const (
    // AccessCheckPolicyTypeIdentityPolicy is a AccessCheckPolicyType enum value
    AccessCheckPolicyTypeIdentityPolicy = "IDENTITY_POLICY"

    // AccessCheckPolicyTypeResourcePolicy is a AccessCheckPolicyType enum value
    AccessCheckPolicyTypeResourcePolicy = "RESOURCE_POLICY"
)

const (
    // AccessCheckResourceTypeAwsDynamoDbTable is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsDynamoDbTable = "AWS::DynamoDB::Table"

    // AccessCheckResourceTypeAwsDynamoDbStream is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsDynamoDbStream = "AWS::DynamoDB::Stream"

    // AccessCheckResourceTypeAwsEfsFileSystem is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsEfsFileSystem = "AWS::EFS::FileSystem"

    // AccessCheckResourceTypeAwsOpenSearchServiceDomain is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsOpenSearchServiceDomain = "AWS::OpenSearchService::Domain"

    // AccessCheckResourceTypeAwsKinesisStream is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsKinesisStream = "AWS::Kinesis::Stream"

    // AccessCheckResourceTypeAwsKinesisStreamConsumer is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsKinesisStreamConsumer = "AWS::Kinesis::StreamConsumer"

    // AccessCheckResourceTypeAwsKmsKey is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsKmsKey = "AWS::KMS::Key"

    // AccessCheckResourceTypeAwsLambdaFunction is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsLambdaFunction = "AWS::Lambda::Function"

    // AccessCheckResourceTypeAwsS3Bucket is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsS3Bucket = "AWS::S3::Bucket"

    // AccessCheckResourceTypeAwsS3AccessPoint is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsS3AccessPoint = "AWS::S3::AccessPoint"

    // AccessCheckResourceTypeAwsS3expressDirectoryBucket is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsS3expressDirectoryBucket = "AWS::S3Express::DirectoryBucket"

    // AccessCheckResourceTypeAwsS3Glacier is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsS3Glacier = "AWS::S3::Glacier"

    // AccessCheckResourceTypeAwsS3outpostsBucket is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsS3outpostsBucket = "AWS::S3Outposts::Bucket"

    // AccessCheckResourceTypeAwsS3outpostsAccessPoint is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsS3outpostsAccessPoint = "AWS::S3Outposts::AccessPoint"

    // AccessCheckResourceTypeAwsSecretsManagerSecret is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsSecretsManagerSecret = "AWS::SecretsManager::Secret"

    // AccessCheckResourceTypeAwsSnsTopic is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsSnsTopic = "AWS::SNS::Topic"

    // AccessCheckResourceTypeAwsSqsQueue is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsSqsQueue = "AWS::SQS::Queue"

    // AccessCheckResourceTypeAwsIamAssumeRolePolicyDocument is a AccessCheckResourceType enum value
    AccessCheckResourceTypeAwsIamAssumeRolePolicyDocument = "AWS::IAM::AssumeRolePolicyDocument"
)

const (
    // AccessPreviewStatusCompleted is a AccessPreviewStatus enum value
    AccessPreviewStatusCompleted = "COMPLETED"

    // AccessPreviewStatusCreating is a AccessPreviewStatus enum value
    AccessPreviewStatusCreating = "CREATING"

    // AccessPreviewStatusFailed is a AccessPreviewStatus enum value
    AccessPreviewStatusFailed = "FAILED"
)

const (
    // AccessPreviewStatusReasonCodeInternalError is a AccessPreviewStatusReasonCode enum value
    AccessPreviewStatusReasonCodeInternalError = "INTERNAL_ERROR"

    // AccessPreviewStatusReasonCodeInvalidConfiguration is a AccessPreviewStatusReasonCode enum value
    AccessPreviewStatusReasonCodeInvalidConfiguration = "INVALID_CONFIGURATION"
)

const (
    // AclPermissionRead is a AclPermission enum value
    AclPermissionRead = "READ"

    // AclPermissionWrite is a AclPermission enum value
    AclPermissionWrite = "WRITE"

    // AclPermissionReadAcp is a AclPermission enum value
    AclPermissionReadAcp = "READ_ACP"

    // AclPermissionWriteAcp is a AclPermission enum value
    AclPermissionWriteAcp = "WRITE_ACP"

    // AclPermissionFullControl is a AclPermission enum value
    AclPermissionFullControl = "FULL_CONTROL"
)

const (
    // AnalyzerStatusActive is a AnalyzerStatus enum value
    AnalyzerStatusActive = "ACTIVE"

    // AnalyzerStatusCreating is a AnalyzerStatus enum value
    AnalyzerStatusCreating = "CREATING"

    // AnalyzerStatusDisabled is a AnalyzerStatus enum value
    AnalyzerStatusDisabled = "DISABLED"

    // AnalyzerStatusFailed is a AnalyzerStatus enum value
    AnalyzerStatusFailed = "FAILED"
)

const (
    // CheckAccessNotGrantedResultPass is a CheckAccessNotGrantedResult enum value
    CheckAccessNotGrantedResultPass = "PASS"

    // CheckAccessNotGrantedResultFail is a CheckAccessNotGrantedResult enum value
    CheckAccessNotGrantedResultFail = "FAIL"
)

const (
    // CheckNoNewAccessResultPass is a CheckNoNewAccessResult enum value
    CheckNoNewAccessResultPass = "PASS"

    // CheckNoNewAccessResultFail is a CheckNoNewAccessResult enum value
    CheckNoNewAccessResultFail = "FAIL"
)

const (
    // CheckNoPublicAccessResultPass is a CheckNoPublicAccessResult enum value
    CheckNoPublicAccessResultPass = "PASS"

    // CheckNoPublicAccessResultFail is a CheckNoPublicAccessResult enum value
    CheckNoPublicAccessResultFail = "FAIL"
)

const (
    // FindingChangeTypeChanged is a FindingChangeType enum value
    FindingChangeTypeChanged = "CHANGED"

    // FindingChangeTypeNew is a FindingChangeType enum value
    FindingChangeTypeNew = "NEW"

    // FindingChangeTypeUnchanged is a FindingChangeType enum value
    FindingChangeTypeUnchanged = "UNCHANGED"
)

const (
    // FindingSourceTypePolicy is a FindingSourceType enum value
    FindingSourceTypePolicy = "POLICY"

    // FindingSourceTypeBucketAcl is a FindingSourceType enum value
    FindingSourceTypeBucketAcl = "BUCKET_ACL"

    // FindingSourceTypeS3AccessPoint is a FindingSourceType enum value
    FindingSourceTypeS3AccessPoint = "S3_ACCESS_POINT"

    // FindingSourceTypeS3AccessPointAccount is a FindingSourceType enum value
    FindingSourceTypeS3AccessPointAccount = "S3_ACCESS_POINT_ACCOUNT"
)

const (
    // FindingStatusActive is a FindingStatus enum value
    FindingStatusActive = "ACTIVE"

    // FindingStatusArchived is a FindingStatus enum value
    FindingStatusArchived = "ARCHIVED"

    // FindingStatusResolved is a FindingStatus enum value
    FindingStatusResolved = "RESOLVED"
)

const (
    // FindingStatusUpdateActive is a FindingStatusUpdate enum value
    FindingStatusUpdateActive = "ACTIVE"

    // FindingStatusUpdateArchived is a FindingStatusUpdate enum value
    FindingStatusUpdateArchived = "ARCHIVED"
)

const (
    // FindingTypeExternalAccess is a FindingType enum value
    FindingTypeExternalAccess = "ExternalAccess"

    // FindingTypeUnusedIamrole is a FindingType enum value
    FindingTypeUnusedIamrole = "UnusedIAMRole"

    // FindingTypeUnusedIamuserAccessKey is a FindingType enum value
    FindingTypeUnusedIamuserAccessKey = "UnusedIAMUserAccessKey"

    // FindingTypeUnusedIamuserPassword is a FindingType enum value
    FindingTypeUnusedIamuserPassword = "UnusedIAMUserPassword"

    // FindingTypeUnusedPermission is a FindingType enum value
    FindingTypeUnusedPermission = "UnusedPermission"
)

const (
    // JobErrorCodeAuthorizationError is a JobErrorCode enum value
    JobErrorCodeAuthorizationError = "AUTHORIZATION_ERROR"

    // JobErrorCodeResourceNotFoundError is a JobErrorCode enum value
    JobErrorCodeResourceNotFoundError = "RESOURCE_NOT_FOUND_ERROR"

    // JobErrorCodeServiceQuotaExceededError is a JobErrorCode enum value
    JobErrorCodeServiceQuotaExceededError = "SERVICE_QUOTA_EXCEEDED_ERROR"

    // JobErrorCodeServiceError is a JobErrorCode enum value
    JobErrorCodeServiceError = "SERVICE_ERROR"
)

const (
    // JobStatusInProgress is a JobStatus enum value
    JobStatusInProgress = "IN_PROGRESS"

    // JobStatusSucceeded is a JobStatus enum value
    JobStatusSucceeded = "SUCCEEDED"

    // JobStatusFailed is a JobStatus enum value
    JobStatusFailed = "FAILED"

    // JobStatusCanceled is a JobStatus enum value
    JobStatusCanceled = "CANCELED"
)

const (
    // KmsGrantOperationCreateGrant is a KmsGrantOperation enum value
    KmsGrantOperationCreateGrant = "CreateGrant"

    // KmsGrantOperationDecrypt is a KmsGrantOperation enum value
    KmsGrantOperationDecrypt = "Decrypt"

    // KmsGrantOperationDescribeKey is a KmsGrantOperation enum value
    KmsGrantOperationDescribeKey = "DescribeKey"

    // KmsGrantOperationEncrypt is a KmsGrantOperation enum value
    KmsGrantOperationEncrypt = "Encrypt"

    // KmsGrantOperationGenerateDataKey is a KmsGrantOperation enum value
    KmsGrantOperationGenerateDataKey = "GenerateDataKey"

    // KmsGrantOperationGenerateDataKeyPair is a KmsGrantOperation enum value
    KmsGrantOperationGenerateDataKeyPair = "GenerateDataKeyPair"

    // KmsGrantOperationGenerateDataKeyPairWithoutPlaintext is a KmsGrantOperation enum value
    KmsGrantOperationGenerateDataKeyPairWithoutPlaintext = "GenerateDataKeyPairWithoutPlaintext"

    // KmsGrantOperationGenerateDataKeyWithoutPlaintext is a KmsGrantOperation enum value
    KmsGrantOperationGenerateDataKeyWithoutPlaintext = "GenerateDataKeyWithoutPlaintext"

    // KmsGrantOperationGetPublicKey is a KmsGrantOperation enum value
    KmsGrantOperationGetPublicKey = "GetPublicKey"

    // KmsGrantOperationReEncryptFrom is a KmsGrantOperation enum value
    KmsGrantOperationReEncryptFrom = "ReEncryptFrom"

    // KmsGrantOperationReEncryptTo is a KmsGrantOperation enum value
    KmsGrantOperationReEncryptTo = "ReEncryptTo"

    // KmsGrantOperationRetireGrant is a KmsGrantOperation enum value
    KmsGrantOperationRetireGrant = "RetireGrant"

    // KmsGrantOperationSign is a KmsGrantOperation enum value
    KmsGrantOperationSign = "Sign"

    // KmsGrantOperationVerify is a KmsGrantOperation enum value
    KmsGrantOperationVerify = "Verify"
)

const (
    // LocaleDe is a Locale enum value
    LocaleDe = "DE"

    // LocaleEn is a Locale enum value
    LocaleEn = "EN"

    // LocaleEs is a Locale enum value
    LocaleEs = "ES"

    // LocaleFr is a Locale enum value
    LocaleFr = "FR"

    // LocaleIt is a Locale enum value
    LocaleIt = "IT"

    // LocaleJa is a Locale enum value
    LocaleJa = "JA"

    // LocaleKo is a Locale enum value
    LocaleKo = "KO"

    // LocalePtBr is a Locale enum value
    LocalePtBr = "PT_BR"

    // LocaleZhCn is a Locale enum value
    LocaleZhCn = "ZH_CN"

    // LocaleZhTw is a Locale enum value
    LocaleZhTw = "ZH_TW"
)

const (
    // OrderByAsc is a OrderBy enum value
    OrderByAsc = "ASC"

    // OrderByDesc is a OrderBy enum value
    OrderByDesc = "DESC"
)

const (
    // PolicyTypeIdentityPolicy is a PolicyType enum value
    PolicyTypeIdentityPolicy = "IDENTITY_POLICY"

    // PolicyTypeResourcePolicy is a PolicyType enum value
    PolicyTypeResourcePolicy = "RESOURCE_POLICY"

    // PolicyTypeServiceControlPolicy is a PolicyType enum value
    PolicyTypeServiceControlPolicy = "SERVICE_CONTROL_POLICY"
)

const (
    // ReasonCodeAwsServiceAccessDisabled is a ReasonCode enum value
    ReasonCodeAwsServiceAccessDisabled = "AWS_SERVICE_ACCESS_DISABLED"

    // ReasonCodeDelegatedAdministratorDeregistered is a ReasonCode enum value
    ReasonCodeDelegatedAdministratorDeregistered = "DELEGATED_ADMINISTRATOR_DEREGISTERED"

    // ReasonCodeOrganizationDeleted is a ReasonCode enum value
    ReasonCodeOrganizationDeleted = "ORGANIZATION_DELETED"

    // ReasonCodeServiceLinkedRoleCreationFailed is a ReasonCode enum value
    ReasonCodeServiceLinkedRoleCreationFailed = "SERVICE_LINKED_ROLE_CREATION_FAILED"
)

const (
    // RecommendedRemediationActionCreatePolicy is a RecommendedRemediationAction enum value
    RecommendedRemediationActionCreatePolicy = "CREATE_POLICY"

    // RecommendedRemediationActionDetachPolicy is a RecommendedRemediationAction enum value
    RecommendedRemediationActionDetachPolicy = "DETACH_POLICY"
)

const (
    // ResourceTypeAwsS3Bucket is a ResourceType enum value
    ResourceTypeAwsS3Bucket = "AWS::S3::Bucket"

    // ResourceTypeAwsIamRole is a ResourceType enum value
    ResourceTypeAwsIamRole = "AWS::IAM::Role"

    // ResourceTypeAwsSqsQueue is a ResourceType enum value
    ResourceTypeAwsSqsQueue = "AWS::SQS::Queue"

    // ResourceTypeAwsLambdaFunction is a ResourceType enum value
    ResourceTypeAwsLambdaFunction = "AWS::Lambda::Function"

    // ResourceTypeAwsLambdaLayerVersion is a ResourceType enum value
    ResourceTypeAwsLambdaLayerVersion = "AWS::Lambda::LayerVersion"

    // ResourceTypeAwsKmsKey is a ResourceType enum value
    ResourceTypeAwsKmsKey = "AWS::KMS::Key"

    // ResourceTypeAwsSecretsManagerSecret is a ResourceType enum value
    ResourceTypeAwsSecretsManagerSecret = "AWS::SecretsManager::Secret"

    // ResourceTypeAwsEfsFileSystem is a ResourceType enum value
    ResourceTypeAwsEfsFileSystem = "AWS::EFS::FileSystem"

    // ResourceTypeAwsEc2Snapshot is a ResourceType enum value
    ResourceTypeAwsEc2Snapshot = "AWS::EC2::Snapshot"

    // ResourceTypeAwsEcrRepository is a ResourceType enum value
    ResourceTypeAwsEcrRepository = "AWS::ECR::Repository"

    // ResourceTypeAwsRdsDbsnapshot is a ResourceType enum value
    ResourceTypeAwsRdsDbsnapshot = "AWS::RDS::DBSnapshot"

    // ResourceTypeAwsRdsDbclusterSnapshot is a ResourceType enum value
    ResourceTypeAwsRdsDbclusterSnapshot = "AWS::RDS::DBClusterSnapshot"

    // ResourceTypeAwsSnsTopic is a ResourceType enum value
    ResourceTypeAwsSnsTopic = "AWS::SNS::Topic"

    // ResourceTypeAwsS3expressDirectoryBucket is a ResourceType enum value
    ResourceTypeAwsS3expressDirectoryBucket = "AWS::S3Express::DirectoryBucket"

    // ResourceTypeAwsDynamoDbTable is a ResourceType enum value
    ResourceTypeAwsDynamoDbTable = "AWS::DynamoDB::Table"

    // ResourceTypeAwsDynamoDbStream is a ResourceType enum value
    ResourceTypeAwsDynamoDbStream = "AWS::DynamoDB::Stream"
)

const (
    // StatusSucceeded is a Status enum value
    StatusSucceeded = "SUCCEEDED"

    // StatusFailed is a Status enum value
    StatusFailed = "FAILED"

    // StatusInProgress is a Status enum value
    StatusInProgress = "IN_PROGRESS"
)

const (
    // TypeAccount is a Type enum value
    TypeAccount = "ACCOUNT"

    // TypeOrganization is a Type enum value
    TypeOrganization = "ORGANIZATION"

    // TypeAccountUnusedAccess is a Type enum value
    TypeAccountUnusedAccess = "ACCOUNT_UNUSED_ACCESS"

    // TypeOrganizationUnusedAccess is a Type enum value
    TypeOrganizationUnusedAccess = "ORGANIZATION_UNUSED_ACCESS"
)

const (
    // ValidatePolicyFindingTypeError is a ValidatePolicyFindingType enum value
    ValidatePolicyFindingTypeError = "ERROR"

    // ValidatePolicyFindingTypeSecurityWarning is a ValidatePolicyFindingType enum value
    ValidatePolicyFindingTypeSecurityWarning = "SECURITY_WARNING"

    // ValidatePolicyFindingTypeSuggestion is a ValidatePolicyFindingType enum value
    ValidatePolicyFindingTypeSuggestion = "SUGGESTION"

    // ValidatePolicyFindingTypeWarning is a ValidatePolicyFindingType enum value
    ValidatePolicyFindingTypeWarning = "WARNING"
)

const (
    // ValidatePolicyResourceTypeAwsS3Bucket is a ValidatePolicyResourceType enum value
    ValidatePolicyResourceTypeAwsS3Bucket = "AWS::S3::Bucket"

    // ValidatePolicyResourceTypeAwsS3AccessPoint is a ValidatePolicyResourceType enum value
    ValidatePolicyResourceTypeAwsS3AccessPoint = "AWS::S3::AccessPoint"

    // ValidatePolicyResourceTypeAwsS3MultiRegionAccessPoint is a ValidatePolicyResourceType enum value
    ValidatePolicyResourceTypeAwsS3MultiRegionAccessPoint = "AWS::S3::MultiRegionAccessPoint"

    // ValidatePolicyResourceTypeAwsS3objectLambdaAccessPoint is a ValidatePolicyResourceType enum value
    ValidatePolicyResourceTypeAwsS3objectLambdaAccessPoint = "AWS::S3ObjectLambda::AccessPoint"

    // ValidatePolicyResourceTypeAwsIamAssumeRolePolicyDocument is a ValidatePolicyResourceType enum value
    ValidatePolicyResourceTypeAwsIamAssumeRolePolicyDocument = "AWS::IAM::AssumeRolePolicyDocument"

    // ValidatePolicyResourceTypeAwsDynamoDbTable is a ValidatePolicyResourceType enum value
    ValidatePolicyResourceTypeAwsDynamoDbTable = "AWS::DynamoDB::Table"
)

const (
    // ValidationExceptionReasonUnknownOperation is a ValidationExceptionReason enum value
    ValidationExceptionReasonUnknownOperation = "unknownOperation"

    // ValidationExceptionReasonCannotParse is a ValidationExceptionReason enum value
    ValidationExceptionReasonCannotParse = "cannotParse"

    // ValidationExceptionReasonFieldValidationFailed is a ValidationExceptionReason enum value
    ValidationExceptionReasonFieldValidationFailed = "fieldValidationFailed"

    // ValidationExceptionReasonOther is a ValidationExceptionReason enum value
    ValidationExceptionReasonOther = "other"

    // ValidationExceptionReasonNotSupported is a ValidationExceptionReason enum value
    ValidationExceptionReasonNotSupported = "notSupported"
)

const (

    // ErrCodeAccessDeniedException for service response error code
    // "AccessDeniedException".
    //
    // You do not have sufficient access to perform this action.
    ErrCodeAccessDeniedException = "AccessDeniedException"

    // ErrCodeConflictException for service response error code
    // "ConflictException".
    //
    // A conflict exception error.
    ErrCodeConflictException = "ConflictException"

    // ErrCodeInternalServerException for service response error code
    // "InternalServerException".
    //
    // Internal server error.
    ErrCodeInternalServerException = "InternalServerException"

    // ErrCodeInvalidParameterException for service response error code
    // "InvalidParameterException".
    //
    // The specified parameter is invalid.
    ErrCodeInvalidParameterException = "InvalidParameterException"

    // ErrCodeResourceNotFoundException for service response error code
    // "ResourceNotFoundException".
    //
    // The specified resource could not be found.
    ErrCodeResourceNotFoundException = "ResourceNotFoundException"

    // ErrCodeServiceQuotaExceededException for service response error code
    // "ServiceQuotaExceededException".
    //
    // Service quote met error.
    ErrCodeServiceQuotaExceededException = "ServiceQuotaExceededException"

    // ErrCodeThrottlingException for service response error code
    // "ThrottlingException".
    //
    // Throttling limit exceeded error.
    ErrCodeThrottlingException = "ThrottlingException"

    // ErrCodeUnprocessableEntityException for service response error code
    // "UnprocessableEntityException".
    //
    // The specified entity could not be processed.
    ErrCodeUnprocessableEntityException = "UnprocessableEntityException"

    // ErrCodeValidationException for service response error code
    // "ValidationException".
    //
    // Validation exception error.
    ErrCodeValidationException = "ValidationException"
)

const (
    ServiceName = "AccessAnalyzer"  // Name of service.
    EndpointsID = "access-analyzer" // ID to lookup a service endpoint with.
    ServiceID   = "AccessAnalyzer"  // ServiceID is a unique identifier of a specific service.
)

const (
    // RecommendationTypeUnusedPermissionRecommendation is a RecommendationType enum value
    RecommendationTypeUnusedPermissionRecommendation = "UnusedPermissionRecommendation"
)

func AccessCheckPolicyType_Values ¶

func AccessCheckPolicyType_Values() []string

AccessCheckPolicyType_Values returns all elements of the AccessCheckPolicyType enum

func AccessCheckResourceType_Values ¶

func AccessCheckResourceType_Values() []string

AccessCheckResourceType_Values returns all elements of the AccessCheckResourceType enum

func AccessPreviewStatusReasonCode_Values ¶

func AccessPreviewStatusReasonCode_Values() []string

AccessPreviewStatusReasonCode_Values returns all elements of the AccessPreviewStatusReasonCode enum

func AccessPreviewStatus_Values ¶

func AccessPreviewStatus_Values() []string

AccessPreviewStatus_Values returns all elements of the AccessPreviewStatus enum

func AclPermission_Values ¶

func AclPermission_Values() []string

AclPermission_Values returns all elements of the AclPermission enum

func AnalyzerStatus_Values ¶

func AnalyzerStatus_Values() []string

AnalyzerStatus_Values returns all elements of the AnalyzerStatus enum

func CheckAccessNotGrantedResult_Values ¶

func CheckAccessNotGrantedResult_Values() []string

CheckAccessNotGrantedResult_Values returns all elements of the CheckAccessNotGrantedResult enum

func CheckNoNewAccessResult_Values ¶

func CheckNoNewAccessResult_Values() []string

CheckNoNewAccessResult_Values returns all elements of the CheckNoNewAccessResult enum

func CheckNoPublicAccessResult_Values ¶

func CheckNoPublicAccessResult_Values() []string

CheckNoPublicAccessResult_Values returns all elements of the CheckNoPublicAccessResult enum

func FindingChangeType_Values ¶

func FindingChangeType_Values() []string

FindingChangeType_Values returns all elements of the FindingChangeType enum

func FindingSourceType_Values ¶

func FindingSourceType_Values() []string

FindingSourceType_Values returns all elements of the FindingSourceType enum

func FindingStatusUpdate_Values ¶

func FindingStatusUpdate_Values() []string

FindingStatusUpdate_Values returns all elements of the FindingStatusUpdate enum

func FindingStatus_Values ¶

func FindingStatus_Values() []string

FindingStatus_Values returns all elements of the FindingStatus enum

func FindingType_Values ¶

func FindingType_Values() []string

FindingType_Values returns all elements of the FindingType enum

func JobErrorCode_Values ¶

func JobErrorCode_Values() []string

JobErrorCode_Values returns all elements of the JobErrorCode enum

func JobStatus_Values ¶

func JobStatus_Values() []string

JobStatus_Values returns all elements of the JobStatus enum

func KmsGrantOperation_Values ¶

func KmsGrantOperation_Values() []string

KmsGrantOperation_Values returns all elements of the KmsGrantOperation enum

func Locale_Values ¶

func Locale_Values() []string

Locale_Values returns all elements of the Locale enum

func OrderBy_Values ¶

func OrderBy_Values() []string

OrderBy_Values returns all elements of the OrderBy enum

func PolicyType_Values ¶

func PolicyType_Values() []string

PolicyType_Values returns all elements of the PolicyType enum

func ReasonCode_Values ¶

func ReasonCode_Values() []string

ReasonCode_Values returns all elements of the ReasonCode enum

func RecommendationType_Values ¶

func RecommendationType_Values() []string

RecommendationType_Values returns all elements of the RecommendationType enum

func RecommendedRemediationAction_Values ¶

func RecommendedRemediationAction_Values() []string

RecommendedRemediationAction_Values returns all elements of the RecommendedRemediationAction enum

func ResourceType_Values ¶

func ResourceType_Values() []string

ResourceType_Values returns all elements of the ResourceType enum

func Status_Values ¶

func Status_Values() []string

Status_Values returns all elements of the Status enum

func Type_Values ¶

func Type_Values() []string

Type_Values returns all elements of the Type enum

func ValidatePolicyFindingType_Values ¶

func ValidatePolicyFindingType_Values() []string

ValidatePolicyFindingType_Values returns all elements of the ValidatePolicyFindingType enum

func ValidatePolicyResourceType_Values ¶

func ValidatePolicyResourceType_Values() []string

ValidatePolicyResourceType_Values returns all elements of the ValidatePolicyResourceType enum

func ValidationExceptionReason_Values ¶

func ValidationExceptionReason_Values() []string

ValidationExceptionReason_Values returns all elements of the ValidationExceptionReason enum

type Access ¶

type Access struct {

    // A list of actions for the access permissions. Any strings that can be used
    // as an action in an IAM policy can be used in the list of actions to check.
    Actions []*string `locationName:"actions" type:"list"`

    // A list of resources for the access permissions. Any strings that can be used
    // as a resource in an IAM policy can be used in the list of resources to check.
    Resources []*string `locationName:"resources" type:"list"`
    // contains filtered or unexported fields
}

Contains information about actions and resources that define permissions to check against a policy.

func (Access) GoString ¶

func (s Access) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Access) SetActions ¶

func (s *Access) SetActions(v []*string) *Access

SetActions sets the Actions field's value.

func (*Access) SetResources ¶

func (s *Access) SetResources(v []*string) *Access

SetResources sets the Resources field's value.

func (Access) String ¶

func (s Access) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessAnalyzer ¶

type AccessAnalyzer struct {
    *client.Client
}

AccessAnalyzer provides the API operation methods for making requests to Access Analyzer. See this package's package overview docs for details on the service.

AccessAnalyzer methods are safe to use concurrently. It is not safe to modify mutate any of the struct's properties though.

func New ¶

func New(p client.ConfigProvider, cfgs ...*aws.Config) *AccessAnalyzer

New creates a new instance of the AccessAnalyzer client with a session. If additional configuration is needed for the client instance use the optional aws.Config parameter to add your extra config.

Example:

mySession := session.Must(session.NewSession())

// Create a AccessAnalyzer client from just a session.
svc := accessanalyzer.New(mySession)

// Create a AccessAnalyzer client with additional configuration
svc := accessanalyzer.New(mySession, aws.NewConfig().WithRegion("us-west-2"))

func (*AccessAnalyzer) ApplyArchiveRule ¶

func (c *AccessAnalyzer) ApplyArchiveRule(input *ApplyArchiveRuleInput) (*ApplyArchiveRuleOutput, error)

ApplyArchiveRule API operation for Access Analyzer.

Retroactively applies the archive rule to existing findings that meet the archive rule criteria.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ApplyArchiveRule for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ApplyArchiveRule

func (*AccessAnalyzer) ApplyArchiveRuleRequest ¶

func (c *AccessAnalyzer) ApplyArchiveRuleRequest(input *ApplyArchiveRuleInput) (req *request.Request, output *ApplyArchiveRuleOutput)

ApplyArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the ApplyArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ApplyArchiveRule for more information on using the ApplyArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ApplyArchiveRuleRequest method.
req, resp := client.ApplyArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ApplyArchiveRule

func (*AccessAnalyzer) ApplyArchiveRuleWithContext ¶

func (c *AccessAnalyzer) ApplyArchiveRuleWithContext(ctx aws.Context, input *ApplyArchiveRuleInput, opts ...request.Option) (*ApplyArchiveRuleOutput, error)

ApplyArchiveRuleWithContext is the same as ApplyArchiveRule with the addition of the ability to pass a context and additional request options.

See ApplyArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CancelPolicyGeneration ¶

func (c *AccessAnalyzer) CancelPolicyGeneration(input *CancelPolicyGenerationInput) (*CancelPolicyGenerationOutput, error)

CancelPolicyGeneration API operation for Access Analyzer.

Cancels the requested policy generation.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CancelPolicyGeneration for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CancelPolicyGeneration

func (*AccessAnalyzer) CancelPolicyGenerationRequest ¶

func (c *AccessAnalyzer) CancelPolicyGenerationRequest(input *CancelPolicyGenerationInput) (req *request.Request, output *CancelPolicyGenerationOutput)

CancelPolicyGenerationRequest generates a "aws/request.Request" representing the client's request for the CancelPolicyGeneration operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CancelPolicyGeneration for more information on using the CancelPolicyGeneration API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CancelPolicyGenerationRequest method.
req, resp := client.CancelPolicyGenerationRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CancelPolicyGeneration

func (*AccessAnalyzer) CancelPolicyGenerationWithContext ¶

func (c *AccessAnalyzer) CancelPolicyGenerationWithContext(ctx aws.Context, input *CancelPolicyGenerationInput, opts ...request.Option) (*CancelPolicyGenerationOutput, error)

CancelPolicyGenerationWithContext is the same as CancelPolicyGeneration with the addition of the ability to pass a context and additional request options.

See CancelPolicyGeneration for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CheckAccessNotGranted ¶

func (c *AccessAnalyzer) CheckAccessNotGranted(input *CheckAccessNotGrantedInput) (*CheckAccessNotGrantedOutput, error)

CheckAccessNotGranted API operation for Access Analyzer.

Checks whether the specified access isn't allowed by a policy.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CheckAccessNotGranted for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• InvalidParameterException The specified parameter is invalid.

• UnprocessableEntityException The specified entity could not be processed.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckAccessNotGranted

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.CheckAccessNotGrantedInput{
    Access: []*accessanalyzer.Access{
        {
            Actions: []*string{
                aws.String("s3:PutObject"),
            },
        },
    },
    PolicyDocument: aws.String("{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:GetObject\",\"Resource\":\"*\"}]}"),
    PolicyType:     aws.String("RESOURCE_POLICY"),
}

result, err := svc.CheckAccessNotGranted(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeInvalidParameterException:
            fmt.Println(accessanalyzer.ErrCodeInvalidParameterException, aerr.Error())
        case accessanalyzer.ErrCodeUnprocessableEntityException:
            fmt.Println(accessanalyzer.ErrCodeUnprocessableEntityException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.CheckAccessNotGrantedInput{
    Access: []*accessanalyzer.Access{
        {
            Resources: []*string{
                aws.String("arn:aws:s3:::sensitive-bucket/*"),
            },
        },
    },
    PolicyDocument: aws.String("{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::non-sensitive-bucket/*\"}]}"),
    PolicyType:     aws.String("RESOURCE_POLICY"),
}

result, err := svc.CheckAccessNotGranted(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeInvalidParameterException:
            fmt.Println(accessanalyzer.ErrCodeInvalidParameterException, aerr.Error())
        case accessanalyzer.ErrCodeUnprocessableEntityException:
            fmt.Println(accessanalyzer.ErrCodeUnprocessableEntityException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.CheckAccessNotGrantedInput{
    Access: []*accessanalyzer.Access{
        {
            Resources: []*string{
                aws.String("arn:aws:s3:::my-bucket/*"),
            },
        },
    },
    PolicyDocument: aws.String("{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::my-bucket/*\"}]}"),
    PolicyType:     aws.String("RESOURCE_POLICY"),
}

result, err := svc.CheckAccessNotGranted(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeInvalidParameterException:
            fmt.Println(accessanalyzer.ErrCodeInvalidParameterException, aerr.Error())
        case accessanalyzer.ErrCodeUnprocessableEntityException:
            fmt.Println(accessanalyzer.ErrCodeUnprocessableEntityException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

func (*AccessAnalyzer) CheckAccessNotGrantedRequest ¶

func (c *AccessAnalyzer) CheckAccessNotGrantedRequest(input *CheckAccessNotGrantedInput) (req *request.Request, output *CheckAccessNotGrantedOutput)

CheckAccessNotGrantedRequest generates a "aws/request.Request" representing the client's request for the CheckAccessNotGranted operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CheckAccessNotGranted for more information on using the CheckAccessNotGranted API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CheckAccessNotGrantedRequest method.
req, resp := client.CheckAccessNotGrantedRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckAccessNotGranted

func (*AccessAnalyzer) CheckAccessNotGrantedWithContext ¶

func (c *AccessAnalyzer) CheckAccessNotGrantedWithContext(ctx aws.Context, input *CheckAccessNotGrantedInput, opts ...request.Option) (*CheckAccessNotGrantedOutput, error)

CheckAccessNotGrantedWithContext is the same as CheckAccessNotGranted with the addition of the ability to pass a context and additional request options.

See CheckAccessNotGranted for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CheckNoNewAccess ¶

func (c *AccessAnalyzer) CheckNoNewAccess(input *CheckNoNewAccessInput) (*CheckNoNewAccessOutput, error)

CheckNoNewAccess API operation for Access Analyzer.

Checks whether new access is allowed for an updated policy when compared to the existing policy.

You can find examples for reference policies and learn how to set up and run a custom policy check for new access in the IAM Access Analyzer custom policy checks samples (https://github.com/aws-samples/iam-access-analyzer-custom-policy-check-samples) repository on GitHub. The reference policies in this repository are meant to be passed to the existingPolicyDocument request parameter.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CheckNoNewAccess for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• InvalidParameterException The specified parameter is invalid.

• UnprocessableEntityException The specified entity could not be processed.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckNoNewAccess

func (*AccessAnalyzer) CheckNoNewAccessRequest ¶

func (c *AccessAnalyzer) CheckNoNewAccessRequest(input *CheckNoNewAccessInput) (req *request.Request, output *CheckNoNewAccessOutput)

CheckNoNewAccessRequest generates a "aws/request.Request" representing the client's request for the CheckNoNewAccess operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CheckNoNewAccess for more information on using the CheckNoNewAccess API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CheckNoNewAccessRequest method.
req, resp := client.CheckNoNewAccessRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckNoNewAccess

func (*AccessAnalyzer) CheckNoNewAccessWithContext ¶

func (c *AccessAnalyzer) CheckNoNewAccessWithContext(ctx aws.Context, input *CheckNoNewAccessInput, opts ...request.Option) (*CheckNoNewAccessOutput, error)

CheckNoNewAccessWithContext is the same as CheckNoNewAccess with the addition of the ability to pass a context and additional request options.

See CheckNoNewAccess for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CheckNoPublicAccess ¶

func (c *AccessAnalyzer) CheckNoPublicAccess(input *CheckNoPublicAccessInput) (*CheckNoPublicAccessOutput, error)

CheckNoPublicAccess API operation for Access Analyzer.

Checks whether a resource policy can grant public access to the specified resource type.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CheckNoPublicAccess for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• InvalidParameterException The specified parameter is invalid.

• UnprocessableEntityException The specified entity could not be processed.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckNoPublicAccess

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.CheckNoPublicAccessInput{
    PolicyDocument: aws.String("{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Bob\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::111122223333:user/JohnDoe\"},\"Action\":[\"s3:GetObject\"]}]}"),
    ResourceType:   aws.String("AWS::S3::Bucket"),
}

result, err := svc.CheckNoPublicAccess(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeInvalidParameterException:
            fmt.Println(accessanalyzer.ErrCodeInvalidParameterException, aerr.Error())
        case accessanalyzer.ErrCodeUnprocessableEntityException:
            fmt.Println(accessanalyzer.ErrCodeUnprocessableEntityException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.CheckNoPublicAccessInput{
    PolicyDocument: aws.String("{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Bob\",\"Effect\":\"Allow\",\"Principal\":\"*\",\"Action\":[\"s3:GetObject\"]}]}"),
    ResourceType:   aws.String("AWS::S3::Bucket"),
}

result, err := svc.CheckNoPublicAccess(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeInvalidParameterException:
            fmt.Println(accessanalyzer.ErrCodeInvalidParameterException, aerr.Error())
        case accessanalyzer.ErrCodeUnprocessableEntityException:
            fmt.Println(accessanalyzer.ErrCodeUnprocessableEntityException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

func (*AccessAnalyzer) CheckNoPublicAccessRequest ¶

func (c *AccessAnalyzer) CheckNoPublicAccessRequest(input *CheckNoPublicAccessInput) (req *request.Request, output *CheckNoPublicAccessOutput)

CheckNoPublicAccessRequest generates a "aws/request.Request" representing the client's request for the CheckNoPublicAccess operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CheckNoPublicAccess for more information on using the CheckNoPublicAccess API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CheckNoPublicAccessRequest method.
req, resp := client.CheckNoPublicAccessRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckNoPublicAccess

func (*AccessAnalyzer) CheckNoPublicAccessWithContext ¶

func (c *AccessAnalyzer) CheckNoPublicAccessWithContext(ctx aws.Context, input *CheckNoPublicAccessInput, opts ...request.Option) (*CheckNoPublicAccessOutput, error)

CheckNoPublicAccessWithContext is the same as CheckNoPublicAccess with the addition of the ability to pass a context and additional request options.

See CheckNoPublicAccess for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CreateAccessPreview ¶

func (c *AccessAnalyzer) CreateAccessPreview(input *CreateAccessPreviewInput) (*CreateAccessPreviewOutput, error)

CreateAccessPreview API operation for Access Analyzer.

Creates an access preview that allows you to preview IAM Access Analyzer findings for your resource before deploying resource permissions.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CreateAccessPreview for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ConflictException A conflict exception error.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ServiceQuotaExceededException Service quote met error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateAccessPreview

func (*AccessAnalyzer) CreateAccessPreviewRequest ¶

func (c *AccessAnalyzer) CreateAccessPreviewRequest(input *CreateAccessPreviewInput) (req *request.Request, output *CreateAccessPreviewOutput)

CreateAccessPreviewRequest generates a "aws/request.Request" representing the client's request for the CreateAccessPreview operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CreateAccessPreview for more information on using the CreateAccessPreview API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CreateAccessPreviewRequest method.
req, resp := client.CreateAccessPreviewRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateAccessPreview

func (*AccessAnalyzer) CreateAccessPreviewWithContext ¶

func (c *AccessAnalyzer) CreateAccessPreviewWithContext(ctx aws.Context, input *CreateAccessPreviewInput, opts ...request.Option) (*CreateAccessPreviewOutput, error)

CreateAccessPreviewWithContext is the same as CreateAccessPreview with the addition of the ability to pass a context and additional request options.

See CreateAccessPreview for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CreateAnalyzer ¶

func (c *AccessAnalyzer) CreateAnalyzer(input *CreateAnalyzerInput) (*CreateAnalyzerOutput, error)

CreateAnalyzer API operation for Access Analyzer.

Creates an analyzer for your account.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CreateAnalyzer for usage and error information.

Returned Error Types:

• ConflictException A conflict exception error.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ServiceQuotaExceededException Service quote met error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateAnalyzer

func (*AccessAnalyzer) CreateAnalyzerRequest ¶

func (c *AccessAnalyzer) CreateAnalyzerRequest(input *CreateAnalyzerInput) (req *request.Request, output *CreateAnalyzerOutput)

CreateAnalyzerRequest generates a "aws/request.Request" representing the client's request for the CreateAnalyzer operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CreateAnalyzer for more information on using the CreateAnalyzer API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CreateAnalyzerRequest method.
req, resp := client.CreateAnalyzerRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateAnalyzer

func (*AccessAnalyzer) CreateAnalyzerWithContext ¶

func (c *AccessAnalyzer) CreateAnalyzerWithContext(ctx aws.Context, input *CreateAnalyzerInput, opts ...request.Option) (*CreateAnalyzerOutput, error)

CreateAnalyzerWithContext is the same as CreateAnalyzer with the addition of the ability to pass a context and additional request options.

See CreateAnalyzer for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CreateArchiveRule ¶

func (c *AccessAnalyzer) CreateArchiveRule(input *CreateArchiveRuleInput) (*CreateArchiveRuleOutput, error)

CreateArchiveRule API operation for Access Analyzer.

Creates an archive rule for the specified analyzer. Archive rules automatically archive new findings that meet the criteria you define when you create the rule.

To learn about filter keys that you can use to create an archive rule, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the IAM User Guide.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CreateArchiveRule for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ConflictException A conflict exception error.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ServiceQuotaExceededException Service quote met error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateArchiveRule

func (*AccessAnalyzer) CreateArchiveRuleRequest ¶

func (c *AccessAnalyzer) CreateArchiveRuleRequest(input *CreateArchiveRuleInput) (req *request.Request, output *CreateArchiveRuleOutput)

CreateArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the CreateArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CreateArchiveRule for more information on using the CreateArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CreateArchiveRuleRequest method.
req, resp := client.CreateArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateArchiveRule

func (*AccessAnalyzer) CreateArchiveRuleWithContext ¶

func (c *AccessAnalyzer) CreateArchiveRuleWithContext(ctx aws.Context, input *CreateArchiveRuleInput, opts ...request.Option) (*CreateArchiveRuleOutput, error)

CreateArchiveRuleWithContext is the same as CreateArchiveRule with the addition of the ability to pass a context and additional request options.

See CreateArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) DeleteAnalyzer ¶

func (c *AccessAnalyzer) DeleteAnalyzer(input *DeleteAnalyzerInput) (*DeleteAnalyzerOutput, error)

DeleteAnalyzer API operation for Access Analyzer.

Deletes the specified analyzer. When you delete an analyzer, IAM Access Analyzer is disabled for the account or organization in the current or specific Region. All findings that were generated by the analyzer are deleted. You cannot undo this action.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation DeleteAnalyzer for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/DeleteAnalyzer

func (*AccessAnalyzer) DeleteAnalyzerRequest ¶

func (c *AccessAnalyzer) DeleteAnalyzerRequest(input *DeleteAnalyzerInput) (req *request.Request, output *DeleteAnalyzerOutput)

DeleteAnalyzerRequest generates a "aws/request.Request" representing the client's request for the DeleteAnalyzer operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See DeleteAnalyzer for more information on using the DeleteAnalyzer API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the DeleteAnalyzerRequest method.
req, resp := client.DeleteAnalyzerRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/DeleteAnalyzer

func (*AccessAnalyzer) DeleteAnalyzerWithContext ¶

func (c *AccessAnalyzer) DeleteAnalyzerWithContext(ctx aws.Context, input *DeleteAnalyzerInput, opts ...request.Option) (*DeleteAnalyzerOutput, error)

DeleteAnalyzerWithContext is the same as DeleteAnalyzer with the addition of the ability to pass a context and additional request options.

