@aws-sdk/client-accessanalyzer 3.592.0 → 3.595.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/README.md +24 -0
  2. package/dist-cjs/index.js +241 -1
  3. package/dist-es/AccessAnalyzer.js +6 -0
  4. package/dist-es/commands/CheckNoPublicAccessCommand.js +25 -0
  5. package/dist-es/commands/GenerateFindingRecommendationCommand.js +24 -0
  6. package/dist-es/commands/GetFindingRecommendationCommand.js +24 -0
  7. package/dist-es/commands/index.js +3 -0
  8. package/dist-es/models/models_0.js +49 -0
  9. package/dist-es/pagination/GetFindingRecommendationPaginator.js +4 -0
  10. package/dist-es/pagination/index.js +1 -0
  11. package/dist-es/protocols/Aws_restJson1.js +111 -0
  12. package/dist-types/AccessAnalyzer.d.ts +21 -0
  13. package/dist-types/AccessAnalyzerClient.d.ts +5 -2
  14. package/dist-types/commands/CheckAccessNotGrantedCommand.d.ts +4 -1
  15. package/dist-types/commands/CheckNoPublicAccessCommand.d.ts +88 -0
  16. package/dist-types/commands/GenerateFindingRecommendationCommand.d.ts +71 -0
  17. package/dist-types/commands/GetFindingRecommendationCommand.d.ts +97 -0
  18. package/dist-types/commands/index.d.ts +3 -0
  19. package/dist-types/models/models_0.d.ts +308 -5
  20. package/dist-types/pagination/GetFindingRecommendationPaginator.d.ts +7 -0
  21. package/dist-types/pagination/index.d.ts +1 -0
  22. package/dist-types/protocols/Aws_restJson1.d.ts +27 -0
  23. package/dist-types/ts3.4/AccessAnalyzer.d.ts +51 -0
  24. package/dist-types/ts3.4/AccessAnalyzerClient.d.ts +18 -0
  25. package/dist-types/ts3.4/commands/CheckNoPublicAccessCommand.d.ts +40 -0
  26. package/dist-types/ts3.4/commands/GenerateFindingRecommendationCommand.d.ts +36 -0
  27. package/dist-types/ts3.4/commands/GetFindingRecommendationCommand.d.ts +40 -0
  28. package/dist-types/ts3.4/commands/index.d.ts +3 -0
  29. package/dist-types/ts3.4/models/models_0.d.ts +110 -1
  30. package/dist-types/ts3.4/pagination/GetFindingRecommendationPaginator.d.ts +11 -0
  31. package/dist-types/ts3.4/pagination/index.d.ts +1 -0
  32. package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +36 -0
  33. package/package.json +1 -1
@@ -0,0 +1,36 @@
1
+ import { Command as $Command } from "@smithy/smithy-client";
2
+ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
+ import {
4
+ AccessAnalyzerClientResolvedConfig,
5
+ ServiceInputTypes,
6
+ ServiceOutputTypes,
7
+ } from "../AccessAnalyzerClient";
8
+ import { GenerateFindingRecommendationRequest } from "../models/models_0";
9
+ export { __MetadataBearer };
10
+ export { $Command };
11
+ export interface GenerateFindingRecommendationCommandInput
12
+ extends GenerateFindingRecommendationRequest {}
13
+ export interface GenerateFindingRecommendationCommandOutput
14
+ extends __MetadataBearer {}
15
+ declare const GenerateFindingRecommendationCommand_base: {
16
+ new (
17
+ input: GenerateFindingRecommendationCommandInput
18
+ ): import("@smithy/smithy-client").CommandImpl<
19
+ GenerateFindingRecommendationCommandInput,
20
+ GenerateFindingRecommendationCommandOutput,
21
+ AccessAnalyzerClientResolvedConfig,
22
+ ServiceInputTypes,
23
+ ServiceOutputTypes
24
+ >;
25
+ new (
26
+ __0_0: GenerateFindingRecommendationCommandInput
27
+ ): import("@smithy/smithy-client").CommandImpl<
28
+ GenerateFindingRecommendationCommandInput,
29
+ GenerateFindingRecommendationCommandOutput,
30
+ AccessAnalyzerClientResolvedConfig,
31
+ ServiceInputTypes,
32
+ ServiceOutputTypes
33
+ >;
34
+ getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
35
+ };
36
