UNPKG

iam-floyd

Version:

AWS IAM policy statement generator with fluent interface

470 lines (469 loc) 15.8 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; /** * Statement provider for service [aidevops](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdevopsagentservice.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Aidevops extends PolicyStatement { servicePrefix: string; /** * Statement provider for service [aidevops](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdevopsagentservice.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ constructor(sid?: string); /** * Grants permission to associate service * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toAssociateService(): this; /** * Grants permission to create agentspace * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toCreateAgentSpace(): this; /** * Grants permission to create a new backlog task * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toCreateBacklogTask(): this; /** * Grants permission to create a new knowledge item * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toCreateKnowledgeItem(): this; /** * Grants permission to generate secure one-time session for initiating off-console Application login * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toCreateOneTimeLoginSession(): this; /** * Grants permission to delete agentspace * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toDeleteAgentSpace(): this; /** * Grants permission to delete a knowledge item * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toDeleteKnowledgeItem(): this; /** * Grants permission to deregister a service * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toDeregisterService(): this; /** * Grants permission to describe a chat for a case * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toDescribeSupportLevel(): this; /** * Grants permission to disable the Operator App access to the given AgentSpace * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toDisableOperatorApp(): this; /** * Grants permission to disassociate service * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toDisassociateService(): this; /** * Grants permission to discover topology information * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toDiscoverTopology(): this; /** * Grants permission to enable the Operator App to access the given AgentSpace * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toEnableOperatorApp(): this; /** * Grants permission to end a chat for a case * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toEndChatForCase(): this; /** * Grants permission to get account usage * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toGetAccountUsage(): this; /** * Grants permission to get agentspace * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toGetAgentSpace(): this; /** * Grants permission to get association * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toGetAssociation(): this; /** * Grants permission to get a backlog task * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toGetBacklogTask(): this; /** * Grants permission to get a knowledge item * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toGetKnowledgeItem(): this; /** * Grants permission to enable operator auth config for any enabled auth flow * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toGetOperatorAppTeams(): this; /** * Grants permission to get a recommendation * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toGetRecommendation(): this; /** * Grants permission to get services * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toGetService(): this; /** * Grants permission to handle OAuth callback from external service * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toHandleServiceRegistrationCallback(): this; /** * Grants permission to initiate a chat for a case * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toInitiateChatForCase(): this; /** * Grants permission to initiate OAuth flow * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toInitiateServiceRegistration(): this; /** * Grants permission to list agentspace * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListAgentSpaces(): this; /** * Grants permission to list associations * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListAssociations(): this; /** * Grants permission to list backlog tasks * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListBacklogTasks(): this; /** * Grants permission to list executions * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListExecutions(): this; /** * Grants permission to list goals * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListGoals(): this; /** * Grants permission to list journal records * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListJournalRecords(): this; /** * Grants permission to list knowledge items * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListKnowledgeItems(): this; /** * Grants permission to list pending messages * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListPendingMessages(): this; /** * Grants permission to list recommendations * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListRecommendations(): this; /** * Grants permission to list services * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListServices(): this; /** * Grants permission to list webhooks for association * * Access Level: List * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toListWebhooks(): this; /** * Grants permission to register specific service * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toRegisterService(): this; /** * Grants permission to look up a registered service accessible resources * * Access Level: Read * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toSearchServiceAccessibleResource(): this; /** * Grants permission to invoke an agent * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toSendChatMessage(): this; /** * Grants permission to update agentspace * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toUpdateAgentSpace(): this; /** * Grants permission to update association * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toUpdateAssociation(): this; /** * Grants permission to update a task * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toUpdateBacklogTask(): this; /** * Grants permission to update a knowledge item * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toUpdateKnowledgeItem(): this; /** * Grants permission to update the list of teams that the Operator App is enabled for * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toUpdateOperatorAppTeams(): this; /** * Grants permission to update a recommendation * * Access Level: Write * * https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html */ toUpdateRecommendation(): this; protected accessLevelList: AccessLevelList; /** * Adds a resource of type AgentSpaceResource to the statement * * https://docs.aws.amazon.com/devopsagent/latest/userguide/ * * @param agentSpaceId - Identifier for the agentSpaceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAgentSpaceResourceAgentSpaceId() */ onAgentSpaceResource(agentSpaceId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type AssociationResource to the statement * * https://docs.aws.amazon.com/devopsagent/latest/userguide/ * * @param agentSpaceId - Identifier for the agentSpaceId. * @param associationId - Identifier for the associationId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifAssociationResourceAgentSpaceId() * - .ifAssociationResourceAssociationId() */ onAssociationResource(agentSpaceId: string, associationId: string, account?: string, region?: string, partition?: string): this; /** * Adds a resource of type ServiceResource to the statement * * https://docs.aws.amazon.com/devopsagent/latest/userguide/ * * @param serviceId - Identifier for the serviceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. * * Possible conditions: * - .ifServiceResourceServiceId() */ onServiceResource(serviceId: string, account?: string, region?: string, partition?: string): this; /** * Filters access by unique identifier for an AgentSpace * * https://docs.aws.amazon.com/devopsagent/latest/userguide/ * * Applies to resource types: * - AgentSpaceResource * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAgentSpaceResourceAgentSpaceId(value: string | string[], operator?: Operator | string): this; /** * Filters access by unique identifier for an AgentSpace * * https://docs.aws.amazon.com/devopsagent/latest/userguide/ * * Applies to resource types: * - AssociationResource * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAssociationResourceAgentSpaceId(value: string | string[], operator?: Operator | string): this; /** * Filters access by unique identifier for a service association within an AgentSpace * * https://docs.aws.amazon.com/devopsagent/latest/userguide/ * * Applies to resource types: * - AssociationResource * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifAssociationResourceAssociationId(value: string | string[], operator?: Operator | string): this; /** * Filters access by unique identifier for a registered service * * https://docs.aws.amazon.com/devopsagent/latest/userguide/ * * Applies to resource types: * - ServiceResource * * @param value The value(s) to check * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike` */ ifServiceResourceServiceId(value: string | string[], operator?: Operator | string): this; }