See DeleteAnalyzer for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) DeleteArchiveRule ¶

func (c *AccessAnalyzer) DeleteArchiveRule(input *DeleteArchiveRuleInput) (*DeleteArchiveRuleOutput, error)

DeleteArchiveRule API operation for Access Analyzer.

Deletes the specified archive rule.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation DeleteArchiveRule for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/DeleteArchiveRule

func (*AccessAnalyzer) DeleteArchiveRuleRequest ¶

func (c *AccessAnalyzer) DeleteArchiveRuleRequest(input *DeleteArchiveRuleInput) (req *request.Request, output *DeleteArchiveRuleOutput)

DeleteArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the DeleteArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See DeleteArchiveRule for more information on using the DeleteArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the DeleteArchiveRuleRequest method.
req, resp := client.DeleteArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/DeleteArchiveRule

func (*AccessAnalyzer) DeleteArchiveRuleWithContext ¶

func (c *AccessAnalyzer) DeleteArchiveRuleWithContext(ctx aws.Context, input *DeleteArchiveRuleInput, opts ...request.Option) (*DeleteArchiveRuleOutput, error)

DeleteArchiveRuleWithContext is the same as DeleteArchiveRule with the addition of the ability to pass a context and additional request options.

See DeleteArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GenerateFindingRecommendation ¶

func (c *AccessAnalyzer) GenerateFindingRecommendation(input *GenerateFindingRecommendationInput) (*GenerateFindingRecommendationOutput, error)

GenerateFindingRecommendation API operation for Access Analyzer.

Creates a recommendation for an unused permissions finding.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GenerateFindingRecommendation for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GenerateFindingRecommendation

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.GenerateFindingRecommendationInput{
    AnalyzerArn: aws.String("arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a"),
    Id:          aws.String("finding-id"),
}

result, err := svc.GenerateFindingRecommendation(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.GenerateFindingRecommendationInput{
    AnalyzerArn: aws.String("arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a"),
    Id:          aws.String("!"),
}

result, err := svc.GenerateFindingRecommendation(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

func (*AccessAnalyzer) GenerateFindingRecommendationRequest ¶

func (c *AccessAnalyzer) GenerateFindingRecommendationRequest(input *GenerateFindingRecommendationInput) (req *request.Request, output *GenerateFindingRecommendationOutput)

GenerateFindingRecommendationRequest generates a "aws/request.Request" representing the client's request for the GenerateFindingRecommendation operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GenerateFindingRecommendation for more information on using the GenerateFindingRecommendation API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GenerateFindingRecommendationRequest method.
req, resp := client.GenerateFindingRecommendationRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GenerateFindingRecommendation

func (*AccessAnalyzer) GenerateFindingRecommendationWithContext ¶

func (c *AccessAnalyzer) GenerateFindingRecommendationWithContext(ctx aws.Context, input *GenerateFindingRecommendationInput, opts ...request.Option) (*GenerateFindingRecommendationOutput, error)

GenerateFindingRecommendationWithContext is the same as GenerateFindingRecommendation with the addition of the ability to pass a context and additional request options.

See GenerateFindingRecommendation for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetAccessPreview ¶

func (c *AccessAnalyzer) GetAccessPreview(input *GetAccessPreviewInput) (*GetAccessPreviewOutput, error)

GetAccessPreview API operation for Access Analyzer.

Retrieves information about an access preview for the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetAccessPreview for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAccessPreview

func (*AccessAnalyzer) GetAccessPreviewRequest ¶

func (c *AccessAnalyzer) GetAccessPreviewRequest(input *GetAccessPreviewInput) (req *request.Request, output *GetAccessPreviewOutput)

GetAccessPreviewRequest generates a "aws/request.Request" representing the client's request for the GetAccessPreview operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetAccessPreview for more information on using the GetAccessPreview API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetAccessPreviewRequest method.
req, resp := client.GetAccessPreviewRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAccessPreview

func (*AccessAnalyzer) GetAccessPreviewWithContext ¶

func (c *AccessAnalyzer) GetAccessPreviewWithContext(ctx aws.Context, input *GetAccessPreviewInput, opts ...request.Option) (*GetAccessPreviewOutput, error)

GetAccessPreviewWithContext is the same as GetAccessPreview with the addition of the ability to pass a context and additional request options.

See GetAccessPreview for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetAnalyzedResource ¶

func (c *AccessAnalyzer) GetAnalyzedResource(input *GetAnalyzedResourceInput) (*GetAnalyzedResourceOutput, error)

GetAnalyzedResource API operation for Access Analyzer.

Retrieves information about a resource that was analyzed.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetAnalyzedResource for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzedResource

func (*AccessAnalyzer) GetAnalyzedResourceRequest ¶

func (c *AccessAnalyzer) GetAnalyzedResourceRequest(input *GetAnalyzedResourceInput) (req *request.Request, output *GetAnalyzedResourceOutput)

GetAnalyzedResourceRequest generates a "aws/request.Request" representing the client's request for the GetAnalyzedResource operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetAnalyzedResource for more information on using the GetAnalyzedResource API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetAnalyzedResourceRequest method.
req, resp := client.GetAnalyzedResourceRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzedResource

func (*AccessAnalyzer) GetAnalyzedResourceWithContext ¶

func (c *AccessAnalyzer) GetAnalyzedResourceWithContext(ctx aws.Context, input *GetAnalyzedResourceInput, opts ...request.Option) (*GetAnalyzedResourceOutput, error)

GetAnalyzedResourceWithContext is the same as GetAnalyzedResource with the addition of the ability to pass a context and additional request options.

See GetAnalyzedResource for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetAnalyzer ¶

func (c *AccessAnalyzer) GetAnalyzer(input *GetAnalyzerInput) (*GetAnalyzerOutput, error)

GetAnalyzer API operation for Access Analyzer.

Retrieves information about the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetAnalyzer for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzer

func (*AccessAnalyzer) GetAnalyzerRequest ¶

func (c *AccessAnalyzer) GetAnalyzerRequest(input *GetAnalyzerInput) (req *request.Request, output *GetAnalyzerOutput)

GetAnalyzerRequest generates a "aws/request.Request" representing the client's request for the GetAnalyzer operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetAnalyzer for more information on using the GetAnalyzer API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetAnalyzerRequest method.
req, resp := client.GetAnalyzerRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzer

func (*AccessAnalyzer) GetAnalyzerWithContext ¶

func (c *AccessAnalyzer) GetAnalyzerWithContext(ctx aws.Context, input *GetAnalyzerInput, opts ...request.Option) (*GetAnalyzerOutput, error)

GetAnalyzerWithContext is the same as GetAnalyzer with the addition of the ability to pass a context and additional request options.

See GetAnalyzer for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetArchiveRule ¶

func (c *AccessAnalyzer) GetArchiveRule(input *GetArchiveRuleInput) (*GetArchiveRuleOutput, error)

GetArchiveRule API operation for Access Analyzer.

Retrieves information about an archive rule.

To learn about filter keys that you can use to create an archive rule, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the IAM User Guide.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetArchiveRule for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetArchiveRule

func (*AccessAnalyzer) GetArchiveRuleRequest ¶

func (c *AccessAnalyzer) GetArchiveRuleRequest(input *GetArchiveRuleInput) (req *request.Request, output *GetArchiveRuleOutput)

GetArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the GetArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetArchiveRule for more information on using the GetArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetArchiveRuleRequest method.
req, resp := client.GetArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetArchiveRule

func (*AccessAnalyzer) GetArchiveRuleWithContext ¶

func (c *AccessAnalyzer) GetArchiveRuleWithContext(ctx aws.Context, input *GetArchiveRuleInput, opts ...request.Option) (*GetArchiveRuleOutput, error)

GetArchiveRuleWithContext is the same as GetArchiveRule with the addition of the ability to pass a context and additional request options.

See GetArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetFinding ¶

func (c *AccessAnalyzer) GetFinding(input *GetFindingInput) (*GetFindingOutput, error)

GetFinding API operation for Access Analyzer.

Retrieves information about the specified finding. GetFinding and GetFindingV2 both use access-analyzer:GetFinding in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:GetFinding action.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetFinding for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFinding

func (*AccessAnalyzer) GetFindingRecommendation ¶

func (c *AccessAnalyzer) GetFindingRecommendation(input *GetFindingRecommendationInput) (*GetFindingRecommendationOutput, error)

GetFindingRecommendation API operation for Access Analyzer.

Retrieves information about a finding recommendation for the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetFindingRecommendation for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFindingRecommendation

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.GetFindingRecommendationInput{
    AnalyzerArn: aws.String("arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a"),
    Id:          aws.String("finding-id"),
    MaxResults:  aws.Int64(3),
    NextToken:   aws.String("token"),
}

result, err := svc.GetFindingRecommendation(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeResourceNotFoundException:
            fmt.Println(accessanalyzer.ErrCodeResourceNotFoundException, aerr.Error())
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.GetFindingRecommendationInput{
    AnalyzerArn: aws.String("arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a"),
    Id:          aws.String("finding-id"),
    MaxResults:  aws.Int64(3),
}

result, err := svc.GetFindingRecommendation(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeResourceNotFoundException:
            fmt.Println(accessanalyzer.ErrCodeResourceNotFoundException, aerr.Error())
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.GetFindingRecommendationInput{
    AnalyzerArn: aws.String("arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a"),
    Id:          aws.String("finding-id"),
    MaxResults:  aws.Int64(3),
}

result, err := svc.GetFindingRecommendation(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeResourceNotFoundException:
            fmt.Println(accessanalyzer.ErrCodeResourceNotFoundException, aerr.Error())
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

svc := accessanalyzer.New(session.New())
input := &accessanalyzer.GetFindingRecommendationInput{
    AnalyzerArn: aws.String("arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a"),
    Id:          aws.String("!"),
}

result, err := svc.GetFindingRecommendation(input)
if err != nil {
    if aerr, ok := err.(awserr.Error); ok {
        switch aerr.Code() {
        case accessanalyzer.ErrCodeResourceNotFoundException:
            fmt.Println(accessanalyzer.ErrCodeResourceNotFoundException, aerr.Error())
        case accessanalyzer.ErrCodeValidationException:
            fmt.Println(accessanalyzer.ErrCodeValidationException, aerr.Error())
        case accessanalyzer.ErrCodeInternalServerException:
            fmt.Println(accessanalyzer.ErrCodeInternalServerException, aerr.Error())
        case accessanalyzer.ErrCodeThrottlingException:
            fmt.Println(accessanalyzer.ErrCodeThrottlingException, aerr.Error())
        case accessanalyzer.ErrCodeAccessDeniedException:
            fmt.Println(accessanalyzer.ErrCodeAccessDeniedException, aerr.Error())
        default:
            fmt.Println(aerr.Error())
        }
    } else {
        // Print the error, cast err to awserr.Error to get the Code and
        // Message from an error.
        fmt.Println(err.Error())
    }
    return
}

fmt.Println(result)

func (*AccessAnalyzer) GetFindingRecommendationPages ¶

func (c *AccessAnalyzer) GetFindingRecommendationPages(input *GetFindingRecommendationInput, fn func(*GetFindingRecommendationOutput, bool) bool) error

GetFindingRecommendationPages iterates over the pages of a GetFindingRecommendation operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See GetFindingRecommendation method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a GetFindingRecommendation operation.
pageNum := 0
err := client.GetFindingRecommendationPages(params,
    func(page *accessanalyzer.GetFindingRecommendationOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) GetFindingRecommendationPagesWithContext ¶

func (c *AccessAnalyzer) GetFindingRecommendationPagesWithContext(ctx aws.Context, input *GetFindingRecommendationInput, fn func(*GetFindingRecommendationOutput, bool) bool, opts ...request.Option) error

GetFindingRecommendationPagesWithContext same as GetFindingRecommendationPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetFindingRecommendationRequest ¶

func (c *AccessAnalyzer) GetFindingRecommendationRequest(input *GetFindingRecommendationInput) (req *request.Request, output *GetFindingRecommendationOutput)

GetFindingRecommendationRequest generates a "aws/request.Request" representing the client's request for the GetFindingRecommendation operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetFindingRecommendation for more information on using the GetFindingRecommendation API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetFindingRecommendationRequest method.
req, resp := client.GetFindingRecommendationRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFindingRecommendation

func (*AccessAnalyzer) GetFindingRecommendationWithContext ¶

func (c *AccessAnalyzer) GetFindingRecommendationWithContext(ctx aws.Context, input *GetFindingRecommendationInput, opts ...request.Option) (*GetFindingRecommendationOutput, error)

GetFindingRecommendationWithContext is the same as GetFindingRecommendation with the addition of the ability to pass a context and additional request options.

See GetFindingRecommendation for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetFindingRequest ¶

func (c *AccessAnalyzer) GetFindingRequest(input *GetFindingInput) (req *request.Request, output *GetFindingOutput)

GetFindingRequest generates a "aws/request.Request" representing the client's request for the GetFinding operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetFinding for more information on using the GetFinding API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetFindingRequest method.
req, resp := client.GetFindingRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFinding

func (*AccessAnalyzer) GetFindingV2 ¶

func (c *AccessAnalyzer) GetFindingV2(input *GetFindingV2Input) (*GetFindingV2Output, error)

GetFindingV2 API operation for Access Analyzer.

Retrieves information about the specified finding. GetFinding and GetFindingV2 both use access-analyzer:GetFinding in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:GetFinding action.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetFindingV2 for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFindingV2

func (*AccessAnalyzer) GetFindingV2Pages ¶

func (c *AccessAnalyzer) GetFindingV2Pages(input *GetFindingV2Input, fn func(*GetFindingV2Output, bool) bool) error

GetFindingV2Pages iterates over the pages of a GetFindingV2 operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See GetFindingV2 method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a GetFindingV2 operation.
pageNum := 0
err := client.GetFindingV2Pages(params,
    func(page *accessanalyzer.GetFindingV2Output, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) GetFindingV2PagesWithContext ¶

func (c *AccessAnalyzer) GetFindingV2PagesWithContext(ctx aws.Context, input *GetFindingV2Input, fn func(*GetFindingV2Output, bool) bool, opts ...request.Option) error

GetFindingV2PagesWithContext same as GetFindingV2Pages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetFindingV2Request ¶

func (c *AccessAnalyzer) GetFindingV2Request(input *GetFindingV2Input) (req *request.Request, output *GetFindingV2Output)

GetFindingV2Request generates a "aws/request.Request" representing the client's request for the GetFindingV2 operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetFindingV2 for more information on using the GetFindingV2 API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetFindingV2Request method.
req, resp := client.GetFindingV2Request(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFindingV2

func (*AccessAnalyzer) GetFindingV2WithContext ¶

func (c *AccessAnalyzer) GetFindingV2WithContext(ctx aws.Context, input *GetFindingV2Input, opts ...request.Option) (*GetFindingV2Output, error)

GetFindingV2WithContext is the same as GetFindingV2 with the addition of the ability to pass a context and additional request options.

