@cdk_utils/iam 1.29.0 → 1.30.0

package/lib/generated/services/network-security-manager.d.ts

@@ -0,0 +1,674 @@
+/**
+ * IAM action constants for the network-security-manager service.
+ */
+export declare class NetworkSecurityManagerActions {
+    /** The IAM service prefix. */
+    static readonly SERVICE_PREFIX = "network-security-manager";
+    /** [Write] network-security-manager:CreateDeployment */
+    static readonly CreateDeployment = "network-security-manager:CreateDeployment";
+    /** [Write] network-security-manager:CreateDeploymentSnapshot */
+    static readonly CreateDeploymentSnapshot = "network-security-manager:CreateDeploymentSnapshot";
+    /** [Write] network-security-manager:CreatePolicy */
+    static readonly CreatePolicy = "network-security-manager:CreatePolicy";
+    /** [Write] network-security-manager:CreatePolicySnapshot */
+    static readonly CreatePolicySnapshot = "network-security-manager:CreatePolicySnapshot";
+    /** [Write] network-security-manager:CreateRule */
+    static readonly CreateRule = "network-security-manager:CreateRule";
+    /** [Write] network-security-manager:CreateRuleSnapshot */
+    static readonly CreateRuleSnapshot = "network-security-manager:CreateRuleSnapshot";
+    /** [Write] network-security-manager:CreateScope */
+    static readonly CreateScope = "network-security-manager:CreateScope";
+    /** [Write] network-security-manager:CreateScopeSnapshot */
+    static readonly CreateScopeSnapshot = "network-security-manager:CreateScopeSnapshot";
+    /** [Write] network-security-manager:CreateTemplate */
+    static readonly CreateTemplate = "network-security-manager:CreateTemplate";
+    /** [Write] network-security-manager:CreateTemplateSnapshot */
+    static readonly CreateTemplateSnapshot = "network-security-manager:CreateTemplateSnapshot";
+    /** [Write] network-security-manager:DeleteAdminAccount */
+    static readonly DeleteAdminAccount = "network-security-manager:DeleteAdminAccount";
+    /** [Write] network-security-manager:DeleteDeployment */
+    static readonly DeleteDeployment = "network-security-manager:DeleteDeployment";
+    /** [Write] network-security-manager:DeletePolicy */
+    static readonly DeletePolicy = "network-security-manager:DeletePolicy";
+    /** [Write] network-security-manager:DeleteRule */
+    static readonly DeleteRule = "network-security-manager:DeleteRule";
+    /** [Write] network-security-manager:DeleteScope */
+    static readonly DeleteScope = "network-security-manager:DeleteScope";
+    /** [Write] network-security-manager:DeleteTemplate */
+    static readonly DeleteTemplate = "network-security-manager:DeleteTemplate";
+    /** [Write] network-security-manager:GenerateRuleConfiguration */
+    static readonly GenerateRuleConfiguration = "network-security-manager:GenerateRuleConfiguration";
+    /** [Read] network-security-manager:GetAdminAccount */
+    static readonly actionGetAdminAccount = "network-security-manager:GetAdminAccount";
+    /** [Read] network-security-manager:GetDeployment */
+    static readonly actionGetDeployment = "network-security-manager:GetDeployment";
+    /** [Read] network-security-manager:GetPolicy */
+    static readonly actionGetPolicy = "network-security-manager:GetPolicy";
+    /** [Read] network-security-manager:GetRule */
+    static readonly actionGetRule = "network-security-manager:GetRule";
+    /** [Read] network-security-manager:GetScope */
+    static readonly actionGetScope = "network-security-manager:GetScope";
+    /** [Read] network-security-manager:GetTemplate */
+    static readonly actionGetTemplate = "network-security-manager:GetTemplate";
+    /** [List] network-security-manager:ListAdminAccounts */
+    static readonly ListAdminAccounts = "network-security-manager:ListAdminAccounts";
+    /** [Read] network-security-manager:ListAggregateResourceSynchronizationStatuses */
+    static readonly ListAggregateResourceSynchronizationStatuses = "network-security-manager:ListAggregateResourceSynchronizationStatuses";
+    /** [Read] network-security-manager:ListDeploymentSnapshots */
+    static readonly ListDeploymentSnapshots = "network-security-manager:ListDeploymentSnapshots";
