UNPKG

iam-floyd

Version:

AWS IAM policy statement generator with fluent interface

1,476 lines 221 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Cloudfront = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [cloudfront](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Cloudfront extends shared_1.PolicyStatement { /** * Statement provider for service [cloudfront](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudfront.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ constructor(sid) { super(sid); this.servicePrefix = 'cloudfront'; this.accessLevelList = { 'Permissions management': [ 'AllowVendedLogDeliveryForResource' ], Write: [ 'AssociateAlias', 'AssociateDistributionTenantWebACL', 'AssociateDistributionWebACL', 'CopyDistribution', 'CreateAnycastIpList', 'CreateCachePolicy', 'CreateCloudFrontOriginAccessIdentity', 'CreateConnectionFunction', 'CreateConnectionGroup', 'CreateContinuousDeploymentPolicy', 'CreateDistribution', 'CreateDistributionTenant', 'CreateFieldLevelEncryptionConfig', 'CreateFieldLevelEncryptionProfile', 'CreateFunction', 'CreateInvalidation', 'CreateInvalidationForDistributionTenant', 'CreateKeyGroup', 'CreateKeyValueStore', 'CreateMonitoringSubscription', 'CreateOriginAccessControl', 'CreateOriginRequestPolicy', 'CreatePublicKey', 'CreateRealtimeLogConfig', 'CreateResponseHeadersPolicy', 'CreateSavingsPlan', 'CreateStreamingDistribution', 'CreateStreamingDistributionWithTags', 'CreateTrustStore', 'CreateVpcOrigin', 'DeleteAnycastIpList', 'DeleteCachePolicy', 'DeleteCloudFrontOriginAccessIdentity', 'DeleteConnectionFunction', 'DeleteConnectionGroup', 'DeleteContinuousDeploymentPolicy', 'DeleteDistribution', 'DeleteDistributionTenant', 'DeleteFieldLevelEncryptionConfig', 'DeleteFieldLevelEncryptionProfile', 'DeleteFunction', 'DeleteKeyGroup', 'DeleteKeyValueStore', 'DeleteMonitoringSubscription', 'DeleteOriginAccessControl', 'DeleteOriginRequestPolicy', 'DeletePublicKey', 'DeleteRealtimeLogConfig', 'DeleteResourcePolicy', 'DeleteResponseHeadersPolicy', 'DeleteStreamingDistribution', 'DeleteTrustStore', 'DeleteVpcOrigin', 'DisassociateDistributionTenantWebACL', 'DisassociateDistributionWebACL', 'PublishConnectionFunction', 'PublishFunction', 'PutResourcePolicy', 'TestConnectionFunction', 'TestFunction', 'UpdateAnycastIpList', 'UpdateCachePolicy', 'UpdateCloudFrontOriginAccessIdentity', 'UpdateConnectionFunction', 'UpdateConnectionGroup', 'UpdateContinuousDeploymentPolicy', 'UpdateDistribution', 'UpdateDistributionTenant', 'UpdateDistributionWithStagingConfig', 'UpdateDomainAssociation', 'UpdateFieldLevelEncryptionConfig', 'UpdateFieldLevelEncryptionProfile', 'UpdateFunction', 'UpdateKeyGroup', 'UpdateKeyValueStore', 'UpdateOriginAccessControl', 'UpdateOriginRequestPolicy', 'UpdatePublicKey', 'UpdateRealtimeLogConfig', 'UpdateResponseHeadersPolicy', 'UpdateSavingsPlan', 'UpdateStreamingDistribution', 'UpdateTrustStore', 'UpdateVpcOrigin' ], Read: [ 'DescribeConnectionFunction', 'DescribeFunction', 'DescribeKeyValueStore', 'GetAnycastIpList', 'GetCachePolicy', 'GetCachePolicyConfig', 'GetCloudFrontOriginAccessIdentity', 'GetCloudFrontOriginAccessIdentityConfig', 'GetConnectionFunction', 'GetConnectionGroup', 'GetConnectionGroupByRoutingEndpoint', 'GetContinuousDeploymentPolicy', 'GetContinuousDeploymentPolicyConfig', 'GetDistribution', 'GetDistributionConfig', 'GetDistributionTenant', 'GetDistributionTenantByDomain', 'GetFieldLevelEncryption', 'GetFieldLevelEncryptionConfig', 'GetFieldLevelEncryptionProfile', 'GetFieldLevelEncryptionProfileConfig', 'GetFunction', 'GetInvalidation', 'GetInvalidationForDistributionTenant', 'GetKeyGroup', 'GetKeyGroupConfig', 'GetManagedCertificateDetails', 'GetMonitoringSubscription', 'GetOriginAccessControl', 'GetOriginAccessControlConfig', 'GetOriginRequestPolicy', 'GetOriginRequestPolicyConfig', 'GetPublicKey', 'GetPublicKeyConfig', 'GetRealtimeLogConfig', 'GetResourcePolicy', 'GetResponseHeadersPolicy', 'GetResponseHeadersPolicyConfig', 'GetSavingsPlan', 'GetStreamingDistribution', 'GetStreamingDistributionConfig', 'GetTrustStore', 'GetVpcOrigin', 'ListTagsForResource', 'VerifyDnsConfiguration' ], List: [ 'ListAnycastIpLists', 'ListCachePolicies', 'ListCloudFrontOriginAccessIdentities', 'ListConflictingAliases', 'ListConnectionFunctions', 'ListConnectionGroups', 'ListContinuousDeploymentPolicies', 'ListDistributionTenants', 'ListDistributionTenantsByCustomization', 'ListDistributions', 'ListDistributionsByAnycastIpListId', 'ListDistributionsByCachePolicyId', 'ListDistributionsByConnectionFunction', 'ListDistributionsByConnectionMode', 'ListDistributionsByKeyGroup', 'ListDistributionsByLambdaFunction', 'ListDistributionsByOriginRequestPolicyId', 'ListDistributionsByRealtimeLogConfig', 'ListDistributionsByResponseHeadersPolicyId', 'ListDistributionsByTrustStore', 'ListDistributionsByVpcOriginId', 'ListDistributionsByWebACLId', 'ListDomainConflicts', 'ListFieldLevelEncryptionConfigs', 'ListFieldLevelEncryptionProfiles', 'ListFunctions', 'ListInvalidations', 'ListInvalidationsForDistributionTenant', 'ListKeyGroups', 'ListKeyValueStores', 'ListOriginAccessControls', 'ListOriginRequestPolicies', 'ListPublicKeys', 'ListRateCards', 'ListRealtimeLogConfigs', 'ListResponseHeadersPolicies', 'ListSavingsPlans', 'ListStreamingDistributions', 'ListTrustStores', 'ListUsages', 'ListVpcOrigins' ], Tagging: [ 'TagResource', 'UntagResource' ] }; } /** * Grants permission to configure vended log delivery for a distribution * * Access Level: Permissions management * * https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html#AWS-logs-infrastructure-V2-service-specific */ toAllowVendedLogDeliveryForResource() { return this.to('AllowVendedLogDeliveryForResource'); } /** * Grants permission to associate an alias to a CloudFront distribution * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_AssociateAlias.html */ toAssociateAlias() { return this.to('AssociateAlias'); } /** * Grants permission to associate a distribution tenant with an AWS WAF web ACL * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_AssociateDistributionTenantWebACL.html */ toAssociateDistributionTenantWebACL() { return this.to('AssociateDistributionTenantWebACL'); } /** * Grants permission to associate a distribution with an AWS WAF web ACL * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_AssociateDistributionWebACL.html */ toAssociateDistributionWebACL() { return this.to('AssociateDistributionWebACL'); } /** * Grants permission to copy an existing distribution and create a new web distribution * * Access Level: Write * * Dependent actions: * - cloudfront:CopyDistribution * - cloudfront:CreateDistribution * - cloudfront:GetDistribution * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CopyDistribution.html */ toCopyDistribution() { return this.to('CopyDistribution'); } /** * Grants permission to create an Anycast static IP list * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateAnycastIpList.html */ toCreateAnycastIpList() { return this.to('CreateAnycastIpList'); } /** * Grants permission to add a new cache policy to CloudFront * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateCachePolicy.html */ toCreateCachePolicy() { return this.to('CreateCachePolicy'); } /** * Grants permission to create a new CloudFront origin access identity * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateCloudFrontOriginAccessIdentity.html */ toCreateCloudFrontOriginAccessIdentity() { return this.to('CreateCloudFrontOriginAccessIdentity'); } /** * Grants permission to create a connection function * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateConnectionFunction.html */ toCreateConnectionFunction() { return this.to('CreateConnectionFunction'); } /** * Grants permission to create a connection group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateConnectionGroup.html */ toCreateConnectionGroup() { return this.to('CreateConnectionGroup'); } /** * Grants permission to add a new continuous-deployment policy to CloudFront * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateContinuousDeploymentPolicy.html */ toCreateContinuousDeploymentPolicy() { return this.to('CreateContinuousDeploymentPolicy'); } /** * Grants permission to create a new web distribution * * Access Level: Write * * Dependent actions: * - cloudfront:CreateConnectionGroup * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateDistribution.html */ toCreateDistribution() { return this.to('CreateDistribution'); } /** * Grants permission to create a distribution tenant * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateDistributionTenant.html */ toCreateDistributionTenant() { return this.to('CreateDistributionTenant'); } /** * Grants permission to create a new field-level encryption configuration * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateFieldLevelEncryptionConfig.html */ toCreateFieldLevelEncryptionConfig() { return this.to('CreateFieldLevelEncryptionConfig'); } /** * Grants permission to create a field-level encryption profile * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateFieldLevelEncryptionProfile.html */ toCreateFieldLevelEncryptionProfile() { return this.to('CreateFieldLevelEncryptionProfile'); } /** * Grants permission to create a CloudFront function * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateFunction.html */ toCreateFunction() { return this.to('CreateFunction'); } /** * Grants permission to create a new invalidation batch request * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateInvalidation.html */ toCreateInvalidation() { return this.to('CreateInvalidation'); } /** * Grants permission to create an invalidation for a distribution tenant * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateInvalidationForDistributionTenant.html */ toCreateInvalidationForDistributionTenant() { return this.to('CreateInvalidationForDistributionTenant'); } /** * Grants permission to