@aws-sdk/client-accessanalyzer 3.936.0 → 3.940.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/index.js +198 -0
- package/dist-es/index.js +1 -0
- package/dist-es/models/enums.js +172 -0
- package/dist-es/models/models_0.js +1 -172
- package/dist-types/index.d.ts +1 -0
- package/dist-types/models/enums.d.ts +404 -0
- package/dist-types/models/errors.d.ts +2 -1
- package/dist-types/models/models_0.d.ts +1 -404
- package/dist-types/ts3.4/index.d.ts +1 -0
- package/dist-types/ts3.4/models/enums.d.ts +253 -0
- package/dist-types/ts3.4/models/errors.d.ts +2 -4
- package/dist-types/ts3.4/models/models_0.d.ts +34 -253
- package/package.json +5 -5
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { AccessCheckPolicyType, AccessCheckResourceType, AccessPreviewStatus, AccessPreviewStatusReasonCode, AclPermission, AnalyzerStatus, CheckAccessNotGrantedResult, CheckNoNewAccessResult, CheckNoPublicAccessResult, FindingChangeType, FindingSourceType, FindingStatus, FindingStatusUpdate, FindingType, InternalAccessType, JobErrorCode, JobStatus, KmsGrantOperation, Locale, OrderBy, PolicyType, PrincipalType, ReasonCode, RecommendationType, RecommendedRemediationAction, ResourceControlPolicyRestriction, ResourceType, ServiceControlPolicyRestriction, Status, Type, ValidatePolicyFindingType, ValidatePolicyResourceType } from "./enums";
|
|
1
2
|
/**
|
|
2
3
|
* <p>Contains information about actions and resources that define permissions to check against a policy.</p>
|
|
3
4
|
* @public
|
|
@@ -82,21 +83,6 @@ export interface ValidationExceptionField {
|
|
|
82
83
|
*/
|
|
83
84
|
message: string | undefined;
|
|
84
85
|
}
|
|
85
|
-
/**
|
|
86
|
-
* @public
|
|
87
|
-
* @enum
|
|
88
|
-
*/
|
|
89
|
-
export declare const ValidationExceptionReason: {
|
|
90
|
-
readonly CANNOT_PARSE: "cannotParse";
|
|
91
|
-
readonly FIELD_VALIDATION_FAILED: "fieldValidationFailed";
|
|
92
|
-
readonly NOT_SUPPORTED: "notSupported";
|
|
93
|
-
readonly OTHER: "other";
|
|
94
|
-
readonly UNKNOWN_OPERATION: "unknownOperation";
|
|
95
|
-
};
|
|
96
|
-
/**
|
|
97
|
-
* @public
|
|
98
|
-
*/
|
|
99
|
-
export type ValidationExceptionReason = (typeof ValidationExceptionReason)[keyof typeof ValidationExceptionReason];
|
|
100
86
|
/**
|
|
101
87
|
* <p>Deletes an archive rule.</p>
|
|
102
88
|
* @public
|
|
@@ -250,10 +236,6 @@ export interface InlineArchiveRule {
|
|
|
250
236
|
*/
|
|
251
237
|
filter: Record<string, Criterion> | undefined;
|
|
252
238
|
}
|
|
253
|
-
/**
|
|
254
|
-
* @public
|
|
255
|
-
*/
|
|
256
|
-
export type ResourceType = "AWS::DynamoDB::Stream" | "AWS::DynamoDB::Table" | "AWS::EC2::Snapshot" | "AWS::ECR::Repository" | "AWS::EFS::FileSystem" | "AWS::IAM::Role" | "AWS::IAM::User" | "AWS::KMS::Key" | "AWS::Lambda::Function" | "AWS::Lambda::LayerVersion" | "AWS::RDS::DBClusterSnapshot" | "AWS::RDS::DBSnapshot" | "AWS::S3::Bucket" | "AWS::S3Express::DirectoryBucket" | "AWS::SNS::Topic" | "AWS::SQS::Queue" | "AWS::SecretsManager::Secret";
|
|
257
239
|
/**
|
|
258
240
|
* <p>The criteria for an analysis rule for an internal access analyzer.</p>
|
|
259
241
|
* @public
|
|
@@ -385,10 +367,6 @@ export declare namespace AnalyzerConfiguration {
|
|
|
385
367
|
_: (name: string, value: any) => T;
|
|
386
368
|
}
