aws-resource-validator-accessanalyzer 2.0.0__py3-none-any.whl

aws_resource_validator/pydantic_models/accessanalyzer/accessanalyzer_classes.py

@@ -0,0 +1,1327 @@
+# This file is auto-generated by aws_resource_validator.generator.pipeline_b.
+# Do not edit manually; run `arv-generate pipeline-b` to refresh it.
+from datetime import datetime
+from decimal import Decimal
+from typing import (
+    Any,
+    Callable,
+    Dict,
+    FrozenSet,
+    IO,
+    List,
+    Literal,
+    Mapping,
+    Optional,
+    Sequence,
+    Set,
+    Tuple,
+    Type,
+    Union,
+)
+
+from botocore.client import BaseClient
+from botocore.response import StreamingBody
+from pydantic import Field
+
+from aws_resource_validator.core.base_validator_model import BaseValidatorModel, EventStream
+from aws_resource_validator.pydantic_models.accessanalyzer.accessanalyzer_constants import *  # noqa: F401,F403
+
+# Optional boto3 symbols — imported lazily so services that don't need them
+# aren't forced to pull in boto3 at import time.
+try:
+    from boto3.dynamodb.conditions import ConditionBase  # noqa: F401
+except ImportError:  # pragma: no cover
+    ConditionBase = Any  # type: ignore[assignment,misc]
+try:
+    from boto3.s3.transfer import TransferConfig  # noqa: F401
+except ImportError:  # pragma: no cover
+    TransferConfig = Any  # type: ignore[assignment,misc]
+
+
+class AccessPreviewStatusReasonTypeDef(BaseValidatorModel):
+    code: AccessPreviewStatusReasonCodeType
+
+
+class AccessTypeDef(BaseValidatorModel):
+    actions: Optional[List[str]] = None
+    resources: Optional[List[str]] = None
+
+
+class AclGranteeTypeDef(BaseValidatorModel):
+    id: Optional[str] = None
+    uri: Optional[str] = None
+
+
+class AnalysisRuleCriteriaOutputTypeDef(BaseValidatorModel):
+    accountIds: Optional[List[str]] = None
+    resourceTags: Optional[List[Dict[str, str]]] = None
+
+
+class AnalysisRuleCriteriaTypeDef(BaseValidatorModel):
+    accountIds: Optional[List[str]] = None
+    resourceTags: Optional[List[Dict[str, str]]] = None
+
+
+class AnalyzedResourceSummaryTypeDef(BaseValidatorModel):
+    resourceArn: str
+    resourceOwnerAccount: str
+    resourceType: ResourceTypeType
+
+
+class AnalyzedResourceTypeDef(BaseValidatorModel):
+    resourceArn: str
+    resourceType: ResourceTypeType
+    createdAt: datetime
+    analyzedAt: datetime
+    updatedAt: datetime
+    isPublic: bool
+    resourceOwnerAccount: str
+    actions: Optional[List[str]] = None
+    sharedVia: Optional[List[str]] = None
+    status: Optional[FindingStatusType] = None
+    error: Optional[str] = None
+
+
+class StatusReasonTypeDef(BaseValidatorModel):
+    code: ReasonCodeType
+
+
+# This class is the input for the 'apply_archive_rule' function.
+class ApplyArchiveRuleRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    ruleName: str
+    clientToken: Optional[str] = None
+
+
+class CriterionOutputTypeDef(BaseValidatorModel):
+    eq: Optional[List[str]] = None
+    neq: Optional[List[str]] = None
+    contains: Optional[List[str]] = None
+    exists: Optional[bool] = None
+
+
+class CancelPolicyGenerationRequestTypeDef(BaseValidatorModel):
+    jobId: str
+
+
+class ReasonSummaryTypeDef(BaseValidatorModel):
+    description: Optional[str] = None
+    statementIndex: Optional[int] = None
+    statementId: Optional[str] = None
+
+
+class ResponseMetadataTypeDef(BaseValidatorModel):
+    RequestId: str
+    HTTPStatusCode: int
+    HTTPHeaders: Dict[str, str]
+    RetryAttempts: int
+    HostId: Optional[str] = None
+
+
+# This class is the input for the 'check_no_new_access' function.
+class CheckNoNewAccessRequestTypeDef(BaseValidatorModel):
+    newPolicyDocument: str
+    existingPolicyDocument: str
+    policyType: AccessCheckPolicyTypeType
+
+
+# This class is the input for the 'check_no_public_access' function.
+class CheckNoPublicAccessRequestTypeDef(BaseValidatorModel):
+    policyDocument: str
+    resourceType: AccessCheckResourceTypeType
+
+
+TimestampTypeDef = Union[datetime, str]
+
+
+class TrailTypeDef(BaseValidatorModel):
+    cloudTrailArn: str
+    regions: Optional[List[str]] = None
+    allRegions: Optional[bool] = None
+
+
+class TrailPropertiesTypeDef(BaseValidatorModel):
+    cloudTrailArn: str
+    regions: Optional[List[str]] = None
+    allRegions: Optional[bool] = None
+
+
+class DynamodbStreamConfigurationTypeDef(BaseValidatorModel):
+    streamPolicy: Optional[str] = None
+
+
+class DynamodbTableConfigurationTypeDef(BaseValidatorModel):
+    tablePolicy: Optional[str] = None
+
+
+class EbsSnapshotConfigurationOutputTypeDef(BaseValidatorModel):
+    userIds: Optional[List[str]] = None
+    groups: Optional[List[str]] = None
+    kmsKeyId: Optional[str] = None
+
+
+class EcrRepositoryConfigurationTypeDef(BaseValidatorModel):
+    repositoryPolicy: Optional[str] = None
+
+
+class EfsFileSystemConfigurationTypeDef(BaseValidatorModel):
+    fileSystemPolicy: Optional[str] = None
+
+
+class IamRoleConfigurationTypeDef(BaseValidatorModel):
+    trustPolicy: Optional[str] = None
+
+
+class SecretsManagerSecretConfigurationTypeDef(BaseValidatorModel):
+    kmsKeyId: Optional[str] = None
+    secretPolicy: Optional[str] = None
+
+
+class SnsTopicConfigurationTypeDef(BaseValidatorModel):
+    topicPolicy: Optional[str] = None
+
+
+class SqsQueueConfigurationTypeDef(BaseValidatorModel):
+    queuePolicy: Optional[str] = None
+
+
+class CriterionTypeDef(BaseValidatorModel):
+    eq: Optional[List[str]] = None
+    neq: Optional[List[str]] = None
+    contains: Optional[List[str]] = None
+    exists: Optional[bool] = None
+
+
+# This class is the input for the 'delete_analyzer' function.
