@jjrawlins/cdk-ami-builder 0.0.18 → 0.0.20

package/node_modules/cdk-iam-floyd/lib/generated/policy-statements/ec2imagebuilder.d.ts

@@ -29,12 +29,17 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
-     * - iam:CreateServiceLinkedRole
      * - imagebuilder:TagResource
      * - kms:Encrypt
      * - kms:GenerateDataKey
      * - kms:GenerateDataKeyWithoutPlaintext
+     * - s3:GetObject
+     * - s3:ListBucket
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateComponent.html
      */
@@ -44,16 +49,22 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
+     * - ec2:DescribeImages
      * - ecr:DescribeImages
      * - ecr:DescribeRepositories
-     * - iam:CreateServiceLinkedRole
      * - imagebuilder:GetComponent
      * - imagebuilder:GetImage
      * - imagebuilder:TagResource
      * - kms:Encrypt
      * - kms:GenerateDataKey
      * - kms:GenerateDataKeyWithoutPlaintext
+     * - s3:GetObject
+     * - s3:ListBucket
      * - ssm:GetParameter
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateContainerRecipe.html
@@ -64,9 +75,16 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
-     * - iam:CreateServiceLinkedRole
+     * - ec2:CreateLaunchTemplateVersion
+     * - ec2:DescribeLaunchTemplates
+     * - ec2:ModifyLaunchTemplate
      * - imagebuilder:TagResource
+     * - s3:ListBucket
      * - ssm:GetParameter
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateDistributionConfiguration.html
@@ -77,7 +95,13 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
+     * - ecr:BatchGetRepositoryScanningConfiguration
+     * - ecr:DescribeRepositories
      * - iam:CreateServiceLinkedRole
      * - iam:PassRole
      * - imagebuilder:GetContainerRecipe
@@ -86,6 +110,7 @@ export declare class Imagebuilder extends PolicyStatement {
      * - imagebuilder:GetInfrastructureConfiguration
      * - imagebuilder:GetWorkflow
      * - imagebuilder:TagResource
+     * - inspector2:BatchGetAccountStatus
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateImage.html
      */
@@ -95,7 +120,13 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
+     * - ecr:BatchGetRepositoryScanningConfiguration
+     * - ecr:DescribeRepositories
      * - iam:CreateServiceLinkedRole
      * - iam:PassRole
      * - imagebuilder:GetContainerRecipe
@@ -104,6 +135,7 @@ export declare class Imagebuilder extends PolicyStatement {
      * - imagebuilder:GetInfrastructureConfiguration
      * - imagebuilder:GetWorkflow
      * - imagebuilder:TagResource
+     * - inspector2:BatchGetAccountStatus
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateImagePipeline.html
      */
@@ -113,9 +145,12 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
      * - ec2:DescribeImages
-     * - iam:CreateServiceLinkedRole
      * - imagebuilder:GetComponent
      * - imagebuilder:GetImage
      * - imagebuilder:TagResource
@@ -129,10 +164,20 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     * - .ifCreatedResourceTagKeys()
+     * - .ifCreatedResourceTag()
+     * - .ifEc2MetadataHttpTokens()
+     * - .ifStatusTopicArn()
+     *
      * Dependent actions:
-     * - iam:CreateServiceLinkedRole
+     * - ec2:DescribeAvailabilityZones
+     * - ec2:DescribeHosts
      * - iam:PassRole
      * - imagebuilder:TagResource
+     * - resource-groups:GetGroup
      * - sns:Publish
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_CreateInfrastructureConfiguration.html
@@ -143,6 +188,11 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     * - .ifLifecyclePolicyResourceType()
+     *
      * Dependent actions:
      * - iam:PassRole
      * - imagebuilder:TagResource
@@ -155,6 +205,10 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
      * - imagebuilder:TagResource
      * - kms:Encrypt
@@ -377,6 +431,9 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Read
      *
+     * Dependent actions:
+     * - kms:Decrypt
+     *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetWorkflowStepExecution.html
      */
     toGetWorkflowStepExecution(): this;
@@ -385,12 +442,17 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
-     * - iam:CreateServiceLinkedRole
      * - imagebuilder:TagResource
      * - kms:Encrypt
      * - kms:GenerateDataKey
      * - kms:GenerateDataKeyWithoutPlaintext
+     * - s3:GetObject
+     * - s3:ListBucket
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ImportComponent.html
      */