+    /** [List] network-security-manager:ListDeployments */
+    static readonly ListDeployments = "network-security-manager:ListDeployments";
+    /** [List] network-security-manager:ListPolicies */
+    static readonly ListPolicies = "network-security-manager:ListPolicies";
+    /** [Read] network-security-manager:ListPolicySnapshots */
+    static readonly ListPolicySnapshots = "network-security-manager:ListPolicySnapshots";
+    /** [Read] network-security-manager:ListResourceAssociations */
+    static readonly ListResourceAssociations = "network-security-manager:ListResourceAssociations";
+    /** [Read] network-security-manager:ListResourceSynchronizationStatuses */
+    static readonly ListResourceSynchronizationStatuses = "network-security-manager:ListResourceSynchronizationStatuses";
+    /** [Read] network-security-manager:ListRuleSnapshots */
+    static readonly ListRuleSnapshots = "network-security-manager:ListRuleSnapshots";
+    /** [List] network-security-manager:ListRules */
+    static readonly ListRules = "network-security-manager:ListRules";
+    /** [Read] network-security-manager:ListScopeSnapshots */
+    static readonly ListScopeSnapshots = "network-security-manager:ListScopeSnapshots";
+    /** [List] network-security-manager:ListScopes */
+    static readonly ListScopes = "network-security-manager:ListScopes";
+    /** [Read] network-security-manager:ListTagsForResource */
+    static readonly ListTagsForResource = "network-security-manager:ListTagsForResource";
+    /** [Read] network-security-manager:ListTemplateSnapshots */
+    static readonly ListTemplateSnapshots = "network-security-manager:ListTemplateSnapshots";
+    /** [List] network-security-manager:ListTemplates */
+    static readonly ListTemplates = "network-security-manager:ListTemplates";
+    /** [Write] network-security-manager:PutAdminAccount */
+    static readonly PutAdminAccount = "network-security-manager:PutAdminAccount";
+    /** [Tagging] network-security-manager:TagResource */
+    static readonly TagResource = "network-security-manager:TagResource";
+    /** [Tagging] network-security-manager:UntagResource */
+    static readonly UntagResource = "network-security-manager:UntagResource";
+    /** [Write] network-security-manager:UpdateDeployment */
+    static readonly UpdateDeployment = "network-security-manager:UpdateDeployment";
+    /** [Write] network-security-manager:UpdatePolicy */
+    static readonly UpdatePolicy = "network-security-manager:UpdatePolicy";
+    /** [Write] network-security-manager:UpdateRule */
+    static readonly UpdateRule = "network-security-manager:UpdateRule";
+    /** [Write] network-security-manager:UpdateScope */
+    static readonly UpdateScope = "network-security-manager:UpdateScope";
+    /** [Write] network-security-manager:UpdateTemplate */
+    static readonly UpdateTemplate = "network-security-manager:UpdateTemplate";
+    /** All read-level actions. */
+    static readonly AllReadActions: string[];
+    /** All write-level actions. */
+    static readonly AllWriteActions: string[];
+    /** All list-level actions. */
+    static readonly AllListActions: string[];
+    /** All permission-management-level actions. */
+    static readonly AllPermissionManagementActions: string[];
+    /** All tagging-level actions. */
+    static readonly AllTaggingActions: string[];
+}
+/**
+ * Properties for building a deployment ARN.
+ */
+export interface NetworkSecurityManagerDeploymentArnProps {
+    /** The DeploymentId component of the ARN. */
+    readonly deploymentId: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a deployment ARN.
+ */
+export interface NetworkSecurityManagerDeploymentArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The DeploymentId component. */
+    readonly deploymentId: string;
+}
+/**
+ * Properties for building a deployment-snapshot ARN.
+ */
+export interface NetworkSecurityManagerDeploymentSnapshotArnProps {
+    /** The DeploymentId component of the ARN. */
+    readonly deploymentId: string;
+    /** The VersionNumber component of the ARN. */
+    readonly versionNumber: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a deployment-snapshot ARN.
