UNPKG

iam-floyd

Version:

AWS IAM policy statement generator with fluent interface

517 lines (516 loc) 17.7 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement } from '../../shared'; /** * Statement provider for service [workdocs](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkdocs.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Workdocs extends PolicyStatement { servicePrefix: string; /** * Statement provider for service [workdocs](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkdocs.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ constructor(sid?: string); /** * Grants permission to abort the upload of the specified document version that was previously initiated by InitiateDocumentVersionUpload * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_AbortDocumentVersionUpload.html */ toAbortDocumentVersionUpload(): this; /** * Grants permission to activate the specified user. Only active users can access Amazon WorkDocs * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_ActivateUser.html */ toActivateUser(): this; /** * Grants permission to add principals that are allowed to call notification subscription APIs for a given WorkDocs site * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html */ toAddNotificationPermissions(): this; /** * Grants permission to create a set of permissions for the specified folder or document * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_AddResourcePermissions.html */ toAddResourcePermissions(): this; /** * Grants permission to add a user to a group * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/manage_set_admin.html */ toAddUserToGroup(): this; /** * Grants permission to check an alias * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/adminguide/cloud_quick_start.html */ toCheckAlias(): this; /** * Grants permission to add a new comment to the specified document version * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateComment.html */ toCreateComment(): this; /** * Grants permission to add one or more custom properties to the specified resource * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateCustomMetadata.html */ toCreateCustomMetadata(): this; /** * Grants permission to create a folder with the specified name and parent folder * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateFolder.html */ toCreateFolder(): this; /** * Grants permission to create an instance * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/getting_started.html */ toCreateInstance(): this; /** * Grants permission to add labels to the given resource * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateLabels.html */ toCreateLabels(): this; /** * Grants permission to configure WorkDocs to use Amazon SNS notifications * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateNotificationSubscription.html */ toCreateNotificationSubscription(): this; /** * Grants permission to create a user in a Simple AD or Microsoft AD directory * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateUser.html */ toCreateUser(): this; /** * Grants permission to deactivate the specified user, which revokes the user's access to Amazon WorkDocs * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeactivateUser.html */ toDeactivateUser(): this; /** * Grants permission to delete the specified comment from the document version * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteComment.html */ toDeleteComment(): this; /** * Grants permission to delete custom metadata from the specified resource * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteCustomMetadata.html */ toDeleteCustomMetadata(): this; /** * Grants permission to permanently delete the specified document and its associated metadata * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteDocument.html */ toDeleteDocument(): this; /** * Grants permission to delete versions of a specified document * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteDocumentVersion.html */ toDeleteDocumentVersion(): this; /** * Grants permission to permanently delete the specified folder and its contents * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteFolder.html */ toDeleteFolder(): this; /** * Grants permission to delete the contents of the specified folder * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteFolderContents.html */ toDeleteFolderContents(): this; /** * Grants permission to delete an instance * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-sites.html#delete_site */ toDeleteInstance(): this; /** * Grants permission to delete one or more labels from a resource * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteLabels.html */ toDeleteLabels(): this; /** * Grants permission to delete principals that are allowed to call notification subscription APIs for a given WorkDocs site * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html */ toDeleteNotificationPermissions(): this; /** * Grants permission to delete the specified subscription from the specified organization * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteNotificationSubscription.html */ toDeleteNotificationSubscription(): this; /** * Grants permission to delete the specified user from a Simple AD or Microsoft AD directory * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteUser.html */ toDeleteUser(): this; /** * Grants permission to deregister a directory * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-sites.html#delete_site */ toDeregisterDirectory(): this; /** * Grants permission to fetch user activities in a specified time period * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeActivities.html */ toDescribeActivities(): this; /** * Grants permission to describe available directories * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/adminguide/getting_started.html */ toDescribeAvailableDirectories(): this; /** * Grants permission to list all the comments for the specified document version * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeComments.html */ toDescribeComments(): this; /** * Grants permission to retrieve the document versions for the specified document * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeDocumentVersions.html */ toDescribeDocumentVersions(): this; /** * Grants permission to describe the contents of the specified folder, including its documents and sub-folders * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeFolderContents.html */ toDescribeFolderContents(): this; /** * Grants permission to describe the user groups * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeGroups.html */ toDescribeGroups(): this; /** * Grants permission to describe the export history for an instance * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/adminguide/migration-tool.html */ toDescribeInstanceExports(): this; /** * Grants permission to describe instances * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/adminguide/getting_started.html */ toDescribeInstances(): this; /** * Grants permission to describe principals that are allowed to call notification subscription APIs for a given WorkDocs site * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html */ toDescribeNotificationPermissions(): this; /** * Grants permission to list the specified notification subscriptions * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeNotificationSubscriptions.html */ toDescribeNotificationSubscriptions(): this; /** * Grants permission to view a description of a specified resource's permissions * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeResourcePermissions.html */ toDescribeResourcePermissions(): this; /** * Grants permission to describe the root folders * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeRootFolders.html */ toDescribeRootFolders(): this; /** * Grants permission to view a description of the specified users. You can describe all users or filter the results (for example, by status or organization) * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeUsers.html */ toDescribeUsers(): this; /** * Grants permission to download a specified document version * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetDocumentVersion.html */ toDownloadDocumentVersion(): this; /** * Grants permission to retrieve the details of the current user * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetCurrentUser.html */ toGetCurrentUser(): this; /** * Grants permission to retrieve the specified document object * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetDocument.html */ toGetDocument(): this; /** * Grants permission to retrieve the path information (the hierarchy from the root folder) for the requested document * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetDocumentPath.html */ toGetDocumentPath(): this; /** * Grants permission to retrieve version metadata for the specified document * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetDocumentVersion.html */ toGetDocumentVersion(): this; /** * Grants permission to retrieve the metadata of the specified folder * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetFolder.html */ toGetFolder(): this; /** * Grants permission to retrieve the path information (the hierarchy from the root folder) for the specified folder * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetFolderPath.html */ toGetFolderPath(): this; /** * Grants permission to retrieve details for the specified group * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_Operations.html */ toGetGroup(): this; /** * Grants permission to get a collection of resources * * Access Level: Read * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetResources.html */ toGetResources(): this; /** * Grants permission to create a new document object and version object * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_InitiateDocumentVersionUpload.html */ toInitiateDocumentVersionUpload(): this; /** * Grants permission to register a directory * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/existing-dir-setup.html */ toRegisterDirectory(): this; /** * Grants permission to remove all the permissions from the specified resource * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_RemoveAllResourcePermissions.html */ toRemoveAllResourcePermissions(): this; /** * Grants permission to remove the permission for the specified principal from the specified resource * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_RemoveResourcePermission.html */ toRemoveResourcePermission(): this; /** * Grants permission to restore versions of a specified document * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_RestoreDocumentVersions.html */ toRestoreDocumentVersions(): this; /** * Grants permission to search metadata and the content of resources * * Access Level: List * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_SearchResources.html */ toSearchResources(): this; /** * Grants permission to start an export for an instance * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/migration-tool.html */ toStartInstanceExport(): this; /** * Grants permission to update the specified attributes of the specified document * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_UpdateDocument.html */ toUpdateDocument(): this; /** * Grants permission to change the status of the document version to ACTIVE * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_UpdateDocumentVersion.html */ toUpdateDocumentVersion(): this; /** * Grants permission to update the specified attributes of the specified folder * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_UpdateFolder.html */ toUpdateFolder(): this; /** * Grants permission to update an instance alias * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/getting_started.html */ toUpdateInstanceAlias(): this; /** * Grants permission to update the specified attributes of the specified user, and grants or revokes administrative privileges to the Amazon WorkDocs site * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/APIReference/API_UpdateUser.html */ toUpdateUser(): this; /** * Grants permission to update the administrative settings for a user * * Access Level: Write * * https://docs.aws.amazon.com/workdocs/latest/adminguide/migration.html */ toUpdateUserAdministrativeSettings(): this; protected accessLevelList: AccessLevelList; /** * Adds a resource of type organization to the statement * * https://docs.aws.amazon.com/workdocs/latest/adminguide/migration-tool.html * * @param resourceId - Identifier for the resourceId. * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account. * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region. * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition. */ onOrganization(resourceId: string, account?: string, region?: string, partition?: string): this; }