@aws-sdk/client-accessanalyzer 3.1023.0 → 3.1025.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +49 -0
- package/dist-cjs/index.js +249 -1
- package/dist-cjs/schemas/schemas_0.js +173 -5
- package/dist-es/AccessAnalyzer.js +23 -1
- package/dist-es/commands/CancelPolicyPreviewJobCommand.js +16 -0
- package/dist-es/commands/CreatePolicyPreviewConfigurationCommand.js +16 -0
- package/dist-es/commands/DeletePolicyPreviewConfigurationCommand.js +16 -0
- package/dist-es/commands/GetPolicyPreviewConfigurationCommand.js +16 -0
- package/dist-es/commands/GetPolicyPreviewJobCommand.js +16 -0
- package/dist-es/commands/ListPolicyPreviewJobsCommand.js +16 -0
- package/dist-es/commands/StartPolicyPreviewJobCommand.js +16 -0
- package/dist-es/commands/index.js +7 -0
- package/dist-es/index.js +1 -0
- package/dist-es/models/enums.js +31 -0
- package/dist-es/pagination/ListPolicyPreviewJobsPaginator.js +4 -0
- package/dist-es/pagination/index.js +1 -0
- package/dist-es/schemas/schemas_0.js +168 -0
- package/dist-es/waiters/index.js +2 -0
- package/dist-es/waiters/waitForPolicyPreviewConfigurationActive.js +54 -0
- package/dist-es/waiters/waitForPolicyPreviewJobCompleted.js +49 -0
- package/dist-types/AccessAnalyzer.d.ts +74 -1
- package/dist-types/AccessAnalyzerClient.d.ts +9 -2
- package/dist-types/commands/CancelPolicyPreviewJobCommand.d.ts +100 -0
- package/dist-types/commands/CreatePolicyPreviewConfigurationCommand.d.ts +109 -0
- package/dist-types/commands/DeletePolicyPreviewConfigurationCommand.d.ts +100 -0
- package/dist-types/commands/GetPolicyPreviewConfigurationCommand.d.ts +114 -0
- package/dist-types/commands/GetPolicyPreviewJobCommand.d.ts +187 -0
- package/dist-types/commands/ListPolicyPreviewJobsCommand.d.ts +137 -0
- package/dist-types/commands/StartPolicyPreviewJobCommand.d.ts +154 -0
- package/dist-types/commands/index.d.ts +7 -0
- package/dist-types/index.d.ts +1 -0
- package/dist-types/models/enums.d.ts +71 -0
- package/dist-types/models/models_0.d.ts +316 -1
- package/dist-types/pagination/ListPolicyPreviewJobsPaginator.d.ts +7 -0
- package/dist-types/pagination/index.d.ts +1 -0
- package/dist-types/schemas/schemas_0.d.ts +26 -0
- package/dist-types/ts3.4/AccessAnalyzer.d.ts +150 -0
- package/dist-types/ts3.4/AccessAnalyzerClient.d.ts +42 -0
- package/dist-types/ts3.4/commands/CancelPolicyPreviewJobCommand.d.ts +51 -0
- package/dist-types/ts3.4/commands/CreatePolicyPreviewConfigurationCommand.d.ts +51 -0
- package/dist-types/ts3.4/commands/DeletePolicyPreviewConfigurationCommand.d.ts +51 -0
- package/dist-types/ts3.4/commands/GetPolicyPreviewConfigurationCommand.d.ts +51 -0
- package/dist-types/ts3.4/commands/GetPolicyPreviewJobCommand.d.ts +51 -0
- package/dist-types/ts3.4/commands/ListPolicyPreviewJobsCommand.d.ts +51 -0
- package/dist-types/ts3.4/commands/StartPolicyPreviewJobCommand.d.ts +51 -0
- package/dist-types/ts3.4/commands/index.d.ts +7 -0
- package/dist-types/ts3.4/index.d.ts +1 -0
- package/dist-types/ts3.4/models/enums.d.ts +41 -0
- package/dist-types/ts3.4/models/models_0.d.ts +83 -0
- package/dist-types/ts3.4/pagination/ListPolicyPreviewJobsPaginator.d.ts +11 -0
- package/dist-types/ts3.4/pagination/index.d.ts +1 -0
- package/dist-types/ts3.4/schemas/schemas_0.d.ts +26 -0
- package/dist-types/ts3.4/waiters/index.d.ts +2 -0
- package/dist-types/ts3.4/waiters/waitForPolicyPreviewConfigurationActive.d.ts +11 -0
- package/dist-types/ts3.4/waiters/waitForPolicyPreviewJobCompleted.d.ts +11 -0
- package/dist-types/waiters/index.d.ts +2 -0
- package/dist-types/waiters/waitForPolicyPreviewConfigurationActive.d.ts +14 -0
- package/dist-types/waiters/waitForPolicyPreviewJobCompleted.d.ts +14 -0
- package/package.json +2 -1
|
@@ -207,6 +207,30 @@ export declare const AclPermission: {
|
|
|
207
207
|
* @public
|
|
208
208
|
*/
|
|
209
209
|
export type AclPermission = (typeof AclPermission)[keyof typeof AclPermission];
|
|
210
|
+
/**
|
|
211
|
+
* @public
|
|
212
|
+
* @enum
|
|
213
|
+
*/
|
|
214
|
+
export declare const PolicyPreviewScope: {
|
|
215
|
+
readonly GLOBAL: "GLOBAL";
|
|
216
|
+
};
|
|
217
|
+
/**
|
|
218
|
+
* @public
|
|
219
|
+
*/
|
|
220
|
+
export type PolicyPreviewScope = (typeof PolicyPreviewScope)[keyof typeof PolicyPreviewScope];
