@jjrawlins/cdk-ami-builder 0.0.18 → 0.0.20

package/node_modules/cdk-iam-floyd/lib/generated/policy-statements/directoryservice.d.ts

@@ -162,6 +162,37 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateDirectory.html
      */
     toCreateDirectory(): this;
+    /**
+     * Grants permission to create a Hybrid Managed AD directory
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
+     * Dependent actions:
+     * - ec2:AuthorizeSecurityGroupEgress
+     * - ec2:AuthorizeSecurityGroupIngress
+     * - ec2:CreateNetworkInterface
+     * - ec2:CreateNetworkInterfacePermission
+     * - ec2:CreateSecurityGroup
+     * - ec2:CreateTags
+     * - ec2:DescribeNetworkInterfaces
+     * - ec2:DescribeSubnets
+     * - ec2:DescribeVpcs
+     * - iam:CreateServiceLinkedRole
+     * - iam:GetRole
+     * - secretsmanager:DescribeSecret
+     * - secretsmanager:GetSecretValue
+     * - ssm:GetCommandInvocation
+     * - ssm:GetConnectionStatus
+     * - ssm:ListCommands
+     * - ssm:SendCommand
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateHybridAD.html
+     */
+    toCreateHybridAD(): this;
     /**
      * Grants permission to create an IdentityPool Directory in the AWS cloud
      *
@@ -220,6 +251,14 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_CreateTrust.html
      */
     toCreateTrust(): this;
+    /**
+     * Grants permission to delete a directory assessment
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeleteADAssessment.html
+     */
+    toDeleteADAssessment(): this;
     /**
      * Grants permission to delete a conditional forwarder that has been set up for your AWS directory
      *
@@ -283,6 +322,22 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DeregisterEventTopic.html
      */
     toDeregisterEventTopic(): this;
+    /**
+     * Grants permission to describe a directory assessment
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeADAssessment.html
+     */
+    toDescribeADAssessment(): this;
+    /**
+     * Grants permission to describe the ca enrollment status of a specified directory
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeCAEnrollmentPolicy.html
+     */
+    toDescribeCAEnrollmentPolicy(): this;
     /**
      * Grants permission to display information about the certificate registered for a secured LDAP connection
      *
@@ -339,6 +394,14 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeEventTopics.html
      */
     toDescribeEventTopics(): this;
+    /**
+     * Grants permission to describe the updates of a specified hybrid directory
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeHybridADUpdate.html
+     */
+    toDescribeHybridADUpdate(): this;
     /**
      * Grants permission to describe the status of LDAP security for the specified directory
      *
@@ -395,6 +458,14 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DescribeUpdateDirectory.html
      */
     toDescribeUpdateDirectory(): this;
+    /**
+     * Grants permission to disable the ca enrollment of a specified directory
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableCAEnrollmentPolicy.html
+     */
+    toDisableCAEnrollmentPolicy(): this;
     /**
      * Grants permission to disable alternative client authentication methods for the specified directory
      *
@@ -443,6 +514,18 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_DisableSso.html
      */
     toDisableSso(): this;
+    /**
+     * Grants permission to enable the ca enrollment of a specified directory
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - acm-pca:DescribeCertificateAuthority
+     * - pca-connector-ad:GetConnector
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_EnableCAEnrollmentPolicy.html
+     */
+    toEnableCAEnrollmentPolicy(): this;
     /**
      * Grants permission to enable alternative client authentication methods for the specified directory
      *
@@ -518,6 +601,14 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_GetSnapshotLimits.html
      */
     toGetSnapshotLimits(): this;
+    /**
+     * Grants permission to list directory assessments
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ListADAssessments.html
+     */
+    toListADAssessments(): this;
     /**
      * Grants permission to obtain the AWS applications authorized for a directory
      *
@@ -648,6 +739,30 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_ShareDirectory.html
      */
     toShareDirectory(): this;
+    /**
+     * Grants permission to start a directory assessment
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - ec2:AuthorizeSecurityGroupEgress
+     * - ec2:AuthorizeSecurityGroupIngress
+     * - ec2:CreateNetworkInterface
+     * - ec2:CreateNetworkInterfacePermission
+     * - ec2:CreateSecurityGroup
+     * - ec2:DeleteNetworkInterface
+     * - ec2:DeleteSecurityGroup
+     * - ec2:DescribeNetworkInterfaces
+     * - ec2:DescribeSubnets
+     * - ec2:DescribeVpcs
+     * - ssm:GetCommandInvocation
+     * - ssm:GetConnectionStatus
+     * - ssm:ListCommands
+     * - ssm:SendCommand
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_StartADAssessment.html
+     */
+    toStartADAssessment(): this;
     /**
      * Grants permission to apply a schema extension to a Microsoft AD directory
      *
@@ -704,6 +819,31 @@ export declare class Ds extends PolicyStatement {
      * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateDirectorySetup.html
      */
     toUpdateDirectorySetup(): this;
+    /**
+     * Grants permission to update configurations for a specified hybrid directory
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - ec2:AuthorizeSecurityGroupEgress
+     * - ec2:AuthorizeSecurityGroupIngress
+     * - ec2:CreateNetworkInterface
+     * - ec2:CreateNetworkInterfacePermission
+     * - ec2:CreateSecurityGroup
+     * - ec2:CreateTags
+     * - ec2:DescribeNetworkInterfaces
+     * - ec2:DescribeSubnets
+     * - ec2:DescribeVpcs
+     * - secretsmanager:DescribeSecret
+     * - secretsmanager:GetSecretValue
+     * - ssm:GetCommandInvocation
+     * - ssm:GetConnectionStatus
+     * - ssm:ListCommands
+     * - ssm:SendCommand
+     *
+     * https://docs.aws.amazon.com/directoryservice/latest/devguide/API_UpdateHybridAD.html
+     */
+    toUpdateHybridAD(): this;
     /**
      * Grants permission to add or remove domain controllers to or from the directory. Based on the difference between current value and new value (provided through this API call), domain controllers will be added or removed. It may take up to 45 minutes for any new domain controllers to become fully active once the requested number of domain controllers is updated. During this time, you cannot make another update request
      *
@@ -768,6 +908,7 @@ export declare class Ds extends PolicyStatement {
      * - .toAddTagsToResource()
      * - .toConnectDirectory()
      * - .toCreateDirectory()
+     * - .toCreateHybridAD()
      * - .toCreateIdentityPoolDirectory()
      * - .toCreateMicrosoftAD()
      * - .toRemoveTagsFromResource()
@@ -799,6 +940,7 @@ export declare class Ds extends PolicyStatement {
      * - .toAddTagsToResource()
      * - .toConnectDirectory()
      * - .toCreateDirectory()
+     * - .toCreateHybridAD()
      * - .toCreateIdentityPoolDirectory()
      * - .toCreateMicrosoftAD()
      * - .toRemoveTagsFromResource()