+ */
+export interface NetworkSecurityManagerDeploymentSnapshotArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The DeploymentId component. */
+    readonly deploymentId: string;
+    /** The VersionNumber component. */
+    readonly versionNumber: string;
+}
+/**
+ * Properties for building a policy ARN.
+ */
+export interface NetworkSecurityManagerPolicyArnProps {
+    /** The PolicyId component of the ARN. */
+    readonly policyId: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a policy ARN.
+ */
+export interface NetworkSecurityManagerPolicyArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The PolicyId component. */
+    readonly policyId: string;
+}
+/**
+ * Properties for building a policy-snapshot ARN.
+ */
+export interface NetworkSecurityManagerPolicySnapshotArnProps {
+    /** The PolicyId component of the ARN. */
+    readonly policyId: string;
+    /** The VersionNumber component of the ARN. */
+    readonly versionNumber: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a policy-snapshot ARN.
+ */
+export interface NetworkSecurityManagerPolicySnapshotArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The PolicyId component. */
+    readonly policyId: string;
+    /** The VersionNumber component. */
+    readonly versionNumber: string;
+}
+/**
+ * Properties for building a rule ARN.
+ */
+export interface NetworkSecurityManagerRuleArnProps {
+    /** The RuleId component of the ARN. */
+    readonly ruleId: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a rule ARN.
+ */
+export interface NetworkSecurityManagerRuleArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The RuleId component. */
+    readonly ruleId: string;
+}
+/**
+ * Properties for building a rule-snapshot ARN.
+ */
+export interface NetworkSecurityManagerRuleSnapshotArnProps {
+    /** The RuleId component of the ARN. */
+    readonly ruleId: string;
+    /** The VersionNumber component of the ARN. */
+    readonly versionNumber: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a rule-snapshot ARN.
+ */
+export interface NetworkSecurityManagerRuleSnapshotArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The RuleId component. */
+    readonly ruleId: string;
+    /** The VersionNumber component. */
+    readonly versionNumber: string;
+}
+/**
+ * Properties for building a scope ARN.
+ */
+export interface NetworkSecurityManagerScopeArnProps {
+    /** The ScopeId component of the ARN. */
+    readonly scopeId: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a scope ARN.
+ */
+export interface NetworkSecurityManagerScopeArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The ScopeId component. */
+    readonly scopeId: string;
+}
+/**
+ * Properties for building a scope-snapshot ARN.
+ */
+export interface NetworkSecurityManagerScopeSnapshotArnProps {
+    /** The ScopeId component of the ARN. */
+    readonly scopeId: string;
+    /** The VersionNumber component of the ARN. */
+    readonly versionNumber: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a scope-snapshot ARN.
+ */
+export interface NetworkSecurityManagerScopeSnapshotArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The ScopeId component. */
+    readonly scopeId: string;
+    /** The VersionNumber component. */
+    readonly versionNumber: string;
+}
+/**
+ * Properties for building a template ARN.
+ */
+export interface NetworkSecurityManagerTemplateArnProps {
+    /** The TemplateId component of the ARN. */
+    readonly templateId: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a template ARN.
+ */
+export interface NetworkSecurityManagerTemplateArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The TemplateId component. */
+    readonly templateId: string;
+}
+/**
+ * Properties for building a template-snapshot ARN.
+ */
+export interface NetworkSecurityManagerTemplateSnapshotArnProps {
+    /** The TemplateId component of the ARN. */
+    readonly templateId: string;
+    /** The VersionNumber component of the ARN. */
+    readonly versionNumber: string;
+    /** AWS region. Defaults to "*". */
+    readonly region?: string;
+    /** AWS account ID. Defaults to "*". */
+    readonly account?: string;
+    /** AWS partition. Defaults to "aws". */
+    readonly partition?: string;
+}
+/**
+ * Parsed components of a template-snapshot ARN.
+ */
+export interface NetworkSecurityManagerTemplateSnapshotArnComponents {
+    /** AWS partition. */
+    readonly partition: string;
+    /** AWS region. */
+    readonly region: string;
+    /** AWS account ID. */
+    readonly account: string;
+    /** The TemplateId component. */
+    readonly templateId: string;
+    /** The VersionNumber component. */
+    readonly versionNumber: string;
+}
+/**
+ * ARN builders, validators, and parsers for network-security-manager resources.