|
|
221
|
+
/**
|
|
222
|
+
* @public
|
|
223
|
+
* @enum
|
|
224
|
+
*/
|
|
225
|
+
export declare const PolicyPreviewStatus: {
|
|
226
|
+
readonly ACTIVE: "ACTIVE";
|
|
227
|
+
readonly FAILED: "FAILED";
|
|
228
|
+
readonly PENDING_CREATION: "PENDING_CREATION";
|
|
229
|
+
};
|
|
230
|
+
/**
|
|
231
|
+
* @public
|
|
232
|
+
*/
|
|
233
|
+
export type PolicyPreviewStatus = (typeof PolicyPreviewStatus)[keyof typeof PolicyPreviewStatus];
|
|
210
234
|
/**
|
|
211
235
|
* @public
|
|
212
236
|
* @enum
|
|
@@ -369,7 +393,16 @@ export type FindingType = (typeof FindingType)[keyof typeof FindingType];
|
|
|
369
393
|
*/
|
|
370
394
|
export declare const JobErrorCode: {
|
|
371
395
|
readonly AUTHORIZATION_ERROR: "AUTHORIZATION_ERROR";
|
|
396
|
+
readonly CANCELED_JOB_ERROR: "CANCELED_JOB_ERROR";
|
|
397
|
+
readonly INSUFFICIENT_PERMISSIONS_ERROR: "INSUFFICIENT_PERMISSIONS_ERROR";
|
|
398
|
+
readonly INVALID_ORGANIZATION_CONFIGURATION: "INVALID_ORGANIZATION_CONFIGURATION";
|
|
399
|
+
readonly INVALID_POLICY_PREVIEW_CONFIGURATION: "INVALID_POLICY_PREVIEW_CONFIGURATION";
|
|
400
|
+
readonly INVALID_SERVICE_LINKED_ROLE: "INVALID_SERVICE_LINKED_ROLE";
|
|
401
|
+
readonly INVALID_TARGET_ERROR: "INVALID_TARGET_ERROR";
|
|
402
|
+
readonly ORGANIZATION_ACCESS_DENIED_ERROR: "ORGANIZATION_ACCESS_DENIED_ERROR";
|
|
372
403
|
readonly RESOURCE_NOT_FOUND_ERROR: "RESOURCE_NOT_FOUND_ERROR";
|
|
404
|
+
readonly S3_BUCKET_NOT_FOUND_ERROR: "S3_BUCKET_NOT_FOUND_ERROR";
|
|
405
|
+
readonly S3_BUCKET_PERMISSION_ERROR: "S3_BUCKET_PERMISSION_ERROR";
|
|
373
406
|
readonly SERVICE_ERROR: "SERVICE_ERROR";
|
|
374
407
|
readonly SERVICE_QUOTA_EXCEEDED_ERROR: "SERVICE_QUOTA_EXCEEDED_ERROR";
|
|
375
408
|
};
|
|
@@ -391,6 +424,32 @@ export declare const JobStatus: {
|
|
|
391
424
|
* @public
|
|
392
425
|
*/
|
|
393
426
|
export type JobStatus = (typeof JobStatus)[keyof typeof JobStatus];
|
|
427
|
+
/**
|
|
428
|
+
* @public
|
|
429
|
+
* @enum
|
|
430
|
+
*/
|
|
431
|
+
export declare const ImpactAnalysisJobStatus: {
|
|
432
|
+
readonly CANCELED: "CANCELED";
|
|
433
|
+
readonly COMPLETED: "COMPLETED";
|
|
434
|
+
readonly FAILED: "FAILED";
|
|
435
|
+
readonly IN_PROGRESS: "IN_PROGRESS";
|
|
436
|
+
readonly SUBMITTED: "SUBMITTED";
|
|
437
|
+
};
|
|
438
|
+
/**
|
|
439
|
+
* @public
|
|
440
|
+
*/
|
|
441
|
+
export type ImpactAnalysisJobStatus = (typeof ImpactAnalysisJobStatus)[keyof typeof ImpactAnalysisJobStatus];
|
|
442
|
+
/**
|
|
443
|
+
* @public
|
|
444
|
+
* @enum
|
|
445
|
+
*/
|
|
446
|
+
export declare const ImpactAnalysisJobType: {
|
|
447
|
+
readonly SCP: "SCP";
|
|
448
|
+
};
|
|
449
|
+
/**
|
|
450
|
+
* @public
|
|
451
|
+
*/
|
|
452
|
+
export type ImpactAnalysisJobType = (typeof ImpactAnalysisJobType)[keyof typeof ImpactAnalysisJobType];
|
|
394
453
|
/**
|
|
395
454
|
* @public
|
|
396
455
|
* @enum
|
|
@@ -416,6 +475,18 @@ export declare const OrderBy: {
|
|
|
416
475
|
* @public
|
|
417
476
|
*/
|
|
418
477
|
export type OrderBy = (typeof OrderBy)[keyof typeof OrderBy];
|
|
478
|
+
/**
|
|
479
|
+
* @public
|
|
480
|
+
* @enum
|
|
481
|
+
*/
|
|
482
|
+
export declare const PolicyPreviewJobFilterName: {
|
|
483
|
+
readonly JOB_STATUS: "jobStatus";
|
|
484
|
+
readonly TARGET_ID: "targetId";
|
|
485
|
+
};
|
|
486
|
+
/**
|
|
487
|
+
* @public
|
|
488
|
+
*/
|
|
489
|
+
export type PolicyPreviewJobFilterName = (typeof PolicyPreviewJobFilterName)[keyof typeof PolicyPreviewJobFilterName];
|
|
419
490
|
/**
|
|
420
491
|
* @public
|
|
421
492
|
* @enum
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type { AccessCheckPolicyType, AccessCheckResourceType, AccessPreviewStatus, AccessPreviewStatusReasonCode, AclPermission, AnalyzerStatus, CheckAccessNotGrantedResult, CheckNoNewAccessResult, CheckNoPublicAccessResult, FindingChangeType, FindingSourceType, FindingStatus, FindingStatusUpdate, FindingType, InternalAccessType, JobErrorCode, JobStatus, KmsGrantOperation, Locale, OrderBy, PolicyType, PrincipalType, ReasonCode, RecommendationType, RecommendedRemediationAction, ResourceControlPolicyRestriction, ResourceType, ServiceControlPolicyRestriction, Status, Type, ValidatePolicyFindingType, ValidatePolicyResourceType } from "./enums";
|
|
1
|
+
import type { AccessCheckPolicyType, AccessCheckResourceType, AccessPreviewStatus, AccessPreviewStatusReasonCode, AclPermission, AnalyzerStatus, CheckAccessNotGrantedResult, CheckNoNewAccessResult, CheckNoPublicAccessResult, FindingChangeType, FindingSourceType, FindingStatus, FindingStatusUpdate, FindingType, ImpactAnalysisJobStatus, ImpactAnalysisJobType, InternalAccessType, JobErrorCode, JobStatus, KmsGrantOperation, Locale, OrderBy, PolicyPreviewJobFilterName, PolicyPreviewScope, PolicyPreviewStatus, PolicyType, PrincipalType, ReasonCode, RecommendationType, RecommendedRemediationAction, ResourceControlPolicyRestriction, ResourceType, ServiceControlPolicyRestriction, Status, Type, ValidatePolicyFindingType, ValidatePolicyResourceType } from "./enums";
|
|
2
2
|
/**
|
|
3
3
|
* <p>Contains information about actions and resources that define permissions to check against a policy.</p>
|
|
4
4
|
* @public
|
|
@@ -617,6 +617,21 @@ export interface CancelPolicyGenerationRequest {
|
|
|
617
617
|
*/
|
|
618
618
|
export interface CancelPolicyGenerationResponse {
|
|
619
619
|
}
|
|
620
|
+
/**
|
|
621
|
+
* @public
|
|
622
|
+
*/
|
|
623
|
+
export interface CancelPolicyPreviewJobRequest {
|
|
624
|
+
/**
|
|
625
|
+
* <p>The unique identifier of the policy preview job to cancel.</p>
|
|
626
|
+
* @public
|
|
627
|
+
*/
|
|
628
|
+
jobId: string | undefined;
|
|
629
|
+
}
|
|
630
|
+
/**
|
|
631
|
+
* @public
|
|
632
|
+
*/
|
|
633
|
+
export interface CancelPolicyPreviewJobResponse {
|
|
634
|
+
}
|
|
620
635
|
/**
|
|
621
636
|
* @public
|
|
622
637
|
*/
|
|
@@ -1621,6 +1636,46 @@ export interface CreateAccessPreviewResponse {
|
|
|
1621
1636
|
*/
|
|
1622
1637
|
id: string | undefined;
|
|
1623
1638
|
}
|
|
1639
|
+
/**
|
|
1640
|
+
* @public
|
|
1641
|
+
*/
|
|
1642
|
+
export interface CreatePolicyPreviewConfigurationRequest {
|
|
1643
|
+
/**
|
|
1644
|
+
* <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token return the result from the original successful request and have no additional effect.</p>
|
|
1645
|
+
* @public
|
|
1646
|
+
*/
|
|
1647
|
+
clientToken?: string | undefined;
|
|
1648
|
+
/**
|
|
1649
|
+
* <p>The scope of the policy preview configuration. Currently only <code>GLOBAL</code> is supported.</p>
|
|
1650
|
+
* @public
|
|
1651
|
+
*/
|
|
1652
|
+
scope?: PolicyPreviewScope | undefined;
|
|
1653
|
+
}
|
|
1654
|
+
/**
|
|
1655
|
+
* @public
|
|
1656
|
+
*/
|
|
1657
|
+
export interface CreatePolicyPreviewConfigurationResponse {
|
|
1658
|
+
/**
|
|
1659
|
+
* <p>The status of the policy preview configuration after creation. The status is <code>PENDING_CREATION</code> until the configuration is fully provisioned and becomes <code>ACTIVE</code>. If provisioning fails, the status is <code>FAILED</code>.</p>
|
|
1660
|
+
* @public
|
|
1661
|
+
*/
|
|
1662
|
+
status: PolicyPreviewStatus | undefined;
|
|
1663
|
+
}
|
|
1664
|
+
/**
|
|
1665
|
+
* @public
|
|
1666
|
+
*/
|
|
1667
|
+
export interface DeletePolicyPreviewConfigurationRequest {
|
|
1668
|
+
/**
|
|
1669
|
+
* <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token return the result from the original successful request and have no additional effect.</p>
|
|
1670
|
+
* @public
|
|
1671
|
+
*/
|
|
1672
|
+
clientToken?: string | undefined;
|
|
1673
|
+
}
|
|
1674
|
+
/**
|
|
1675
|
+
* @public
|
|
1676
|
+
*/
|
|
1677
|
+
export interface DeletePolicyPreviewConfigurationResponse {
|
|
1678
|
+
}
|
|
1624
1679
|
/**
|
|
1625
1680
|
* @public
|
|
1626
1681
|
*/
|
|
@@ -2864,6 +2919,155 @@ export interface GetGeneratedPolicyResponse {
|
|
|
2864
2919
|
*/
|
|
2865
2920
|
generatedPolicyResult: GeneratedPolicyResult | undefined;
|
|
2866
2921
|
}
|
|
2922
|
+
/**
|
|
2923
|
+
* @public
|
|
2924
|
+
*/
|
|
2925
|
+
export interface GetPolicyPreviewConfigurationRequest {
|
|
2926
|
+
}
|
|
2927
|
+
/**
|
|
2928
|
+
* <p>Contains the configuration details for policy preview, including the scope, status, and timestamps.</p>
|
|
2929
|
+
* @public
|
|
2930
|
+
*/
|
|
2931
|
+
export interface PolicyPreviewConfiguration {
|
|
2932
|
+
/**
|
|
2933
|
+
