aws-sdk-accessanalyzer 1.50.0 → 1.52.0

data/sig/client.rbs

@@ -100,7 +100,8 @@ module Aws
                                       policy_document: ::String,
                                       access: Array[
                                         {
-                                          actions: Array[::String]
+                                          actions: Array[::String]?,
+                                          resources: Array[::String]?
                                         },
                                       ],
                                       policy_type: ("IDENTITY_POLICY" | "RESOURCE_POLICY")
@@ -121,6 +122,19 @@ module Aws
                                ) -> _CheckNoNewAccessResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CheckNoNewAccessResponseSuccess
 
+      interface _CheckNoPublicAccessResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::CheckNoPublicAccessResponse]
+        def result: () -> ("PASS" | "FAIL")
+        def message: () -> ::String
+        def reasons: () -> ::Array[Types::ReasonSummary]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/AccessAnalyzer/Client.html#check_no_public_access-instance_method
+      def check_no_public_access: (
+                                    policy_document: ::String,
+                                    resource_type: ("AWS::DynamoDB::Table" | "AWS::DynamoDB::Stream" | "AWS::EFS::FileSystem" | "AWS::OpenSearchService::Domain" | "AWS::Kinesis::Stream" | "AWS::Kinesis::StreamConsumer" | "AWS::KMS::Key" | "AWS::Lambda::Function" | "AWS::S3::Bucket" | "AWS::S3::AccessPoint" | "AWS::S3Express::DirectoryBucket" | "AWS::S3::Glacier" | "AWS::S3Outposts::Bucket" | "AWS::S3Outposts::AccessPoint" | "AWS::SecretsManager::Secret" | "AWS::SNS::Topic" | "AWS::SQS::Queue" | "AWS::IAM::AssumeRolePolicyDocument")
+                                  ) -> _CheckNoPublicAccessResponseSuccess
+                                | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CheckNoPublicAccessResponseSuccess
+
       interface _CreateAccessPreviewResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::CreateAccessPreviewResponse]
         def id: () -> ::String
@@ -282,6 +296,13 @@ module Aws
                                ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
 
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/AccessAnalyzer/Client.html#generate_finding_recommendation-instance_method
+      def generate_finding_recommendation: (
+                                             analyzer_arn: ::String,
+                                             id: ::String
+                                           ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
+                                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
+
       interface _GetAccessPreviewResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetAccessPreviewResponse]
         def access_preview: () -> Types::AccessPreview
@@ -336,6 +357,25 @@ module Aws
                        ) -> _GetFindingResponseSuccess
                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetFindingResponseSuccess
 
+      interface _GetFindingRecommendationResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetFindingRecommendationResponse]
+        def started_at: () -> ::Time
+        def completed_at: () -> ::Time
+        def next_token: () -> ::String
+        def resource_arn: () -> ::String
+        def recommended_steps: () -> ::Array[Types::RecommendedStep]
+        def recommendation_type: () -> ("UnusedPermissionRecommendation")
+        def status: () -> ("SUCCEEDED" | "FAILED" | "IN_PROGRESS")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/AccessAnalyzer/Client.html#get_finding_recommendation-instance_method
+      def get_finding_recommendation: (
+                                        analyzer_arn: ::String,
+                                        id: ::String,
+                                        ?max_results: ::Integer,
+                                        ?next_token: ::String
+                                      ) -> _GetFindingRecommendationResponseSuccess
+                                    | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetFindingRecommendationResponseSuccess
+
       interface _GetFindingV2ResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetFindingV2Response]
         def analyzed_at: () -> ::Time

data/sig/types.rbs

@@ -10,6 +10,7 @@ module Aws::AccessAnalyzer
 
     class Access
       attr_accessor actions: ::Array[::String]
+      attr_accessor resources: ::Array[::String]
       SENSITIVE: []
     end
 
