleteGlobalCluster(): this; /** * Grants permission to delete an Aurora zero-ETL integration with Redshift * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteIntegration.html */ toDeleteIntegration(): this; /** * Grants permission to delete an existing option group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteOptionGroup.html */ toDeleteOptionGroup(): this; /** * Grants permission to delete a tenant database * * Access Level: Write * * Dependent actions: * - rds:AddTagsToResource * - rds:CreateDBSnapshot * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteTenantDatabase.html */ toDeleteTenantDatabase(): this; /** * Grants permission to remove targets from a database proxy target group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeregisterDBProxyTargets.html */ toDeregisterDBProxyTargets(): this; /** * Grants permission to list all of the attributes for a customer account * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeAccountAttributes.html */ toDescribeAccountAttributes(): this; /** * Grants permission to describe blue green deployments * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeBlueGreenDeployments.html */ toDescribeBlueGreenDeployments(): this; /** * Grants permission to list the set of CA certificates provided by Amazon RDS for this AWS account * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeCertificates.html */ toDescribeCertificates(): this; /** * Grants permission to return a list of cluster automated backups for both current and deleted clusters * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterAutomatedBackups.html */ toDescribeDBClusterAutomatedBackups(): this; /** * Grants permission to return information about backtracks for a DB cluster * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterBacktracks.html */ toDescribeDBClusterBacktracks(): this; /** * Grants permission to return information about endpoints for an Amazon Aurora DB cluster * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterEndpoints.html */ toDescribeDBClusterEndpoints(): this; /** * Grants permission to return a list of DBClusterParameterGroup descriptions * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterParameterGroups.html */ toDescribeDBClusterParameterGroups(): this; /** * Grants permission to return the detailed parameter list for a particular DB cluster parameter group * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterParameters.html */ toDescribeDBClusterParameters(): this; /** * Grants permission to return a list of DB cluster snapshot attribute names and values for a manual DB cluster snapshot * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterSnapshotAttributes.html */ toDescribeDBClusterSnapshotAttributes(): this; /** * Grants permission to return information about DB cluster snapshots * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterSnapshots.html */ toDescribeDBClusterSnapshots(): this; /** * Grants permission to return information about provisioned Aurora DB clusters or DocumentDB clusters * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusters.html */ toDescribeDBClusters(): this; /** * Grants permission to return a list of the available DB engines * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBEngineVersions.html */ toDescribeDBEngineVersions(): this; /** * Grants permission to return a list of automated backups for both current and deleted instances * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBInstanceAutomatedBackups.html */ toDescribeDBInstanceAutomatedBackups(): this; /** * Grants permission to return information about provisioned RDS instances * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBInstances.html */ toDescribeDBInstances(): this; /** * Grants permission to return a list of DB log files for the DB instance * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBLogFiles.html */ toDescribeDBLogFiles(): this; /** * Grants permission to return a list of DBParameterGroup descriptions * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBParameterGroups.html */ toDescribeDBParameterGroups(): this; /** * Grants permission to return the detailed parameter list for a particular DB parameter group * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBParameters.html */ toDescribeDBParameters(): this; /** * Grants permission to view proxies * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBProxies.html */ toDescribeDBProxies(): this; /** * Grants permission to view proxy endpoints * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBProxyEndpoints.html */ toDescribeDBProxyEndpoints(): this; /** * Grants permission to view database proxy target group details * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBProxyTargetGroups.html */ toDescribeDBProxyTargetGroups(): this; /** * Grants permission to view database proxy target details * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBProxyTargets.html */ toDescribeDBProxyTargets(): this; /** * Grants permission to list recommendation details * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBRecommendations.html */ toDescribeDBRecommendations(): this; /** * Grants permission to return a list of DBSecurityGroup