* <p>The scope of the policy preview configuration. Currently only <code>GLOBAL</code> is supported.</p>
|
|
2934
|
+
* @public
|
|
2935
|
+
*/
|
|
2936
|
+
scope: PolicyPreviewScope | undefined;
|
|
2937
|
+
/**
|
|
2938
|
+
* <p>The status of the policy preview configuration. A value of <code>ACTIVE</code> indicates the configuration is enabled and CloudTrail authorization events are being collected.</p>
|
|
2939
|
+
* @public
|
|
2940
|
+
*/
|
|
2941
|
+
status: PolicyPreviewStatus | undefined;
|
|
2942
|
+
/**
|
|
2943
|
+
* <p>The time at which the policy preview configuration was created.</p>
|
|
2944
|
+
* @public
|
|
2945
|
+
*/
|
|
2946
|
+
createdAt: Date | undefined;
|
|
2947
|
+
/**
|
|
2948
|
+
* <p>The time at which the policy preview configuration was last updated.</p>
|
|
2949
|
+
* @public
|
|
2950
|
+
*/
|
|
2951
|
+
updatedAt?: Date | undefined;
|
|
2952
|
+
}
|
|
2953
|
+
/**
|
|
2954
|
+
* @public
|
|
2955
|
+
*/
|
|
2956
|
+
export interface GetPolicyPreviewConfigurationResponse {
|
|
2957
|
+
/**
|
|
2958
|
+
* <p>A list of policy preview configurations for the account.</p>
|
|
2959
|
+
* @public
|
|
2960
|
+
*/
|
|
2961
|
+
policyPreviewConfigurations?: PolicyPreviewConfiguration[] | undefined;
|
|
2962
|
+
}
|
|
2963
|
+
/**
|
|
2964
|
+
* @public
|
|
2965
|
+
*/
|
|
2966
|
+
export interface GetPolicyPreviewJobRequest {
|
|
2967
|
+
/**
|
|
2968
|
+
* <p>The unique identifier of the policy preview job to retrieve. This is the job ID returned by <code>StartPolicyPreviewJob</code>.</p>
|
|
2969
|
+
* @public
|
|
2970
|
+
*/
|
|
2971
|
+
jobId: string | undefined;
|
|
2972
|
+
}
|
|
2973
|
+
/**
|
|
2974
|
+
* <p>Contains details about the execution of a policy preview job.</p>
|
|
2975
|
+
* @public
|
|
2976
|
+
*/
|
|
2977
|
+
export interface PolicyPreviewJobDetails {
|
|
2978
|
+
/**
|
|
2979
|
+
* <p>The current status of the job. Possible values are:</p> <ul> <li> <p> <code>SUBMITTED</code> - The job has been submitted but not yet started.</p> </li> <li> <p> <code>IN_PROGRESS</code> - The job is currently executing.</p> </li> <li> <p> <code>COMPLETED</code> - The job completed successfully.</p> </li> <li> <p> <code>FAILED</code> - The job failed with an error.</p> </li> <li> <p> <code>CANCELED</code> - The job was canceled by the user.</p> </li> </ul>
|
|
2980
|
+
* @public
|
|
2981
|
+
*/
|
|
2982
|
+
jobStatus: ImpactAnalysisJobStatus | undefined;
|
|
2983
|
+
/**
|
|
2984
|
+
* <p>The time at which the job was submitted.</p>
|
|
2985
|
+
* @public
|
|
2986
|
+
*/
|
|
2987
|
+
submittedAt: Date | undefined;
|
|
2988
|
+
/**
|
|
2989
|
+
* <p>The time at which the job execution started. This field is not populated until the job begins processing.</p>
|
|
2990
|
+
* @public
|
|
2991
|
+
*/
|
|
2992
|
+
startedAt?: Date | undefined;
|
|
2993
|
+
/**
|
|
2994
|
+
* <p>The time at which the job completed. This field is populated only when the job reaches a terminal state (COMPLETED, FAILED, or CANCELED).</p>
|
|
2995
|
+
* @public
|
|
2996
|
+
*/
|
|
2997
|
+
completedAt?: Date | undefined;
|
|
2998
|
+
/**
|
|
2999
|
+
* <p>Detailed information about the error that caused the job to fail. This field is populated only when the job status is FAILED.</p>
|
|
3000
|
+
* @public
|
|
3001
|
+
*/
|
|
3002
|
+
jobError?: JobError | undefined;
|
|
3003
|
+
}
|
|
3004
|
+
/**
|
|
3005
|
+
* <p>Specifies the configuration for a policy preview analysis, including the type of analysis, the target resource, and the policy documents to evaluate.</p>
|
|
3006
|
+
* @public
|
|
3007
|
+
*/
|
|
3008
|
+
export interface PolicyConfiguration {
|
|
3009
|
+
/**
|
|
3010
|
+
* <p>The type of impact analysis job. Currently only <code>SCP</code> (Service Control Policy) is supported.</p>
|
|
3011
|
+
* @public
|
|
3012
|
+
*/
|
|
3013
|
+
jobType: ImpactAnalysisJobType | undefined;
|
|
3014
|
+
/**
|
|
3015
|
+
* <p>The identifier of the target resource for the policy analysis. This can be an Amazon Web Services account ID (12-digit number), an organization root ID (format: <code>r-[0-9a-z]\{4,32\}</code>), or an organizational unit ID (format: <code>ou-[0-9a-z]\{4,32\}-[a-z0-9]\{8,32\}</code>).</p>
|
|
3016
|
+
* @public
|
|
3017
|
+
*/
|
|
3018
|
+
