cdk-iam-floyd 0.601.1 → 0.602.0

package/.eslintrc

@@ -0,0 +1,31 @@
+{
+  "extends": [
+    "eslint:recommended",
+    "plugin:@typescript-eslint/recommended-type-checked",
+    "plugin:@typescript-eslint/stylistic-type-checked",
+    "plugin:@typescript-eslint/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "plugins": ["@typescript-eslint", "deprecation"],
+  "root": true,
+  "parserOptions": {
+    "project": "./tsconfig.json",
+    "tsconfigRootDir": "."
+  },
+  "ignorePatterns": ["**/*.js", "**/*.d.ts"],
+  "rules": {
+    "no-unused-vars": "off",
+    "@typescript-eslint/no-unused-vars": [
+      "error",
+      {
+        "argsIgnorePattern": "^_",
+        "varsIgnorePattern": "^_",
+        "caughtErrorsIgnorePattern": "^_"
+      }
+    ],
+    "deprecation/deprecation": "error",
+    "prefer-template": "error",
+    "@typescript-eslint/naming-convention": "error"
+  }
+}

package/.prettierrc

@@ -0,0 +1,11 @@
+{
+  "singleQuote": true,
+  "overrides": [
+    {
+      "files": ["*.yaml", "*.yml"],
+      "options": {
+        "singleQuote": false
+      }
+    }
+  ]
+}

package/README.md

@@ -19,7 +19,7 @@ Support for:
 - 386 Services
 - 16253 Actions
 - 1750 Resource Types
-- 1689 Condition keys
+- 1692 Condition keys
 <!-- /stats -->
 
 ![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**

package/lib/collection/allowEc2InstanceDeleteByOwner.d.ts

@@ -0,0 +1,7 @@
+import * as statement from '..';
+/**
+ * Allows stopping EC2 instance only for the user who started them
+ *
+ * @param tag The tag name, where the user information will be stored - default: `Owner`
+ */
+export declare function allowEc2InstanceDeleteByOwner(tag?: string): statement.Ec2[];

package/lib/collection/index.d.ts

@@ -0,0 +1,3 @@
+export declare class Collection {
+    allowEc2InstanceDeleteByOwner(): import("..").Ec2[];
+}

