@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AbstractAWSAccessAnalyzer extends Object implements AWSAccessAnalyzer
AWSAccessAnalyzer. Convenient method forms pass through to the corresponding
overload that takes a request object, which throws an UnsupportedOperationException.ENDPOINT_PREFIX| Modifier and Type | Method and Description |
|---|---|
ApplyArchiveRuleResult |
applyArchiveRule(ApplyArchiveRuleRequest request)
Retroactively applies the archive rule to existing findings that meet the archive rule criteria.
|
CancelPolicyGenerationResult |
cancelPolicyGeneration(CancelPolicyGenerationRequest request)
Cancels the requested policy generation.
|
CheckAccessNotGrantedResult |
checkAccessNotGranted(CheckAccessNotGrantedRequest request)
Checks whether the specified access isn't allowed by a policy.
|
CheckNoNewAccessResult |
checkNoNewAccess(CheckNoNewAccessRequest request)
Checks whether new access is allowed for an updated policy when compared to the existing policy.
|
CheckNoPublicAccessResult |
checkNoPublicAccess(CheckNoPublicAccessRequest request)
Checks whether a resource policy can grant public access to the specified resource type.
|
CreateAccessPreviewResult |
createAccessPreview(CreateAccessPreviewRequest request)
Creates an access preview that allows you to preview IAM Access Analyzer findings for your resource before
deploying resource permissions.
|
CreateAnalyzerResult |
createAnalyzer(CreateAnalyzerRequest request)
Creates an analyzer for your account.
|
CreateArchiveRuleResult |
createArchiveRule(CreateArchiveRuleRequest request)
Creates an archive rule for the specified analyzer.
|
DeleteAnalyzerResult |
deleteAnalyzer(DeleteAnalyzerRequest request)
Deletes the specified analyzer.
|
DeleteArchiveRuleResult |
deleteArchiveRule(DeleteArchiveRuleRequest request)
Deletes the specified archive rule.
|
GenerateFindingRecommendationResult |
generateFindingRecommendation(GenerateFindingRecommendationRequest request)
Creates a recommendation for an unused permissions finding.
|
GetAccessPreviewResult |
getAccessPreview(GetAccessPreviewRequest request)
Retrieves information about an access preview for the specified analyzer.
|
GetAnalyzedResourceResult |
getAnalyzedResource(GetAnalyzedResourceRequest request)
Retrieves information about a resource that was analyzed.
|
GetAnalyzerResult |
getAnalyzer(GetAnalyzerRequest request)
Retrieves information about the specified analyzer.
|
GetArchiveRuleResult |
getArchiveRule(GetArchiveRuleRequest request)
Retrieves information about an archive rule.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful request, typically used for debugging issues
where a service isn't acting as expected.
|
GetFindingResult |
getFinding(GetFindingRequest request)
Retrieves information about the specified finding.
|
GetFindingRecommendationResult |
getFindingRecommendation(GetFindingRecommendationRequest request)
Retrieves information about a finding recommendation for the specified analyzer.
|
GetFindingV2Result |
getFindingV2(GetFindingV2Request request)
Retrieves information about the specified finding.
|
GetGeneratedPolicyResult |
getGeneratedPolicy(GetGeneratedPolicyRequest request)
Retrieves the policy that was generated using
StartPolicyGeneration. |
ListAccessPreviewFindingsResult |
listAccessPreviewFindings(ListAccessPreviewFindingsRequest request)
Retrieves a list of access preview findings generated by the specified access preview.
|
ListAccessPreviewsResult |
listAccessPreviews(ListAccessPreviewsRequest request)
Retrieves a list of access previews for the specified analyzer.
|
ListAnalyzedResourcesResult |
listAnalyzedResources(ListAnalyzedResourcesRequest request)
Retrieves a list of resources of the specified type that have been analyzed by the specified external access
analyzer.
|
ListAnalyzersResult |
listAnalyzers(ListAnalyzersRequest request)
Retrieves a list of analyzers.
|
ListArchiveRulesResult |
listArchiveRules(ListArchiveRulesRequest request)
Retrieves a list of archive rules created for the specified analyzer.
