import { AccessLevelList } from '../shared/access-level' ; import { PolicyStatement , Operator } from '../shared' ; param sid export class Ssm extends PolicyStatement { public servicePrefix = 'ssm' ; param sid constructor ( sid ? ) { super ( sid ) ; } /**
     * Grants permission to add or overwrite one or more tags for a specified AWS resource
     *
     * Access Level: Tagging
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AddTagsToResource.html
     */ public toAddTagsToResource ( ) { return this . to ( 'AddTagsToResource' ) ; } /**
     * Grants permission to associate RelatedItem to an OpsItem
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AssociateOpsItemRelatedItem.html
     */ public toAssociateOpsItemRelatedItem ( ) { return this . to ( 'AssociateOpsItemRelatedItem' ) ; } /**
     * Grants permission to cancel a specified Run Command command
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelCommand.html
     */ public toCancelCommand ( ) { return this . to ( 'CancelCommand' ) ; } /**
     * Grants permission to cancel an in-progress maintenance window execution
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CancelMaintenanceWindowExecution.html
     */ public toCancelMaintenanceWindowExecution ( ) { return this . to ( 'CancelMaintenanceWindowExecution' ) ; } /**
     * Grants permission to create an activation that is used to register on-premises servers and virtual machines (VMs) with Systems Manager
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateActivation.html
     */ public toCreateActivation ( ) { return this . to ( 'CreateActivation' ) ; } /**
     * Grants permission to associate a specified Systems Manager document with specified instances or other targets
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociation.html
     */ public toCreateAssociation ( ) { return this . to ( 'CreateAssociation' ) ; } /**
     * Grants permission to combine entries for multiple CreateAssociation operations in a single command
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociationBatch.html
     */ public toCreateAssociationBatch ( ) { return this . to ( 'CreateAssociationBatch' ) ; } /**
     * Grants permission to create a Systems Manager SSM document
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifAwsRequestTag()
     * - .ifAwsTagKeys()
     *
     * Dependent actions:
     * - iam:PassRole
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateDocument.html
     */ public toCreateDocument ( ) { return this . to ( 'CreateDocument' ) ; } /**
     * Grants permission to create a maintenance window
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifAwsRequestTag()
     * - .ifAwsTagKeys()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateMaintenanceWindow.html
     */ public toCreateMaintenanceWindow ( ) { return this . to ( 'CreateMaintenanceWindow' ) ; } /**
     * Grants permission to create an OpsItem in OpsCenter
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifAwsRequestTag()
     * - .ifAwsTagKeys()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsItem.html
     */ public toCreateOpsItem ( ) { return this . to ( 'CreateOpsItem' ) ; } /**
     * Grants permission to create an OpsMetadata object for an AWS resource
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifAwsRequestTag()
     * - .ifAwsTagKeys()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateOpsMetadata.html
     */ public toCreateOpsMetadata ( ) { return this . to ( 'CreateOpsMetadata' ) ; } /**
     * Grants permission to create a patch baseline
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifAwsRequestTag()
     * - .ifAwsTagKeys()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreatePatchBaseline.html
     */ public toCreatePatchBaseline ( ) { return this . to ( 'CreatePatchBaseline' ) ; } /**
     * Grants permission to create a resource data sync configuration, which regularly collects inventory data from managed instances and updates the data in an Amazon S3 bucket
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifSyncType()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateResourceDataSync.html
     */ public toCreateResourceDataSync ( ) { return this . to ( 'CreateResourceDataSync' ) ; } /**
     * Grants permission to delete a specified activation for managed instances
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteActivation.html
     */ public toDeleteActivation ( ) { return this . to ( 'DeleteActivation' ) ; } /**
     * Grants permission to disassociate a specified SSM document from a specified instance
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteAssociation.html
     */ public toDeleteAssociation ( ) { return this . to ( 'DeleteAssociation' ) ; } /**
     * Grants permission to delete a specified SSM document and its instance associations
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteDocument.html
     */ public toDeleteDocument ( ) { return this . to ( 'DeleteDocument' ) ; } /**
     * Grants permission to delete a specified custom inventory type, or the data associated with a custom inventory type
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteInventory.html
     */ public toDeleteInventory ( ) { return this . to ( 'DeleteInventory' ) ; } /**
     * Grants permission to delete a specified maintenance window
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteMaintenanceWindow.html
     */ public toDeleteMaintenanceWindow ( ) { return this . to ( 'DeleteMaintenanceWindow' ) ; } /**
     * Grants permission to delete an OpsMetadata object
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteOpsMetadata.html
     */ public toDeleteOpsMetadata ( ) { return this . to ( 'DeleteOpsMetadata' ) ; } /**
     * Grants permission to delete a specified SSM parameter
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameter.html
     */ public toDeleteParameter ( ) { return this . to ( 'DeleteParameter' ) ; } /**
     * Grants permission to delete multiple specified SSM parameters