descriptions * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBSecurityGroups.html */ toDescribeDBSecurityGroups(): this; /** * Grants permission to return information about all Aurora Limitless Database DB shard groups for this account. You can filter by shard group(s) * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBShardGroups.html */ toDescribeDBShardGroups(): this; /** * Grants permission to return a list of DB snapshot attribute names and values for a manual DB snapshot * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBSnapshotAttributes.html */ toDescribeDBSnapshotAttributes(): this; /** * Grants permission to return information about tenant databases in DB snapshots. You can filter by Region or snapshot * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBSnapshotTenantDatabases.html */ toDescribeDBSnapshotTenantDatabases(): this; /** * Grants permission to return information about DB snapshots * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBSnapshots.html */ toDescribeDBSnapshots(): this; /** * Grants permission to return a list of DBSubnetGroup descriptions * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBSubnetGroups.html */ toDescribeDBSubnetGroups(): this; /** * Grants permission to return the default engine and system parameter information for the cluster database engine * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeEngineDefaultClusterParameters.html */ toDescribeEngineDefaultClusterParameters(): this; /** * Grants permission to return the default engine and system parameter information for the specified database engine * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeEngineDefaultParameters.html */ toDescribeEngineDefaultParameters(): this; /** * Grants permission to display a list of categories for all event source types, or, if specified, for a specified source type * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeEventCategories.html */ toDescribeEventCategories(): this; /** * Grants permission to list all the subscription descriptions for a customer account * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeEventSubscriptions.html */ toDescribeEventSubscriptions(): this; /** * Grants permission to return events related to DB instances, DB security groups, DB snapshots, and DB parameter groups for the past 14 days * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeEvents.html */ toDescribeEvents(): this; /** * Grants permission to return information about the export tasks * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeExportTasks.html */ toDescribeExportTasks(): this; /** * Grants permission to return information about Aurora global database clusters or DocumentDB global database clusters * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeGlobalClusters.html */ toDescribeGlobalClusters(): this; /** * Grants permission to describe an Aurora zero-ETL integration with Redshift * * Access Level: List * * Possible conditions: * - .ifAwsResourceTag() * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeIntegrations.html */ toDescribeIntegrations(): this; /** * Grants permission to describe all available options * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeOptionGroupOptions.html */ toDescribeOptionGroupOptions(): this; /** * Grants permission to describe the available option groups * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeOptionGroups.html */ toDescribeOptionGroups(): this; /** * Grants permission to return a list of orderable DB instance options for the specified engine * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeOrderableDBInstanceOptions.html */ toDescribeOrderableDBInstanceOptions(): this; /** * Grants permission to return a list of resources (for example, DB instances) that have at least one pending maintenance action * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribePendingMaintenanceActions.html */ toDescribePendingMaintenanceActions(): this; /** * Grants permission to return information about recommendation groups * * Access Level: Read * * https://docs.aws.amazon.com/AmazonRDS/latest/USER_Recommendations.html */ toDescribeRecommendationGroups(): this; /** * Grants permission to return information about recommendations * * Access Level: Read * * https://docs.aws.amazon.com/AmazonRDS/latest/USER_Recommendations.html */ toDescribeRecommendations(): this; /** * Grants permission to return information about reserved DB instances for this account, or about a specified reserved DB instance * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeReservedDBInstances.html */ toDescribeReservedDBInstances(): this; /** * Grants permission to list available reserved DB instance offerings * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeReservedDBInstancesOfferings.html */ toDescribeReservedDBInstancesOfferings(): this; /** * Grants permission to return a list of the source AWS Regions where the current AWS Region can create a Read Replica or copy a DB snapshot from * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeSourceRegions.html */ toDescribeSourceRegions(): this; /** * Grants permission to return information about provisioned tenant databases. You can filter by