+ export declare class GenerateFindingRecommendationCommand extends GenerateFindingRecommendationCommand_base {}
@@ -0,0 +1,40 @@
1
+ import { Command as $Command } from "@smithy/smithy-client";
2
+ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
+ import {
4
+ AccessAnalyzerClientResolvedConfig,
5
+ ServiceInputTypes,
6
+ ServiceOutputTypes,
7
+ } from "../AccessAnalyzerClient";
8
+ import {
9
+ GetFindingRecommendationRequest,
10
+ GetFindingRecommendationResponse,
11
+ } from "../models/models_0";
12
+ export { __MetadataBearer };
13
+ export { $Command };
14
+ export interface GetFindingRecommendationCommandInput
15
+ extends GetFindingRecommendationRequest {}
16
+ export interface GetFindingRecommendationCommandOutput
17
+ extends GetFindingRecommendationResponse,
18
+ __MetadataBearer {}
19
+ declare const GetFindingRecommendationCommand_base: {
20
+ new (
21
+ input: GetFindingRecommendationCommandInput
22
+ ): import("@smithy/smithy-client").CommandImpl<
23
+ GetFindingRecommendationCommandInput,
24
+ GetFindingRecommendationCommandOutput,
25
+ AccessAnalyzerClientResolvedConfig,
26
+ ServiceInputTypes,
27
+ ServiceOutputTypes
28
+ >;
29
+ new (
30
+ __0_0: GetFindingRecommendationCommandInput
31
+ ): import("@smithy/smithy-client").CommandImpl<
32
+ GetFindingRecommendationCommandInput,
33
+ GetFindingRecommendationCommandOutput,
34
+ AccessAnalyzerClientResolvedConfig,
35
+ ServiceInputTypes,
36
+ ServiceOutputTypes
37
+ >;
38
+ getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
39
+ };
40
+ export declare class GetFindingRecommendationCommand extends GetFindingRecommendationCommand_base {}
@@ -2,16 +2,19 @@ export * from "./ApplyArchiveRuleCommand";
2
2
  export * from "./CancelPolicyGenerationCommand";
3
3
  export * from "./CheckAccessNotGrantedCommand";
4
4
  export * from "./CheckNoNewAccessCommand";
5
+ export * from "./CheckNoPublicAccessCommand";
5
6
  export * from "./CreateAccessPreviewCommand";
6
7
  export * from "./CreateAnalyzerCommand";
7
8
  export * from "./CreateArchiveRuleCommand";
8
9
  export * from "./DeleteAnalyzerCommand";
9
10
  export * from "./DeleteArchiveRuleCommand";
11
+ export * from "./GenerateFindingRecommendationCommand";
10
12
  export * from "./GetAccessPreviewCommand";
11
13
  export * from "./GetAnalyzedResourceCommand";
12
14
  export * from "./GetAnalyzerCommand";
13
15
  export * from "./GetArchiveRuleCommand";
14
16
  export * from "./GetFindingCommand";
17
+ export * from "./GetFindingRecommendationCommand";
15
18
  export * from "./GetFindingV2Command";
16
19
  export * from "./GetGeneratedPolicyCommand";
17
20
  export * from "./ListAccessPreviewFindingsCommand";
@@ -1,7 +1,8 @@
1
1
  import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
2
2
  import { AccessAnalyzerServiceException as __BaseException } from "./AccessAnalyzerServiceException";
3
3
  export interface Access {
4
- actions: string[] | undefined;
4
+ actions?: string[];
5
+ resources?: string[];
5
6
  }
6
7
  export declare class AccessDeniedException extends __BaseException {
7
8
  readonly name: "AccessDeniedException";
@@ -74,6 +75,7 @@ export interface ValidationExceptionField {
74
75
  export declare const ValidationExceptionReason: {
75
76
  readonly CANNOT_PARSE: "cannotParse";
76
77
  readonly FIELD_VALIDATION_FAILED: "fieldValidationFailed";
78
+ readonly NOT_SUPPORTED: "notSupported";
77
79
  readonly OTHER: "other";
78
80
  readonly UNKNOWN_OPERATION: "unknownOperation";
79
81
  };
@@ -269,6 +271,43 @@ export interface CheckNoNewAccessResponse {
269
271
  message?: string;
270
272
  reasons?: ReasonSummary[];
271
273
  }
274