|
|
387
369
|
}
|
|
388
|
-
/**
|
|
389
|
-
* @public
|
|
390
|
-
*/
|
|
391
|
-
export type Type = "ACCOUNT" | "ACCOUNT_INTERNAL_ACCESS" | "ACCOUNT_UNUSED_ACCESS" | "ORGANIZATION" | "ORGANIZATION_INTERNAL_ACCESS" | "ORGANIZATION_UNUSED_ACCESS";
|
|
392
370
|
/**
|
|
393
371
|
* <p>Creates an analyzer.</p>
|
|
394
372
|
* @public
|
|
@@ -463,14 +441,6 @@ export interface GetAnalyzerRequest {
|
|
|
463
441
|
*/
|
|
464
442
|
analyzerName: string | undefined;
|
|
465
443
|
}
|
|
466
|
-
/**
|
|
467
|
-
* @public
|
|
468
|
-
*/
|
|
469
|
-
export type AnalyzerStatus = "ACTIVE" | "CREATING" | "DISABLED" | "FAILED";
|
|
470
|
-
/**
|
|
471
|
-
* @public
|
|
472
|
-
*/
|
|
473
|
-
export type ReasonCode = "AWS_SERVICE_ACCESS_DISABLED" | "DELEGATED_ADMINISTRATOR_DEREGISTERED" | "ORGANIZATION_DELETED" | "SERVICE_LINKED_ROLE_CREATION_FAILED";
|
|
474
444
|
/**
|
|
475
445
|
* <p>Provides more details about the current status of the analyzer. For example, if the creation for the analyzer fails, a <code>Failed</code> status is returned. For an analyzer with organization as the type, this failure can be due to an issue with creating the service-linked roles required in the member accounts of the Amazon Web Services organization.</p>
|
|
476
446
|
* @public
|
|
@@ -647,18 +617,6 @@ export interface CancelPolicyGenerationRequest {
|
|
|
647
617
|
*/
|
|
648
618
|
export interface CancelPolicyGenerationResponse {
|
|
649
619
|
}
|
|
650
|
-
/**
|
|
651
|
-
* @public
|
|
652
|
-
* @enum
|
|
653
|
-
*/
|
|
654
|
-
export declare const AccessCheckPolicyType: {
|
|
655
|
-
readonly IDENTITY_POLICY: "IDENTITY_POLICY";
|
|
656
|
-
readonly RESOURCE_POLICY: "RESOURCE_POLICY";
|
|
657
|
-
};
|
|
658
|
-
/**
|
|
659
|
-
* @public
|
|
660
|
-
*/
|
|
661
|
-
export type AccessCheckPolicyType = (typeof AccessCheckPolicyType)[keyof typeof AccessCheckPolicyType];
|
|
662
620
|
/**
|
|
663
621
|
* @public
|
|
664
622
|
*/
|
|
@@ -700,18 +658,6 @@ export interface ReasonSummary {
|
|
|
700
658
|
*/
|
|
701
659
|
statementId?: string | undefined;
|
|
702
660
|
}
|
|
703
|
-
/**
|
|
704
|
-
* @public
|
|
705
|
-
* @enum
|
|
706
|
-
*/
|
|
707
|
-
export declare const CheckAccessNotGrantedResult: {
|
|
708
|
-
readonly FAIL: "FAIL";
|
|
709
|
-
readonly PASS: "PASS";
|
|
710
|
-
};
|
|
711
|
-
/**
|
|
712
|
-
* @public
|
|
713
|
-
*/
|
|
714
|
-
export type CheckAccessNotGrantedResult = (typeof CheckAccessNotGrantedResult)[keyof typeof CheckAccessNotGrantedResult];
|
|
715
661
|
/**
|
|
716
662
|
* @public
|
|
717
663
|
*/
|
|
@@ -752,18 +698,6 @@ export interface CheckNoNewAccessRequest {
|
|
|
752
698
|
*/
|
|
753
699
|
policyType: AccessCheckPolicyType | undefined;
|
|
754
700
|
}
|
|
755
|
-
/**
|
|
756
|
-
* @public
|
|
757
|
-
* @enum
|
|
758
|
-
*/
|
|
759
|
-
export declare const CheckNoNewAccessResult: {
|
|
760
|
-
readonly FAIL: "FAIL";
|
|
761
|
-
readonly PASS: "PASS";
|
|
762
|
-
};
|
|
763
|
-
/**
|
|
764
|
-
* @public
|
|
765
|
-
*/
|
|
766
|
-
export type CheckNoNewAccessResult = (typeof CheckNoNewAccessResult)[keyof typeof CheckNoNewAccessResult];
|
|
767
701
|
/**
|
|
768
702
|
* @public
|
|
769
703
|
*/
|
|
@@ -784,42 +718,6 @@ export interface CheckNoNewAccessResponse {
|
|
|
784
718
|
*/
|
|
785
719
|