+class DeleteAnalyzerRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+    clientToken: Optional[str] = None
+
+
+# This class is the input for the 'delete_archive_rule' function.
+class DeleteArchiveRuleRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+    ruleName: str
+    clientToken: Optional[str] = None
+
+
+class EbsSnapshotConfigurationTypeDef(BaseValidatorModel):
+    userIds: Optional[List[str]] = None
+    groups: Optional[List[str]] = None
+    kmsKeyId: Optional[str] = None
+
+
+class ResourceTypeDetailsTypeDef(BaseValidatorModel):
+    totalActivePublic: Optional[int] = None
+    totalActiveCrossAccount: Optional[int] = None
+    totalActiveErrors: Optional[int] = None
+
+
+class FindingAggregationAccountDetailsTypeDef(BaseValidatorModel):
+    account: Optional[str] = None
+    numberOfActiveFindings: Optional[int] = None
+    details: Optional[Dict[str, int]] = None
+
+
+class UnusedIamRoleDetailsTypeDef(BaseValidatorModel):
+    lastAccessed: Optional[datetime] = None
+
+
+class UnusedIamUserAccessKeyDetailsTypeDef(BaseValidatorModel):
+    accessKeyId: str
+    lastAccessed: Optional[datetime] = None
+
+
+class UnusedIamUserPasswordDetailsTypeDef(BaseValidatorModel):
+    lastAccessed: Optional[datetime] = None
+
+
+class FindingSourceDetailTypeDef(BaseValidatorModel):
+    accessPointArn: Optional[str] = None
+    accessPointAccount: Optional[str] = None
+
+
+class FindingSummaryV2TypeDef(BaseValidatorModel):
+    analyzedAt: datetime
+    createdAt: datetime
+    id: str
+    resourceType: ResourceTypeType
+    resourceOwnerAccount: str
+    status: FindingStatusType
+    updatedAt: datetime
+    error: Optional[str] = None
+    resource: Optional[str] = None
+    findingType: Optional[FindingTypeType] = None
+
+
+# This class is the input for the 'generate_finding_recommendation' function.
+class GenerateFindingRecommendationRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    id: str
+
+
+class GeneratedPolicyTypeDef(BaseValidatorModel):
+    policy: str
+
+
+# This class is the input for the 'get_access_preview' function.
+class GetAccessPreviewRequestTypeDef(BaseValidatorModel):
+    accessPreviewId: str
+    analyzerArn: str
+
+
+# This class is the input for the 'get_analyzed_resource' function.
+class GetAnalyzedResourceRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    resourceArn: str
+
+
+# This class is the input for the 'get_analyzer' function.
+class GetAnalyzerRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+
+
+# This class is the input for the 'get_archive_rule' function.
+class GetArchiveRuleRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+    ruleName: str
+
+
+class PaginatorConfigTypeDef(BaseValidatorModel):
+    MaxItems: Optional[int] = None
+    PageSize: Optional[int] = None
+    StartingToken: Optional[str] = None
+
+
+# This class is the input for the 'get_finding_recommendation' function.
+class GetFindingRecommendationRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    id: str
+    maxResults: Optional[int] = None
+    nextToken: Optional[str] = None
+
+
+class RecommendationErrorTypeDef(BaseValidatorModel):
+    code: str
+    message: str
+
+
+# This class is the input for the 'get_finding' function.
+class GetFindingRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    id: str
+
+
+# This class is the input for the 'get_finding_v2' function.
+class GetFindingV2RequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    id: str
+    maxResults: Optional[int] = None
+    nextToken: Optional[str] = None
+
+
+# This class is the input for the 'get_findings_statistics' function.
+class GetFindingsStatisticsRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+
+
+# This class is the input for the 'get_generated_policy' function.
+class GetGeneratedPolicyRequestTypeDef(BaseValidatorModel):
+    jobId: str
+    includeResourcePlaceholders: Optional[bool] = None
+    includeServiceLevelTemplate: Optional[bool] = None
+
+
+class InternalAccessAnalysisRuleCriteriaOutputTypeDef(BaseValidatorModel):
+    accountIds: Optional[List[str]] = None
+    resourceTypes: Optional[List[ResourceTypeType]] = None
+    resourceArns: Optional[List[str]] = None
+
+
+class InternalAccessAnalysisRuleCriteriaTypeDef(BaseValidatorModel):
+    accountIds: Optional[List[str]] = None
+    resourceTypes: Optional[List[ResourceTypeType]] = None
+    resourceArns: Optional[List[str]] = None
+
+
+class InternalAccessResourceTypeDetailsTypeDef(BaseValidatorModel):
+    totalActiveFindings: Optional[int] = None
+    totalResolvedFindings: Optional[int] = None
+    totalArchivedFindings: Optional[int] = None
+
+
+class JobErrorTypeDef(BaseValidatorModel):
+    code: JobErrorCodeType
+    message: str
+
+
+class KmsGrantConstraintsOutputTypeDef(BaseValidatorModel):
+    encryptionContextEquals: Optional[Dict[str, str]] = None
+    encryptionContextSubset: Optional[Dict[str, str]] = None
+
+
+class KmsGrantConstraintsTypeDef(BaseValidatorModel):
+    encryptionContextEquals: Optional[Dict[str, str]] = None
+    encryptionContextSubset: Optional[Dict[str, str]] = None
+
+
+# This class is the input for the 'list_access_previews' function.
+class ListAccessPreviewsRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    nextToken: Optional[str] = None
+    maxResults: Optional[int] = None
+
+
+# This class is the input for the 'list_analyzed_resources' function.
+class ListAnalyzedResourcesRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    resourceType: Optional[ResourceTypeType] = None
+    nextToken: Optional[str] = None
+    maxResults: Optional[int] = None
+
+
+# This class is the input for the 'list_analyzers' function.
