@aws-sdk/client-accessanalyzer 3.592.0 → 3.595.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/README.md +24 -0
  2. package/dist-cjs/index.js +241 -1
  3. package/dist-es/AccessAnalyzer.js +6 -0
  4. package/dist-es/commands/CheckNoPublicAccessCommand.js +25 -0
  5. package/dist-es/commands/GenerateFindingRecommendationCommand.js +24 -0
  6. package/dist-es/commands/GetFindingRecommendationCommand.js +24 -0
  7. package/dist-es/commands/index.js +3 -0
  8. package/dist-es/models/models_0.js +49 -0
  9. package/dist-es/pagination/GetFindingRecommendationPaginator.js +4 -0
  10. package/dist-es/pagination/index.js +1 -0
  11. package/dist-es/protocols/Aws_restJson1.js +111 -0
  12. package/dist-types/AccessAnalyzer.d.ts +21 -0
  13. package/dist-types/AccessAnalyzerClient.d.ts +5 -2
  14. package/dist-types/commands/CheckAccessNotGrantedCommand.d.ts +4 -1
  15. package/dist-types/commands/CheckNoPublicAccessCommand.d.ts +88 -0
  16. package/dist-types/commands/GenerateFindingRecommendationCommand.d.ts +71 -0
  17. package/dist-types/commands/GetFindingRecommendationCommand.d.ts +97 -0
  18. package/dist-types/commands/index.d.ts +3 -0
  19. package/dist-types/models/models_0.d.ts +308 -5
  20. package/dist-types/pagination/GetFindingRecommendationPaginator.d.ts +7 -0
  21. package/dist-types/pagination/index.d.ts +1 -0
  22. package/dist-types/protocols/Aws_restJson1.d.ts +27 -0
  23. package/dist-types/ts3.4/AccessAnalyzer.d.ts +51 -0
  24. package/dist-types/ts3.4/AccessAnalyzerClient.d.ts +18 -0
  25. package/dist-types/ts3.4/commands/CheckNoPublicAccessCommand.d.ts +40 -0
  26. package/dist-types/ts3.4/commands/GenerateFindingRecommendationCommand.d.ts +36 -0
  27. package/dist-types/ts3.4/commands/GetFindingRecommendationCommand.d.ts +40 -0
  28. package/dist-types/ts3.4/commands/index.d.ts +3 -0
  29. package/dist-types/ts3.4/models/models_0.d.ts +110 -1
  30. package/dist-types/ts3.4/pagination/GetFindingRecommendationPaginator.d.ts +11 -0
  31. package/dist-types/ts3.4/pagination/index.d.ts +1 -0
  32. package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +36 -0
  33. package/package.json +1 -1
package/README.md CHANGED
@@ -257,6 +257,14 @@ CheckNoNewAccess
257
257
 
258
258
  [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/accessanalyzer/command/CheckNoNewAccessCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/CheckNoNewAccessCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/CheckNoNewAccessCommandOutput/)
259
259
 
260
+ </details>
261
+ <details>
262
+ <summary>
263
+ CheckNoPublicAccess
264
+ </summary>
265
+
266
+ [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/accessanalyzer/command/CheckNoPublicAccessCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/CheckNoPublicAccessCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/CheckNoPublicAccessCommandOutput/)
267
+
260
268
  </details>
261
269
  <details>
262
270
  <summary>
@@ -297,6 +305,14 @@ DeleteArchiveRule
297
305
 
298
306
  [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/accessanalyzer/command/DeleteArchiveRuleCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/DeleteArchiveRuleCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/DeleteArchiveRuleCommandOutput/)
299
307
 
308
+ </details>
309
+ <details>
310
+ <summary>
311
+ GenerateFindingRecommendation
312
+ </summary>
313
+
314
+ [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/accessanalyzer/command/GenerateFindingRecommendationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/GenerateFindingRecommendationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/GenerateFindingRecommendationCommandOutput/)
315
+
300
316
  </details>
301
317
  <details>
302
318
  <summary>
@@ -337,6 +353,14 @@ GetFinding
337
353
 
338
354
  [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/accessanalyzer/command/GetFindingCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/GetFindingCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/GetFindingCommandOutput/)
339
355
 
356
+ </details>
357
+ <details>
358
+ <summary>
359
+ GetFindingRecommendation
360
+ </summary>
361
+
362
+ [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/accessanalyzer/command/GetFindingRecommendationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/GetFindingRecommendationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-accessanalyzer/Interface/GetFindingRecommendationCommandOutput/)
363
+
340
364
  </details>
341
365
  <details>
342
366
  <summary>
package/dist-cjs/index.js CHANGED
@@ -25,6 +25,7 @@ __export(src_exports, {
25
25
  AccessAnalyzerClient: () => AccessAnalyzerClient,
26
26
  AccessAnalyzerServiceException: () => AccessAnalyzerServiceException,
27
27
  AccessCheckPolicyType: () => AccessCheckPolicyType,
28
+ AccessCheckResourceType: () => AccessCheckResourceType,
28
29
  AccessDeniedException: () => AccessDeniedException,
29
30
  AccessPreviewStatus: () => AccessPreviewStatus,
30
31
  AccessPreviewStatusReasonCode: () => AccessPreviewStatusReasonCode,
@@ -39,6 +40,9 @@ __export(src_exports, {
39
40
  CheckNoNewAccessCommand: () => CheckNoNewAccessCommand,
40
41
  CheckNoNewAccessRequestFilterSensitiveLog: () => CheckNoNewAccessRequestFilterSensitiveLog,
41
42
  CheckNoNewAccessResult: () => CheckNoNewAccessResult,
43
+ CheckNoPublicAccessCommand: () => CheckNoPublicAccessCommand,
44
+ CheckNoPublicAccessRequestFilterSensitiveLog: () => CheckNoPublicAccessRequestFilterSensitiveLog,
45
+ CheckNoPublicAccessResult: () => CheckNoPublicAccessResult,
42
46
  Configuration: () => Configuration,
43
47
  ConflictException: () => ConflictException,
44
48
  CreateAccessPreviewCommand: () => CreateAccessPreviewCommand,
@@ -49,11 +53,13 @@ __export(src_exports, {
49
53
  FindingChangeType: () => FindingChangeType,
50
54
  FindingDetails: () => FindingDetails,
51
55
  FindingType: () => FindingType,
56
+ GenerateFindingRecommendationCommand: () => GenerateFindingRecommendationCommand,
52
57
  GetAccessPreviewCommand: () => GetAccessPreviewCommand,
53
58
  GetAnalyzedResourceCommand: () => GetAnalyzedResourceCommand,
54
59
  GetAnalyzerCommand: () => GetAnalyzerCommand,
55
60
  GetArchiveRuleCommand: () => GetArchiveRuleCommand,
56
61
  GetFindingCommand: () => GetFindingCommand,
62
+ GetFindingRecommendationCommand: () => GetFindingRecommendationCommand,
57
63
  GetFindingV2Command: () => GetFindingV2Command,
58
64
  GetGeneratedPolicyCommand: () => GetGeneratedPolicyCommand,
59
65
  InternalServerException: () => InternalServerException,
@@ -76,10 +82,14 @@ __export(src_exports, {
76
82
  PolicyType: () => PolicyType,
77
83
  RdsDbClusterSnapshotAttributeValue: () => RdsDbClusterSnapshotAttributeValue,
78
84
  RdsDbSnapshotAttributeValue: () => RdsDbSnapshotAttributeValue,
85
+ RecommendationType: () => RecommendationType,
86
+ RecommendedRemediationAction: () => RecommendedRemediationAction,
87
+ RecommendedStep: () => RecommendedStep,
79
88
  ResourceNotFoundException: () => ResourceNotFoundException,
80
89
  ServiceQuotaExceededException: () => ServiceQuotaExceededException,
81
90
  StartPolicyGenerationCommand: () => StartPolicyGenerationCommand,
82
91
  StartResourceScanCommand: () => StartResourceScanCommand,
92
+ Status: () => Status,
83
93
  TagResourceCommand: () => TagResourceCommand,
84
94
  ThrottlingException: () => ThrottlingException,
85
95
  UnprocessableEntityException: () => UnprocessableEntityException,
@@ -92,6 +102,7 @@ __export(src_exports, {
92
102
  ValidationException: () => ValidationException,
93
103
  ValidationExceptionReason: () => ValidationExceptionReason,
94
104
  __Client: () => import_smithy_client.Client,
105
+ paginateGetFindingRecommendation: () => paginateGetFindingRecommendation,
95
106
  paginateGetFindingV2: () => paginateGetFindingV2,
96
107
  paginateListAccessPreviewFindings: () => paginateListAccessPreviewFindings,
97
108
  paginateListAccessPreviews: () => paginateListAccessPreviews,
@@ -395,6 +406,7 @@ var ThrottlingException = _ThrottlingException;
395
406
  var ValidationExceptionReason = {
396
407
  CANNOT_PARSE: "cannotParse",
397
408
  FIELD_VALIDATION_FAILED: "fieldValidationFailed",
409
+ NOT_SUPPORTED: "notSupported",
398
410
  OTHER: "other",
399
411
  UNKNOWN_OPERATION: "unknownOperation"
400
412
  };
@@ -472,6 +484,30 @@ var CheckNoNewAccessResult = {
472
484
  FAIL: "FAIL",
473
485
  PASS: "PASS"
474
486
  };
487
+ var AccessCheckResourceType = {
488
+ DYNAMODB_STREAM: "AWS::DynamoDB::Stream",
489
+ DYNAMODB_TABLE: "AWS::DynamoDB::Table",
490
+ EFS_FILESYSTEM: "AWS::EFS::FileSystem",
491
+ KINESIS_DATA_STREAM: "AWS::Kinesis::Stream",
492
+ KINESIS_STREAM_CONSUMER: "AWS::Kinesis::StreamConsumer",
493
+ KMS_KEY: "AWS::KMS::Key",
494
+ LAMBDA_FUNCTION: "AWS::Lambda::Function",
495
+ OPENSEARCHSERVICE_DOMAIN: "AWS::OpenSearchService::Domain",
496
+ ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument",
497
+ S3EXPRESS_DIRECTORYBUCKET: "AWS::S3Express::DirectoryBucket",
498
+ S3_ACCESS_POINT: "AWS::S3::AccessPoint",
499
+ S3_BUCKET: "AWS::S3::Bucket",
500
+ S3_GLACIER: "AWS::S3::Glacier",
501
+ S3_OUTPOSTS_ACCESS_POINT: "AWS::S3Outposts::AccessPoint",
502
+ S3_OUTPOSTS_BUCKET: "AWS::S3Outposts::Bucket",
503
+ SECRETSMANAGER_SECRET: "AWS::SecretsManager::Secret",
504
+ SNS_TOPIC: "AWS::SNS::Topic",
505
+ SQS_QUEUE: "AWS::SQS::Queue"
506
+ };
507
+ var CheckNoPublicAccessResult = {
508
+ FAIL: "FAIL",
509
+ PASS: "PASS"
510
+ };
475
511
  var KmsGrantOperation = {
476
512
  CREATE_GRANT: "CreateGrant",
477
513
  DECRYPT: "Decrypt",
@@ -574,6 +610,26 @@ var AccessPreviewStatusReasonCode = {
574
610
  INTERNAL_ERROR: "INTERNAL_ERROR",
575
611
  INVALID_CONFIGURATION: "INVALID_CONFIGURATION"
576
612
  };
613
+ var RecommendationType = {
614
+ UNUSED_PERMISSION_RECOMMENDATION: "UnusedPermissionRecommendation"
615
+ };
616
+ var RecommendedRemediationAction = {
617
+ CREATE_POLICY: "CREATE_POLICY",
618
+ DETACH_POLICY: "DETACH_POLICY"
619
+ };
620
+ var RecommendedStep;
621
+ ((RecommendedStep3) => {
622
+ RecommendedStep3.visit = /* @__PURE__ */ __name((value, visitor) => {
623
+ if (value.unusedPermissionsRecommendedStep !== void 0)
624
+ return visitor.unusedPermissionsRecommendedStep(value.unusedPermissionsRecommendedStep);
625
+ return visitor._(value.$unknown[0], value.$unknown[1]);
626
+ }, "visit");
627
+ })(RecommendedStep || (RecommendedStep = {}));
628
+ var Status = {
629
+ FAILED: "FAILED",
630
+ IN_PROGRESS: "IN_PROGRESS",
631
+ SUCCEEDED: "SUCCEEDED"
632
+ };
577
633
  var FindingDetails;
578
634
  ((FindingDetails3) => {
579
635
  FindingDetails3.visit = /* @__PURE__ */ __name((value, visitor) => {
@@ -668,6 +724,10 @@ var CheckNoNewAccessRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) =>
668
724
  ...obj.newPolicyDocument && { newPolicyDocument: import_smithy_client.SENSITIVE_STRING },
669
725
  ...obj.existingPolicyDocument && { existingPolicyDocument: import_smithy_client.SENSITIVE_STRING }
670
726
  }), "CheckNoNewAccessRequestFilterSensitiveLog");
727
+ var CheckNoPublicAccessRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
728
+ ...obj,
729
+ ...obj.policyDocument && { policyDocument: import_smithy_client.SENSITIVE_STRING }
730
+ }), "CheckNoPublicAccessRequestFilterSensitiveLog");
671
731
 
672
732
  // src/protocols/Aws_restJson1.ts
673
733
  var se_ApplyArchiveRuleCommand = /* @__PURE__ */ __name(async (input, context) => {
@@ -730,6 +790,22 @@ var se_CheckNoNewAccessCommand = /* @__PURE__ */ __name(async (input, context) =
730
790
  b.m("POST").h(headers).b(body);
731
791
  return b.build();
732
792
  }, "se_CheckNoNewAccessCommand");
793
+ var se_CheckNoPublicAccessCommand = /* @__PURE__ */ __name(async (input, context) => {
794
+ const b = (0, import_core.requestBuilder)(input, context);
795
+ const headers = {
796
+ "content-type": "application/json"
797
+ };
798
+ b.bp("/policy/check-no-public-access");
799
+ let body;
800
+ body = JSON.stringify(
801
+ (0, import_smithy_client.take)(input, {
802
+ policyDocument: [],
803
+ resourceType: []
804
+ })
805
+ );
806
+ b.m("POST").h(headers).b(body);
807
+ return b.build();
808
+ }, "se_CheckNoPublicAccessCommand");
733
809
  var se_CreateAccessPreviewCommand = /* @__PURE__ */ __name(async (input, context) => {
734
810
  const b = (0, import_core.requestBuilder)(input, context);
735
811
  const headers = {
@@ -810,6 +886,18 @@ var se_DeleteArchiveRuleCommand = /* @__PURE__ */ __name(async (input, context)
810
886
  b.m("DELETE").h(headers).q(query).b(body);
811
887
  return b.build();
812
888
  }, "se_DeleteArchiveRuleCommand");
889
+ var se_GenerateFindingRecommendationCommand = /* @__PURE__ */ __name(async (input, context) => {
890
+ const b = (0, import_core.requestBuilder)(input, context);
891
+ const headers = {};
892
+ b.bp("/recommendation/{id}");
893
+ b.p("id", () => input.id, "{id}", false);
894
+ const query = (0, import_smithy_client.map)({
895
+ [_aA]: [, (0, import_smithy_client.expectNonNull)(input[_aA], `analyzerArn`)]
896
+ });
897
+ let body;
898
+ b.m("POST").h(headers).q(query).b(body);
899
+ return b.build();
900
+ }, "se_GenerateFindingRecommendationCommand");
813
901
  var se_GetAccessPreviewCommand = /* @__PURE__ */ __name(async (input, context) => {
814
902
  const b = (0, import_core.requestBuilder)(input, context);
815
903
  const headers = {};
@@ -865,6 +953,20 @@ var se_GetFindingCommand = /* @__PURE__ */ __name(async (input, context) => {
865
953
  b.m("GET").h(headers).q(query).b(body);
866
954
  return b.build();
867
955
  }, "se_GetFindingCommand");
956
+ var se_GetFindingRecommendationCommand = /* @__PURE__ */ __name(async (input, context) => {
957
+ const b = (0, import_core.requestBuilder)(input, context);
958
+ const headers = {};
959
+ b.bp("/recommendation/{id}");
960
+ b.p("id", () => input.id, "{id}", false);
961
+ const query = (0, import_smithy_client.map)({
962
+ [_aA]: [, (0, import_smithy_client.expectNonNull)(input[_aA], `analyzerArn`)],
963
+ [_mR]: [() => input.maxResults !== void 0, () => input[_mR].toString()],
964
+ [_nT]: [, input[_nT]]
965
+ });
966
+ let body;
967
+ b.m("GET").h(headers).q(query).b(body);
968
+ return b.build();
969
+ }, "se_GetFindingRecommendationCommand");
868
970
  var se_GetFindingV2Command = /* @__PURE__ */ __name(async (input, context) => {
869
971
  const b = (0, import_core.requestBuilder)(input, context);
870
972
  const headers = {};
@@ -1204,6 +1306,22 @@ var de_CheckNoNewAccessCommand = /* @__PURE__ */ __name(async (output, context)
1204
1306
  Object.assign(contents, doc);
1205
1307
  return contents;
1206
1308
  }, "de_CheckNoNewAccessCommand");
1309
+ var de_CheckNoPublicAccessCommand = /* @__PURE__ */ __name(async (output, context) => {
1310
+ if (output.statusCode !== 200 && output.statusCode >= 300) {
1311
+ return de_CommandError(output, context);
1312
+ }
1313
+ const contents = (0, import_smithy_client.map)({
1314
+ $metadata: deserializeMetadata(output)
1315
+ });
1316
+ const data = (0, import_smithy_client.expectNonNull)((0, import_smithy_client.expectObject)(await (0, import_core2.parseJsonBody)(output.body, context)), "body");
1317
+ const doc = (0, import_smithy_client.take)(data, {
1318
+ message: import_smithy_client.expectString,
1319
+ reasons: import_smithy_client._json,
1320
+ result: import_smithy_client.expectString
1321
+ });
1322
+ Object.assign(contents, doc);
1323
+ return contents;
1324
+ }, "de_CheckNoPublicAccessCommand");
1207
1325
  var de_CreateAccessPreviewCommand = /* @__PURE__ */ __name(async (output, context) => {
1208
1326
  if (output.statusCode !== 200 && output.statusCode >= 300) {
1209
1327
  return de_CommandError(output, context);
@@ -1262,6 +1380,16 @@ var de_DeleteArchiveRuleCommand = /* @__PURE__ */ __name(async (output, context)
1262
1380
  await (0, import_smithy_client.collectBody)(output.body, context);
1263
1381
  return contents;
1264
1382
  }, "de_DeleteArchiveRuleCommand");
1383
+ var de_GenerateFindingRecommendationCommand = /* @__PURE__ */ __name(async (output, context) => {
1384
+ if (output.statusCode !== 200 && output.statusCode >= 300) {
1385
+ return de_CommandError(output, context);
1386
+ }
1387
+ const contents = (0, import_smithy_client.map)({
1388
+ $metadata: deserializeMetadata(output)
1389
+ });
1390
+ await (0, import_smithy_client.collectBody)(output.body, context);
1391
+ return contents;
1392
+ }, "de_GenerateFindingRecommendationCommand");
1265
1393
  var de_GetAccessPreviewCommand = /* @__PURE__ */ __name(async (output, context) => {
1266
1394
  if (output.statusCode !== 200 && output.statusCode >= 300) {
1267
1395
  return de_CommandError(output, context);
@@ -1332,6 +1460,27 @@ var de_GetFindingCommand = /* @__PURE__ */ __name(async (output, context) => {
1332
1460
  Object.assign(contents, doc);
1333
1461
  return contents;
1334
1462
  }, "de_GetFindingCommand");
1463
+ var de_GetFindingRecommendationCommand = /* @__PURE__ */ __name(async (output, context) => {
1464
+ if (output.statusCode !== 200 && output.statusCode >= 300) {
1465
+ return de_CommandError(output, context);
1466
+ }
1467
+ const contents = (0, import_smithy_client.map)({
1468
+ $metadata: deserializeMetadata(output)
1469
+ });
1470
+ const data = (0, import_smithy_client.expectNonNull)((0, import_smithy_client.expectObject)(await (0, import_core2.parseJsonBody)(output.body, context)), "body");
1471
+ const doc = (0, import_smithy_client.take)(data, {
1472
+ completedAt: (_) => (0, import_smithy_client.expectNonNull)((0, import_smithy_client.parseRfc3339DateTimeWithOffset)(_)),
1473
+ error: import_smithy_client._json,
1474
+ nextToken: import_smithy_client.expectString,
1475
+ recommendationType: import_smithy_client.expectString,
1476
+ recommendedSteps: (_) => de_RecommendedStepList(_, context),
1477
+ resourceArn: import_smithy_client.expectString,
1478
+ startedAt: (_) => (0, import_smithy_client.expectNonNull)((0, import_smithy_client.parseRfc3339DateTimeWithOffset)(_)),
1479
+ status: import_smithy_client.expectString
1480
+ });
1481
+ Object.assign(contents, doc);
1482
+ return contents;
1483
+ }, "de_GetFindingRecommendationCommand");
1335
1484
  var de_GetFindingV2Command = /* @__PURE__ */ __name(async (output, context) => {
1336
1485
  if (output.statusCode !== 200 && output.statusCode >= 300) {
1337
1486
  return de_CommandError(output, context);
@@ -2005,6 +2154,23 @@ var de_PolicyGenerationList = /* @__PURE__ */ __name((output, context) => {
2005
2154
  });
2006
2155
  return retVal;
2007
2156
  }, "de_PolicyGenerationList");
2157
+ var de_RecommendedStep = /* @__PURE__ */ __name((output, context) => {
2158
+ if (output.unusedPermissionsRecommendedStep != null) {
2159
+ return {
2160
+ unusedPermissionsRecommendedStep: de_UnusedPermissionsRecommendedStep(
2161
+ output.unusedPermissionsRecommendedStep,
2162
+ context
2163
+ )
2164
+ };
2165
+ }
2166
+ return { $unknown: Object.entries(output)[0] };
2167
+ }, "de_RecommendedStep");
2168
+ var de_RecommendedStepList = /* @__PURE__ */ __name((output, context) => {
2169
+ const retVal = (output || []).filter((e) => e != null).map((entry) => {
2170
+ return de_RecommendedStep((0, import_core2.awsExpectUnion)(entry), context);
2171
+ });
2172
+ return retVal;
2173
+ }, "de_RecommendedStepList");
2008
2174
  var de_UnusedAction = /* @__PURE__ */ __name((output, context) => {
2009
2175
  return (0, import_smithy_client.take)(output, {
2010
2176
  action: import_smithy_client.expectString,
@@ -2040,6 +2206,14 @@ var de_UnusedPermissionDetails = /* @__PURE__ */ __name((output, context) => {
2040
2206
  serviceNamespace: import_smithy_client.expectString
2041
2207
  });
2042
2208
  }, "de_UnusedPermissionDetails");
2209
+ var de_UnusedPermissionsRecommendedStep = /* @__PURE__ */ __name((output, context) => {
2210
+ return (0, import_smithy_client.take)(output, {
2211
+ existingPolicyId: import_smithy_client.expectString,
2212
+ policyUpdatedAt: (_) => (0, import_smithy_client.expectNonNull)((0, import_smithy_client.parseRfc3339DateTimeWithOffset)(_)),
2213
+ recommendedAction: import_smithy_client.expectString,
2214
+ recommendedPolicy: import_smithy_client.expectString
2215
+ });
2216
+ }, "de_UnusedPermissionsRecommendedStep");
2043
2217
  var deserializeMetadata = /* @__PURE__ */ __name((output) => ({
2044
2218
  httpStatusCode: output.statusCode,
2045
2219
  requestId: output.headers["x-amzn-requestid"] ?? output.headers["x-amzn-request-id"] ?? output.headers["x-amz-request-id"],
@@ -2120,6 +2294,22 @@ var _CheckNoNewAccessCommand = class _CheckNoNewAccessCommand extends import_smi
2120
2294
  __name(_CheckNoNewAccessCommand, "CheckNoNewAccessCommand");
2121
2295
  var CheckNoNewAccessCommand = _CheckNoNewAccessCommand;
2122
2296
 
2297
+ // src/commands/CheckNoPublicAccessCommand.ts
2298
+
2299
+
2300
+
2301
+ var _CheckNoPublicAccessCommand = class _CheckNoPublicAccessCommand extends import_smithy_client.Command.classBuilder().ep({
2302
+ ...commonParams
2303
+ }).m(function(Command, cs, config, o) {
2304
+ return [
2305
+ (0, import_middleware_serde.getSerdePlugin)(config, this.serialize, this.deserialize),
2306
+ (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions())
2307
+ ];
2308
+ }).s("AccessAnalyzer", "CheckNoPublicAccess", {}).n("AccessAnalyzerClient", "CheckNoPublicAccessCommand").f(CheckNoPublicAccessRequestFilterSensitiveLog, void 0).ser(se_CheckNoPublicAccessCommand).de(de_CheckNoPublicAccessCommand).build() {
2309
+ };
2310
+ __name(_CheckNoPublicAccessCommand, "CheckNoPublicAccessCommand");
2311
+ var CheckNoPublicAccessCommand = _CheckNoPublicAccessCommand;
2312
+
2123
2313
  // src/commands/CreateAccessPreviewCommand.ts
2124
2314
 
2125
2315
 
@@ -2200,6 +2390,22 @@ var _DeleteArchiveRuleCommand = class _DeleteArchiveRuleCommand extends import_s
2200
2390
  __name(_DeleteArchiveRuleCommand, "DeleteArchiveRuleCommand");
2201
2391
  var DeleteArchiveRuleCommand = _DeleteArchiveRuleCommand;
2202
2392
 