+ export declare const AccessCheckResourceType: {
275
+ readonly DYNAMODB_STREAM: "AWS::DynamoDB::Stream";
276
+ readonly DYNAMODB_TABLE: "AWS::DynamoDB::Table";
277
+ readonly EFS_FILESYSTEM: "AWS::EFS::FileSystem";
278
+ readonly KINESIS_DATA_STREAM: "AWS::Kinesis::Stream";
279
+ readonly KINESIS_STREAM_CONSUMER: "AWS::Kinesis::StreamConsumer";
280
+ readonly KMS_KEY: "AWS::KMS::Key";
281
+ readonly LAMBDA_FUNCTION: "AWS::Lambda::Function";
282
+ readonly OPENSEARCHSERVICE_DOMAIN: "AWS::OpenSearchService::Domain";
283
+ readonly ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument";
284
+ readonly S3EXPRESS_DIRECTORYBUCKET: "AWS::S3Express::DirectoryBucket";
285
+ readonly S3_ACCESS_POINT: "AWS::S3::AccessPoint";
286
+ readonly S3_BUCKET: "AWS::S3::Bucket";
287
+ readonly S3_GLACIER: "AWS::S3::Glacier";
288
+ readonly S3_OUTPOSTS_ACCESS_POINT: "AWS::S3Outposts::AccessPoint";
289
+ readonly S3_OUTPOSTS_BUCKET: "AWS::S3Outposts::Bucket";
290
+ readonly SECRETSMANAGER_SECRET: "AWS::SecretsManager::Secret";
291
+ readonly SNS_TOPIC: "AWS::SNS::Topic";
292
+ readonly SQS_QUEUE: "AWS::SQS::Queue";
293
+ };
294
+ export type AccessCheckResourceType =
295
+ (typeof AccessCheckResourceType)[keyof typeof AccessCheckResourceType];
296
+ export interface CheckNoPublicAccessRequest {
297
+ policyDocument: string | undefined;
298
+ resourceType: AccessCheckResourceType | undefined;
299
+ }
300
+ export declare const CheckNoPublicAccessResult: {
301
+ readonly FAIL: "FAIL";
302
+ readonly PASS: "PASS";
303
+ };
304
+ export type CheckNoPublicAccessResult =
305
+ (typeof CheckNoPublicAccessResult)[keyof typeof CheckNoPublicAccessResult];
306
+ export interface CheckNoPublicAccessResponse {
307
+ result?: CheckNoPublicAccessResult;
308
+ message?: string;
309
+ reasons?: ReasonSummary[];
310
+ }
272
311
  export interface DynamodbStreamConfiguration {
273
312
  streamPolicy?: string;
274
313
  }
@@ -771,6 +810,10 @@ export interface CreateAccessPreviewRequest {
771
810
  export interface CreateAccessPreviewResponse {
772
811
  id: string | undefined;
773
812
  }
813
+ export interface GenerateFindingRecommendationRequest {
814
+ analyzerArn: string | undefined;
815
+ id: string | undefined;
816
+ }
774
817
  export interface GetAccessPreviewRequest {
775
818
  accessPreviewId: string | undefined;
776
819
  analyzerArn: string | undefined;
@@ -876,6 +919,69 @@ export interface Finding {
876
919
  export interface GetFindingResponse {
877
920
  finding?: Finding;
878
921
  }
922
+ export interface GetFindingRecommendationRequest {
923
+ analyzerArn: string | undefined;
924
+ id: string | undefined;
925
+ maxResults?: number;
926
+ nextToken?: string;
927
+ }
928
+ export interface RecommendationError {
929
+ code: string | undefined;
930
+ message: string | undefined;
931
+ }
932
+ export declare const RecommendationType: {
933
+ readonly UNUSED_PERMISSION_RECOMMENDATION: "UnusedPermissionRecommendation";
934
+ };
935
+ export type RecommendationType =
936
+ (typeof RecommendationType)[keyof typeof RecommendationType];
937
+ export declare const RecommendedRemediationAction: {
938
+ readonly CREATE_POLICY: "CREATE_POLICY";
939
+ readonly DETACH_POLICY: "DETACH_POLICY";
940
+ };
941
+ export type RecommendedRemediationAction =
942
+ (typeof RecommendedRemediationAction)[keyof typeof RecommendedRemediationAction];
943
+ export interface UnusedPermissionsRecommendedStep {
944
+ policyUpdatedAt?: Date;
945
+ recommendedAction: RecommendedRemediationAction | undefined;
946
+ recommendedPolicy?: string;
947
+ existingPolicyId?: string;
948
+ }
949
+ export type RecommendedStep =
950
+ | RecommendedStep.UnusedPermissionsRecommendedStepMember
951
+ | RecommendedStep.$UnknownMember;
952
+ export declare namespace RecommendedStep {
953
+ interface UnusedPermissionsRecommendedStepMember {
954
+ unusedPermissionsRecommendedStep: UnusedPermissionsRecommendedStep;
955
+ $unknown?: never;
956
+ }
957
+ interface $UnknownMember {
958
+ unusedPermissionsRecommendedStep?: never;
959
+ $unknown: [string, any];
960
+ }
961
+ interface Visitor<T> {
962
+ unusedPermissionsRecommendedStep: (
963
+ value: UnusedPermissionsRecommendedStep
964
+ ) => T;
965
+ _: (name: string, value: any) => T;
966
+ }
967
+ const visit: <T>(value: RecommendedStep, visitor: Visitor<T>) => T;
968
+ }
969
+ export declare const Status: {
970
+ readonly FAILED: "FAILED";
971
+ readonly IN_PROGRESS: "IN_PROGRESS";
972
+ readonly SUCCEEDED: "SUCCEEDED";
973
+ };
974
+ export type Status = (typeof Status)[keyof typeof Status];
975
+ export interface GetFindingRecommendationResponse {
976
+ startedAt: Date | undefined;
977
+ completedAt?: Date;
978
+ nextToken?: string;
979
+ error?: RecommendationError;
980
+ resourceArn: string | undefined;
981
+ recommendedSteps?: RecommendedStep[];
982
+ recommendationType: RecommendationType | undefined;
983
+ status: Status | undefined;
984
+ }
879
985
  export interface GetFindingV2Request {
880
986
  analyzerArn: string | undefined;
881
987
  id: string | undefined;
@@ -1370,3 +1476,6 @@ export declare const CheckAccessNotGrantedRequestFilterSensitiveLog: (
1370
1476
  export declare const CheckNoNewAccessRequestFilterSensitiveLog: (
1371
1477
  obj: CheckNoNewAccessRequest
1372
1478
  ) => any;
1479
+ export declare const CheckNoPublicAccessRequestFilterSensitiveLog: (
1480
+ obj: CheckNoPublicAccessRequest
1481
+ ) => any;
@@ -0,0 +1,11 @@
1
+ import { Paginator } from "@smithy/types";
2
+ import {
3
+ GetFindingRecommendationCommandInput,
4
+ GetFindingRecommendationCommandOutput,
5
+ } from "../commands/GetFindingRecommendationCommand";
6
+ import { AccessAnalyzerPaginationConfiguration } from "./Interfaces";
7
+ export declare const paginateGetFindingRecommendation: (
8
+ config: AccessAnalyzerPaginationConfiguration,
9
+ input: GetFindingRecommendationCommandInput,
10
+ ...rest: any[]
11
+ ) => Paginator<GetFindingRecommendationCommandOutput>;
@@ -1,3 +1,4 @@
1
+ export * from "./GetFindingRecommendationPaginator";
1
2
  export * from "./GetFindingV2Paginator";
2
3
  export * from "./Interfaces";
3
4
  export * from "./ListAccessPreviewFindingsPaginator";
@@ -19,6 +19,10 @@ import {
19
19
  CheckNoNewAccessCommandInput,
20
20
  CheckNoNewAccessCommandOutput,
21
21
  } from "../commands/CheckNoNewAccessCommand";
22
+ import {
23
+ CheckNoPublicAccessCommandInput,
24
+ CheckNoPublicAccessCommandOutput,
25
+ } from "../commands/CheckNoPublicAccessCommand";
22
26
  import {
23
27
  CreateAccessPreviewCommandInput,
24
28
  CreateAccessPreviewCommandOutput,
@@ -39,6 +43,10 @@ import {
39
43
  DeleteArchiveRuleCommandInput,
40
44
  DeleteArchiveRuleCommandOutput,
41
45
  } from "../commands/DeleteArchiveRuleCommand";
46
+ import {
47
+ GenerateFindingRecommendationCommandInput,
48
+ GenerateFindingRecommendationCommandOutput,
49
+ } from "../commands/GenerateFindingRecommendationCommand";
42
50
  import {
43
51
  GetAccessPreviewCommandInput,
44
52
  GetAccessPreviewCommandOutput,
@@ -59,6 +67,10 @@ import {
59
67
  GetFindingCommandInput,
60
68
  GetFindingCommandOutput,
61
69
  } from "../commands/GetFindingCommand";
70
+ import {
71
+ GetFindingRecommendationCommandInput,