add a new key group to CloudFront * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateKeyGroup.html */ toCreateKeyGroup() { return this.to('CreateKeyGroup'); } /** * Grants permission to create a CloudFront KeyValueStore * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateKeyValueStore.html */ toCreateKeyValueStore() { return this.to('CreateKeyValueStore'); } /** * Grants permission to enable additional CloudWatch metrics for the specified CloudFront distribution. The additional metrics incur an additional cost * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateMonitoringSubscription.html */ toCreateMonitoringSubscription() { return this.to('CreateMonitoringSubscription'); } /** * Grants permission to create a new origin access control * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateOriginAccessControl.html */ toCreateOriginAccessControl() { return this.to('CreateOriginAccessControl'); } /** * Grants permission to add a new origin request policy to CloudFront * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateOriginRequestPolicy.html */ toCreateOriginRequestPolicy() { return this.to('CreateOriginRequestPolicy'); } /** * Grants permission to add a new public key to CloudFront * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreatePublicKey.html */ toCreatePublicKey() { return this.to('CreatePublicKey'); } /** * Grants permission to create a real-time log configuration * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateRealtimeLogConfig.html */ toCreateRealtimeLogConfig() { return this.to('CreateRealtimeLogConfig'); } /** * Grants permission to add a new response headers policy to CloudFront * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateResponseHeadersPolicy.html */ toCreateResponseHeadersPolicy() { return this.to('CreateResponseHeadersPolicy'); } /** * Grants permission to create a new savings plan * * Access Level: Write * * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html */ toCreateSavingsPlan() { return this.to('CreateSavingsPlan'); } /** * Grants permission to create a new RTMP distribution * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateStreamingDistribution.html */ toCreateStreamingDistribution() { return this.to('CreateStreamingDistribution'); } /** * Grants permission to create a new RTMP distribution with tags * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateStreamingDistributionWithTags.html */ toCreateStreamingDistributionWithTags() { return this.to('CreateStreamingDistributionWithTags'); } /** * Grants permission to create a trust store * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateTrustStore.html */ toCreateTrustStore() { return this.to('CreateTrustStore'); } /** * Grants permission to create a VPC origin * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateVpcOrigin.html */ toCreateVpcOrigin() { return this.to('CreateVpcOrigin'); } /** * Grants permission to delete an Anycast static IP list * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteAnycastIpList.html */ toDeleteAnycastIpList() { return this.to('DeleteAnycastIpList'); } /** * Grants permission to delete a cache policy * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteCachePolicy.html */ toDeleteCachePolicy() { return this.to('DeleteCachePolicy'); } /** * Grants permission to delete a CloudFront origin access identity * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteCloudFrontOriginAccessIdentity.html */ toDeleteCloudFrontOriginAccessIdentity() { return this.to('DeleteCloudFrontOriginAccessIdentity'); } /** * Grants permission to delete a connection function * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteConnectionFunction.html */ toDeleteConnectionFunction() { return this.to('DeleteConnectionFunction'); } /** * Grants permission to delete a connection group * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteConnectionGroup.html */ toDeleteConnectionGroup() { return this.to('DeleteConnectionGroup'); } /** * Grants permission to delete a continuous-deployment policy * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteContinuousDeploymentPolicy.html */ toDeleteContinuousDeploymentPolicy() { return this.to('DeleteContinuousDeploymentPolicy'); } /** * Grants permission to delete a web distribution * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteDistribution.html */ toDeleteDistribution() { return this.to('DeleteDistribution'); } /** * Grants permission to delete a distribution tenant * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteDistributionTenant.html */ toDeleteDistributionTenant() { return this.to('DeleteDistributionTenant'); } /** * Grants permission to delete a field-level encryption configuration * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteFieldLevelEncryptionConfig.html */ toDeleteFieldLevelEncryptionConfig() { return this.to('DeleteFieldLevelEncryptionConfig'); } /** * Grants permission to delete a field-level encryption profile * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteFieldLevelEncryptionProfile.html */ toDeleteFieldLevelEncryptionProfile() { return this.to('DeleteFieldLevelEncryptionProfile'); } /** * Grants permission to delete a CloudFront function * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteFunction.html */ toDeleteFunction() { return this.to('DeleteFunction'); } /** * Grants permission to delete a key group * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteKeyGroup.html */ toDeleteKeyGroup() { return this.to('DeleteKeyGroup'); } /** * Grants permission to delete a CloudFront KeyValueStore * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteKeyValueStore.html */ toDeleteKeyValueStore() { return this.to('DeleteKeyValueStore'); } /** * Grants permission to disable additional CloudWatch metrics for the specified CloudFront distribution * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteMonitoringSubscription.html */ toDeleteMonitoringSubscription() { return this.to('DeleteMonitoringSubscription'); } /** * Grants permission to delete an origin access control * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteOriginAccessControl.html */ toDeleteOriginAccessControl() { return this.to('DeleteOriginAccessControl'); } /** * Grants permission to delete an origin request policy * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteOriginRequestPolicy.html */ toDeleteOriginRequestPolicy() { return this.to('DeleteOriginRequestPolicy'); } /** * Grants permission to delete a public key from CloudFront * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeletePublicKey.html */ toDeletePublicKey() { return this.to('DeletePublicKey'); } /** * Grants permission to delete a real-time log configuration * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteRealtimeLogConfig.html */ toDeleteRealtimeLogConfig() { return this.to('DeleteRealtimeLogConfig'); } /** * Grants permission to delete a resource's policy document * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteResourcePolicy.html */ toDeleteResourcePolicy() { return this.to('DeleteResourcePolicy'); } /** * Grants permission to delete a response headers policy * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteResponseHeadersPolicy.html */ toDeleteResponseHeadersPolicy() { return this.to('DeleteResponseHeadersPolicy'); } /** * Grants permission to delete an RTMP distribution * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteStreamingDistribution.html */ toDeleteStreamingDistribution() { return this.to('DeleteStreamingDistribution'); } /** * Grants permission to delete a trust store * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteTrustStore.html */ toDeleteTrustStore() { return this.to('DeleteTrustStore'); } /** * Grants permission to delete a VPC origin * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteVpcOrigin.html */ toDeleteVpcOrigin() { return this.to('DeleteVpcOrigin'); } /** * Grants permission to get a connection function summary * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DescribeConnectionFunction.html */ toDescribeConnectionFunction() { return this.to('DescribeConnectionFunction'); } /** * Grants permission to get a CloudFront function summary * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DescribeFunction.html */ toDescribeFunction() { return this.to('DescribeFunction'); } /** * Grants permission to get a CloudFront KeyValueStore summary * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DescribeKeyValueStore.html */ toDescribeKeyValueStore() { return this.to('DescribeKeyValueStore'); } /** * Grants permission to disassociate a distribution tenant from an AWS WAF web ACL * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DisassociateDistributionTenantWebACL.html */ toDisassociateDistributionTenantWebACL() { return this.to('DisassociateDistributionTenantWebACL'); } /** * Grants permission to disassociate a distribution from an AWS WAF web ACL * * Access Level: Write * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DisassociateDistributionWebACL.html */ toDisassociateDistributionWebACL() { return this.to('DisassociateDistributionWebACL'); } /** * Grants permission to get an Anycast static IP list * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetAnycastIpList.html */ toGetAnycastIpList() { return this.to('GetAnycastIpList'); } /** * Grants permission to get the cache policy * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetCachePolicy.html */ toGetCachePolicy() { return this.to('GetCachePolicy'); } /** * Grants permission to get the cache policy configuration * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetCachePolicyConfig.html */ toGetCachePolicyConfig() { return this.to('GetCachePolicyConfig'); } /** * Grants permission to get the information about a CloudFront origin access identity * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetCloudFrontOriginAccessIdentity.html */ toGetCloudFrontOriginAccessIdentity() { return