@@ -173,6 +174,19 @@ module Aws::AccessAnalyzer
       SENSITIVE: []
     end
 
+    class CheckNoPublicAccessRequest
+      attr_accessor policy_document: ::String
+      attr_accessor resource_type: ("AWS::DynamoDB::Table" | "AWS::DynamoDB::Stream" | "AWS::EFS::FileSystem" | "AWS::OpenSearchService::Domain" | "AWS::Kinesis::Stream" | "AWS::Kinesis::StreamConsumer" | "AWS::KMS::Key" | "AWS::Lambda::Function" | "AWS::S3::Bucket" | "AWS::S3::AccessPoint" | "AWS::S3Express::DirectoryBucket" | "AWS::S3::Glacier" | "AWS::S3Outposts::Bucket" | "AWS::S3Outposts::AccessPoint" | "AWS::SecretsManager::Secret" | "AWS::SNS::Topic" | "AWS::SQS::Queue" | "AWS::IAM::AssumeRolePolicyDocument")
+      SENSITIVE: [:policy_document]
+    end
+
+    class CheckNoPublicAccessResponse
+      attr_accessor result: ("PASS" | "FAIL")
+      attr_accessor message: ::String
+      attr_accessor reasons: ::Array[Types::ReasonSummary]
+      SENSITIVE: []
+    end
+
     class CloudTrailDetails
       attr_accessor trails: ::Array[Types::Trail]
       attr_accessor access_role: ::String
@@ -422,6 +436,12 @@ module Aws::AccessAnalyzer
       SENSITIVE: []
     end
 
+    class GenerateFindingRecommendationRequest
+      attr_accessor analyzer_arn: ::String
+      attr_accessor id: ::String
+      SENSITIVE: []
+    end
+
     class GeneratedPolicy
       attr_accessor policy: ::String
       SENSITIVE: []
@@ -483,6 +503,26 @@ module Aws::AccessAnalyzer
       SENSITIVE: []
     end
 
+    class GetFindingRecommendationRequest
+      attr_accessor analyzer_arn: ::String
+      attr_accessor id: ::String
+      attr_accessor max_results: ::Integer
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class GetFindingRecommendationResponse
+      attr_accessor started_at: ::Time
+      attr_accessor completed_at: ::Time
+      attr_accessor next_token: ::String
+      attr_accessor error: Types::RecommendationError
+      attr_accessor resource_arn: ::String
+      attr_accessor recommended_steps: ::Array[Types::RecommendedStep]
+      attr_accessor recommendation_type: ("UnusedPermissionRecommendation")
+      attr_accessor status: ("SUCCEEDED" | "FAILED" | "IN_PROGRESS")
+      SENSITIVE: []
+    end
+
     class GetFindingRequest
       attr_accessor analyzer_arn: ::String
       attr_accessor id: ::String
@@ -815,6 +855,23 @@ module Aws::AccessAnalyzer
       SENSITIVE: []
     end
 
+    class RecommendationError
+      attr_accessor code: ::String
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+
+    class RecommendedStep
+      attr_accessor unused_permissions_recommended_step: Types::UnusedPermissionsRecommendedStep
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class UnusedPermissionsRecommendedStep < RecommendedStep
+      end
+      class Unknown < RecommendedStep
+      end
+    end
+
     class ResourceNotFoundException
       attr_accessor message: ::String
       attr_accessor resource_id: ::String
@@ -996,6 +1053,14 @@ module Aws::AccessAnalyzer
       SENSITIVE: []
     end
 
+    class UnusedPermissionsRecommendedStep
+      attr_accessor policy_updated_at: ::Time
+      attr_accessor recommended_action: ("CREATE_POLICY" | "DETACH_POLICY")
+      attr_accessor recommended_policy: ::String
+      attr_accessor existing_policy_id: ::String
+      SENSITIVE: []
+    end
+
     class UpdateArchiveRuleRequest
       attr_accessor analyzer_name: ::String
       attr_accessor rule_name: ::String
@@ -1040,7 +1105,7 @@ module Aws::AccessAnalyzer
 
     class ValidationException
       attr_accessor message: ::String
-      attr_accessor reason: ("unknownOperation" | "cannotParse" | "fieldValidationFailed" | "other")
+      attr_accessor reason: ("unknownOperation" | "cannotParse" | "fieldValidationFailed" | "other" | "notSupported")
       attr_accessor field_list: ::Array[Types::ValidationExceptionField]
       SENSITIVE: []
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-accessanalyzer
 version: !ruby/object:Gem::Version
-  version: 1.50.0
+  version: 1.52.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-06-05 00:00:00.000000000 Z
+date: 2024-06-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.197.0
+        version: 3.198.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.197.0
+        version: 3.198.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement