@jjrawlins/cdk-ami-builder 0.0.19 → 0.0.20

package/node_modules/cdk-iam-floyd/lib/generated/aws-managed-policies/iam-floyd.d.ts

@@ -62,8 +62,14 @@ export declare class AwsManagedPolicy {
     static AmazonAuroraDSQLFullAccess: string;
     /** Provides read only access to Aurora DSQL */
     static AmazonAuroraDSQLReadOnlyAccess: string;
+    /** Provides Bedrock Model inference permission to Bedrock agent core memory */
+    static AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicy: string;
     /** Provides full access to Amazon Bedrock as well as limited access to related services that are required by it */
     static AmazonBedrockFullAccess: string;
+    /** Provides limited access to Amazon Bedrock as well as to related services that are required by it */
+    static AmazonBedrockLimitedAccess: string;
+    /** Provides limited access to Amazon Bedrock Marketplace as well as to related services that are required by it */
+    static AmazonBedrockMarketplaceAccess: string;
     /** Provides read only access to Amazon Bedrock */
     static AmazonBedrockReadOnly: string;
     /** Defines the maximum permissions of IAM roles that Amazon Bedrock Studio creates for operating Amazon Bedrock Studio resources. */
@@ -248,6 +254,8 @@ export declare class AwsManagedPolicy {
     static AmazonEC2ContainerServiceRole: string;
     /** Provides full access to Amazon EC2 via the AWS Management Console. */
     static AmazonEC2FullAccess: string;
+    /** Provides read-only access to scan all supported resource types for relevant data when using DescribeImageReferences. */
+    static AmazonEC2ImageReferencesAccessPolicy: string;
     /** Provides read only access to Amazon EC2 via the AWS Management Console. */
     static AmazonEC2ReadOnlyAccess: string;
     /** Provides EC2 access to S3 bucket to download revision. This role is needed by the CodeDeploy agent on EC2 instances. */
@@ -268,6 +276,8 @@ export declare class AwsManagedPolicy {
     static AmazonECSFullAccess: string;
     /** Policy to enable Amazon ECS Compute to manage your EC2 instances and related resources as part of ECS managed instances */
     static AmazonECSComputeServiceRolePolicy: string;
+    /** Provides access to other AWS service resources required to manage load balancers associated with ECS workloads on your behalf. */
+    static AmazonECSInfrastructureRolePolicyForLoadBalancers: string;
     /** Provides administrative access to Private Certificate Authority, AWS Secrets Manager and other AWS Services required to manage ECS Service Connect TLS features on your behalf. */
     static AmazonECSInfrastructureRolePolicyForServiceConnectTransportLayerSecurity: string;
     /** Provides access to other AWS service resources required to manage volumes associated with ECS workloads on your behalf. */
@@ -470,6 +480,8 @@ export declare class AwsManagedPolicy {
     static AmazonInspector2AgentlessServiceRolePolicy: string;
     /** Provides full access to Amazon Inspector and access to other related services such as organizations. */
     static AmazonInspector2FullAccess: string;
+    /** Provides full access to Amazon Inspector and access to other related services such as organizations with restrictive organizational access. */
+    static AmazonInspector2FullAccessV2: string;
     /** This is a managed policy that customer should attach to their roles to communicate with inspector service for CIS scans */
     static AmazonInspector2ManagedCisPolicy: string;
     /** Provides read only access to the Amazon inspector2 service and relevant support services */
@@ -812,8 +824,12 @@ export declare class AwsManagedPolicy {
     static AmazonSageMakerGeospatialFullAccess: string;
     /** Provides access to AWS services that are required to run SageMaker GroundTruth Labeling job */
     static AmazonSageMakerGroundTruthExecution: string;
+    /** This policy provides administrative privileges required for setting up SageMaker HyperPod observability. It enables access to Amazon Managed Prometheus, Amazon Managed Grafana and EKS Addons. The policy also includes broad access to Grafana HTTP APIs through ServiceAccountTokens across all Amazon Managed Grafana workspaces in your account. */
+    static AmazonSageMakerHyperPodObservabilityAdminAccess: string;
     /** This policy grants permissions to Amazon SageMaker HyperPod to related AWS services such as Amazon EKS, Amazon CloudWatch etc. */
     static AmazonSageMakerHyperPodServiceRolePolicy: string;
+    /** This policy provides administrative permissions required to set up the SageMaker HyperPod training operator. It enables access to Amazon SageMaker HyperPod and EKS add-ons. The policy includes permissions to describe the SageMaker HyperPod resources in your account. */
+    static AmazonSageMakerHyperPodTrainingOperatorAccess: string;
