@aws-sdk/client-accessanalyzer 3.1023.0 → 3.1025.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (59) hide show
  1. package/README.md +49 -0
  2. package/dist-cjs/index.js +249 -1
  3. package/dist-cjs/schemas/schemas_0.js +173 -5
  4. package/dist-es/AccessAnalyzer.js +23 -1
  5. package/dist-es/commands/CancelPolicyPreviewJobCommand.js +16 -0
  6. package/dist-es/commands/CreatePolicyPreviewConfigurationCommand.js +16 -0
  7. package/dist-es/commands/DeletePolicyPreviewConfigurationCommand.js +16 -0
  8. package/dist-es/commands/GetPolicyPreviewConfigurationCommand.js +16 -0
  9. package/dist-es/commands/GetPolicyPreviewJobCommand.js +16 -0
  10. package/dist-es/commands/ListPolicyPreviewJobsCommand.js +16 -0
  11. package/dist-es/commands/StartPolicyPreviewJobCommand.js +16 -0
  12. package/dist-es/commands/index.js +7 -0
  13. package/dist-es/index.js +1 -0
  14. package/dist-es/models/enums.js +31 -0
  15. package/dist-es/pagination/ListPolicyPreviewJobsPaginator.js +4 -0
  16. package/dist-es/pagination/index.js +1 -0
  17. package/dist-es/schemas/schemas_0.js +168 -0
  18. package/dist-es/waiters/index.js +2 -0
  19. package/dist-es/waiters/waitForPolicyPreviewConfigurationActive.js +54 -0
  20. package/dist-es/waiters/waitForPolicyPreviewJobCompleted.js +49 -0
  21. package/dist-types/AccessAnalyzer.d.ts +74 -1
  22. package/dist-types/AccessAnalyzerClient.d.ts +9 -2
  23. package/dist-types/commands/CancelPolicyPreviewJobCommand.d.ts +100 -0
  24. package/dist-types/commands/CreatePolicyPreviewConfigurationCommand.d.ts +109 -0
  25. package/dist-types/commands/DeletePolicyPreviewConfigurationCommand.d.ts +100 -0
  26. package/dist-types/commands/GetPolicyPreviewConfigurationCommand.d.ts +114 -0
  27. package/dist-types/commands/GetPolicyPreviewJobCommand.d.ts +187 -0
  28. package/dist-types/commands/ListPolicyPreviewJobsCommand.d.ts +137 -0
  29. package/dist-types/commands/StartPolicyPreviewJobCommand.d.ts +154 -0
  30. package/dist-types/commands/index.d.ts +7 -0
  31. package/dist-types/index.d.ts +1 -0
  32. package/dist-types/models/enums.d.ts +71 -0
  33. package/dist-types/models/models_0.d.ts +316 -1
  34. package/dist-types/pagination/ListPolicyPreviewJobsPaginator.d.ts +7 -0
  35. package/dist-types/pagination/index.d.ts +1 -0
  36. package/dist-types/schemas/schemas_0.d.ts +26 -0
  37. package/dist-types/ts3.4/AccessAnalyzer.d.ts +150 -0
  38. package/dist-types/ts3.4/AccessAnalyzerClient.d.ts +42 -0
  39. package/dist-types/ts3.4/commands/CancelPolicyPreviewJobCommand.d.ts +51 -0
  40. package/dist-types/ts3.4/commands/CreatePolicyPreviewConfigurationCommand.d.ts +51 -0
  41. package/dist-types/ts3.4/commands/DeletePolicyPreviewConfigurationCommand.d.ts +51 -0
  42. package/dist-types/ts3.4/commands/GetPolicyPreviewConfigurationCommand.d.ts +51 -0
  43. package/dist-types/ts3.4/commands/GetPolicyPreviewJobCommand.d.ts +51 -0
  44. package/dist-types/ts3.4/commands/ListPolicyPreviewJobsCommand.d.ts +51 -0
  45. package/dist-types/ts3.4/commands/StartPolicyPreviewJobCommand.d.ts +51 -0
  46. package/dist-types/ts3.4/commands/index.d.ts +7 -0
  47. package/dist-types/ts3.4/index.d.ts +1 -0
  48. package/dist-types/ts3.4/models/enums.d.ts +41 -0
  49. package/dist-types/ts3.4/models/models_0.d.ts +83 -0
  50. package/dist-types/ts3.4/pagination/ListPolicyPreviewJobsPaginator.d.ts +11 -0
  51. package/dist-types/ts3.4/pagination/index.d.ts +1 -0
  52. package/dist-types/ts3.4/schemas/schemas_0.d.ts +26 -0
  53. package/dist-types/ts3.4/waiters/index.d.ts +2 -0
  54. package/dist-types/ts3.4/waiters/waitForPolicyPreviewConfigurationActive.d.ts +11 -0
  55. package/dist-types/ts3.4/waiters/waitForPolicyPreviewJobCompleted.d.ts +11 -0
  56. package/dist-types/waiters/index.d.ts +2 -0
  57. package/dist-types/waiters/waitForPolicyPreviewConfigurationActive.d.ts +14 -0