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteParameters.html
     */ public toDeleteParameters ( ) { return this . to ( 'DeleteParameters' ) ; } /**
     * Grants permission to delete a specified patch baseline
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeletePatchBaseline.html
     */ public toDeletePatchBaseline ( ) { return this . to ( 'DeletePatchBaseline' ) ; } /**
     * Grants permission to delete a specified resource data sync
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifSyncType()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteResourceDataSync.html
     */ public toDeleteResourceDataSync ( ) { return this . to ( 'DeleteResourceDataSync' ) ; } /**
     * Grants permission to deregister a specified on-premises server or virtual machine (VM) from Systems Manager
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterManagedInstance.html
     */ public toDeregisterManagedInstance ( ) { return this . to ( 'DeregisterManagedInstance' ) ; } /**
     * Grants permission to deregister a specified patch baseline from being the default patch baseline for a specified patch group
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterPatchBaselineForPatchGroup.html
     */ public toDeregisterPatchBaselineForPatchGroup ( ) { return this . to ( 'DeregisterPatchBaselineForPatchGroup' ) ; } /**
     * Grants permission to deregister a specified target from a maintenance window
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTargetFromMaintenanceWindow.html
     */ public toDeregisterTargetFromMaintenanceWindow ( ) { return this . to ( 'DeregisterTargetFromMaintenanceWindow' ) ; } /**
     * Grants permission to deregister a specified task from a maintenance window
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeregisterTaskFromMaintenanceWindow.html
     */ public toDeregisterTaskFromMaintenanceWindow ( ) { return this . to ( 'DeregisterTaskFromMaintenanceWindow' ) ; } /**
     * Grants permission to view details about a specified managed instance activation, such as when it was created and the number of instances registered using the activation
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeActivations.html
     */ public toDescribeActivations ( ) { return this . to ( 'DescribeActivations' ) ; } /**
     * Grants permission to view details about the specified association for a specified instance or target
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociation.html
     */ public toDescribeAssociation ( ) { return this . to ( 'DescribeAssociation' ) ; } /**
     * Grants permission to view information about a specified association execution
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutionTargets.html
     */ public toDescribeAssociationExecutionTargets ( ) { return this . to ( 'DescribeAssociationExecutionTargets' ) ; } /**
     * Grants permission to view all executions for a specified association
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAssociationExecutions.html
     */ public toDescribeAssociationExecutions ( ) { return this . to ( 'DescribeAssociationExecutions' ) ; } /**
     * Grants permission to view details about all active and terminated Automation executions
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationExecutions.html
     */ public toDescribeAutomationExecutions ( ) { return this . to ( 'DescribeAutomationExecutions' ) ; } /**
     * Grants permission to view information about all active and terminated step executions in an Automation workflow
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAutomationStepExecutions.html
     */ public toDescribeAutomationStepExecutions ( ) { return this . to ( 'DescribeAutomationStepExecutions' ) ; } /**
     * Grants permission to view all patches eligible to include in a patch baseline
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeAvailablePatches.html
     */ public toDescribeAvailablePatches ( ) { return this . to ( 'DescribeAvailablePatches' ) ; } /**
     * Grants permission to view details about a specified SSM document
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocument.html
     */ public toDescribeDocument ( ) { return this . to ( 'DescribeDocument' ) ; } /**
     * Grants permission to display information about SSM document parameters in the Systems Manager console (internal Systems Manager action)
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */ public toDescribeDocumentParameters ( ) { return this . to ( 'DescribeDocumentParameters' ) ; } /**
     * Grants permission to view the permissions for a specified SSM document
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeDocumentPermission.html
     */ public toDescribeDocumentPermission ( ) { return this . to ( 'DescribeDocumentPermission' ) ; } /**
     * Grants permission to view all current associations for a specified instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectiveInstanceAssociations.html
     */ public toDescribeEffectiveInstanceAssociations ( ) { return this . to ( 'DescribeEffectiveInstanceAssociations' ) ; } /**
     * Grants permission to view details about the patches currently associated with the specified patch baseline (Windows only)
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeEffectivePatchesForPatchBaseline.html
     */ public toDescribeEffectivePatchesForPatchBaseline ( ) { return this . to ( 'DescribeEffectivePatchesForPatchBaseline' ) ; } /**
     * Grants permission to view the status of the associations for a specified instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceAssociationsStatus.html
     */ public toDescribeInstanceAssociationsStatus ( ) { return this . to ( 'DescribeInstanceAssociationsStatus' ) ; } /**
     * Grants permission to view details about a specified instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstanceInformation.html
     */ public toDescribeInstanceInformation ( ) { return this . to ( 'DescribeInstanceInformation' ) ; } /**