reasons?: ReasonSummary[] | undefined;
|
|
786
720
|
}
|
|
787
|
-
/**
|
|
788
|
-
* @public
|
|
789
|
-
* @enum
|
|
790
|
-
*/
|
|
791
|
-
export declare const AccessCheckResourceType: {
|
|
792
|
-
readonly API_GATEWAY_REST_API: "AWS::ApiGateway::RestApi";
|
|
793
|
-
readonly BACKUP_VAULT: "AWS::Backup::BackupVault";
|
|
794
|
-
readonly CLOUDTRAIL_DASHBOARD: "AWS::CloudTrail::Dashboard";
|
|
795
|
-
readonly CLOUDTRAIL_EVENT_DATA_STORE: "AWS::CloudTrail::EventDataStore";
|
|
796
|
-
readonly CODE_ARTIFACT_DOMAIN: "AWS::CodeArtifact::Domain";
|
|
797
|
-
readonly DYNAMODB_STREAM: "AWS::DynamoDB::Stream";
|
|
798
|
-
readonly DYNAMODB_TABLE: "AWS::DynamoDB::Table";
|
|
799
|
-
readonly EFS_FILESYSTEM: "AWS::EFS::FileSystem";
|
|
800
|
-
readonly KINESIS_DATA_STREAM: "AWS::Kinesis::Stream";
|
|
801
|
-
readonly KINESIS_STREAM_CONSUMER: "AWS::Kinesis::StreamConsumer";
|
|
802
|
-
readonly KMS_KEY: "AWS::KMS::Key";
|
|
803
|
-
readonly LAMBDA_FUNCTION: "AWS::Lambda::Function";
|
|
804
|
-
readonly OPENSEARCHSERVICE_DOMAIN: "AWS::OpenSearchService::Domain";
|
|
805
|
-
readonly ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument";
|
|
806
|
-
readonly S3EXPRESS_DIRECTORYBUCKET: "AWS::S3Express::DirectoryBucket";
|
|
807
|
-
readonly S3_ACCESS_POINT: "AWS::S3::AccessPoint";
|
|
808
|
-
readonly S3_BUCKET: "AWS::S3::Bucket";
|
|
809
|
-
readonly S3_EXPRESS_ACCESS_POINT: "AWS::S3Express::AccessPoint";
|
|
810
|
-
readonly S3_GLACIER: "AWS::S3::Glacier";
|
|
811
|
-
readonly S3_OUTPOSTS_ACCESS_POINT: "AWS::S3Outposts::AccessPoint";
|
|
812
|
-
readonly S3_OUTPOSTS_BUCKET: "AWS::S3Outposts::Bucket";
|
|
813
|
-
readonly S3_TABLE: "AWS::S3Tables::Table";
|
|
814
|
-
readonly S3_TABLE_BUCKET: "AWS::S3Tables::TableBucket";
|
|
815
|
-
readonly SECRETSMANAGER_SECRET: "AWS::SecretsManager::Secret";
|
|
816
|
-
readonly SNS_TOPIC: "AWS::SNS::Topic";
|
|
817
|
-
readonly SQS_QUEUE: "AWS::SQS::Queue";
|
|
818
|
-
};
|
|
819
|
-
/**
|
|
820
|
-
* @public
|
|
821
|
-
*/
|
|
822
|
-
export type AccessCheckResourceType = (typeof AccessCheckResourceType)[keyof typeof AccessCheckResourceType];
|
|
823
721
|
/**
|
|
824
722
|
* @public
|
|
825
723
|
*/
|
|
@@ -835,18 +733,6 @@ export interface CheckNoPublicAccessRequest {
|
|
|
835
733
|
*/
|
|
836
734
|
resourceType: AccessCheckResourceType | undefined;
|
|
837
735
|
}
|
|
838
|
-
/**
|
|
839
|
-
* @public
|
|
840
|
-
* @enum
|
|
841
|
-
*/
|
|
842
|
-
export declare const CheckNoPublicAccessResult: {
|
|
843
|
-
readonly FAIL: "FAIL";
|
|
844
|
-
readonly PASS: "PASS";
|
|
845
|
-
};
|
|
846
|
-
/**
|
|
847
|
-
* @public
|
|
848
|
-
*/
|
|
849
|
-
export type CheckNoPublicAccessResult = (typeof CheckNoPublicAccessResult)[keyof typeof CheckNoPublicAccessResult];
|
|
850
736
|
/**
|
|
851
737
|
* @public
|
|
852
738
|
*/
|
|
@@ -959,30 +845,6 @@ export interface KmsGrantConstraints {
|
|
|
959
845
|
*/
|
|
960
846
|
encryptionContextSubset?: Record<string, string> | undefined;
|
|
961
847
|
}
|
|
962
|
-
/**
|
|
963
|
-
* @public
|
|
964
|
-
* @enum
|
|
965
|
-
*/
|
|
966
|
-
export declare const KmsGrantOperation: {
|
|
967
|
-
readonly CREATE_GRANT: "CreateGrant";
|
|
968
|
-
readonly DECRYPT: "Decrypt";
|
|
969
|
-
readonly DESCRIBE_KEY: "DescribeKey";
|
|
970