  58. package/dist-types/waiters/waitForPolicyPreviewJobCompleted.d.ts +14 -0
  59. package/package.json +2 -1
@@ -207,6 +207,30 @@ export declare const AclPermission: {
207
207
  * @public
208
208
  */
209
209
  export type AclPermission = (typeof AclPermission)[keyof typeof AclPermission];
210
+ /**
211
+ * @public
212
+ * @enum
213
+ */
214
+ export declare const PolicyPreviewScope: {
215
+ readonly GLOBAL: "GLOBAL";
216
+ };
217
+ /**
218
+ * @public
219
+ */
220
+ export type PolicyPreviewScope = (typeof PolicyPreviewScope)[keyof typeof PolicyPreviewScope];
221
+ /**
222
+ * @public
223
+ * @enum
224
+ */
225
+ export declare const PolicyPreviewStatus: {
226
+ readonly ACTIVE: "ACTIVE";
227
+ readonly FAILED: "FAILED";
228
+ readonly PENDING_CREATION: "PENDING_CREATION";
229
+ };
230
+ /**
231
+ * @public
232
+ */
233
+ export type PolicyPreviewStatus = (typeof PolicyPreviewStatus)[keyof typeof PolicyPreviewStatus];
210
234
  /**
211
235
  * @public
212
236
  * @enum
@@ -369,7 +393,16 @@ export type FindingType = (typeof FindingType)[keyof typeof FindingType];
369
393
  */
370
394
  export declare const JobErrorCode: {
371
395
  readonly AUTHORIZATION_ERROR: "AUTHORIZATION_ERROR";
396
+ readonly CANCELED_JOB_ERROR: "CANCELED_JOB_ERROR";
397
+ readonly INSUFFICIENT_PERMISSIONS_ERROR: "INSUFFICIENT_PERMISSIONS_ERROR";
398
+ readonly INVALID_ORGANIZATION_CONFIGURATION: "INVALID_ORGANIZATION_CONFIGURATION";
399
+ readonly INVALID_POLICY_PREVIEW_CONFIGURATION: "INVALID_POLICY_PREVIEW_CONFIGURATION";
400
+ readonly INVALID_SERVICE_LINKED_ROLE: "INVALID_SERVICE_LINKED_ROLE";
401
+ readonly INVALID_TARGET_ERROR: "INVALID_TARGET_ERROR";
402
+ readonly ORGANIZATION_ACCESS_DENIED_ERROR: "ORGANIZATION_ACCESS_DENIED_ERROR";
372
403
  readonly RESOURCE_NOT_FOUND_ERROR: "RESOURCE_NOT_FOUND_ERROR";
404
+ readonly S3_BUCKET_NOT_FOUND_ERROR: "S3_BUCKET_NOT_FOUND_ERROR";
405
+ readonly S3_BUCKET_PERMISSION_ERROR: "S3_BUCKET_PERMISSION_ERROR";
373
406
  readonly SERVICE_ERROR: "SERVICE_ERROR";
374
407
  readonly SERVICE_QUOTA_EXCEEDED_ERROR: "SERVICE_QUOTA_EXCEEDED_ERROR";
375
408
  };
@@ -391,6 +424,32 @@ export declare const JobStatus: {
391
424
  * @public
392
425
  */
393
426
  export type JobStatus = (typeof JobStatus)[keyof typeof JobStatus];
427
+ /**
428
+ * @public
429
+ * @enum
430
+ */
431
+ export declare const ImpactAnalysisJobStatus: {
432
+ readonly CANCELED: "CANCELED";
433
+ readonly COMPLETED: "COMPLETED";
434
+ readonly FAILED: "FAILED";
435
+ readonly IN_PROGRESS: "IN_PROGRESS";
436
+ readonly SUBMITTED: "SUBMITTED";
437
+ };
438
+ /**
439
+ * @public
440
+ */
441
+ export type ImpactAnalysisJobStatus = (typeof ImpactAnalysisJobStatus)[keyof typeof ImpactAnalysisJobStatus];
442
+ /**
443
+ * @public
444
+ * @enum
445
+ */
446
+ export declare const ImpactAnalysisJobType: {
447
+ readonly SCP: "SCP";
448
+ };
449
+ /**
450
+ * @public
451
+ */
452
+ export type ImpactAnalysisJobType = (typeof ImpactAnalysisJobType)[keyof typeof ImpactAnalysisJobType];
394
453
  /**
395
454
  * @public
396
455
  * @enum
@@ -416,6 +475,18 @@ export declare const OrderBy: {
416
475
  * @public
417
476
  */
418
477
  export type OrderBy = (typeof OrderBy)[keyof typeof OrderBy];
478
+ /**
479
+ * @public
480
+ * @enum
481
+ */
482
+ export declare const PolicyPreviewJobFilterName: {
483
+ readonly JOB_STATUS: "jobStatus";
484
+ readonly TARGET_ID: "targetId";
485
+ };
486
+ /**
487
+ * @public
488
+ */
489
+ export type PolicyPreviewJobFilterName = (typeof PolicyPreviewJobFilterName)[keyof typeof PolicyPreviewJobFilterName];
419
490
  /**
420
491
  * @public
421
492
  * @enum
@@ -1,4 +1,4 @@
1