See GetFindingV2 for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetFindingWithContext ¶

func (c *AccessAnalyzer) GetFindingWithContext(ctx aws.Context, input *GetFindingInput, opts ...request.Option) (*GetFindingOutput, error)

GetFindingWithContext is the same as GetFinding with the addition of the ability to pass a context and additional request options.

See GetFinding for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetGeneratedPolicy ¶

func (c *AccessAnalyzer) GetGeneratedPolicy(input *GetGeneratedPolicyInput) (*GetGeneratedPolicyOutput, error)

GetGeneratedPolicy API operation for Access Analyzer.

Retrieves the policy that was generated using StartPolicyGeneration.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetGeneratedPolicy for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetGeneratedPolicy

func (*AccessAnalyzer) GetGeneratedPolicyRequest ¶

func (c *AccessAnalyzer) GetGeneratedPolicyRequest(input *GetGeneratedPolicyInput) (req *request.Request, output *GetGeneratedPolicyOutput)

GetGeneratedPolicyRequest generates a "aws/request.Request" representing the client's request for the GetGeneratedPolicy operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetGeneratedPolicy for more information on using the GetGeneratedPolicy API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetGeneratedPolicyRequest method.
req, resp := client.GetGeneratedPolicyRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetGeneratedPolicy

func (*AccessAnalyzer) GetGeneratedPolicyWithContext ¶

func (c *AccessAnalyzer) GetGeneratedPolicyWithContext(ctx aws.Context, input *GetGeneratedPolicyInput, opts ...request.Option) (*GetGeneratedPolicyOutput, error)

GetGeneratedPolicyWithContext is the same as GetGeneratedPolicy with the addition of the ability to pass a context and additional request options.

See GetGeneratedPolicy for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAccessPreviewFindings ¶

func (c *AccessAnalyzer) ListAccessPreviewFindings(input *ListAccessPreviewFindingsInput) (*ListAccessPreviewFindingsOutput, error)

ListAccessPreviewFindings API operation for Access Analyzer.

Retrieves a list of access preview findings generated by the specified access preview.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListAccessPreviewFindings for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ConflictException A conflict exception error.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAccessPreviewFindings

func (*AccessAnalyzer) ListAccessPreviewFindingsPages ¶

func (c *AccessAnalyzer) ListAccessPreviewFindingsPages(input *ListAccessPreviewFindingsInput, fn func(*ListAccessPreviewFindingsOutput, bool) bool) error

ListAccessPreviewFindingsPages iterates over the pages of a ListAccessPreviewFindings operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListAccessPreviewFindings method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListAccessPreviewFindings operation.
pageNum := 0
err := client.ListAccessPreviewFindingsPages(params,
    func(page *accessanalyzer.ListAccessPreviewFindingsOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListAccessPreviewFindingsPagesWithContext ¶

func (c *AccessAnalyzer) ListAccessPreviewFindingsPagesWithContext(ctx aws.Context, input *ListAccessPreviewFindingsInput, fn func(*ListAccessPreviewFindingsOutput, bool) bool, opts ...request.Option) error

ListAccessPreviewFindingsPagesWithContext same as ListAccessPreviewFindingsPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAccessPreviewFindingsRequest ¶

func (c *AccessAnalyzer) ListAccessPreviewFindingsRequest(input *ListAccessPreviewFindingsInput) (req *request.Request, output *ListAccessPreviewFindingsOutput)

ListAccessPreviewFindingsRequest generates a "aws/request.Request" representing the client's request for the ListAccessPreviewFindings operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListAccessPreviewFindings for more information on using the ListAccessPreviewFindings API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListAccessPreviewFindingsRequest method.
req, resp := client.ListAccessPreviewFindingsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAccessPreviewFindings

func (*AccessAnalyzer) ListAccessPreviewFindingsWithContext ¶

func (c *AccessAnalyzer) ListAccessPreviewFindingsWithContext(ctx aws.Context, input *ListAccessPreviewFindingsInput, opts ...request.Option) (*ListAccessPreviewFindingsOutput, error)

ListAccessPreviewFindingsWithContext is the same as ListAccessPreviewFindings with the addition of the ability to pass a context and additional request options.

See ListAccessPreviewFindings for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAccessPreviews ¶

func (c *AccessAnalyzer) ListAccessPreviews(input *ListAccessPreviewsInput) (*ListAccessPreviewsOutput, error)

ListAccessPreviews API operation for Access Analyzer.

Retrieves a list of access previews for the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListAccessPreviews for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAccessPreviews

func (*AccessAnalyzer) ListAccessPreviewsPages ¶

func (c *AccessAnalyzer) ListAccessPreviewsPages(input *ListAccessPreviewsInput, fn func(*ListAccessPreviewsOutput, bool) bool) error

ListAccessPreviewsPages iterates over the pages of a ListAccessPreviews operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListAccessPreviews method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListAccessPreviews operation.
pageNum := 0
err := client.ListAccessPreviewsPages(params,
    func(page *accessanalyzer.ListAccessPreviewsOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListAccessPreviewsPagesWithContext ¶

func (c *AccessAnalyzer) ListAccessPreviewsPagesWithContext(ctx aws.Context, input *ListAccessPreviewsInput, fn func(*ListAccessPreviewsOutput, bool) bool, opts ...request.Option) error

ListAccessPreviewsPagesWithContext same as ListAccessPreviewsPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAccessPreviewsRequest ¶

func (c *AccessAnalyzer) ListAccessPreviewsRequest(input *ListAccessPreviewsInput) (req *request.Request, output *ListAccessPreviewsOutput)

ListAccessPreviewsRequest generates a "aws/request.Request" representing the client's request for the ListAccessPreviews operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListAccessPreviews for more information on using the ListAccessPreviews API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListAccessPreviewsRequest method.
req, resp := client.ListAccessPreviewsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAccessPreviews

func (*AccessAnalyzer) ListAccessPreviewsWithContext ¶

func (c *AccessAnalyzer) ListAccessPreviewsWithContext(ctx aws.Context, input *ListAccessPreviewsInput, opts ...request.Option) (*ListAccessPreviewsOutput, error)

ListAccessPreviewsWithContext is the same as ListAccessPreviews with the addition of the ability to pass a context and additional request options.

See ListAccessPreviews for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAnalyzedResources ¶

func (c *AccessAnalyzer) ListAnalyzedResources(input *ListAnalyzedResourcesInput) (*ListAnalyzedResourcesOutput, error)

ListAnalyzedResources API operation for Access Analyzer.

Retrieves a list of resources of the specified type that have been analyzed by the specified external access analyzer. This action is not supported for unused access analyzers.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListAnalyzedResources for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzedResources

func (*AccessAnalyzer) ListAnalyzedResourcesPages ¶

func (c *AccessAnalyzer) ListAnalyzedResourcesPages(input *ListAnalyzedResourcesInput, fn func(*ListAnalyzedResourcesOutput, bool) bool) error

ListAnalyzedResourcesPages iterates over the pages of a ListAnalyzedResources operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListAnalyzedResources method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListAnalyzedResources operation.
pageNum := 0
err := client.ListAnalyzedResourcesPages(params,
    func(page *accessanalyzer.ListAnalyzedResourcesOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListAnalyzedResourcesPagesWithContext ¶

func (c *AccessAnalyzer) ListAnalyzedResourcesPagesWithContext(ctx aws.Context, input *ListAnalyzedResourcesInput, fn func(*ListAnalyzedResourcesOutput, bool) bool, opts ...request.Option) error

ListAnalyzedResourcesPagesWithContext same as ListAnalyzedResourcesPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAnalyzedResourcesRequest ¶

func (c *AccessAnalyzer) ListAnalyzedResourcesRequest(input *ListAnalyzedResourcesInput) (req *request.Request, output *ListAnalyzedResourcesOutput)

ListAnalyzedResourcesRequest generates a "aws/request.Request" representing the client's request for the ListAnalyzedResources operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListAnalyzedResources for more information on using the ListAnalyzedResources API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListAnalyzedResourcesRequest method.
req, resp := client.ListAnalyzedResourcesRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzedResources

func (*AccessAnalyzer) ListAnalyzedResourcesWithContext ¶

func (c *AccessAnalyzer) ListAnalyzedResourcesWithContext(ctx aws.Context, input *ListAnalyzedResourcesInput, opts ...request.Option) (*ListAnalyzedResourcesOutput, error)

ListAnalyzedResourcesWithContext is the same as ListAnalyzedResources with the addition of the ability to pass a context and additional request options.

See ListAnalyzedResources for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAnalyzers ¶

func (c *AccessAnalyzer) ListAnalyzers(input *ListAnalyzersInput) (*ListAnalyzersOutput, error)

ListAnalyzers API operation for Access Analyzer.

Retrieves a list of analyzers.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListAnalyzers for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzers

func (*AccessAnalyzer) ListAnalyzersPages ¶

func (c *AccessAnalyzer) ListAnalyzersPages(input *ListAnalyzersInput, fn func(*ListAnalyzersOutput, bool) bool) error

ListAnalyzersPages iterates over the pages of a ListAnalyzers operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListAnalyzers method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListAnalyzers operation.
pageNum := 0
err := client.ListAnalyzersPages(params,
    func(page *accessanalyzer.ListAnalyzersOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListAnalyzersPagesWithContext ¶

func (c *AccessAnalyzer) ListAnalyzersPagesWithContext(ctx aws.Context, input *ListAnalyzersInput, fn func(*ListAnalyzersOutput, bool) bool, opts ...request.Option) error

ListAnalyzersPagesWithContext same as ListAnalyzersPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAnalyzersRequest ¶

func (c *AccessAnalyzer) ListAnalyzersRequest(input *ListAnalyzersInput) (req *request.Request, output *ListAnalyzersOutput)

ListAnalyzersRequest generates a "aws/request.Request" representing the client's request for the ListAnalyzers operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListAnalyzers for more information on using the ListAnalyzers API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListAnalyzersRequest method.
req, resp := client.ListAnalyzersRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzers

func (*AccessAnalyzer) ListAnalyzersWithContext ¶

func (c *AccessAnalyzer) ListAnalyzersWithContext(ctx aws.Context, input *ListAnalyzersInput, opts ...request.Option) (*ListAnalyzersOutput, error)

ListAnalyzersWithContext is the same as ListAnalyzers with the addition of the ability to pass a context and additional request options.

See ListAnalyzers for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListArchiveRules ¶

func (c *AccessAnalyzer) ListArchiveRules(input *ListArchiveRulesInput) (*ListArchiveRulesOutput, error)

ListArchiveRules API operation for Access Analyzer.

Retrieves a list of archive rules created for the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListArchiveRules for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListArchiveRules

func (*AccessAnalyzer) ListArchiveRulesPages ¶

func (c *AccessAnalyzer) ListArchiveRulesPages(input *ListArchiveRulesInput, fn func(*ListArchiveRulesOutput, bool) bool) error

ListArchiveRulesPages iterates over the pages of a ListArchiveRules operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListArchiveRules method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListArchiveRules operation.
pageNum := 0
err := client.ListArchiveRulesPages(params,
    func(page *accessanalyzer.ListArchiveRulesOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListArchiveRulesPagesWithContext ¶

func (c *AccessAnalyzer) ListArchiveRulesPagesWithContext(ctx aws.Context, input *ListArchiveRulesInput, fn func(*ListArchiveRulesOutput, bool) bool, opts ...request.Option) error

ListArchiveRulesPagesWithContext same as ListArchiveRulesPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListArchiveRulesRequest ¶

func (c *AccessAnalyzer) ListArchiveRulesRequest(input *ListArchiveRulesInput) (req *request.Request, output *ListArchiveRulesOutput)

ListArchiveRulesRequest generates a "aws/request.Request" representing the client's request for the ListArchiveRules operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListArchiveRules for more information on using the ListArchiveRules API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListArchiveRulesRequest method.
req, resp := client.ListArchiveRulesRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListArchiveRules

func (*AccessAnalyzer) ListArchiveRulesWithContext ¶

func (c *AccessAnalyzer) ListArchiveRulesWithContext(ctx aws.Context, input *ListArchiveRulesInput, opts ...request.Option) (*ListArchiveRulesOutput, error)

ListArchiveRulesWithContext is the same as ListArchiveRules with the addition of the ability to pass a context and additional request options.

See ListArchiveRules for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListFindings ¶

func (c *AccessAnalyzer) ListFindings(input *ListFindingsInput) (*ListFindingsOutput, error)

ListFindings API operation for Access Analyzer.

Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use access-analyzer:ListFindings in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:ListFindings action.

To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the IAM User Guide.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListFindings for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListFindings

func (*AccessAnalyzer) ListFindingsPages ¶

func (c *AccessAnalyzer) ListFindingsPages(input *ListFindingsInput, fn func(*ListFindingsOutput, bool) bool) error

ListFindingsPages iterates over the pages of a ListFindings operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListFindings method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListFindings operation.
pageNum := 0
err := client.ListFindingsPages(params,
    func(page *accessanalyzer.ListFindingsOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListFindingsPagesWithContext ¶

func (c *AccessAnalyzer) ListFindingsPagesWithContext(ctx aws.Context, input *ListFindingsInput, fn func(*ListFindingsOutput, bool) bool, opts ...request.Option) error

ListFindingsPagesWithContext same as ListFindingsPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListFindingsRequest ¶

func (c *AccessAnalyzer) ListFindingsRequest(input *ListFindingsInput) (req *request.Request, output *ListFindingsOutput)

ListFindingsRequest generates a "aws/request.Request" representing the client's request for the ListFindings operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListFindings for more information on using the ListFindings API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListFindingsRequest method.
req, resp := client.ListFindingsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListFindings

func (*AccessAnalyzer) ListFindingsV2 ¶

func (c *AccessAnalyzer) ListFindingsV2(input *ListFindingsV2Input) (*ListFindingsV2Output, error)

ListFindingsV2 API operation for Access Analyzer.

Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use access-analyzer:ListFindings in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:ListFindings action.

