@jjrawlins/cdk-ami-builder 0.0.18 → 0.0.20

package/node_modules/cdk-iam-floyd/lib/generated/policy-statements/networkfirewall.d.ts

@@ -8,6 +8,22 @@ import { aws_iam as iam } from "aws-cdk-lib";
  */
 export declare class NetworkFirewall extends PolicyStatement {
     servicePrefix: string;
+    /**
+     * Grants permission to accept pending Network Firewall attachments on a transit gateway
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_AcceptNetworkFirewallTransitGatewayAttachment.html
+     */
+    toAcceptNetworkFirewallTransitGatewayAttachment(): this;
+    /**
+     * Grants permission to associate availability zones to a firewall
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_AssociateAvailabilityZones.html
+     */
+    toAssociateAvailabilityZones(): this;
     /**
      * Grants permission to create an association between a firewall policy and a firewall
      *
@@ -78,6 +94,21 @@ export declare class NetworkFirewall extends PolicyStatement {
      * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateTLSInspectionConfiguration.html
      */
     toCreateTLSInspectionConfiguration(): this;
+    /**
+     * Grants permission to create an AWS Network Firewall vpc endpoint association
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
+     * Dependent actions:
+     * - iam:CreateServiceLinkedRole
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_CreateVpcEndpointAssociation.html
+     */
+    toCreateVpcEndpointAssociation(): this;
     /**
      * Grants permission to delete a firewall
      *
@@ -95,7 +126,15 @@ export declare class NetworkFirewall extends PolicyStatement {
      */
     toDeleteFirewallPolicy(): this;
     /**
-     * Grants permission to delete a resource policy for a firewall policy or rule group
+     * Grants permission to delete Network Firewall attachments on a transit gateway
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteNetworkFirewallTransitGatewayAttachment.html
+     */
+    toDeleteNetworkFirewallTransitGatewayAttachment(): this;
+    /**
+     * Grants permission to delete a resource policy for a firewall policy or rule group or firewall
      *
      * Access Level: Write
      *
@@ -118,6 +157,14 @@ export declare class NetworkFirewall extends PolicyStatement {
      * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteTLSInspectionConfiguration.html
      */
     toDeleteTLSInspectionConfiguration(): this;
+    /**
+     * Grants permission to delete a vpc endpoint association
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DeleteVpcEndpointAssociation.html
+     */
+    toDeleteVpcEndpointAssociation(): this;
     /**
      * Grants permission to retrieve the data objects that define a firewall
      *
@@ -126,6 +173,14 @@ export declare class NetworkFirewall extends PolicyStatement {
      * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeFirewall.html
      */
     toDescribeFirewall(): this;
+    /**
+     * Grants permission to retrieve the high-level information about a firewall
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeFirewallMetadata.html
+     */
+    toDescribeFirewallMetadata(): this;
     /**
      * Grants permission to retrieve the data objects that define a firewall policy
      *
@@ -155,7 +210,7 @@ export declare class NetworkFirewall extends PolicyStatement {
      */
     toDescribeLoggingConfiguration(): this;
     /**
-     * Grants permission to describe a resource policy for a firewall policy or rule group
+     * Grants permission to describe a resource policy for a firewall policy or rule group or firewall
      *
      * Access Level: Read
      *
@@ -178,6 +233,14 @@ export declare class NetworkFirewall extends PolicyStatement {
      * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeRuleGroupMetadata.html
      */
     toDescribeRuleGroupMetadata(): this;
+    /**
+     * Grants permission to retrieve the summary information about a rule group
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeRuleGroupSummary.html
+     */
+    toDescribeRuleGroupSummary(): this;
     /**
      * Grants permission to retrieve the data objects that define a tls inspection configuration
      *
@@ -186,6 +249,22 @@ export declare class NetworkFirewall extends PolicyStatement {
      * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeTLSInspectionConfiguration.html
      */
     toDescribeTLSInspectionConfiguration(): this;
+    /**
+     * Grants permission to retrieve the data objects that define a vpc endpoint association
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DescribeVpcEndpointAssociation.html
+     */
+    toDescribeVpcEndpointAssociation(): this;
+    /**
+     * Grants permission to disassociate availability zones to a firewall
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_DisassociateAvailabilityZones.html
+     */
+    toDisassociateAvailabilityZones(): this;
     /**
      * Grants permission to disassociate VPC subnets from a firewall
      *
@@ -267,13 +346,29 @@ export declare class NetworkFirewall extends PolicyStatement {
      */
     toListTagsForResource(): this;
     /**
-     * Grants permission to put a resource policy for a firewall policy or rule group
+     * Grants permission to retrieve the metadata for vpc endpoint associations
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_ListVpcEndpointAssociations.html
+     */
+    toListVpcEndpointAssociations(): this;
+    /**
+     * Grants permission to put a resource policy for a firewall policy or rule group or firewall
      *
      * Access Level: Write
      *
      * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_PutResourcePolicy.html
      */
     toPutResourcePolicy(): this;
+    /**
+     * Grants permission to reject pending Network Firewall attachments on a transit gateway
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_RejectNetworkFirewallTransitGatewayAttachment.html
+     */
+    toRejectNetworkFirewallTransitGatewayAttachment(): this;
     /**
      * Grants permission to start an analysis report on a firewall
      *
@@ -321,6 +416,14 @@ export declare class NetworkFirewall extends PolicyStatement {
      * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UntagResource.html
      */
     toUntagResource(): this;
+    /**
+     * Grants permission to add or remove availability zone change protection for a firewall
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_UpdateAvailabilityZoneChangeProtection.html
+     */
+    toUpdateAvailabilityZoneChangeProtection(): this;
     /**
      * Grants permission to modify firewall analysis settings of a firewall
      *
@@ -472,6 +575,20 @@ export declare class NetworkFirewall extends PolicyStatement {
      * - .ifAwsResourceTag()
      */
     onTLSInspectionConfiguration(name: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type VpcEndpointAssociation to the statement
+     *
+     * https://docs.aws.amazon.com/network-firewall/latest/APIReference/API_VpcEndpointAssociation.html
+     *
+     * @param name - Identifier for the name.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     */
+    onVpcEndpointAssociation(name: string, account?: string, region?: string, partition?: string): this;
     /**
      * Filters access by on the allowed set of values for each of the tags
      *
@@ -482,6 +599,7 @@ export declare class NetworkFirewall extends PolicyStatement {
      * - .toCreateFirewallPolicy()
      * - .toCreateRuleGroup()
      * - .toCreateTLSInspectionConfiguration()
+     * - .toCreateVpcEndpointAssociation()
      * - .toTagResource()
      *
      * @param tagKey The tag key to check
@@ -500,6 +618,7 @@ export declare class NetworkFirewall extends PolicyStatement {
      * - StatefulRuleGroup
      * - StatelessRuleGroup
      * - TLSInspectionConfiguration
+     * - VpcEndpointAssociation
      *
      * @param tagKey The tag key to check
      * @param value The value(s) to check
@@ -516,6 +635,7 @@ export declare class NetworkFirewall extends PolicyStatement {
      * - .toCreateFirewallPolicy()
      * - .toCreateRuleGroup()
      * - .toCreateTLSInspectionConfiguration()
+     * - .toCreateVpcEndpointAssociation()
      * - .toTagResource()
      * - .toUntagResource()
      *