Region or snapshot * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeTenantDatabases.html */ toDescribeTenantDatabases(): this; /** * Grants permission to list available modifications you can make to your DB instance * * Access Level: List * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeValidDBInstanceModifications.html */ toDescribeValidDBInstanceModifications(): this; /** * Grants permission to disable http endpoint for a DB cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DisableHttpEndpoint.html */ toDisableHttpEndpoint(): this; /** * Grants permission to download specified log file * * Access Level: Read * * https://docs.aws.amazon.com/AmazonRDS/latest/USER_LogAccess.html */ toDownloadCompleteDBLogFile(): this; /** * Grants permission to download all or a portion of the specified log file, up to 1 MB in size * * Access Level: Read * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DownloadDBLogFilePortion.html */ toDownloadDBLogFilePortion(): this; /** * Grants permission to enable http endpoint for a DB cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_EnableHttpEndpoint.html */ toEnableHttpEndpoint(): this; /** * Grants permission to force a failover for a DB cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_FailoverDBCluster.html */ toFailoverDBCluster(): this; /** * Grants permission to failover a global cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_FailoverGlobalCluster.html */ toFailoverGlobalCluster(): this; /** * Grants permission to list all tags on an Amazon RDS resource * * Access Level: Read * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ListTagsForResource.html */ toListTagsForResource(): this; /** * Grants permission to modify a database activity stream * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyActivityStream.html */ toModifyActivityStream(): this; /** * Grants permission to modify the system-default Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate for Amazon RDS for new DB instances * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyCertificates.html */ toModifyCertificates(): this; /** * Grants permission to modify current cluster capacity for an Amazon Aurora Serverless DB cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyCurrentDBClusterCapacity.html */ toModifyCurrentDBClusterCapacity(): this; /** * Grants permission to modify an existing custom engine version * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyCustomDBEngineVersion.html */ toModifyCustomDBEngineVersion(): this; /** * Grants permission to modify a setting for an Amazon Aurora DB cluster or Amazon DocumentDB cluster * * Access Level: Write * * Possible conditions: * - .ifDatabaseClass() * - .ifStorageSize() * - .ifPiops() * - .ifManageMasterUserPassword() * * Dependent actions: * - iam:PassRole * - kms:CreateGrant * - kms:Decrypt * - kms:DescribeKey * - kms:GenerateDataKey * - rds:ModifyDBInstance * - secretsmanager:CreateSecret * - secretsmanager:RotateSecret * - secretsmanager:TagResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBCluster.html */ toModifyDBCluster(): this; /** * Grants permission to modify the properties of an endpoint in an Amazon Aurora DB cluster or Amazon DocumentDB cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBClusterEndpoint.html */ toModifyDBClusterEndpoint(): this; /** * Grants permission to modify the parameters of a DB cluster parameter group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBClusterParameterGroup.html */ toModifyDBClusterParameterGroup(): this; /** * Grants permission to add an attribute and values to, or removes an attribute and values from, a manual DB cluster snapshot * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBClusterSnapshotAttribute.html */ toModifyDBClusterSnapshotAttribute(): this; /** * Grants permission to modify settings for a DB instance * * Access Level: Write * * Possible conditions: * - .ifManageMasterUserPassword() * * Dependent actions: * - iam:PassRole * - kms:CreateGrant * - kms:Decrypt * - kms:DescribeKey * - kms:GenerateDataKey * - rds:AddTagsToResource * - rds:CreateTenantDatabase * - secretsmanager:CreateSecret * - secretsmanager:RotateSecret * - secretsmanager:TagResource * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBInstance.html */ toModifyDBInstance(): this; /** * Grants permission to modify the parameters of a DB parameter group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBParameterGroup.html */ toModifyDBParameterGroup(): this; /** * Grants permission to modify database proxy * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBProxy.html */ toModifyDBProxy(): this; /** * Grants permission to modify database proxy endpoint * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBProxyEndpoint.html */ toModifyDBProxyEndpoint(): this; /** * Grants permission to modify target group for a database proxy * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBProxyTargetGroup.html */ toModifyDBProxyTargetGroup(): this; /** * Grants permission to modify recommendation * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBRecommendation.html */ toModifyDBRecommendation(): this; /** * Grants permission to modify properties of an Aurora Limitless Database DB shard group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBShardGroup.html */ toModifyDBShardGroup(): this; /** * Grants permission to update a manual DB snapshot, which can be encrypted or not encrypted, with a new engine version * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBSnapshot.html */ toModifyDBSnapshot(): this; /** * Grants permission to add an attribute and values to, or removes an attribute and values from, a manual DB snapshot * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBSnapshotAttribute.html */ toModifyDBSnapshotAttribute(): this; /** * Grants permission to modify an existing DB subnet group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBSubnetGroup.html */ toModifyDBSubnetGroup(): this; /** * Grants permission to modify an existing RDS event notification subscription * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyEventSubscription.html */ toModifyEventSubscription(): this; /** * Grants permission to modify a setting for an Amazon Aurora global cluster or Amazon DocumentDB global cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyGlobalCluster.html */ toModifyGlobalCluster(): this; /** * Grants permission to modify an Aurora zero-ETL integration with Redshift * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyIntegration.html */ toModifyIntegration(): this; /** * Grants permission to modify an existing option group * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyOptionGroup.html */ toModifyOptionGroup(): this; /** * Grants permission to modify recommendation * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/USER_Recommendations.html */ toModifyRecommendation(): this; /** * Grants permission to modify a tenant database * * Access Level: Write * * Possible conditions: * - .ifTenantDatabaseName() * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyTenantDatabase.html */ toModifyTenantDatabase(): this; /** * Grants permission to promote a Read Replica DB instance to a standalone DB instance * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_PromoteReadReplica.html */ toPromoteReadReplica(): this; /** * Grants permission to promote a Read Replica DB cluster to a standalone DB cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_PromoteReadReplicaDBCluster.html */ toPromoteReadReplicaDBCluster(): this; /** * Grants permission to purchase a reserved DB instance offering * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_PurchaseReservedDBInstancesOffering.html */ toPurchaseReservedDBInstancesOffering(): this; /** * Grants permission to reboot a previously provisioned DB cluster * * Access Level: Write * * Dependent actions: * - rds:RebootDBInstance * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RebootDBCluster.html */ toRebootDBCluster(): this; /** * Grants permission to restart the database engine service * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RebootDBInstance.html */ toRebootDBInstance(): this; /** * Grants permission to reboot an Aurora Limitless Database DB shard group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RebootDBShardGroup.html */ toRebootDBShardGroup(): this; /** * Grants permission to add targets to a database proxy target group * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RegisterDBProxyTargets.html */ toRegisterDBProxyTargets(): this; /** * Grants permission to detach an Aurora secondary cluster from an Aurora global database cluster or DocumentDB global cluster * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RemoveFromGlobalCluster.html */ toRemoveFromGlobalCluster(): this; /** * Grants permission to disassociate an AWS Identity and Access Management (IAM) role from an Amazon Aurora DB cluster * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RemoveRoleFromDBCluster.html */ toRemoveRoleFromDBCluster(): this; /** * Grants permission to disassociate an AWS Identity and Access Management (IAM) role from a DB instance * * Access Level: Write * * Dependent actions: * - iam:PassRole * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RemoveRoleFromDBInstance.html */ toRemoveRoleFromDBInstance(): this; /** * Grants permission to remove a source identifier from an existing RDS event notification subscription * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RemoveSourceIdentifierFromSubscription.html */ toRemoveSourceIdentifierFromSubscription(): this; /** * Grants permission to remove metadata tags from an Amazon RDS resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RemoveTagsFromResource.html */ toRemoveTagsFromResource(): this; /** * Grants permission to modify the parameters of a DB cluster parameter group to the default value * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ResetDBClusterParameterGroup.html */ toResetDBClusterParameterGroup(): this; /** * Grants permission to modify the parameters of a DB parameter group to the engine/system default value * * Access Level: Write * * https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ResetDBParameterGroup.html */ toResetDBParameterGroup(): this; /** * Grants permission to create an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifReqTag() * - .ifDatabas