+class ListAnalyzersRequestTypeDef(BaseValidatorModel):
+    nextToken: Optional[str] = None
+    maxResults: Optional[int] = None
+    type: Optional[TypeType] = None
+
+
+# This class is the input for the 'list_archive_rules' function.
+class ListArchiveRulesRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+    nextToken: Optional[str] = None
+    maxResults: Optional[int] = None
+
+
+class SortCriteriaTypeDef(BaseValidatorModel):
+    attributeName: Optional[str] = None
+    orderBy: Optional[OrderByType] = None
+
+
+# This class is the input for the 'list_policy_generations' function.
+class ListPolicyGenerationsRequestTypeDef(BaseValidatorModel):
+    principalArn: Optional[str] = None
+    maxResults: Optional[int] = None
+    nextToken: Optional[str] = None
+
+
+class PolicyGenerationTypeDef(BaseValidatorModel):
+    jobId: str
+    principalArn: str
+    status: JobStatusType
+    startedOn: datetime
+    completedOn: Optional[datetime] = None
+
+
+# This class is the input for the 'list_tags_for_resource' function.
+class ListTagsForResourceRequestTypeDef(BaseValidatorModel):
+    resourceArn: str
+
+
+class VpcConfigurationTypeDef(BaseValidatorModel):
+    vpcId: str
+
+
+class SubstringTypeDef(BaseValidatorModel):
+    start: int
+    length: int
+
+
+class PolicyGenerationDetailsTypeDef(BaseValidatorModel):
+    principalArn: str
+
+
+class PositionTypeDef(BaseValidatorModel):
+    line: int
+    column: int
+    offset: int
+
+
+class RdsDbClusterSnapshotAttributeValueOutputTypeDef(BaseValidatorModel):
+    accountIds: Optional[List[str]] = None
+
+
+class RdsDbClusterSnapshotAttributeValueTypeDef(BaseValidatorModel):
+    accountIds: Optional[List[str]] = None
+
+
+class RdsDbSnapshotAttributeValueOutputTypeDef(BaseValidatorModel):
+    accountIds: Optional[List[str]] = None
+
+
+class RdsDbSnapshotAttributeValueTypeDef(BaseValidatorModel):
+    accountIds: Optional[List[str]] = None
+
+
+class UnusedPermissionsRecommendedStepTypeDef(BaseValidatorModel):
+    recommendedAction: RecommendedRemediationActionType
+    policyUpdatedAt: Optional[datetime] = None
+    recommendedPolicy: Optional[str] = None
+    existingPolicyId: Optional[str] = None
+
+
+class S3PublicAccessBlockConfigurationTypeDef(BaseValidatorModel):
+    ignorePublicAcls: bool
+    restrictPublicBuckets: bool
+
+
+# This class is the input for the 'start_resource_scan' function.
+class StartResourceScanRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    resourceArn: str
+    resourceOwnerAccount: Optional[str] = None
+
+
+class TagResourceRequestTypeDef(BaseValidatorModel):
+    resourceArn: str
+    tags: Dict[str, str]
+
+
+class UntagResourceRequestTypeDef(BaseValidatorModel):
+    resourceArn: str
+    tagKeys: List[str]
+
+
+class UnusedAccessTypeStatisticsTypeDef(BaseValidatorModel):
+    unusedAccessType: Optional[str] = None
+    total: Optional[int] = None
+
+
+class UnusedActionTypeDef(BaseValidatorModel):
+    action: str
+    lastAccessed: Optional[datetime] = None
+
+
+# This class is the input for the 'update_findings' function.
+class UpdateFindingsRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    status: FindingStatusUpdateType
+    ids: Optional[List[str]] = None
+    resourceArn: Optional[str] = None
+    clientToken: Optional[str] = None
+
+
+# This class is the input for the 'validate_policy' function.
+class ValidatePolicyRequestTypeDef(BaseValidatorModel):
+    policyDocument: str
+    policyType: PolicyTypeType
+    locale: Optional[LocaleType] = None
+    maxResults: Optional[int] = None
+    nextToken: Optional[str] = None
+    validatePolicyResourceType: Optional[ValidatePolicyResourceTypeType] = None
+
+
+class AccessPreviewSummaryTypeDef(BaseValidatorModel):
+    id: str
+    analyzerArn: str
+    createdAt: datetime
+    status: AccessPreviewStatusType
+    statusReason: Optional[AccessPreviewStatusReasonTypeDef] = None
+
+
+# This class is the input for the 'check_access_not_granted' function.
+class CheckAccessNotGrantedRequestTypeDef(BaseValidatorModel):
+    policyDocument: str
+    access: List[AccessTypeDef]
+    policyType: AccessCheckPolicyTypeType
+
+
+class S3BucketAclGrantConfigurationTypeDef(BaseValidatorModel):
+    permission: AclPermissionType
+    grantee: AclGranteeTypeDef
+
+
+class AnalysisRuleOutputTypeDef(BaseValidatorModel):
+    exclusions: Optional[List[AnalysisRuleCriteriaOutputTypeDef]] = None
+
+
+class AnalysisRuleTypeDef(BaseValidatorModel):
+    exclusions: Optional[List[AnalysisRuleCriteriaTypeDef]] = None
+
+
+class ArchiveRuleSummaryTypeDef(BaseValidatorModel):
+    ruleName: str
+    filter: Dict[str, CriterionOutputTypeDef]
+    createdAt: datetime
+    updatedAt: datetime
+
+
+# This class is the output for the 'check_access_not_granted' function.
+class CheckAccessNotGrantedResponseTypeDef(BaseValidatorModel):
+    result: CheckAccessNotGrantedResultType
+    message: str
+    reasons: List[ReasonSummaryTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'check_no_new_access' function.
+class CheckNoNewAccessResponseTypeDef(BaseValidatorModel):
+    result: CheckNoNewAccessResultType
+    message: str
+    reasons: List[ReasonSummaryTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'check_no_public_access' function.
+class CheckNoPublicAccessResponseTypeDef(BaseValidatorModel):
+    result: CheckNoPublicAccessResultType
+    message: str
+    reasons: List[ReasonSummaryTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'create_access_preview' function.
+class CreateAccessPreviewResponseTypeDef(BaseValidatorModel):
+    id: str
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'create_analyzer' function.