     * Grants permission to view status details about patches on a specified instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStates.html
     */ public toDescribeInstancePatchStates ( ) { return this . to ( 'DescribeInstancePatchStates' ) ; } /**
     * Grants permission to describe the high-level patch state for the instances in the specified patch group
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatchStatesForPatchGroup.html
     */ public toDescribeInstancePatchStatesForPatchGroup ( ) { return this . to ( 'DescribeInstancePatchStatesForPatchGroup' ) ; } /**
     * Grants permission to view general details about the patches on a specified instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInstancePatches.html
     */ public toDescribeInstancePatches ( ) { return this . to ( 'DescribeInstancePatches' ) ; } /**
     * Grants permission to user's Amazon EC2 console to render managed instances' nodes
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */ public toDescribeInstanceProperties ( ) { return this . to ( 'DescribeInstanceProperties' ) ; } /**
     * Grants permission to view details about a specified inventory deletion
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeInventoryDeletions.html
     */ public toDescribeInventoryDeletions ( ) { return this . to ( 'DescribeInventoryDeletions' ) ; } /**
     * Grants permission to view details of a specified task execution for a maintenance window
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTaskInvocations.html
     */ public toDescribeMaintenanceWindowExecutionTaskInvocations ( ) { return this . to ( 'DescribeMaintenanceWindowExecutionTaskInvocations' ) ; } /**
     * Grants permission to view details about the tasks that ran during a specified maintenance window execution
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutionTasks.html
     */ public toDescribeMaintenanceWindowExecutionTasks ( ) { return this . to ( 'DescribeMaintenanceWindowExecutionTasks' ) ; } /**
     * Grants permission to view the executions of a specified maintenance window
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowExecutions.html
     */ public toDescribeMaintenanceWindowExecutions ( ) { return this . to ( 'DescribeMaintenanceWindowExecutions' ) ; } /**
     * Grants permission to view details about upcoming executions of a specified maintenance window
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowSchedule.html
     */ public toDescribeMaintenanceWindowSchedule ( ) { return this . to ( 'DescribeMaintenanceWindowSchedule' ) ; } /**
     * Grants permission to view a list of the targets associated with a specified maintenance window
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTargets.html
     */ public toDescribeMaintenanceWindowTargets ( ) { return this . to ( 'DescribeMaintenanceWindowTargets' ) ; } /**
     * Grants permission to view a list of the tasks associated with a specified maintenance window
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowTasks.html
     */ public toDescribeMaintenanceWindowTasks ( ) { return this . to ( 'DescribeMaintenanceWindowTasks' ) ; } /**
     * Grants permission to view information about all or specified maintenance windows
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindows.html
     */ public toDescribeMaintenanceWindows ( ) { return this . to ( 'DescribeMaintenanceWindows' ) ; } /**
     * Grants permission to view information about the maintenance window targets and tasks associated with a specified instance
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeMaintenanceWindowsForTarget.html
     */ public toDescribeMaintenanceWindowsForTarget ( ) { return this . to ( 'DescribeMaintenanceWindowsForTarget' ) ; } /**
     * Grants permission to view details about specified OpsItems
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeOpsItems.html
     */ public toDescribeOpsItems ( ) { return this . to ( 'DescribeOpsItems' ) ; } /**
     * Grants permission to view details about a specified SSM parameter
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeParameters.html
     */ public toDescribeParameters ( ) { return this . to ( 'DescribeParameters' ) ; } /**
     * Grants permission to view information about patch baselines that meet the specified criteria
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchBaselines.html
     */ public toDescribePatchBaselines ( ) { return this . to ( 'DescribePatchBaselines' ) ; } /**
     * Grants permission to view aggregated status details for patches for a specified patch group
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroupState.html
     */ public toDescribePatchGroupState ( ) { return this . to ( 'DescribePatchGroupState' ) ; } /**
     * Grants permission to view information about the patch baseline for a specified patch group
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchGroups.html
     */ public toDescribePatchGroups ( ) { return this . to ( 'DescribePatchGroups' ) ; } /**
     * Grants permission to view details of available patches for a specified operating system and patch property
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribePatchProperties.html
     */ public toDescribePatchProperties ( ) { return this . to ( 'DescribePatchProperties' ) ; } /**
     * Grants permission to view a list of recent Session Manager sessions that meet the specified search criteria
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeSessions.html
     */ public toDescribeSessions ( ) { return this . to ( 'DescribeSessions' ) ; } /**
     * Grants permission to disassociate RelatedItem from an OpsItem
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DisassociateOpsItemRelatedItem.html
     */ public toDisassociateOpsItemRelatedItem ( ) { return this . to ( 'DisassociateOpsItemRelatedItem' ) ; } /**
     * Grants permission to view details of a specified Automation execution
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AutomationExecution.html
