@aws-sdk/client-accessanalyzer 3.535.0 → 3.538.0

package/dist-cjs/index.js

@@ -559,6 +559,10 @@ var Configuration;
       return visitor.sqsQueue(value.sqsQueue);
     if (value.s3ExpressDirectoryBucket !== void 0)
       return visitor.s3ExpressDirectoryBucket(value.s3ExpressDirectoryBucket);
+    if (value.dynamodbStream !== void 0)
+      return visitor.dynamodbStream(value.dynamodbStream);
+    if (value.dynamodbTable !== void 0)
+      return visitor.dynamodbTable(value.dynamodbTable);
     return visitor._(value.$unknown[0], value.$unknown[1]);
   }, "visit");
 })(Configuration || (Configuration = {}));
@@ -629,6 +633,7 @@ var PolicyType = {
   SERVICE_CONTROL_POLICY: "SERVICE_CONTROL_POLICY"
 };
 var ValidatePolicyResourceType = {
+  DYNAMODB_TABLE: "AWS::DynamoDB::Table",
   ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument",
   S3_ACCESS_POINT: "AWS::S3::AccessPoint",
   S3_BUCKET: "AWS::S3::Bucket",

package/dist-es/models/models_0.js

@@ -235,6 +235,10 @@ export var Configuration;
             return visitor.sqsQueue(value.sqsQueue);
         if (value.s3ExpressDirectoryBucket !== undefined)
             return visitor.s3ExpressDirectoryBucket(value.s3ExpressDirectoryBucket);
+        if (value.dynamodbStream !== undefined)
+            return visitor.dynamodbStream(value.dynamodbStream);
+        if (value.dynamodbTable !== undefined)
+            return visitor.dynamodbTable(value.dynamodbTable);
         return visitor._(value.$unknown[0], value.$unknown[1]);
     };
 })(Configuration || (Configuration = {}));
@@ -305,6 +309,7 @@ export const PolicyType = {
     SERVICE_CONTROL_POLICY: "SERVICE_CONTROL_POLICY",
 };
 export const ValidatePolicyResourceType = {
+    DYNAMODB_TABLE: "AWS::DynamoDB::Table",
     ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument",
     S3_ACCESS_POINT: "AWS::S3::AccessPoint",
     S3_BUCKET: "AWS::S3::Bucket",

package/dist-types/commands/CreateAccessPreviewCommand.d.ts

@@ -143,6 +143,12 @@ declare const CreateAccessPreviewCommand_base: {
  *       s3ExpressDirectoryBucket: { // S3ExpressDirectoryBucketConfiguration
  *         bucketPolicy: "STRING_VALUE",
  *       },
+ *       dynamodbStream: { // DynamodbStreamConfiguration
+ *         streamPolicy: "STRING_VALUE",
+ *       },
+ *       dynamodbTable: { // DynamodbTableConfiguration
+ *         tablePolicy: "STRING_VALUE",
+ *       },
  *     },
  *   },
  *   clientToken: "STRING_VALUE",

package/dist-types/commands/GetAccessPreviewCommand.d.ts

@@ -150,6 +150,12 @@ declare const GetAccessPreviewCommand_base: {
  * //         s3ExpressDirectoryBucket: { // S3ExpressDirectoryBucketConfiguration
  * //           bucketPolicy: "STRING_VALUE",
  * //         },
+ * //         dynamodbStream: { // DynamodbStreamConfiguration
+ * //           streamPolicy: "STRING_VALUE",
+ * //         },
+ * //         dynamodbTable: { // DynamodbTableConfiguration
+ * //           tablePolicy: "STRING_VALUE",
+ * //         },
  * //       },
  * //     },
  * //     createdAt: new Date("TIMESTAMP"), // required