+ */
+export declare class NetworkSecurityManagerResources {
+    /**
+     * Builds an ARN for the deployment resource.
+     */
+    static deployment(props: NetworkSecurityManagerDeploymentArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the deployment resource.
+     */
+    static isValidDeploymentArn(arn: string): boolean;
+    /**
+     * Parses a deployment ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parseDeploymentArn(arn: string): NetworkSecurityManagerDeploymentArnComponents;
+    /**
+     * Builds an ARN for the deployment-snapshot resource.
+     */
+    static deploymentSnapshot(props: NetworkSecurityManagerDeploymentSnapshotArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the deployment-snapshot resource.
+     */
+    static isValidDeploymentSnapshotArn(arn: string): boolean;
+    /**
+     * Parses a deployment-snapshot ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parseDeploymentSnapshotArn(arn: string): NetworkSecurityManagerDeploymentSnapshotArnComponents;
+    /**
+     * Builds an ARN for the policy resource.
+     */
+    static policy(props: NetworkSecurityManagerPolicyArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the policy resource.
+     */
+    static isValidPolicyArn(arn: string): boolean;
+    /**
+     * Parses a policy ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parsePolicyArn(arn: string): NetworkSecurityManagerPolicyArnComponents;
+    /**
+     * Builds an ARN for the policy-snapshot resource.
+     */
+    static policySnapshot(props: NetworkSecurityManagerPolicySnapshotArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the policy-snapshot resource.
+     */
+    static isValidPolicySnapshotArn(arn: string): boolean;
+    /**
+     * Parses a policy-snapshot ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parsePolicySnapshotArn(arn: string): NetworkSecurityManagerPolicySnapshotArnComponents;
+    /**
+     * Builds an ARN for the rule resource.
+     */
+    static rule(props: NetworkSecurityManagerRuleArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the rule resource.
+     */
+    static isValidRuleArn(arn: string): boolean;
+    /**
+     * Parses a rule ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parseRuleArn(arn: string): NetworkSecurityManagerRuleArnComponents;
+    /**
+     * Builds an ARN for the rule-snapshot resource.
+     */
+    static ruleSnapshot(props: NetworkSecurityManagerRuleSnapshotArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the rule-snapshot resource.
+     */
+    static isValidRuleSnapshotArn(arn: string): boolean;
+    /**
+     * Parses a rule-snapshot ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parseRuleSnapshotArn(arn: string): NetworkSecurityManagerRuleSnapshotArnComponents;
+    /**
+     * Builds an ARN for the scope resource.
+     */
+    static scope(props: NetworkSecurityManagerScopeArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the scope resource.
+     */
+    static isValidScopeArn(arn: string): boolean;
+    /**
+     * Parses a scope ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parseScopeArn(arn: string): NetworkSecurityManagerScopeArnComponents;
+    /**
+     * Builds an ARN for the scope-snapshot resource.
+     */
+    static scopeSnapshot(props: NetworkSecurityManagerScopeSnapshotArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the scope-snapshot resource.
+     */
+    static isValidScopeSnapshotArn(arn: string): boolean;
+    /**
+     * Parses a scope-snapshot ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parseScopeSnapshotArn(arn: string): NetworkSecurityManagerScopeSnapshotArnComponents;
+    /**
+     * Builds an ARN for the template resource.
+     */
+    static template(props: NetworkSecurityManagerTemplateArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the template resource.
+     */
+    static isValidTemplateArn(arn: string): boolean;
+    /**
+     * Parses a template ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parseTemplateArn(arn: string): NetworkSecurityManagerTemplateArnComponents;
+    /**
+     * Builds an ARN for the template-snapshot resource.
+     */
+    static templateSnapshot(props: NetworkSecurityManagerTemplateSnapshotArnProps): string;
+    /**
+     * Validates whether a string is a valid ARN for the template-snapshot resource.
+     */
+    static isValidTemplateSnapshotArn(arn: string): boolean;
+    /**
+     * Parses a template-snapshot ARN into its components.
+     * @throws Error if the ARN does not match the expected format.
+     */
+    static parseTemplateSnapshotArn(arn: string): NetworkSecurityManagerTemplateSnapshotArnComponents;
+}
+/**
+ * API operation to required IAM actions mapping for network-security-manager.