- import type { AccessCheckPolicyType, AccessCheckResourceType, AccessPreviewStatus, AccessPreviewStatusReasonCode, AclPermission, AnalyzerStatus, CheckAccessNotGrantedResult, CheckNoNewAccessResult, CheckNoPublicAccessResult, FindingChangeType, FindingSourceType, FindingStatus, FindingStatusUpdate, FindingType, InternalAccessType, JobErrorCode, JobStatus, KmsGrantOperation, Locale, OrderBy, PolicyType, PrincipalType, ReasonCode, RecommendationType, RecommendedRemediationAction, ResourceControlPolicyRestriction, ResourceType, ServiceControlPolicyRestriction, Status, Type, ValidatePolicyFindingType, ValidatePolicyResourceType } from "./enums";
1
+ import type { AccessCheckPolicyType, AccessCheckResourceType, AccessPreviewStatus, AccessPreviewStatusReasonCode, AclPermission, AnalyzerStatus, CheckAccessNotGrantedResult, CheckNoNewAccessResult, CheckNoPublicAccessResult, FindingChangeType, FindingSourceType, FindingStatus, FindingStatusUpdate, FindingType, ImpactAnalysisJobStatus, ImpactAnalysisJobType, InternalAccessType, JobErrorCode, JobStatus, KmsGrantOperation, Locale, OrderBy, PolicyPreviewJobFilterName, PolicyPreviewScope, PolicyPreviewStatus, PolicyType, PrincipalType, ReasonCode, RecommendationType, RecommendedRemediationAction, ResourceControlPolicyRestriction, ResourceType, ServiceControlPolicyRestriction, Status, Type, ValidatePolicyFindingType, ValidatePolicyResourceType } from "./enums";
2
2
  /**
3
3
  * <p>Contains information about actions and resources that define permissions to check against a policy.</p>
4
4
  * @public
@@ -617,6 +617,21 @@ export interface CancelPolicyGenerationRequest {
617
617
  */
618
618
  export interface CancelPolicyGenerationResponse {
619
619
  }
620
+ /**
621
+ * @public
622
+ */
623
+ export interface CancelPolicyPreviewJobRequest {
624
+ /**
625
+ * <p>The unique identifier of the policy preview job to cancel.</p>
626
+ * @public
627
+ */
628
+ jobId: string | undefined;
629
+ }
630
+ /**
631
+ * @public
632
+ */
633
+ export interface CancelPolicyPreviewJobResponse {
634
+ }
620
635
  /**
621
636
  * @public
622
637
  */
@@ -1621,6 +1636,46 @@ export interface CreateAccessPreviewResponse {
1621
1636
  */
1622
1637
  id: string | undefined;
1623
1638
  }
1639
+ /**
1640
+ * @public
1641
+ */
1642
+ export interface CreatePolicyPreviewConfigurationRequest {
1643
+ /**
1644
+ * <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token return the result from the original successful request and have no additional effect.</p>
1645
+ * @public
1646
+ */
1647
+ clientToken?: string | undefined;
1648
+ /**
1649
+ * <p>The scope of the policy preview configuration. Currently only <code>GLOBAL</code> is supported.</p>
1650
+ * @public
1651
+ */
1652
+ scope?: PolicyPreviewScope | undefined;
1653
+ }
1654
+ /**
1655
+ * @public
1656
+ */
1657
+ export interface CreatePolicyPreviewConfigurationResponse {
1658
+ /**
1659
+ * <p>The status of the policy preview configuration after creation. The status is <code>PENDING_CREATION</code> until the configuration is fully provisioned and becomes <code>ACTIVE</code>. If provisioning fails, the status is <code>FAILED</code>.</p>
1660
+ * @public
1661
+ */
1662
+ status: PolicyPreviewStatus | undefined;
1663
+ }
1664
+ /**
1665
+ * @public
1666
+ */
1667
+ export interface DeletePolicyPreviewConfigurationRequest {
1668
+ /**
1669
+ * <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token return the result from the original successful request and have no additional effect.</p>
1670
+ * @public
1671
+ */
1672
+ clientToken?: string | undefined;
1673
+ }
1674
+ /**
1675
+ * @public
1676
+ */
1677
+ export interface DeletePolicyPreviewConfigurationResponse {
1678
+ }
1624
1679
  /**
1625
1680
  * @public
1626
1681
  */
@@ -2864,6 +2919,155 @@ export interface GetGeneratedPolicyResponse {
2864
2919
  */
2865
2920
  generatedPolicyResult: GeneratedPolicyResult | undefined;
2866
2921
  }
2922
+ /**
2923
+ * @public
2924
+ */
2925
+ export interface GetPolicyPreviewConfigurationRequest {
2926
+ }
2927
+ /**
2928
+ * <p>Contains the configuration details for policy preview, including the scope, status, and timestamps.</p>
2929
+ * @public
2930
+ */
2931
+ export interface PolicyPreviewConfiguration {
2932
+ /**
2933
+ * <p>The scope of the policy preview configuration. Currently only <code>GLOBAL</code> is supported.</p>
2934
+ * @public
2935
+ */
2936
+ scope: PolicyPreviewScope | undefined;
2937
+ /**
2938
+ * <p>The status of the policy preview configuration. A value of <code>ACTIVE</code> indicates the configuration is enabled and CloudTrail authorization events are being collected.</p>
2939
+ * @public
2940
+ */
2941
+ status: PolicyPreviewStatus | undefined;
2942
+ /**
2943
+ * <p>The time at which the policy preview configuration was created.</p>
2944
+ * @public
2945
+ */
2946
+ createdAt: Date | undefined;
2947
+ /**
2948
+ * <p>The time at which the policy preview configuration was last updated.</p>
2949
+ * @public
2950
+ */
2951
+ updatedAt?: Date | undefined;
2952
+ }
2953
+ /**
2954
+ * @public
2955
+ */
2956
+ export interface GetPolicyPreviewConfigurationResponse {
2957
+ /**
2958
+ * <p>A list of policy preview configurations for the account.</p>
2959
+ * @public
2960
+ */
2961
+ policyPreviewConfigurations?: PolicyPreviewConfiguration[] | undefined;
2962
+ }
2963
+ /**
2964
+ * @public
2965
+ */
2966
+ export interface GetPolicyPreviewJobRequest {
2967
+ /**
2968
+ * <p>The unique identifier of the policy preview job to retrieve. This is the job ID returned by <code>StartPolicyPreviewJob</code>.</p>
2969
+ * @public
2970
+ */
2971
+ jobId: string | undefined;
2972
+ }
2973
+ /**
2974
+ * <p>Contains details about the execution of a policy preview job.</p>
2975
+ * @public
2976
+ */
2977
+ export interface PolicyPreviewJobDetails {
2978
+ /**
2979
+ * <p>The current status of the job. Possible values are:</p> <ul> <li> <p> <code>SUBMITTED</code> - The job has been submitted but not yet started.</p> </li> <li> <p> <code>IN_PROGRESS</code> - The job is currently executing.</p> </li> <li> <p> <code>COMPLETED</code> - The job completed successfully.</p> </li> <li> <p> <code>FAILED</code> - The job failed with an error.</p> </li> <li> <p> <code>CANCELED</code> - The job was canceled by the user.</p> </li> </ul>
2980
+ * @public
2981
+ */
2982
+ jobStatus: ImpactAnalysisJobStatus | undefined;
2983
+ /**
2984
+ * <p>The time at which the job was submitted.</p>
2985
+ * @public
2986
+ */
2987
+ submittedAt: Date | undefined;
2988
+ /**
2989
+ * <p>The time at which the job execution started. This field is not populated until the job begins processing.</p>
2990
+ * @public
2991
+ */
2992
+ startedAt?: Date | undefined;
2993
+ /**
2994
+ * <p>The time at which the job completed. This field is populated only when the job reaches a terminal state (COMPLETED, FAILED, or CANCELED).</p>
2995
+ * @public
2996
+ */
2997
+ completedAt?: Date | undefined;
2998
+ /**
2999
+ * <p>Detailed information about the error that caused the job to fail. This field is populated only when the job status is FAILED.</p>
3000
+ * @public
3001
+ */
3002
+ jobError?: JobError | undefined;
3003
+ }
3004
+ /**
3005
+ * <p>Specifies the configuration for a policy preview analysis, including the type of analysis, the target resource, and the policy documents to evaluate.</p>
3006
+ * @public
3007
+ */
3008
+ export interface PolicyConfiguration {
3009
+ /**
3010
+ * <p>The type of impact analysis job. Currently only <code>SCP</code> (Service Control Policy) is supported.</p>
3011
+ * @public
3012
+ */
3013
+ jobType: ImpactAnalysisJobType | undefined;
3014
+ /**
3015
+ * <p>The identifier of the target resource for the policy analysis. This can be an Amazon Web Services account ID (12-digit number), an organization root ID (format: <code>r-[0-9a-z]\{4,32\}</code>), or an organizational unit ID (format: <code>ou-[0-9a-z]\{4,32\}-[a-z0-9]\{8,32\}</code>).</p>
