iam-floyd 0.807.0 → 0.809.0

package/lib/generated/policy-statements/lambda.d.ts

@@ -41,6 +41,14 @@ export declare class Lambda extends PolicyStatement {
      * https://docs.aws.amazon.com/lambda/latest/dg/API_CheckpointDurableExecution.html
      */
     toCheckpointDurableExecution(): this;
+    /**
+     * Grants permission to connect to a Lambda MicroVM via HTTP (VPC Endpoint only)
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/lambda-permissions.html
+     */
+    toConnectMicrovm(): this;
     /**
      * Grants permission to create an alias for a Lambda function version
      *
@@ -126,6 +134,56 @@ export declare class Lambda extends PolicyStatement {
      * https://docs.aws.amazon.com/lambda/latest/dg/API_CreateFunctionUrlConfig.html
      */
     toCreateFunctionUrlConfig(): this;
+    /**
+     * Grants permission to create an auth token for an AWS Lambda MicroVM
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_CreateMicrovmAuthToken.html
+     */
+    toCreateMicrovmAuthToken(): this;
+    /**
+     * Grants permission to create an AWS Lambda MicroVM image
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     *
+     * Dependent actions:
+     * - iam:PassRole
+     * - lambda:PassNetworkConnector
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_CreateMicrovmImage.html
+     */
+    toCreateMicrovmImage(): this;
+    /**
+     * Grants permission to create a shell auth token for an AWS Lambda MicroVM
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_CreateMicrovmShellAuthToken.html
+     */
+    toCreateMicrovmShellAuthToken(): this;
+    /**
+     * Grants permission to create an AWS Lambda network connector
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     * - .ifSecurityGroupIds()
+     * - .ifSubnetIds()
+     *
+     * Dependent actions:
+     * - iam:CreateServiceLinkedRole
+     * - iam:PassRole
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/API_CreateNetworkConnector.html
+     */
+    toCreateNetworkConnector(): this;
     /**
      * Grants permission to delete an AWS Lambda function alias
      *
@@ -213,6 +271,30 @@ export declare class Lambda extends PolicyStatement {
      * https://docs.aws.amazon.com/lambda/latest/dg/API_DeleteLayerVersion.html
      */
     toDeleteLayerVersion(): this;
+    /**
+     * Grants permission to delete an AWS Lambda MicroVM image
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_DeleteMicrovmImage.html
+     */
+    toDeleteMicrovmImage(): this;
+    /**
+     * Grants permission to delete a version of an AWS Lambda MicroVM image
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_DeleteMicrovmImageVersion.html
+     */
+    toDeleteMicrovmImageVersion(): this;
+    /**
+     * Grants permission to delete an AWS Lambda network connector
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/API_DeleteNetworkConnector.html
+     */
+    toDeleteNetworkConnector(): this;
     /**
      * Grants permission to delete the provisioned concurrency configuration for an AWS Lambda function
      *
@@ -388,6 +470,46 @@ export declare class Lambda extends PolicyStatement {
      * https://docs.aws.amazon.com/lambda/latest/dg/API_GetLayerVersionPolicy.html
      */
     toGetLayerVersionPolicy(): this;
+    /**
+     * Grants permission to view information about an AWS Lambda MicroVM
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_GetMicrovm.html
+     */
+    toGetMicrovm(): this;
+    /**
+     * Grants permission to view information about an AWS Lambda MicroVM image
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_GetMicrovmImage.html
+     */
+    toGetMicrovmImage(): this;
+    /**
+     * Grants permission to view information about a build of an AWS Lambda MicroVM image version
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_GetMicrovmImageBuild.html
+     */
+    toGetMicrovmImageBuild(): this;
+    /**
+     * Grants permission to view information about a version of an AWS Lambda MicroVM image
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_GetMicrovmImageVersion.html
+     */
+    toGetMicrovmImageVersion(): this;
+    /**
+     * Grants permission to view details about an AWS Lambda network connector
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/API_GetNetworkConnector.html
+     */
+    toGetNetworkConnector(): this;
     /**
