aws-sdk-accessanalyzer 1.3.0 → 1.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 5bbf86c22539bb14527eb08f410061805aed66f6
-  data.tar.gz: 64771f42dd95d97334d8f597a459eccaa63c6158
+SHA256:
+  metadata.gz: 919a5ba3d1f376633c773d3f960eab4607cd455881542223a3b4e96e72d5fa68
+  data.tar.gz: 3d1271eddf20f025b5514278c1303f6fd9465f5af1ba236cce1c46da5a72d2a8
 SHA512:
-  metadata.gz: c0de7ecc35e07974fffed1da9876bc0057073c91ff30910f530b97c6b2bd2db7cf3e3708e3d7b5c4f3d2c7c37c546888ad0ff05889c88a3ac09f9aff9f173d77
-  data.tar.gz: 07ddc27aaac1eb3f4fe9e4ac84af067873feca5bac0ac7cdb0c96a59e2bbb6d85908ac69127f08ac709feb303929ad9a17f79a3c4a351f455ef22f9776684f4b
+  metadata.gz: 5429649b77a4c73297cf14b55545d2d0b87ca7641002c8dc84f85c0e22802e84830fcf8713af33a7e475b0c2daa430bda3cac4d301fb65cc9df56eeae729825e
+  data.tar.gz: 7923a05ea9f329684cc9c8bb2416c827adb3889a41fd23c6a8468ba72ab29bbe93dfb597177732b242f6b1dc5ee14978add4b89b241b3e5a7adb25587fd6c999

data/lib/aws-sdk-accessanalyzer.rb

@@ -45,6 +45,6 @@ require_relative 'aws-sdk-accessanalyzer/customizations'
 # @service
 module Aws::AccessAnalyzer
 
-  GEM_VERSION = '1.3.0'
+  GEM_VERSION = '1.8.1'
 
 end

data/lib/aws-sdk-accessanalyzer/client.rb

@@ -24,6 +24,7 @@ require 'aws-sdk-core/plugins/jsonvalue_converter.rb'
 require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
 require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
 require 'aws-sdk-core/plugins/transfer_encoding.rb'
+require 'aws-sdk-core/plugins/http_checksum.rb'
 require 'aws-sdk-core/plugins/signature_v4.rb'
 require 'aws-sdk-core/plugins/protocols/rest_json.rb'
 
@@ -32,11 +33,11 @@ Aws::Plugins::GlobalConfiguration.add_identifier(:accessanalyzer)
 module Aws::AccessAnalyzer
   # An API client for AccessAnalyzer.  To construct a client, you need to configure a `:region` and `:credentials`.
   #
-  #   client = Aws::AccessAnalyzer::Client.new(
-  #     region: region_name,
-  #     credentials: credentials,
-  #     # ...
-  #   )
+  #     client = Aws::AccessAnalyzer::Client.new(
+  #       region: region_name,
+  #       credentials: credentials,
+  #       # ...
+  #     )
   #
   # For details on configuring region and credentials see
   # the [developer guide](/sdk-for-ruby/v3/developer-guide/setup-config.html).
@@ -69,6 +70,7 @@ module Aws::AccessAnalyzer
     add_plugin(Aws::Plugins::ClientMetricsPlugin)
     add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
     add_plugin(Aws::Plugins::TransferEncoding)
+    add_plugin(Aws::Plugins::HttpChecksum)
     add_plugin(Aws::Plugins::SignatureV4)
     add_plugin(Aws::Plugins::Protocols::RestJson)
 
