iam-floyd
Version:
AWS IAM policy statement generator with fluent interface
755 lines (754 loc) • 32 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
/**
* Statement provider for service [batch](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Batch extends PolicyStatement {
servicePrefix: string;
/**
* Statement provider for service [batch](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
constructor(sid?: string);
/**
* Grants permission to cancel a job in an AWS Batch job queue in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_CancelJob.html
*/
toCancelJob(): this;
/**
* Grants permission to create an AWS Batch compute environment in your account
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateComputeEnvironment.html
*/
toCreateComputeEnvironment(): this;
/**
* Grants permission to create an AWS Batch consumable resource in your account
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateConsumableResource.html
*/
toCreateConsumableResource(): this;
/**
* Grants permission to create an AWS Batch job queue in your account
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateJobQueue.html
*/
toCreateJobQueue(): this;
/**
* Grants permission to create an AWS Batch scheduling policy in your account
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateSchedulingPolicy.html
*/
toCreateSchedulingPolicy(): this;
/**
* Grants permission to create an AWS Batch service environment in your account
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iam:CreateServiceLinkedRole
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateServiceEnvironment.html
*/
toCreateServiceEnvironment(): this;
/**
* Grants permission to delete an AWS Batch compute environment in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteComputeEnvironment.html
*/
toDeleteComputeEnvironment(): this;
/**
* Grants permission to delete an AWS Batch consumable resource in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteConsumableResource.html
*/
toDeleteConsumableResource(): this;
/**
* Grants permission to delete an AWS Batch job queue in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteJobQueue.html
*/
toDeleteJobQueue(): this;
/**
* Grants permission to delete an AWS Batch scheduling policy in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteSchedulingPolicy.html
*/
toDeleteSchedulingPolicy(): this;
/**
* Grants permission to delete an AWS Batch service environment in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DeleteServiceEnvironment.html
*/
toDeleteServiceEnvironment(): this;
/**
* Grants permission to deregister an AWS Batch job definition in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DeregisterJobDefinition.html
*/
toDeregisterJobDefinition(): this;
/**
* Grants permission to describe one or more AWS Batch compute environments in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeComputeEnvironments.html
*/
toDescribeComputeEnvironments(): this;
/**
* Grants permission to describe one or more AWS Batch consumable resource in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeConsumableResource.html
*/
toDescribeConsumableResource(): this;
/**
* Grants permission to describe one or more AWS Batch job definitions in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobDefinitions.html
*/
toDescribeJobDefinitions(): this;
/**
* Grants permission to describe one or more AWS Batch job queues in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobQueues.html
*/
toDescribeJobQueues(): this;
/**
* Grants permission to describe a list of AWS Batch jobs in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeJobs.html
*/
toDescribeJobs(): this;
/**
* Grants permission to describe one or more AWS Batch scheduling policies in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeSchedulingPolicies.html
*/
toDescribeSchedulingPolicies(): this;
/**
* Grants permission to describe one or more AWS Batch service environments in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeServiceEnvironments.html
*/
toDescribeServiceEnvironments(): this;
/**
* Grants permission to describe a AWS Batch service job in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_DescribeServiceJob.html
*/
toDescribeServiceJob(): this;
/**
* Grants permission to get a snapshot of an AWS Batch job queue in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_GetJobQueueSnapshot.html
*/
toGetJobQueueSnapshot(): this;
/**
* Grants permission to list AWS Batch consumable resources in your account
*
* Access Level: List
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_ListConsumableResources.html
*/
toListConsumableResources(): this;
/**
* Grants permission to list jobs for a specified AWS Batch job queue in your account
*
* Access Level: List
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_ListJobs.html
*/
toListJobs(): this;
/**
* Grants permission to list AWS Batch jobs that require a specific consumable resource in your account
*
* Access Level: List
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_ListJobsByConsumableResource.html
*/
toListJobsByConsumableResource(): this;
/**
* Grants permission to list AWS Batch scheduling policies in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_ListSchedulingPolicies.html
*/
toListSchedulingPolicies(): this;
/**
* Grants permission to list service jobs for a specified AWS Batch job queue in your account
*
* Access Level: List
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_ListServiceJobs.html
*/
toListServiceJobs(): this;
/**
* Grants permission to list tags for an AWS Batch resource in your account
*
* Access Level: Read
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_ListTagsForResource.html
*/
toListTagsForResource(): this;
/**
* Grants permission to register an AWS Batch job definition in your account
*
* Access Level: Write
*
* Possible conditions:
* - .ifUser()
* - .ifPrivileged()
* - .ifImage()
* - .ifLogDriver()
* - .ifAWSLogsGroup()
* - .ifAWSLogsRegion()
* - .ifAWSLogsStreamPrefix()
* - .ifAWSLogsCreateGroup()
* - .ifEKSServiceAccountName()
* - .ifEKSImage()
* - .ifEKSRunAsUser()
* - .ifEKSRunAsGroup()
* - .ifEKSPrivileged()
* - .ifEKSNamespace()
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_RegisterJobDefinition.html
*/
toRegisterJobDefinition(): this;
/**
* Grants permission to submit an AWS Batch job from a job definition in your account
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_SubmitJob.html
*/
toSubmitJob(): this;
/**
* Grants permission to submit an AWS Batch service job
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_SubmitServiceJob.html
*/
toSubmitServiceJob(): this;
/**
* Grants permission to tag an AWS Batch resource in your account
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_TagResource.html
*/
toTagResource(): this;
/**
* Grants permission to terminate a job in an AWS Batch job queue in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_TerminateJob.html
*/
toTerminateJob(): this;
/**
* Grants permission to terminate a service job in an AWS Batch job queue in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_TerminateServiceJob.html
*/
toTerminateServiceJob(): this;
/**
* Grants permission to untag an AWS Batch resource in your account
*
* Access Level: Tagging
*
* Possible conditions:
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_UntagResource.html
*/
toUntagResource(): this;
/**
* Grants permission to update an AWS Batch compute environment in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateComputeEnvironment.html
*/
toUpdateComputeEnvironment(): this;
/**
* Grants permission to update an AWS Batch consumable resource in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateConsumableResource.html
*/
toUpdateConsumableResource(): this;
/**
* Grants permission to update an AWS Batch job queue in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateJobQueue.html
*/
toUpdateJobQueue(): this;
/**
* Grants permission to update an AWS Batch scheduling policy in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateSchedulingPolicy.html
*/
toUpdateSchedulingPolicy(): this;
/**
* Grants permission to update an AWS Batch service environment in your account
*
* Access Level: Write
*
* https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateServiceEnvironment.html
*/
toUpdateServiceEnvironment(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type compute-environment to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html
*
* @param computeEnvironmentName - Identifier for the computeEnvironmentName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onComputeEnvironment(computeEnvironmentName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type job-queue to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/job_queues.html
*
* @param jobQueueName - Identifier for the jobQueueName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onJobQueue(jobQueueName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type job-definition to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/job_definitions.html
*
* @param jobDefinitionName - Identifier for the jobDefinitionName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onJobDefinition(jobDefinitionName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type job-definition-revision to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/job_definitions.html
*
* @param jobDefinitionName - Identifier for the jobDefinitionName.