     */ public toGetAutomationExecution ( ) { return this . to ( 'GetAutomationExecution' ) ; } /**
     * Grants permission to view the calendar state for a change calendar or a list of change calendars
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCalendarState.html
     */ public toGetCalendarState ( ) { return this . to ( 'GetCalendarState' ) ; } /**
     * Grants permission to view details about the command execution of a specified invocation or plugin
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetCommandInvocation.html
     */ public toGetCommandInvocation ( ) { return this . to ( 'GetCommandInvocation' ) ; } /**
     * Grants permission to view the Session Manager connection status for a specified managed instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetConnectionStatus.html
     */ public toGetConnectionStatus ( ) { return this . to ( 'GetConnectionStatus' ) ; } /**
     * Grants permission to view the current default patch baseline for a specified operating system type
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDefaultPatchBaseline.html
     */ public toGetDefaultPatchBaseline ( ) { return this . to ( 'GetDefaultPatchBaseline' ) ; } /**
     * Grants permission to retrieve the current patch baseline snapshot for a specified instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDeployablePatchSnapshotForInstance.html
     */ public toGetDeployablePatchSnapshotForInstance ( ) { return this . to ( 'GetDeployablePatchSnapshotForInstance' ) ; } /**
     * Grants permission to view the contents of a specified SSM document
     *
     * Access Level: Read
     *
     * Possible conditions:
     * - .ifDocumentCategories()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetDocument.html
     */ public toGetDocument ( ) { return this . to ( 'GetDocument' ) ; } /**
     * Grants permission to view instance inventory details per the specified criteria
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventory.html
     */ public toGetInventory ( ) { return this . to ( 'GetInventory' ) ; } /**
     * Grants permission to view a list of inventory types or attribute names for a specified inventory item type
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetInventorySchema.html
     */ public toGetInventorySchema ( ) { return this . to ( 'GetInventorySchema' ) ; } /**
     * Grants permission to view details about a specified maintenance window
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindow.html
     */ public toGetMaintenanceWindow ( ) { return this . to ( 'GetMaintenanceWindow' ) ; } /**
     * Grants permission to view details about a specified maintenance window execution
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecution.html
     */ public toGetMaintenanceWindowExecution ( ) { return this . to ( 'GetMaintenanceWindowExecution' ) ; } /**
     * Grants permission to view details about a specified maintenance window execution task
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTask.html
     */ public toGetMaintenanceWindowExecutionTask ( ) { return this . to ( 'GetMaintenanceWindowExecutionTask' ) ; } /**
     * Grants permission to view details about a specific maintenance window task running on a specific target
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowExecutionTaskInvocation.html
     */ public toGetMaintenanceWindowExecutionTaskInvocation ( ) { return this . to ( 'GetMaintenanceWindowExecutionTaskInvocation' ) ; } /**
     * Grants permission to view details about tasks registered with a specified maintenance window
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetMaintenanceWindowTask.html
     */ public toGetMaintenanceWindowTask ( ) { return this . to ( 'GetMaintenanceWindowTask' ) ; } /**
     * Grants permission to Systems Manager and SSM Agent to determine package installation requirements for an instance (internal Systems Manager call)
     *
     * Access Level: Read
     */ public toGetManifest ( ) { return this . to ( 'GetManifest' ) ; } /**
     * Grants permission to view information about a specified OpsItem
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsItem.html
     */ public toGetOpsItem ( ) { return this . to ( 'GetOpsItem' ) ; } /**
     * Grants permission to retrieve an OpsMetadata object
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsMetadata.html
     */ public toGetOpsMetadata ( ) { return this . to ( 'GetOpsMetadata' ) ; } /**
     * Grants permission to view summary information about OpsItems based on specified filters and aggregators
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetOpsSummary.html
     */ public toGetOpsSummary ( ) { return this . to ( 'GetOpsSummary' ) ; } /**
     * Grants permission to view information about a specified parameter
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameter.html
     */ public toGetParameter ( ) { return this . to ( 'GetParameter' ) ; } /**
     * Grants permission to view details and changes for a specified parameter
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameterHistory.html
     */ public toGetParameterHistory ( ) { return this . to ( 'GetParameterHistory' ) ; } /**
     * Grants permission to view information about multiple specified parameters
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParameters.html
     */ public toGetParameters ( ) { return this . to ( 'GetParameters' ) ; } /**
     * Grants permission to view information about parameters in a specified hierarchy
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetParametersByPath.html
     */ public toGetParametersByPath ( ) { return this . to ( 'GetParametersByPath' ) ; } /**
     * Grants permission to view information about a specified patch baseline
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaseline.html
     */ public toGetPatchBaseline ( ) { return this . to ( 'GetPatchBaseline' ) ; } /**
     * Grants permission to view the ID of the current patch baseline for a specified patch group