72
+ GetFindingRecommendationCommandOutput,
73
+ } from "../commands/GetFindingRecommendationCommand";
62
74
  import {
63
75
  GetFindingV2CommandInput,
64
76
  GetFindingV2CommandOutput,
@@ -147,6 +159,10 @@ export declare const se_CheckNoNewAccessCommand: (
147
159
  input: CheckNoNewAccessCommandInput,
148
160
  context: __SerdeContext
149
161
  ) => Promise<__HttpRequest>;
162
+ export declare const se_CheckNoPublicAccessCommand: (
163
+ input: CheckNoPublicAccessCommandInput,
164
+ context: __SerdeContext
165
+ ) => Promise<__HttpRequest>;
150
166
  export declare const se_CreateAccessPreviewCommand: (
151
167
  input: CreateAccessPreviewCommandInput,
152
168
  context: __SerdeContext
@@ -167,6 +183,10 @@ export declare const se_DeleteArchiveRuleCommand: (
167
183
  input: DeleteArchiveRuleCommandInput,
168
184
  context: __SerdeContext
169
185
  ) => Promise<__HttpRequest>;
186
+ export declare const se_GenerateFindingRecommendationCommand: (
187
+ input: GenerateFindingRecommendationCommandInput,
188
+ context: __SerdeContext
189
+ ) => Promise<__HttpRequest>;
170
190
  export declare const se_GetAccessPreviewCommand: (
171
191
  input: GetAccessPreviewCommandInput,
172
192
  context: __SerdeContext
@@ -187,6 +207,10 @@ export declare const se_GetFindingCommand: (
187
207
  input: GetFindingCommandInput,
188
208
  context: __SerdeContext
189
209
  ) => Promise<__HttpRequest>;
210
+ export declare const se_GetFindingRecommendationCommand: (
211
+ input: GetFindingRecommendationCommandInput,
212
+ context: __SerdeContext
213
+ ) => Promise<__HttpRequest>;
190
214
  export declare const se_GetFindingV2Command: (
191
215
  input: GetFindingV2CommandInput,
192
216
  context: __SerdeContext
@@ -275,6 +299,10 @@ export declare const de_CheckNoNewAccessCommand: (
275
299
  output: __HttpResponse,
276
300
  context: __SerdeContext
277
301
  ) => Promise<CheckNoNewAccessCommandOutput>;
302
+ export declare const de_CheckNoPublicAccessCommand: (
303
+ output: __HttpResponse,
304
+ context: __SerdeContext
305
+ ) => Promise<CheckNoPublicAccessCommandOutput>;
278
306
  export declare const de_CreateAccessPreviewCommand: (
279
307
  output: __HttpResponse,
280
308
  context: __SerdeContext
@@ -295,6 +323,10 @@ export declare const de_DeleteArchiveRuleCommand: (
295
323
  output: __HttpResponse,
296
324
  context: __SerdeContext
297
325
  ) => Promise<DeleteArchiveRuleCommandOutput>;
326
+ export declare const de_GenerateFindingRecommendationCommand: (
327
+ output: __HttpResponse,
328
+ context: __SerdeContext
329
+ ) => Promise<GenerateFindingRecommendationCommandOutput>;
298
330
  export declare const de_GetAccessPreviewCommand: (
299
331
  output: __HttpResponse,
300
332
  context: __SerdeContext
@@ -315,6 +347,10 @@ export declare const de_GetFindingCommand: (
315
347
  output: __HttpResponse,
316
348
  context: __SerdeContext
317
349
  ) => Promise<GetFindingCommandOutput>;
350
+ export declare const de_GetFindingRecommendationCommand: (
351
+ output: __HttpResponse,
352
+ context: __SerdeContext
353
+ ) => Promise<GetFindingRecommendationCommandOutput>;
318
354
  export declare const de_GetFindingV2Command: (
319
355
  output: __HttpResponse,
320
356
  context: __SerdeContext
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-accessanalyzer",
3
3
  "description": "AWS SDK for JavaScript Accessanalyzer Client for Node.js, Browser and React Native",
4
- "version": "3.592.0",
4
+ "version": "3.595.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "node ../../scripts/compilation/inline client-accessanalyzer",