@@ -105,7 +107,7 @@ module Aws::AccessAnalyzer
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
     #     used to determine the service `:endpoint`. When not passed,
-    #     a default `:region` is search for in the following locations:
+    #     a default `:region` is searched for in the following locations:
     #
     #     * `Aws.config[:region]`
     #     * `ENV['AWS_REGION']`
@@ -161,7 +163,7 @@ module Aws::AccessAnalyzer
     #   @option options [String] :endpoint
     #     The client endpoint is normally constructed from the `:region`
     #     option. You should only configure an `:endpoint` when connecting
-    #     to test endpoints. This should be avalid HTTP(S) URI.
+    #     to test or custom endpoints. This should be a valid HTTP(S) URI.
     #
     #   @option options [Integer] :endpoint_cache_max_entries (1000)
     #     Used for the maximum size limit of the LRU cache storing endpoints data
@@ -176,7 +178,7 @@ module Aws::AccessAnalyzer
     #     requests fetching endpoints information. Defaults to 60 sec.
     #
     #   @option options [Boolean] :endpoint_discovery (false)
-    #     When set to `true`, endpoint discovery will be enabled for operations when available. Defaults to `false`.
+    #     When set to `true`, endpoint discovery will be enabled for operations when available.
     #
     #   @option options [Aws::Log::Formatter] :log_formatter (Aws::Log::Formatter.default)
     #     The log formatter.
@@ -229,15 +231,19 @@ module Aws::AccessAnalyzer
     #
     #   @option options [String] :retry_mode ("legacy")
     #     Specifies which retry algorithm to use. Values are:
-    #       * `legacy` - The pre-existing retry behavior.  This is default value if
-    #         no retry mode is provided.
-    #       * `standard` - A standardized set of retry rules across the AWS SDKs.
-    #         This includes support for retry quotas, which limit the number of
-    #         unsuccessful retries a client can make.
-    #       * `adaptive` - An experimental retry mode that includes all the
-    #         functionality of `standard` mode along with automatic client side
-    #         throttling.  This is a provisional mode that may change behavior
-    #         in the future.
+    #
+    #     * `legacy` - The pre-existing retry behavior.  This is default value if
+    #       no retry mode is provided.
+    #
+    #     * `standard` - A standardized set of retry rules across the AWS SDKs.
+    #       This includes support for retry quotas, which limit the number of
+    #       unsuccessful retries a client can make.
+    #
+    #     * `adaptive` - An experimental retry mode that includes all the
+    #       functionality of `standard` mode along with automatic client side
+    #       throttling.  This is a provisional mode that may change behavior
+    #       in the future.
+    #
     #
     #   @option options [String] :secret_access_key
     #
@@ -265,8 +271,7 @@ module Aws::AccessAnalyzer
     #
     #   @option options [Integer] :http_read_timeout (60) The default
     #     number of seconds to wait for response data.  This value can
-    #     safely be set
-    #     per-request on the session yielded by {#session_for}.
+    #     safely be set per-request on the session.
     #
     #   @option options [Float] :http_idle_timeout (5) The number of
     #     seconds a connection is allowed to sit idle before it is
@@ -278,7 +283,7 @@ module Aws::AccessAnalyzer
     #     request body.  This option has no effect unless the request has
     #     "Expect" header set to "100-continue".  Defaults to `nil` which
     #     disables this behaviour.  This value can safely be set per
-    #     request on the session yielded by {#session_for}.
+    #     request on the session.
     #
     #   @option options [Boolean] :http_wire_trace (false) When `true`,
     #     HTTP debug output will be sent to the `:logger`.
@@ -353,7 +358,7 @@ module Aws::AccessAnalyzer
     #     tags: {
     #       "String" => "String",
     #     },
-    #     type: "ACCOUNT", # required, accepts ACCOUNT
+    #     type: "ACCOUNT", # required, accepts ACCOUNT, ORGANIZATION
     #   })
     #
     # @example Response structure
@@ -509,6 +514,7 @@ module Aws::AccessAnalyzer
     #   resp.resource.error #=> String
     #   resp.resource.is_public #=> Boolean
     #   resp.resource.resource_arn #=> String
+    #   resp.resource.resource_owner_account #=> String
     #   resp.resource.resource_type #=> String, one of "AWS::IAM::Role", "AWS::KMS::Key", "AWS::Lambda::Function", "AWS::Lambda::LayerVersion", "AWS::S3::Bucket", "AWS::SQS::Queue"
     #   resp.resource.shared_via #=> Array
     #   resp.resource.shared_via[0] #=> String
@@ -546,9 +552,11 @@ module Aws::AccessAnalyzer
     #   resp.analyzer.last_resource_analyzed #=> String
     #   resp.analyzer.last_resource_analyzed_at #=> Time
     #   resp.analyzer.name #=> String
+    #   resp.analyzer.status #=> String, one of "ACTIVE", "CREATING", "DISABLED", "FAILED"