|
-
readonly ENCRYPT: "Encrypt";
|
|
971
|
-
readonly GENERATE_DATA_KEY: "GenerateDataKey";
|
|
972
|
-
readonly GENERATE_DATA_KEY_PAIR: "GenerateDataKeyPair";
|
|
973
|
-
readonly GENERATE_DATA_KEY_PAIR_WITHOUT_PLAINTEXT: "GenerateDataKeyPairWithoutPlaintext";
|
|
974
|
-
readonly GENERATE_DATA_KEY_WITHOUT_PLAINTEXT: "GenerateDataKeyWithoutPlaintext";
|
|
975
|
-
readonly GET_PUBLIC_KEY: "GetPublicKey";
|
|
976
|
-
readonly REENCRYPT_FROM: "ReEncryptFrom";
|
|
977
|
-
readonly REENCRYPT_TO: "ReEncryptTo";
|
|
978
|
-
readonly RETIRE_GRANT: "RetireGrant";
|
|
979
|
-
readonly SIGN: "Sign";
|
|
980
|
-
readonly VERIFY: "Verify";
|
|
981
|
-
};
|
|
982
|
-
/**
|
|
983
|
-
* @public
|
|
984
|
-
*/
|
|
985
|
-
export type KmsGrantOperation = (typeof KmsGrantOperation)[keyof typeof KmsGrantOperation];
|
|
986
848
|
/**
|
|
987
849
|
* <p>A proposed grant configuration for a KMS key. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html">CreateGrant</a>.</p>
|
|
988
850
|
* @public
|
|
@@ -1272,21 +1134,6 @@ export declare namespace AclGrantee {
|
|
|
1272
1134
|
_: (name: string, value: any) => T;
|
|
1273
1135
|
}
|
|
1274
1136
|
}
|
|
1275
|
-
/**
|
|
1276
|
-
* @public
|
|
1277
|
-
* @enum
|
|
1278
|
-
*/
|
|
1279
|
-
export declare const AclPermission: {
|
|
1280
|
-
readonly FULL_CONTROL: "FULL_CONTROL";
|
|
1281
|
-
readonly READ: "READ";
|
|
1282
|
-
readonly READ_ACP: "READ_ACP";
|
|
1283
|
-
readonly WRITE: "WRITE";
|
|
1284
|
-
readonly WRITE_ACP: "WRITE_ACP";
|
|
1285
|
-
};
|
|
1286
|
-
/**
|
|
1287
|
-
* @public
|
|
1288
|
-
*/
|
|
1289
|
-
export type AclPermission = (typeof AclPermission)[keyof typeof AclPermission];
|
|
1290
1137
|
/**
|
|
1291
1138
|
* <p>A proposed access control list grant configuration for an Amazon S3 bucket. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#setting-acls">How to Specify an ACL</a>.</p>
|
|
1292
1139
|
* @public
|
|
@@ -1804,31 +1651,6 @@ export interface GetAccessPreviewRequest {
|
|
|
1804
1651
|
*/
|
|
1805
1652
|
analyzerArn: string | undefined;
|
|
1806
1653
|
}
|
|
1807
|
-
/**
|
|
1808
|
-
* @public
|
|
1809
|
-
* @enum
|
|
1810
|
-
*/
|
|
1811
|
-
export declare const AccessPreviewStatus: {
|
|
1812
|
-
readonly COMPLETED: "COMPLETED";
|
|
1813
|
-
readonly CREATING: "CREATING";
|
|
1814
|
-
readonly FAILED: "FAILED";
|
|
1815
|
-
};
|
|
1816
|
-
/**
|
|
1817
|
-
* @public
|
|
1818
|
-
*/
|
|
1819
|
-
export type AccessPreviewStatus = (typeof AccessPreviewStatus)[keyof typeof AccessPreviewStatus];
|
|
1820
|
-
/**
|
|
1821
|
-
* @public
|
|
1822
|
-
* @enum
|
|
1823
|
-
*/
|
|
1824
|
-
export declare const AccessPreviewStatusReasonCode: {
|
|
1825
|
-
readonly INTERNAL_ERROR: "INTERNAL_ERROR";
|
|
1826
|
-
readonly INVALID_CONFIGURATION: "INVALID_CONFIGURATION";
|
|
1827
|
-
};
|
|
1828
|
-
/**
|
|
1829
|
-
* @public
|
|
1830
|
-
*/
|
|
1831
|
-
export type AccessPreviewStatusReasonCode = (typeof AccessPreviewStatusReasonCode)[keyof typeof AccessPreviewStatusReasonCode];
|
|
1832
1654
|
/**
|
|
1833
1655
|
* <p>Provides more details about the current status of the access preview. For example, if the creation of the access preview fails, a <code>Failed</code> status is returned. This failure can be due to an internal issue with the analysis or due to an invalid proposed resource configuration.</p>