* @param revision - Identifier for the revision.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onJobDefinitionRevision(jobDefinitionName: string, revision: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type job to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/jobs.html
*
* @param jobId - Identifier for the jobId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onJob(jobId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type scheduling-policy to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/scheduling-policies.html
*
* @param schedulingPolicyName - Identifier for the schedulingPolicyName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onSchedulingPolicy(schedulingPolicyName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type service-environment to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/service-environments.html
*
* @param serviceEnvironmentName - Identifier for the serviceEnvironmentName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onServiceEnvironment(serviceEnvironmentName: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type service-job to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/service-jobs.html
*
* @param jobId - Identifier for the jobId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onServiceJob(jobId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type consumable-resource to the statement
*
* https://docs.aws.amazon.com/batch/latest/userguide/resource-aware-scheduling.html
*
* @param consumableResourceName - Identifier for the consumableResourceName.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAwsResourceTag()
*/
onConsumableResource(consumableResourceName: string, account?: string, region?: string, partition?: string): this;
/**
* Filters access by the tags that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
*
* Applies to actions:
* - .toCreateComputeEnvironment()
* - .toCreateConsumableResource()
* - .toCreateJobQueue()
* - .toCreateSchedulingPolicy()
* - .toCreateServiceEnvironment()
* - .toRegisterJobDefinition()
* - .toSubmitJob()
* - .toSubmitServiceJob()
* - .toTagResource()
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the tags associated with the resource
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* Applies to resource types:
* - compute-environment
* - job-queue
* - job-definition-revision
* - job
* - scheduling-policy
* - service-environment
* - service-job
* - consumable-resource
*
* @param tagKey The tag key to check
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the tag keys that are passed in the request
*
* https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
*
* Applies to actions:
* - .toCreateComputeEnvironment()
* - .toCreateConsumableResource()
* - .toCreateJobQueue()
* - .toCreateSchedulingPolicy()
* - .toCreateServiceEnvironment()
* - .toRegisterJobDefinition()
* - .toSubmitJob()
* - .toSubmitServiceJob()
* - .toTagResource()
* - .toUntagResource()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAwsTagKeys(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the specified logging driver to determine whether awslogs group will be created for the logs
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value `true` or `false`. **Default:** `true`
*/
ifAWSLogsCreateGroup(value?: boolean): this;
/**
* Filters access by the awslogs group where the logs are located
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAWSLogsGroup(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the region where the logs are sent to
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAWSLogsRegion(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the awslogs log stream prefix
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAWSLogsStreamPrefix(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the image used to start a container for an Amazon EKS job
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
* - .toSubmitJob()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifEKSImage(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the namespace of a cluster used to run the pod for an Amazon EKS job
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
* - .toSubmitJob()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifEKSNamespace(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the specified privileged parameter value that determines whether the container is given elevated privileges on the host container instance (similar to the root user) for an Amazon EKS job
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value `true` or `false`. **Default:** `true`
*/
ifEKSPrivileged(value?: boolean): this;
/**
* Filters access by the specified group numeric ID (gid) used to start a container in an Amazon EKS job
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [numeric operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_Numeric). **Default:** `NumericEquals`
*/
ifEKSRunAsGroup(value: number | number[], operator?: Operator | string): this;
/**
* Filters access by the specified user numeric ID (uid) used to start a a container in an Amazon EKS job
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [numeric operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_Numeric). **Default:** `NumericEquals`
*/
ifEKSRunAsUser(value: number | number[], operator?: Operator | string): this;
/**
* Filters access by the name of the service account used to run the pod for an Amazon EKS job
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifEKSServiceAccountName(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the image used to start a container
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifImage(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the log driver used for the container
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifLogDriver(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by the specified privileged parameter value that determines whether the container is given elevated privileges on the host container instance (similar to the root user)
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value `true` or `false`. **Default:** `true`
*/
ifPrivileged(value?: boolean): this;
/**
* Filters access by the shareIdentifier used inside submit job
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toSubmitJob()
* - .toSubmitServiceJob()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifShareIdentifier(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by user name or numeric uid used inside the container
*
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbatch.html#awsbatch-policy-keys
*
* Applies to actions:
* - .toRegisterJobDefinition()
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifUser(value: string | string[], operator?: Operator | string): this;
}