+    #   resp.analyzer.status_reason.code #=> String, one of "AWS_SERVICE_ACCESS_DISABLED", "DELEGATED_ADMINISTRATOR_DEREGISTERED", "ORGANIZATION_DELETED", "SERVICE_LINKED_ROLE_CREATION_FAILED"
     #   resp.analyzer.tags #=> Hash
     #   resp.analyzer.tags["String"] #=> String
-    #   resp.analyzer.type #=> String, one of "ACCOUNT"
+    #   resp.analyzer.type #=> String, one of "ACCOUNT", "ORGANIZATION"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzer AWS API Documentation
     #
@@ -634,7 +642,11 @@ module Aws::AccessAnalyzer
     #   resp.finding.principal #=> Hash
     #   resp.finding.principal["String"] #=> String
     #   resp.finding.resource #=> String
+    #   resp.finding.resource_owner_account #=> String
     #   resp.finding.resource_type #=> String, one of "AWS::IAM::Role", "AWS::KMS::Key", "AWS::Lambda::Function", "AWS::Lambda::LayerVersion", "AWS::S3::Bucket", "AWS::SQS::Queue"
+    #   resp.finding.sources #=> Array
+    #   resp.finding.sources[0].detail.access_point_arn #=> String
+    #   resp.finding.sources[0].type #=> String, one of "BUCKET_ACL", "POLICY", "S3_ACCESS_POINT"
     #   resp.finding.status #=> String, one of "ACTIVE", "ARCHIVED", "RESOLVED"
     #   resp.finding.updated_at #=> Time
     #
@@ -667,6 +679,8 @@ module Aws::AccessAnalyzer
     #   * {Types::ListAnalyzedResourcesResponse#analyzed_resources #analyzed_resources} => Array<Types::AnalyzedResourceSummary>
     #   * {Types::ListAnalyzedResourcesResponse#next_token #next_token} => String
     #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_analyzed_resources({
@@ -680,6 +694,7 @@ module Aws::AccessAnalyzer
     #
     #   resp.analyzed_resources #=> Array
     #   resp.analyzed_resources[0].resource_arn #=> String
+    #   resp.analyzed_resources[0].resource_owner_account #=> String
     #   resp.analyzed_resources[0].resource_type #=> String, one of "AWS::IAM::Role", "AWS::KMS::Key", "AWS::Lambda::Function", "AWS::Lambda::LayerVersion", "AWS::S3::Bucket", "AWS::SQS::Queue"
     #   resp.next_token #=> String
     #
@@ -708,12 +723,14 @@ module Aws::AccessAnalyzer
     #   * {Types::ListAnalyzersResponse#analyzers #analyzers} => Array<Types::AnalyzerSummary>
     #   * {Types::ListAnalyzersResponse#next_token #next_token} => String
     #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_analyzers({
     #     max_results: 1,
     #     next_token: "Token",
-    #     type: "ACCOUNT", # accepts ACCOUNT
+    #     type: "ACCOUNT", # accepts ACCOUNT, ORGANIZATION
     #   })
     #
     # @example Response structure
@@ -724,9 +741,11 @@ module Aws::AccessAnalyzer
     #   resp.analyzers[0].last_resource_analyzed #=> String
     #   resp.analyzers[0].last_resource_analyzed_at #=> Time
     #   resp.analyzers[0].name #=> String
+    #   resp.analyzers[0].status #=> String, one of "ACTIVE", "CREATING", "DISABLED", "FAILED"
+    #   resp.analyzers[0].status_reason.code #=> String, one of "AWS_SERVICE_ACCESS_DISABLED", "DELEGATED_ADMINISTRATOR_DEREGISTERED", "ORGANIZATION_DELETED", "SERVICE_LINKED_ROLE_CREATION_FAILED"
     #   resp.analyzers[0].tags #=> Hash
     #   resp.analyzers[0].tags["String"] #=> String
-    #   resp.analyzers[0].type #=> String, one of "ACCOUNT"
+    #   resp.analyzers[0].type #=> String, one of "ACCOUNT", "ORGANIZATION"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzers AWS API Documentation
@@ -754,6 +773,8 @@ module Aws::AccessAnalyzer
     #   * {Types::ListArchiveRulesResponse#archive_rules #archive_rules} => Array<Types::ArchiveRuleSummary>
     #   * {Types::ListArchiveRulesResponse#next_token #next_token} => String
     #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_archive_rules({
@@ -809,6 +830,8 @@ module Aws::AccessAnalyzer
     #   * {Types::ListFindingsResponse#findings #findings} => Array<Types::FindingSummary>
     #   * {Types::ListFindingsResponse#next_token #next_token} => String
     #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_findings({
@@ -844,7 +867,11 @@ module Aws::AccessAnalyzer
     #   resp.findings[0].principal #=> Hash
     #   resp.findings[0].principal["String"] #=> String
     #   resp.findings[0].resource #=> String
+    #   resp.findings[0].resource_owner_account #=> String
     #   resp.findings[0].resource_type #=> String, one of "AWS::IAM::Role", "AWS::KMS::Key", "AWS::Lambda::Function", "AWS::Lambda::LayerVersion", "AWS::S3::Bucket", "AWS::SQS::Queue"
+    #   resp.findings[0].sources #=> Array
+    #   resp.findings[0].sources[0].detail.access_point_arn #=> String
+    #   resp.findings[0].sources[0].type #=> String, one of "BUCKET_ACL", "POLICY", "S3_ACCESS_POINT"
     #   resp.findings[0].status #=> String, one of "ACTIVE", "ARCHIVED", "RESOLVED"
     #   resp.findings[0].updated_at #=> Time
     #   resp.next_token #=> String
@@ -1070,7 +1097,7 @@ module Aws::AccessAnalyzer
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-accessanalyzer'
-      context[:gem_version] = '1.3.0'
+      context[:gem_version] = '1.8.1'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-accessanalyzer/client_api.rb