+class CreateAnalyzerResponseTypeDef(BaseValidatorModel):
+    arn: str
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'apply_archive_rule' function.
+class EmptyResponseMetadataTypeDef(BaseValidatorModel):
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'get_analyzed_resource' function.
+class GetAnalyzedResourceResponseTypeDef(BaseValidatorModel):
+    resource: AnalyzedResourceTypeDef
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'list_analyzed_resources' function.
+class ListAnalyzedResourcesResponseTypeDef(BaseValidatorModel):
+    analyzedResources: List[AnalyzedResourceSummaryTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+# This class is the output for the 'list_tags_for_resource' function.
+class ListTagsForResourceResponseTypeDef(BaseValidatorModel):
+    tags: Dict[str, str]
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'start_policy_generation' function.
+class StartPolicyGenerationResponseTypeDef(BaseValidatorModel):
+    jobId: str
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+class CloudTrailDetailsTypeDef(BaseValidatorModel):
+    trails: List[TrailTypeDef]
+    accessRole: str
+    startTime: TimestampTypeDef
+    endTime: Optional[TimestampTypeDef] = None
+
+
+class CloudTrailPropertiesTypeDef(BaseValidatorModel):
+    trailProperties: List[TrailPropertiesTypeDef]
+    startTime: datetime
+    endTime: datetime
+
+
+CriterionUnionTypeDef = Union[CriterionOutputTypeDef, CriterionTypeDef]
+
+EbsSnapshotConfigurationUnionTypeDef = Union[EbsSnapshotConfigurationOutputTypeDef, EbsSnapshotConfigurationTypeDef]
+
+
+class ExternalAccessFindingsStatisticsTypeDef(BaseValidatorModel):
+    resourceTypeStatistics: Optional[Dict[ResourceTypeType, ResourceTypeDetailsTypeDef]] = None
+    totalActiveFindings: Optional[int] = None
+    totalArchivedFindings: Optional[int] = None
+    totalResolvedFindings: Optional[int] = None
+
+
+class FindingSourceTypeDef(BaseValidatorModel):
+    type: FindingSourceTypeType
+    detail: Optional[FindingSourceDetailTypeDef] = None
+
+
+# This class is the output for the 'list_findings_v2' function.
+class ListFindingsV2ResponseTypeDef(BaseValidatorModel):
+    findings: List[FindingSummaryV2TypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+class GetFindingRecommendationRequestPaginateTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    id: str
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+class GetFindingV2RequestPaginateTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    id: str
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+class ListAccessPreviewsRequestPaginateTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+class ListAnalyzedResourcesRequestPaginateTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    resourceType: Optional[ResourceTypeType] = None
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+class ListAnalyzersRequestPaginateTypeDef(BaseValidatorModel):
+    type: Optional[TypeType] = None
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+class ListArchiveRulesRequestPaginateTypeDef(BaseValidatorModel):
+    analyzerName: str
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+class ListPolicyGenerationsRequestPaginateTypeDef(BaseValidatorModel):
+    principalArn: Optional[str] = None
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+class ValidatePolicyRequestPaginateTypeDef(BaseValidatorModel):
+    policyDocument: str
+    policyType: PolicyTypeType
+    locale: Optional[LocaleType] = None
+    validatePolicyResourceType: Optional[ValidatePolicyResourceTypeType] = None
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+class InternalAccessAnalysisRuleOutputTypeDef(BaseValidatorModel):
+    inclusions: Optional[List[InternalAccessAnalysisRuleCriteriaOutputTypeDef]] = None
+
+
+class InternalAccessAnalysisRuleTypeDef(BaseValidatorModel):
+    inclusions: Optional[List[InternalAccessAnalysisRuleCriteriaTypeDef]] = None
+
+
+class InternalAccessFindingsStatisticsTypeDef(BaseValidatorModel):
+    resourceTypeStatistics: Optional[Dict[ResourceTypeType, InternalAccessResourceTypeDetailsTypeDef]] = None
+    totalActiveFindings: Optional[int] = None
+    totalArchivedFindings: Optional[int] = None
+    totalResolvedFindings: Optional[int] = None
+
+
+class JobDetailsTypeDef(BaseValidatorModel):
+    jobId: str
+    status: JobStatusType
+    startedOn: datetime
+    completedOn: Optional[datetime] = None
+    jobError: Optional[JobErrorTypeDef] = None
+
+
+class KmsGrantConfigurationOutputTypeDef(BaseValidatorModel):
+    operations: List[KmsGrantOperationType]
+    granteePrincipal: str
+    issuingAccount: str
+    retiringPrincipal: Optional[str] = None
+    constraints: Optional[KmsGrantConstraintsOutputTypeDef] = None
+
+
+KmsGrantConstraintsUnionTypeDef = Union[KmsGrantConstraintsOutputTypeDef, KmsGrantConstraintsTypeDef]
+
+
+# This class is the output for the 'list_policy_generations' function.