package/lib/generated/accountmanagement.d.ts

@@ -0,0 +1,206 @@
+import { AccessLevelList } from '../shared/access-level';
+import { PolicyStatement, Operator } from '../shared';
+import { aws_iam as iam } from "aws-cdk-lib";
+/**
+ * Statement provider for service [account](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsaccountmanagement.html).
+ *
+ * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
+ */
+export declare class Account extends PolicyStatement {
+    servicePrefix: string;
+    /**
+     * Grants permission to close an account
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_account-permissions-ref.html
+     */
+    toCloseAccount(): this;
+    /**
+     * Grants permission to delete the alternate contacts for an account
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAlternateContactTypes()
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_DeleteAlternateContact.html
+     */
+    toDeleteAlternateContact(): this;
+    /**
+     * Grants permission to disable use of a Region
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifTargetRegion()
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_DisableRegion.html
+     */
+    toDisableRegion(): this;
+    /**
+     * Grants permission to enable use of a Region
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifTargetRegion()
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_EnableRegion.html
+     */
+    toEnableRegion(): this;
+    /**
+     * Grants permission to retrieve the account information for an account
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_account-permissions-ref.html
+     */
+    toGetAccountInformation(): this;
+    /**
+     * Grants permission to retrieve the alternate contacts for an account
+     *
+     * Access Level: Read
+     *
+     * Possible conditions:
+     * - .ifAlternateContactTypes()
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_GetAlternateContact.html
+     */
+    toGetAlternateContact(): this;
+    /**
+     * Grants permission to retrieve the challenge questions for an account
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_account-permissions-ref.html
+     */
+    toGetChallengeQuestions(): this;
+    /**
+     * Grants permission to retrieve the primary contact information for an account
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_GetContactInformation.html
+     */
+    toGetContactInformation(): this;
+    /**
+     * Grants permission to get the opt-in status of a Region
+     *
+     * Access Level: Read
+     *
+     * Possible conditions:
+     * - .ifTargetRegion()
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_GetRegionOptStatus.html
+     */
+    toGetRegionOptStatus(): this;
+    /**
+     * Grants permission to list the available Regions
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_ListRegions.html
+     */
+    toListRegions(): this;
+    /**
+     * Grants permission to modify the alternate contacts for an account
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAlternateContactTypes()
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_PutAlternateContact.html
+     */
+    toPutAlternateContact(): this;
+    /**
+     * Grants permission to modify the challenge questions for an account
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_account-permissions-ref.html
+     */
+    toPutChallengeQuestions(): this;
+    /**
+     * Grants permission to update the primary contact information for an account
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/API_PutContactInformation.html
+     */
+    toPutContactInformation(): this;
+    protected accessLevelList: AccessLevelList;
+    /**
+     * Adds a resource of type account to the statement
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-resources
+     *
+     * @param account - Account of the resource; defaults to empty string: all accounts.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onAccount(account?: string, partition?: string): this;
+    /**
+     * Adds a resource of type accountInOrganization to the statement
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-resources
+     *
+     * @param managementAccountId - Identifier for the managementAccountId.
+     * @param organizationId - Identifier for the organizationId.
+     * @param memberAccountId - Identifier for the memberAccountId.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onAccountInOrganization(managementAccountId: string, organizationId: string, memberAccountId: string, partition?: string): this;
+    /**
+     * Filters access by the resource path for an account in an organization
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAccountResourceOrgPaths(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by resource tags for an account in an organization
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys
+     *
+     * @param tagKey The tag key to check
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAccountResourceOrgTags(tagKey: string, value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by alternate contact types
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys
+     *
+     * Applies to actions:
+     * - .toDeleteAlternateContact()
+     * - .toGetAlternateContact()
+     * - .toPutAlternateContact()
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAlternateContactTypes(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by a list of Regions. Enables or disables all the Regions specified here
+     *
+     * https://docs.aws.amazon.com/accounts/latest/reference/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys
+     *
+     * Applies to actions:
+     * - .toDisableRegion()
+     * - .toEnableRegion()
+     * - .toGetRegionOptStatus()
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifTargetRegion(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Statement provider for service [account](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsaccountmanagement.html).
+     *
+     */
+    constructor(props?: iam.PolicyStatementProps);
+}

package/lib/generated/activate.d.ts

@@ -0,0 +1,65 @@
+import { AccessLevelList } from '../shared/access-level';
+import { PolicyStatement } from '../shared';
+import { aws_iam as iam } from "aws-cdk-lib";
+/**
+ * Statement provider for service [activate](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsactivate.html).
+ *
+ * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
+ */
+export declare class Activate extends PolicyStatement {
+    servicePrefix: string;
+    /**
+     * Grants permission to submit an Activate application form
+     *
+     * Access Level: Write
+     */
+    toCreateForm(): this;
+    /**
+     * Grants permission to get the AWS account contact information
+     *
+     * Access Level: Read
+     */
+    toGetAccountContact(): this;
+    /**
+     * Grants permission to get Activate tech posts and offer information
+     *
+     * Access Level: Read
+     */
+    toGetContentInfo(): this;
+    /**
+     * Grants permission to get the AWS cost information
+     *
+     * Access Level: Read
+     */
+    toGetCosts(): this;
+    /**
+     * Grants permission to get the AWS credit information
+     *
+     * Access Level: Read
+     */
+    toGetCredits(): this;
+    /**
+     * Grants permission to get the Activate member information
+     *
+     * Access Level: Read
+     */
+    toGetMemberInfo(): this;
+    /**
+     * Grants permission to get an Activate program
+     *
+     * Access Level: Read
+     */
+    toGetProgram(): this;
+    /**
+     * Grants permission to create or update the Activate member information
+     *
+     * Access Level: Write
+     */
+    toPutMemberInfo(): this;
+    protected accessLevelList: AccessLevelList;
+    /**
+     * Statement provider for service [activate](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsactivate.html).
+     *
+     */
+    constructor(props?: iam.PolicyStatementProps);
+}