@@ -17,6 +17,7 @@ module Aws::AccessAnalyzer
     AnalyzedResourceSummary = Shapes::StructureShape.new(name: 'AnalyzedResourceSummary')
     AnalyzedResourcesList = Shapes::ListShape.new(name: 'AnalyzedResourcesList')
     AnalyzerArn = Shapes::StringShape.new(name: 'AnalyzerArn')
+    AnalyzerStatus = Shapes::StringShape.new(name: 'AnalyzerStatus')
     AnalyzerSummary = Shapes::StructureShape.new(name: 'AnalyzerSummary')
     AnalyzersList = Shapes::ListShape.new(name: 'AnalyzersList')
     ArchiveRuleSummary = Shapes::StructureShape.new(name: 'ArchiveRuleSummary')
@@ -34,6 +35,10 @@ module Aws::AccessAnalyzer
     Finding = Shapes::StructureShape.new(name: 'Finding')
     FindingId = Shapes::StringShape.new(name: 'FindingId')
     FindingIdList = Shapes::ListShape.new(name: 'FindingIdList')
+    FindingSource = Shapes::StructureShape.new(name: 'FindingSource')
+    FindingSourceDetail = Shapes::StructureShape.new(name: 'FindingSourceDetail')
+    FindingSourceList = Shapes::ListShape.new(name: 'FindingSourceList')
+    FindingSourceType = Shapes::StringShape.new(name: 'FindingSourceType')
     FindingStatus = Shapes::StringShape.new(name: 'FindingStatus')
     FindingStatusUpdate = Shapes::StringShape.new(name: 'FindingStatusUpdate')
     FindingSummary = Shapes::StructureShape.new(name: 'FindingSummary')
@@ -63,6 +68,7 @@ module Aws::AccessAnalyzer
     Name = Shapes::StringShape.new(name: 'Name')
     OrderBy = Shapes::StringShape.new(name: 'OrderBy')
     PrincipalMap = Shapes::MapShape.new(name: 'PrincipalMap')
+    ReasonCode = Shapes::StringShape.new(name: 'ReasonCode')
     ResourceArn = Shapes::StringShape.new(name: 'ResourceArn')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ResourceType = Shapes::StringShape.new(name: 'ResourceType')
@@ -70,6 +76,7 @@ module Aws::AccessAnalyzer
     SharedViaList = Shapes::ListShape.new(name: 'SharedViaList')
     SortCriteria = Shapes::StructureShape.new(name: 'SortCriteria')
     StartResourceScanRequest = Shapes::StructureShape.new(name: 'StartResourceScanRequest')
+    StatusReason = Shapes::StructureShape.new(name: 'StatusReason')
     String = Shapes::StringShape.new(name: 'String')
     TagKeys = Shapes::ListShape.new(name: 'TagKeys')
     TagResourceRequest = Shapes::StructureShape.new(name: 'TagResourceRequest')
@@ -100,6 +107,7 @@ module Aws::AccessAnalyzer
     AnalyzedResource.add_member(:error, Shapes::ShapeRef.new(shape: String, location_name: "error"))
     AnalyzedResource.add_member(:is_public, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "isPublic"))
     AnalyzedResource.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "resourceArn"))
+    AnalyzedResource.add_member(:resource_owner_account, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceOwnerAccount"))
     AnalyzedResource.add_member(:resource_type, Shapes::ShapeRef.new(shape: ResourceType, required: true, location_name: "resourceType"))
     AnalyzedResource.add_member(:shared_via, Shapes::ShapeRef.new(shape: SharedViaList, location_name: "sharedVia"))
     AnalyzedResource.add_member(:status, Shapes::ShapeRef.new(shape: FindingStatus, location_name: "status"))
@@ -107,6 +115,7 @@ module Aws::AccessAnalyzer
     AnalyzedResource.struct_class = Types::AnalyzedResource
 
