cdk-iam-floyd 0.810.0 → 0.811.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -16,8 +16,8 @@
16
16
  Support for:
17
17
 
18
18
  - 451 Services
19
- - 21283 Actions
20
- - 2250 Resource Types
19
+ - 21296 Actions
20
+ - 2252 Resource Types
21
21
  - 2374 Condition keys
22
22
  <!-- /stats -->
23
23
 
@@ -204,6 +204,18 @@ export declare class Securityhub extends PolicyStatement {
204
204
  * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateConfigurationPolicy.html
205
205
  */
206
206
  toCreateConfigurationPolicy(): this;
207
+ /**
208
+ * Grants permission to create a connector based on input parameters
209
+ *
210
+ * Access Level: Write
211
+ *
212
+ * Possible conditions:
213
+ * - .ifAwsRequestTag()
214
+ * - .ifAwsTagKeys()
215
+ *
216
+ * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateConnector.html
217
+ */
218
+ toCreateConnector(): this;
207
219
  /**
208
220
  * Grants permission to create a connector V2 based on input parameters
209
221
  *
@@ -288,6 +300,14 @@ export declare class Securityhub extends PolicyStatement {
288
300
  * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteConfigurationPolicy.html
289
301
  */
290
302
  toDeleteConfigurationPolicy(): this;
303
+ /**
304
+ * Grants permission to delete a connector in Security Hub CSPM
305
+ *
306
+ * Access Level: Write
307
+ *
308
+ * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteConnector.html
309
+ */
310
+ toDeleteConnector(): this;
291
311
  /**
292
312
  * Grants permission to delete a connector V2 in Security Hub
293
313
  *
@@ -421,6 +441,14 @@ export declare class Securityhub extends PolicyStatement {
421
441
  * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableSecurityHub.html
422
442
  */
423
443
  toDisableSecurityHub(): this;
444
+ /**
445
+ * Grants permission to disable a Security Hub V2 feature
446
+ *
447
+ * Access Level: Write
448
+ *
449
+ * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableSecurityHubFeatureV2.html
450
+ */
451
+ toDisableSecurityHubFeatureV2(): this;
424
452
  /**
425
453
  * Grants permission to disable Security Hub V2
426
454
  *
@@ -488,6 +516,14 @@ export declare class Securityhub extends PolicyStatement {
488
516
  * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHub.html
489
517
  */
490
518
  toEnableSecurityHub(): this;
519
+ /**
520
+ * Grants permission to enable a Security Hub V2 feature
521
+ *
522
+ * Access Level: Write
523
+ *
524
+ * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHubFeatureV2.html
525
+ */
526
+ toEnableSecurityHubFeatureV2(): this;
491
527
  /**
492
528
  * Grants permission to enable Security Hub V2
493
529
  *
@@ -556,6 +592,14 @@ export declare class Securityhub extends PolicyStatement {
556
592
  * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConfigurationPolicyAssociation.html
557
593
  */
558
594
  toGetConfigurationPolicyAssociation(): this;
595
+ /**
596
+ * Grants permission to retrieve details for a connector from Security Hub CSPM based on connector id
597
+ *
598
+ * Access Level: Read
599
+ *
600
+ * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConnector.html
601
+ */
602
+ toGetConnector(): this;
559
603
  /**
560
604
  * Grants permission to retrieve details for a connector V2 from Security Hub based on connector id
561
605
  *
@@ -791,6 +835,14 @@ export declare class Securityhub extends PolicyStatement {
791
835
  * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConfigurationPolicyAssociations.html
792
836
  */
793
837
  toListConfigurationPolicyAssociations(): this;
838
+ /**
839
+ * Grants permission to retrieve a list of connectors and their metadata for the calling account from Security Hub CSPM
840
+ *
841
+ * Access Level: List
842
+ *
843
+ * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConnectors.html
844
+ */
845
+ toListConnectors(): this;
794
846
  /**
795
847
  * Grants permission to retrieve a list of connectors V2 and their metadata for the calling account from Security Hub
796
848
  *
@@ -958,6 +1010,14 @@ export declare class Securityhub extends PolicyStatement {
958
1010
  * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateConfigurationPolicy.html
959
1011
  */
960
1012
  toUpdateConfigurationPolicy(): this;
1013
+ /**
1014
+ * Grants permission to update a connector in Security Hub CSPM based on connector id and input parameters
1015
+ *
1016
+ * Access Level: Write
1017
+ *
1018
+ * https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateConnector.html
1019
+ */
1020
+ toUpdateConnector(): this;
961
1021
  /**
962
1022
  * Grants permission to update a connector V2 in Security Hub based on connector id and input parameters
963
1023
  *
@@ -1132,6 +1192,20 @@ export declare class Securityhub extends PolicyStatement {
1132
1192
  * - .ifAwsResourceTag()
1133
1193
  */
1134
1194
  onConfigurationPolicy(configurationPolicyId: string, account?: string, region?: string, partition?: string): this;
1195
+ /**
1196
+ * Adds a resource of type connector to the statement
1197
+ *
1198
+ * https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources
1199
+ *
1200
+ * @param connectorId - Identifier for the connectorId.
1201
+ * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
1202
+ * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
1203
+ * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
1204
+ *
1205
+ * Possible conditions:
1206
+ * - .ifAwsResourceTag()
1207
+ */
1208
+ onConnector(connectorId: string, account?: string, region?: string, partition?: string): this;
1135
1209
  /**
1136
1210
  * Adds a resource of type connectorv2 to the statement
1137
1211
  *
@@ -1155,6 +1229,7 @@ export declare class Securityhub extends PolicyStatement {
1155
1229
  * - .toCreateAutomationRule()
1156
1230
  * - .toCreateAutomationRuleV2()
1157
1231
  * - .toCreateConfigurationPolicy()
1232
+ * - .toCreateConnector()
1158
1233
  * - .toCreateConnectorV2()
1159
1234
  * - .toEnableSecurityHub()
1160
1235
  * - .toEnableSecurityHubV2()
@@ -1176,6 +1251,7 @@ export declare class Securityhub extends PolicyStatement {
1176
1251
  * - automation-rule
1177
1252
  * - automation-rulev2
1178
1253
  * - configuration-policy
1254
+ * - connector
1179
1255
  * - connectorv2
1180
1256
  *
1181
1257
  * @param tagKey The tag key to check
@@ -1192,6 +1268,7 @@ export declare class Securityhub extends PolicyStatement {
1192
1268
  * - .toCreateAutomationRule()
1193
1269
  * - .toCreateAutomationRuleV2()
1194
1270
  * - .toCreateConfigurationPolicy()
1271
+ * - .toCreateConnector()
1195
1272
  * - .toCreateConnectorV2()
1196
1273
  * - .toEnableSecurityHub()
1197
1274
  * - .toEnableSecurityHubV2()