iam-floyd
Version:
AWS IAM policy statement generator with fluent interface
496 lines (495 loc) • 18 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
/**
* Statement provider for service [tnb](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awstelconetworkbuilder.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Tnb extends PolicyStatement {
servicePrefix: string;
/**
* Statement provider for service [tnb](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awstelconetworkbuilder.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
constructor(sid?: string);
/**
* Grants permission to cancel a network operation
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_CancelSolNetworkOperation.html
*/
toCancelSolNetworkOperation(): this;
/**
* Grants permission to create a function package
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_CreateSolFunctionPackage.html
*/
toCreateSolFunctionPackage(): this;
/**
* Grants permission to create a network instance
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_CreateSolNetworkInstance.html
*/
toCreateSolNetworkInstance(): this;
/**
* Grants permission to create a network package
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_CreateSolNetworkPackage.html
*/
toCreateSolNetworkPackage(): this;
/**
* Grants permission to delete a function package
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_DeleteSolFunctionPackage.html
*/
toDeleteSolFunctionPackage(): this;
/**
* Grants permission to delete a network instance
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_DeleteSolNetworkInstance.html
*/
toDeleteSolNetworkInstance(): this;
/**
* Grants permission to delete a network package
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_DeleteSolNetworkPackage.html
*/
toDeleteSolNetworkPackage(): this;
/**
* Grants permission to get a function instance
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolFunctionInstance.html
*/
toGetSolFunctionInstance(): this;
/**
* Grants permission to get a function package
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolFunctionPackage.html
*/
toGetSolFunctionPackage(): this;
/**
* Grants permission to get a function package contents
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolFunctionPackageContent.html
*/
toGetSolFunctionPackageContent(): this;
/**
* Grants permission to get a function package descriptor
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolFunctionPackageDescriptor.html
*/
toGetSolFunctionPackageDescriptor(): this;
/**
* Grants permission to get a network instance
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolNetworkInstance.html
*/
toGetSolNetworkInstance(): this;
/**
* Grants permission to get a network operation
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolNetworkOperation.html
*/
toGetSolNetworkOperation(): this;
/**
* Grants permission to get a network package
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolNetworkPackage.html
*/
toGetSolNetworkPackage(): this;
/**
* Grants permission to get a network package contents
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolNetworkPackageContent.html
*/
toGetSolNetworkPackageContent(): this;
/**
* Grants permission to get a network package descriptor
*
* Access Level: Read
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_GetSolNetworkPackageDescriptor.html
*/
toGetSolNetworkPackageDescriptor(): this;
/**
* Grants permission to instantiate a network instance
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_InstantiateSolNetworkInstance.html
*/
toInstantiateSolNetworkInstance(): this;
/**
* Grants permission to list function instances
*
* Access Level: List
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_ListSolFunctionInstances.html
*/
toListSolFunctionInstances(): this;
/**
* Grants permission to list function packages
*
* Access Level: List
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_ListSolFunctionPackages.html
*/
toListSolFunctionPackages(): this;
/**
* Grants permission to list network instances
*
* Access Level: List
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_ListSolNetworkInstances.html
*/
toListSolNetworkInstances(): this;
/**
* Grants permission to list network operations
*
* Access Level: List
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_ListSolNetworkOperations.html
*/
toListSolNetworkOperations(): this;
/**
* Grants permission to list network packages
*
* Access Level: List
*
* Possible conditions:
* - .ifAwsResourceTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_ListSolNetworkPackages.html
*/
toListSolNetworkPackages(): this;
/**
* Grants permission to return a list of tags for a resource
*
* Access Level: List
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_ListTagsForResource.html
*/
toListTagsForResource(): this;
/**
* Grants permission to upload function package content
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_PutSolFunctionPackageContent.html
*/
toPutSolFunctionPackageContent(): this;