To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the IAM User Guide.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListFindingsV2 for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListFindingsV2

func (*AccessAnalyzer) ListFindingsV2Pages ¶

func (c *AccessAnalyzer) ListFindingsV2Pages(input *ListFindingsV2Input, fn func(*ListFindingsV2Output, bool) bool) error

ListFindingsV2Pages iterates over the pages of a ListFindingsV2 operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListFindingsV2 method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListFindingsV2 operation.
pageNum := 0
err := client.ListFindingsV2Pages(params,
    func(page *accessanalyzer.ListFindingsV2Output, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListFindingsV2PagesWithContext ¶

func (c *AccessAnalyzer) ListFindingsV2PagesWithContext(ctx aws.Context, input *ListFindingsV2Input, fn func(*ListFindingsV2Output, bool) bool, opts ...request.Option) error

ListFindingsV2PagesWithContext same as ListFindingsV2Pages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListFindingsV2Request ¶

func (c *AccessAnalyzer) ListFindingsV2Request(input *ListFindingsV2Input) (req *request.Request, output *ListFindingsV2Output)

ListFindingsV2Request generates a "aws/request.Request" representing the client's request for the ListFindingsV2 operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListFindingsV2 for more information on using the ListFindingsV2 API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListFindingsV2Request method.
req, resp := client.ListFindingsV2Request(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListFindingsV2

func (*AccessAnalyzer) ListFindingsV2WithContext ¶

func (c *AccessAnalyzer) ListFindingsV2WithContext(ctx aws.Context, input *ListFindingsV2Input, opts ...request.Option) (*ListFindingsV2Output, error)

ListFindingsV2WithContext is the same as ListFindingsV2 with the addition of the ability to pass a context and additional request options.

See ListFindingsV2 for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListFindingsWithContext ¶

func (c *AccessAnalyzer) ListFindingsWithContext(ctx aws.Context, input *ListFindingsInput, opts ...request.Option) (*ListFindingsOutput, error)

ListFindingsWithContext is the same as ListFindings with the addition of the ability to pass a context and additional request options.

See ListFindings for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListPolicyGenerations ¶

func (c *AccessAnalyzer) ListPolicyGenerations(input *ListPolicyGenerationsInput) (*ListPolicyGenerationsOutput, error)

ListPolicyGenerations API operation for Access Analyzer.

Lists all of the policy generations requested in the last seven days.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListPolicyGenerations for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListPolicyGenerations

func (*AccessAnalyzer) ListPolicyGenerationsPages ¶

func (c *AccessAnalyzer) ListPolicyGenerationsPages(input *ListPolicyGenerationsInput, fn func(*ListPolicyGenerationsOutput, bool) bool) error

ListPolicyGenerationsPages iterates over the pages of a ListPolicyGenerations operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListPolicyGenerations method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListPolicyGenerations operation.
pageNum := 0
err := client.ListPolicyGenerationsPages(params,
    func(page *accessanalyzer.ListPolicyGenerationsOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListPolicyGenerationsPagesWithContext ¶

func (c *AccessAnalyzer) ListPolicyGenerationsPagesWithContext(ctx aws.Context, input *ListPolicyGenerationsInput, fn func(*ListPolicyGenerationsOutput, bool) bool, opts ...request.Option) error

ListPolicyGenerationsPagesWithContext same as ListPolicyGenerationsPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListPolicyGenerationsRequest ¶

func (c *AccessAnalyzer) ListPolicyGenerationsRequest(input *ListPolicyGenerationsInput) (req *request.Request, output *ListPolicyGenerationsOutput)

ListPolicyGenerationsRequest generates a "aws/request.Request" representing the client's request for the ListPolicyGenerations operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListPolicyGenerations for more information on using the ListPolicyGenerations API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListPolicyGenerationsRequest method.
req, resp := client.ListPolicyGenerationsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListPolicyGenerations

func (*AccessAnalyzer) ListPolicyGenerationsWithContext ¶

func (c *AccessAnalyzer) ListPolicyGenerationsWithContext(ctx aws.Context, input *ListPolicyGenerationsInput, opts ...request.Option) (*ListPolicyGenerationsOutput, error)

ListPolicyGenerationsWithContext is the same as ListPolicyGenerations with the addition of the ability to pass a context and additional request options.

See ListPolicyGenerations for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListTagsForResource ¶

func (c *AccessAnalyzer) ListTagsForResource(input *ListTagsForResourceInput) (*ListTagsForResourceOutput, error)

ListTagsForResource API operation for Access Analyzer.

Retrieves a list of tags applied to the specified resource.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListTagsForResource for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListTagsForResource

func (*AccessAnalyzer) ListTagsForResourceRequest ¶

func (c *AccessAnalyzer) ListTagsForResourceRequest(input *ListTagsForResourceInput) (req *request.Request, output *ListTagsForResourceOutput)

ListTagsForResourceRequest generates a "aws/request.Request" representing the client's request for the ListTagsForResource operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListTagsForResource for more information on using the ListTagsForResource API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListTagsForResourceRequest method.
req, resp := client.ListTagsForResourceRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListTagsForResource

func (*AccessAnalyzer) ListTagsForResourceWithContext ¶

func (c *AccessAnalyzer) ListTagsForResourceWithContext(ctx aws.Context, input *ListTagsForResourceInput, opts ...request.Option) (*ListTagsForResourceOutput, error)

ListTagsForResourceWithContext is the same as ListTagsForResource with the addition of the ability to pass a context and additional request options.

See ListTagsForResource for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) StartPolicyGeneration ¶

func (c *AccessAnalyzer) StartPolicyGeneration(input *StartPolicyGenerationInput) (*StartPolicyGenerationOutput, error)

StartPolicyGeneration API operation for Access Analyzer.

Starts the policy generation request.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation StartPolicyGeneration for usage and error information.

Returned Error Types:

• ConflictException A conflict exception error.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ServiceQuotaExceededException Service quote met error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StartPolicyGeneration

func (*AccessAnalyzer) StartPolicyGenerationRequest ¶

func (c *AccessAnalyzer) StartPolicyGenerationRequest(input *StartPolicyGenerationInput) (req *request.Request, output *StartPolicyGenerationOutput)

StartPolicyGenerationRequest generates a "aws/request.Request" representing the client's request for the StartPolicyGeneration operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See StartPolicyGeneration for more information on using the StartPolicyGeneration API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the StartPolicyGenerationRequest method.
req, resp := client.StartPolicyGenerationRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StartPolicyGeneration

func (*AccessAnalyzer) StartPolicyGenerationWithContext ¶

func (c *AccessAnalyzer) StartPolicyGenerationWithContext(ctx aws.Context, input *StartPolicyGenerationInput, opts ...request.Option) (*StartPolicyGenerationOutput, error)

StartPolicyGenerationWithContext is the same as StartPolicyGeneration with the addition of the ability to pass a context and additional request options.

See StartPolicyGeneration for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) StartResourceScan ¶

func (c *AccessAnalyzer) StartResourceScan(input *StartResourceScanInput) (*StartResourceScanOutput, error)

StartResourceScan API operation for Access Analyzer.

Immediately starts a scan of the policies applied to the specified resource.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation StartResourceScan for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StartResourceScan

func (*AccessAnalyzer) StartResourceScanRequest ¶

func (c *AccessAnalyzer) StartResourceScanRequest(input *StartResourceScanInput) (req *request.Request, output *StartResourceScanOutput)

StartResourceScanRequest generates a "aws/request.Request" representing the client's request for the StartResourceScan operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See StartResourceScan for more information on using the StartResourceScan API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the StartResourceScanRequest method.
req, resp := client.StartResourceScanRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StartResourceScan

func (*AccessAnalyzer) StartResourceScanWithContext ¶

func (c *AccessAnalyzer) StartResourceScanWithContext(ctx aws.Context, input *StartResourceScanInput, opts ...request.Option) (*StartResourceScanOutput, error)

StartResourceScanWithContext is the same as StartResourceScan with the addition of the ability to pass a context and additional request options.

See StartResourceScan for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) TagResource ¶

func (c *AccessAnalyzer) TagResource(input *TagResourceInput) (*TagResourceOutput, error)

TagResource API operation for Access Analyzer.

Adds a tag to the specified resource.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation TagResource for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/TagResource

func (*AccessAnalyzer) TagResourceRequest ¶

func (c *AccessAnalyzer) TagResourceRequest(input *TagResourceInput) (req *request.Request, output *TagResourceOutput)

TagResourceRequest generates a "aws/request.Request" representing the client's request for the TagResource operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See TagResource for more information on using the TagResource API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the TagResourceRequest method.
req, resp := client.TagResourceRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/TagResource

func (*AccessAnalyzer) TagResourceWithContext ¶

func (c *AccessAnalyzer) TagResourceWithContext(ctx aws.Context, input *TagResourceInput, opts ...request.Option) (*TagResourceOutput, error)

TagResourceWithContext is the same as TagResource with the addition of the ability to pass a context and additional request options.

See TagResource for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) UntagResource ¶

func (c *AccessAnalyzer) UntagResource(input *UntagResourceInput) (*UntagResourceOutput, error)

UntagResource API operation for Access Analyzer.

Removes a tag from the specified resource.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation UntagResource for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UntagResource

func (*AccessAnalyzer) UntagResourceRequest ¶

func (c *AccessAnalyzer) UntagResourceRequest(input *UntagResourceInput) (req *request.Request, output *UntagResourceOutput)

UntagResourceRequest generates a "aws/request.Request" representing the client's request for the UntagResource operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See UntagResource for more information on using the UntagResource API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the UntagResourceRequest method.
req, resp := client.UntagResourceRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UntagResource

func (*AccessAnalyzer) UntagResourceWithContext ¶

func (c *AccessAnalyzer) UntagResourceWithContext(ctx aws.Context, input *UntagResourceInput, opts ...request.Option) (*UntagResourceOutput, error)

UntagResourceWithContext is the same as UntagResource with the addition of the ability to pass a context and additional request options.

See UntagResource for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) UpdateArchiveRule ¶

func (c *AccessAnalyzer) UpdateArchiveRule(input *UpdateArchiveRuleInput) (*UpdateArchiveRuleOutput, error)

UpdateArchiveRule API operation for Access Analyzer.

Updates the criteria and values for the specified archive rule.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation UpdateArchiveRule for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UpdateArchiveRule

func (*AccessAnalyzer) UpdateArchiveRuleRequest ¶

func (c *AccessAnalyzer) UpdateArchiveRuleRequest(input *UpdateArchiveRuleInput) (req *request.Request, output *UpdateArchiveRuleOutput)

UpdateArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the UpdateArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See UpdateArchiveRule for more information on using the UpdateArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the UpdateArchiveRuleRequest method.
req, resp := client.UpdateArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UpdateArchiveRule

func (*AccessAnalyzer) UpdateArchiveRuleWithContext ¶

func (c *AccessAnalyzer) UpdateArchiveRuleWithContext(ctx aws.Context, input *UpdateArchiveRuleInput, opts ...request.Option) (*UpdateArchiveRuleOutput, error)

UpdateArchiveRuleWithContext is the same as UpdateArchiveRule with the addition of the ability to pass a context and additional request options.

See UpdateArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) UpdateFindings ¶

func (c *AccessAnalyzer) UpdateFindings(input *UpdateFindingsInput) (*UpdateFindingsOutput, error)

UpdateFindings API operation for Access Analyzer.

Updates the status for the specified findings.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation UpdateFindings for usage and error information.

Returned Error Types:

• ResourceNotFoundException The specified resource could not be found.

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UpdateFindings

func (*AccessAnalyzer) UpdateFindingsRequest ¶

func (c *AccessAnalyzer) UpdateFindingsRequest(input *UpdateFindingsInput) (req *request.Request, output *UpdateFindingsOutput)

UpdateFindingsRequest generates a "aws/request.Request" representing the client's request for the UpdateFindings operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See UpdateFindings for more information on using the UpdateFindings API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the UpdateFindingsRequest method.
req, resp := client.UpdateFindingsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UpdateFindings

func (*AccessAnalyzer) UpdateFindingsWithContext ¶

func (c *AccessAnalyzer) UpdateFindingsWithContext(ctx aws.Context, input *UpdateFindingsInput, opts ...request.Option) (*UpdateFindingsOutput, error)

UpdateFindingsWithContext is the same as UpdateFindings with the addition of the ability to pass a context and additional request options.

See UpdateFindings for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ValidatePolicy ¶

func (c *AccessAnalyzer) ValidatePolicy(input *ValidatePolicyInput) (*ValidatePolicyOutput, error)

ValidatePolicy API operation for Access Analyzer.

Requests the validation of a policy and returns a list of findings. The findings help you identify issues and provide actionable recommendations to resolve the issue and enable you to author functional policies that meet security best practices.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ValidatePolicy for usage and error information.

Returned Error Types:

• ValidationException Validation exception error.

• InternalServerException Internal server error.

• ThrottlingException Throttling limit exceeded error.

• AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ValidatePolicy

func (*AccessAnalyzer) ValidatePolicyPages ¶

func (c *AccessAnalyzer) ValidatePolicyPages(input *ValidatePolicyInput, fn func(*ValidatePolicyOutput, bool) bool) error

ValidatePolicyPages iterates over the pages of a ValidatePolicy operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ValidatePolicy method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ValidatePolicy operation.
pageNum := 0
err := client.ValidatePolicyPages(params,
    func(page *accessanalyzer.ValidatePolicyOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ValidatePolicyPagesWithContext ¶

func (c *AccessAnalyzer) ValidatePolicyPagesWithContext(ctx aws.Context, input *ValidatePolicyInput, fn func(*ValidatePolicyOutput, bool) bool, opts ...request.Option) error

ValidatePolicyPagesWithContext same as ValidatePolicyPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ValidatePolicyRequest ¶

func (c *AccessAnalyzer) ValidatePolicyRequest(input *ValidatePolicyInput) (req *request.Request, output *ValidatePolicyOutput)

ValidatePolicyRequest generates a "aws/request.Request" representing the client's request for the ValidatePolicy operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ValidatePolicy for more information on using the ValidatePolicy API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ValidatePolicyRequest method.
req, resp := client.ValidatePolicyRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ValidatePolicy

func (*AccessAnalyzer) ValidatePolicyWithContext ¶

func (c *AccessAnalyzer) ValidatePolicyWithContext(ctx aws.Context, input *ValidatePolicyInput, opts ...request.Option) (*ValidatePolicyOutput, error)

ValidatePolicyWithContext is the same as ValidatePolicy with the addition of the ability to pass a context and additional request options.