targetId: string | undefined;
|
|
3019
|
+
/**
|
|
3020
|
+
* <p>A list of SCP policy documents to test. Each policy document is a JSON string with a maximum length of 5,120 characters. The analysis evaluates how these policies would affect access to resources.</p>
|
|
3021
|
+
* @public
|
|
3022
|
+
*/
|
|
3023
|
+
policyDocumentsList: string[] | undefined;
|
|
3024
|
+
}
|
|
3025
|
+
/**
|
|
3026
|
+
* <p>Contains the parameters used to create a policy preview job.</p>
|
|
3027
|
+
* @public
|
|
3028
|
+
*/
|
|
3029
|
+
export interface PolicyPreviewJobParameters {
|
|
3030
|
+
/**
|
|
3031
|
+
* <p>The start of the CloudTrail event analysis window.</p>
|
|
3032
|
+
* @public
|
|
3033
|
+
*/
|
|
3034
|
+
startTime: Date | undefined;
|
|
3035
|
+
/**
|
|
3036
|
+
* <p>The end of the CloudTrail event analysis window.</p>
|
|
3037
|
+
* @public
|
|
3038
|
+
*/
|
|
3039
|
+
endTime: Date | undefined;
|
|
3040
|
+
/**
|
|
3041
|
+
* <p>The list of policy configurations that were analyzed.</p>
|
|
3042
|
+
* @public
|
|
3043
|
+
*/
|
|
3044
|
+
policyConfigurations: PolicyConfiguration[] | undefined;
|
|
3045
|
+
}
|
|
3046
|
+
/**
|
|
3047
|
+
* @public
|
|
3048
|
+
*/
|
|
3049
|
+
export interface GetPolicyPreviewJobResponse {
|
|
3050
|
+
/**
|
|
3051
|
+
* <p>The unique identifier of the policy preview job.</p>
|
|
3052
|
+
* @public
|
|
3053
|
+
*/
|
|
3054
|
+
jobId: string | undefined;
|
|
3055
|
+
/**
|
|
3056
|
+
* <p>The original parameters used to create the policy preview job, including the analysis time window and policy configurations.</p>
|
|
3057
|
+
* @public
|
|
3058
|
+
*/
|
|
3059
|
+
jobParameters?: PolicyPreviewJobParameters | undefined;
|
|
3060
|
+
/**
|
|
3061
|
+
* <p>Details about the job execution, including current status, submission time, start time, completion time, and any errors that occurred.</p>
|
|
3062
|
+
* @public
|
|
3063
|
+
*/
|
|
3064
|
+
jobDetails?: PolicyPreviewJobDetails | undefined;
|
|
3065
|
+
/**
|
|
3066
|
+
* <p>The Amazon S3 URI where the analysis report is stored. The report contains metadata for CloudTrail events that would be denied by the proposed policy.</p>
|
|
3067
|
+
* @public
|
|
3068
|
+
*/
|
|
3069
|
+
outputS3Uri: string | undefined;
|
|
3070
|
+
}
|
|
2867
3071
|
/**
|
|
2868
3072
|
* @public
|
|
2869
3073
|
*/
|
|
@@ -3435,6 +3639,77 @@ export interface ListPolicyGenerationsResponse {
|
|
|
3435
3639
|
*/
|
|
3436
3640
|
nextToken?: string | undefined;
|
|
3437
3641
|
}
|
|
3642
|
+
/**
|
|
3643
|
+
* @public
|
|
3644
|
+
*/
|
|
3645
|
+
export interface ListPolicyPreviewJobsRequest {
|
|
3646
|
+
/**
|
|
3647
|
+
* <p>Optional filter criteria to narrow the list of returned jobs. You can filter by job status or target ID. Maximum of one filter can be specified.</p>
|
|
3648
|
+
* @public
|
|
3649
|
+
*/
|
|
3650
|
+
filters?: Partial<Record<PolicyPreviewJobFilterName, string>> | undefined;
|
|
3651
|
+
/**
|
|
3652
|
+
* <p>The maximum number of results to return in a single page. Minimum value is 1.</p>
|
|
3653
|
+
* @public
|
|
3654
|
+
*/
|
|
3655
|
+
maxResults?: number | undefined;
|
|
3656
|
+
/**
|
|
3657
|
+
* <p>A token used for pagination of results. Use the token returned in the previous response to retrieve the next page of results.</p>
|
|
3658
|
+
* @public
|
|
3659
|
+
*/
|
|
3660
|
+
nextToken?: string | undefined;
|
|
3661
|
+
}
|
|
3662
|
+
/**
|
|
3663
|
+
* <p>Contains summary information about a policy preview job.</p>
|
|
3664
|
+
* @public
|
|
3665
|
+
*/
|
|
3666
|
+
export interface PolicyPreviewAnalysisReport {
|
|
3667
|
+
/**
|
|
3668
|
+
* <p>The unique identifier of the policy preview job.</p>
|
|
3669
|
+
* @public
|
|
3670
|
+
*/
|
|
3671
|
+
jobId: string | undefined;
|
|
3672
|
+
/**
|
|
3673
|
+
* <p>The current status of the job.</p>
|
|
3674
|
+
* @public
|
|
3675
|
+
*/
|
|
3676
|
+
status: ImpactAnalysisJobStatus | undefined;
|
|
3677
|
+
/**
|
|
3678
|
+
* <p>The time at which the job was submitted.</p>
|
|
3679
|
+
* @public
|
|
3680
|
+
*/
|
|
3681
|
+
submittedAt: Date | undefined;
|
|
3682
|
+
/**
|
|
3683
|
+
* <p>The time at which the job execution started.</p>
|
|
3684
|
+
* @public
|
|
3685
|
+
*/
|
|
3686
|
+