this.to('GetCloudFrontOriginAccessIdentity'); } /** * Grants permission to get the configuration information about a Cloudfront origin access identity * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetCloudFrontOriginAccessIdentityConfig.html */ toGetCloudFrontOriginAccessIdentityConfig() { return this.to('GetCloudFrontOriginAccessIdentityConfig'); } /** * Grants permission to get a connection function's code * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetConnectionFunction.html */ toGetConnectionFunction() { return this.to('GetConnectionFunction'); } /** * Grants permission to get information about a connection group * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetConnectionGroup.html */ toGetConnectionGroup() { return this.to('GetConnectionGroup'); } /** * Grants permission to get information about a connection group by the specified routing endpoint * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetConnectionGroupByRoutingEndpoint.html */ toGetConnectionGroupByRoutingEndpoint() { return this.to('GetConnectionGroupByRoutingEndpoint'); } /** * Grants permission to get the continuous-deployment policy * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetContinuousDeploymentPolicy.html */ toGetContinuousDeploymentPolicy() { return this.to('GetContinuousDeploymentPolicy'); } /** * Grants permission to get the continuous-deployment policy configuration * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetContinuousDeploymentPolicyConfig.html */ toGetContinuousDeploymentPolicyConfig() { return this.to('GetContinuousDeploymentPolicyConfig'); } /** * Grants permission to get the information about a web distribution * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetDistribution.html */ toGetDistribution() { return this.to('GetDistribution'); } /** * Grants permission to get the configuration information about a distribution * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetDistributionConfig.html */ toGetDistributionConfig() { return this.to('GetDistributionConfig'); } /** * Grants permission to get information about a distribution tenant * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetDistributionTenant.html */ toGetDistributionTenant() { return this.to('GetDistributionTenant'); } /** * Grants permission to get information about a distribution tenant by the associated domain * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetDistributionTenantByDomain.html */ toGetDistributionTenantByDomain() { return this.to('GetDistributionTenantByDomain'); } /** * Grants permission to get the field-level encryption configuration information * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFieldLevelEncryption.html */ toGetFieldLevelEncryption() { return this.to('GetFieldLevelEncryption'); } /** * Grants permission to get the field-level encryption configuration information * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFieldLevelEncryptionConfig.html */ toGetFieldLevelEncryptionConfig() { return this.to('GetFieldLevelEncryptionConfig'); } /** * Grants permission to get the field-level encryption configuration information * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFieldLevelEncryptionProfile.html */ toGetFieldLevelEncryptionProfile() { return this.to('GetFieldLevelEncryptionProfile'); } /** * Grants permission to get the field-level encryption profile configuration information * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFieldLevelEncryptionProfileConfig.html */ toGetFieldLevelEncryptionProfileConfig() { return this.to('GetFieldLevelEncryptionProfileConfig'); } /** * Grants permission to get a CloudFront function's code * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetFunction.html */ toGetFunction() { return this.to('GetFunction'); } /** * Grants permission to get the information about an invalidation * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetInvalidation.html */ toGetInvalidation() { return this.to('GetInvalidation'); } /** * Grants permission to get information about an invalidation for a distribution tenant * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetInvalidationForDistributionTenant.html */ toGetInvalidationForDistributionTenant() { return this.to('GetInvalidationForDistributionTenant'); } /** * Grants permission to get a key group * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetKeyGroup.html */ toGetKeyGroup() { return this.to('GetKeyGroup'); } /** * Grants permission to get a key group configuration * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetKeyGroupConfig.html */ toGetKeyGroupConfig() { return this.to('GetKeyGroupConfig'); } /** * Grants permission to get details about a CloudFront managed certificate * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetManagedCertificateDetails.html */ toGetManagedCertificateDetails() { return this.to('GetManagedCertificateDetails'); } /** * Grants permission to get information about whether additional CloudWatch metrics