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetPatchBaselineForPatchGroup.html
     */ public toGetPatchBaselineForPatchGroup ( ) { return this . to ( 'GetPatchBaselineForPatchGroup' ) ; } /**
     * Grants permission to view the account-level setting for an AWS service
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetServiceSetting.html
     */ public toGetServiceSetting ( ) { return this . to ( 'GetServiceSetting' ) ; } /**
     * Grants permission to apply an identifying label to a specified version of a parameter
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_LabelParameterVersion.html
     */ public toLabelParameterVersion ( ) { return this . to ( 'LabelParameterVersion' ) ; } /**
     * Grants permission to list versions of the specified association
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociationVersions.html
     */ public toListAssociationVersions ( ) { return this . to ( 'ListAssociationVersions' ) ; } /**
     * Grants permission to list the associations for a specified SSM document or managed instance
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListAssociations.html
     */ public toListAssociations ( ) { return this . to ( 'ListAssociations' ) ; } /**
     * Grants permission to list information about command invocations sent to a specified instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommandInvocations.html
     */ public toListCommandInvocations ( ) { return this . to ( 'ListCommandInvocations' ) ; } /**
     * Grants permission to list the commands sent to a specified instance
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListCommands.html
     */ public toListCommands ( ) { return this . to ( 'ListCommands' ) ; } /**
     * Grants permission to list compliance status for specified resource types on a specified resource
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceItems.html
     */ public toListComplianceItems ( ) { return this . to ( 'ListComplianceItems' ) ; } /**
     * Grants permission to list a summary count of compliant and noncompliant resources for a specified compliance type
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListComplianceSummaries.html
     */ public toListComplianceSummaries ( ) { return this . to ( 'ListComplianceSummaries' ) ; } /**
     * Grants permission to view metadata history about a specified SSM document
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentMetadataHistory.html
     */ public toListDocumentMetadataHistory ( ) { return this . to ( 'ListDocumentMetadataHistory' ) ; } /**
     * Grants permission to list all versions of a specified document
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocumentVersions.html
     */ public toListDocumentVersions ( ) { return this . to ( 'ListDocumentVersions' ) ; } /**
     * Grants permission to view information about a specified SSM document
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListDocuments.html
     */ public toListDocuments ( ) { return this . to ( 'ListDocuments' ) ; } /**
     * Grants permission to SSM Agent to check for new State Manager associations (internal Systems Manager call)
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */ public toListInstanceAssociations ( ) { return this . to ( 'ListInstanceAssociations' ) ; } /**
     * Grants permission to view a list of specified inventory types for a specified instance
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListInventoryEntries.html
     */ public toListInventoryEntries ( ) { return this . to ( 'ListInventoryEntries' ) ; } /**
     * Grants permission to view details about OpsItemEvents
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemEvents.html
     */ public toListOpsItemEvents ( ) { return this . to ( 'ListOpsItemEvents' ) ; } /**
     * Grants permission to view details about OpsItem RelatedItems
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsItemRelatedItems.html
     */ public toListOpsItemRelatedItems ( ) { return this . to ( 'ListOpsItemRelatedItems' ) ; } /**
     * Grants permission to view a list of OpsMetadata objects
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListOpsMetadata.html
     */ public toListOpsMetadata ( ) { return this . to ( 'ListOpsMetadata' ) ; } /**
     * Grants permission to list resource-level summary count
     *
     * Access Level: List
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceComplianceSummaries.html
     */ public toListResourceComplianceSummaries ( ) { return this . to ( 'ListResourceComplianceSummaries' ) ; } /**
     * Grants permission to list information about resource data sync configurations in an account
     *
     * Access Level: List
     *
     * Possible conditions:
     * - .ifSyncType()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListResourceDataSync.html
     */ public toListResourceDataSync ( ) { return this . to ( 'ListResourceDataSync' ) ; } /**
     * Grants permission to view a list of resource tags for a specified resource
     *
     * Access Level: Read
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ListTagsForResource.html
     */ public toListTagsForResource ( ) { return this . to ( 'ListTagsForResource' ) ; } /**
     * Grants permission to share a custom SSM document publicly or privately with specified AWS accounts
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html
     */ public toModifyDocumentPermission ( ) { return this . to ( 'ModifyDocumentPermission' ) ; } /**
     * Grants permission to register a compliance type and other compliance details on a specified resource
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html
     */ public toPutComplianceItems ( ) { return this . to ( 'PutComplianceItems' ) ; } /**
     * Grants permission to SSM Agent to generate a report of the results of specific agent requests (internal Systems Manager call)
     *
     * Access Level: Read
     */ public toPutConfigurePackageResult ( ) { return this . to ( 'PutConfigurePackageResult' ) ; } /**