     /** Provides access to create Amazon Augmented AI FlowDefinition resources against any Workteam. */
     static AmazonSageMakerMechanicalTurkAccess: string;
     /** This AWS managed policy grants permissions needed to use all Amazon SageMaker Governance features. The policy also provides select access to related services (e.g., S3, KMS). */
@@ -1180,6 +1196,8 @@ export declare class AwsManagedPolicy {
     static AWSBatchServiceEventTargetRole: string;
     /** Policy for AWS Batch service role which allows access to related services including EC2, Autoscaling, EC2 Container service and Cloudwatch Logs. */
     static AWSBatchServiceRole: string;
+    /** Provides access for AWS Batch to queue and manage Amazon SageMaker workloads */
+    static AWSBatchServiceRolePolicyForSageMaker: string;
     /** A service linked role to provide Billing and Cost Management Data Exports access to AWS service data for exporting the data to a target location, such as Amazon S3, on behalf of a customer. */
     static AWSBCMDataExportsServiceRolePolicy: string;
     /** Use the AWSBillingConductorFullAccess managed policy to allow complete access to AWS Billing Conductor (ABC) console and APIs. This policy allows users to list, create and delete ABC resources. */
@@ -1188,6 +1206,8 @@ export declare class AwsManagedPolicy {
     static AWSBillingConductorReadOnlyAccess: string;
     /** Allows users to view bills on the Billing Console. */
     static AWSBillingReadOnlyAccess: string;
+    /** Allows billing service to validate access to billing view data for derived billing views */
+    static AWSBillingServiceRolePolicy: string;
     /** This policy gives permissions to control AWS resources. For example, to start and stop EC2 or RDS instances by executing AWS Systems Manager (SSM) scripts. */
     static AWSBudgetsActionsRolePolicyForResourceAdministrationWithSSM: string;
     /** Provides full access to AWS Budgets Actions including using Budgets Actions to control states of running AWS resources via AWS Management Console */
@@ -1424,6 +1444,8 @@ export declare class AwsManagedPolicy {
     static AWSDirectoryServiceFullAccess: string;
     /** Provides read only access to AWS Directory Service. */
     static AWSDirectoryServiceReadOnlyAccess: string;
+    /** Policy for the Directory Service Service Linked Role */
+    static AWSDirectoryServiceServiceRolePolicy: string;
     /** Provides write access to AWS resources required for AWS Discovery Continuous Export */
     static AWSDiscoveryContinuousExportFirehosePolicy: string;
     /** Allows DMS Fleet Advisor to manage CloudWatch metrics on your behalf. */
@@ -1788,6 +1810,10 @@ export declare class AwsManagedPolicy {
     static AWSManagedServicesSelfServiceReportingServiceRolePolicy: string;
     /** Allows AWS Managed Services to manage deployment toolkit on your behalf. */
     static AWSManagedServicesDeploymentToolkitPolicy: string;
+    /** Provides full access to configure and customize the AWS Management Console */
+    static AWSManagementConsoleAdministratorAccess: string;
+    /** Grants access to essential AWS Management Console features and user experience (UX) capabilities for non-administrative users. */
+    static AWSManagementConsoleBasicUserAccess: string;
     /** Allows AWS Marketplace to copy your Amazon Machine Images (AMIs) in order to list them on AWS Marketplace */
     static AWSMarketplaceAmiIngestion: string;
     /** Allows AWS Marketplace to create and manage seller deployment parameters for the products that you subscribe to on AWS Marketplace. */
@@ -1874,20 +1900,8 @@ export declare class AwsManagedPolicy {
     static AWSNetworkManagerServiceRolePolicy: string;
     /** Provides access to manage AWS Config Configuration Recorder, manage AWS Config Configuration Aggregator, create AWS Config Service Linked Role for Configuration Recorder functionality, consume recorder configuration data, and read AWS Organizations data for organizational features. */
     static AWSObservabilityAdminServiceRolePolicy: string;
-    /** Provides full access to AWS OpsWorks. */
-    static AWSOpsWorksFullAccess: string;
-    /** Enables OpsWorks instances with the CWLogs integration enabled to ship logs and create required log groups */
-    static AWSOpsWorksCloudWatchLogs: string;
-    /** Provides S3 access for instances launched by OpsWorks CM. */
-    static AWSOpsWorksCMInstanceProfileRole: string;
-    /** Service Role Policy to be used for Creating OpsWorks CM servers. */
-    static AWSOpsWorksCMServiceRole: string;
-    /** Provides access for an Amazon EC2 instance to register with an AWS OpsWorks stack. */
-    static AWSOpsWorksInstanceRegistration: string;
-    /** Policy to enable registration of EC2 instances via the OpsWorks CLI */
-    static AWSOpsWorksRegisterCLIEC2: string;
-    /** Policy to enable registration of On-Premises instances via the OpsWorks CLI */