/**
* Grants permission to upload network package content
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_PutSolNetworkPackageContent.html
*/
toPutSolNetworkPackageContent(): this;
/**
* Grants permission to add tags to the specified resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
* - .ifAwsRequestTag()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_TagResource.html
*/
toTagResource(): this;
/**
* Grants permission to terminate a network instance
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_TerminateSolNetworkInstance.html
*/
toTerminateSolNetworkInstance(): this;
/**
* Grants permission to remove tags from the specified resource
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_UntagResource.html
*/
toUntagResource(): this;
/**
* Grants permission to update a function package
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_UpdateSolFunctionPackage.html
*/
toUpdateSolFunctionPackage(): this;
/**
* Grants permission to update a network instance
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_UpdateSolNetworkInstance.html
*/
toUpdateSolNetworkInstance(): this;
/**
* Grants permission to update a network package
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_UpdateSolNetworkPackage.html
*/
toUpdateSolNetworkPackage(): this;
/**
* Grants permission to validate function package content
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_ValidateSolFunctionPackageContent.html
*/
toValidateSolFunctionPackageContent(): this;
/**
* Grants permission to validate network package content
*
* Access Level: Write
*
* https://docs.aws.amazon.com/tnb/latest/APIReference/API_ValidateSolNetworkPackageContent.html
*/
toValidateSolNetworkPackageContent(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type function-package to the statement
*
* https://docs.aws.amazon.com/tnb/latest/ug/function-packages.html
*
* @param functionPackageId - Identifier for the functionPackageId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onFunctionPackage(functionPackageId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type network-package to the statement
*
* https://docs.aws.amazon.com/tnb/latest/ug/network-packages.html
*
* @param networkPackageId - Identifier for the networkPackageId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onNetworkPackage(networkPackageId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type network-instance to the statement
*
* https://docs.aws.amazon.com/tnb/latest/ug/network-instances.html
*
* @param networkInstanceId - Identifier for the networkInstanceId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onNetworkInstance(networkInstanceId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type function-instance to the statement
*
* https://docs.aws.amazon.com/tnb/latest/ug/function-packages.html
*
* @param functionInstanceId - Identifier for the functionInstanceId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onFunctionInstance(functionInstanceId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type network-operation to the statement
*
* https://docs.aws.amazon.com/tnb/latest/ug/network-operations.html
*
* @param networkOperationId - Identifier for the networkOperationId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onNetworkOperation(networkOperationId: string, account?: string, region?: string, partition?: string): this;
/**
* Filters access by checking the presence of tag key-value pairs in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateSolFunctionPackage()
* - .toCreateSolNetworkInstance()
* - .toCreateSolNetworkPackage()
* - .toInstantiateSolNetworkInstance()
* - .toTagResource()
* - .toTerminateSolNetworkInstance()
* - .toUpdateSolNetworkInstance()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by checking tag key-value pairs attached to the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to actions:
* - .toGetSolFunctionInstance()
* - .toGetSolFunctionPackage()
* - .toGetSolFunctionPackageContent()
* - .toGetSolFunctionPackageDescriptor()
* - .toGetSolNetworkInstance()
* - .toGetSolNetworkOperation()
* - .toGetSolNetworkPackage()
* - .toGetSolNetworkPackageContent()
* - .toGetSolNetworkPackageDescriptor()
* - .toListSolFunctionInstances()
* - .toListSolFunctionPackages()
* - .toListSolNetworkInstances()
* - .toListSolNetworkOperations()
* - .toListSolNetworkPackages()
*
* Applies to resource types:
* - function-package
* - network-package
* - network-instance
* - function-instance
* - network-operation
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by presence of tag keys in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toCreateSolFunctionPackage()
* - .toCreateSolNetworkInstance()
* - .toCreateSolNetworkPackage()
* - .toInstantiateSolNetworkInstance()
* - .toTagResource()
* - .toTerminateSolNetworkInstance()
* - .toUntagResource()
* - .toUpdateSolNetworkInstance()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value: string | string[], operator?: Operator | string): this;
}