     * Grants permission to add or update inventory items on multiple specified managed instances
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html
     */ public toPutInventory ( ) { return this . to ( 'PutInventory' ) ; } /**
     * Grants permission to create an SSM parameter
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifAwsRequestTag()
     * - .ifAwsTagKeys()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html
     */ public toPutParameter ( ) { return this . to ( 'PutParameter' ) ; } /**
     * Grants permission to specify the default patch baseline for an operating system type
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html
     */ public toRegisterDefaultPatchBaseline ( ) { return this . to ( 'RegisterDefaultPatchBaseline' ) ; } /**
     * Grants permission to register a Systems Manager Agent
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifAwsRequestTag()
     * - .ifAwsTagKeys()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */ public toRegisterManagedInstance ( ) { return this . to ( 'RegisterManagedInstance' ) ; } /**
     * Grants permission to specify the default patch baseline for a specified patch group
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html
     */ public toRegisterPatchBaselineForPatchGroup ( ) { return this . to ( 'RegisterPatchBaselineForPatchGroup' ) ; } /**
     * Grants permission to register a target with a specified maintenance window
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html
     */ public toRegisterTargetWithMaintenanceWindow ( ) { return this . to ( 'RegisterTargetWithMaintenanceWindow' ) ; } /**
     * Grants permission to register a task with a specified maintenance window
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html
     */ public toRegisterTaskWithMaintenanceWindow ( ) { return this . to ( 'RegisterTaskWithMaintenanceWindow' ) ; } /**
     * Grants permission to remove a specified tag key from a specified resource
     *
     * Access Level: Tagging
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html
     */ public toRemoveTagsFromResource ( ) { return this . to ( 'RemoveTagsFromResource' ) ; } /**
     * Grants permission to reset the service setting for an AWS account to the default value
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResetServiceSetting.html
     */ public toResetServiceSetting ( ) { return this . to ( 'ResetServiceSetting' ) ; } /**
     * Grants permission to reconnect a Session Manager session to a managed instance
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ResumeSession.html
     */ public toResumeSession ( ) { return this . to ( 'ResumeSession' ) ; } /**
     * Grants permission to send a signal to change the current behavior or status of a specified Automation execution
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendAutomationSignal.html
     */ public toSendAutomationSignal ( ) { return this . to ( 'SendAutomationSignal' ) ; } /**
     * Grants permission to run commands on one or more specified managed instances
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifAwsResourceTag()
     * - .ifResourceTag()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendCommand.html
     */ public toSendCommand ( ) { return this . to ( 'SendCommand' ) ; } /**
     * Grants permission to run a specified association manually
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAssociationsOnce.html
     */ public toStartAssociationsOnce ( ) { return this . to ( 'StartAssociationsOnce' ) ; } /**
     * Grants permission to initiate the execution of an Automation document
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAutomationExecution.html
     */ public toStartAutomationExecution ( ) { return this . to ( 'StartAutomationExecution' ) ; } /**
     * Grants permission to initiate the execution of an Automation Change Template document
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartChangeRequestExecution.html
     */ public toStartChangeRequestExecution ( ) { return this . to ( 'StartChangeRequestExecution' ) ; } /**
     * Grants permission to initiate a connection to a specified target for a Session Manager session
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifSessionDocumentAccessCheck()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartSession.html
     */ public toStartSession ( ) { return this . to ( 'StartSession' ) ; } /**
     * Grants permission to stop a specified Automation execution that is already in progress
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StopAutomationExecution.html
     */ public toStopAutomationExecution ( ) { return this . to ( 'StopAutomationExecution' ) ; } /**
     * Grants permission to permanently end a Session Manager connection to an instance
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_TerminateSession.html
     */ public toTerminateSession ( ) { return this . to ( 'TerminateSession' ) ; } /**
     * Grants permission to update an association and immediately run the association on the specified targets
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociation.html
     */ public toUpdateAssociation ( ) { return this . to ( 'UpdateAssociation' ) ; } /**
     * Grants permission to update the status of the SSM document associated with a specified instance
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html
     */ public toUpdateAssociationStatus ( ) { return this . to ( 'UpdateAssociationStatus' ) ; } /**
     * Grants permission to update one or more values for an SSM document
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocument.html
     */ public toUpdateDocument ( ) { return this . to ( 'UpdateDocument' ) ; } /**
     * Grants permission to change the default version of an SSM document
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentDefaultVersion.html
     */ public toUpdateDocumentDefaultVersion ( ) { return this . to ( 'UpdateDocumentDefaultVersion' ) ; } /**
