iam-floyd
Version:
AWS IAM policy statement generator with fluent interface
470 lines (469 loc) • 15.8 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement, Operator } from '../../shared';
/**
* Statement provider for service [aidevops](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdevopsagentservice.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Aidevops extends PolicyStatement {
servicePrefix: string;
/**
* Statement provider for service [aidevops](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsdevopsagentservice.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
constructor(sid?: string);
/**
* Grants permission to associate service
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toAssociateService(): this;
/**
* Grants permission to create agentspace
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toCreateAgentSpace(): this;
/**
* Grants permission to create a new backlog task
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toCreateBacklogTask(): this;
/**
* Grants permission to create a new knowledge item
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toCreateKnowledgeItem(): this;
/**
* Grants permission to generate secure one-time session for initiating off-console Application login
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toCreateOneTimeLoginSession(): this;
/**
* Grants permission to delete agentspace
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toDeleteAgentSpace(): this;
/**
* Grants permission to delete a knowledge item
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toDeleteKnowledgeItem(): this;
/**
* Grants permission to deregister a service
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toDeregisterService(): this;
/**
* Grants permission to describe a chat for a case
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toDescribeSupportLevel(): this;
/**
* Grants permission to disable the Operator App access to the given AgentSpace
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toDisableOperatorApp(): this;
/**
* Grants permission to disassociate service
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toDisassociateService(): this;
/**
* Grants permission to discover topology information
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toDiscoverTopology(): this;
/**
* Grants permission to enable the Operator App to access the given AgentSpace
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toEnableOperatorApp(): this;
/**
* Grants permission to end a chat for a case
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toEndChatForCase(): this;
/**
* Grants permission to get account usage
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toGetAccountUsage(): this;
/**
* Grants permission to get agentspace
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toGetAgentSpace(): this;
/**
* Grants permission to get association
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toGetAssociation(): this;
/**
* Grants permission to get a backlog task
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toGetBacklogTask(): this;
/**
* Grants permission to get a knowledge item
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toGetKnowledgeItem(): this;
/**
* Grants permission to enable operator auth config for any enabled auth flow
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toGetOperatorAppTeams(): this;
/**
* Grants permission to get a recommendation
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toGetRecommendation(): this;
/**
* Grants permission to get services
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toGetService(): this;
/**
* Grants permission to handle OAuth callback from external service
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toHandleServiceRegistrationCallback(): this;
/**
* Grants permission to initiate a chat for a case
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toInitiateChatForCase(): this;
/**
* Grants permission to initiate OAuth flow
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toInitiateServiceRegistration(): this;
/**
* Grants permission to list agentspace
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListAgentSpaces(): this;
/**
* Grants permission to list associations
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListAssociations(): this;
/**
* Grants permission to list backlog tasks
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListBacklogTasks(): this;
/**
* Grants permission to list executions
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListExecutions(): this;
/**
* Grants permission to list goals
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListGoals(): this;
/**
* Grants permission to list journal records
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListJournalRecords(): this;
/**
* Grants permission to list knowledge items
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListKnowledgeItems(): this;
/**
* Grants permission to list pending messages
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListPendingMessages(): this;
/**
* Grants permission to list recommendations
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListRecommendations(): this;
/**
* Grants permission to list services
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListServices(): this;
/**
* Grants permission to list webhooks for association
*
* Access Level: List
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toListWebhooks(): this;
/**
* Grants permission to register specific service
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toRegisterService(): this;
/**
* Grants permission to look up a registered service accessible resources
*
* Access Level: Read
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toSearchServiceAccessibleResource(): this;
/**
* Grants permission to invoke an agent
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toSendChatMessage(): this;
/**
* Grants permission to update agentspace
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toUpdateAgentSpace(): this;
/**
* Grants permission to update association
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toUpdateAssociation(): this;
/**
* Grants permission to update a task
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toUpdateBacklogTask(): this;
/**
* Grants permission to update a knowledge item
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toUpdateKnowledgeItem(): this;
/**
* Grants permission to update the list of teams that the Operator App is enabled for
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toUpdateOperatorAppTeams(): this;
/**
* Grants permission to update a recommendation
*
* Access Level: Write
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/what-is.html
*/
toUpdateRecommendation(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type AgentSpaceResource to the statement
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/
*
* @param agentSpaceId - Identifier for the agentSpaceId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAgentSpaceResourceAgentSpaceId()
*/
onAgentSpaceResource(agentSpaceId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type AssociationResource to the statement
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/
*
* @param agentSpaceId - Identifier for the agentSpaceId.
* @param associationId - Identifier for the associationId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifAssociationResourceAgentSpaceId()
* - .ifAssociationResourceAssociationId()
*/
onAssociationResource(agentSpaceId: string, associationId: string, account?: string, region?: string, partition?: string): this;
/**
* Adds a resource of type ServiceResource to the statement
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/
*
* @param serviceId - Identifier for the serviceId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*
* Possible conditions:
* - .ifServiceResourceServiceId()
*/
onServiceResource(serviceId: string, account?: string, region?: string, partition?: string): this;
/**
* Filters access by unique identifier for an AgentSpace
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/
*
* Applies to resource types:
* - AgentSpaceResource
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAgentSpaceResourceAgentSpaceId(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by unique identifier for an AgentSpace
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/
*
* Applies to resource types:
* - AssociationResource
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAssociationResourceAgentSpaceId(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by unique identifier for a service association within an AgentSpace
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/
*
* Applies to resource types:
* - AssociationResource
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifAssociationResourceAssociationId(value: string | string[], operator?: Operator | string): this;
/**
* Filters access by unique identifier for a registered service
*
* https://docs.aws.amazon.com/devopsagent/latest/userguide/
*
* Applies to resource types:
* - ServiceResource
*
* @param value The value(s) to check
* @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
*/
ifServiceResourceServiceId(value: string | string[], operator?: Operator | string): this;
}