package/dist-types/models/models_0.d.ts

@@ -453,7 +453,7 @@ export interface CreateAnalyzerRequest {
     analyzerName: string | undefined;
     /**
      * <p>The type of analyzer to create. Only <code>ACCOUNT</code>, <code>ORGANIZATION</code>,
-     *          <code>ACCOUNT_UNUSED_ACCESS</code>, and <code>ORGANIZATION_UNUSED_ACCESS</code>
+     *             <code>ACCOUNT_UNUSED_ACCESS</code>, and <code>ORGANIZATION_UNUSED_ACCESS</code>
      *          analyzers are supported. You can create only one analyzer per account per Region. You can
      *          create up to 5 analyzers per organization per Region.</p>
      * @public
@@ -876,6 +876,62 @@ export interface CheckNoNewAccessResponse {
      */
     reasons?: ReasonSummary[];
 }
+/**
+ * <p>The proposed access control configuration for a DynamoDB stream. You can propose a
+ *          configuration for a new DynamoDB stream or an existing DynamoDB stream that you own by specifying
+ *          the policy for the DynamoDB stream. For more information, see <a href="https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_PutResourcePolicy.html">PutResourcePolicy</a>.</p>
+ *          <ul>
+ *             <li>
+ *                <p>If the configuration is for an existing DynamoDB stream and you do not specify the
+ *                DynamoDB policy, then the access preview uses the existing DynamoDB policy for the
+ *                stream.</p>
+ *             </li>
+ *             <li>
+ *                <p>If the access preview is for a new resource and you do not specify the policy,
+ *                then the access preview assumes a DynamoDB stream without a policy.</p>
+ *             </li>
+ *             <li>
+ *                <p>To propose deletion of an existing DynamoDB stream policy, you can specify an empty
+ *                string for the DynamoDB policy.</p>
+ *             </li>
+ *          </ul>
+ * @public
+ */
+export interface DynamodbStreamConfiguration {
+    /**
+     * <p>The proposed resource policy defining who can access or manage the DynamoDB stream.</p>
+     * @public
+     */
+    streamPolicy?: string;
+}
+/**
+ * <p>The proposed access control configuration for a DynamoDB table or index. You can propose a
+ *          configuration for a new DynamoDB table or index or an existing DynamoDB table or index that you
+ *          own by specifying the policy for the DynamoDB table or index. For more information, see <a href="https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_PutResourcePolicy.html">PutResourcePolicy</a>.</p>
+ *          <ul>
+ *             <li>
+ *                <p>If the configuration is for an existing DynamoDB table or index and you do not
+ *                specify the DynamoDB policy, then the access preview uses the existing DynamoDB policy for
+ *                the table or index.</p>
+ *             </li>
+ *             <li>
+ *                <p>If the access preview is for a new resource and you do not specify the policy,
+ *                then the access preview assumes a DynamoDB table without a policy.</p>
+ *             </li>
+ *             <li>
+ *                <p>To propose deletion of an existing DynamoDB table or index policy, you can specify an
+ *                empty string for the DynamoDB policy.</p>
+ *             </li>
+ *          </ul>
+ * @public
+ */
+export interface DynamodbTableConfiguration {
+    /**
+     * <p>The proposed resource policy defining who can access or manage the DynamoDB table.</p>
+     * @public
+     */
+    tablePolicy?: string;
+}
 /**
  * <p>The proposed access control configuration for an Amazon EBS volume snapshot. You can propose
  *          a configuration for a new Amazon EBS volume snapshot or an Amazon EBS volume snapshot that you own by
@@ -1645,7 +1701,7 @@ export interface SqsQueueConfiguration {
  *          as a type-value pair. You can specify only one type of access control configuration.</p>
  * @public
  */
-export type Configuration = Configuration.EbsSnapshotMember | Configuration.EcrRepositoryMember | Configuration.EfsFileSystemMember | Configuration.IamRoleMember | Configuration.KmsKeyMember | Configuration.RdsDbClusterSnapshotMember | Configuration.RdsDbSnapshotMember | Configuration.S3BucketMember | Configuration.S3ExpressDirectoryBucketMember | Configuration.SecretsManagerSecretMember | Configuration.SnsTopicMember | Configuration.SqsQueueMember | Configuration.$UnknownMember;
+export type Configuration = Configuration.DynamodbStreamMember | Configuration.DynamodbTableMember | Configuration.EbsSnapshotMember | Configuration.EcrRepositoryMember | Configuration.EfsFileSystemMember | Configuration.IamRoleMember | Configuration.KmsKeyMember | Configuration.RdsDbClusterSnapshotMember | Configuration.RdsDbSnapshotMember | Configuration.S3BucketMember | Configuration.S3ExpressDirectoryBucketMember | Configuration.SecretsManagerSecretMember | Configuration.SnsTopicMember | Configuration.SqsQueueMember | Configuration.$UnknownMember;
 /**
  * @public
  */
@@ -1667,6 +1723,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1686,6 +1744,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1705,6 +1765,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1724,6 +1786,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1743,6 +1807,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1762,6 +1828,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1781,6 +1849,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1800,6 +1870,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1819,6 +1891,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1838,6 +1912,8 @@ export declare namespace Configuration {
         snsTopic: SnsTopicConfiguration;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1857,6 +1933,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue: SqsQueueConfiguration;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown?: never;
     }
     /**
@@ -1876,6 +1954,50 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket: S3ExpressDirectoryBucketConfiguration;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>The access control configuration is for a DynamoDB stream.</p>
+     * @public
+     */
+    interface DynamodbStreamMember {
+        ebsSnapshot?: never;
+        ecrRepository?: never;
+        iamRole?: never;
+        efsFileSystem?: never;
+        kmsKey?: never;
+        rdsDbClusterSnapshot?: never;
+        rdsDbSnapshot?: never;
+        secretsManagerSecret?: never;
+        s3Bucket?: never;
+        snsTopic?: never;
+        sqsQueue?: never;
+        s3ExpressDirectoryBucket?: never;
+        dynamodbStream: DynamodbStreamConfiguration;
+        dynamodbTable?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>The access control configuration is for a DynamoDB table or index.</p>
+     * @public
+     */
+    interface DynamodbTableMember {
+        ebsSnapshot?: never;
+        ecrRepository?: never;
+        iamRole?: never;
+        efsFileSystem?: never;
+        kmsKey?: never;
+        rdsDbClusterSnapshot?: never;
+        rdsDbSnapshot?: never;
+        secretsManagerSecret?: never;
+        s3Bucket?: never;
+        snsTopic?: never;
+        sqsQueue?: never;
+        s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable: DynamodbTableConfiguration;
         $unknown?: never;
     }
     /**
@@ -1894,6 +2016,8 @@ export declare namespace Configuration {
         snsTopic?: never;
         sqsQueue?: never;
         s3ExpressDirectoryBucket?: never;
+        dynamodbStream?: never;
+        dynamodbTable?: never;
         $unknown: [string, any];
     }
     interface Visitor<T> {
@@ -1909,6 +2033,8 @@ export declare namespace Configuration {
         snsTopic: (value: SnsTopicConfiguration) => T;
         sqsQueue: (value: SqsQueueConfiguration) => T;
         s3ExpressDirectoryBucket: (value: S3ExpressDirectoryBucketConfiguration) => T;
+        dynamodbStream: (value: DynamodbStreamConfiguration) => T;
+        dynamodbTable: (value: DynamodbTableConfiguration) => T;
         _: (name: string, value: any) => T;
     }
     const visit: <T>(value: Configuration, visitor: Visitor<T>) => T;
@@ -2088,7 +2214,7 @@ export interface GetAnalyzedResourceRequest {
 /**
  * @public
  */
-export type ResourceType = "AWS::EC2::Snapshot" | "AWS::ECR::Repository" | "AWS::EFS::FileSystem" | "AWS::IAM::Role" | "AWS::KMS::Key" | "AWS::Lambda::Function" | "AWS::Lambda::LayerVersion" | "AWS::RDS::DBClusterSnapshot" | "AWS::RDS::DBSnapshot" | "AWS::S3::Bucket" | "AWS::S3Express::DirectoryBucket" | "AWS::SNS::Topic" | "AWS::SQS::Queue" | "AWS::SecretsManager::Secret";
+export type ResourceType = "AWS::DynamoDB::Stream" | "AWS::DynamoDB::Table" | "AWS::EC2::Snapshot" | "AWS::ECR::Repository" | "AWS::EFS::FileSystem" | "AWS::IAM::Role" | "AWS::KMS::Key" | "AWS::Lambda::Function" | "AWS::Lambda::LayerVersion" | "AWS::RDS::DBClusterSnapshot" | "AWS::RDS::DBSnapshot" | "AWS::S3::Bucket" | "AWS::S3Express::DirectoryBucket" | "AWS::SNS::Topic" | "AWS::SQS::Queue" | "AWS::SecretsManager::Secret";
 /**
  * @public
  */
@@ -3793,6 +3919,7 @@ export type PolicyType = (typeof PolicyType)[keyof typeof PolicyType];
  * @enum
  */
 export declare const ValidatePolicyResourceType: {
+    readonly DYNAMODB_TABLE: "AWS::DynamoDB::Table";
     readonly ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument";
     readonly S3_ACCESS_POINT: "AWS::S3::AccessPoint";
     readonly S3_BUCKET: "AWS::S3::Bucket";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -269,6 +269,12 @@ export interface CheckNoNewAccessResponse {
   message?: string;
   reasons?: ReasonSummary[];
 }
+export interface DynamodbStreamConfiguration {
+  streamPolicy?: string;
+}
+export interface DynamodbTableConfiguration {
+  tablePolicy?: string;
+}
 export interface EbsSnapshotConfiguration {
   userIds?: string[];
   groups?: string[];
@@ -465,6 +471,8 @@ export interface SqsQueueConfiguration {
   queuePolicy?: string;
 }
 export type Configuration =
+  | Configuration.DynamodbStreamMember
+  | Configuration.DynamodbTableMember
   | Configuration.EbsSnapshotMember
   | Configuration.EcrRepositoryMember
   | Configuration.EfsFileSystemMember
@@ -492,6 +500,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface EcrRepositoryMember {
@@ -507,6 +517,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface IamRoleMember {
@@ -522,6 +534,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface EfsFileSystemMember {
@@ -537,6 +551,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface KmsKeyMember {
@@ -552,6 +568,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface RdsDbClusterSnapshotMember {
@@ -567,6 +585,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface RdsDbSnapshotMember {
@@ -582,6 +602,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface SecretsManagerSecretMember {
@@ -597,6 +619,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface S3BucketMember {
@@ -612,6 +636,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface SnsTopicMember {
@@ -627,6 +653,8 @@ export declare namespace Configuration {
     snsTopic: SnsTopicConfiguration;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface SqsQueueMember {
@@ -642,6 +670,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue: SqsQueueConfiguration;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown?: never;
   }
   interface S3ExpressDirectoryBucketMember {
@@ -657,6 +687,42 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket: S3ExpressDirectoryBucketConfiguration;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
+    $unknown?: never;
+  }
+  interface DynamodbStreamMember {
+    ebsSnapshot?: never;
+    ecrRepository?: never;
+    iamRole?: never;
+    efsFileSystem?: never;
+    kmsKey?: never;
+    rdsDbClusterSnapshot?: never;
+    rdsDbSnapshot?: never;
+    secretsManagerSecret?: never;
+    s3Bucket?: never;
+    snsTopic?: never;
+    sqsQueue?: never;
+    s3ExpressDirectoryBucket?: never;
+    dynamodbStream: DynamodbStreamConfiguration;
+    dynamodbTable?: never;
+    $unknown?: never;
+  }
+  interface DynamodbTableMember {
+    ebsSnapshot?: never;
+    ecrRepository?: never;
+    iamRole?: never;
+    efsFileSystem?: never;
+    kmsKey?: never;
+    rdsDbClusterSnapshot?: never;
+    rdsDbSnapshot?: never;
+    secretsManagerSecret?: never;
+    s3Bucket?: never;
+    snsTopic?: never;
+    sqsQueue?: never;
+    s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable: DynamodbTableConfiguration;
     $unknown?: never;
   }
   interface $UnknownMember {
@@ -672,6 +738,8 @@ export declare namespace Configuration {
     snsTopic?: never;
     sqsQueue?: never;
     s3ExpressDirectoryBucket?: never;
+    dynamodbStream?: never;
+    dynamodbTable?: never;
     $unknown: [string, any];
   }
   interface Visitor<T> {
@@ -689,6 +757,8 @@ export declare namespace Configuration {
     s3ExpressDirectoryBucket: (
       value: S3ExpressDirectoryBucketConfiguration
     ) => T;
+    dynamodbStream: (value: DynamodbStreamConfiguration) => T;
+    dynamodbTable: (value: DynamodbTableConfiguration) => T;
     _: (name: string, value: any) => T;
   }
   const visit: <T>(value: Configuration, visitor: Visitor<T>) => T;
@@ -737,6 +807,8 @@ export interface GetAnalyzedResourceRequest {
   resourceArn: string | undefined;
 }
 export type ResourceType =
+  | "AWS::DynamoDB::Stream"
+  | "AWS::DynamoDB::Table"
   | "AWS::EC2::Snapshot"
   | "AWS::ECR::Repository"
   | "AWS::EFS::FileSystem"
@@ -1188,6 +1260,7 @@ export declare const PolicyType: {
 };
 export type PolicyType = (typeof PolicyType)[keyof typeof PolicyType];
 export declare const ValidatePolicyResourceType: {
+  readonly DYNAMODB_TABLE: "AWS::DynamoDB::Table";
   readonly ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument";
   readonly S3_ACCESS_POINT: "AWS::S3::AccessPoint";
   readonly S3_BUCKET: "AWS::S3::Bucket";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-accessanalyzer",
   "description": "AWS SDK for JavaScript Accessanalyzer Client for Node.js, Browser and React Native",
-  "version": "3.535.0",
+  "version": "3.538.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-accessanalyzer",