3016
+ * @public
3017
+ */
3018
+ targetId: string | undefined;
3019
+ /**
3020
+ * <p>A list of SCP policy documents to test. Each policy document is a JSON string with a maximum length of 5,120 characters. The analysis evaluates how these policies would affect access to resources.</p>
3021
+ * @public
3022
+ */
3023
+ policyDocumentsList: string[] | undefined;
3024
+ }
3025
+ /**
3026
+ * <p>Contains the parameters used to create a policy preview job.</p>
3027
+ * @public
3028
+ */
3029
+ export interface PolicyPreviewJobParameters {
3030
+ /**
3031
+ * <p>The start of the CloudTrail event analysis window.</p>
3032
+ * @public
3033
+ */
3034
+ startTime: Date | undefined;
3035
+ /**
3036
+ * <p>The end of the CloudTrail event analysis window.</p>
3037
+ * @public
3038
+ */
3039
+ endTime: Date | undefined;
3040
+ /**
3041
+ * <p>The list of policy configurations that were analyzed.</p>
3042
+ * @public
3043
+ */
3044
+ policyConfigurations: PolicyConfiguration[] | undefined;
3045
+ }
3046
+ /**
3047
+ * @public
3048
+ */
3049
+ export interface GetPolicyPreviewJobResponse {
3050
+ /**
3051
+ * <p>The unique identifier of the policy preview job.</p>
3052
+ * @public
3053
+ */
3054
+ jobId: string | undefined;
3055
+ /**
3056
+ * <p>The original parameters used to create the policy preview job, including the analysis time window and policy configurations.</p>
3057
+ * @public
3058
+ */
3059
+ jobParameters?: PolicyPreviewJobParameters | undefined;
3060
+ /**
3061
+ * <p>Details about the job execution, including current status, submission time, start time, completion time, and any errors that occurred.</p>
3062
+ * @public
3063
+ */
3064
+ jobDetails?: PolicyPreviewJobDetails | undefined;
3065
+ /**
3066
+ * <p>The Amazon S3 URI where the analysis report is stored. The report contains metadata for CloudTrail events that would be denied by the proposed policy.</p>
3067
+ * @public
3068
+ */
3069
+ outputS3Uri: string | undefined;
3070
+ }
2867
3071
  /**
2868
3072
  * @public
2869
3073
  */
@@ -3435,6 +3639,77 @@ export interface ListPolicyGenerationsResponse {
3435
3639
  */
3436
3640
  nextToken?: string | undefined;
3437
3641
  }
3642
+ /**
3643
+ * @public
3644
+ */
3645
+ export interface ListPolicyPreviewJobsRequest {
3646
+ /**
3647
+ * <p>Optional filter criteria to narrow the list of returned jobs. You can filter by job status or target ID. Maximum of one filter can be specified.</p>
3648
+ * @public
3649
+ */
3650
+ filters?: Partial<Record<PolicyPreviewJobFilterName, string>> | undefined;
3651
+ /**
3652
+ * <p>The maximum number of results to return in a single page. Minimum value is 1.</p>
3653
+ * @public
3654
+ */
3655
+ maxResults?: number | undefined;
3656
+ /**
3657
+ * <p>A token used for pagination of results. Use the token returned in the previous response to retrieve the next page of results.</p>
3658
+ * @public
3659
+ */
3660
+ nextToken?: string | undefined;
3661
+ }
3662
+ /**
3663
+ * <p>Contains summary information about a policy preview job.</p>
3664
+ * @public
3665
+ */
3666
+ export interface PolicyPreviewAnalysisReport {
3667
+ /**
3668
+ * <p>The unique identifier of the policy preview job.</p>
3669
+ * @public
3670
+ */
3671
+ jobId: string | undefined;
3672
+ /**
3673
+ * <p>The current status of the job.</p>
3674
+ * @public
3675
+ */
3676
+ status: ImpactAnalysisJobStatus | undefined;
3677
+ /**
3678
+ * <p>The time at which the job was submitted.</p>
3679
+ * @public
3680
+ */
3681
+ submittedAt: Date | undefined;
3682
+ /**
3683
+ * <p>The time at which the job execution started.</p>
3684
+ * @public
3685
+ */
3686
+ startedAt?: Date | undefined;
3687
+ /**
3688
+ * <p>The time at which the job completed.</p>
3689
+ * @public
3690
+ */
3691
+ completedAt?: Date | undefined;
3692
+ /**
3693
+ * <p>The Amazon S3 URI where the analysis report is stored.</p>
3694
+ * @public
3695
+ */
3696
+ outputS3Uri: string | undefined;
3697
+ }
3698
+ /**
3699
+ * @public
3700
+ */
3701
+ export interface ListPolicyPreviewJobsResponse {
3702
+ /**
3703
+ * <p>A list of policy preview job summaries that match the specified filter criteria.</p>
3704
+ * @public
3705
+ */
3706
+ analysisReports: PolicyPreviewAnalysisReport[] | undefined;
3707
+ /**
3708
+ * <p>A token used for pagination. If present, indicates there are more results available. Pass this token to the next request to retrieve the next page.</p>
3709
+ * @public
3710
+ */
3711
+ nextToken?: string | undefined;
3712
+ }
3438
3713
  /**
3439
3714
  * <p>Retrieves a list of tags applied to the specified resource.</p>
3440
3715
  * @public
@@ -3545,6 +3820,46 @@ export interface StartPolicyGenerationResponse {
3545
3820
  */
3546
3821
  jobId: string | undefined;
3547
3822
  }
3823
+ /**
3824
+ * @public
3825
+ */
3826
+ export interface StartPolicyPreviewJobRequest {
3827
+ /**
3828
+ * <p>A list of policy configurations to analyze. Currently limited to one configuration per request. Each configuration specifies the job type, target ID, and policy documents to test.</p>
3829
+ * @public
3830
+ */
3831
+ policyConfigurations: PolicyConfiguration[] | undefined;
3832
+ /**
3833
+ * <p>The start of the CloudTrail event analysis window. The analysis will evaluate events from this time forward.</p>
3834
+ * @public
3835
+ */
3836
+ startTime: Date | undefined;
3837
+ /**
3838
+ * <p>The end of the analysis window. If not specified, defaults to the time of the request. The analysis will evaluate CloudTrail events up to this time.</p>
3839
+ * @public
3840
+ */
3841
+ endTime?: Date | undefined;
3842
+ /**
3843
+ * <p>The Amazon S3 URI where the completed analysis report will be stored. The Amazon S3 bucket must grant access to the IAM Access Analyzer service principal in its resource policy. The report will be stored at the path: <code>outputS3Uri/jobId/timestamp/</code>.</p>
3844
+ * @public
3845
+ */
3846
+ outputS3Uri: string | undefined;
3847
+ /**
3848
+ * <p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token return the result from the original successful request and have no additional effect.</p>
3849
+ * @public
3850
+ */
3851
+ clientToken?: string | undefined;
3852
+ }
3853
+ /**
3854
+ * @public
3855
+ */
3856
+ export interface StartPolicyPreviewJobResponse {
3857
+ /**
3858
+ * <p>The unique identifier for the created policy preview job. Use this ID with <code>GetPolicyPreviewJob</code> to retrieve job status and details, or with <code>CancelPolicyPreviewJob</code> to cancel the job.</p>
3859
+ * @public
3860
+ */
3861
+ jobId: string | undefined;
3862
+ }
3548
3863
  /**
3549
3864
  * <p>Starts a scan of the policies applied to the specified resource.</p>
3550
3865
  * @public
@@ -0,0 +1,7 @@
1
+ import type { Paginator } from "@smithy/types";
2
+ import { ListPolicyPreviewJobsCommandInput, ListPolicyPreviewJobsCommandOutput } from "../commands/ListPolicyPreviewJobsCommand";
3
+ import type { AccessAnalyzerPaginationConfiguration } from "./Interfaces";
4
+ /**
5
+ * @public
6
+ */
7
+ export declare const paginateListPolicyPreviewJobs: (config: AccessAnalyzerPaginationConfiguration, input: ListPolicyPreviewJobsCommandInput, ...rest: any[]) => Paginator<ListPolicyPreviewJobsCommandOutput>;
@@ -9,4 +9,5 @@ export * from "./ListArchiveRulesPaginator";
9
9
  export * from "./ListFindingsPaginator";
10
10
  export * from "./ListFindingsV2Paginator";
11
11
  export * from "./ListPolicyGenerationsPaginator";
12
+ export * from "./ListPolicyPreviewJobsPaginator";
12
13
  export * from "./ValidatePolicyPaginator";