startedAt?: Date | undefined;
|
|
3687
|
+
/**
|
|
3688
|
+
* <p>The time at which the job completed.</p>
|
|
3689
|
+
* @public
|
|
3690
|
+
*/
|
|
3691
|
+
completedAt?: Date | undefined;
|
|
3692
|
+
/**
|
|
3693
|
+
* <p>The Amazon S3 URI where the analysis report is stored.</p>
|
|
3694
|
+
* @public
|
|
3695
|
+
*/
|
|
3696
|
+
outputS3Uri: string | undefined;
|
|
3697
|
+
}
|
|
3698
|
+
/**
|
|
3699
|
+
* @public
|
|
3700
|
+
*/
|
|
3701
|
+
export interface ListPolicyPreviewJobsResponse {
|
|
3702
|
+
/**
|
|
3703
|
+
* <p>A list of policy preview job summaries that match the specified filter criteria.</p>
|
|
3704
|
+
* @public
|
|
3705
|
+
*/
|
|
3706
|
+
analysisReports: PolicyPreviewAnalysisReport[] | undefined;
|
|
3707
|
+
/**
|
|
3708
|
+
* <p>A token used for pagination. If present, indicates there are more results available. Pass this token to the next request to retrieve the next page.</p>
|
|
3709
|
+
* @public
|
|
3710
|
+
*/
|
|
3711
|
+
nextToken?: string | undefined;
|
|
3712
|
+
}
|
|
3438
3713
|
/**
|
|
3439
3714
|
* <p>Retrieves a list of tags applied to the specified resource.</p>
|
|
3440
3715
|
* @public
|
|
@@ -3545,6 +3820,46 @@ export interface StartPolicyGenerationResponse {
|
|
|
3545
3820
|
*/
|
|
3546
3821
|
jobId: string | undefined;
|
|
3547
3822
|
}
|
|
3823
|
+
/**
|
|
3824
|
+
* @public
|
|
3825
|
+
*/
|
|
3826
|
+
export interface StartPolicyPreviewJobRequest {
|
|
3827
|
+
/**
|
|
3828
|
+
* <p>A list of policy configurations to analyze. Currently limited to one configuration per request. Each configuration specifies the job type, target ID, and policy documents to test.</p>
|
|
3829
|
+
* @public
|
|
3830
|
+
*/
|
|
3831
|
+
policyConfigurations: PolicyConfiguration[] | undefined;
|
|
3832
|
+
/**
|
|
3833
|
+
* <p>The start of the CloudTrail event analysis window. The analysis will evaluate events from this time forward.</p>
|
|
3834
|
+
* @public
|
|
3835
|
+
*/
|
|
3836
|
+
startTime: Date | undefined;
|
|
3837
|
+
/**
|
|
3838
|
+
* <p>The end of the analysis window. If not specified, defaults to the time of the request. The analysis will evaluate CloudTrail events up to this time.</p>
|
|
3839
|
+
* @public
|
|
3840
|
+
*/
|
|
3841
|
+
endTime?: Date | undefined;
|
|
3842
|
+
/**
|
|
3843
|
+
* <p>The Amazon S3 URI where the completed analysis report will be stored. The Amazon S3 bucket must grant access to the IAM Access Analyzer service principal in its resource policy. The report will be stored at the path: <code>outputS3Uri/jobId/timestamp/</code>.</p>
|
|
3844
|
+
* @public
|
|
3845
|
+
*/
|
|
3846
|
+
outputS3Uri: string | undefined;
|
|
3847
|
+
/**
|
|
3848
|
+
* <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token return the result from the original successful request and have no additional effect.</p>
|
|
3849
|
+
* @public
|
|
3850
|
+
*/
|
|
3851
|
+
clientToken?: string | undefined;
|
|
3852
|
+
}
|
|
3853
|
+
/**
|
|
3854
|
+
* @public
|
|
3855
|
+
*/
|
|
3856
|
+
export interface StartPolicyPreviewJobResponse {
|
|
3857
|
+
/**
|
|
3858
|
+
* <p>The unique identifier for the created policy preview job. Use this ID with <code>GetPolicyPreviewJob</code> to retrieve job status and details, or with <code>CancelPolicyPreviewJob</code> to cancel the job.</p>
|
|
3859
|
+
* @public
|
|
3860
|
+
*/
|
|
3861
|
+
jobId: string | undefined;
|
|
3862
|
+
}
|
|
3548
3863
|
/**
|
|
3549
3864
|
* <p>Starts a scan of the policies applied to the specified resource.</p>
|
|
3550
3865
|
* @public
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
import type { Paginator } from "@smithy/types";
|
|
2
|
+
import { ListPolicyPreviewJobsCommandInput, ListPolicyPreviewJobsCommandOutput } from "../commands/ListPolicyPreviewJobsCommand";
|
|
3
|
+
import type { AccessAnalyzerPaginationConfiguration } from "./Interfaces";
|
|
4
|
+
/**
|
|
5
|
+
* @public
|
|
6
|
+
*/
|
|
7
|
+
export declare const paginateListPolicyPreviewJobs: (config: AccessAnalyzerPaginationConfiguration, input: ListPolicyPreviewJobsCommandInput, ...rest: any[]) => Paginator<ListPolicyPreviewJobsCommandOutput>;
|
|
@@ -9,4 +9,5 @@ export * from "./ListArchiveRulesPaginator";
|
|
|
9
9
|
export * from "./ListFindingsPaginator";