     AnalyzedResourceSummary.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "resourceArn"))
+    AnalyzedResourceSummary.add_member(:resource_owner_account, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceOwnerAccount"))
     AnalyzedResourceSummary.add_member(:resource_type, Shapes::ShapeRef.new(shape: ResourceType, required: true, location_name: "resourceType"))
     AnalyzedResourceSummary.struct_class = Types::AnalyzedResourceSummary
 
@@ -117,6 +126,8 @@ module Aws::AccessAnalyzer
     AnalyzerSummary.add_member(:last_resource_analyzed, Shapes::ShapeRef.new(shape: String, location_name: "lastResourceAnalyzed"))
     AnalyzerSummary.add_member(:last_resource_analyzed_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "lastResourceAnalyzedAt"))
     AnalyzerSummary.add_member(:name, Shapes::ShapeRef.new(shape: Name, required: true, location_name: "name"))
+    AnalyzerSummary.add_member(:status, Shapes::ShapeRef.new(shape: AnalyzerStatus, required: true, location_name: "status"))
+    AnalyzerSummary.add_member(:status_reason, Shapes::ShapeRef.new(shape: StatusReason, location_name: "statusReason"))
     AnalyzerSummary.add_member(:tags, Shapes::ShapeRef.new(shape: TagsMap, location_name: "tags"))
     AnalyzerSummary.add_member(:type, Shapes::ShapeRef.new(shape: Type, required: true, location_name: "type"))
     AnalyzerSummary.struct_class = Types::AnalyzerSummary
@@ -182,13 +193,24 @@ module Aws::AccessAnalyzer
     Finding.add_member(:is_public, Shapes::ShapeRef.new(shape: Boolean, location_name: "isPublic"))
     Finding.add_member(:principal, Shapes::ShapeRef.new(shape: PrincipalMap, location_name: "principal"))
     Finding.add_member(:resource, Shapes::ShapeRef.new(shape: String, location_name: "resource"))
+    Finding.add_member(:resource_owner_account, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceOwnerAccount"))
     Finding.add_member(:resource_type, Shapes::ShapeRef.new(shape: ResourceType, required: true, location_name: "resourceType"))
+    Finding.add_member(:sources, Shapes::ShapeRef.new(shape: FindingSourceList, location_name: "sources"))
     Finding.add_member(:status, Shapes::ShapeRef.new(shape: FindingStatus, required: true, location_name: "status"))
     Finding.add_member(:updated_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "updatedAt"))
     Finding.struct_class = Types::Finding
 