|
ListFindingsResult |
listFindings(ListFindingsRequest request)
Retrieves a list of findings generated by the specified analyzer.
|
ListFindingsV2Result |
listFindingsV2(ListFindingsV2Request request)
Retrieves a list of findings generated by the specified analyzer.
|
ListPolicyGenerationsResult |
listPolicyGenerations(ListPolicyGenerationsRequest request)
Lists all of the policy generations requested in the last seven days.
|
ListTagsForResourceResult |
listTagsForResource(ListTagsForResourceRequest request)
Retrieves a list of tags applied to the specified resource.
|
void |
shutdown()
Shuts down this client object, releasing any resources that might be held open.
|
StartPolicyGenerationResult |
startPolicyGeneration(StartPolicyGenerationRequest request)
Starts the policy generation request.
|
StartResourceScanResult |
startResourceScan(StartResourceScanRequest request)
Immediately starts a scan of the policies applied to the specified resource.
|
TagResourceResult |
tagResource(TagResourceRequest request)
Adds a tag to the specified resource.
|
UntagResourceResult |
untagResource(UntagResourceRequest request)
Removes a tag from the specified resource.
|
UpdateArchiveRuleResult |
updateArchiveRule(UpdateArchiveRuleRequest request)
Updates the criteria and values for the specified archive rule.
|
UpdateFindingsResult |
updateFindings(UpdateFindingsRequest request)
Updates the status for the specified findings.
|
ValidatePolicyResult |
validatePolicy(ValidatePolicyRequest request)
Requests the validation of a policy and returns a list of findings.
|
public ApplyArchiveRuleResult applyArchiveRule(ApplyArchiveRuleRequest request)
AWSAccessAnalyzerRetroactively applies the archive rule to existing findings that meet the archive rule criteria.
applyArchiveRule in interface AWSAccessAnalyzerrequest - Retroactively applies an archive rule.public CancelPolicyGenerationResult cancelPolicyGeneration(CancelPolicyGenerationRequest request)
AWSAccessAnalyzerCancels the requested policy generation.
cancelPolicyGeneration in interface AWSAccessAnalyzerpublic CheckAccessNotGrantedResult checkAccessNotGranted(CheckAccessNotGrantedRequest request)
AWSAccessAnalyzerChecks whether the specified access isn't allowed by a policy.
checkAccessNotGranted in interface AWSAccessAnalyzerpublic CheckNoNewAccessResult checkNoNewAccess(CheckNoNewAccessRequest request)
AWSAccessAnalyzerChecks whether new access is allowed for an updated policy when compared to the existing policy.
You can find examples for reference policies and learn how to set up and run a custom policy check for new access
in the IAM Access
Analyzer custom policy checks samples repository on GitHub. The reference policies in this repository are
meant to be passed to the existingPolicyDocument request parameter.
checkNoNewAccess in interface AWSAccessAnalyzerpublic CheckNoPublicAccessResult checkNoPublicAccess(CheckNoPublicAccessRequest request)
AWSAccessAnalyzerChecks whether a resource policy can grant public access to the specified resource type.
checkNoPublicAccess in interface AWSAccessAnalyzerpublic CreateAccessPreviewResult createAccessPreview(CreateAccessPreviewRequest request)
AWSAccessAnalyzerCreates an access preview that allows you to preview IAM Access Analyzer findings for your resource before deploying resource permissions.
createAccessPreview in interface AWSAccessAnalyzerpublic CreateAnalyzerResult createAnalyzer(CreateAnalyzerRequest request)
AWSAccessAnalyzerCreates an analyzer for your account.
createAnalyzer in interface AWSAccessAnalyzerrequest - Creates an analyzer.public CreateArchiveRuleResult createArchiveRule(CreateArchiveRuleRequest request)
AWSAccessAnalyzerCreates an archive rule for the specified analyzer. Archive rules automatically archive new findings that meet the criteria you define when you create the rule.
