@jjrawlins/cdk-ami-builder 0.0.19 → 0.0.21

package/node_modules/cdk-iam-floyd/lib/generated/policy-statements/s3express.d.ts

@@ -23,6 +23,8 @@ export declare class S3express extends PolicyStatement {
      * - .ifSignatureversion()
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html
      */
@@ -39,12 +41,14 @@ export declare class S3express extends PolicyStatement {
      * - .ifSignatureversion()
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html
      */
     toCreateBucket(): this;
     /**
-     * Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, ect
+     * Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, etc
      *
      * Access Level: Write
      *
@@ -59,6 +63,7 @@ export declare class S3express extends PolicyStatement {
      * - .ifXAmzServerSideEncryption()
      * - .ifXAmzServerSideEncryptionAwsKmsKeyId()
      * - .ifAllAccessRestrictedToLocalZoneGroup()
+     * - .ifPermissions()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html
      */
@@ -276,6 +281,21 @@ export declare class S3express extends PolicyStatement {
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListDirectoryBuckets.html
      */
     toListAllMyDirectoryBuckets(): this;
+    /**
+     * Grants permission to lists all of the tags for a specified resource
+     *
+     * Access Level: List
+     *
+     * Possible conditions:
+     * - .ifAuthType()
+     * - .ifResourceAccount()
+     * - .ifSignatureversion()
+     * - .ifTlsVersion()
+     * - .ifXAmzContentSha256()
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListTagsForResource.html
+     */
+    toListTagsForResource(): this;
     /**
      * Grants permission to associate an access policy with a specified access point
      *
@@ -357,6 +377,39 @@ export declare class S3express extends PolicyStatement {
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html
      */
     toPutLifecycleConfiguration(): this;
+    /**
+     * Grants permission to create a new user-defined tag or update an existing tag
+     *
+     * Access Level: Tagging
+     *
+     * Possible conditions:
+     * - .ifAuthType()
+     * - .ifResourceAccount()
+     * - .ifSignatureversion()
+     * - .ifTlsVersion()
+     * - .ifXAmzContentSha256()
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_TagResource.html
+     */
+    toTagResource(): this;
+    /**
+     * Grants permission to remove the specified user-defined tags from an S3 resource
+     *
+     * Access Level: Tagging
+     *
+     * Possible conditions:
+     * - .ifAuthType()
+     * - .ifResourceAccount()
+     * - .ifSignatureversion()
+     * - .ifTlsVersion()
+     * - .ifXAmzContentSha256()
+     * - .ifAwsTagKeys()
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UntagResource.html
+     */
+    toUntagResource(): this;
     protected accessLevelList: AccessLevelList;
     /**
      * Adds a resource of type bucket to the statement
@@ -367,6 +420,10 @@ export declare class S3express extends PolicyStatement {
      * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
      * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
      * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     * - .ifBucketTag()
      */
     onBucket(bucketName: string, account?: string, region?: string, partition?: string): this;
     /**
@@ -378,8 +435,56 @@ export declare class S3express extends PolicyStatement {
      * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
      * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
      * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     * - .ifAccessPointTag()
      */
     onAccesspoint(accessPointName: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Filters access by the tags that are passed in the request
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html#example-user-policy-request-tag
+     *
+     * Applies to actions:
+     * - .toCreateAccessPoint()
+     * - .toCreateBucket()
+     * - .toTagResource()
+     *
+     * @param tagKey The tag key to check
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the tags associated with the resource
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html#example-user-policy-resource-tag
+     *
+     * Applies to resource types:
+     * - bucket
+     * - accesspoint
+     *
+     * @param tagKey The tag key to check
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the tag keys that are passed in the request
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html#example-user-policy-tag-keys
+     *
+     * Applies to actions:
+     * - .toCreateAccessPoint()
+     * - .toCreateBucket()
+     * - .toTagResource()
+     * - .toUntagResource()
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAwsTagKeys(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the network origin (Internet or VPC)
      *
@@ -400,6 +505,19 @@ export declare class S3express extends PolicyStatement {