     * Grants permission to update the metadata of an SSM document
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateDocumentMetadata.html
     */ public toUpdateDocumentMetadata ( ) { return this . to ( 'UpdateDocumentMetadata' ) ; } /**
     * Grants permission to SSM Agent to update the status of the association that it is currently running (internal Systems Manager call)
     *
     * Access Level: Write
     */ public toUpdateInstanceAssociationStatus ( ) { return this . to ( 'UpdateInstanceAssociationStatus' ) ; } /**
     * Grants permission to SSM Agent to send a heartbeat signal to the Systems Manager service in the cloud
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html
     */ public toUpdateInstanceInformation ( ) { return this . to ( 'UpdateInstanceInformation' ) ; } /**
     * Grants permission to update a specified maintenance window
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindow.html
     */ public toUpdateMaintenanceWindow ( ) { return this . to ( 'UpdateMaintenanceWindow' ) ; } /**
     * Grants permission to update a specified maintenance window target
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTarget.html
     */ public toUpdateMaintenanceWindowTarget ( ) { return this . to ( 'UpdateMaintenanceWindowTarget' ) ; } /**
     * Grants permission to update a specified maintenance window task
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateMaintenanceWindowTask.html
     */ public toUpdateMaintenanceWindowTask ( ) { return this . to ( 'UpdateMaintenanceWindowTask' ) ; } /**
     * Grants permission to assign or change the IAM role assigned to a specified managed instance
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateManagedInstanceRole.html
     */ public toUpdateManagedInstanceRole ( ) { return this . to ( 'UpdateManagedInstanceRole' ) ; } /**
     * Grants permission to edit or change an OpsItem
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsItem.html
     */ public toUpdateOpsItem ( ) { return this . to ( 'UpdateOpsItem' ) ; } /**
     * Grants permission to update an OpsMetadata object
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateOpsMetadata.html
     */ public toUpdateOpsMetadata ( ) { return this . to ( 'UpdateOpsMetadata' ) ; } /**
     * Grants permission to update a specified patch baseline
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdatePatchBaseline.html
     */ public toUpdatePatchBaseline ( ) { return this . to ( 'UpdatePatchBaseline' ) ; } /**
     * Grants permission to update a resource data sync
     *
     * Access Level: Write
     *
     * Possible conditions:
     * - .ifSyncType()
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateResourceDataSync.html
     */ public toUpdateResourceDataSync ( ) { return this . to ( 'UpdateResourceDataSync' ) ; } /**
     * Grants permission to update the service setting for an AWS account
     *
     * Access Level: Write
     *
     * https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateServiceSetting.html
     */ public toUpdateServiceSetting ( ) { return this . to ( 'UpdateServiceSetting' ) ; } protected accessLevelList : AccessLevelList = { Tagging : [ 'AddTagsToResource' , 'RemoveTagsFromResource' ] , Write : [ 'AssociateOpsItemRelatedItem' , 'CancelCommand' , 'CancelMaintenanceWindowExecution' , 'CreateActivation' , 'CreateAssociation' , 'CreateAssociationBatch' , 'CreateDocument' , 'CreateMaintenanceWindow' , 'CreateOpsItem' , 'CreateOpsMetadata' , 'CreatePatchBaseline' , 'CreateResourceDataSync' , 'DeleteActivation' , 'DeleteAssociation' , 'DeleteDocument' , 'DeleteInventory' , 'DeleteMaintenanceWindow' , 'DeleteOpsMetadata' , 'DeleteParameter' , 'DeleteParameters' , 'DeletePatchBaseline' , 'DeleteResourceDataSync' , 'DeregisterManagedInstance' , 'DeregisterPatchBaselineForPatchGroup' , 'DeregisterTargetFromMaintenanceWindow' , 'DeregisterTaskFromMaintenanceWindow' , 'DisassociateOpsItemRelatedItem' , 'LabelParameterVersion' , 'ModifyDocumentPermission' , 'PutComplianceItems' , 'PutInventory' , 'PutParameter' , 'RegisterDefaultPatchBaseline' , 'RegisterManagedInstance' , 'RegisterPatchBaselineForPatchGroup' , 'RegisterTargetWithMaintenanceWindow' , 'RegisterTaskWithMaintenanceWindow' , 'ResetServiceSetting' , 'ResumeSession' , 'SendAutomationSignal' , 'SendCommand' , 'StartAssociationsOnce' , 'StartAutomationExecution' , 'StartChangeRequestExecution' , 'StartSession' , 'StopAutomationExecution' , 'TerminateSession' , 'UpdateAssociation' , 'UpdateAssociationStatus' , 'UpdateDocument' , 'UpdateDocumentDefaultVersion' , 'UpdateDocumentMetadata' , 'UpdateInstanceAssociationStatus' , 'UpdateInstanceInformation' , 'UpdateMaintenanceWindow' , 'UpdateMaintenanceWindowTarget' , 'UpdateMaintenanceWindowTask' , 'UpdateManagedInstanceRole' , 'UpdateOpsItem' , 'UpdateOpsMetadata' , 'UpdatePatchBaseline' , 'UpdateResourceDataSync' , 'UpdateServiceSetting' ] , Read : [ 'DescribeActivations' , 'DescribeAssociation' , 'DescribeAssociationExecutionTargets' , 'DescribeAssociationExecutions' , 'DescribeAutomationExecutions' , 'DescribeAutomationStepExecutions' , 'DescribeAvailablePatches' , 'DescribeDocument' , 'DescribeDocumentParameters' , 'DescribeDocumentPermission' , 'DescribeEffectiveInstanceAssociations' , 'DescribeEffectivePatchesForPatchBaseline' , 'DescribeInstanceAssociationsStatus' , 'DescribeInstanceInformation' , 'DescribeInstancePatchStates' , 'DescribeInstancePatchStatesForPatchGroup' , 'DescribeInstancePatches' , 'DescribeInstanceProperties' , 'DescribeInventoryDeletions' , 'DescribeOpsItems' , 'GetAutomationExecution' , 'GetCalendarState' , 'GetCommandInvocation' , 'GetConnectionStatus' , 'GetDefaultPatchBaseline' , 'GetDeployablePatchSnapshotForInstance' , 'GetDocument' , 'GetInventory' , 'GetInventorySchema' , 'GetMaintenanceWindow' , 'GetMaintenanceWindowExecution' , 'GetMaintenanceWindowExecutionTask' , 'GetMaintenanceWindowExecutionTaskInvocation' , 'GetMaintenanceWindowTask' , 'GetManifest' , 'GetOpsItem' , 