Merge pull request #1907 from udondan/iam-updates

Author: udondan

CHANGELOG/v0.753.0.md

@@ -0,0 +1,14 @@
+**New services:**
+
+- elemental-inference
+
+**New actions:**
+
+- healthlake:InquirePreAuthClaim
+- healthlake:QuestionnairePackage
+- healthlake:SubmitPreAuthClaim
+
+**New resource types:**
+
+- mediaconnect:MediaStream
+- mediaconnect:VpcInterface

README.md

@@ -15,10 +15,10 @@
 <!-- stats -->
 Support for:
 
-- 442 Services
-- 20311 Actions
-- 2151 Resource Types
-- 2273 Condition keys
+- 443 Services
+- 20326 Actions
+- 2154 Resource Types
+- 2276 Condition keys
 <!-- /stats -->
 
 ![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**

VERSION

@@ -1 +1 @@
-0.752.0
+0.753.0

docs/source/conf.py

@@ -24,7 +24,7 @@
 author = 'Daniel Schroeder'
 
 # The full version, including alpha/beta/rc tags
-release = '0.752.0'
+release = '0.753.0'
 
 # -- General configuration ---------------------------------------------------
 

docs/source/index.rst

@@ -30,10 +30,10 @@ AWS IAM policy statement generator with fluent interface.
 
 Support for:
 
-- 442 Services
-- 20311 Actions
-- 2151 Resource Types
-- 2273 Condition keys
+- 443 Services
+- 20326 Actions
+- 2154 Resource Types
+- 2276 Condition keys
 
 ..
    /stats

lib/generated/index.ts

@@ -290,6 +290,7 @@ export { Elasticloadbalancing } from './policy-statements/elasticloadbalancing';
 export { ElasticloadbalancingV2 } from './policy-statements/elasticloadbalancingv2';
 export { ElementalAppliancesSoftware } from './policy-statements/elementalappliancesandsoftware';
 export { ElementalActivations } from './policy-statements/elementalappliancesandsoftwareactivationservice';
+export { ElementalInference } from './policy-statements/elementalinference';
 export { Mediaconnect } from './policy-statements/elementalmediaconnect';
 export { Mediaconvert } from './policy-statements/elementalmediaconvert';
 export { Medialive } from './policy-statements/elementalmedialive';