are enabled for the specified CloudFront distribution * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetMonitoringSubscription.html */ toGetMonitoringSubscription() { return this.to('GetMonitoringSubscription'); } /** * Grants permission to get the origin access control * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginAccessControl.html */ toGetOriginAccessControl() { return this.to('GetOriginAccessControl'); } /** * Grants permission to get the origin access control configuration * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginAccessControlConfig.html */ toGetOriginAccessControlConfig() { return this.to('GetOriginAccessControlConfig'); } /** * Grants permission to get the origin request policy * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginRequestPolicy.html */ toGetOriginRequestPolicy() { return this.to('GetOriginRequestPolicy'); } /** * Grants permission to get the origin request policy configuration * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginRequestPolicyConfig.html */ toGetOriginRequestPolicyConfig() { return this.to('GetOriginRequestPolicyConfig'); } /** * Grants permission to get the public key information * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetPublicKey.html */ toGetPublicKey() { return this.to('GetPublicKey'); } /** * Grants permission to get the public key configuration information * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetPublicKeyConfig.html */ toGetPublicKeyConfig() { return this.to('GetPublicKeyConfig'); } /** * Grants permission to get a real-time log configuration * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetRealtimeLogConfig.html */ toGetRealtimeLogConfig() { return this.to('GetRealtimeLogConfig'); } /** * Grants permission to get the information about a resource's policy document * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetResourcePolicy.html */ toGetResourcePolicy() { return this.to('GetResourcePolicy'); } /** * Grants permission to get the response headers policy * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetResponseHeadersPolicy.html */ toGetResponseHeadersPolicy() { return this.to('GetResponseHeadersPolicy'); } /** * Grants permission to get the response headers policy configuration * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetResponseHeadersPolicyConfig.html */ toGetResponseHeadersPolicyConfig() { return this.to('GetResponseHeadersPolicyConfig'); } /** * Grants permission to get a savings plan * * Access Level: Read * * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html */ toGetSavingsPlan() { return this.to('GetSavingsPlan'); } /** * Grants permission to get the information about an RTMP distribution * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetStreamingDistribution.html */ toGetStreamingDistribution() { return this.to('GetStreamingDistribution'); } /** * Grants permission to get the configuration information about a streaming distribution * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetStreamingDistributionConfig.html */ toGetStreamingDistributionConfig() { return this.to('GetStreamingDistributionConfig'); } /** * Grants permission to get information about a trust store * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetTrustStore.html */ toGetTrustStore() { return this.to('GetTrustStore'); } /** * Grants permission to get the information about a VPC origin * * Access Level: Read * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetVpcOrigin.html */ toGetVpcOrigin() { return this.to('GetVpcOrigin'); } /** * Grants permission to list your Anycast static IP lists * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListAnycastIpLists.html */ toListAnycastIpLists() { return this.to('ListAnycastIpLists'); } /** * Grants permission to list all cache policies that have been created in CloudFront for this account * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListCachePolicies.html */ toListCachePolicies() { return this.to('ListCachePolicies'); } /** * Grants permission to list your CloudFront origin access identities * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListCloudFrontOriginAccessIdentities.html */ toListCloudFrontOriginAccessIdentities() { return this.to('ListCloudFrontOriginAccessIdentities'); } /** * Grants permission to list all aliases that conflict with the given alias in CloudFront * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListConflictingAliases.html */ toListConflictingAliases() { return this.to('ListConflictingAliases'); } /** * Grants permission to list the connection functions in your AWS account * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListConnectionFunctions.html */ toListConnectionFunctions() { return this.to('ListConnectionFunctions'); } /** * Grants permission to list the connection groups in your AWS account * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListConnectionGroups.html */ toListConnectionGroups() { return