-    static AWSOpsWorksRegisterCLIOnPremises: string;
+    /** Provides access to manage AWS Config recorder resource and telemetry settings on AWS resources including logs, metrics. */
+    static AWSObservabilityAdminTelemetryEnablementServiceRolePolicy: string;
     /** Provides full access to AWS Organizations. */
     static AWSOrganizationsFullAccess: string;
     /** Provides read-only access to AWS Organizations. */
@@ -1998,6 +2012,10 @@ export declare class AwsManagedPolicy {
     static AWSQuickSetupSSMLifecycleManagementExecutionPolicy: string;
     /** This policy grants permissions that allow Systems Manager to create prerequisites such as IAM roles required for Systems Manager onboarding. */
     static AWSQuickSetupSSMManageResourcesExecutionPolicy: string;
+    /** This policy grants permissions that allow principals to run the AWSQuickSetupType-StartSSMAssociations Automation runbook, which starts State Manager Associations. */
+    static AWSQuickSetupStartSSMAssociationsExecutionPolicy: string;
+    /** The managed policy AWSQuickSetupStartStopInstancesExecutionPolicy provides permissions for Quick Setup to start and stop Amazon EC2 instances on a schedule. This policy is used with the Quick Setup scheduler configuration type. */
+    static AWSQuickSetupStartStopInstancesExecutionPolicy: string;
     /** Provides the set of permissions required to perform QuickSight Asset Bundle Export Operations */
     static AWSQuickSightAssetBundleExportPolicy: string;
     /** Provides the set of permissions required to perform QuickSight Asset Bundle Import Operations */
@@ -2062,6 +2080,10 @@ export declare class AwsManagedPolicy {
     static AWSRoboMakerServicePolicy: string;
     /** RoboMaker service policy */
     static AWSRoboMakerServiceRolePolicy: string;
+    /** Provides all permissions to IAM Roles Anywhere resources, including but not limited to: CreateProfile, DeleteTrustAnchor, DisableCRL, ResetNotificationSettings. */
+    static AWSRolesAnywhereFullAccess: string;
+    /** Provides read-only permissions to IAM Roles Anywhere resources, including but not limited to: GetTrustAnchor, ListProfiles, GetCRL. There will be no other permissions for other services included in this policy. */
+    static AWSRolesAnywhereReadOnly: string;
     /** Allows IAM Roles Anywhere to publish service/usage metrics to CloudWatch and check the status of Private Certificate Authorities on your behalf. */
     static AWSRolesAnywhereServicePolicy: string;
     /** Allow Amazon S3 on Outposts service to manage EC2 network resources on your behalf. */
@@ -2246,6 +2268,8 @@ export declare class AwsManagedPolicy {
     static AWSTransferLoggingAccess: string;
     /** Provide readonly access to AWS Transfer services. */
     static AWSTransferReadOnlyAccess: string;
+    /** Enables the AWS Transform service to deploy transformed .NET applications by creating and managing AWS resources. This policy grants permissions to provision infrastructure, manage compute resources, and configure deployment settings across various AWS services. */
+    static AWSTransformApplicationDeploymentPolicy: string;
     /** Provides full access to AWS Trusted Advisor Priority. This policy also enables the user to add Trusted Advisor as a trusted service with AWS Organizations and to specify delegated administrator accounts for Trusted Advisor Priority. */
     static AWSTrustedAdvisorPriorityFullAccess: string;
     /** Provides read-only access to AWS Trusted Advisor Priority. This includes permission to view the delegated administrator accounts. */
@@ -2298,10 +2322,16 @@ export declare class AwsManagedPolicy {
     static AWSXrayWriteOnlyAccess: string;
     /** Provides administrative access for ARC zonal shift practice runs, and access to CloudWatch alarm statuses to monitor practice runs. */
     static AWSZonalAutoshiftPracticeRunSLRPolicy: string;
+    /** Provides read-only access to the APIs needed to support zone-group access-management for organizations. */
+    static AWSZoneGroupAccessManagementServiceRolePolicy: string;
     /** Provides access for the AWS Batch service to manage the required resources, including Amazon EC2 and Amazon ECS resources. */
     static BatchServiceRolePolicy: string;
+    /** Provides full access to Bedrock AgentCore as well as limited access to related services */
+    static BedrockAgentCoreFullAccess: string;
     /** Grants permissions for billing and cost management. This includes viewing account usage and viewing and modifying budgets and payment methods. */
     static Billing: string;
+    /** Allows Budgets to verify access to Billing Views shared across account boundaries. */
+    static BudgetsServiceRolePolicy: string;
     /** Amazon Certificate Manager Service Role Policy */
     static CertificateManagerServiceRolePolicy: string;