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
     ifAccessPointNetworkOrigin(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by tag key-value pairs attached to the access point
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-db-tagging.html#example-access-points-db-policy-bucket-tag
+     *
+     * Applies to resource types:
+     * - accesspoint
+     *
+     * @param tagKey The tag key to check
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAccessPointTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by AWS Local Zone network border group(s) provided in this condition key
      *
@@ -410,6 +528,19 @@ export declare class S3express extends PolicyStatement {
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
     ifAllAccessRestrictedToLocalZoneGroup(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by tag key-value pairs attached to the bucket
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html#example-policy-bucket-tag
+     *
+     * Applies to resource types:
+     * - bucket
+     *
+     * @param tagKey The tag key to check
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifBucketTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the AWS Account ID that owns the access point
      *
@@ -451,7 +582,7 @@ export declare class S3express extends PolicyStatement {
      */
     ifDataAccessPointArn(value: string | string[], operator?: Operator | string): this;
     /**
-     * Filters access by a specific Availability Zone ID
+     * Filters access by a specific Availability Zone or Local Zone ID
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-express-zonal-policy-keys.html#example-location-name
      *
@@ -466,6 +597,9 @@ export declare class S3express extends PolicyStatement {
     /**
      * Filters access by the permission requested by Access Point Scope configuration, such as GetObject, PutObject
      *
+     * Applies to actions:
+     * - .toCreateSession()
+     *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
@@ -492,11 +626,14 @@ export declare class S3express extends PolicyStatement {
      * - .toGetLifecycleConfiguration()
      * - .toListAccessPointsForDirectoryBuckets()
      * - .toListAllMyDirectoryBuckets()
+     * - .toListTagsForResource()
      * - .toPutAccessPointPolicy()
      * - .toPutAccessPointScope()
      * - .toPutBucketPolicy()
      * - .toPutEncryptionConfiguration()
      * - .toPutLifecycleConfiguration()
+     * - .toTagResource()
+     * - .toUntagResource()
      *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
@@ -534,11 +671,14 @@ export declare class S3express extends PolicyStatement {
      * - .toGetLifecycleConfiguration()
      * - .toListAccessPointsForDirectoryBuckets()
      * - .toListAllMyDirectoryBuckets()
+     * - .toListTagsForResource()
      * - .toPutAccessPointPolicy()
      * - .toPutAccessPointScope()
      * - .toPutBucketPolicy()
      * - .toPutEncryptionConfiguration()
      * - .toPutLifecycleConfiguration()
+     * - .toTagResource()
+     * - .toUntagResource()
      *
      * @param value The value(s) to check
      * @param operator Works with [numeric operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_Numeric). **Default:** `NumericEquals`
@@ -566,11 +706,14 @@ export declare class S3express extends PolicyStatement {
      * - .toGetLifecycleConfiguration()
      * - .toListAccessPointsForDirectoryBuckets()
      * - .toListAllMyDirectoryBuckets()
+     * - .toListTagsForResource()
      * - .toPutAccessPointPolicy()
      * - .toPutAccessPointScope()
      * - .toPutBucketPolicy()
      * - .toPutEncryptionConfiguration()
      * - .toPutLifecycleConfiguration()
+     * - .toTagResource()
+     * - .toUntagResource()
      *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
@@ -610,11 +753,14 @@ export declare class S3express extends PolicyStatement {
      * - .toGetLifecycleConfiguration()
      * - .toListAccessPointsForDirectoryBuckets()
      * - .toListAllMyDirectoryBuckets()
+     * - .toListTagsForResource()
      * - .toPutAccessPointPolicy()
      * - .toPutAccessPointScope()
      * - .toPutBucketPolicy()
      * - .toPutEncryptionConfiguration()
      * - .toPutLifecycleConfiguration()
+     * - .toTagResource()
+     * - .toUntagResource()
      *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
@@ -642,11 +788,14 @@ export declare class S3express extends PolicyStatement {
      * - .toGetLifecycleConfiguration()
      * - .toListAccessPointsForDirectoryBuckets()
      * - .toListAllMyDirectoryBuckets()
+     * - .toListTagsForResource()
      * - .toPutAccessPointPolicy()
      * - .toPutAccessPointScope()
      * - .toPutBucketPolicy()
      * - .toPutEncryptionConfiguration()
      * - .toPutLifecycleConfiguration()
+     * - .toTagResource()
+     * - .toUntagResource()
      *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`