@jjrawlins/cdk-ami-builder 0.0.19 → 0.0.20

package/node_modules/cdk-iam-floyd/lib/generated/policy-statements/sagemaker.d.ts

@@ -37,6 +37,30 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AssociateTrialComponent.html
      */
     toAssociateTrialComponent(): this;
+    /**
+     * Grants permission to attach an Amazon EBS volume to a SageMaker HyperPod cluster node
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - ec2:AttachVolume
+     * - ec2:DescribeVolumes
+     * - eks:DescribeCluster
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AttachClusterNodeVolume.html
+     */
+    toAttachClusterNodeVolume(): this;
+    /**
+     * Grants permission to add multiple nodes at a time to a SageMaker HyperPod cluster
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - eks:DescribeCluster
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchAddClusterNodes.html
+     */
+    toBatchAddClusterNodes(): this;
     /**
      * Grants permission to batch delete SageMaker HyperPod cluster nodes
      *
@@ -223,6 +247,10 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifVpcSubnets()
      *
      * Dependent actions:
+     * - ec2:DescribeImages
+     * - ec2:DescribeSnapshots
+     * - ec2:ModifyImageAttribute
+     * - ec2:ModifySnapshotAttribute
      * - eks:AssociateAccessPolicy
      * - eks:CreateAccessEntry
      * - eks:DeleteAccessEntry
@@ -542,6 +570,14 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHub.html
      */
     toCreateHub(): this;
+    /**
+     * Grants permission to generate S3 presigned URLs with GetObject permission for accessing model artifacts
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHubContentPresignedUrls.html
+     */
+    toCreateHubContentPresignedUrls(): this;
     /**
      * Grants permission to create hub content reference
      *
@@ -918,6 +954,13 @@ export declare class Sagemaker extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
+     * Dependent actions:
+     * - sagemaker:AddTags
+     *
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstanceLifecycleConfig.html
      */
     toCreateNotebookInstanceLifecycleConfig(): this;
@@ -1074,6 +1117,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifImageArns()
      * - .ifImageVersionArns()
      * - .ifOwnerUserProfileArn()
+     * - .ifRemoteAccess()
      * - .ifSpaceSharingType()
      *
      * Dependent actions:
@@ -1813,6 +1857,22 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeCluster.html
      */
     toDescribeCluster(): this;
+    /**
+     * Grants permission to return information about an Event within a SageMaker HyperPod cluster
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeClusterEvent.html
+     */
+    toDescribeClusterEvent(): this;
+    /**
+     * Grants permission to get information about the inference operator for a SageMaker HyperPod cluster
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod-inference.html
+     */
+    toDescribeClusterInference(): this;
     /**
      * Grants permission to return information about a SageMaker HyperPod cluster node
      *
@@ -2170,6 +2230,9 @@ export declare class Sagemaker extends PolicyStatement {
      *
      * Access Level: Read
      *
+     * Possible conditions:
+     * - .ifPipelineVersionId()
+     *
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribePipeline.html
      */
     toDescribePipeline(): this;
@@ -2205,6 +2268,14 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeProject.html
      */
     toDescribeProject(): this;
+    /**
+     * Grants permission to return information about a specified Reserved Capacity
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeReservedCapacity.html
+     */
+    toDescribeReservedCapacity(): this;
     /**
      * Grants permission to describe a shared model in a SageMaker Studio application
      *
@@ -2301,6 +2372,19 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeWorkteam.html
      */
     toDescribeWorkteam(): this;
+    /**
+     * Grants permission to detach an Amazon EBS volume from a SageMaker HyperPod cluster node
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - ec2:DescribeVolumes
+     * - ec2:DetachVolume
+     * - eks:DescribeCluster
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DetachClusterNodeVolume.html
+     */
+    toDetachClusterNodeVolume(): this;
     /**
      * Grants permission to disable a SageMaker Service Catalog Portfolio
      *
@@ -2519,6 +2603,14 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListCandidatesForAutoMLJob.html
      */
     toListCandidatesForAutoMLJob(): this;
+    /**
+     * Grants permission to list events within a SageMaker HyperPod cluster
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListClusterEvents.html
+     */
+    toListClusterEvents(): this;
     /**
      * Grants permission to list nodes within a SageMaker HyperPod cluster
      *
@@ -2959,6 +3051,14 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListPipelineParametersForExecution.html
      */
     toListPipelineParametersForExecution(): this;
+    /**
+     * Grants permission to list versions of a pipeline
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListPipelineVersions.html
+     */
+    toListPipelineVersions(): this;
     /**
      * Grants permission to list pipelines
      *
@@ -3103,6 +3203,14 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListTrials.html
      */
     toListTrials(): this;
+    /**
+     * Grants permission to list all UltraServers in a specified Reserved Capacity
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListUltraServersByReservedCapacity.html
+     */
+    toListUltraServersByReservedCapacity(): this;
     /**
      * Grants permission to list the UserProfiles in your account
      *
@@ -3302,9 +3410,20 @@ export declare class Sagemaker extends PolicyStatement {
      *
      * Access Level: Write
      *
+     * Possible conditions:
+     * - .ifPipelineVersionId()
+     *
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_StartPipelineExecution.html
      */
     toStartPipelineExecution(): this;
+    /**
+     * Grants permission to start a remote session for a SageMaker space
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_StartSession.html
+     */
+    toStartSession(): this;
     /**