'GetOpsMetadata' , 'GetOpsSummary' , 'GetParameter' , 'GetParameterHistory' , 'GetParameters' , 'GetParametersByPath' , 'GetPatchBaseline' , 'GetPatchBaselineForPatchGroup' , 'GetServiceSetting' , 'ListCommandInvocations' , 'ListCommands' , 'ListOpsItemEvents' , 'ListOpsItemRelatedItems' , 'ListTagsForResource' , 'PutConfigurePackageResult' ] , List : [ 'DescribeMaintenanceWindowExecutionTaskInvocations' , 'DescribeMaintenanceWindowExecutionTasks' , 'DescribeMaintenanceWindowExecutions' , 'DescribeMaintenanceWindowSchedule' , 'DescribeMaintenanceWindowTargets' , 'DescribeMaintenanceWindowTasks' , 'DescribeMaintenanceWindows' , 'DescribeMaintenanceWindowsForTarget' , 'DescribeParameters' , 'DescribePatchBaselines' , 'DescribePatchGroupState' , 'DescribePatchGroups' , 'DescribePatchProperties' , 'DescribeSessions' , 'ListAssociationVersions' , 'ListAssociations' , 'ListComplianceItems' , 'ListComplianceSummaries' , 'ListDocumentMetadataHistory' , 'ListDocumentVersions' , 'ListDocuments' , 'ListInstanceAssociations' , 'ListInventoryEntries' , 'ListOpsMetadata' , 'ListResourceComplianceSummaries' , 'ListResourceDataSync' ] } ; param associationId param account param region param partition public onAssociation ( associationId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:association/${ associationId }` ) ; } param automationExecutionId param account param region param partition public onAutomationExecution ( automationExecutionId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:automation-execution/${ automationExecutionId }` ) ; } param automationDefinitionName param versionId param account param region param partition public onAutomationDefinition ( automationDefinitionName , versionId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:automation-definition/${ automationDefinitionName }:${ versionId }` ) ; } param bucketName param partition public onBucket ( bucketName , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:s3:::${ bucketName }` ) ; } param documentName param account param region param partition public onDocument ( documentName , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:document/${ documentName }` ) ; } param instanceId param account param region param partition public onInstance ( instanceId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ec2:${ region || '*' }:${ account || '*' }:instance/${ instanceId }` ) ; } param resourceId param account param region param partition public onMaintenancewindow ( resourceId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:maintenancewindow/${ resourceId }` ) ; } param instanceId param account param region param partition public onManagedInstance ( instanceId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:managed-instance/${ instanceId }` ) ; } param instanceId param account param region param partition public onManagedInstanceInventory ( instanceId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:managed-instance-inventory/${ instanceId }` ) ; } param resourceId param account param region param partition public onOpsitem ( resourceId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:opsitem/${ resourceId }` ) ; } param resourceId param account param region param partition public onOpsmetadata ( resourceId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:opsmetadata/${ resourceId }` ) ; } param parameterNameWithoutLeadingSlash param account param region param partition public onParameter ( parameterNameWithoutLeadingSlash , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:parameter/${ parameterNameWithoutLeadingSlash }` ) ; } param patchBaselineIdResourceId param account param region param partition public onPatchbaseline ( patchBaselineIdResourceId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:patchbaseline/${ patchBaselineIdResourceId }` ) ; } param sessionId param account param region param partition public onSession ( sessionId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:session/${ sessionId }` ) ; } param syncName param account param region param partition public onResourcedatasync ( syncName , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:resource-data-sync/${ syncName }` ) ; } param resourceId param account param region param partition public onServicesetting ( resourceId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:servicesetting/${ resourceId }` ) ; } param windowTargetId param account param region param partition public onWindowtarget ( windowTargetId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:windowtarget/${ windowTargetId }` ) ; } param windowTaskId param account param region param partition public onWindowtask ( windowTaskId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ssm:${ region || '*' }:${ account || '*' }:windowtask/${ windowTaskId }` ) ; } param taskId param account param region param partition public onTask ( taskId , account ? , region ? , partition ? ) { return this . on ( `arn:${ partition || 'aws' }:ecs:${ region || '*' }:${ account || '*' }:task/${ taskId }` ) ; } param value param operator public ifDocumentCategories ( value , operator ? ) { return this . if ( `DocumentCategories` , value , operator || 'StringLike' ) ; } param value param operator public ifOverwrite ( value , operator ? ) { return this . if ( `Overwrite` , value , operator || 'StringLike' ) ; } param value param operator public ifRecursive ( value , operator ? ) { return this . if ( `Recursive` , value , operator || 'StringLike' ) ; } param value public ifSessionDocumentAccessCheck ( value ? ) { return this . if ( `SessionDocumentAccessCheck` , ( typeof value !== 'undefined' ? value : true ) , 'Bool' ) ; } param value param operator public ifSyncType ( value , operator ? ) { return this . if ( `SyncType` , value , operator || 'StringLike' ) ; } param tagKey param value param operator public ifResourceTag ( tagKey , value , operator ? ) { return this . if ( `ResourceTag/${ tagKey }` , value , operator || 'StringLike' ) ; } }