"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.WorkloadIdentityPerms=exports.OAuth2CredentialProviderIdentityPerms=exports.ApiKeyCredentialProviderIdentityPerms=exports.TOKEN_VAULT_CREDENTIAL_SECRET_WRITE_PERMS=exports.TOKEN_VAULT_CREDENTIAL_SECRET_READ_PERMS=void 0;const JSII_RTTI_SYMBOL_1=Symbol.for("jsii.rtti");exports.TOKEN_VAULT_CREDENTIAL_SECRET_READ_PERMS=["secretsmanager:GetSecretValue","secretsmanager:DescribeSecret"],exports.TOKEN_VAULT_CREDENTIAL_SECRET_WRITE_PERMS=["secretsmanager:PutSecretValue"];class ApiKeyCredentialProviderIdentityPerms{static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_bedrockagentcore.ApiKeyCredentialProviderIdentityPerms",version:"2.256.1"};static READ_PERMS=["bedrock-agentcore:GetApiKeyCredentialProvider"];static LIST_PERMS=["bedrock-agentcore:ListApiKeyCredentialProviders"];static ADMIN_PERMS=["bedrock-agentcore:CreateApiKeyCredentialProvider","bedrock-agentcore:GetApiKeyCredentialProvider","bedrock-agentcore:UpdateApiKeyCredentialProvider","bedrock-agentcore:DeleteApiKeyCredentialProvider"];static USE_PERMS=["bedrock-agentcore:GetResourceApiKey"];static FULL_ACCESS_PERMS=[...new Set([...ApiKeyCredentialProviderIdentityPerms.READ_PERMS,...ApiKeyCredentialProviderIdentityPerms.LIST_PERMS,...ApiKeyCredentialProviderIdentityPerms.ADMIN_PERMS,...ApiKeyCredentialProviderIdentityPerms.USE_PERMS])];constructor(){}}exports.ApiKeyCredentialProviderIdentityPerms=ApiKeyCredentialProviderIdentityPerms;class OAuth2CredentialProviderIdentityPerms{static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_bedrockagentcore.OAuth2CredentialProviderIdentityPerms",version:"2.256.1"};static READ_PERMS=["bedrock-agentcore:GetOauth2CredentialProvider"];static LIST_PERMS=["bedrock-agentcore:ListOauth2CredentialProviders"];static ADMIN_PERMS=["bedrock-agentcore:CreateOauth2CredentialProvider","bedrock-agentcore:GetOauth2CredentialProvider","bedrock-agentcore:UpdateOauth2CredentialProvider","bedrock-agentcore:DeleteOauth2CredentialProvider"];static USE_PERMS=["bedrock-agentcore:GetResourceOauth2Token","bedrock-agentcore:CompleteResourceTokenAuth"];static FULL_ACCESS_PERMS=[...new Set([...OAuth2CredentialProviderIdentityPerms.READ_PERMS,...OAuth2CredentialProviderIdentityPerms.LIST_PERMS,...OAuth2CredentialProviderIdentityPerms.ADMIN_PERMS,...OAuth2CredentialProviderIdentityPerms.USE_PERMS])];constructor(){}}exports.OAuth2CredentialProviderIdentityPerms=OAuth2CredentialProviderIdentityPerms;class WorkloadIdentityPerms{static[JSII_RTTI_SYMBOL_1]={fqn:"aws-cdk-lib.aws_bedrockagentcore.WorkloadIdentityPerms",version:"2.256.1"};static READ_PERMS=["bedrock-agentcore:GetWorkloadIdentity"];static LIST_PERMS=["bedrock-agentcore:ListWorkloadIdentities"];static ADMIN_PERMS=["bedrock-agentcore:CreateWorkloadIdentity","bedrock-agentcore:GetWorkloadIdentity","bedrock-agentcore:UpdateWorkloadIdentity","bedrock-agentcore:DeleteWorkloadIdentity"];static USE_PERMS=["bedrock-agentcore:GetWorkloadAccessToken","bedrock-agentcore:GetWorkloadAccessTokenForJWT","bedrock-agentcore:GetWorkloadAccessTokenForUserId"];static FULL_ACCESS_PERMS=[...new Set([...WorkloadIdentityPerms.READ_PERMS,...WorkloadIdentityPerms.LIST_PERMS,...WorkloadIdentityPerms.ADMIN_PERMS,...WorkloadIdentityPerms.USE_PERMS])];constructor(){}}exports.WorkloadIdentityPerms=WorkloadIdentityPerms;