|
|
1834
1656
|
* @public
|
|
@@ -1902,10 +1724,6 @@ export interface GetAnalyzedResourceRequest {
|
|
|
1902
1724
|
*/
|
|
1903
1725
|
resourceArn: string | undefined;
|
|
1904
1726
|
}
|
|
1905
|
-
/**
|
|
1906
|
-
* @public
|
|
1907
|
-
*/
|
|
1908
|
-
export type FindingStatus = "ACTIVE" | "ARCHIVED" | "RESOLVED";
|
|
1909
1727
|
/**
|
|
1910
1728
|
* <p>Contains details about the analyzed resource.</p>
|
|
1911
1729
|
* @public
|
|
@@ -1994,20 +1812,6 @@ export interface GetFindingRequest {
|
|
|
1994
1812
|
*/
|
|
1995
1813
|
id: string | undefined;
|
|
1996
1814
|
}
|
|
1997
|
-
/**
|
|
1998
|
-
* @public
|
|
1999
|
-
* @enum
|
|
2000
|
-
*/
|
|
2001
|
-
export declare const ResourceControlPolicyRestriction: {
|
|
2002
|
-
readonly APPLICABLE: "APPLICABLE";
|
|
2003
|
-
readonly APPLIED: "APPLIED";
|
|
2004
|
-
readonly FAILED_TO_EVALUATE_RCP: "FAILED_TO_EVALUATE_RCP";
|
|
2005
|
-
readonly NOT_APPLICABLE: "NOT_APPLICABLE";
|
|
2006
|
-
};
|
|
2007
|
-
/**
|
|
2008
|
-
* @public
|
|
2009
|
-
*/
|
|
2010
|
-
export type ResourceControlPolicyRestriction = (typeof ResourceControlPolicyRestriction)[keyof typeof ResourceControlPolicyRestriction];
|
|
2011
1815
|
/**
|
|
2012
1816
|
* <p>Includes details about how the access that generated the finding is granted. This is populated for Amazon S3 bucket findings.</p>
|
|
2013
1817
|
* @public
|
|
@@ -2024,10 +1828,6 @@ export interface FindingSourceDetail {
|
|
|
2024
1828
|
*/
|
|
2025
1829
|
accessPointAccount?: string | undefined;
|
|
2026
1830
|
}
|
|
2027
|
-
/**
|
|
2028
|
-
* @public
|
|
2029
|
-
*/
|
|
2030
|
-
export type FindingSourceType = "BUCKET_ACL" | "POLICY" | "S3_ACCESS_POINT" | "S3_ACCESS_POINT_ACCOUNT";
|
|
2031
1831
|
/**
|
|
2032
1832
|
* <p>The source of the finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.</p>
|
|
2033
1833
|
* @public
|
|
@@ -2177,29 +1977,6 @@ export interface RecommendationError {
|
|
|
2177
1977
|
*/
|
|
2178
1978
|
message: string | undefined;
|
|
2179
1979
|
}
|
|
2180
|
-
/**
|
|
2181
|
-
* @public
|
|
2182
|
-
* @enum
|
|
2183
|
-
*/
|
|
2184
|
-
export declare const RecommendationType: {
|
|
2185
|
-
readonly UNUSED_PERMISSION_RECOMMENDATION: "UnusedPermissionRecommendation";
|
|
2186
|
-
};
|
|
2187
|
-
/**
|
|
2188
|
-
* @public
|
|
2189
|
-
*/
|
|
2190
|
-
export type RecommendationType = (typeof RecommendationType)[keyof typeof RecommendationType];
|
|
2191
|
-
/**
|
|
2192
|
-
* @public
|
|
2193
|
-
* @enum
|
|
2194
|
-
*/
|
|
2195
|
-
export declare const RecommendedRemediationAction: {
|
|
2196
|
-
readonly CREATE_POLICY: "CREATE_POLICY";
|
|
2197
|
-
readonly DETACH_POLICY: "DETACH_POLICY";
|
|
2198
|
-
};
|
|
2199
|
-
/**
|
|
2200
|
-
* @public
|
|
2201
|
-
*/
|
|
2202
|
-
export type RecommendedRemediationAction = (typeof RecommendedRemediationAction)[keyof typeof RecommendedRemediationAction];
|
|
2203
1980
|
/**
|
|
2204
1981
|
* <p>Contains information about the action to take for a policy in an unused permissions finding.</p>
|
|
2205
1982
|
* @public
|
|
@@ -2259,19 +2036,6 @@ export declare namespace RecommendedStep {
|
|
|
2259
2036
|
_: (name: string, value: any) => T;
|
|
2260
2037
|
}
|
|
2261
2038
|
}
|
|