+ */
+export declare class NetworkSecurityManagerOperations {
+    /** IAM actions required for the CreateDeployment API call. */
+    static readonly CreateDeployment: string[];
+    /** IAM actions required for the CreateDeploymentSnapshot API call. */
+    static readonly CreateDeploymentSnapshot: string[];
+    /** IAM actions required for the CreatePolicy API call. */
+    static readonly CreatePolicy: string[];
+    /** IAM actions required for the CreatePolicySnapshot API call. */
+    static readonly CreatePolicySnapshot: string[];
+    /** IAM actions required for the CreateRule API call. */
+    static readonly CreateRule: string[];
+    /** IAM actions required for the CreateRuleSnapshot API call. */
+    static readonly CreateRuleSnapshot: string[];
+    /** IAM actions required for the CreateScope API call. */
+    static readonly CreateScope: string[];
+    /** IAM actions required for the CreateScopeSnapshot API call. */
+    static readonly CreateScopeSnapshot: string[];
+    /** IAM actions required for the CreateTemplate API call. */
+    static readonly CreateTemplate: string[];
+    /** IAM actions required for the CreateTemplateSnapshot API call. */
+    static readonly CreateTemplateSnapshot: string[];
+    /** IAM actions required for the DeleteAdminAccount API call. */
+    static readonly DeleteAdminAccount: string[];
+    /** IAM actions required for the DeleteDeployment API call. */
+    static readonly DeleteDeployment: string[];
+    /** IAM actions required for the DeletePolicy API call. */
+    static readonly DeletePolicy: string[];
+    /** IAM actions required for the DeleteRule API call. */
+    static readonly DeleteRule: string[];
+    /** IAM actions required for the DeleteScope API call. */
+    static readonly DeleteScope: string[];
+    /** IAM actions required for the DeleteTemplate API call. */
+    static readonly DeleteTemplate: string[];
+    /** IAM actions required for the GenerateRuleConfiguration API call. */
+    static readonly GenerateRuleConfiguration: string[];
+    /** IAM actions required for the GetAdminAccount API call. */
+    static readonly opGetAdminAccount: string[];
+    /** IAM actions required for the GetDeployment API call. */
+    static readonly opGetDeployment: string[];
+    /** IAM actions required for the GetPolicy API call. */
+    static readonly opGetPolicy: string[];
+    /** IAM actions required for the GetRule API call. */
+    static readonly opGetRule: string[];
+    /** IAM actions required for the GetScope API call. */
+    static readonly opGetScope: string[];
+    /** IAM actions required for the GetTemplate API call. */
+    static readonly opGetTemplate: string[];
+    /** IAM actions required for the ListAdminAccounts API call. */
+    static readonly ListAdminAccounts: string[];
+    /** IAM actions required for the ListAggregateResourceSynchronizationStatuses API call. */
+    static readonly ListAggregateResourceSynchronizationStatuses: string[];
+    /** IAM actions required for the ListDeploymentSnapshots API call. */
+    static readonly ListDeploymentSnapshots: string[];
+    /** IAM actions required for the ListDeployments API call. */
+    static readonly ListDeployments: string[];
+    /** IAM actions required for the ListPolicies API call. */
+    static readonly ListPolicies: string[];
+    /** IAM actions required for the ListPolicySnapshots API call. */
+    static readonly ListPolicySnapshots: string[];
+    /** IAM actions required for the ListResourceAssociations API call. */
+    static readonly ListResourceAssociations: string[];
+    /** IAM actions required for the ListResourceSynchronizationStatuses API call. */
+    static readonly ListResourceSynchronizationStatuses: string[];
+    /** IAM actions required for the ListRuleSnapshots API call. */
+    static readonly ListRuleSnapshots: string[];
+    /** IAM actions required for the ListRules API call. */
+    static readonly ListRules: string[];
+    /** IAM actions required for the ListScopeSnapshots API call. */
+    static readonly ListScopeSnapshots: string[];
+    /** IAM actions required for the ListScopes API call. */
+    static readonly ListScopes: string[];
+    /** IAM actions required for the ListTagsForResource API call. */
+    static readonly ListTagsForResource: string[];
+    /** IAM actions required for the ListTemplateSnapshots API call. */
+    static readonly ListTemplateSnapshots: string[];
+    /** IAM actions required for the ListTemplates API call. */
+    static readonly ListTemplates: string[];
+    /** IAM actions required for the PutAdminAccount API call. */
+    static readonly PutAdminAccount: string[];
+    /** IAM actions required for the TagResource API call. */
+    static readonly TagResource: string[];
+    /** IAM actions required for the UntagResource API call. */
+    static readonly UntagResource: string[];
+    /** IAM actions required for the UpdateDeployment API call. */
+    static readonly UpdateDeployment: string[];
+    /** IAM actions required for the UpdatePolicy API call. */
+    static readonly UpdatePolicy: string[];
+    /** IAM actions required for the UpdateRule API call. */
+    static readonly UpdateRule: string[];
+    /** IAM actions required for the UpdateScope API call. */
+    static readonly UpdateScope: string[];
+    /** IAM actions required for the UpdateTemplate API call. */
+    static readonly UpdateTemplate: string[];
+}
+/**
+ * Condition key constants and builders for network-security-manager.