     FindingIdList.member = Shapes::ShapeRef.new(shape: FindingId)
 
+    FindingSource.add_member(:detail, Shapes::ShapeRef.new(shape: FindingSourceDetail, location_name: "detail"))
+    FindingSource.add_member(:type, Shapes::ShapeRef.new(shape: FindingSourceType, required: true, location_name: "type"))
+    FindingSource.struct_class = Types::FindingSource
+
+    FindingSourceDetail.add_member(:access_point_arn, Shapes::ShapeRef.new(shape: String, location_name: "accessPointArn"))
+    FindingSourceDetail.struct_class = Types::FindingSourceDetail
+
+    FindingSourceList.member = Shapes::ShapeRef.new(shape: FindingSource)
+
     FindingSummary.add_member(:action, Shapes::ShapeRef.new(shape: ActionList, location_name: "action"))
     FindingSummary.add_member(:analyzed_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "analyzedAt"))
     FindingSummary.add_member(:condition, Shapes::ShapeRef.new(shape: ConditionKeyMap, required: true, location_name: "condition"))
@@ -198,7 +220,9 @@ module Aws::AccessAnalyzer
     FindingSummary.add_member(:is_public, Shapes::ShapeRef.new(shape: Boolean, location_name: "isPublic"))
     FindingSummary.add_member(:principal, Shapes::ShapeRef.new(shape: PrincipalMap, location_name: "principal"))
     FindingSummary.add_member(:resource, Shapes::ShapeRef.new(shape: String, location_name: "resource"))
+    FindingSummary.add_member(:resource_owner_account, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceOwnerAccount"))
     FindingSummary.add_member(:resource_type, Shapes::ShapeRef.new(shape: ResourceType, required: true, location_name: "resourceType"))
+    FindingSummary.add_member(:sources, Shapes::ShapeRef.new(shape: FindingSourceList, location_name: "sources"))
     FindingSummary.add_member(:status, Shapes::ShapeRef.new(shape: FindingStatus, required: true, location_name: "status"))
     FindingSummary.add_member(:updated_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "updatedAt"))
     FindingSummary.struct_class = Types::FindingSummary
@@ -310,6 +334,9 @@ module Aws::AccessAnalyzer
     StartResourceScanRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "resourceArn"))
     StartResourceScanRequest.struct_class = Types::StartResourceScanRequest
 
+    StatusReason.add_member(:code, Shapes::ShapeRef.new(shape: ReasonCode, required: true, location_name: "code"))
+    StatusReason.struct_class = Types::StatusReason
+
     TagKeys.member = Shapes::ShapeRef.new(shape: String)
 
     TagResourceRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: String, required: true, location: "uri", location_name: "resourceArn"))

data/lib/aws-sdk-accessanalyzer/resource.rb

@@ -6,13 +6,7 @@
 # WARNING ABOUT GENERATED CODE
 
 module Aws::AccessAnalyzer
-  # This class provides a resource oriented interface for AccessAnalyzer.
-  # To create a resource object:
-  #     resource = Aws::AccessAnalyzer::Resource.new(region: 'us-west-2')
-  # You can supply a client object with custom configuration that will be used for all resource operations.
-  # If you do not pass +:client+, a default client will be constructed.
-  #     client = Aws::AccessAnalyzer::Client.new(region: 'us-west-2')
-  #     resource = Aws::AccessAnalyzer::Resource.new(client: client)
+
   class Resource
 
     # @param options ({})

data/lib/aws-sdk-accessanalyzer/types.rb

@@ -48,12 +48,17 @@ module Aws::AccessAnalyzer
     #   The ARN of the resource that was analyzed.
     #   @return [String]
     #
+    # @!attribute [rw] resource_owner_account
+    #   The AWS account ID that owns the resource.
+    #   @return [String]
+    #
     # @!attribute [rw] resource_type
     #   The type of the resource that was analyzed.
     #   @return [String]
     #
     # @!attribute [rw] shared_via
-    #   Indicates how the access that generated the finding is granted.
+    #   Indicates how the access that generated the finding is granted. This
+    #   is populated for Amazon S3 bucket findings.
     #   @return [Array<String>]
     #
     # @!attribute [rw] status
@@ -74,6 +79,7 @@ module Aws::AccessAnalyzer
       :error,
       :is_public,
       :resource_arn,
+      :resource_owner_account,
       :resource_type,
       :shared_via,
       :status,
@@ -87,6 +93,10 @@ module Aws::AccessAnalyzer
     #   The ARN of the analyzed resource.
     #   @return [String]
     #
+    # @!attribute [rw] resource_owner_account
+    #   The AWS account ID that owns the resource.
+    #   @return [String]
+    #
     # @!attribute [rw] resource_type
     #   The type of resource that was analyzed.
     #   @return [String]
@@ -95,6 +105,7 @@ module Aws::AccessAnalyzer
     #
     class AnalyzedResourceSummary < Struct.new(
       :resource_arn,
+      :resource_owner_account,
       :resource_type)
       include Aws::Structure
     end
@@ -121,6 +132,25 @@ module Aws::AccessAnalyzer
     #   The name of the analyzer.
     #   @return [String]
     #
+    # @!attribute [rw] status
+    #   The status of the analyzer. An `Active` analyzer successfully
+    #   monitors supported resources and generates new findings. The
+    #   analyzer is `Disabled` when a user action, such as removing trusted
+    #   access for IAM Access Analyzer from AWS Organizations, causes the
+    #   analyzer to stop generating new findings. The status is `Creating`
+    #   when the analyzer creation is in progress and `Failed` when the
+    #   analyzer creation has failed.
+    #   @return [String]
+    #
+    # @!attribute [rw] status_reason
+    #   The `statusReason` provides more details about the current status of
+    #   the analyzer. For example, if the creation for the analyzer fails, a
+    #   `Failed` status is displayed. For an analyzer with organization as
+    #   the type, this failure can be due to an issue with creating the
+    #   service-linked roles required in the member accounts of the AWS
+    #   organization.
+    #   @return [Types::StatusReason]
+    #
     # @!attribute [rw] tags
     #   The tags added to the analyzer.
     #   @return [Hash<String,String>]
@@ -138,6 +168,8 @@ module Aws::AccessAnalyzer
       :last_resource_analyzed,
       :last_resource_analyzed_at,
       :name,
+      :status,
+      :status_reason,
       :tags,
       :type)
       include Aws::Structure
@@ -217,7 +249,7 @@ module Aws::AccessAnalyzer
     #         tags: {
     #           "String" => "String",
     #         },
-    #         type: "ACCOUNT", # required, accepts ACCOUNT
+    #         type: "ACCOUNT", # required, accepts ACCOUNT, ORGANIZATION
     #       }
     #
     # @!attribute [rw] analyzer_name
@@ -467,10 +499,20 @@ module Aws::AccessAnalyzer
     #   The resource that an external principal has access to.
     #   @return [String]
     #
+    # @!attribute [rw] resource_owner_account
+    #   The AWS account ID that owns the resource.
+    #   @return [String]
+    #
     # @!attribute [rw] resource_type
     #   The type of the resource reported in the finding.
     #   @return [String]
     #
+    # @!attribute [rw] sources
+    #   The sources of the finding. This indicates how the access that
+    #   generated the finding is granted. It is populated for Amazon S3
+    #   bucket findings.
+    #   @return [Array<Types::FindingSource>]
+    #
     # @!attribute [rw] status
     #   The current status of the finding.
     #   @return [String]
@@ -491,12 +533,49 @@ module Aws::AccessAnalyzer
       :is_public,
       :principal,
       :resource,
+      :resource_owner_account,
       :resource_type,
+      :sources,
       :status,
       :updated_at)
       include Aws::Structure
     end
 