this.to('ListConnectionGroups'); } /** * Grants permission to list all continuous-deployment policies in the account * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListContinuousDeploymentPolicies.html */ toListContinuousDeploymentPolicies() { return this.to('ListContinuousDeploymentPolicies'); } /** * Grants permission to list the distribution tenants in your AWS account * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionTenants.html */ toListDistributionTenants() { return this.to('ListDistributionTenants'); } /** * Grants permission to list the distribution tenants by the customization that you specify * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionTenantsByCustomization.html */ toListDistributionTenantsByCustomization() { return this.to('ListDistributionTenantsByCustomization'); } /** * Grants permission to list the distributions associated with your AWS account * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributions.html */ toListDistributions() { return this.to('ListDistributions'); } /** * Grants permission to list the distributions in your account that are associated with the specified AnycastIpListId * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByAnycastIpListId.html */ toListDistributionsByAnycastIpListId() { return this.to('ListDistributionsByAnycastIpListId'); } /** * Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByCachePolicyId.html */ toListDistributionsByCachePolicyId() { return this.to('ListDistributionsByCachePolicyId'); } /** * Grants permission to list summaries for distributions associated with the specified connection function * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByConnectionFunction.html */ toListDistributionsByConnectionFunction() { return this.to('ListDistributionsByConnectionFunction'); } /** * Grants permission to list the distributions by the specified connection mode * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByConnectionMode.html */ toListDistributionsByConnectionMode() { return this.to('ListDistributionsByConnectionMode'); } /** * Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified key group * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByKeyGroup.html */ toListDistributionsByKeyGroup() { return this.to('ListDistributionsByKeyGroup'); } /** * Grants permission to list the distributions associated a Lambda function * * Access Level: List * * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html */ toListDistributionsByLambdaFunction() { return this.to('ListDistributionsByLambdaFunction'); } /** * Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified origin request policy * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByOriginRequestPolicyId.html */ toListDistributionsByOriginRequestPolicyId() { return this.to('ListDistributionsByOriginRequestPolicyId'); } /** * Grants permission to get a list of distributions that have a cache behavior that's associated with the specified real-time log configuration * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByRealtimeLogConfig.html */ toListDistributionsByRealtimeLogConfig() { return this.to('ListDistributionsByRealtimeLogConfig'); } /** * Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified response headers policy * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByResponseHeadersPolicyId.html */ toListDistributionsByResponseHeadersPolicyId() { return this.to('ListDistributionsByResponseHeadersPolicyId'); } /** * Grants permission to list summaries for distributions associated with the specified trust store * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByTrustStore.html */ toListDistributionsByTrustStore() { return this.to('ListDistributionsByTrustStore'); } /** * Grants permission to list IDs for distributions associated with the specified VPC origin * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByVpcOriginId.html */ toListDistributionsByVpcOriginId() { return this.to('ListDistributionsByVpcOriginId'); } /** * Grants permission to list the distributions associated with your AWS account with given AWS WAF web ACL * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByWebACLId.html */ toListDistributionsByWebACLId() { return this.to('ListDistributionsByWebACLId'); } /** * Grants permission to list domain conflicts for a specified domain * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDomainConflicts.html */ toListDomainConflicts() { return this.to('ListDomainConflicts'); } /** * Grants permission to list all field-level encryption configurations that have been created in CloudFront for this account * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListFieldLevelEncryptionConfigs.html */ toListFieldLevelEncryptionConfigs() { return this.to('ListFieldLevelEncryptionConfigs'); } /** * Grants permission to list all field-level encryption profiles that have been created in CloudFront for this account * * Access Level: List * * https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListF