@aws-sdk/client-accessanalyzer 3.592.0 → 3.595.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/README.md +24 -0
  2. package/dist-cjs/index.js +241 -1
  3. package/dist-es/AccessAnalyzer.js +6 -0
  4. package/dist-es/commands/CheckNoPublicAccessCommand.js +25 -0
  5. package/dist-es/commands/GenerateFindingRecommendationCommand.js +24 -0
  6. package/dist-es/commands/GetFindingRecommendationCommand.js +24 -0
  7. package/dist-es/commands/index.js +3 -0
  8. package/dist-es/models/models_0.js +49 -0
  9. package/dist-es/pagination/GetFindingRecommendationPaginator.js +4 -0
  10. package/dist-es/pagination/index.js +1 -0
  11. package/dist-es/protocols/Aws_restJson1.js +111 -0
  12. package/dist-types/AccessAnalyzer.d.ts +21 -0
  13. package/dist-types/AccessAnalyzerClient.d.ts +5 -2
  14. package/dist-types/commands/CheckAccessNotGrantedCommand.d.ts +4 -1
  15. package/dist-types/commands/CheckNoPublicAccessCommand.d.ts +88 -0
  16. package/dist-types/commands/GenerateFindingRecommendationCommand.d.ts +71 -0
  17. package/dist-types/commands/GetFindingRecommendationCommand.d.ts +97 -0
  18. package/dist-types/commands/index.d.ts +3 -0
  19. package/dist-types/models/models_0.d.ts +308 -5
  20. package/dist-types/pagination/GetFindingRecommendationPaginator.d.ts +7 -0
  21. package/dist-types/pagination/index.d.ts +1 -0
  22. package/dist-types/protocols/Aws_restJson1.d.ts +27 -0
  23. package/dist-types/ts3.4/AccessAnalyzer.d.ts +51 -0
  24. package/dist-types/ts3.4/AccessAnalyzerClient.d.ts +18 -0
  25. package/dist-types/ts3.4/commands/CheckNoPublicAccessCommand.d.ts +40 -0
  26. package/dist-types/ts3.4/commands/GenerateFindingRecommendationCommand.d.ts +36 -0
  27. package/dist-types/ts3.4/commands/GetFindingRecommendationCommand.d.ts +40 -0
  28. package/dist-types/ts3.4/commands/index.d.ts +3 -0
  29. package/dist-types/ts3.4/models/models_0.d.ts +110 -1
  30. package/dist-types/ts3.4/pagination/GetFindingRecommendationPaginator.d.ts +11 -0
  31. package/dist-types/ts3.4/pagination/index.d.ts +1 -0
  32. package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +36 -0
  33. package/package.json +1 -1
@@ -1,8 +1,8 @@
1
1
  import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
2
2
  import { AccessAnalyzerServiceException as __BaseException } from "./AccessAnalyzerServiceException";
3
3
  /**
4
- * <p>Contains information about actions that define permissions to check against a
5
- * policy.</p>
4
+ * <p>Contains information about actions and resources that define permissions to check
5
+ * against a policy.</p>
6
6
  * @public
7
7
  */
8
8
  export interface Access {
@@ -11,7 +11,13 @@ export interface Access {
11
11
  * in an IAM policy can be used in the list of actions to check.</p>
12
12
  * @public
13
13
  */
14
- actions: string[] | undefined;
14
+ actions?: string[];
15
+ /**
16
+ * <p>A list of resources for the access permissions. Any strings that can be used as a
17
+ * resource in an IAM policy can be used in the list of resources to check.</p>
18
+ * @public
19
+ */
20
+ resources?: string[];
15
21
  }
16
22
  /**
17
23
  * <p>You do not have sufficient access to perform this action.</p>
@@ -206,6 +212,7 @@ export interface ValidationExceptionField {
206
212
  export declare const ValidationExceptionReason: {
207
213
  readonly CANNOT_PARSE: "cannotParse";
208
214
  readonly FIELD_VALIDATION_FAILED: "fieldValidationFailed";
215
+ readonly NOT_SUPPORTED: "notSupported";
209
216
  readonly OTHER: "other";
210
217
  readonly UNKNOWN_OPERATION: "unknownOperation";
211
218
  };
@@ -720,7 +727,11 @@ export interface CheckAccessNotGrantedRequest {
720
727
  policyDocument: string | undefined;
721
728
  /**
722
729
  * <p>An access object containing the permissions that shouldn't be granted by the specified
723
- * policy.</p>
730
+ * policy. If only actions are specified, IAM Access Analyzer checks for access of the actions on
731
+ * all resources in the policy. If only resources are specified, then IAM Access Analyzer checks
732
+ * which actions have access to the specified resources. If both actions and resources are
733
+ * specified, then IAM Access Analyzer checks which of the specified actions have access to the
734
+ * specified resources.</p>
724
735
  * @public
725
736
  */
726
737
  access: Access[] | undefined;
@@ -876,6 +887,90 @@ export interface CheckNoNewAccessResponse {
876
887
  */
877
888
  reasons?: ReasonSummary[];
878
889
  }
890
+ /**
891
+ * @public
892
+ * @enum
893
+ */
894
+ export declare const AccessCheckResourceType: {
895
+ readonly DYNAMODB_STREAM: "AWS::DynamoDB::Stream";
896
+ readonly DYNAMODB_TABLE: "AWS::DynamoDB::Table";
897
+ readonly EFS_FILESYSTEM: "AWS::EFS::FileSystem";
898
+ readonly KINESIS_DATA_STREAM: "AWS::Kinesis::Stream";
899
+ readonly KINESIS_STREAM_CONSUMER: "AWS::Kinesis::StreamConsumer";
900
+ readonly KMS_KEY: "AWS::KMS::Key";
901
+ readonly LAMBDA_FUNCTION: "AWS::Lambda::Function";
902
+ readonly OPENSEARCHSERVICE_DOMAIN: "AWS::OpenSearchService::Domain";
903
+ readonly ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument";
904
+ readonly S3EXPRESS_DIRECTORYBUCKET: "AWS::S3Express::DirectoryBucket";
905
+ readonly S3_ACCESS_POINT: "AWS::S3::AccessPoint";
906
+ readonly S3_BUCKET: "AWS::S3::Bucket";
907
+ readonly S3_GLACIER: "AWS::S3::Glacier";
908
+ readonly S3_OUTPOSTS_ACCESS_POINT: "AWS::S3Outposts::AccessPoint";
909
+ readonly S3_OUTPOSTS_BUCKET: "AWS::S3Outposts::Bucket";
910
+ readonly SECRETSMANAGER_SECRET: "AWS::SecretsManager::Secret";
911
+ readonly SNS_TOPIC: "AWS::SNS::Topic";
912
+ readonly SQS_QUEUE: "AWS::SQS::Queue";
913
+ };
914
+ /**
915
+ * @public
916
+ */
917
+ export type AccessCheckResourceType = (typeof AccessCheckResourceType)[keyof typeof AccessCheckResourceType];
918
+ /**
919
+ * @public
920
+ */
921
+ export interface CheckNoPublicAccessRequest {
922
+ /**
923
+ * <p>The JSON policy document to evaluate for public access.</p>
924
+ * @public
925
+ */
926
+ policyDocument: string | undefined;
927
+ /**
928
+ * <p>The type of resource to evaluate for public access. For example, to check for public
929
+ * access to Amazon S3 buckets, you can choose <code>AWS::S3::Bucket</code> for the resource
930
+ * type.</p>
931
+ * <p>For resource types not supported as valid values, IAM Access Analyzer will return an
932
+ * error.</p>
933
+ * @public
934
+ */
935
+ resourceType: AccessCheckResourceType | undefined;
936
+ }
937
+ /**
938
+ * @public
939
+ * @enum
940
+ */
941
+ export declare const CheckNoPublicAccessResult: {
942
+ readonly FAIL: "FAIL";
943
+ readonly PASS: "PASS";
944
+ };
945
+ /**
946
+ * @public
947
+ */
948
+ export type CheckNoPublicAccessResult = (typeof CheckNoPublicAccessResult)[keyof typeof CheckNoPublicAccessResult];
949
+ /**
950
+ * @public
951
+ */
952
+ export interface CheckNoPublicAccessResponse {
953
+ /**
954
+ * <p>The result of the check for public access to the specified resource type. If the result
955
+ * is <code>PASS</code>, the policy doesn't allow public access to the specified resource
956
+ * type. If the result is <code>FAIL</code>, the policy might allow public access to the
957
+ * specified resource type.</p>
958
+ * @public
959
+ */
960
+ result?: CheckNoPublicAccessResult;
961
+ /**
962
+ * <p>The message indicating whether the specified policy allows public access to
963
+ * resources.</p>
964
+ * @public
965
+ */
966
+ message?: string;
967
+ /**
968
+ * <p>A list of reasons why the specified resource policy grants public access for the
969
+ * resource type.</p>
970
+ * @public
971
+ */
972
+ reasons?: ReasonSummary[];
973