2262
|
-
/**
|
|
2263
|
-
* @public
|
|
2264
|
-
* @enum
|
|
2265
|
-
*/
|
|
2266
|
-
export declare const Status: {
|
|
2267
|
-
readonly FAILED: "FAILED";
|
|
2268
|
-
readonly IN_PROGRESS: "IN_PROGRESS";
|
|
2269
|
-
readonly SUCCEEDED: "SUCCEEDED";
|
|
2270
|
-
};
|
|
2271
|
-
/**
|
|
2272
|
-
* @public
|
|
2273
|
-
*/
|
|
2274
|
-
export type Status = (typeof Status)[keyof typeof Status];
|
|
2275
2039
|
/**
|
|
2276
2040
|
* @public
|
|
2277
2041
|
*/
|
|
@@ -2624,44 +2388,6 @@ export interface ExternalAccessDetails {
|
|
|
2624
2388
|
*/
|
|
2625
2389
|
resourceControlPolicyRestriction?: ResourceControlPolicyRestriction | undefined;
|
|
2626
2390
|
}
|
|
2627
|
-
/**
|
|
2628
|
-
* @public
|
|
2629
|
-
* @enum
|
|
2630
|
-
*/
|
|
2631
|
-
export declare const InternalAccessType: {
|
|
2632
|
-
readonly INTRA_ACCOUNT: "INTRA_ACCOUNT";
|
|
2633
|
-
readonly INTRA_ORG: "INTRA_ORG";
|
|
2634
|
-
};
|
|
2635
|
-
/**
|
|
2636
|
-
* @public
|
|
2637
|
-
*/
|
|
2638
|
-
export type InternalAccessType = (typeof InternalAccessType)[keyof typeof InternalAccessType];
|
|
2639
|
-
/**
|
|
2640
|
-
* @public
|
|
2641
|
-
* @enum
|
|
2642
|
-
*/
|
|
2643
|
-
export declare const PrincipalType: {
|
|
2644
|
-
readonly IAM_ROLE: "IAM_ROLE";
|
|
2645
|
-
readonly IAM_USER: "IAM_USER";
|
|
2646
|
-
};
|
|
2647
|
-
/**
|
|
2648
|
-
* @public
|
|
2649
|
-
*/
|
|
2650
|
-
export type PrincipalType = (typeof PrincipalType)[keyof typeof PrincipalType];
|
|
2651
|
-
/**
|
|
2652
|
-
* @public
|
|
2653
|
-
* @enum
|
|
2654
|
-
*/
|
|
2655
|
-
export declare const ServiceControlPolicyRestriction: {
|
|
2656
|
-
readonly APPLICABLE: "APPLICABLE";
|
|
2657
|
-
readonly APPLIED: "APPLIED";
|
|
2658
|
-
readonly FAILED_TO_EVALUATE_SCP: "FAILED_TO_EVALUATE_SCP";
|
|
2659
|
-
readonly NOT_APPLICABLE: "NOT_APPLICABLE";
|
|
2660
|
-
};
|
|
2661
|
-
/**
|
|
2662
|
-
* @public
|
|
2663
|
-
*/
|
|
2664
|
-
export type ServiceControlPolicyRestriction = (typeof ServiceControlPolicyRestriction)[keyof typeof ServiceControlPolicyRestriction];
|
|
2665
2391
|
/**
|
|
2666
2392
|
* <p>Contains information about an internal access finding. This includes details about the access that was identified within your Amazon Web Services organization or account.</p>
|
|
2667
2393
|
* @public
|
|
@@ -2901,22 +2627,6 @@ export declare namespace FindingDetails {
|
|
|
2901
2627
|
_: (name: string, value: any) => T;
|
|
2902
2628
|
}
|
|
2903
2629
|
}
|
|
2904
|
-
/**
|
|
2905
|
-
* @public
|
|
2906
|
-
* @enum
|
|
2907
|
-
*/
|
|
2908
|
-
export declare const FindingType: {
|
|
2909
|
-
readonly EXTERNAL_ACCESS: "ExternalAccess";
|
|
2910
|
-
readonly INTERNAL_ACCESS: "InternalAccess";
|
|
2911
|
-
readonly UNUSED_IAM_ROLE: "UnusedIAMRole";
|
|
2912
|
-
readonly UNUSED_IAM_USER_ACCESS_KEY: "UnusedIAMUserAccessKey";
|
|
2913
|
-
readonly UNUSED_IAM_USER_PASSWORD: "UnusedIAMUserPassword";
|
|
2914
|
-
readonly UNUSED_PERMISSION: "UnusedPermission";
|
|
2915
|
-
};
|
|
2916
|
-
/**
|
|
2917
|
-
* @public
|
|
2918
|
-
*/
|
|
2919
|
-
export type FindingType = (typeof FindingType)[keyof typeof FindingType];
|
|
2920
2630
|
/**
|
|
2921
2631
|
* @public
|
|
2922
2632
|
*/
|
|
@@ -3092,20 +2802,6 @@ export interface GeneratedPolicyResult {
|
|
|
3092