See ValidatePolicy for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

type AccessDeniedException ¶

type AccessDeniedException struct {
    RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

    Message_ *string `locationName:"message" type:"string"`
    // contains filtered or unexported fields
}

You do not have sufficient access to perform this action.

func (*AccessDeniedException) Code ¶

func (s *AccessDeniedException) Code() string

Code returns the exception type name.

func (*AccessDeniedException) Error ¶

func (s *AccessDeniedException) Error() string

func (AccessDeniedException) GoString ¶

func (s AccessDeniedException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessDeniedException) Message ¶

func (s *AccessDeniedException) Message() string

Message returns the exception's message.

func (*AccessDeniedException) OrigErr ¶

func (s *AccessDeniedException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*AccessDeniedException) RequestID ¶

func (s *AccessDeniedException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*AccessDeniedException) StatusCode ¶

func (s *AccessDeniedException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (AccessDeniedException) String ¶

func (s AccessDeniedException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessPreview ¶

type AccessPreview struct {

    // The ARN of the analyzer used to generate the access preview.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

    // A map of resource ARNs for the proposed resource configuration.
    //
    // Configurations is a required field
    Configurations map[string]*Configuration `locationName:"configurations" type:"map" required:"true"`

    // The time at which the access preview was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The unique ID for the access preview.
    //
    // Id is a required field
    Id *string `locationName:"id" type:"string" required:"true"`

    // The status of the access preview.
    //
    //    * Creating - The access preview creation is in progress.
    //
    //    * Completed - The access preview is complete. You can preview findings
    //    for external access to the resource.
    //
    //    * Failed - The access preview creation has failed.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"AccessPreviewStatus"`

    // Provides more details about the current status of the access preview.
    //
    // For example, if the creation of the access preview fails, a Failed status
    // is returned. This failure can be due to an internal issue with the analysis
    // or due to an invalid resource configuration.
    StatusReason *AccessPreviewStatusReason `locationName:"statusReason" type:"structure"`
    // contains filtered or unexported fields
}

Contains information about an access preview.

func (AccessPreview) GoString ¶

func (s AccessPreview) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessPreview) SetAnalyzerArn ¶

func (s *AccessPreview) SetAnalyzerArn(v string) *AccessPreview

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*AccessPreview) SetConfigurations ¶

func (s *AccessPreview) SetConfigurations(v map[string]*Configuration) *AccessPreview

SetConfigurations sets the Configurations field's value.

func (*AccessPreview) SetCreatedAt ¶

func (s *AccessPreview) SetCreatedAt(v time.Time) *AccessPreview

SetCreatedAt sets the CreatedAt field's value.

func (*AccessPreview) SetId ¶

func (s *AccessPreview) SetId(v string) *AccessPreview

SetId sets the Id field's value.

func (*AccessPreview) SetStatus ¶

func (s *AccessPreview) SetStatus(v string) *AccessPreview

SetStatus sets the Status field's value.

func (*AccessPreview) SetStatusReason ¶

func (s *AccessPreview) SetStatusReason(v *AccessPreviewStatusReason) *AccessPreview

SetStatusReason sets the StatusReason field's value.

func (AccessPreview) String ¶

func (s AccessPreview) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessPreviewFinding ¶

type AccessPreviewFinding struct {

    // The action in the analyzed policy statement that an external principal has
    // permission to perform.
    Action []*string `locationName:"action" type:"list"`

    // Provides context on how the access preview finding compares to existing access
    // identified in IAM Access Analyzer.
    //
    //    * New - The finding is for newly-introduced access.
    //
    //    * Unchanged - The preview finding is an existing finding that would remain
    //    unchanged.
    //
    //    * Changed - The preview finding is an existing finding with a change in
    //    status.
    //
    // For example, a Changed finding with preview status Resolved and existing
    // status Active indicates the existing Active finding would become Resolved
    // as a result of the proposed permissions change.
    //
    // ChangeType is a required field
    ChangeType *string `locationName:"changeType" type:"string" required:"true" enum:"FindingChangeType"`

    // The condition in the analyzed policy statement that resulted in a finding.
    Condition map[string]*string `locationName:"condition" type:"map"`

    // The time at which the access preview finding was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // An error.
    Error *string `locationName:"error" type:"string"`

    // The existing ID of the finding in IAM Access Analyzer, provided only for
    // existing findings.
    ExistingFindingId *string `locationName:"existingFindingId" type:"string"`

    // The existing status of the finding, provided only for existing findings.
    ExistingFindingStatus *string `locationName:"existingFindingStatus" type:"string" enum:"FindingStatus"`

    // The ID of the access preview finding. This ID uniquely identifies the element
    // in the list of access preview findings and is not related to the finding
    // ID in Access Analyzer.
    //
    // Id is a required field
    Id *string `locationName:"id" type:"string" required:"true"`

    // Indicates whether the policy that generated the finding allows public access
    // to the resource.
    IsPublic *bool `locationName:"isPublic" type:"boolean"`

    // The external principal that has access to a resource within the zone of trust.
    Principal map[string]*string `locationName:"principal" type:"map"`

    // The resource that an external principal has access to. This is the resource
    // associated with the access preview.
    Resource *string `locationName:"resource" type:"string"`

    // The Amazon Web Services account ID that owns the resource. For most Amazon
    // Web Services resources, the owning account is the account in which the resource
    // was created.
    //
    // ResourceOwnerAccount is a required field
    ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

    // The type of the resource that can be accessed in the finding.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

    // The sources of the finding. This indicates how the access that generated
    // the finding is granted. It is populated for Amazon S3 bucket findings.
    Sources []*FindingSource `locationName:"sources" type:"list"`

    // The preview status of the finding. This is what the status of the finding
    // would be after permissions deployment. For example, a Changed finding with
    // preview status Resolved and existing status Active indicates the existing
    // Active finding would become Resolved as a result of the proposed permissions
    // change.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`
    // contains filtered or unexported fields
}

An access preview finding generated by the access preview.

func (AccessPreviewFinding) GoString ¶

func (s AccessPreviewFinding) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessPreviewFinding) SetAction ¶

func (s *AccessPreviewFinding) SetAction(v []*string) *AccessPreviewFinding

SetAction sets the Action field's value.

func (*AccessPreviewFinding) SetChangeType ¶

func (s *AccessPreviewFinding) SetChangeType(v string) *AccessPreviewFinding

SetChangeType sets the ChangeType field's value.

func (*AccessPreviewFinding) SetCondition ¶

func (s *AccessPreviewFinding) SetCondition(v map[string]*string) *AccessPreviewFinding

SetCondition sets the Condition field's value.

func (*AccessPreviewFinding) SetCreatedAt ¶

func (s *AccessPreviewFinding) SetCreatedAt(v time.Time) *AccessPreviewFinding

SetCreatedAt sets the CreatedAt field's value.

func (*AccessPreviewFinding) SetError ¶

func (s *AccessPreviewFinding) SetError(v string) *AccessPreviewFinding

SetError sets the Error field's value.

func (*AccessPreviewFinding) SetExistingFindingId ¶

func (s *AccessPreviewFinding) SetExistingFindingId(v string) *AccessPreviewFinding

SetExistingFindingId sets the ExistingFindingId field's value.

func (*AccessPreviewFinding) SetExistingFindingStatus ¶

func (s *AccessPreviewFinding) SetExistingFindingStatus(v string) *AccessPreviewFinding

SetExistingFindingStatus sets the ExistingFindingStatus field's value.

func (*AccessPreviewFinding) SetId ¶

func (s *AccessPreviewFinding) SetId(v string) *AccessPreviewFinding

SetId sets the Id field's value.

func (*AccessPreviewFinding) SetIsPublic ¶

func (s *AccessPreviewFinding) SetIsPublic(v bool) *AccessPreviewFinding

SetIsPublic sets the IsPublic field's value.

func (*AccessPreviewFinding) SetPrincipal ¶

func (s *AccessPreviewFinding) SetPrincipal(v map[string]*string) *AccessPreviewFinding

SetPrincipal sets the Principal field's value.

func (*AccessPreviewFinding) SetResource ¶

func (s *AccessPreviewFinding) SetResource(v string) *AccessPreviewFinding

SetResource sets the Resource field's value.

func (*AccessPreviewFinding) SetResourceOwnerAccount ¶

func (s *AccessPreviewFinding) SetResourceOwnerAccount(v string) *AccessPreviewFinding

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*AccessPreviewFinding) SetResourceType ¶

func (s *AccessPreviewFinding) SetResourceType(v string) *AccessPreviewFinding

SetResourceType sets the ResourceType field's value.

func (*AccessPreviewFinding) SetSources ¶

func (s *AccessPreviewFinding) SetSources(v []*FindingSource) *AccessPreviewFinding

SetSources sets the Sources field's value.

func (*AccessPreviewFinding) SetStatus ¶

func (s *AccessPreviewFinding) SetStatus(v string) *AccessPreviewFinding

SetStatus sets the Status field's value.

func (AccessPreviewFinding) String ¶

func (s AccessPreviewFinding) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessPreviewStatusReason ¶

type AccessPreviewStatusReason struct {

    // The reason code for the current status of the access preview.
    //
    // Code is a required field
    Code *string `locationName:"code" type:"string" required:"true" enum:"AccessPreviewStatusReasonCode"`
    // contains filtered or unexported fields
}

Provides more details about the current status of the access preview. For example, if the creation of the access preview fails, a Failed status is returned. This failure can be due to an internal issue with the analysis or due to an invalid proposed resource configuration.

func (AccessPreviewStatusReason) GoString ¶

func (s AccessPreviewStatusReason) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessPreviewStatusReason) SetCode ¶

func (s *AccessPreviewStatusReason) SetCode(v string) *AccessPreviewStatusReason

SetCode sets the Code field's value.

func (AccessPreviewStatusReason) String ¶

func (s AccessPreviewStatusReason) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessPreviewSummary ¶

type AccessPreviewSummary struct {

    // The ARN of the analyzer used to generate the access preview.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

    // The time at which the access preview was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The unique ID for the access preview.
    //
    // Id is a required field
    Id *string `locationName:"id" type:"string" required:"true"`

    // The status of the access preview.
    //
    //    * Creating - The access preview creation is in progress.
    //
    //    * Completed - The access preview is complete and previews the findings
    //    for external access to the resource.
    //
    //    * Failed - The access preview creation has failed.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"AccessPreviewStatus"`

    // Provides more details about the current status of the access preview. For
    // example, if the creation of the access preview fails, a Failed status is
    // returned. This failure can be due to an internal issue with the analysis
    // or due to an invalid proposed resource configuration.
    StatusReason *AccessPreviewStatusReason `locationName:"statusReason" type:"structure"`
    // contains filtered or unexported fields
}

Contains a summary of information about an access preview.

func (AccessPreviewSummary) GoString ¶

func (s AccessPreviewSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessPreviewSummary) SetAnalyzerArn ¶

func (s *AccessPreviewSummary) SetAnalyzerArn(v string) *AccessPreviewSummary

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*AccessPreviewSummary) SetCreatedAt ¶

func (s *AccessPreviewSummary) SetCreatedAt(v time.Time) *AccessPreviewSummary

SetCreatedAt sets the CreatedAt field's value.

func (*AccessPreviewSummary) SetId ¶

func (s *AccessPreviewSummary) SetId(v string) *AccessPreviewSummary

SetId sets the Id field's value.

func (*AccessPreviewSummary) SetStatus ¶

func (s *AccessPreviewSummary) SetStatus(v string) *AccessPreviewSummary

SetStatus sets the Status field's value.

func (*AccessPreviewSummary) SetStatusReason ¶

func (s *AccessPreviewSummary) SetStatusReason(v *AccessPreviewStatusReason) *AccessPreviewSummary

SetStatusReason sets the StatusReason field's value.

func (AccessPreviewSummary) String ¶

func (s AccessPreviewSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AclGrantee ¶

type AclGrantee struct {

    // The value specified is the canonical user ID of an Amazon Web Services account.
    Id *string `locationName:"id" type:"string"`

    // Used for granting permissions to a predefined group.
    Uri *string `locationName:"uri" type:"string"`
    // contains filtered or unexported fields
}

You specify each grantee as a type-value pair using one of these types. You can specify only one type of grantee. For more information, see PutBucketAcl (https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAcl.html).

func (AclGrantee) GoString ¶

func (s AclGrantee) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AclGrantee) SetId ¶

func (s *AclGrantee) SetId(v string) *AclGrantee

SetId sets the Id field's value.

func (*AclGrantee) SetUri ¶

func (s *AclGrantee) SetUri(v string) *AclGrantee

SetUri sets the Uri field's value.

func (AclGrantee) String ¶

func (s AclGrantee) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AnalyzedResource ¶

type AnalyzedResource struct {

    // The actions that an external principal is granted permission to use by the
    // policy that generated the finding.
    Actions []*string `locationName:"actions" type:"list"`

    // The time at which the resource was analyzed.
    //
    // AnalyzedAt is a required field
    AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The time at which the finding was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // An error message.
    Error *string `locationName:"error" type:"string"`

    // Indicates whether the policy that generated the finding grants public access
    // to the resource.
    //
    // IsPublic is a required field
    IsPublic *bool `locationName:"isPublic" type:"boolean" required:"true"`

    // The ARN of the resource that was analyzed.
    //
    // ResourceArn is a required field
    ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`

    // The Amazon Web Services account ID that owns the resource.
    //
    // ResourceOwnerAccount is a required field
    ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

    // The type of the resource that was analyzed.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

    // Indicates how the access that generated the finding is granted. This is populated
    // for Amazon S3 bucket findings.
    SharedVia []*string `locationName:"sharedVia" type:"list"`

    // The current status of the finding generated from the analyzed resource.
    Status *string `locationName:"status" type:"string" enum:"FindingStatus"`

    // The time at which the finding was updated.
    //
    // UpdatedAt is a required field
    UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
    // contains filtered or unexported fields
}

Contains details about the analyzed resource.

func (AnalyzedResource) GoString ¶

func (s AnalyzedResource) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AnalyzedResource) SetActions ¶

func (s *AnalyzedResource) SetActions(v []*string) *AnalyzedResource

SetActions sets the Actions field's value.

func (*AnalyzedResource) SetAnalyzedAt ¶

func (s *AnalyzedResource) SetAnalyzedAt(v time.Time) *AnalyzedResource

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*AnalyzedResource) SetCreatedAt ¶

func (s *AnalyzedResource) SetCreatedAt(v time.Time) *AnalyzedResource

SetCreatedAt sets the CreatedAt field's value.

func (*AnalyzedResource) SetError ¶

func (s *AnalyzedResource) SetError(v string) *AnalyzedResource

SetError sets the Error field's value.

func (*AnalyzedResource) SetIsPublic ¶

func (s *AnalyzedResource) SetIsPublic(v bool) *AnalyzedResource

SetIsPublic sets the IsPublic field's value.

func (*AnalyzedResource) SetResourceArn ¶

func (s *AnalyzedResource) SetResourceArn(v string) *AnalyzedResource

SetResourceArn sets the ResourceArn field's value.

func (*AnalyzedResource) SetResourceOwnerAccount ¶

func (s *AnalyzedResource) SetResourceOwnerAccount(v string) *AnalyzedResource

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*AnalyzedResource) SetResourceType ¶

func (s *AnalyzedResource) SetResourceType(v string) *AnalyzedResource

SetResourceType sets the ResourceType field's value.

func (*AnalyzedResource) SetSharedVia ¶

func (s *AnalyzedResource) SetSharedVia(v []*string) *AnalyzedResource

SetSharedVia sets the SharedVia field's value.

func (*AnalyzedResource) SetStatus ¶

func (s *AnalyzedResource) SetStatus(v string) *AnalyzedResource

SetStatus sets the Status field's value.