+class ListPolicyGenerationsResponseTypeDef(BaseValidatorModel):
+    policyGenerations: List[PolicyGenerationTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+class NetworkOriginConfigurationOutputTypeDef(BaseValidatorModel):
+    vpcConfiguration: Optional[VpcConfigurationTypeDef] = None
+    internetConfiguration: Optional[Dict[str, Any]] = None
+
+
+class NetworkOriginConfigurationTypeDef(BaseValidatorModel):
+    vpcConfiguration: Optional[VpcConfigurationTypeDef] = None
+    internetConfiguration: Optional[Dict[str, Any]] = None
+
+
+class PathElementTypeDef(BaseValidatorModel):
+    index: Optional[int] = None
+    key: Optional[str] = None
+    substring: Optional[SubstringTypeDef] = None
+    value: Optional[str] = None
+
+
+class SpanTypeDef(BaseValidatorModel):
+    start: PositionTypeDef
+    end: PositionTypeDef
+
+
+class RdsDbClusterSnapshotConfigurationOutputTypeDef(BaseValidatorModel):
+    attributes: Optional[Dict[str, RdsDbClusterSnapshotAttributeValueOutputTypeDef]] = None
+    kmsKeyId: Optional[str] = None
+
+
+RdsDbClusterSnapshotAttributeValueUnionTypeDef = Union[
+    RdsDbClusterSnapshotAttributeValueOutputTypeDef, RdsDbClusterSnapshotAttributeValueTypeDef
+]
+
+
+class RdsDbSnapshotConfigurationOutputTypeDef(BaseValidatorModel):
+    attributes: Optional[Dict[str, RdsDbSnapshotAttributeValueOutputTypeDef]] = None
+    kmsKeyId: Optional[str] = None
+
+
+RdsDbSnapshotAttributeValueUnionTypeDef = Union[
+    RdsDbSnapshotAttributeValueOutputTypeDef, RdsDbSnapshotAttributeValueTypeDef
+]
+
+
+class RecommendedStepTypeDef(BaseValidatorModel):
+    unusedPermissionsRecommendedStep: Optional[UnusedPermissionsRecommendedStepTypeDef] = None
+
+
+class UnusedAccessFindingsStatisticsTypeDef(BaseValidatorModel):
+    unusedAccessTypeStatistics: Optional[List[UnusedAccessTypeStatisticsTypeDef]] = None
+    topAccounts: Optional[List[FindingAggregationAccountDetailsTypeDef]] = None
+    totalActiveFindings: Optional[int] = None
+    totalArchivedFindings: Optional[int] = None
+    totalResolvedFindings: Optional[int] = None
+
+
+class UnusedPermissionDetailsTypeDef(BaseValidatorModel):
+    serviceNamespace: str
+    actions: Optional[List[UnusedActionTypeDef]] = None
+    lastAccessed: Optional[datetime] = None
+
+
+# This class is the output for the 'list_access_previews' function.
+class ListAccessPreviewsResponseTypeDef(BaseValidatorModel):
+    accessPreviews: List[AccessPreviewSummaryTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+class UnusedAccessConfigurationOutputTypeDef(BaseValidatorModel):
+    unusedAccessAge: Optional[int] = None
+    analysisRule: Optional[AnalysisRuleOutputTypeDef] = None
+
+
+class UnusedAccessConfigurationTypeDef(BaseValidatorModel):
+    unusedAccessAge: Optional[int] = None
+    analysisRule: Optional[AnalysisRuleTypeDef] = None
+
+
+# This class is the output for the 'get_archive_rule' function.
+class GetArchiveRuleResponseTypeDef(BaseValidatorModel):
+    archiveRule: ArchiveRuleSummaryTypeDef
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'list_archive_rules' function.
+class ListArchiveRulesResponseTypeDef(BaseValidatorModel):
+    archiveRules: List[ArchiveRuleSummaryTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+# This class is the input for the 'start_policy_generation' function.
+class StartPolicyGenerationRequestTypeDef(BaseValidatorModel):
+    policyGenerationDetails: PolicyGenerationDetailsTypeDef
+    cloudTrailDetails: Optional[CloudTrailDetailsTypeDef] = None
+    clientToken: Optional[str] = None
+
+
+class GeneratedPolicyPropertiesTypeDef(BaseValidatorModel):
+    principalArn: str
+    isComplete: Optional[bool] = None
+    cloudTrailProperties: Optional[CloudTrailPropertiesTypeDef] = None
+
+
+# This class is the input for the 'create_archive_rule' function.
+class CreateArchiveRuleRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+    ruleName: str
+    filter: Dict[str, CriterionUnionTypeDef]
+    clientToken: Optional[str] = None
+
+
+class InlineArchiveRuleTypeDef(BaseValidatorModel):
+    ruleName: str
+    filter: Dict[str, CriterionUnionTypeDef]
+
+
+class ListAccessPreviewFindingsRequestPaginateTypeDef(BaseValidatorModel):
+    accessPreviewId: str
+    analyzerArn: str
+    filter: Optional[Dict[str, CriterionUnionTypeDef]] = None
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+# This class is the input for the 'list_access_preview_findings' function.
+class ListAccessPreviewFindingsRequestTypeDef(BaseValidatorModel):
+    accessPreviewId: str
+    analyzerArn: str
+    filter: Optional[Dict[str, CriterionUnionTypeDef]] = None
+    nextToken: Optional[str] = None
+    maxResults: Optional[int] = None
+
+
+class ListFindingsRequestPaginateTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    filter: Optional[Dict[str, CriterionUnionTypeDef]] = None
+    sort: Optional[SortCriteriaTypeDef] = None
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+# This class is the input for the 'list_findings' function.
+class ListFindingsRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    filter: Optional[Dict[str, CriterionUnionTypeDef]] = None
+    sort: Optional[SortCriteriaTypeDef] = None
+    nextToken: Optional[str] = None
+    maxResults: Optional[int] = None
+
+
+class ListFindingsV2RequestPaginateTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    filter: Optional[Dict[str, CriterionUnionTypeDef]] = None
+    sort: Optional[SortCriteriaTypeDef] = None
+    PaginationConfig: Optional[PaginatorConfigTypeDef] = None
+
+
+# This class is the input for the 'list_findings_v2' function.
+class ListFindingsV2RequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    filter: Optional[Dict[str, CriterionUnionTypeDef]] = None
+    maxResults: Optional[int] = None
+    nextToken: Optional[str] = None
+    sort: Optional[SortCriteriaTypeDef] = None
+
+
+# This class is the input for the 'update_archive_rule' function.
