iam-floyd
Version:
AWS IAM policy statement generator with fluent interface
517 lines (516 loc) • 17.7 kB
TypeScript
import { AccessLevelList } from '../../shared/access-level';
import { PolicyStatement } from '../../shared';
/**
* Statement provider for service [workdocs](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkdocs.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
export declare class Workdocs extends PolicyStatement {
servicePrefix: string;
/**
* Statement provider for service [workdocs](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkdocs.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
constructor(sid?: string);
/**
* Grants permission to abort the upload of the specified document version that was previously initiated by InitiateDocumentVersionUpload
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_AbortDocumentVersionUpload.html
*/
toAbortDocumentVersionUpload(): this;
/**
* Grants permission to activate the specified user. Only active users can access Amazon WorkDocs
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_ActivateUser.html
*/
toActivateUser(): this;
/**
* Grants permission to add principals that are allowed to call notification subscription APIs for a given WorkDocs site
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html
*/
toAddNotificationPermissions(): this;
/**
* Grants permission to create a set of permissions for the specified folder or document
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_AddResourcePermissions.html
*/
toAddResourcePermissions(): this;
/**
* Grants permission to add a user to a group
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/manage_set_admin.html
*/
toAddUserToGroup(): this;
/**
* Grants permission to check an alias
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/cloud_quick_start.html
*/
toCheckAlias(): this;
/**
* Grants permission to add a new comment to the specified document version
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateComment.html
*/
toCreateComment(): this;
/**
* Grants permission to add one or more custom properties to the specified resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateCustomMetadata.html
*/
toCreateCustomMetadata(): this;
/**
* Grants permission to create a folder with the specified name and parent folder
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateFolder.html
*/
toCreateFolder(): this;
/**
* Grants permission to create an instance
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/getting_started.html
*/
toCreateInstance(): this;
/**
* Grants permission to add labels to the given resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateLabels.html
*/
toCreateLabels(): this;
/**
* Grants permission to configure WorkDocs to use Amazon SNS notifications
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateNotificationSubscription.html
*/
toCreateNotificationSubscription(): this;
/**
* Grants permission to create a user in a Simple AD or Microsoft AD directory
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_CreateUser.html
*/
toCreateUser(): this;
/**
* Grants permission to deactivate the specified user, which revokes the user's access to Amazon WorkDocs
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeactivateUser.html
*/
toDeactivateUser(): this;
/**
* Grants permission to delete the specified comment from the document version
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteComment.html
*/
toDeleteComment(): this;
/**
* Grants permission to delete custom metadata from the specified resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteCustomMetadata.html
*/
toDeleteCustomMetadata(): this;
/**
* Grants permission to permanently delete the specified document and its associated metadata
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteDocument.html
*/
toDeleteDocument(): this;
/**
* Grants permission to delete versions of a specified document
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteDocumentVersion.html
*/
toDeleteDocumentVersion(): this;
/**
* Grants permission to permanently delete the specified folder and its contents
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteFolder.html
*/
toDeleteFolder(): this;
/**
* Grants permission to delete the contents of the specified folder
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteFolderContents.html
*/
toDeleteFolderContents(): this;
/**
* Grants permission to delete an instance
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-sites.html#delete_site
*/
toDeleteInstance(): this;
/**
* Grants permission to delete one or more labels from a resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteLabels.html
*/
toDeleteLabels(): this;
/**
* Grants permission to delete principals that are allowed to call notification subscription APIs for a given WorkDocs site
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html
*/
toDeleteNotificationPermissions(): this;
/**
* Grants permission to delete the specified subscription from the specified organization
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteNotificationSubscription.html
*/
toDeleteNotificationSubscription(): this;
/**
* Grants permission to delete the specified user from a Simple AD or Microsoft AD directory
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteUser.html
*/
toDeleteUser(): this;
/**
* Grants permission to deregister a directory
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-sites.html#delete_site
*/
toDeregisterDirectory(): this;
/**
* Grants permission to fetch user activities in a specified time period
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeActivities.html
*/
toDescribeActivities(): this;
/**
* Grants permission to describe available directories
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/getting_started.html
*/
toDescribeAvailableDirectories(): this;
/**
* Grants permission to list all the comments for the specified document version
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeComments.html
*/
toDescribeComments(): this;
/**
* Grants permission to retrieve the document versions for the specified document
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeDocumentVersions.html
*/
toDescribeDocumentVersions(): this;
/**
* Grants permission to describe the contents of the specified folder, including its documents and sub-folders