+ */
+export declare class NetworkSecurityManagerConditions {
+    /** Condition keys applicable to the CreateDeployment action. */
+    static readonly CreateDeploymentConditionKeys: string[];
+    /** Condition keys applicable to the CreateDeploymentSnapshot action. */
+    static readonly CreateDeploymentSnapshotConditionKeys: string[];
+    /** Condition keys applicable to the CreatePolicy action. */
+    static readonly CreatePolicyConditionKeys: string[];
+    /** Condition keys applicable to the CreatePolicySnapshot action. */
+    static readonly CreatePolicySnapshotConditionKeys: string[];
+    /** Condition keys applicable to the CreateRule action. */
+    static readonly CreateRuleConditionKeys: string[];
+    /** Condition keys applicable to the CreateRuleSnapshot action. */
+    static readonly CreateRuleSnapshotConditionKeys: string[];
+    /** Condition keys applicable to the CreateScope action. */
+    static readonly CreateScopeConditionKeys: string[];
+    /** Condition keys applicable to the CreateScopeSnapshot action. */
+    static readonly CreateScopeSnapshotConditionKeys: string[];
+    /** Condition keys applicable to the CreateTemplate action. */
+    static readonly CreateTemplateConditionKeys: string[];
+    /** Condition keys applicable to the CreateTemplateSnapshot action. */
+    static readonly CreateTemplateSnapshotConditionKeys: string[];
+    /** Condition keys applicable to the ListResourceAssociations action. */
+    static readonly ListResourceAssociationsConditionKeys: string[];
+    /** Condition keys applicable to the ListResourceSynchronizationStatuses action. */
+    static readonly ListResourceSynchronizationStatusesConditionKeys: string[];
+    /** Condition keys applicable to the ListTagsForResource action. */
+    static readonly ListTagsForResourceConditionKeys: string[];
+    /** Condition keys applicable to the TagResource action. */
+    static readonly TagResourceConditionKeys: string[];
+    /** Condition keys applicable to the UntagResource action. */
+    static readonly UntagResourceConditionKeys: string[];
+    /** Condition key: aws:RequestTag/${TagKey} (String) */
+    static readonly AWS_REQUEST_TAG = "aws:RequestTag/${TagKey}";
+    /** Condition key: aws:ResourceTag/${TagKey} (String) */
+    static readonly AWS_RESOURCE_TAG = "aws:ResourceTag/${TagKey}";
+    /** Condition key: aws:TagKeys (ArrayOfString) */
+    static readonly AWS_TAG_KEYS = "aws:TagKeys";
+    /**
+     * Generates a condition block for `aws:RequestTag/${TagKey}`.
+     */
+    static requestTag(value: string): Record<string, Record<string, string>>;
+    /**
+     * Generates a condition block for `aws:ResourceTag/${TagKey}`.
+     */
+    static resourceTag(value: string): Record<string, Record<string, string>>;
+    /**
+     * Generates a condition block for `aws:TagKeys`.
+     */
+    static tagKeys(values: string[]): Record<string, Record<string, string[]>>;
+}