+class UpdateArchiveRuleRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+    ruleName: str
+    filter: Dict[str, CriterionUnionTypeDef]
+    clientToken: Optional[str] = None
+
+
+class AccessPreviewFindingTypeDef(BaseValidatorModel):
+    id: str
+    resourceType: ResourceTypeType
+    createdAt: datetime
+    changeType: FindingChangeTypeType
+    status: FindingStatusType
+    resourceOwnerAccount: str
+    existingFindingId: Optional[str] = None
+    existingFindingStatus: Optional[FindingStatusType] = None
+    principal: Optional[Dict[str, str]] = None
+    action: Optional[List[str]] = None
+    condition: Optional[Dict[str, str]] = None
+    resource: Optional[str] = None
+    isPublic: Optional[bool] = None
+    error: Optional[str] = None
+    sources: Optional[List[FindingSourceTypeDef]] = None
+    resourceControlPolicyRestriction: Optional[ResourceControlPolicyRestrictionType] = None
+
+
+class ExternalAccessDetailsTypeDef(BaseValidatorModel):
+    condition: Dict[str, str]
+    action: Optional[List[str]] = None
+    isPublic: Optional[bool] = None
+    principal: Optional[Dict[str, str]] = None
+    sources: Optional[List[FindingSourceTypeDef]] = None
+    resourceControlPolicyRestriction: Optional[ResourceControlPolicyRestrictionType] = None
+
+
+class FindingSummaryTypeDef(BaseValidatorModel):
+    id: str
+    resourceType: ResourceTypeType
+    condition: Dict[str, str]
+    createdAt: datetime
+    analyzedAt: datetime
+    updatedAt: datetime
+    status: FindingStatusType
+    resourceOwnerAccount: str
+    principal: Optional[Dict[str, str]] = None
+    action: Optional[List[str]] = None
+    resource: Optional[str] = None
+    isPublic: Optional[bool] = None
+    error: Optional[str] = None
+    sources: Optional[List[FindingSourceTypeDef]] = None
+    resourceControlPolicyRestriction: Optional[ResourceControlPolicyRestrictionType] = None
+
+
+class FindingTypeDef(BaseValidatorModel):
+    id: str
+    resourceType: ResourceTypeType
+    condition: Dict[str, str]
+    createdAt: datetime
+    analyzedAt: datetime
+    updatedAt: datetime
+    status: FindingStatusType
+    resourceOwnerAccount: str
+    principal: Optional[Dict[str, str]] = None
+    action: Optional[List[str]] = None
+    resource: Optional[str] = None
+    isPublic: Optional[bool] = None
+    error: Optional[str] = None
+    sources: Optional[List[FindingSourceTypeDef]] = None
+    resourceControlPolicyRestriction: Optional[ResourceControlPolicyRestrictionType] = None
+
+
+class InternalAccessDetailsTypeDef(BaseValidatorModel):
+    action: Optional[List[str]] = None
+    condition: Optional[Dict[str, str]] = None
+    principal: Optional[Dict[str, str]] = None
+    principalOwnerAccount: Optional[str] = None
+    accessType: Optional[InternalAccessTypeType] = None
+    principalType: Optional[PrincipalTypeType] = None
+    sources: Optional[List[FindingSourceTypeDef]] = None
+    resourceControlPolicyRestriction: Optional[ResourceControlPolicyRestrictionType] = None
+    serviceControlPolicyRestriction: Optional[ServiceControlPolicyRestrictionType] = None
+
+
+class InternalAccessConfigurationOutputTypeDef(BaseValidatorModel):
+    analysisRule: Optional[InternalAccessAnalysisRuleOutputTypeDef] = None
+
+
+class InternalAccessConfigurationTypeDef(BaseValidatorModel):
+    analysisRule: Optional[InternalAccessAnalysisRuleTypeDef] = None
+
+
+class KmsKeyConfigurationOutputTypeDef(BaseValidatorModel):
+    keyPolicies: Optional[Dict[str, str]] = None
+    grants: Optional[List[KmsGrantConfigurationOutputTypeDef]] = None
+
+
+class KmsGrantConfigurationTypeDef(BaseValidatorModel):
+    operations: List[KmsGrantOperationType]
+    granteePrincipal: str
+    issuingAccount: str
+    retiringPrincipal: Optional[str] = None
+    constraints: Optional[KmsGrantConstraintsUnionTypeDef] = None
+
+
+class S3AccessPointConfigurationOutputTypeDef(BaseValidatorModel):
+    accessPointPolicy: Optional[str] = None
+    publicAccessBlock: Optional[S3PublicAccessBlockConfigurationTypeDef] = None
+    networkOrigin: Optional[NetworkOriginConfigurationOutputTypeDef] = None
+
+
+class S3ExpressDirectoryAccessPointConfigurationOutputTypeDef(BaseValidatorModel):
+    accessPointPolicy: Optional[str] = None
+    networkOrigin: Optional[NetworkOriginConfigurationOutputTypeDef] = None
+
+
+NetworkOriginConfigurationUnionTypeDef = Union[
+    NetworkOriginConfigurationOutputTypeDef, NetworkOriginConfigurationTypeDef
+]
+
+
+class LocationTypeDef(BaseValidatorModel):
+    path: List[PathElementTypeDef]
+    span: SpanTypeDef
+
+
+class RdsDbClusterSnapshotConfigurationTypeDef(BaseValidatorModel):
+    attributes: Optional[Dict[str, RdsDbClusterSnapshotAttributeValueUnionTypeDef]] = None
+    kmsKeyId: Optional[str] = None
+
+
+class RdsDbSnapshotConfigurationTypeDef(BaseValidatorModel):
+    attributes: Optional[Dict[str, RdsDbSnapshotAttributeValueUnionTypeDef]] = None
+    kmsKeyId: Optional[str] = None
+
+
+# This class is the output for the 'get_finding_recommendation' function.
+class GetFindingRecommendationResponseTypeDef(BaseValidatorModel):
+    startedAt: datetime
+    completedAt: datetime
+    error: RecommendationErrorTypeDef
+    resourceArn: str
+    recommendedSteps: List[RecommendedStepTypeDef]
+    recommendationType: Literal["UnusedPermissionRecommendation"]
+    status: StatusType
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+class FindingsStatisticsTypeDef(BaseValidatorModel):
+    externalAccessFindingsStatistics: Optional[ExternalAccessFindingsStatisticsTypeDef] = None
+    internalAccessFindingsStatistics: Optional[InternalAccessFindingsStatisticsTypeDef] = None
+    unusedAccessFindingsStatistics: Optional[UnusedAccessFindingsStatisticsTypeDef] = None
+
+
+class GeneratedPolicyResultTypeDef(BaseValidatorModel):
+    properties: GeneratedPolicyPropertiesTypeDef
+    generatedPolicies: Optional[List[GeneratedPolicyTypeDef]] = None
+
+
+# This class is the output for the 'list_access_preview_findings' function.
+class ListAccessPreviewFindingsResponseTypeDef(BaseValidatorModel):
+    findings: List[AccessPreviewFindingTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+# This class is the output for the 'list_findings' function.