@@ -400,6 +462,10 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
      * - iam:CreateServiceLinkedRole
      * - iam:PassRole
@@ -417,10 +483,15 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
      * Dependent actions:
      * - ec2:DescribeImages
      * - ec2:DescribeImportImageTasks
      * - iam:CreateServiceLinkedRole
+     * - imagebuilder:TagResource
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ImportVmImage.html
      */
@@ -593,6 +664,9 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: List
      *
+     * Dependent actions:
+     * - kms:Decrypt
+     *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ListWorkflowStepExecutions.html
      */
     toListWorkflowStepExecutions(): this;
@@ -669,6 +743,10 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Tagging
      *
+     * Possible conditions:
+     * - .ifAwsTagKeys()
+     * - .ifAwsRequestTag()
+     *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_TagResource.html
      */
     toTagResource(): this;
@@ -677,6 +755,9 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Tagging
      *
+     * Possible conditions:
+     * - .ifAwsTagKeys()
+     *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UntagResource.html
      */
     toUntagResource(): this;
@@ -686,6 +767,10 @@ export declare class Imagebuilder extends PolicyStatement {
      * Access Level: Write
      *
      * Dependent actions:
+     * - ec2:CreateLaunchTemplateVersion
+     * - ec2:DescribeLaunchTemplates
+     * - ec2:ModifyLaunchTemplate
+     * - s3:ListBucket
      * - ssm:GetParameter
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UpdateDistributionConfiguration.html
@@ -697,6 +782,8 @@ export declare class Imagebuilder extends PolicyStatement {
      * Access Level: Write
      *
      * Dependent actions:
+     * - ecr:BatchGetRepositoryScanningConfiguration
+     * - ecr:DescribeRepositories
      * - iam:CreateServiceLinkedRole
      * - iam:PassRole
      * - imagebuilder:GetContainerRecipe
@@ -704,6 +791,7 @@ export declare class Imagebuilder extends PolicyStatement {
      * - imagebuilder:GetImageRecipe
      * - imagebuilder:GetInfrastructureConfiguration
      * - imagebuilder:GetWorkflow
+     * - inspector2:BatchGetAccountStatus
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UpdateImagePipeline.html
      */
@@ -713,8 +801,17 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifCreatedResourceTagKeys()
+     * - .ifCreatedResourceTag()
+     * - .ifEc2MetadataHttpTokens()
+     * - .ifStatusTopicArn()
+     *
      * Dependent actions:
+     * - ec2:DescribeAvailabilityZones
+     * - ec2:DescribeHosts
      * - iam:PassRole
+     * - resource-groups:GetGroup
      * - sns:Publish
      *
      * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_UpdateInfrastructureConfiguration.html
@@ -725,6 +822,9 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifLifecyclePolicyResourceType()
+     *
      * Dependent actions:
      * - iam:PassRole
      *
@@ -748,21 +848,6 @@ export declare class Imagebuilder extends PolicyStatement {
      * - .ifAwsResourceTag()
      */
     onComponent(componentName: string, componentVersion: string, componentBuildVersion: string, account?: string, region?: string, partition?: string): this;
-    /**
-     * Adds a resource of type componentVersion to the statement
-     *
-     * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_ComponentVersion.html
-     *
-     * @param componentName - Identifier for the componentName.
-     * @param componentVersion - Identifier for the componentVersion.
-     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
-     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
-     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
-     *
-     * Possible conditions:
-     * - .ifAwsResourceTag()
-     */
-    onComponentVersion(componentName: string, componentVersion: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type distributionConfiguration to the statement
      *
@@ -866,17 +951,6 @@ export declare class Imagebuilder extends PolicyStatement {
      * - .ifAwsResourceTag()
      */
     onInfrastructureConfiguration(resourceId: string, account?: string, region?: string, partition?: string): this;
-    /**
-     * Adds a resource of type kmsKey to the statement
-     *
-     * https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#master_keys
-     *
-     * @param keyId - Identifier for the keyId.