+ }
879
974
  /**
880
975
  * <p>The proposed access control configuration for a DynamoDB stream. You can propose a
881
976
  * configuration for a new DynamoDB stream or an existing DynamoDB stream that you own by specifying
@@ -2075,6 +2170,22 @@ export interface CreateAccessPreviewResponse {
2075
2170
  */
2076
2171
  id: string | undefined;
2077
2172
  }
2173
+ /**
2174
+ * @public
2175
+ */
2176
+ export interface GenerateFindingRecommendationRequest {
2177
+ /**
2178
+ * <p>The <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources">ARN of
2179
+ * the analyzer</a> used to generate the finding recommendation.</p>
2180
+ * @public
2181
+ */
2182
+ analyzerArn: string | undefined;
2183
+ /**
2184
+ * <p>The unique ID for the finding recommendation.</p>
2185
+ * @public
2186
+ */
2187
+ id: string | undefined;
2188
+ }
2078
2189
  /**
2079
2190
  * @public
2080
2191
  */
@@ -2442,6 +2553,194 @@ export interface GetFindingResponse {
2442
2553
  */
2443
2554
  finding?: Finding;
2444
2555
  }
2556
+ /**
2557
+ * @public
2558
+ */
2559
+ export interface GetFindingRecommendationRequest {
2560
+ /**
2561
+ * <p>The <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources">ARN of
2562
+ * the analyzer</a> used to generate the finding recommendation.</p>
2563
+ * @public
2564
+ */
2565
+ analyzerArn: string | undefined;
2566
+ /**
2567
+ * <p>The unique ID for the finding recommendation.</p>
2568
+ * @public
2569
+ */
2570
+ id: string | undefined;
2571
+ /**
2572
+ * <p>The maximum number of results to return in the response.</p>
2573
+ * @public
2574
+ */
2575
+ maxResults?: number;
2576
+ /**
2577
+ * <p>A token used for pagination of results returned.</p>
2578
+ * @public
2579
+ */
2580
+ nextToken?: string;
2581
+ }
2582
+ /**
2583
+ * <p>Contains information about the reason that the retrieval of a recommendation for a
2584
+ * finding failed.</p>
2585
+ * @public
2586
+ */
2587
+ export interface RecommendationError {
2588
+ /**
2589
+ * <p>The error code for a failed retrieval of a recommendation for a finding.</p>
2590
+ * @public
2591
+ */
2592
+ code: string | undefined;
2593
+ /**
2594
+ * <p>The error message for a failed retrieval of a recommendation for a finding.</p>
2595
+ * @public
2596
+ */
2597
+ message: string | undefined;
2598
+ }
2599
+ /**
2600
+ * @public
2601
+ * @enum
2602
+ */
2603
+ export declare const RecommendationType: {
2604
+ readonly UNUSED_PERMISSION_RECOMMENDATION: "UnusedPermissionRecommendation";
2605
+ };
2606
+ /**
2607
+ * @public
2608
+ */
2609
+ export type RecommendationType = (typeof RecommendationType)[keyof typeof RecommendationType];
2610
+ /**
2611
+ * @public
2612
+ * @enum
2613
+ */
2614
+ export declare const RecommendedRemediationAction: {
2615
+ readonly CREATE_POLICY: "CREATE_POLICY";
2616
+ readonly DETACH_POLICY: "DETACH_POLICY";
2617
+ };
2618
+ /**
2619
+ * @public
2620
+ */
2621
+ export type RecommendedRemediationAction = (typeof RecommendedRemediationAction)[keyof typeof RecommendedRemediationAction];
2622
+ /**
2623
+ * <p>Contains information about the action to take for a policy in an unused permissions
2624
+ * finding.</p>
2625
+ * @public
2626
+ */
2627
+ export interface UnusedPermissionsRecommendedStep {
2628
+ /**
2629
+ * <p>The time at which the existing policy for the unused permissions finding was last
2630
+ * updated.</p>
2631
+ * @public
2632
+ */
2633
+ policyUpdatedAt?: Date;
2634
+ /**
2635
+ * <p>A recommendation of whether to create or detach a policy for an unused permissions
2636
+ * finding.</p>
2637
+ * @public
2638
+ */
2639
+ recommendedAction: RecommendedRemediationAction | undefined;
2640
+ /**
2641
+ * <p>If the recommended action for the unused permissions finding is to replace the existing
2642
+ * policy, the contents of the recommended policy to replace the policy specified in the
2643
+ * <code>existingPolicyId</code> field.</p>
2644
+ * @public
2645
+ */
2646
+ recommendedPolicy?: string;
2647
+ /**
2648
+ * <p>If the recommended action for the unused permissions finding is to detach a policy, the
2649
+ * ID of an existing policy to be detached.</p>
2650
+ * @public
2651
+ */
2652
+ existingPolicyId?: string;
2653
+ }
2654
+ /**
2655
+ * <p>Contains information about a recommended step for an unused access analyzer
2656
+ * finding.</p>
2657
+ * @public
2658
+ */
2659
+ export type RecommendedStep = RecommendedStep.UnusedPermissionsRecommendedStepMember | RecommendedStep.$UnknownMember;
2660
+ /**
2661
+ * @public
2662
+ */
2663
+ export declare namespace RecommendedStep {
2664
+ /**
2665
+ * <p>A recommended step for an unused permissions finding.</p>
2666
+ * @public
2667
+ */
2668
+ interface UnusedPermissionsRecommendedStepMember {
2669
+ unusedPermissionsRecommendedStep: UnusedPermissionsRecommendedStep;
2670
+ $unknown?: never;
2671
+ }
2672
+ /**
2673
+ * @public
2674
+ */
2675
+ interface $UnknownMember {
2676
+ unusedPermissionsRecommendedStep?: never;
2677
+ $unknown: [string, any];
2678
+ }
2679
+ interface Visitor<T> {
2680
+ unusedPermissionsRecommendedStep: (value: UnusedPermissionsRecommendedStep) => T;
2681
+ _: (name: string, value: any) => T;
2682
+ }
2683
+ const visit: <T>(value: RecommendedStep, visitor: Visitor<T>) => T;
2684
+ }
2685
+ /**
2686
+ * @public
2687
+ * @enum
2688
+ */
2689
+ export declare const Status: {
2690
+ readonly FAILED: "FAILED";
2691
+ readonly IN_PROGRESS: "IN_PROGRESS";
2692
+ readonly SUCCEEDED: "SUCCEEDED";
2693
+ };
2694
+ /**
2695
+ * @public
2696
+ */
2697
+ export type Status = (typeof Status)[keyof typeof Status];
2698
+ /**
2699
+ * @public
2700
+ */
2701
+ export interface GetFindingRecommendationResponse {
2702
+ /**
2703
+ * <p>The time at which the retrieval of the finding recommendation was started.</p>
2704
+ * @public
2705
+ */
2706
+ startedAt: Date | undefined;
2707
+ /**
2708
+ * <p>The time at which the retrieval of the finding recommendation was completed.</p>
2709
+ * @public
2710
+ */
2711
+ completedAt?: Date;
2712
+ /**
2713
+ * <p>A token used for pagination of results returned.</p>
2714
+ * @public
2715
+ */
2716
+ nextToken?: string;
2717
+ /**
2718
+ * <p>Detailed information about the reason that the retrieval of a recommendation for the
2719
+ * finding failed.</p>
2720
+ * @public
2721
+ */
2722
+ error?: RecommendationError;
2723
+ /**
2724
+ * <p>The ARN of the resource of the finding.</p>
2725
+ * @public
2726
+ */
2727
+ resourceArn: string | undefined;
2728
+ /**
2729
+ * <p>A group of recommended steps for the finding.</p>
2730
+ * @public
2731
+ */
2732
+ recommendedSteps?: RecommendedStep[];
2733
+ /**
2734
+ * <p>The type of recommendation for the finding.</p>
2735
+ * @public
2736
+ */
2737
+ recommendationType: RecommendationType | undefined;
2738
+ /**
2739
+ * <p>The status of the retrieval of the finding recommendation.</p>
2740
+ * @public
2741
+ */
2742
+ status: Status | undefined;
2743
+ }
2445
2744
  /**
2446
2745
  * @public
2447
2746
  */
@@ -2587,7 +2886,7 @@ export interface UnusedPermissionDetails {
2587
2886
  */
2588
2887
  serviceNamespace: string | undefined;
2589
2888
  /**
2590
- * <p>The time at which the permission last accessed.</p>
2889
+ * <p>The time at which the permission was last accessed.</p>
2591
2890
  * @public
2592
2891
  */
2593
2892
  lastAccessed?: Date;
@@ -4202,3 +4501,7 @@ export declare const CheckAccessNotGrantedRequestFilterSensitiveLog: (obj: Check
4202
4501
  * @internal
4203
4502
  */
4204
4503
  export declare const CheckNoNewAccessRequestFilterSensitiveLog: (obj: CheckNoNewAccessRequest) => any;
4504
+ /**
4505
+ * @internal
4506
+ */
4507
+ export declare const CheckNoPublicAccessRequestFilterSensitiveLog: (obj: CheckNoPublicAccessRequest) => any;
@@ -0,0 +1,7 @@
1
+ import { Paginator } from "@smithy/types";
2
+ import { GetFindingRecommendationCommandInput, GetFindingRecommendationCommandOutput } from "../commands/GetFindingRecommendationCommand";
3
+ import { AccessAnalyzerPaginationConfiguration } from "./Interfaces";
4
+ /**
5
+ * @public
6
+ */
7
+ export declare const paginateGetFindingRecommendation: (config: AccessAnalyzerPaginationConfiguration, input: GetFindingRecommendationCommandInput, ...rest: any[]) => Paginator<GetFindingRecommendationCommandOutput>;
@@ -1,3 +1,4 @@
1
+ export * from "./GetFindingRecommendationPaginator";
1
2
  export * from "./GetFindingV2Paginator";
2
3
  export * from "./Interfaces";
3
4
  export * from "./ListAccessPreviewFindingsPaginator";
@@ -4,16 +4,19 @@ import { ApplyArchiveRuleCommandInput, ApplyArchiveRuleCommandOutput } from "../
4
4
  import { CancelPolicyGenerationCommandInput, CancelPolicyGenerationCommandOutput } from "../commands/CancelPolicyGenerationCommand";
5
5
  import { CheckAccessNotGrantedCommandInput, CheckAccessNotGrantedCommandOutput } from "../commands/CheckAccessNotGrantedCommand";
6
6
  import { CheckNoNewAccessCommandInput, CheckNoNewAccessCommandOutput } from "../commands/CheckNoNewAccessCommand";
7
+ import { CheckNoPublicAccessCommandInput, CheckNoPublicAccessCommandOutput } from "../commands/CheckNoPublicAccessCommand";
7
8
  import { CreateAccessPreviewCommandInput, CreateAccessPreviewCommandOutput } from "../commands/CreateAccessPreviewCommand";
8
9
  import { CreateAnalyzerCommandInput, CreateAnalyzerCommandOutput } from "../commands/CreateAnalyzerCommand";
9
10
  import { CreateArchiveRuleCommandInput, CreateArchiveRuleCommandOutput } from "../commands/CreateArchiveRuleCommand";
10
11
  import { DeleteAnalyzerCommandInput, DeleteAnalyzerCommandOutput } from "../commands/DeleteAnalyzerCommand";
11
12
  import { DeleteArchiveRuleCommandInput, DeleteArchiveRuleCommandOutput } from "../commands/DeleteArchiveRuleCommand";
13
+ import { GenerateFindingRecommendationCommandInput, GenerateFindingRecommendationCommandOutput } from "../commands/GenerateFindingRecommendationCommand";
12
14
  import { GetAccessPreviewCommandInput, GetAccessPreviewCommandOutput } from "../commands/GetAccessPreviewCommand";
13
15
  import { GetAnalyzedResourceCommandInput, GetAnalyzedResourceCommandOutput } from "../commands/GetAnalyzedResourceCommand";
14
16
  import { GetAnalyzerCommandInput, GetAnalyzerCommandOutput } from "../commands/GetAnalyzerCommand";
15
17
  import { GetArchiveRuleCommandInput, GetArchiveRuleCommandOutput } from "../commands/GetArchiveRuleCommand";
16
18
  import { GetFindingCommandInput, GetFindingCommandOutput } from "../commands/GetFindingCommand";
19
+ import { GetFindingRecommendationCommandInput, GetFindingRecommendationCommandOutput } from "../commands/GetFindingRecommendationCommand";
17
20
  import { GetFindingV2CommandInput, GetFindingV2CommandOutput } from "../commands/GetFindingV2Command";
18
21
  import { GetGeneratedPolicyCommandInput, GetGeneratedPolicyCommandOutput } from "../commands/GetGeneratedPolicyCommand";
19
22
  import { ListAccessPreviewFindingsCommandInput, ListAccessPreviewFindingsCommandOutput } from "../commands/ListAccessPreviewFindingsCommand";
@@ -48,6 +51,10 @@ export declare const se_CheckAccessNotGrantedCommand: (input: CheckAccessNotGran
48
51
  * serializeAws_restJson1CheckNoNewAccessCommand
49
52
  */
50
53
  export declare const se_CheckNoNewAccessCommand: (input: CheckNoNewAccessCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
54
+ /**
55
+ * serializeAws_restJson1CheckNoPublicAccessCommand
56
+ */
57
+ export declare const se_CheckNoPublicAccessCommand: (input: CheckNoPublicAccessCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
51
58
  /**
52
59
  * serializeAws_restJson1CreateAccessPreviewCommand
53
60
  */
@@ -68,6 +75,10 @@ export declare const se_DeleteAnalyzerCommand: (input: DeleteAnalyzerCommandInpu
68
75
  * serializeAws_restJson1DeleteArchiveRuleCommand
69
76
  */
70
77
  export declare const se_DeleteArchiveRuleCommand: (input: DeleteArchiveRuleCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
78
+ /**
79
+ * serializeAws_restJson1GenerateFindingRecommendationCommand
80
+ */
81
+ export declare const se_GenerateFindingRecommendationCommand: (input: GenerateFindingRecommendationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
71
82
  /**
72
83
  * serializeAws_restJson1GetAccessPreviewCommand
73
84
  */
@@ -88,6 +99,10 @@ export declare const se_GetArchiveRuleCommand: (input: GetArchiveRuleCommandInpu
88
99
  * serializeAws_restJson1GetFindingCommand
89
100
  */
90
101
  export declare const se_GetFindingCommand: (input: GetFindingCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
102
+ /**
103
+ * serializeAws_restJson1GetFindingRecommendationCommand
104
+ */
105
+ export declare const se_GetFindingRecommendationCommand: (input: GetFindingRecommendationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
91
106
  /**
92
107
  * serializeAws_restJson1GetFindingV2Command
93
108
  */
@@ -176,6 +191,10 @@ export declare const de_CheckAccessNotGrantedCommand: (output: __HttpResponse, c
176
191
  * deserializeAws_restJson1CheckNoNewAccessCommand
177
192
  */
178
193
  export declare const de_CheckNoNewAccessCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<CheckNoNewAccessCommandOutput>;
194
+ /**
195
+ * deserializeAws_restJson1CheckNoPublicAccessCommand
196
+ */
197
+ export declare const de_CheckNoPublicAccessCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<CheckNoPublicAccessCommandOutput>;
179
198
  /**
180
199
  * deserializeAws_restJson1CreateAccessPreviewCommand
181
200
  */
@@ -196,6 +215,10 @@ export declare const de_DeleteAnalyzerCommand: (output: __HttpResponse, context:
196
215
  * deserializeAws_restJson1DeleteArchiveRuleCommand
197
216
  */
198
217
  export declare const de_DeleteArchiveRuleCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteArchiveRuleCommandOutput>;
218
+ /**
219
+ * deserializeAws_restJson1GenerateFindingRecommendationCommand
220
+ */
221
+ export declare const de_GenerateFindingRecommendationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GenerateFindingRecommendationCommandOutput>;
199
222
  /**
200
223
  * deserializeAws_restJson1GetAccessPreviewCommand
201
224
  */
@@ -216,6 +239,10 @@ export declare const de_GetArchiveRuleCommand: (output: __HttpResponse, context:
216
239
  * deserializeAws_restJson1GetFindingCommand
217
240
  */
218
241
  export declare const de_GetFindingCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetFindingCommandOutput>;
242
+ /**
243
+ * deserializeAws_restJson1GetFindingRecommendationCommand
244
+ */
245
+ export declare const de_GetFindingRecommendationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetFindingRecommendationCommandOutput>;
219
246
  /**
220
247
  * deserializeAws_restJson1GetFindingV2Command
221
248
  */
@@ -16,6 +16,10 @@ import {
16
16
  CheckNoNewAccessCommandInput,
17
17
  CheckNoNewAccessCommandOutput,
18
18
  } from "./commands/CheckNoNewAccessCommand";
19
+ import {
20
+ CheckNoPublicAccessCommandInput,
21
+ CheckNoPublicAccessCommandOutput,
22
+ } from "./commands/CheckNoPublicAccessCommand";
19
23
  import {
20
24
  CreateAccessPreviewCommandInput,
21
25
  CreateAccessPreviewCommandOutput,
@@ -36,6 +40,10 @@ import {
36
40
  DeleteArchiveRuleCommandInput,
37
41
  DeleteArchiveRuleCommandOutput,
38
42
  } from "./commands/DeleteArchiveRuleCommand";
43
+ import {
44
+ GenerateFindingRecommendationCommandInput,
45
+ GenerateFindingRecommendationCommandOutput,
46
+ } from "./commands/GenerateFindingRecommendationCommand";
39
47
  import {
40
48
  GetAccessPreviewCommandInput,
41
49
  GetAccessPreviewCommandOutput,
@@ -56,6 +64,10 @@ import {
56
64
  GetFindingCommandInput,
57
65
  GetFindingCommandOutput,
58
66
  } from "./commands/GetFindingCommand";
67
+ import {
68
+ GetFindingRecommendationCommandInput,
69
+ GetFindingRecommendationCommandOutput,
70
+ } from "./commands/GetFindingRecommendationCommand";
59
71
  import {
60
72
  GetFindingV2CommandInput,
61
73
  GetFindingV2CommandOutput,
@@ -181,6 +193,19 @@ export interface AccessAnalyzer {
181
193
  options: __HttpHandlerOptions,
182
194
  cb: (err: any, data?: CheckNoNewAccessCommandOutput) => void
183
195
  ): void;
196
+ checkNoPublicAccess(
197
+ args: CheckNoPublicAccessCommandInput,
198
+ options?: __HttpHandlerOptions
199
+ ): Promise<CheckNoPublicAccessCommandOutput>;
200
+ checkNoPublicAccess(
201
+ args: CheckNoPublicAccessCommandInput,
202
+ cb: (err: any, data?: CheckNoPublicAccessCommandOutput) => void
203
+ ): void;
204
+ checkNoPublicAccess(
205
+ args: CheckNoPublicAccessCommandInput,
206
+ options: __HttpHandlerOptions,
207
+ cb: (err: any, data?: CheckNoPublicAccessCommandOutput) => void
208
+ ): void;
184
209
  createAccessPreview(
185
210
  args: CreateAccessPreviewCommandInput,
186
211
  options?: __HttpHandlerOptions
@@ -246,6 +271,19 @@ export interface AccessAnalyzer {
246
271
  options: __HttpHandlerOptions,
247
272
  cb: (err: any, data?: DeleteArchiveRuleCommandOutput) => void
248
273
  ): void;
274
+ generateFindingRecommendation(
275
+ args: GenerateFindingRecommendationCommandInput,
276
+ options?: __HttpHandlerOptions
277
+ ): Promise<GenerateFindingRecommendationCommandOutput>;
278
+ generateFindingRecommendation(
279
+ args: GenerateFindingRecommendationCommandInput,
280
+ cb: (err: any, data?: GenerateFindingRecommendationCommandOutput) => void
281
+ ): void;
282
+ generateFindingRecommendation(
283
+ args: GenerateFindingRecommendationCommandInput,
284
+ options: __HttpHandlerOptions,
285
+ cb: (err: any, data?: GenerateFindingRecommendationCommandOutput) => void
286
+ ): void;
249
287
  getAccessPreview(
250
288
  args: GetAccessPreviewCommandInput,
251
289
  options?: __HttpHandlerOptions
@@ -311,6 +349,19 @@ export interface AccessAnalyzer {
311
349
  options: __HttpHandlerOptions,
312
350
  cb: (err: any, data?: GetFindingCommandOutput) => void
313
351
  ): void;
352
+ getFindingRecommendation(
353
+ args: GetFindingRecommendationCommandInput,
354
+ options?: __HttpHandlerOptions
355
+ ): Promise<GetFindingRecommendationCommandOutput>;
356
+ getFindingRecommendation(
357
+ args: GetFindingRecommendationCommandInput,
358
+ cb: (err: any, data?: GetFindingRecommendationCommandOutput) => void
359
+ ): void;
360
+ getFindingRecommendation(
361
+ args: GetFindingRecommendationCommandInput,
362
+ options: __HttpHandlerOptions,
363
+ cb: (err: any, data?: GetFindingRecommendationCommandOutput) => void
364
+ ): void;
314
365
  getFindingV2(
315
366
  args: GetFindingV2CommandInput,
316
367
  options?: __HttpHandlerOptions
@@ -61,6 +61,10 @@ import {
61
61
  CheckNoNewAccessCommandInput,
62
62
  CheckNoNewAccessCommandOutput,
63
63
  } from "./commands/CheckNoNewAccessCommand";
64
+ import {
65
+ CheckNoPublicAccessCommandInput,
66
+ CheckNoPublicAccessCommandOutput,
67
+ } from "./commands/CheckNoPublicAccessCommand";
64
68
  import {
65
69
  CreateAccessPreviewCommandInput,
66
70
  CreateAccessPreviewCommandOutput,
@@ -81,6 +85,10 @@ import {
81
85
  DeleteArchiveRuleCommandInput,
82
86
  DeleteArchiveRuleCommandOutput,
83
87
  } from "./commands/DeleteArchiveRuleCommand";
88
+ import {
89
+ GenerateFindingRecommendationCommandInput,
90
+ GenerateFindingRecommendationCommandOutput,
91
+ } from "./commands/GenerateFindingRecommendationCommand";
84
92
  import {
85
93
  GetAccessPreviewCommandInput,
86
94
  GetAccessPreviewCommandOutput,
@@ -101,6 +109,10 @@ import {
101
109
  GetFindingCommandInput,
102
110
  GetFindingCommandOutput,
103
111
  } from "./commands/GetFindingCommand";
112
+ import {
113
+ GetFindingRecommendationCommandInput,
114
+ GetFindingRecommendationCommandOutput,
115
+ } from "./commands/GetFindingRecommendationCommand";
104
116
  import {
105
117
  GetFindingV2CommandInput,
106
118
  GetFindingV2CommandOutput,
@@ -185,16 +197,19 @@ export type ServiceInputTypes =
185
197
  | CancelPolicyGenerationCommandInput
186
198
  | CheckAccessNotGrantedCommandInput
187
199
  | CheckNoNewAccessCommandInput
200
+ | CheckNoPublicAccessCommandInput
188
201
  | CreateAccessPreviewCommandInput
189
202
  | CreateAnalyzerCommandInput
190
203
  | CreateArchiveRuleCommandInput
191
204
  | DeleteAnalyzerCommandInput
192
205
  | DeleteArchiveRuleCommandInput
206
+ | GenerateFindingRecommendationCommandInput
193
207
  | GetAccessPreviewCommandInput
194
208
  | GetAnalyzedResourceCommandInput
195
209
  | GetAnalyzerCommandInput
196
210
  | GetArchiveRuleCommandInput
197
211
  | GetFindingCommandInput
212
+ | GetFindingRecommendationCommandInput
198
213
  | GetFindingV2CommandInput
199
214
  | GetGeneratedPolicyCommandInput
200
215
  | ListAccessPreviewFindingsCommandInput
@@ -218,16 +233,19 @@ export type ServiceOutputTypes =
218
233
  | CancelPolicyGenerationCommandOutput
219
234
  | CheckAccessNotGrantedCommandOutput
220
235
  | CheckNoNewAccessCommandOutput
236
+ | CheckNoPublicAccessCommandOutput
221
237
  | CreateAccessPreviewCommandOutput
222
238
  | CreateAnalyzerCommandOutput
223
239
  | CreateArchiveRuleCommandOutput
224
240
  | DeleteAnalyzerCommandOutput
225
241
  | DeleteArchiveRuleCommandOutput
242
+ | GenerateFindingRecommendationCommandOutput
226
243
  | GetAccessPreviewCommandOutput
227
244
  | GetAnalyzedResourceCommandOutput
228
245
  | GetAnalyzerCommandOutput
229
246
  | GetArchiveRuleCommandOutput
230
247
  | GetFindingCommandOutput
248
+ | GetFindingRecommendationCommandOutput
231
249
  | GetFindingV2CommandOutput
232
250
  | GetGeneratedPolicyCommandOutput
233
251
  | ListAccessPreviewFindingsCommandOutput
@@ -0,0 +1,40 @@
1
+ import { Command as $Command } from "@smithy/smithy-client";
2
+ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
+ import {
4
+ AccessAnalyzerClientResolvedConfig,
5
+ ServiceInputTypes,
6
+ ServiceOutputTypes,
7
+ } from "../AccessAnalyzerClient";
8
+ import {
9
+ CheckNoPublicAccessRequest,
10
+ CheckNoPublicAccessResponse,
11
+ } from "../models/models_0";
12
+ export { __MetadataBearer };
13
+ export { $Command };
14
+ export interface CheckNoPublicAccessCommandInput
15
+ extends CheckNoPublicAccessRequest {}
16
+ export interface CheckNoPublicAccessCommandOutput
17
+ extends CheckNoPublicAccessResponse,
18
+ __MetadataBearer {}
19
+ declare const CheckNoPublicAccessCommand_base: {
20
+ new (
21
+ input: CheckNoPublicAccessCommandInput
22
+ ): import("@smithy/smithy-client").CommandImpl<
23
+ CheckNoPublicAccessCommandInput,
24
+ CheckNoPublicAccessCommandOutput,
25
+ AccessAnalyzerClientResolvedConfig,
26
+ ServiceInputTypes,
27
+ ServiceOutputTypes
28
+ >;
29
+ new (
30
+ __0_0: CheckNoPublicAccessCommandInput
31
+ ): import("@smithy/smithy-client").CommandImpl<
32
+ CheckNoPublicAccessCommandInput,
33
+ CheckNoPublicAccessCommandOutput,
34
+ AccessAnalyzerClientResolvedConfig,
35
+ ServiceInputTypes,
36
+ ServiceOutputTypes
37
+ >;
38
+ getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
39
+ };
40
+ export declare class CheckNoPublicAccessCommand extends CheckNoPublicAccessCommand_base {}