+class ListFindingsResponseTypeDef(BaseValidatorModel):
+    findings: List[FindingSummaryTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+# This class is the output for the 'get_finding' function.
+class GetFindingResponseTypeDef(BaseValidatorModel):
+    finding: FindingTypeDef
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+class FindingDetailsTypeDef(BaseValidatorModel):
+    internalAccessDetails: Optional[InternalAccessDetailsTypeDef] = None
+    externalAccessDetails: Optional[ExternalAccessDetailsTypeDef] = None
+    unusedPermissionDetails: Optional[UnusedPermissionDetailsTypeDef] = None
+    unusedIamUserAccessKeyDetails: Optional[UnusedIamUserAccessKeyDetailsTypeDef] = None
+    unusedIamRoleDetails: Optional[UnusedIamRoleDetailsTypeDef] = None
+    unusedIamUserPasswordDetails: Optional[UnusedIamUserPasswordDetailsTypeDef] = None
+
+
+class AnalyzerConfigurationOutputTypeDef(BaseValidatorModel):
+    unusedAccess: Optional[UnusedAccessConfigurationOutputTypeDef] = None
+    internalAccess: Optional[InternalAccessConfigurationOutputTypeDef] = None
+
+
+class AnalyzerConfigurationTypeDef(BaseValidatorModel):
+    unusedAccess: Optional[UnusedAccessConfigurationTypeDef] = None
+    internalAccess: Optional[InternalAccessConfigurationTypeDef] = None
+
+
+KmsGrantConfigurationUnionTypeDef = Union[KmsGrantConfigurationOutputTypeDef, KmsGrantConfigurationTypeDef]
+
+
+class S3BucketConfigurationOutputTypeDef(BaseValidatorModel):
+    bucketPolicy: Optional[str] = None
+    bucketAclGrants: Optional[List[S3BucketAclGrantConfigurationTypeDef]] = None
+    bucketPublicAccessBlock: Optional[S3PublicAccessBlockConfigurationTypeDef] = None
+    accessPoints: Optional[Dict[str, S3AccessPointConfigurationOutputTypeDef]] = None
+
+
+class S3ExpressDirectoryBucketConfigurationOutputTypeDef(BaseValidatorModel):
+    bucketPolicy: Optional[str] = None
+    accessPoints: Optional[Dict[str, S3ExpressDirectoryAccessPointConfigurationOutputTypeDef]] = None
+
+
+class S3AccessPointConfigurationTypeDef(BaseValidatorModel):
+    accessPointPolicy: Optional[str] = None
+    publicAccessBlock: Optional[S3PublicAccessBlockConfigurationTypeDef] = None
+    networkOrigin: Optional[NetworkOriginConfigurationUnionTypeDef] = None
+
+
+class S3ExpressDirectoryAccessPointConfigurationTypeDef(BaseValidatorModel):
+    accessPointPolicy: Optional[str] = None
+    networkOrigin: Optional[NetworkOriginConfigurationUnionTypeDef] = None
+
+
+class ValidatePolicyFindingTypeDef(BaseValidatorModel):
+    findingDetails: str
+    findingType: ValidatePolicyFindingTypeType
+    issueCode: str
+    learnMoreLink: str
+    locations: List[LocationTypeDef]
+
+
+RdsDbClusterSnapshotConfigurationUnionTypeDef = Union[
+    RdsDbClusterSnapshotConfigurationOutputTypeDef, RdsDbClusterSnapshotConfigurationTypeDef
+]
+
+RdsDbSnapshotConfigurationUnionTypeDef = Union[
+    RdsDbSnapshotConfigurationOutputTypeDef, RdsDbSnapshotConfigurationTypeDef
+]
+
+
+# This class is the output for the 'get_findings_statistics' function.
+class GetFindingsStatisticsResponseTypeDef(BaseValidatorModel):
+    findingsStatistics: List[FindingsStatisticsTypeDef]
+    lastUpdatedAt: datetime
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'get_generated_policy' function.
+class GetGeneratedPolicyResponseTypeDef(BaseValidatorModel):
+    jobDetails: JobDetailsTypeDef
+    generatedPolicyResult: GeneratedPolicyResultTypeDef
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'get_finding_v2' function.
+class GetFindingV2ResponseTypeDef(BaseValidatorModel):
+    analyzedAt: datetime
+    createdAt: datetime
+    error: str
+    id: str
+    resource: str
+    resourceType: ResourceTypeType
+    resourceOwnerAccount: str
+    status: FindingStatusType
+    updatedAt: datetime
+    findingDetails: List[FindingDetailsTypeDef]
+    findingType: FindingTypeType
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+class AnalyzerSummaryTypeDef(BaseValidatorModel):
+    arn: str
+    name: str
+    type: TypeType
+    createdAt: datetime
+    status: AnalyzerStatusType
+    lastResourceAnalyzed: Optional[str] = None
+    lastResourceAnalyzedAt: Optional[datetime] = None
+    tags: Optional[Dict[str, str]] = None
+    statusReason: Optional[StatusReasonTypeDef] = None
+    configuration: Optional[AnalyzerConfigurationOutputTypeDef] = None
+
+
+# This class is the output for the 'update_analyzer' function.