To learn about filter keys that you can use to create an archive rule, see IAM Access Analyzer filter keys in the IAM User Guide.
createArchiveRule in interface AWSAccessAnalyzerrequest - Creates an archive rule.public DeleteAnalyzerResult deleteAnalyzer(DeleteAnalyzerRequest request)
AWSAccessAnalyzerDeletes the specified analyzer. When you delete an analyzer, IAM Access Analyzer is disabled for the account or organization in the current or specific Region. All findings that were generated by the analyzer are deleted. You cannot undo this action.
deleteAnalyzer in interface AWSAccessAnalyzerrequest - Deletes an analyzer.public DeleteArchiveRuleResult deleteArchiveRule(DeleteArchiveRuleRequest request)
AWSAccessAnalyzerDeletes the specified archive rule.
deleteArchiveRule in interface AWSAccessAnalyzerrequest - Deletes an archive rule.public GenerateFindingRecommendationResult generateFindingRecommendation(GenerateFindingRecommendationRequest request)
AWSAccessAnalyzerCreates a recommendation for an unused permissions finding.
generateFindingRecommendation in interface AWSAccessAnalyzerpublic GetAccessPreviewResult getAccessPreview(GetAccessPreviewRequest request)
AWSAccessAnalyzerRetrieves information about an access preview for the specified analyzer.
getAccessPreview in interface AWSAccessAnalyzerpublic GetAnalyzedResourceResult getAnalyzedResource(GetAnalyzedResourceRequest request)
AWSAccessAnalyzerRetrieves information about a resource that was analyzed.
getAnalyzedResource in interface AWSAccessAnalyzerrequest - Retrieves an analyzed resource.public GetAnalyzerResult getAnalyzer(GetAnalyzerRequest request)
AWSAccessAnalyzerRetrieves information about the specified analyzer.
getAnalyzer in interface AWSAccessAnalyzerrequest - Retrieves an analyzer.public GetArchiveRuleResult getArchiveRule(GetArchiveRuleRequest request)
AWSAccessAnalyzerRetrieves information about an archive rule.
To learn about filter keys that you can use to create an archive rule, see IAM Access Analyzer filter keys in the IAM User Guide.
getArchiveRule in interface AWSAccessAnalyzerrequest - Retrieves an archive rule.public GetFindingResult getFinding(GetFindingRequest request)
AWSAccessAnalyzer
Retrieves information about the specified finding. GetFinding and GetFindingV2 both use
access-analyzer:GetFinding in the Action element of an IAM policy statement. You must
have permission to perform the access-analyzer:GetFinding action.
getFinding in interface AWSAccessAnalyzerrequest - Retrieves a finding.public GetFindingRecommendationResult getFindingRecommendation(GetFindingRecommendationRequest request)
AWSAccessAnalyzerRetrieves information about a finding recommendation for the specified analyzer.
getFindingRecommendation in interface AWSAccessAnalyzerpublic GetFindingV2Result getFindingV2(GetFindingV2Request request)
AWSAccessAnalyzer
Retrieves information about the specified finding. GetFinding and GetFindingV2 both use
access-analyzer:GetFinding in the Action element of an IAM policy statement. You must
have permission to perform the access-analyzer:GetFinding action.
getFindingV2 in interface AWSAccessAnalyzerpublic GetGeneratedPolicyResult getGeneratedPolicy(GetGeneratedPolicyRequest request)
AWSAccessAnalyzer
Retrieves the policy that was generated using StartPolicyGeneration.
getGeneratedPolicy in interface AWSAccessAnalyzerpublic ListAccessPreviewFindingsResult listAccessPreviewFindings(ListAccessPreviewFindingsRequest request)
AWSAccessAnalyzerRetrieves a list of access preview findings generated by the specified access preview.
listAccessPreviewFindings in interface AWSAccessAnalyzerpublic ListAccessPreviewsResult listAccessPreviews(ListAccessPreviewsRequest request)
AWSAccessAnalyzerRetrieves a list of access previews for the specified analyzer.
listAccessPreviews in interface AWSAccessAnalyzerpublic ListAnalyzedResourcesResult listAnalyzedResources(ListAnalyzedResourcesRequest request)
AWSAccessAnalyzerRetrieves a list of resources of the specified type that have been analyzed by the specified external access analyzer. This action is not supported for unused access analyzers.
