p6-cdk-s3-protector 0.0.50 → 0.0.51

package/node_modules/cdk-iam-floyd/lib/generated/policy-statements/bedrockagentcore.d.ts

@@ -16,6 +16,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/
      */
     toAllowVendedLogDeliveryForResource(): this;
+    /**
+     * Grants permission to evaluate Cedar policies for authorization requests
+     *
+     * Access Level: Permissions management
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html
+     */
+    toAuthorizeAction(): this;
     /**
      * Grants permission to create one or more memory records
      *
@@ -141,6 +149,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html
      */
     toCreateCodeInterpreter(): this;
+    /**
+     * Grants permission to create a new evaluator
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html
+     */
+    toCreateEvaluator(): this;
     /**
      * Grants permission to create an Event
      *
@@ -203,6 +219,33 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html
      */
     toCreateOauth2CredentialProvider(): this;
+    /**
+     * Grants permission to create a new online evaluation configuration
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - iam:PassRole
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html
+     */
+    toCreateOnlineEvaluationConfig(): this;
+    /**
+     * Grants permission to create a new policy within a policy engine
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html
+     */
+    toCreatePolicy(): this;
+    /**
+     * Grants permission to create a new policy engine
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html
+     */
+    toCreatePolicyEngine(): this;
     /**
      * Grants permission to create a new Workload Identity
      *
@@ -255,6 +298,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html
      */
     toDeleteCodeInterpreter(): this;
+    /**
+     * Grants permission to delete an evaluator
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html
+     */
+    toDeleteEvaluator(): this;
     /**
      * Grants permission to delete an Event
      *
@@ -307,6 +358,38 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html
      */
     toDeleteOauth2CredentialProvider(): this;
+    /**
+     * Grants permission to delete an online evaluation configuration
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html
+     */
+    toDeleteOnlineEvaluationConfig(): this;
+    /**
+     * Grants permission to delete a policy
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html
+     */
+    toDeletePolicy(): this;
+    /**
+     * Grants permission to delete a policy engine
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html
+     */
+    toDeletePolicyEngine(): this;
+    /**
+     * Grants permission to delete the resource-based policy for a Bedrock resource
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html
+     */
+    toDeleteResourcePolicy(): this;
     /**
      * Grants permission to delete a registered Workload Identity
      *
@@ -315,6 +398,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html
      */
     toDeleteWorkloadIdentity(): this;
+    /**
+     * Grants permission to run an evaluation using an evaluator
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html
+     */
+    toEvaluate(): this;
     /**
      * Grants permission to retrieve an agent card for A2A
      *
@@ -379,6 +470,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html
      */
     toGetCodeInterpreterSession(): this;
+    /**
+     * Grants permission to get details of an evaluator
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html
+     */
+    toGetEvaluator(): this;
     /**
      * Grants permission to fetch an Event
      *
@@ -431,6 +530,38 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html
      */
     toGetOauth2CredentialProvider(): this;
+    /**
+     * Grants permission to get details of an online evaluation configuration
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html
+     */
+    toGetOnlineEvaluationConfig(): this;
+    /**
+     * Grants permission to retrieve a policy
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html
+     */
+    toGetPolicy(): this;
+    /**
+     * Grants permission to retrieve a policy engine
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html
+     */
+    toGetPolicyEngine(): this;
+    /**
+     * Grants permission to retrieve status and results of a policy generation request
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html
+     */
+    toGetPolicyGeneration(): this;
     /**
      * Grants permission to retrieve an API Key associated with an Api Key Credential Provider
      *
@@ -447,6 +578,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html
      */
     toGetResourceOauth2Token(): this;
+    /**
+     * Grants permission to retrieve the resource-based policy for a Bedrock resource
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html
+     */
+    toGetResourcePolicy(): this;
     /**
      * Grants permission to fetch the current configuration of the TokenVault, including encryption settings
      *
@@ -513,6 +652,22 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html
      */
     toInvokeAgentRuntimeForUser(): this;
+    /**
+     * Grants permission to invoke an agent runtime endpoint with WebSocket stream
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html
+     */
+    toInvokeAgentRuntimeWithWebSocketStream(): this;
+    /**
+     * Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html
+     */
+    toInvokeAgentRuntimeWithWebSocketStreamForUser(): this;
     /**
      * Grants permission to invoke a code interpreter session
      *
@@ -601,6 +756,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html
      */
     toListCodeInterpreters(): this;
+    /**
+     * Grants permission to list evaluators
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html
+     */
+    toListEvaluators(): this;
     /**
      * Grants permission to list events
      *
@@ -637,6 +800,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html
      */
     toListMemories(): this;
+    /**
+     * Grants permission to list extraction jobs for this memory
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html
+     */
+    toListMemoryExtractionJobs(): this;
     /**
      * Grants permission to list memory records
      *
@@ -657,6 +828,46 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html
      */
     toListOauth2CredentialProviders(): this;
+    /**
+     * Grants permission to list online evaluation configurations
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOnlineEvaluationConfigs.html
+     */
+    toListOnlineEvaluationConfigs(): this;
+    /**
+     * Grants permission to list policies within a policy engine
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicies.html
+     */
+    toListPolicies(): this;
+    /**
+     * Grants permission to list policy engines