2802
|
*/
|
|
3093
2803
|
generatedPolicies?: GeneratedPolicy[] | undefined;
|
|
3094
2804
|
}
|
|
3095
|
-
/**
|
|
3096
|
-
* @public
|
|
3097
|
-
* @enum
|
|
3098
|
-
*/
|
|
3099
|
-
export declare const JobErrorCode: {
|
|
3100
|
-
readonly AUTHORIZATION_ERROR: "AUTHORIZATION_ERROR";
|
|
3101
|
-
readonly RESOURCE_NOT_FOUND_ERROR: "RESOURCE_NOT_FOUND_ERROR";
|
|
3102
|
-
readonly SERVICE_ERROR: "SERVICE_ERROR";
|
|
3103
|
-
readonly SERVICE_QUOTA_EXCEEDED_ERROR: "SERVICE_QUOTA_EXCEEDED_ERROR";
|
|
3104
|
-
};
|
|
3105
|
-
/**
|
|
3106
|
-
* @public
|
|
3107
|
-
*/
|
|
3108
|
-
export type JobErrorCode = (typeof JobErrorCode)[keyof typeof JobErrorCode];
|
|
3109
2805
|
/**
|
|
3110
2806
|
* <p>Contains the details about the policy generation error.</p>
|
|
3111
2807
|
* @public
|
|
@@ -3122,20 +2818,6 @@ export interface JobError {
|
|
|
3122
2818
|
*/
|
|
3123
2819
|
message: string | undefined;
|
|
3124
2820
|
}
|
|
3125
|
-
/**
|
|
3126
|
-
* @public
|
|
3127
|
-
* @enum
|
|
3128
|
-
*/
|
|
3129
|
-
export declare const JobStatus: {
|
|
3130
|
-
readonly CANCELED: "CANCELED";
|
|
3131
|
-
readonly FAILED: "FAILED";
|
|
3132
|
-
readonly IN_PROGRESS: "IN_PROGRESS";
|
|
3133
|
-
readonly SUCCEEDED: "SUCCEEDED";
|
|
3134
|
-
};
|
|
3135
|
-
/**
|
|
3136
|
-
* @public
|
|
3137
|
-
*/
|
|
3138
|
-
export type JobStatus = (typeof JobStatus)[keyof typeof JobStatus];
|
|
3139
2821
|
/**
|
|
3140
2822
|
* <p>Contains details about the policy generation request.</p>
|
|
3141
2823
|
* @public
|
|
@@ -3212,19 +2894,6 @@ export interface ListAccessPreviewFindingsRequest {
|
|
|
3212
2894
|
*/
|
|
3213
2895
|
maxResults?: number | undefined;
|
|
3214
2896
|
}
|
|
3215
|
-
/**
|
|
3216
|
-
* @public
|
|
3217
|
-
* @enum
|
|
3218
|
-
*/
|
|
3219
|
-
export declare const FindingChangeType: {
|
|
3220
|
-
readonly CHANGED: "CHANGED";
|
|
3221
|
-
readonly NEW: "NEW";
|
|
3222
|
-
readonly UNCHANGED: "UNCHANGED";
|
|
3223
|
-
};
|
|
3224
|
-
/**
|
|
3225
|
-
* @public
|
|
3226
|
-
*/
|
|
3227
|
-
export type FindingChangeType = (typeof FindingChangeType)[keyof typeof FindingChangeType];
|
|
3228
2897
|
/**
|
|
3229
2898
|
* <p>An access preview finding generated by the access preview.</p>
|
|
3230
2899
|
* @public
|
|
@@ -3455,10 +3124,6 @@ export interface ListAnalyzedResourcesResponse {
|
|
|
3455
3124
|
*/
|
|
3456
3125
|
nextToken?: string | undefined;
|
|
3457
3126
|
}
|
|
3458
|
-
/**
|
|
3459
|
-
* @public
|
|
3460
|
-
*/
|
|
3461
|
-
export type OrderBy = "ASC" | "DESC";
|
|
3462
3127
|
/**
|
|
3463
3128
|
* <p>The criteria used to sort.</p>
|
|
3464
3129
|
* @public
|
|
@@ -3945,10 +3610,6 @@ export interface UntagResourceRequest {
|
|
|
3945
3610
|
*/
|
|
3946
3611
|
export interface UntagResourceResponse {
|
|
3947
3612
|
}
|
|
3948
|
-
/**
|
|
3949
|
-
* @public
|
|
3950
|
-
*/
|
|
3951
|
-
export type FindingStatusUpdate = "ACTIVE" | "ARCHIVED";
|
|
3952
3613
|
/**
|
|
3953
3614
|
* <p>Updates findings with the new values provided in the request.</p>
|
|
3954
3615
|
* @public
|
|
@@ -3980,56 +3641,6 @@ export interface UpdateFindingsRequest {
|
|
|
3980
3641
|
*/
|
|
3981
3642
|
clientToken?: string | undefined;
|
|
3982
3643
|
}
|
|
3983
|
-
/**
|
|
3984
|
-
* @public
|
|
3985
|
-
* @enum
|
|