     /** Policy to enable AWS Client VPN to manage your Client VPN endpoint connections. */
@@ -2620,6 +2650,10 @@ export declare class AwsManagedPolicy {
     static ROSAManageSubscription: string;
     /** Allows Red Hat OpenShift Service on AWS (ROSA) to manage cluster EC2 instances as worker nodes, including permission to configure security groups and tag instances and volumes. This policy also allows for the use of EC2 instances with disk encryption provided by AWS Key Management Service (KMS) keys. */
     static ROSANodePoolManagementPolicy: string;
+    /** Allows the Red Hat OpenShift Service on AWS (ROSA) installer to configure VPC Endpoints and Security Groups. Intended to be used on a shared VPC. */
+    static ROSASharedVPCEndpointPolicy: string;
+    /** Allows the Red Hat OpenShift Service on AWS (ROSA) installer to configure Route53 records. Intended to be used on a shared VPC. */
+    static ROSASharedVPCRoute53Policy: string;
     /** Provides ROSA site reliability engineering (SRE) the permissions needed to initially observe, diagnose, and support AWS resources associated with Red Hat OpenShift Service on AWS (ROSA) clusters, including the ability to change ROSA cluster node state. */
     static ROSASRESupportPolicy: string;
     /** Allows Red Hat OpenShift Service on AWS (ROSA) worker nodes in your account read-only access to Amazon EC2 instances and AWS Regions for compute node lifecycle management. */
@@ -2632,6 +2666,14 @@ export declare class AwsManagedPolicy {
     static S3StorageLensServiceRolePolicy: string;
     /** Provides access required to unlock a S3 bucket policy using the Security Token Service (STS) AssumeRoot API. Use this managed policy only with the STS AssumeRoot action. */
     static S3UnlockBucketPolicy: string;
+    /** Provides initial administrative and individual setup privileges for Amazon SageMaker Unified Studio via the AWS Management Console and SDK. Allows launching of SageMaker Unified Studio Portal. */
+    static SageMakerStudioAdminIAMConsolePolicy: string;
+    /** Administrative execution policy for using IAM roles with SageMaker Unified Studio. Allows admins to provision, manage and access resources in your account (excluding access to data resources) for IAM-based usage of SageMaker Unified Studio. */
+    static SageMakerStudioAdminIAMDefaultExecutionPolicy: string;
+    /** Administrative execution policy for using IAM roles with SageMaker Unified Studio. Allows admins to provision, manage and access resources in the local account (including broad access to all APIs in data services like S3, Glue, CloudWatch Logs, and others) for IAM-based usage of SageMaker Unified Studio. */
+    static SageMakerStudioAdminIAMPermissiveExecutionPolicy: string;
+    /** This IAM policy grants an IAM role full access to AWS Glue Data Catalog (metadata) and Amazon S3 (actual data) for data lake operations, with access scoped by account, and role tags. */
+    static SageMakerStudioAdminProjectUserRolePolicy: string;
     /** Allows Amazon Bedrock Agents to access Amazon Bedrock models and other resources attached to an agent in SageMaker Studio. */
     static SageMakerStudioBedrockAgentServiceRolePolicy: string;
     /** Provides access to an Amazon Bedrock chat agent app's configuration and Amazon Bedrock agent in SageMaker Studio. */
@@ -2668,6 +2710,12 @@ export declare class AwsManagedPolicy {
     static SageMakerStudioProjectUserRolePolicy: string;
     /** Amazon SageMaker Studio uses this policy when running query executions on federated connections. */
     static SageMakerStudioQueryExecutionRolePolicy: string;
+    /** Provides individual setup privileges for Amazon SageMaker Unified Studio via the AWS Management Console and SDK. Allows launching of SageMaker Unified Studio Portal. */
+    static SageMakerStudioUserIAMConsolePolicy: string;
+    /** Execution policy for using IAM roles with SageMaker Unified Studio. Allows users to access resources in the local account (excluding access to data resources) for IAM-based usage of SageMaker Unified Studio. */
+    static SageMakerStudioUserIAMDefaultExecutionPolicy: string;
+    /** Execution policy for using IAM roles with SageMaker Unified Studio. Allows users to access resources in your account (including broad access to all APIs in data services like S3, Glue, CloudWatch Logs, and others) for IAM-based usage of SageMaker Unified Studio. */
+    static SageMakerStudioUserIAMPermissiveExecutionPolicy: string;
     /** Provides read/write access to AWS Secrets Manager via the AWS Management Console. Note: this exludes IAM actions, so combine with IAMFullAccess if rotation configuration is required. */
     static SecretsManagerReadWrite: string;
     /** The security audit template grants access to read security configuration metadata. It is useful for software that audits the configuration of an AWS account. */