Hi there! Are you looking for the official Deno documentation? Try docs.deno.com for all your Deno learning needs.

Usage

import * as mod from "https://aws-api.deno.dev/v0.3/services/accessanalyzer.ts?docs=full";

§Classes

AccessAnalyzer

§Interfaces

AccessPreview

Contains information about an access preview.

AccessPreviewFinding

An access preview finding generated by the access preview.

AccessPreviewStatusReason

Provides more details about the current status of the access preview. For example, if the creation of the access preview fails, a Failed status is returned. This failure can be due to an internal issue with the analysis or due to an invalid proposed resource configuration.

AccessPreviewSummary

Contains a summary of information about an access preview.

AclGrantee

You specify each grantee as a type-value pair using one of these types. You can specify only one type of grantee. For more information, see PutBucketAcl.

AnalyzedResource

Contains details about the analyzed resource.

AnalyzedResourceSummary

Contains the ARN of the analyzed resource.

AnalyzerSummary

Contains information about the analyzer.

ApplyArchiveRuleRequest

Retroactively applies an archive rule.

ArchiveRuleSummary

Contains information about an archive rule.

CancelPolicyGenerationRequest
CloudTrailDetails

Contains information about CloudTrail access.

CloudTrailProperties

Contains information about CloudTrail access.

Configuration

Access control configuration structures for your resource. You specify the configuration as a type-value pair. You can specify only one type of access control configuration.

CreateAccessPreviewRequest
CreateAccessPreviewResponse
CreateAnalyzerRequest

Creates an analyzer.

CreateAnalyzerResponse

The response to the request to create an analyzer.

CreateArchiveRuleRequest

Creates an archive rule.

Criterion

The criteria to use in the filter that defines the archive rule.

DeleteAnalyzerRequest

Deletes an analyzer.

DeleteArchiveRuleRequest

Deletes an archive rule.

Finding

Contains information about a finding.

FindingSource

The source of the finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.

FindingSourceDetail

Includes details about how the access that generated the finding is granted. This is populated for Amazon S3 bucket findings.

FindingSummary

Contains information about a finding.

GeneratedPolicy

Contains the text for the generated policy.

GeneratedPolicyProperties

Contains the generated policy details.

GeneratedPolicyResult

Contains the text for the generated policy and its details.

GetAccessPreviewRequest
GetAccessPreviewResponse
GetAnalyzedResourceRequest

Retrieves an analyzed resource.

GetAnalyzedResourceResponse

The response to the request.

GetAnalyzerRequest

Retrieves an analyzer.

GetAnalyzerResponse

The response to the request.

GetArchiveRuleRequest

Retrieves an archive rule.

GetArchiveRuleResponse

The response to the request.

GetFindingRequest

Retrieves a finding.

GetFindingResponse

The response to the request.

GetGeneratedPolicyRequest
GetGeneratedPolicyResponse
IamRoleConfiguration

The proposed access control configuration for an IAM role. You can propose a configuration for a new IAM role or an existing IAM role that you own by specifying the trust policy. If the configuration is for a new IAM role, you must specify the trust policy. If the configuration is for an existing IAM role that you own and you do not propose the trust policy, the access preview uses the existing trust policy for the role. The proposed trust policy cannot be an empty string. For more information about role trust policy limits, see IAM and STS quotas.

InlineArchiveRule

An criterion statement in an archive rule. Each archive rule may have multiple criteria.

InternetConfiguration

This configuration sets the network origin for the Amazon S3 access point or multi-region access point to Internet.

JobDetails

Contains details about the policy generation request.

JobError

Contains the details about the policy generation error.

KmsGrantConfiguration

A proposed grant configuration for a KMS key. For more information, see CreateGrant.

KmsGrantConstraints

Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context. You can specify only one type of encryption context. An empty map is treated as not specified. For more information, see GrantConstraints.

KmsKeyConfiguration

Proposed access control configuration for a KMS key. You can propose a configuration for a new KMS key or an existing KMS key that you own by specifying the key policy and KMS grant configuration. If the configuration is for an existing key and you do not specify the key policy, the access preview uses the existing policy for the key. If the access preview is for a new resource and you do not specify the key policy, then the access preview uses the default key policy. The proposed key policy cannot be an empty string. For more information, see Default key policy. For more information about key policy limits, see Resource quotas.

ListAccessPreviewFindingsRequest
ListAccessPreviewFindingsResponse
ListAccessPreviewsRequest
ListAccessPreviewsResponse
ListAnalyzedResourcesRequest

Retrieves a list of resources that have been analyzed.

ListAnalyzedResourcesResponse

The response to the request.

ListAnalyzersRequest

Retrieves a list of analyzers.

ListAnalyzersResponse

The response to the request.

ListArchiveRulesRequest

Retrieves a list of archive rules created for the specified analyzer.

ListArchiveRulesResponse

The response to the request.

ListFindingsRequest

Retrieves a list of findings generated by the specified analyzer.

ListFindingsResponse

The response to the request.

ListPolicyGenerationsRequest
ListPolicyGenerationsResponse
ListTagsForResourceRequest

Retrieves a list of tags applied to the specified resource.