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html
+     */
+    toListPolicyEngines(): this;
+    /**
+     * Grants permission to list generated policy assets from a generation request
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationAssets.html
+     */
+    toListPolicyGenerationAssets(): this;
+    /**
+     * Grants permission to list policy generation requests
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerations.html
+     */
+    toListPolicyGenerations(): this;
     /**
      * Grants permission to list sessions
      *
@@ -684,6 +895,38 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html
      */
     toListWorkloadIdentities(): this;
+    /**
+     * Grants permission to create or modify wildcard policies that apply to gateway resources
+     *
+     * Access Level: Permissions management
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html
+     */
+    toManageAdminPolicy(): this;
+    /**
+     * Grants permission to create or modify policies that apply to specific gateway resources
+     *
+     * Access Level: Permissions management
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html
+     */
+    toManageResourceScopedPolicy(): this;
+    /**
+     * Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call
+     *
+     * Access Level: Permissions management
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html
+     */
+    toPartiallyAuthorizeActions(): this;
+    /**
+     * Grants permission to create or update the resource-based policy for a Bedrock resource
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_PutResourcePolicy.html
+     */
+    toPutResourcePolicy(): this;
     /**
      * Grants permission to retrieve memory records through sematic query
      *
@@ -720,6 +963,27 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html
      */
     toStartCodeInterpreterSession(): this;
+    /**
+     * Grants permission to start memory extraction job
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifStrategyId()
+     * - .ifSessionId()
+     * - .ifActorId()
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartMemoryExtractionJob.html
+     */
+    toStartMemoryExtractionJob(): this;
+    /**
+     * Grants permission to start an AI-powered policy generation request
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_StartPolicyGeneration.html
+     */
+    toStartPolicyGeneration(): this;
     /**
      * Grants permission to stop a browser session
      *
@@ -810,6 +1074,14 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html
      */
     toUpdateBrowserStream(): this;
+    /**
+     * Grants permission to update an evaluator
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateEvaluator.html
+     */
+    toUpdateEvaluator(): this;
     /**
      * Grants permission to update an existing gateway
      *
@@ -848,6 +1120,33 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html
      */
     toUpdateOauth2CredentialProvider(): this;
+    /**
+     * Grants permission to update an online evaluation configuration
+     *
+     * Access Level: Write
+     *
+     * Dependent actions:
+     * - iam:PassRole
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOnlineEvaluationConfig.html
+     */
+    toUpdateOnlineEvaluationConfig(): this;
+    /**
+     * Grants permission to update an existing policy
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicy.html
+     */
+    toUpdatePolicy(): this;
+    /**
+     * Grants permission to update a policy engine
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicyEngine.html
+     */
+    toUpdatePolicyEngine(): this;
     /**
      * Grants permission to update the metadata of an existing Workload Identity
      *
@@ -857,6 +1156,28 @@ export declare class BedrockAgentcore extends PolicyStatement {
      */
     toUpdateWorkloadIdentity(): this;
     protected accessLevelList: AccessLevelList;
+    /**
+     * Adds a resource of type evaluator to the statement
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/evaluator.html
+     *
+     * @param evaluatorId - Identifier for the evaluatorId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onEvaluator(evaluatorId: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type online-evaluation-config to the statement
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/onlineEvaluationConfig.html
+     *
+     * @param onlineEvaluationConfigId - Identifier for the onlineEvaluationConfigId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onOnlineEvaluationConfig(onlineEvaluationConfigId: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type memory to the statement
      *
@@ -1035,6 +1356,41 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * - .ifAwsResourceTag()
      */
     onTokenVault(tokenVaultId: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type policy-engine to the statement
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/policyEngine.html
+     *
+     * @param policyEngineId - Identifier for the policyEngineId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onPolicyEngine(policyEngineId: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type policy to the statement
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/policy.html
+     *
+     * @param policyEngineId - Identifier for the policyEngineId.
+     * @param policyId - Identifier for the policyId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onPolicy(policyEngineId: string, policyId: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type policy-generation to the statement
+     *
+     * https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/policyGeneration.html
+     *
+     * @param policyEngineId - Identifier for the policyEngineId.
+     * @param policyGenerationId - Identifier for the policyGenerationId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     */
+    onPolicyGeneration(policyEngineId: string, policyGenerationId: string, account?: string, region?: string, partition?: string): this;
     /**
      * Filters access by creating requests based on the allowed set of values for each of the mandatory tags
      *
@@ -1187,6 +1543,7 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * - .toGetEvent()
      * - .toListEvents()
      * - .toListSessions()
+     * - .toStartMemoryExtractionJob()
      *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
@@ -1217,6 +1574,7 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * - .toDeleteEvent()
      * - .toGetEvent()
      * - .toListEvents()
+     * - .toStartMemoryExtractionJob()
      *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
@@ -1230,6 +1588,7 @@ export declare class BedrockAgentcore extends PolicyStatement {
      * Applies to actions:
      * - .toListMemoryRecords()
      * - .toRetrieveMemoryRecords()
+     * - .toStartMemoryExtractionJob()
      *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`