lib/generated/policy-statements/elementalinference.ts

@@ -0,0 +1,253 @@
+import { AccessLevelList } from '../../shared/access-level';
+import { PolicyStatement, Operator } from '../../shared';
+
+/**
+ * Statement provider for service [elemental-inference](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awselementalinference.html).
+ *
+ * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
+ */
+export class ElementalInference extends PolicyStatement {
+  public servicePrefix = 'elemental-inference';
+
+  /**
+   * Statement provider for service [elemental-inference](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awselementalinference.html).
+   *
+   * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
+   */
+  constructor(sid?: string) {
+    super(sid);
+  }
+
+  /**
+   * Grants permission to associate a feed with an AWS resource
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_AssociateFeed.html
+   */
+  public toAssociateFeed() {
+    return this.to('AssociateFeed');
+  }
+
+  /**
+   * Grants permission to create a new feed
+   *
+   * Access Level: Write
+   *
+   * Possible conditions:
+   * - .ifAwsRequestTag()
+   * - .ifAwsTagKeys()
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_CreateFeed.html
+   */
+  public toCreateFeed() {
+    return this.to('CreateFeed');
+  }
+
+  /**
+   * Grants permission to delete a feed
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_DeleteFeed.html
+   */
+  public toDeleteFeed() {
+    return this.to('DeleteFeed');
+  }
+
+  /**
+   * Grants permission to disassociate a feed from an AWS resource
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_DisassociateFeed.html
+   */
+  public toDisassociateFeed() {
+    return this.to('DisassociateFeed');
+  }
+
+  /**
+   * Grants permission to get feed details
+   *
+   * Access Level: Read
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_GetFeed.html
+   */
+  public toGetFeed() {
+    return this.to('GetFeed');
+  }
+
+  /**
+   * Grants permission to retrieve metadata for a specific feed output
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_GetMetadata.html
+   */
+  public toGetMetadata() {
+    return this.to('GetMetadata');
+  }
+
+  /**
+   * Grants permission to list feeds in the account
+   *
+   * Access Level: List
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_ListFeeds.html
+   */
+  public toListFeeds() {
+    return this.to('ListFeeds');
+  }
+
+  /**
+   * Grants permission to list tags on a resource
+   *
+   * Access Level: Read
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_ListTagsForResource.html
+   */
+  public toListTagsForResource() {
+    return this.to('ListTagsForResource');
+  }
+
+  /**
+   * Grants permission to upload media data for a specified feed
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_PutMedia.html
+   */
+  public toPutMedia() {
+    return this.to('PutMedia');
+  }
+
+  /**
+   * Grants permission to add tags to a resource
+   *
+   * Access Level: Tagging
+   *
+   * Possible conditions:
+   * - .ifAwsRequestTag()
+   * - .ifAwsTagKeys()
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_TagResource.html
+   */
+  public toTagResource() {
+    return this.to('TagResource');
+  }
+
+  /**
+   * Grants permission to remove tags from a resource
+   *
+   * Access Level: Tagging
+   *
+   * Possible conditions:
+   * - .ifAwsTagKeys()
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_UntagResource.html
+   */
+  public toUntagResource() {
+    return this.to('UntagResource');
+  }
+
+  /**
+   * Grants permission to update feed configuration
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/api/API_UpdateFeed.html
+   */
+  public toUpdateFeed() {
+    return this.to('UpdateFeed');
+  }
+
+  protected accessLevelList: AccessLevelList = {
+    Write: [
+      'AssociateFeed',
+      'CreateFeed',
+      'DeleteFeed',
+      'DisassociateFeed',
+      'GetMetadata',
+      'PutMedia',
+      'UpdateFeed'
+    ],
+    Read: [
+      'GetFeed',
+      'ListTagsForResource'
+    ],
+    List: [
+      'ListFeeds'
+    ],
+    Tagging: [
+      'TagResource',
+      'UntagResource'
+    ]
+  };
+
+  /**
+   * Adds a resource of type FeedResource to the statement
+   *
+   * https://docs.aws.amazon.com/elemental-inference/latest/APIReference/API_Feed.html
+   *
+   * @param id - Identifier for the id.
+   * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+   * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+   * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+   *
+   * Possible conditions:
+   * - .ifAwsResourceTag()
+   */
+  public onFeedResource(id: string, account?: string, region?: string, partition?: string) {
+    return this.on(`arn:${ partition ?? this.defaultPartition }:elemental-inference:${ region ?? this.defaultRegion }:${ account ?? this.defaultAccount }:feed/${ id }`);
+  }
+
+  /**
+   * Filters access by tags that are passed in the request
+   *
+   * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag
+   *
+   * Applies to actions:
+   * - .toCreateFeed()
+   * - .toTagResource()
+   *
+   * @param tagKey The tag key to check
+   * @param value The value(s) to check
+   * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+   */
+  public ifAwsRequestTag(tagKey: string, value: string | string[], operator?: Operator | string) {
+    return this.if(`aws:RequestTag/${ tagKey }`, value, operator ?? 'StringLike');
+  }
+
+  /**
+   * Filters access by tags associated with the resource
+   *
+   * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag
+   *
+   * Applies to resource types:
+   * - FeedResource
+   *
+   * @param tagKey The tag key to check
+   * @param value The value(s) to check
+   * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+   */
+  public ifAwsResourceTag(tagKey: string, value: string | string[], operator?: Operator | string) {
+    return this.if(`aws:ResourceTag/${ tagKey }`, value, operator ?? 'StringLike');
+  }
+
+  /**
+   * Filters access by tag keys that are passed in the request
+   *
+   * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys
+   *
+   * Applies to actions:
+   * - .toCreateFeed()
+   * - .toTagResource()
+   * - .toUntagResource()
+   *
+   * @param value The value(s) to check
+   * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+   */
+  public ifAwsTagKeys(value: string | string[], operator?: Operator | string) {
+    return this.if(`aws:TagKeys`, value, operator ?? 'StringLike');
+  }
+}