+    # The source of the finding. This indicates how the access that
+    # generated the finding is granted. It is populated for Amazon S3 bucket
+    # findings.
+    #
+    # @!attribute [rw] detail
+    #   Includes details about how the access that generated the finding is
+    #   granted. This is populated for Amazon S3 bucket findings.
+    #   @return [Types::FindingSourceDetail]
+    #
+    # @!attribute [rw] type
+    #   Indicates the type of access that generated the finding.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/FindingSource AWS API Documentation
+    #
+    class FindingSource < Struct.new(
+      :detail,
+      :type)
+      include Aws::Structure
+    end
+
+    # Includes details about how the access that generated the finding is
+    # granted. This is populated for Amazon S3 bucket findings.
+    #
+    # @!attribute [rw] access_point_arn
+    #   The ARN of the access point that generated the finding.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/FindingSourceDetail AWS API Documentation
+    #
+    class FindingSourceDetail < Struct.new(
+      :access_point_arn)
+      include Aws::Structure
+    end
+
     # Contains information about a finding.
     #
     # @!attribute [rw] action
@@ -540,10 +619,20 @@ module Aws::AccessAnalyzer
     #   The resource that the external principal has access to.
     #   @return [String]
     #
+    # @!attribute [rw] resource_owner_account
+    #   The AWS account ID that owns the resource.
+    #   @return [String]
+    #
     # @!attribute [rw] resource_type
     #   The type of the resource that the external principal has access to.
     #   @return [String]
     #
+    # @!attribute [rw] sources
+    #   The sources of the finding. This indicates how the access that
+    #   generated the finding is granted. It is populated for Amazon S3
+    #   bucket findings.
+    #   @return [Array<Types::FindingSource>]
+    #
     # @!attribute [rw] status
     #   The status of the finding.
     #   @return [String]
@@ -564,7 +653,9 @@ module Aws::AccessAnalyzer
       :is_public,
       :principal,
       :resource,
+      :resource_owner_account,
       :resource_type,
+      :sources,
       :status,
       :updated_at)
       include Aws::Structure
@@ -838,7 +929,7 @@ module Aws::AccessAnalyzer
     #       {
     #         max_results: 1,
     #         next_token: "Token",
-    #         type: "ACCOUNT", # accepts ACCOUNT
+    #         type: "ACCOUNT", # accepts ACCOUNT, ORGANIZATION
     #       }
     #
     # @!attribute [rw] max_results
@@ -1133,6 +1224,23 @@ module Aws::AccessAnalyzer
       include Aws::Structure
     end
 
+    # Provides more details about the current status of the analyzer. For
+    # example, if the creation for the analyzer fails, a `Failed` status is
+    # displayed. For an analyzer with organization as the type, this failure
+    # can be due to an issue with creating the service-linked roles required
+    # in the member accounts of the AWS organization.
+    #
+    # @!attribute [rw] code
+    #   The reason code for the current status of the analyzer.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StatusReason AWS API Documentation
+    #
+    class StatusReason < Struct.new(
+      :code)
+      include Aws::Structure
+    end
+
     # Adds a tag to the specified resource.
     #
     # @note When making an API call, you may pass TagResourceRequest

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-accessanalyzer
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.8.1
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-03-09 00:00:00.000000000 Z
+date: 2020-06-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.71.0
+        version: 3.99.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.71.0
+        version: 3.99.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement
@@ -81,7 +81,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.2.3
+rubygems_version: 2.7.6.2
 signing_key: 
 specification_version: 4
 summary: AWS SDK for Ruby - Access Analyzer