@@ -30,6 +30,8 @@ export declare var ApplyArchiveRuleRequest$: StaticStructureSchema;
30
30
  export declare var ArchiveRuleSummary$: StaticStructureSchema;
31
31
  export declare var CancelPolicyGenerationRequest$: StaticStructureSchema;
32
32
  export declare var CancelPolicyGenerationResponse$: StaticStructureSchema;
33
+ export declare var CancelPolicyPreviewJobRequest$: StaticStructureSchema;
34
+ export declare var CancelPolicyPreviewJobResponse$: StaticStructureSchema;
33
35
  export declare var CheckAccessNotGrantedRequest$: StaticStructureSchema;
34
36
  export declare var CheckAccessNotGrantedResponse$: StaticStructureSchema;
35
37
  export declare var CheckNoNewAccessRequest$: StaticStructureSchema;
@@ -43,9 +45,13 @@ export declare var CreateAccessPreviewResponse$: StaticStructureSchema;
43
45
  export declare var CreateAnalyzerRequest$: StaticStructureSchema;
44
46
  export declare var CreateAnalyzerResponse$: StaticStructureSchema;
45
47
  export declare var CreateArchiveRuleRequest$: StaticStructureSchema;
48
+ export declare var CreatePolicyPreviewConfigurationRequest$: StaticStructureSchema;
49
+ export declare var CreatePolicyPreviewConfigurationResponse$: StaticStructureSchema;
46
50
  export declare var Criterion$: StaticStructureSchema;
47
51
  export declare var DeleteAnalyzerRequest$: StaticStructureSchema;
48
52
  export declare var DeleteArchiveRuleRequest$: StaticStructureSchema;
53
+ export declare var DeletePolicyPreviewConfigurationRequest$: StaticStructureSchema;
54
+ export declare var DeletePolicyPreviewConfigurationResponse$: StaticStructureSchema;
49
55
  export declare var DynamodbStreamConfiguration$: StaticStructureSchema;
50
56
  export declare var DynamodbTableConfiguration$: StaticStructureSchema;
51
57
  export declare var EbsSnapshotConfiguration$: StaticStructureSchema;
@@ -81,6 +87,10 @@ export declare var GetFindingV2Request$: StaticStructureSchema;
81
87
  export declare var GetFindingV2Response$: StaticStructureSchema;
82
88
  export declare var GetGeneratedPolicyRequest$: StaticStructureSchema;
83
89
  export declare var GetGeneratedPolicyResponse$: StaticStructureSchema;
90
+ export declare var GetPolicyPreviewConfigurationRequest$: StaticStructureSchema;
91
+ export declare var GetPolicyPreviewConfigurationResponse$: StaticStructureSchema;
92
+ export declare var GetPolicyPreviewJobRequest$: StaticStructureSchema;
93
+ export declare var GetPolicyPreviewJobResponse$: StaticStructureSchema;
84
94
  export declare var IamRoleConfiguration$: StaticStructureSchema;
85
95
  export declare var InlineArchiveRule$: StaticStructureSchema;
86
96
  export declare var InternalAccessAnalysisRule$: StaticStructureSchema;
@@ -111,11 +121,18 @@ export declare var ListFindingsV2Request$: StaticStructureSchema;
111
121
  export declare var ListFindingsV2Response$: StaticStructureSchema;
112
122
  export declare var ListPolicyGenerationsRequest$: StaticStructureSchema;
113
123
  export declare var ListPolicyGenerationsResponse$: StaticStructureSchema;
124
+ export declare var ListPolicyPreviewJobsRequest$: StaticStructureSchema;
125
+ export declare var ListPolicyPreviewJobsResponse$: StaticStructureSchema;
114
126
  export declare var ListTagsForResourceRequest$: StaticStructureSchema;
115
127
  export declare var ListTagsForResourceResponse$: StaticStructureSchema;
116
128
  export declare var Location$: StaticStructureSchema;
129
+ export declare var PolicyConfiguration$: StaticStructureSchema;
117
130
  export declare var PolicyGeneration$: StaticStructureSchema;
118
131
  export declare var PolicyGenerationDetails$: StaticStructureSchema;
132
+ export declare var PolicyPreviewAnalysisReport$: StaticStructureSchema;
133
+ export declare var PolicyPreviewConfiguration$: StaticStructureSchema;
134
+ export declare var PolicyPreviewJobDetails$: StaticStructureSchema;