|
|
10
10
|
export * from "./ListFindingsV2Paginator";
|
|
11
11
|
export * from "./ListPolicyGenerationsPaginator";
|
|
12
|
+
export * from "./ListPolicyPreviewJobsPaginator";
|
|
12
13
|
export * from "./ValidatePolicyPaginator";
|
|
@@ -30,6 +30,8 @@ export declare var ApplyArchiveRuleRequest$: StaticStructureSchema;
|
|
|
30
30
|
export declare var ArchiveRuleSummary$: StaticStructureSchema;
|
|
31
31
|
export declare var CancelPolicyGenerationRequest$: StaticStructureSchema;
|
|
32
32
|
export declare var CancelPolicyGenerationResponse$: StaticStructureSchema;
|
|
33
|
+
export declare var CancelPolicyPreviewJobRequest$: StaticStructureSchema;
|
|
34
|
+
export declare var CancelPolicyPreviewJobResponse$: StaticStructureSchema;
|
|
33
35
|
export declare var CheckAccessNotGrantedRequest$: StaticStructureSchema;
|
|
34
36
|
export declare var CheckAccessNotGrantedResponse$: StaticStructureSchema;
|
|
35
37
|
export declare var CheckNoNewAccessRequest$: StaticStructureSchema;
|
|
@@ -43,9 +45,13 @@ export declare var CreateAccessPreviewResponse$: StaticStructureSchema;
|
|
|
43
45
|
export declare var CreateAnalyzerRequest$: StaticStructureSchema;
|
|
44
46
|
export declare var CreateAnalyzerResponse$: StaticStructureSchema;
|
|
45
47
|
export declare var CreateArchiveRuleRequest$: StaticStructureSchema;
|
|
48
|
+
export declare var CreatePolicyPreviewConfigurationRequest$: StaticStructureSchema;
|
|
49
|
+
export declare var CreatePolicyPreviewConfigurationResponse$: StaticStructureSchema;
|
|
46
50
|
export declare var Criterion$: StaticStructureSchema;
|
|
47
51
|
export declare var DeleteAnalyzerRequest$: StaticStructureSchema;
|
|
48
52
|
export declare var DeleteArchiveRuleRequest$: StaticStructureSchema;
|
|
53
|
+
export declare var DeletePolicyPreviewConfigurationRequest$: StaticStructureSchema;
|
|
54
|
+
export declare var DeletePolicyPreviewConfigurationResponse$: StaticStructureSchema;
|
|
49
55
|
export declare var DynamodbStreamConfiguration$: StaticStructureSchema;
|
|
50
56
|
export declare var DynamodbTableConfiguration$: StaticStructureSchema;
|
|
51
57
|
export declare var EbsSnapshotConfiguration$: StaticStructureSchema;
|
|
@@ -81,6 +87,10 @@ export declare var GetFindingV2Request$: StaticStructureSchema;
|
|
|
81
87
|
export declare var GetFindingV2Response$: StaticStructureSchema;
|
|
82
88
|
export declare var GetGeneratedPolicyRequest$: StaticStructureSchema;
|
|
83
89
|
export declare var GetGeneratedPolicyResponse$: StaticStructureSchema;
|
|
90
|
+
export declare var GetPolicyPreviewConfigurationRequest$: StaticStructureSchema;
|
|
91
|
+
export declare var GetPolicyPreviewConfigurationResponse$: StaticStructureSchema;
|
|
92
|
+
export declare var GetPolicyPreviewJobRequest$: StaticStructureSchema;
|
|
93
|
+
export declare var GetPolicyPreviewJobResponse$: StaticStructureSchema;
|
|
84
94
|
export declare var IamRoleConfiguration$: StaticStructureSchema;
|
|
85
95
|
export declare var InlineArchiveRule$: StaticStructureSchema;
|
|
86
96
|
export declare var InternalAccessAnalysisRule$: StaticStructureSchema;
|
|
@@ -111,11 +121,18 @@ export declare var ListFindingsV2Request$: StaticStructureSchema;
|
|
|
111
121
|
export declare var ListFindingsV2Response$: StaticStructureSchema;
|
|
112
122
|
export declare var ListPolicyGenerationsRequest$: StaticStructureSchema;
|
|
113
123
|
export declare var ListPolicyGenerationsResponse$: StaticStructureSchema;
|
|
124
|
+
export declare var ListPolicyPreviewJobsRequest$: StaticStructureSchema;
|
|
125
|
+
export declare var ListPolicyPreviewJobsResponse$: StaticStructureSchema;
|
|
114
126
|
export declare var ListTagsForResourceRequest$: StaticStructureSchema;
|
|
115
127
|
export declare var ListTagsForResourceResponse$: StaticStructureSchema;
|
|
116
128
|
export declare var Location$: StaticStructureSchema;
|
|
129
|
+
export declare var PolicyConfiguration$: StaticStructureSchema;
|
|
117
130
|
export declare var PolicyGeneration$: StaticStructureSchema;
|
|
118
131
|
export declare var PolicyGenerationDetails$: StaticStructureSchema;
|
|
132
|
+
export declare var PolicyPreviewAnalysisReport$: StaticStructureSchema;
|
|
133
|