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeFolderContents.html
*/
toDescribeFolderContents(): this;
/**
* Grants permission to describe the user groups
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeGroups.html
*/
toDescribeGroups(): this;
/**
* Grants permission to describe the export history for an instance
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/migration-tool.html
*/
toDescribeInstanceExports(): this;
/**
* Grants permission to describe instances
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/getting_started.html
*/
toDescribeInstances(): this;
/**
* Grants permission to describe principals that are allowed to call notification subscription APIs for a given WorkDocs site
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html
*/
toDescribeNotificationPermissions(): this;
/**
* Grants permission to list the specified notification subscriptions
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeNotificationSubscriptions.html
*/
toDescribeNotificationSubscriptions(): this;
/**
* Grants permission to view a description of a specified resource's permissions
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeResourcePermissions.html
*/
toDescribeResourcePermissions(): this;
/**
* Grants permission to describe the root folders
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeRootFolders.html
*/
toDescribeRootFolders(): this;
/**
* Grants permission to view a description of the specified users. You can describe all users or filter the results (for example, by status or organization)
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeUsers.html
*/
toDescribeUsers(): this;
/**
* Grants permission to download a specified document version
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetDocumentVersion.html
*/
toDownloadDocumentVersion(): this;
/**
* Grants permission to retrieve the details of the current user
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetCurrentUser.html
*/
toGetCurrentUser(): this;
/**
* Grants permission to retrieve the specified document object
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetDocument.html
*/
toGetDocument(): this;
/**
* Grants permission to retrieve the path information (the hierarchy from the root folder) for the requested document
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetDocumentPath.html
*/
toGetDocumentPath(): this;
/**
* Grants permission to retrieve version metadata for the specified document
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetDocumentVersion.html
*/
toGetDocumentVersion(): this;
/**
* Grants permission to retrieve the metadata of the specified folder
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetFolder.html
*/
toGetFolder(): this;
/**
* Grants permission to retrieve the path information (the hierarchy from the root folder) for the specified folder
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetFolderPath.html
*/
toGetFolderPath(): this;
/**
* Grants permission to retrieve details for the specified group
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_Operations.html
*/
toGetGroup(): this;
/**
* Grants permission to get a collection of resources
*
* Access Level: Read
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_GetResources.html
*/
toGetResources(): this;
/**
* Grants permission to create a new document object and version object
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_InitiateDocumentVersionUpload.html
*/
toInitiateDocumentVersionUpload(): this;
/**
* Grants permission to register a directory
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/existing-dir-setup.html
*/
toRegisterDirectory(): this;
/**
* Grants permission to remove all the permissions from the specified resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_RemoveAllResourcePermissions.html
*/
toRemoveAllResourcePermissions(): this;
/**
* Grants permission to remove the permission for the specified principal from the specified resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_RemoveResourcePermission.html
*/
toRemoveResourcePermission(): this;
/**
* Grants permission to restore versions of a specified document
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_RestoreDocumentVersions.html
*/
toRestoreDocumentVersions(): this;
/**
* Grants permission to search metadata and the content of resources
*
* Access Level: List
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_SearchResources.html
*/
toSearchResources(): this;
/**
* Grants permission to start an export for an instance
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/migration-tool.html
*/
toStartInstanceExport(): this;
/**
* Grants permission to update the specified attributes of the specified document
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_UpdateDocument.html
*/
toUpdateDocument(): this;
/**
* Grants permission to change the status of the document version to ACTIVE
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_UpdateDocumentVersion.html
*/
toUpdateDocumentVersion(): this;
/**
* Grants permission to update the specified attributes of the specified folder
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_UpdateFolder.html
*/
toUpdateFolder(): this;
/**
* Grants permission to update an instance alias
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/getting_started.html
*/
toUpdateInstanceAlias(): this;
/**
* Grants permission to update the specified attributes of the specified user, and grants or revokes administrative privileges to the Amazon WorkDocs site
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/APIReference/API_UpdateUser.html
*/
toUpdateUser(): this;
/**
* Grants permission to update the administrative settings for a user
*
* Access Level: Write
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/migration.html
*/
toUpdateUserAdministrativeSettings(): this;
protected accessLevelList: AccessLevelList;
/**
* Adds a resource of type organization to the statement
*
* https://docs.aws.amazon.com/workdocs/latest/adminguide/migration-tool.html
*
* @param resourceId - Identifier for the resourceId.
* @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
* @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
* @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
*/
onOrganization(resourceId: string, account?: string, region?: string, partition?: string): this;
}