      * Grants permission to stop a running AutoML job
      *
@@ -3484,17 +3603,37 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifVpcSubnets()
      *
      * Dependent actions:
+     * - ec2:DescribeImages
+     * - ec2:DescribeSnapshots
+     * - ec2:ModifyImageAttribute
+     * - ec2:ModifySnapshotAttribute
      * - eks:AssociateAccessPolicy
      * - eks:CreateAccessEntry
      * - eks:DeleteAccessEntry
      * - eks:DescribeAccessEntry
      * - eks:DescribeCluster
      * - iam:PassRole
+     * - sagemaker:BatchAddClusterNodes
      * - sagemaker:BatchDeleteClusterNodes
      *
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdateCluster.html
      */
     toUpdateCluster(): this;
+    /**
+     * Grants permission to update the inference operator for a SageMaker HyperPod cluster
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - eks:AssociateAccessPolicy
+     * - eks:DescribeCluster
+     * - eks:ListAssociatedAccessPolicies
+     * - iam:PassRole
+     * - sagemaker:DescribeCluster
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod-inference.html
+     */
+    toUpdateClusterInference(): this;
     /**
      * Grants permission to update a cluster scheduler config
      *
@@ -3509,6 +3648,10 @@ export declare class Sagemaker extends PolicyStatement {
      * Access Level: Write
      *
      * Dependent actions:
+     * - ec2:DescribeImages
+     * - ec2:DescribeSnapshots
+     * - ec2:ModifyImageAttribute
+     * - ec2:ModifySnapshotAttribute
      * - eks:DescribeCluster
      *
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdateClusterSoftware.html
@@ -3789,6 +3932,17 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdatePipelineExecution.html
      */
     toUpdatePipelineExecution(): this;
+    /**
+     * Grants permission to update a pipeline version
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifPipelineVersionId()
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdatePipelineVersion.html
+     */
+    toUpdatePipelineVersion(): this;
     /**
      * Grants permission to update a Project
      *
@@ -3819,6 +3973,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifImageArns()
      * - .ifImageVersionArns()
      * - .ifOwnerUserProfileArn()
+     * - .ifRemoteAccess()
      * - .ifSpaceSharingType()
      *
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdateSpace.html
@@ -4214,6 +4369,10 @@ export declare class Sagemaker extends PolicyStatement {
      * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
      * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
      * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     * - .ifResourceTag()
      */
     onNotebookInstanceLifecycleConfig(notebookInstanceLifecycleConfigName: string, account?: string, region?: string, partition?: string): this;
     /**
@@ -4700,6 +4859,10 @@ export declare class Sagemaker extends PolicyStatement {
      * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
      * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
      * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     * - .ifResourceTag()
      */
     onPipelineExecution(pipelineName: string, randomString: string, account?: string, region?: string, partition?: string): this;
     /**
@@ -4936,6 +5099,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .toCreateModelQualityJobDefinition()
      * - .toCreateMonitoringSchedule()
      * - .toCreateNotebookInstance()
+     * - .toCreateNotebookInstanceLifecycleConfig()
      * - .toCreateOptimizationJob()
      * - .toCreatePartnerApp()
      * - .toCreatePipeline()
@@ -4989,6 +5153,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - app-image-config
      * - studio-lifecycle-config
      * - notebook-instance
+     * - notebook-instance-lifecycle-config
      * - code-repository
      * - image
      * - algorithm
@@ -5019,6 +5184,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - experiment-trial-component
      * - feature-group
      * - pipeline
+     * - pipeline-execution
      * - artifact
      * - context
      * - action
@@ -5085,6 +5251,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .toCreateModelQualityJobDefinition()
      * - .toCreateMonitoringSchedule()
      * - .toCreateNotebookInstance()
+     * - .toCreateNotebookInstanceLifecycleConfig()
      * - .toCreateOptimizationJob()
      * - .toCreatePartnerApp()
      * - .toCreatePipeline()
@@ -5593,6 +5760,33 @@ export declare class Sagemaker extends PolicyStatement {
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
      */
     ifOwnerUserProfileArn(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access to specific version IDs of a Sagemaker pipeline
+     *
+     * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
+     *
+     * Applies to actions:
+     * - .toDescribePipeline()
+     * - .toStartPipelineExecution()
+     * - .toUpdatePipelineVersion()
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifPipelineVersionId(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the remote access flag associated with the space in the request
+     *
+     * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
+     *
+     * Applies to actions:
+     * - .toCreateSpace()
+     * - .toUpdateSpace()
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifRemoteAccess(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the preface string for a tag key and value pair attached to a resource
      *
@@ -5628,6 +5822,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - app-image-config
      * - studio-lifecycle-config
      * - notebook-instance
+     * - notebook-instance-lifecycle-config
      * - code-repository
      * - image
      * - algorithm
@@ -5658,6 +5853,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - experiment-trial-component
      * - feature-group
      * - pipeline
+     * - pipeline-execution
      * - artifact
      * - context
      * - action
@@ -5673,7 +5869,7 @@ export declare class Sagemaker extends PolicyStatement {
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
-    ifResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
+    ifResourceTagTagKey(tagKey: string, value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the root access associated with the resource in the request
      *