+
export declare var PolicyPreviewConfiguration$: StaticStructureSchema;
|
|
134
|
+
export declare var PolicyPreviewJobDetails$: StaticStructureSchema;
|
|
135
|
+
export declare var PolicyPreviewJobParameters$: StaticStructureSchema;
|
|
119
136
|
export declare var Position$: StaticStructureSchema;
|
|
120
137
|
export declare var RdsDbClusterSnapshotConfiguration$: StaticStructureSchema;
|
|
121
138
|
export declare var RdsDbSnapshotConfiguration$: StaticStructureSchema;
|
|
@@ -135,6 +152,8 @@ export declare var Span$: StaticStructureSchema;
|
|
|
135
152
|
export declare var SqsQueueConfiguration$: StaticStructureSchema;
|
|
136
153
|
export declare var StartPolicyGenerationRequest$: StaticStructureSchema;
|
|
137
154
|
export declare var StartPolicyGenerationResponse$: StaticStructureSchema;
|
|
155
|
+
export declare var StartPolicyPreviewJobRequest$: StaticStructureSchema;
|
|
156
|
+
export declare var StartPolicyPreviewJobResponse$: StaticStructureSchema;
|
|
138
157
|
export declare var StartResourceScanRequest$: StaticStructureSchema;
|
|
139
158
|
export declare var StatusReason$: StaticStructureSchema;
|
|
140
159
|
export declare var Substring$: StaticStructureSchema;
|
|
@@ -174,14 +193,17 @@ export declare var RdsDbSnapshotAttributeValue$: StaticUnionSchema;
|
|
|
174
193
|
export declare var RecommendedStep$: StaticUnionSchema;
|
|
175
194
|
export declare var ApplyArchiveRule$: StaticOperationSchema;
|
|
176
195
|
export declare var CancelPolicyGeneration$: StaticOperationSchema;
|
|
196
|
+
export declare var CancelPolicyPreviewJob$: StaticOperationSchema;
|
|
177
197
|
export declare var CheckAccessNotGranted$: StaticOperationSchema;
|
|
178
198
|
export declare var CheckNoNewAccess$: StaticOperationSchema;
|
|
179
199
|
export declare var CheckNoPublicAccess$: StaticOperationSchema;
|
|
180
200
|
export declare var CreateAccessPreview$: StaticOperationSchema;
|
|
181
201
|
export declare var CreateAnalyzer$: StaticOperationSchema;
|
|
182
202
|
export declare var CreateArchiveRule$: StaticOperationSchema;
|
|
203
|
+
export declare var CreatePolicyPreviewConfiguration$: StaticOperationSchema;
|
|
183
204
|
export declare var DeleteAnalyzer$: StaticOperationSchema;
|
|
184
205
|
export declare var DeleteArchiveRule$: StaticOperationSchema;
|
|
206
|
+
export declare var DeletePolicyPreviewConfiguration$: StaticOperationSchema;
|
|
185
207
|
export declare var GenerateFindingRecommendation$: StaticOperationSchema;
|
|
186
208
|
export declare var GetAccessPreview$: StaticOperationSchema;
|
|
187
209
|
export declare var GetAnalyzedResource$: StaticOperationSchema;
|
|
@@ -192,6 +214,8 @@ export declare var GetFindingRecommendation$: StaticOperationSchema;
|
|
|
192
214
|
export declare var GetFindingsStatistics$: StaticOperationSchema;
|
|
193
215
|
export declare var GetFindingV2$: StaticOperationSchema;
|
|
194
216
|
export declare var GetGeneratedPolicy$: StaticOperationSchema;
|
|
217
|
+
export declare var GetPolicyPreviewConfiguration$: StaticOperationSchema;
|
|
218
|
+
export declare var GetPolicyPreviewJob$: StaticOperationSchema;
|
|
195
219
|
export declare var ListAccessPreviewFindings$: StaticOperationSchema;
|
|
196
220
|
export declare var ListAccessPreviews$: StaticOperationSchema;
|
|
197
221
|
export declare var ListAnalyzedResources$: StaticOperationSchema;
|
|
@@ -200,8 +224,10 @@ export declare var ListArchiveRules$: StaticOperationSchema;
|
|
|
200
224
|
export declare var ListFindings$: StaticOperationSchema;
|
|
201
225
|
export declare var ListFindingsV2$: StaticOperationSchema;
|
|
202
226
|
export declare var ListPolicyGenerations$: StaticOperationSchema;
|
|
227
|
+
export declare var ListPolicyPreviewJobs$: StaticOperationSchema;
|
|
203
228
|
export declare var ListTagsForResource$: StaticOperationSchema;
|
|
204
229
|
export declare var StartPolicyGeneration$: StaticOperationSchema;
|
|
230
|
+
export declare var StartPolicyPreviewJob$: StaticOperationSchema;
|
|
205
231
|
export declare var StartResourceScan$: StaticOperationSchema;
|
|
206
232
|
export declare var TagResource$: StaticOperationSchema;
|
|
207
233
|
export declare var UntagResource$: StaticOperationSchema;
|