      * Grants permission to view the resource-based policy for an AWS Lambda function, version, or alias
      *
@@ -544,6 +666,62 @@ export declare class Lambda extends PolicyStatement {
      * https://docs.aws.amazon.com/lambda/latest/dg/API_ListLayers.html
      */
     toListLayers(): this;
+    /**
+     * Grants permission to retrieve a list of versions for a managed AWS Lambda MicroVM image
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_ListManagedMicrovmImageVersions.html
+     */
+    toListManagedMicrovmImageVersions(): this;
+    /**
+     * Grants permission to retrieve a list of managed AWS Lambda MicroVM images
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_ListManagedMicrovmImages.html
+     */
+    toListManagedMicrovmImages(): this;
+    /**
+     * Grants permission to retrieve a list of builds for an AWS Lambda MicroVM image version
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_ListMicrovmImageBuilds.html
+     */
+    toListMicrovmImageBuilds(): this;
+    /**
+     * Grants permission to retrieve a list of versions for an AWS Lambda MicroVM image
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_ListMicrovmImageVersions.html
+     */
+    toListMicrovmImageVersions(): this;
+    /**
+     * Grants permission to retrieve a list of AWS Lambda MicroVM images
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_ListMicrovmImages.html
+     */
+    toListMicrovmImages(): this;
+    /**
+     * Grants permission to retrieve a list of AWS Lambda MicroVMs
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_ListMicrovms.html
+     */
+    toListMicrovms(): this;
+    /**
+     * Grants permission to retrieve a list of AWS Lambda network connectors
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/API_ListNetworkConnectors.html
+     */
+    toListNetworkConnectors(): this;
     /**
      * Grants permission to retrieve a list of provisioned concurrency configurations for an AWS Lambda function
      *
@@ -553,7 +731,7 @@ export declare class Lambda extends PolicyStatement {
      */
     toListProvisionedConcurrencyConfigs(): this;
     /**
-     * Grants permission to retrieve a list of tags for an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource
+     * Grants permission to retrieve a list of tags for an AWS Lambda function, event source mapping, capacity provider, code signing configuration, network connector or MicroVM image resource
      *
      * Access Level: Read
      *
@@ -576,6 +754,14 @@ export declare class Lambda extends PolicyStatement {
      * https://docs.aws.amazon.com/lambda/latest/dg/lambda-permissions.html
      */
     toPassCapacityProvider(): this;
+    /**
+     * Grants permission to pass an AWS Lambda network connector to a service
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/lambda-permissions.html
+     */
+    toPassNetworkConnector(): this;
     /**
      * Grants permission to create an AWS Lambda layer
      *
@@ -671,6 +857,26 @@ export declare class Lambda extends PolicyStatement {
      * https://docs.aws.amazon.com/lambda/latest/dg/API_RemovePermission.html
      */
     toRemovePermission(): this;
+    /**
+     * Grants permission to resume a suspended AWS Lambda MicroVM
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_ResumeMicrovm.html
+     */
+    toResumeMicrovm(): this;
+    /**
+     * Grants permission to run an AWS Lambda MicroVM from a MicroVM image
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - iam:PassRole
+     * - lambda:PassNetworkConnector
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_RunMicrovm.html
+     */
+    toRunMicrovm(): this;
     /**
      * Grants permission to send a failure response for a callback operation in an AWS Lambda durable execution
      *
@@ -704,7 +910,15 @@ export declare class Lambda extends PolicyStatement {
      */
     toStopDurableExecution(): this;
     /**
-     * Grants permission to add tags to an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource
+     * Grants permission to suspend an AWS Lambda MicroVM
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_SuspendMicrovm.html
+     */
+    toSuspendMicrovm(): this;
+    /**
+     * Grants permission to add tags to an AWS Lambda function, event source mapping, capacity provider, code signing configuration, network connector or MicroVM image resource
      *
      * Access Level: Tagging
      *
@@ -716,7 +930,15 @@ export declare class Lambda extends PolicyStatement {
      */
     toTagResource(): this;
     /**
-     * Grants permission to remove tags from an AWS Lambda function, event source mapping, capacity provider, or code signing configuration resource
+     * Grants permission to terminate an AWS Lambda MicroVM
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_TerminateMicrovm.html
+     */
+    toTerminateMicrovm(): this;
+    /**
+     * Grants permission to remove tags from an AWS Lambda function, event source mapping, capacity provider, code signing configuration, network connector or MicroVM image resource
      *
      * Access Level: Tagging
      *
@@ -811,6 +1033,34 @@ export declare class Lambda extends PolicyStatement {
      * https://docs.aws.amazon.com/lambda/latest/dg/API_UpdateFunctionUrlConfig.html
      */
     toUpdateFunctionUrlConfig(): this;
+    /**
+     * Grants permission to update an AWS Lambda MicroVM image
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - iam:PassRole
+     * - lambda:PassNetworkConnector
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_UpdateMicrovmImage.html
+     */
+    toUpdateMicrovmImage(): this;
+    /**
+     * Grants permission to update a version of an AWS Lambda MicroVM image
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/microvm-api/API_UpdateMicrovmImageVersion.html
+     */
+    toUpdateMicrovmImageVersion(): this;
+    /**
+     * Grants permission to update an AWS Lambda network connector
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/API_UpdateNetworkConnector.html
+     */
+    toUpdateNetworkConnector(): this;
     protected accessLevelList: AccessLevelList;
     /**
      * Adds a resource of type capacityProvider to the statement
@@ -935,6 +1185,34 @@ export declare class Lambda extends PolicyStatement {
      * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
      */
     onLayerVersion(layerName: string, layerVersion: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type networkConnector to the statement
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/lambda-api-permissions-ref.html
+     *
+     * @param networkConnectorId - Identifier for the networkConnectorId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     */
+    onNetworkConnector(networkConnectorId: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type microvmImage to the statement
+     *
+     * https://docs.aws.amazon.com/lambda/latest/dg/lambda-api-permissions-ref.html
+     *
+     * @param microvmImageName - Identifier for the microvmImageName.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     */
+    onMicrovmImage(microvmImageName: string, account?: string, region?: string, partition?: string): this;
     /**
      * Filters access by the tags that are passed in the request
      *
@@ -945,6 +1223,8 @@ export declare class Lambda extends PolicyStatement {
      * - .toCreateCodeSigningConfig()
      * - .toCreateEventSourceMapping()
      * - .toCreateFunction()
+     * - .toCreateMicrovmImage()
+     * - .toCreateNetworkConnector()
      * - .toTagResource()
      *
      * @param tagKey The tag key to check
@@ -964,6 +1244,8 @@ export declare class Lambda extends PolicyStatement {
      * - function
      * - function alias
      * - function version
+     * - networkConnector
+     * - microvmImage
      *
      * @param tagKey The tag key to check
      * @param value The value(s) to check
@@ -980,6 +1262,8 @@ export declare class Lambda extends PolicyStatement {
      * - .toCreateCodeSigningConfig()
      * - .toCreateEventSourceMapping()
      * - .toCreateFunction()
+     * - .toCreateMicrovmImage()
+     * - .toCreateNetworkConnector()
      * - .toTagResource()
      * - .toUntagResource()
      *
@@ -1097,6 +1381,7 @@ export declare class Lambda extends PolicyStatement {
      * Applies to actions:
      * - .toCreateCapacityProvider()
      * - .toCreateFunction()
+     * - .toCreateNetworkConnector()
      * - .toUpdateFunctionConfiguration()
      *
      * @param value The value(s) to check
@@ -1120,6 +1405,7 @@ export declare class Lambda extends PolicyStatement {
      * Applies to actions:
      * - .toCreateCapacityProvider()
      * - .toCreateFunction()
+     * - .toCreateNetworkConnector()
      * - .toUpdateFunctionConfiguration()
      *
      * @param value The value(s) to check