-     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
-     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
-     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
-     */
-    onKmsKey(keyId: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type lifecycleExecution to the statement
      *
@@ -919,22 +993,6 @@ export declare class Imagebuilder extends PolicyStatement {
      * - .ifAwsResourceTag()
      */
     onWorkflow(workflowType: string, workflowName: string, workflowVersion: string, workflowBuildVersion: string, account?: string, region?: string, partition?: string): this;
-    /**
-     * Adds a resource of type workflowVersion to the statement
-     *
-     * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_WorkflowVersion.html
-     *
-     * @param workflowType - Identifier for the workflowType.
-     * @param workflowName - Identifier for the workflowName.
-     * @param workflowVersion - Identifier for the workflowVersion.
-     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
-     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
-     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
-     *
-     * Possible conditions:
-     * - .ifAwsResourceTag()
-     */
-    onWorkflowVersion(workflowType: string, workflowName: string, workflowVersion: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type workflowExecution to the statement
      *
@@ -957,6 +1015,43 @@ export declare class Imagebuilder extends PolicyStatement {
      * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
      */
     onWorkflowStepExecution(workflowStepExecutionId: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type allComponentBuildVersions to the statement
+     *
+     * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Component.html
+     *
+     * @param componentName - Identifier for the componentName.
+     * @param componentVersion - Identifier for the componentVersion.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onAllComponentBuildVersions(componentName: string, componentVersion: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type allImageBuildVersions to the statement
+     *
+     * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Image.html
+     *
+     * @param imageName - Identifier for the imageName.
+     * @param imageVersion - Identifier for the imageVersion.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onAllImageBuildVersions(imageName: string, imageVersion: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type allWorkflowBuildVersions to the statement
+     *
+     * https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_Workflow.html
+     *
+     * @param workflowType - Identifier for the workflowType.
+     * @param workflowName - Identifier for the workflowName.
+     * @param workflowVersion - Identifier for the workflowVersion.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onAllWorkflowBuildVersions(workflowType: string, workflowName: string, workflowVersion: string, account?: string, region?: string, partition?: string): this;
     /**
      * Filters access by the presence of tag key-value pairs in the request
      *
@@ -987,17 +1082,8 @@ export declare class Imagebuilder extends PolicyStatement {
      *
      * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
      *
-     * Applies to actions:
-     * - .toGetImage()
-     * - .toListImagePackages()
-     * - .toListTagsForResource()
-     * - .toTagResource()
-     * - .toUntagResource()
-     * - .toUpdateInfrastructureConfiguration()
-     *
      * Applies to resource types:
      * - component
-     * - componentVersion
      * - distributionConfiguration
      * - image
      * - imageVersion
@@ -1007,7 +1093,6 @@ export declare class Imagebuilder extends PolicyStatement {
      * - infrastructureConfiguration
      * - lifecyclePolicy
      * - workflow
-     * - workflowVersion
      *
      * @param tagKey The tag key to check
      * @param value The value(s) to check
@@ -1048,11 +1133,11 @@ export declare class Imagebuilder extends PolicyStatement {
      * - .toCreateInfrastructureConfiguration()
      * - .toUpdateInfrastructureConfiguration()
      *
-     * @param key The tag key to check
+     * @param tagKey The tag key to check
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
-    ifCreatedResourceTag(key: string, value: string | string[], operator?: Operator | string): this;
+    ifCreatedResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the presence of tag keys in the request
      *
@@ -1069,7 +1154,7 @@ export declare class Imagebuilder extends PolicyStatement {
     /**
      * Filters access by the EC2 Instance Metadata HTTP Token Requirement specified in the request
      *
-     * https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-ec2metadatahttptokens
+     * https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-ec2metadatatokens
      *
      * Applies to actions:
      * - .toCreateInfrastructureConfiguration()
@@ -1082,7 +1167,7 @@ export declare class Imagebuilder extends PolicyStatement {
     /**
      * Filters access by the Lifecycle Policy Resource Type specified in the request
      *
-     * https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-ec2metadatahttptokens
+     * https://docs.aws.amazon.com/imagebuilder/latest/userguide/security_iam_service-with-iam.html#image-builder-security-lifecyclepolicyresourcetype
      *
      * Applies to actions:
      * - .toCreateLifecyclePolicy()