2393
+ // src/commands/GenerateFindingRecommendationCommand.ts
2394
+
2395
+
2396
+
2397
+ var _GenerateFindingRecommendationCommand = class _GenerateFindingRecommendationCommand extends import_smithy_client.Command.classBuilder().ep({
2398
+ ...commonParams
2399
+ }).m(function(Command, cs, config, o) {
2400
+ return [
2401
+ (0, import_middleware_serde.getSerdePlugin)(config, this.serialize, this.deserialize),
2402
+ (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions())
2403
+ ];
2404
+ }).s("AccessAnalyzer", "GenerateFindingRecommendation", {}).n("AccessAnalyzerClient", "GenerateFindingRecommendationCommand").f(void 0, void 0).ser(se_GenerateFindingRecommendationCommand).de(de_GenerateFindingRecommendationCommand).build() {
2405
+ };
2406
+ __name(_GenerateFindingRecommendationCommand, "GenerateFindingRecommendationCommand");
2407
+ var GenerateFindingRecommendationCommand = _GenerateFindingRecommendationCommand;
2408
+
2203
2409
  // src/commands/GetAccessPreviewCommand.ts
2204
2410
 
2205
2411
 
@@ -2280,6 +2486,22 @@ var _GetFindingCommand = class _GetFindingCommand extends import_smithy_client.C
2280
2486
  __name(_GetFindingCommand, "GetFindingCommand");
2281
2487
  var GetFindingCommand = _GetFindingCommand;
2282
2488
 
2489
+ // src/commands/GetFindingRecommendationCommand.ts
2490
+
2491
+
2492
+
2493
+ var _GetFindingRecommendationCommand = class _GetFindingRecommendationCommand extends import_smithy_client.Command.classBuilder().ep({
2494
+ ...commonParams
2495
+ }).m(function(Command, cs, config, o) {
2496
+ return [
2497
+ (0, import_middleware_serde.getSerdePlugin)(config, this.serialize, this.deserialize),
2498
+ (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions())
2499
+ ];
2500
+ }).s("AccessAnalyzer", "GetFindingRecommendation", {}).n("AccessAnalyzerClient", "GetFindingRecommendationCommand").f(void 0, void 0).ser(se_GetFindingRecommendationCommand).de(de_GetFindingRecommendationCommand).build() {
2501
+ };
2502
+ __name(_GetFindingRecommendationCommand, "GetFindingRecommendationCommand");
2503
+ var GetFindingRecommendationCommand = _GetFindingRecommendationCommand;
2504
+
2283
2505
  // src/commands/GetFindingV2Command.ts
2284
2506
 
2285
2507
 
@@ -2574,16 +2796,19 @@ var commands = {
2574
2796
  CancelPolicyGenerationCommand,
2575
2797
  CheckAccessNotGrantedCommand,
2576
2798
  CheckNoNewAccessCommand,
2799
+ CheckNoPublicAccessCommand,
2577
2800
  CreateAccessPreviewCommand,
2578
2801
  CreateAnalyzerCommand,
2579
2802
  CreateArchiveRuleCommand,
2580
2803
  DeleteAnalyzerCommand,
2581
2804
  DeleteArchiveRuleCommand,
2805
+ GenerateFindingRecommendationCommand,
2582
2806
  GetAccessPreviewCommand,
2583
2807
  GetAnalyzedResourceCommand,
2584
2808
  GetAnalyzerCommand,
2585
2809
  GetArchiveRuleCommand,
2586
2810
  GetFindingCommand,
2811
+ GetFindingRecommendationCommand,
2587
2812
  GetFindingV2Command,
2588
2813
  GetGeneratedPolicyCommand,
2589
2814
  ListAccessPreviewFindingsCommand,
@@ -2609,6 +2834,10 @@ __name(_AccessAnalyzer, "AccessAnalyzer");
2609
2834
  var AccessAnalyzer = _AccessAnalyzer;
2610
2835
  (0, import_smithy_client.createAggregatedClient)(commands, AccessAnalyzer);
2611
2836
 
2837
+ // src/pagination/GetFindingRecommendationPaginator.ts
2838
+
2839
+ var paginateGetFindingRecommendation = (0, import_core.createPaginator)(AccessAnalyzerClient, GetFindingRecommendationCommand, "nextToken", "nextToken", "maxResults");
2840
+
2612
2841
  // src/pagination/GetFindingV2Paginator.ts
2613
2842
 
2614
2843
  var paginateGetFindingV2 = (0, import_core.createPaginator)(AccessAnalyzerClient, GetFindingV2Command, "nextToken", "nextToken", "maxResults");
@@ -2660,16 +2889,19 @@ var paginateValidatePolicy = (0, import_core.createPaginator)(AccessAnalyzerClie
2660
2889
  CancelPolicyGenerationCommand,
2661
2890
  CheckAccessNotGrantedCommand,
2662
2891
  CheckNoNewAccessCommand,
2892
+ CheckNoPublicAccessCommand,
2663
2893
  CreateAccessPreviewCommand,
2664
2894
  CreateAnalyzerCommand,
2665
2895
  CreateArchiveRuleCommand,
2666
2896
  DeleteAnalyzerCommand,
2667
2897
  DeleteArchiveRuleCommand,
2898
+ GenerateFindingRecommendationCommand,
2668
2899
  GetAccessPreviewCommand,
2669
2900
  GetAnalyzedResourceCommand,
2670
2901
  GetAnalyzerCommand,
2671
2902
  GetArchiveRuleCommand,
2672
2903
  GetFindingCommand,
2904
+ GetFindingRecommendationCommand,
2673
2905
  GetFindingV2Command,
2674
2906
  GetGeneratedPolicyCommand,
2675
2907
  ListAccessPreviewFindingsCommand,
@@ -2688,6 +2920,7 @@ var paginateValidatePolicy = (0, import_core.createPaginator)(AccessAnalyzerClie
2688
2920
  UpdateArchiveRuleCommand,
2689
2921
  UpdateFindingsCommand,
2690
2922
  ValidatePolicyCommand,
2923
+ paginateGetFindingRecommendation,
2691
2924
  paginateGetFindingV2,
2692
2925
  paginateListAccessPreviewFindings,
2693
2926
  paginateListAccessPreviews,
@@ -2712,6 +2945,8 @@ var paginateValidatePolicy = (0, import_core.createPaginator)(AccessAnalyzerClie
2712
2945
  InvalidParameterException,
2713
2946
  UnprocessableEntityException,
2714
2947
  CheckNoNewAccessResult,
2948
+ AccessCheckResourceType,
2949
+ CheckNoPublicAccessResult,
2715
2950
  KmsGrantOperation,
2716
2951
  RdsDbClusterSnapshotAttributeValue,
2717
2952
  RdsDbSnapshotAttributeValue,
@@ -2721,6 +2956,10 @@ var paginateValidatePolicy = (0, import_core.createPaginator)(AccessAnalyzerClie
2721
2956
  Configuration,
2722
2957
  AccessPreviewStatus,
2723
2958
  AccessPreviewStatusReasonCode,
2959
+ RecommendationType,
2960
+ RecommendedRemediationAction,
2961
+ RecommendedStep,
2962
+ Status,
2724
2963
  FindingDetails,
2725
2964
  FindingType,
2726
2965
  JobErrorCode,
@@ -2732,6 +2971,7 @@ var paginateValidatePolicy = (0, import_core.createPaginator)(AccessAnalyzerClie
2732
2971
  ValidatePolicyFindingType,
2733
2972
  PathElement,
2734
2973
  CheckAccessNotGrantedRequestFilterSensitiveLog,
2735
- CheckNoNewAccessRequestFilterSensitiveLog
2974
+ CheckNoNewAccessRequestFilterSensitiveLog,
2975
+ CheckNoPublicAccessRequestFilterSensitiveLog
2736
2976
  });
2737
2977
 
@@ -4,16 +4,19 @@ import { ApplyArchiveRuleCommand, } from "./commands/ApplyArchiveRuleCommand";
4
4
  import { CancelPolicyGenerationCommand, } from "./commands/CancelPolicyGenerationCommand";
5
5
  import { CheckAccessNotGrantedCommand, } from "./commands/CheckAccessNotGrantedCommand";
6
6
  import { CheckNoNewAccessCommand, } from "./commands/CheckNoNewAccessCommand";
7
+ import { CheckNoPublicAccessCommand, } from "./commands/CheckNoPublicAccessCommand";
7
8
  import { CreateAccessPreviewCommand, } from "./commands/CreateAccessPreviewCommand";
8
9
  import { CreateAnalyzerCommand, } from "./commands/CreateAnalyzerCommand";
9
10
  import { CreateArchiveRuleCommand, } from "./commands/CreateArchiveRuleCommand";
10
11
  import { DeleteAnalyzerCommand, } from "./commands/DeleteAnalyzerCommand";
11
12
  import { DeleteArchiveRuleCommand, } from "./commands/DeleteArchiveRuleCommand";
13
+ import { GenerateFindingRecommendationCommand, } from "./commands/GenerateFindingRecommendationCommand";
12
14
  import { GetAccessPreviewCommand, } from "./commands/GetAccessPreviewCommand";
13
15
  import { GetAnalyzedResourceCommand, } from "./commands/GetAnalyzedResourceCommand";
14
16
  import { GetAnalyzerCommand } from "./commands/GetAnalyzerCommand";
15
17
  import { GetArchiveRuleCommand, } from "./commands/GetArchiveRuleCommand";
16
18
  import { GetFindingCommand } from "./commands/GetFindingCommand";
19
+ import { GetFindingRecommendationCommand, } from "./commands/GetFindingRecommendationCommand";
17
20
  import { GetFindingV2Command, } from "./commands/GetFindingV2Command";
18
21
  import { GetGeneratedPolicyCommand, } from "./commands/GetGeneratedPolicyCommand";
19
22
  import { ListAccessPreviewFindingsCommand, } from "./commands/ListAccessPreviewFindingsCommand";
@@ -37,16 +40,19 @@ const commands = {
37
40
  CancelPolicyGenerationCommand,
38
41
  CheckAccessNotGrantedCommand,
39
42
  CheckNoNewAccessCommand,
43
+ CheckNoPublicAccessCommand,
40
44
  CreateAccessPreviewCommand,
41
45
  CreateAnalyzerCommand,
42
46
  CreateArchiveRuleCommand,
43
47
  DeleteAnalyzerCommand,
44
48
  DeleteArchiveRuleCommand,
49
+ GenerateFindingRecommendationCommand,
45
50
  GetAccessPreviewCommand,
46
51
  GetAnalyzedResourceCommand,
47
52
  GetAnalyzerCommand,
48
53
  GetArchiveRuleCommand,
49
54
  GetFindingCommand,
55
+ GetFindingRecommendationCommand,
50
56
  GetFindingV2Command,
51
57
  GetGeneratedPolicyCommand,
52
58
  ListAccessPreviewFindingsCommand,
@@ -0,0 +1,25 @@
1
+ import { getEndpointPlugin } from "@smithy/middleware-endpoint";
2
+ import { getSerdePlugin } from "@smithy/middleware-serde";
3
+ import { Command as $Command } from "@smithy/smithy-client";
4
+ import { commonParams } from "../endpoint/EndpointParameters";
5
+ import { CheckNoPublicAccessRequestFilterSensitiveLog, } from "../models/models_0";
6
+ import { de_CheckNoPublicAccessCommand, se_CheckNoPublicAccessCommand } from "../protocols/Aws_restJson1";
7
+ export { $Command };
8
+ export class CheckNoPublicAccessCommand extends $Command
9
+ .classBuilder()
10
+ .ep({
11
+ ...commonParams,
12
+ })
13
+ .m(function (Command, cs, config, o) {
14
+ return [
15
+ getSerdePlugin(config, this.serialize, this.deserialize),
16
+ getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
17
+ ];
18
+ })
19
+ .s("AccessAnalyzer", "CheckNoPublicAccess", {})
20
+ .n("AccessAnalyzerClient", "CheckNoPublicAccessCommand")
21
+ .f(CheckNoPublicAccessRequestFilterSensitiveLog, void 0)
22
+ .ser(se_CheckNoPublicAccessCommand)
23
+ .de(de_CheckNoPublicAccessCommand)
24
+ .build() {
25
+ }
@@ -0,0 +1,24 @@
1
+ import { getEndpointPlugin } from "@smithy/middleware-endpoint";
2
+ import { getSerdePlugin } from "@smithy/middleware-serde";
3
+ import { Command as $Command } from "@smithy/smithy-client";
4
+ import { commonParams } from "../endpoint/EndpointParameters";
5
+ import { de_GenerateFindingRecommendationCommand, se_GenerateFindingRecommendationCommand, } from "../protocols/Aws_restJson1";
6
+ export { $Command };
7
+ export class GenerateFindingRecommendationCommand extends $Command
8
+ .classBuilder()
9
+ .ep({
10
+ ...commonParams,
11
+ })
12
+ .m(function (Command, cs, config, o) {
13
+ return [
14
+ getSerdePlugin(config, this.serialize, this.deserialize),
15
+ getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
16
+ ];
17
+ })
18
+ .s("AccessAnalyzer", "GenerateFindingRecommendation", {})
19
+ .n("AccessAnalyzerClient", "GenerateFindingRecommendationCommand")
20
+ .f(void 0, void 0)
21
+ .ser(se_GenerateFindingRecommendationCommand)
22
+ .de(de_GenerateFindingRecommendationCommand)
23
+ .build() {
24
+ }
@@ -0,0 +1,24 @@
1
+ import { getEndpointPlugin } from "@smithy/middleware-endpoint";
2
+ import { getSerdePlugin } from "@smithy/middleware-serde";
3
+ import { Command as $Command } from "@smithy/smithy-client";
4
+ import { commonParams } from "../endpoint/EndpointParameters";
5
+ import { de_GetFindingRecommendationCommand, se_GetFindingRecommendationCommand } from "../protocols/Aws_restJson1";
6
+ export { $Command };
7
+ export class GetFindingRecommendationCommand extends $Command
8
+ .classBuilder()
9
+ .ep({
10
+ ...commonParams,
11
+ })
12
+ .m(function (Command, cs, config, o) {
13
+ return [
14
+ getSerdePlugin(config, this.serialize, this.deserialize),
15
+ getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
16
+ ];
17
+ })
18
+ .s("AccessAnalyzer", "GetFindingRecommendation", {})
19
+ .n("AccessAnalyzerClient", "GetFindingRecommendationCommand")
20
+ .f(void 0, void 0)
21
+ .ser(se_GetFindingRecommendationCommand)
22
+ .de(de_GetFindingRecommendationCommand)
23
+ .build() {
24
+ }
@@ -2,16 +2,19 @@ export * from "./ApplyArchiveRuleCommand";
2
2
  export * from "./CancelPolicyGenerationCommand";
3
3
  export * from "./CheckAccessNotGrantedCommand";
4
4
  export * from "./CheckNoNewAccessCommand";
5
+ export * from "./CheckNoPublicAccessCommand";
5
6
  export * from "./CreateAccessPreviewCommand";
6
7
  export * from "./CreateAnalyzerCommand";
7
8
  export * from "./CreateArchiveRuleCommand";
8
9
  export * from "./DeleteAnalyzerCommand";
9
10
  export * from "./DeleteArchiveRuleCommand";
11
+ export * from "./GenerateFindingRecommendationCommand";
10
12
  export * from "./GetAccessPreviewCommand";
11
13
  export * from "./GetAnalyzedResourceCommand";
12
14
  export * from "./GetAnalyzerCommand";
13
15
  export * from "./GetArchiveRuleCommand";
14
16
  export * from "./GetFindingCommand";
17
+ export * from "./GetFindingRecommendationCommand";
15
18
  export * from "./GetFindingV2Command";
16
19
  export * from "./GetGeneratedPolicyCommand";
17
20
  export * from "./ListAccessPreviewFindingsCommand";