3986
|
-
*/
|
|
3987
|
-
export declare const Locale: {
|
|
3988
|
-
readonly DE: "DE";
|
|
3989
|
-
readonly EN: "EN";
|
|
3990
|
-
readonly ES: "ES";
|
|
3991
|
-
readonly FR: "FR";
|
|
3992
|
-
readonly IT: "IT";
|
|
3993
|
-
readonly JA: "JA";
|
|
3994
|
-
readonly KO: "KO";
|
|
3995
|
-
readonly PT_BR: "PT_BR";
|
|
3996
|
-
readonly ZH_CN: "ZH_CN";
|
|
3997
|
-
readonly ZH_TW: "ZH_TW";
|
|
3998
|
-
};
|
|
3999
|
-
/**
|
|
4000
|
-
* @public
|
|
4001
|
-
*/
|
|
4002
|
-
export type Locale = (typeof Locale)[keyof typeof Locale];
|
|
4003
|
-
/**
|
|
4004
|
-
* @public
|
|
4005
|
-
* @enum
|
|
4006
|
-
*/
|
|
4007
|
-
export declare const PolicyType: {
|
|
4008
|
-
readonly IDENTITY_POLICY: "IDENTITY_POLICY";
|
|
4009
|
-
readonly RESOURCE_CONTROL_POLICY: "RESOURCE_CONTROL_POLICY";
|
|
4010
|
-
readonly RESOURCE_POLICY: "RESOURCE_POLICY";
|
|
4011
|
-
readonly SERVICE_CONTROL_POLICY: "SERVICE_CONTROL_POLICY";
|
|
4012
|
-
};
|
|
4013
|
-
/**
|
|
4014
|
-
* @public
|
|
4015
|
-
*/
|
|
4016
|
-
export type PolicyType = (typeof PolicyType)[keyof typeof PolicyType];
|
|
4017
|
-
/**
|
|
4018
|
-
* @public
|
|
4019
|
-
* @enum
|
|
4020
|
-
*/
|
|
4021
|
-
export declare const ValidatePolicyResourceType: {
|
|
4022
|
-
readonly DYNAMODB_TABLE: "AWS::DynamoDB::Table";
|
|
4023
|
-
readonly ROLE_TRUST: "AWS::IAM::AssumeRolePolicyDocument";
|
|
4024
|
-
readonly S3_ACCESS_POINT: "AWS::S3::AccessPoint";
|
|
4025
|
-
readonly S3_BUCKET: "AWS::S3::Bucket";
|
|
4026
|
-
readonly S3_MULTI_REGION_ACCESS_POINT: "AWS::S3::MultiRegionAccessPoint";
|
|
4027
|
-
readonly S3_OBJECT_LAMBDA_ACCESS_POINT: "AWS::S3ObjectLambda::AccessPoint";
|
|
4028
|
-
};
|
|
4029
|
-
/**
|
|
4030
|
-
* @public
|
|
4031
|
-
*/
|
|
4032
|
-
export type ValidatePolicyResourceType = (typeof ValidatePolicyResourceType)[keyof typeof ValidatePolicyResourceType];
|
|
4033
3644
|
/**
|
|
4034
3645
|
* @public
|
|
4035
3646
|
*/
|
|
@@ -4065,20 +3676,6 @@ export interface ValidatePolicyRequest {
|
|
|
4065
3676
|
*/
|
|
4066
3677
|
validatePolicyResourceType?: ValidatePolicyResourceType | undefined;
|
|
4067
3678
|
}
|
|
4068
|
-
/**
|
|
4069
|
-
* @public
|
|
4070
|
-
* @enum
|
|
4071
|
-
*/
|
|
4072
|
-
export declare const ValidatePolicyFindingType: {
|
|
4073
|
-
readonly ERROR: "ERROR";
|
|
4074
|
-
readonly SECURITY_WARNING: "SECURITY_WARNING";
|
|
4075
|
-
readonly SUGGESTION: "SUGGESTION";
|
|
4076
|
-
readonly WARNING: "WARNING";
|
|
4077
|
-
};
|
|
4078
|
-
/**
|
|
4079
|
-
* @public
|
|
4080
|
-
*/
|
|
4081
|
-
export type ValidatePolicyFindingType = (typeof ValidatePolicyFindingType)[keyof typeof ValidatePolicyFindingType];
|
|
4082
3679
|
/**
|
|
4083
3680
|
* <p>A reference to a substring of a literal string in a JSON document.</p>
|
|
4084
3681
|
* @public
|
|
@@ -5,6 +5,7 @@ export { RuntimeExtension } from "./runtimeExtensions";
|
|
|
5
5
|
export { AccessAnalyzerExtensionConfiguration } from "./extensionConfiguration";
|
|
6
6
|
export * from "./commands";
|
|
7
7
|
export * from "./pagination";
|
|
8
|
+
export * from "./models/enums";
|
|
8
9
|
export * from "./models/errors";
|
|
9
10
|
export * from "./models/models_0";
|
|
10
11
|
export { AccessAnalyzerServiceException } from "./models/AccessAnalyzerServiceException";
|