135
+ export declare var PolicyPreviewJobParameters$: StaticStructureSchema;
119
136
  export declare var Position$: StaticStructureSchema;
120
137
  export declare var RdsDbClusterSnapshotConfiguration$: StaticStructureSchema;
121
138
  export declare var RdsDbSnapshotConfiguration$: StaticStructureSchema;
@@ -135,6 +152,8 @@ export declare var Span$: StaticStructureSchema;
135
152
  export declare var SqsQueueConfiguration$: StaticStructureSchema;
136
153
  export declare var StartPolicyGenerationRequest$: StaticStructureSchema;
137
154
  export declare var StartPolicyGenerationResponse$: StaticStructureSchema;
155
+ export declare var StartPolicyPreviewJobRequest$: StaticStructureSchema;
156
+ export declare var StartPolicyPreviewJobResponse$: StaticStructureSchema;
138
157
  export declare var StartResourceScanRequest$: StaticStructureSchema;
139
158
  export declare var StatusReason$: StaticStructureSchema;
140
159
  export declare var Substring$: StaticStructureSchema;
@@ -174,14 +193,17 @@ export declare var RdsDbSnapshotAttributeValue$: StaticUnionSchema;
174
193
  export declare var RecommendedStep$: StaticUnionSchema;
175
194
  export declare var ApplyArchiveRule$: StaticOperationSchema;
176
195
  export declare var CancelPolicyGeneration$: StaticOperationSchema;
196
+ export declare var CancelPolicyPreviewJob$: StaticOperationSchema;
177
197
  export declare var CheckAccessNotGranted$: StaticOperationSchema;
178
198
  export declare var CheckNoNewAccess$: StaticOperationSchema;
179
199
  export declare var CheckNoPublicAccess$: StaticOperationSchema;
180
200
  export declare var CreateAccessPreview$: StaticOperationSchema;
181
201
  export declare var CreateAnalyzer$: StaticOperationSchema;
182
202
  export declare var CreateArchiveRule$: StaticOperationSchema;
203
+ export declare var CreatePolicyPreviewConfiguration$: StaticOperationSchema;
183
204
  export declare var DeleteAnalyzer$: StaticOperationSchema;
184
205
  export declare var DeleteArchiveRule$: StaticOperationSchema;
206
+ export declare var DeletePolicyPreviewConfiguration$: StaticOperationSchema;
185
207
  export declare var GenerateFindingRecommendation$: StaticOperationSchema;
186
208
  export declare var GetAccessPreview$: StaticOperationSchema;
187
209
  export declare var GetAnalyzedResource$: StaticOperationSchema;
@@ -192,6 +214,8 @@ export declare var GetFindingRecommendation$: StaticOperationSchema;
192
214
  export declare var GetFindingsStatistics$: StaticOperationSchema;
193
215
  export declare var GetFindingV2$: StaticOperationSchema;
194
216
  export declare var GetGeneratedPolicy$: StaticOperationSchema;
217
+ export declare var GetPolicyPreviewConfiguration$: StaticOperationSchema;
218
+ export declare var GetPolicyPreviewJob$: StaticOperationSchema;
195
219
  export declare var ListAccessPreviewFindings$: StaticOperationSchema;
196
220
  export declare var ListAccessPreviews$: StaticOperationSchema;
197
221
  export declare var ListAnalyzedResources$: StaticOperationSchema;
@@ -200,8 +224,10 @@ export declare var ListArchiveRules$: StaticOperationSchema;
200
224
  export declare var ListFindings$: StaticOperationSchema;
201
225
  export declare var ListFindingsV2$: StaticOperationSchema;
202
226
  export declare var ListPolicyGenerations$: StaticOperationSchema;
227
+ export declare var ListPolicyPreviewJobs$: StaticOperationSchema;
203
228
  export declare var ListTagsForResource$: StaticOperationSchema;
204
229
  export declare var StartPolicyGeneration$: StaticOperationSchema;
230
+ export declare var StartPolicyPreviewJob$: StaticOperationSchema;
205
231
  export declare var StartResourceScan$: StaticOperationSchema;
206
232
  export declare var TagResource$: StaticOperationSchema;
207
233
  export declare var UntagResource$: StaticOperationSchema;