+class UpdateAnalyzerResponseTypeDef(BaseValidatorModel):
+    configuration: AnalyzerConfigurationOutputTypeDef
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+AnalyzerConfigurationUnionTypeDef = Union[AnalyzerConfigurationOutputTypeDef, AnalyzerConfigurationTypeDef]
+
+
+class KmsKeyConfigurationTypeDef(BaseValidatorModel):
+    keyPolicies: Optional[Dict[str, str]] = None
+    grants: Optional[List[KmsGrantConfigurationUnionTypeDef]] = None
+
+
+class ConfigurationOutputTypeDef(BaseValidatorModel):
+    ebsSnapshot: Optional[EbsSnapshotConfigurationOutputTypeDef] = None
+    ecrRepository: Optional[EcrRepositoryConfigurationTypeDef] = None
+    iamRole: Optional[IamRoleConfigurationTypeDef] = None
+    efsFileSystem: Optional[EfsFileSystemConfigurationTypeDef] = None
+    kmsKey: Optional[KmsKeyConfigurationOutputTypeDef] = None
+    rdsDbClusterSnapshot: Optional[RdsDbClusterSnapshotConfigurationOutputTypeDef] = None
+    rdsDbSnapshot: Optional[RdsDbSnapshotConfigurationOutputTypeDef] = None
+    secretsManagerSecret: Optional[SecretsManagerSecretConfigurationTypeDef] = None
+    s3Bucket: Optional[S3BucketConfigurationOutputTypeDef] = None
+    snsTopic: Optional[SnsTopicConfigurationTypeDef] = None
+    sqsQueue: Optional[SqsQueueConfigurationTypeDef] = None
+    s3ExpressDirectoryBucket: Optional[S3ExpressDirectoryBucketConfigurationOutputTypeDef] = None
+    dynamodbStream: Optional[DynamodbStreamConfigurationTypeDef] = None
+    dynamodbTable: Optional[DynamodbTableConfigurationTypeDef] = None
+
+
+S3AccessPointConfigurationUnionTypeDef = Union[
+    S3AccessPointConfigurationOutputTypeDef, S3AccessPointConfigurationTypeDef
+]
+
+S3ExpressDirectoryAccessPointConfigurationUnionTypeDef = Union[
+    S3ExpressDirectoryAccessPointConfigurationOutputTypeDef, S3ExpressDirectoryAccessPointConfigurationTypeDef
+]
+
+
+# This class is the output for the 'validate_policy' function.
+class ValidatePolicyResponseTypeDef(BaseValidatorModel):
+    findings: List[ValidatePolicyFindingTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+# This class is the output for the 'get_analyzer' function.
+class GetAnalyzerResponseTypeDef(BaseValidatorModel):
+    analyzer: AnalyzerSummaryTypeDef
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+# This class is the output for the 'list_analyzers' function.
+class ListAnalyzersResponseTypeDef(BaseValidatorModel):
+    analyzers: List[AnalyzerSummaryTypeDef]
+    ResponseMetadata: ResponseMetadataTypeDef
+    nextToken: Optional[str] = None
+
+
+# This class is the input for the 'create_analyzer' function.
+class CreateAnalyzerRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+    type: TypeType
+    archiveRules: Optional[List[InlineArchiveRuleTypeDef]] = None
+    tags: Optional[Dict[str, str]] = None
+    clientToken: Optional[str] = None
+    configuration: Optional[AnalyzerConfigurationUnionTypeDef] = None
+
+
+# This class is the input for the 'update_analyzer' function.
+class UpdateAnalyzerRequestTypeDef(BaseValidatorModel):
+    analyzerName: str
+    configuration: Optional[AnalyzerConfigurationUnionTypeDef] = None
+
+
+KmsKeyConfigurationUnionTypeDef = Union[KmsKeyConfigurationOutputTypeDef, KmsKeyConfigurationTypeDef]
+
+
+class AccessPreviewTypeDef(BaseValidatorModel):
+    id: str
+    analyzerArn: str
+    configurations: Dict[str, ConfigurationOutputTypeDef]
+    createdAt: datetime
+    status: AccessPreviewStatusType
+    statusReason: Optional[AccessPreviewStatusReasonTypeDef] = None
+
+
+class S3BucketConfigurationTypeDef(BaseValidatorModel):
+    bucketPolicy: Optional[str] = None
+    bucketAclGrants: Optional[List[S3BucketAclGrantConfigurationTypeDef]] = None
+    bucketPublicAccessBlock: Optional[S3PublicAccessBlockConfigurationTypeDef] = None
+    accessPoints: Optional[Dict[str, S3AccessPointConfigurationUnionTypeDef]] = None
+
+
+class S3ExpressDirectoryBucketConfigurationTypeDef(BaseValidatorModel):
+    bucketPolicy: Optional[str] = None
+    accessPoints: Optional[Dict[str, S3ExpressDirectoryAccessPointConfigurationUnionTypeDef]] = None
+
+
+# This class is the output for the 'get_access_preview' function.
+class GetAccessPreviewResponseTypeDef(BaseValidatorModel):
+    accessPreview: AccessPreviewTypeDef
+    ResponseMetadata: ResponseMetadataTypeDef
+
+
+S3BucketConfigurationUnionTypeDef = Union[S3BucketConfigurationOutputTypeDef, S3BucketConfigurationTypeDef]
+
+S3ExpressDirectoryBucketConfigurationUnionTypeDef = Union[
+    S3ExpressDirectoryBucketConfigurationOutputTypeDef, S3ExpressDirectoryBucketConfigurationTypeDef
+]
+
+
+class ConfigurationTypeDef(BaseValidatorModel):
+    ebsSnapshot: Optional[EbsSnapshotConfigurationUnionTypeDef] = None
+    ecrRepository: Optional[EcrRepositoryConfigurationTypeDef] = None
+    iamRole: Optional[IamRoleConfigurationTypeDef] = None
+    efsFileSystem: Optional[EfsFileSystemConfigurationTypeDef] = None
+    kmsKey: Optional[KmsKeyConfigurationUnionTypeDef] = None
+    rdsDbClusterSnapshot: Optional[RdsDbClusterSnapshotConfigurationUnionTypeDef] = None
+    rdsDbSnapshot: Optional[RdsDbSnapshotConfigurationUnionTypeDef] = None
+    secretsManagerSecret: Optional[SecretsManagerSecretConfigurationTypeDef] = None
+    s3Bucket: Optional[S3BucketConfigurationUnionTypeDef] = None
+    snsTopic: Optional[SnsTopicConfigurationTypeDef] = None
+    sqsQueue: Optional[SqsQueueConfigurationTypeDef] = None
+    s3ExpressDirectoryBucket: Optional[S3ExpressDirectoryBucketConfigurationUnionTypeDef] = None
+    dynamodbStream: Optional[DynamodbStreamConfigurationTypeDef] = None
+    dynamodbTable: Optional[DynamodbTableConfigurationTypeDef] = None
+
+
+ConfigurationUnionTypeDef = Union[ConfigurationOutputTypeDef, ConfigurationTypeDef]
+
+
+# This class is the input for the 'create_access_preview' function.
+class CreateAccessPreviewRequestTypeDef(BaseValidatorModel):
+    analyzerArn: str
+    configurations: Dict[str, ConfigurationUnionTypeDef]
+    clientToken: Optional[str] = None