listAnalyzedResources in interface AWSAccessAnalyzerrequest - Retrieves a list of resources that have been analyzed.public ListAnalyzersResult listAnalyzers(ListAnalyzersRequest request)
AWSAccessAnalyzerRetrieves a list of analyzers.
listAnalyzers in interface AWSAccessAnalyzerrequest - Retrieves a list of analyzers.public ListArchiveRulesResult listArchiveRules(ListArchiveRulesRequest request)
AWSAccessAnalyzerRetrieves a list of archive rules created for the specified analyzer.
listArchiveRules in interface AWSAccessAnalyzerrequest - Retrieves a list of archive rules created for the specified analyzer.public ListFindingsResult listFindings(ListFindingsRequest request)
AWSAccessAnalyzer
Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use
access-analyzer:ListFindings in the Action element of an IAM policy statement. You must
have permission to perform the access-analyzer:ListFindings action.
To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys in the IAM User Guide.
listFindings in interface AWSAccessAnalyzerrequest - Retrieves a list of findings generated by the specified analyzer.public ListFindingsV2Result listFindingsV2(ListFindingsV2Request request)
AWSAccessAnalyzer
Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use
access-analyzer:ListFindings in the Action element of an IAM policy statement. You must
have permission to perform the access-analyzer:ListFindings action.
To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys in the IAM User Guide.
listFindingsV2 in interface AWSAccessAnalyzerpublic ListPolicyGenerationsResult listPolicyGenerations(ListPolicyGenerationsRequest request)
AWSAccessAnalyzerLists all of the policy generations requested in the last seven days.
listPolicyGenerations in interface AWSAccessAnalyzerpublic ListTagsForResourceResult listTagsForResource(ListTagsForResourceRequest request)
AWSAccessAnalyzerRetrieves a list of tags applied to the specified resource.
listTagsForResource in interface AWSAccessAnalyzerrequest - Retrieves a list of tags applied to the specified resource.public StartPolicyGenerationResult startPolicyGeneration(StartPolicyGenerationRequest request)
AWSAccessAnalyzerStarts the policy generation request.
startPolicyGeneration in interface AWSAccessAnalyzerpublic StartResourceScanResult startResourceScan(StartResourceScanRequest request)
AWSAccessAnalyzerImmediately starts a scan of the policies applied to the specified resource.
startResourceScan in interface AWSAccessAnalyzerrequest - Starts a scan of the policies applied to the specified resource.public TagResourceResult tagResource(TagResourceRequest request)
AWSAccessAnalyzerAdds a tag to the specified resource.
tagResource in interface AWSAccessAnalyzerrequest - Adds a tag to the specified resource.public UntagResourceResult untagResource(UntagResourceRequest request)
AWSAccessAnalyzerRemoves a tag from the specified resource.
untagResource in interface AWSAccessAnalyzerrequest - Removes a tag from the specified resource.public UpdateArchiveRuleResult updateArchiveRule(UpdateArchiveRuleRequest request)
AWSAccessAnalyzerUpdates the criteria and values for the specified archive rule.
updateArchiveRule in interface AWSAccessAnalyzerrequest - Updates the specified archive rule.public UpdateFindingsResult updateFindings(UpdateFindingsRequest request)
AWSAccessAnalyzerUpdates the status for the specified findings.
updateFindings in interface AWSAccessAnalyzerrequest - Updates findings with the new values provided in the request.public ValidatePolicyResult validatePolicy(ValidatePolicyRequest request)
AWSAccessAnalyzerRequests the validation of a policy and returns a list of findings. The findings help you identify issues and provide actionable recommendations to resolve the issue and enable you to author functional policies that meet security best practices.
validatePolicy in interface AWSAccessAnalyzerpublic void shutdown()
AWSAccessAnalyzershutdown in interface AWSAccessAnalyzerpublic ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
AWSAccessAnalyzerResponse metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing a request.
getCachedResponseMetadata in interface AWSAccessAnalyzerrequest - The originally executed request.