ListTagsForResourceResponse

The response to the request.

Location

A location in a policy that is represented as a path through the JSON representation and a corresponding span.

NetworkOriginConfiguration

The proposed InternetConfiguration or VpcConfiguration to apply to the Amazon S3 access point. VpcConfiguration does not apply to multi-region access points. You can make the access point accessible from the internet, or you can specify that all requests made through that access point must originate from a specific virtual private cloud (VPC). You can specify only one type of network configuration. For more information, see Creating access points.

PathElement

A single element in a path through the JSON representation of a policy.

PolicyGeneration

Contains details about the policy generation status and properties.

PolicyGenerationDetails

Contains the ARN details about the IAM entity for which the policy is generated.

Position

A position in a policy.

S3AccessPointConfiguration

The configuration for an Amazon S3 access point or multi-region access point for the bucket. You can propose up to 10 access points or multi-region access points per bucket. If the proposed Amazon S3 access point configuration is for an existing bucket, the access preview uses the proposed access point configuration in place of the existing access points. To propose an access point without a policy, you can provide an empty string as the access point policy. For more information, see Creating access points. For more information about access point policy limits, see Access points restrictions and limitations.

S3BucketAclGrantConfiguration

A proposed access control list grant configuration for an Amazon S3 bucket. For more information, see How to Specify an ACL.

S3BucketConfiguration

Proposed access control configuration for an Amazon S3 bucket. You can propose a configuration for a new Amazon S3 bucket or an existing Amazon S3 bucket that you own by specifying the Amazon S3 bucket policy, bucket ACLs, bucket BPA settings, Amazon S3 access points, and multi-region access points attached to the bucket. If the configuration is for an existing Amazon S3 bucket and you do not specify the Amazon S3 bucket policy, the access preview uses the existing policy attached to the bucket. If the access preview is for a new resource and you do not specify the Amazon S3 bucket policy, the access preview assumes a bucket without a policy. To propose deletion of an existing bucket policy, you can specify an empty string. For more information about bucket policy limits, see Bucket Policy Examples.

S3PublicAccessBlockConfiguration

The PublicAccessBlock configuration to apply to this Amazon S3 bucket. If the proposed configuration is for an existing Amazon S3 bucket and the configuration is not specified, the access preview uses the existing setting. If the proposed configuration is for a new bucket and the configuration is not specified, the access preview uses false. If the proposed configuration is for a new access point or multi-region access point and the access point BPA configuration is not specified, the access preview uses true. For more information, see PublicAccessBlockConfiguration.

SecretsManagerSecretConfiguration

The configuration for a Secrets Manager secret. For more information, see CreateSecret.

SortCriteria

The criteria used to sort.

Span

A span in a policy. The span consists of a start position (inclusive) and end position (exclusive).

SqsQueueConfiguration

The proposed access control configuration for an Amazon SQS queue. You can propose a configuration for a new Amazon SQS queue or an existing Amazon SQS queue that you own by specifying the Amazon SQS policy. If the configuration is for an existing Amazon SQS queue and you do not specify the Amazon SQS policy, the access preview uses the existing Amazon SQS policy for the queue. If the access preview is for a new resource and you do not specify the policy, the access preview assumes an Amazon SQS queue without a policy. To propose deletion of an existing Amazon SQS queue policy, you can specify an empty string for the Amazon SQS policy. For more information about Amazon SQS policy limits, see Quotas related to policies.

StartPolicyGenerationRequest
StartPolicyGenerationResponse
StartResourceScanRequest

Starts a scan of the policies applied to the specified resource.

StatusReason

Provides more details about the current status of the analyzer. For example, if the creation for the analyzer fails, a Failed status is returned. For an analyzer with organization as the type, this failure can be due to an issue with creating the service-linked roles required in the member accounts of the Amazon Web Services organization.

Substring

A reference to a substring of a literal string in a JSON document.

TagResourceRequest

Adds a tag to the specified resource.

Trail

Contains details about the CloudTrail trail being analyzed to generate a policy.

TrailProperties

Contains details about the CloudTrail trail being analyzed to generate a policy.

UntagResourceRequest

Removes a tag from the specified resource.

UpdateArchiveRuleRequest

Updates the specified archive rule.

UpdateFindingsRequest

Updates findings with the new values provided in the request.

ValidatePolicyFinding

A finding in a policy. Each finding is an actionable recommendation that can be used to improve the policy.

ValidatePolicyRequest
ValidatePolicyResponse
VpcConfiguration

The proposed virtual private cloud (VPC) configuration for the Amazon S3 access point. VPC configuration does not apply to multi-region access points. For more information, see VpcConfiguration.

§Type Aliases

AccessPreviewStatus
AccessPreviewStatusReasonCode
AclPermission
AnalyzerStatus
FindingChangeType
FindingSourceType
FindingStatus
FindingStatusUpdate
JobErrorCode
JobStatus
KmsGrantOperation
Locale
OrderBy
PolicyType
ReasonCode
ResourceType
Type
ValidatePolicyFindingType
ValidatePolicyResourceType