func (*AnalyzedResource) SetUpdatedAt ¶

func (s *AnalyzedResource) SetUpdatedAt(v time.Time) *AnalyzedResource

SetUpdatedAt sets the UpdatedAt field's value.

func (AnalyzedResource) String ¶

func (s AnalyzedResource) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AnalyzedResourceSummary ¶

type AnalyzedResourceSummary struct {

    // The ARN of the analyzed resource.
    //
    // ResourceArn is a required field
    ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`

    // The Amazon Web Services account ID that owns the resource.
    //
    // ResourceOwnerAccount is a required field
    ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

    // The type of resource that was analyzed.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`
    // contains filtered or unexported fields
}

Contains the ARN of the analyzed resource.

func (AnalyzedResourceSummary) GoString ¶

func (s AnalyzedResourceSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AnalyzedResourceSummary) SetResourceArn ¶

func (s *AnalyzedResourceSummary) SetResourceArn(v string) *AnalyzedResourceSummary

SetResourceArn sets the ResourceArn field's value.

func (*AnalyzedResourceSummary) SetResourceOwnerAccount ¶

func (s *AnalyzedResourceSummary) SetResourceOwnerAccount(v string) *AnalyzedResourceSummary

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*AnalyzedResourceSummary) SetResourceType ¶

func (s *AnalyzedResourceSummary) SetResourceType(v string) *AnalyzedResourceSummary

SetResourceType sets the ResourceType field's value.

func (AnalyzedResourceSummary) String ¶

func (s AnalyzedResourceSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AnalyzerConfiguration ¶

type AnalyzerConfiguration struct {

    // Specifies the configuration of an unused access analyzer for an Amazon Web
    // Services organization or account. External access analyzers do not support
    // any configuration.
    UnusedAccess *UnusedAccessConfiguration `locationName:"unusedAccess" type:"structure"`
    // contains filtered or unexported fields
}

Contains information about the configuration of an unused access analyzer for an Amazon Web Services organization or account.

func (AnalyzerConfiguration) GoString ¶

func (s AnalyzerConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AnalyzerConfiguration) SetUnusedAccess ¶

func (s *AnalyzerConfiguration) SetUnusedAccess(v *UnusedAccessConfiguration) *AnalyzerConfiguration

SetUnusedAccess sets the UnusedAccess field's value.

func (AnalyzerConfiguration) String ¶

func (s AnalyzerConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AnalyzerSummary ¶

type AnalyzerSummary struct {

    // The ARN of the analyzer.
    //
    // Arn is a required field
    Arn *string `locationName:"arn" type:"string" required:"true"`

    // Specifies whether the analyzer is an external access or unused access analyzer.
    Configuration *AnalyzerConfiguration `locationName:"configuration" type:"structure"`

    // A timestamp for the time at which the analyzer was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The resource that was most recently analyzed by the analyzer.
    LastResourceAnalyzed *string `locationName:"lastResourceAnalyzed" type:"string"`

    // The time at which the most recently analyzed resource was analyzed.
    LastResourceAnalyzedAt *time.Time `locationName:"lastResourceAnalyzedAt" type:"timestamp" timestampFormat:"iso8601"`

    // The name of the analyzer.
    //
    // Name is a required field
    Name *string `locationName:"name" min:"1" type:"string" required:"true"`

    // The status of the analyzer. An Active analyzer successfully monitors supported
    // resources and generates new findings. The analyzer is Disabled when a user
    // action, such as removing trusted access for Identity and Access Management
    // Access Analyzer from Organizations, causes the analyzer to stop generating
    // new findings. The status is Creating when the analyzer creation is in progress
    // and Failed when the analyzer creation has failed.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"AnalyzerStatus"`

    // The statusReason provides more details about the current status of the analyzer.
    // For example, if the creation for the analyzer fails, a Failed status is returned.
    // For an analyzer with organization as the type, this failure can be due to
    // an issue with creating the service-linked roles required in the member accounts
    // of the Amazon Web Services organization.
    StatusReason *StatusReason `locationName:"statusReason" type:"structure"`

    // The tags added to the analyzer.
    Tags map[string]*string `locationName:"tags" type:"map"`

    // The type of analyzer, which corresponds to the zone of trust chosen for the
    // analyzer.
    //
    // Type is a required field
    Type *string `locationName:"type" type:"string" required:"true" enum:"Type"`
    // contains filtered or unexported fields
}

Contains information about the analyzer.

func (AnalyzerSummary) GoString ¶

func (s AnalyzerSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AnalyzerSummary) SetArn ¶

func (s *AnalyzerSummary) SetArn(v string) *AnalyzerSummary

SetArn sets the Arn field's value.

func (*AnalyzerSummary) SetConfiguration ¶

func (s *AnalyzerSummary) SetConfiguration(v *AnalyzerConfiguration) *AnalyzerSummary

SetConfiguration sets the Configuration field's value.

func (*AnalyzerSummary) SetCreatedAt ¶

func (s *AnalyzerSummary) SetCreatedAt(v time.Time) *AnalyzerSummary

SetCreatedAt sets the CreatedAt field's value.

func (*AnalyzerSummary) SetLastResourceAnalyzed ¶

func (s *AnalyzerSummary) SetLastResourceAnalyzed(v string) *AnalyzerSummary

SetLastResourceAnalyzed sets the LastResourceAnalyzed field's value.

func (*AnalyzerSummary) SetLastResourceAnalyzedAt ¶

func (s *AnalyzerSummary) SetLastResourceAnalyzedAt(v time.Time) *AnalyzerSummary

SetLastResourceAnalyzedAt sets the LastResourceAnalyzedAt field's value.

func (*AnalyzerSummary) SetName ¶

func (s *AnalyzerSummary) SetName(v string) *AnalyzerSummary

SetName sets the Name field's value.

func (*AnalyzerSummary) SetStatus ¶

func (s *AnalyzerSummary) SetStatus(v string) *AnalyzerSummary

SetStatus sets the Status field's value.

func (*AnalyzerSummary) SetStatusReason ¶

func (s *AnalyzerSummary) SetStatusReason(v *StatusReason) *AnalyzerSummary

SetStatusReason sets the StatusReason field's value.

func (*AnalyzerSummary) SetTags ¶

func (s *AnalyzerSummary) SetTags(v map[string]*string) *AnalyzerSummary

SetTags sets the Tags field's value.

func (*AnalyzerSummary) SetType ¶

func (s *AnalyzerSummary) SetType(v string) *AnalyzerSummary

SetType sets the Type field's value.

func (AnalyzerSummary) String ¶

func (s AnalyzerSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ApplyArchiveRuleInput ¶

type ApplyArchiveRuleInput struct {

    // The Amazon resource name (ARN) of the analyzer.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

    // A client token.
    ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

    // The name of the rule to apply.
    //
    // RuleName is a required field
    RuleName *string `locationName:"ruleName" min:"1" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Retroactively applies an archive rule.

func (ApplyArchiveRuleInput) GoString ¶

func (s ApplyArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ApplyArchiveRuleInput) SetAnalyzerArn ¶

func (s *ApplyArchiveRuleInput) SetAnalyzerArn(v string) *ApplyArchiveRuleInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*ApplyArchiveRuleInput) SetClientToken ¶

func (s *ApplyArchiveRuleInput) SetClientToken(v string) *ApplyArchiveRuleInput

SetClientToken sets the ClientToken field's value.

func (*ApplyArchiveRuleInput) SetRuleName ¶

func (s *ApplyArchiveRuleInput) SetRuleName(v string) *ApplyArchiveRuleInput

SetRuleName sets the RuleName field's value.

func (ApplyArchiveRuleInput) String ¶

func (s ApplyArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ApplyArchiveRuleInput) Validate ¶

func (s *ApplyArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ApplyArchiveRuleOutput ¶

type ApplyArchiveRuleOutput struct {
    // contains filtered or unexported fields
}

func (ApplyArchiveRuleOutput) GoString ¶

func (s ApplyArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (ApplyArchiveRuleOutput) String ¶

func (s ApplyArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ArchiveRuleSummary ¶

type ArchiveRuleSummary struct {

    // The time at which the archive rule was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // A filter used to define the archive rule.
    //
    // Filter is a required field
    Filter map[string]*Criterion `locationName:"filter" type:"map" required:"true"`

    // The name of the archive rule.
    //
    // RuleName is a required field
    RuleName *string `locationName:"ruleName" min:"1" type:"string" required:"true"`

    // The time at which the archive rule was last updated.
    //
    // UpdatedAt is a required field
    UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
    // contains filtered or unexported fields
}

Contains information about an archive rule.

func (ArchiveRuleSummary) GoString ¶

func (s ArchiveRuleSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ArchiveRuleSummary) SetCreatedAt ¶

func (s *ArchiveRuleSummary) SetCreatedAt(v time.Time) *ArchiveRuleSummary

SetCreatedAt sets the CreatedAt field's value.

func (*ArchiveRuleSummary) SetFilter ¶

func (s *ArchiveRuleSummary) SetFilter(v map[string]*Criterion) *ArchiveRuleSummary

SetFilter sets the Filter field's value.

func (*ArchiveRuleSummary) SetRuleName ¶

func (s *ArchiveRuleSummary) SetRuleName(v string) *ArchiveRuleSummary

SetRuleName sets the RuleName field's value.

func (*ArchiveRuleSummary) SetUpdatedAt ¶

func (s *ArchiveRuleSummary) SetUpdatedAt(v time.Time) *ArchiveRuleSummary

SetUpdatedAt sets the UpdatedAt field's value.

func (ArchiveRuleSummary) String ¶

func (s ArchiveRuleSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CancelPolicyGenerationInput ¶

type CancelPolicyGenerationInput struct {

    // The JobId that is returned by the StartPolicyGeneration operation. The JobId
    // can be used with GetGeneratedPolicy to retrieve the generated policies or
    // used with CancelPolicyGeneration to cancel the policy generation request.
    //
    // JobId is a required field
    JobId *string `location:"uri" locationName:"jobId" type:"string" required:"true"`
    // contains filtered or unexported fields
}

func (CancelPolicyGenerationInput) GoString ¶

func (s CancelPolicyGenerationInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CancelPolicyGenerationInput) SetJobId ¶

func (s *CancelPolicyGenerationInput) SetJobId(v string) *CancelPolicyGenerationInput

SetJobId sets the JobId field's value.

func (CancelPolicyGenerationInput) String ¶

func (s CancelPolicyGenerationInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CancelPolicyGenerationInput) Validate ¶

func (s *CancelPolicyGenerationInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CancelPolicyGenerationOutput ¶

type CancelPolicyGenerationOutput struct {
    // contains filtered or unexported fields
}

func (CancelPolicyGenerationOutput) GoString ¶

func (s CancelPolicyGenerationOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (CancelPolicyGenerationOutput) String ¶

func (s CancelPolicyGenerationOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CheckAccessNotGrantedInput ¶

type CheckAccessNotGrantedInput struct {

    // An access object containing the permissions that shouldn't be granted by
    // the specified policy. If only actions are specified, IAM Access Analyzer
    // checks for access of the actions on all resources in the policy. If only
    // resources are specified, then IAM Access Analyzer checks which actions have
    // access to the specified resources. If both actions and resources are specified,
    // then IAM Access Analyzer checks which of the specified actions have access
    // to the specified resources.
    //
    // Access is a required field
    Access []*Access `locationName:"access" type:"list" required:"true"`

    // The JSON policy document to use as the content for the policy.
    //
    // PolicyDocument is a sensitive parameter and its value will be
    // replaced with "sensitive" in string returned by CheckAccessNotGrantedInput's
    // String and GoString methods.
    //
    // PolicyDocument is a required field
    PolicyDocument *string `locationName:"policyDocument" type:"string" required:"true" sensitive:"true"`

    // The type of policy. Identity policies grant permissions to IAM principals.
    // Identity policies include managed and inline policies for IAM roles, users,
    // and groups.
    //
    // Resource policies grant permissions on Amazon Web Services resources. Resource
    // policies include trust policies for IAM roles and bucket policies for Amazon
    // S3 buckets. You can provide a generic input such as identity policy or resource
    // policy or a specific input such as managed policy or Amazon S3 bucket policy.
    //
    // PolicyType is a required field
    PolicyType *string `locationName:"policyType" type:"string" required:"true" enum:"AccessCheckPolicyType"`
    // contains filtered or unexported fields
}

func (CheckAccessNotGrantedInput) GoString ¶

func (s CheckAccessNotGrantedInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckAccessNotGrantedInput) SetAccess ¶

func (s *CheckAccessNotGrantedInput) SetAccess(v []*Access) *CheckAccessNotGrantedInput

SetAccess sets the Access field's value.

func (*CheckAccessNotGrantedInput) SetPolicyDocument ¶

func (s *CheckAccessNotGrantedInput) SetPolicyDocument(v string) *CheckAccessNotGrantedInput

SetPolicyDocument sets the PolicyDocument field's value.

func (*CheckAccessNotGrantedInput) SetPolicyType ¶

func (s *CheckAccessNotGrantedInput) SetPolicyType(v string) *CheckAccessNotGrantedInput

SetPolicyType sets the PolicyType field's value.

func (CheckAccessNotGrantedInput) String ¶

func (s CheckAccessNotGrantedInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckAccessNotGrantedInput) Validate ¶

func (s *CheckAccessNotGrantedInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CheckAccessNotGrantedOutput ¶

type CheckAccessNotGrantedOutput struct {

    // The message indicating whether the specified access is allowed.
    Message *string `locationName:"message" type:"string"`

    // A description of the reasoning of the result.
    Reasons []*ReasonSummary `locationName:"reasons" type:"list"`

    // The result of the check for whether the access is allowed. If the result
    // is PASS, the specified policy doesn't allow any of the specified permissions
    // in the access object. If the result is FAIL, the specified policy might allow
    // some or all of the permissions in the access object.
    Result *string `locationName:"result" type:"string" enum:"CheckAccessNotGrantedResult"`
    // contains filtered or unexported fields
}

func (CheckAccessNotGrantedOutput) GoString ¶

func (s CheckAccessNotGrantedOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckAccessNotGrantedOutput) SetMessage ¶

func (s *CheckAccessNotGrantedOutput) SetMessage(v string) *CheckAccessNotGrantedOutput

SetMessage sets the Message field's value.

func (*CheckAccessNotGrantedOutput) SetReasons ¶

func (s *CheckAccessNotGrantedOutput) SetReasons(v []*ReasonSummary) *CheckAccessNotGrantedOutput

SetReasons sets the Reasons field's value.

func (*CheckAccessNotGrantedOutput) SetResult ¶

func (s *CheckAccessNotGrantedOutput) SetResult(v string) *CheckAccessNotGrantedOutput

SetResult sets the Result field's value.

func (CheckAccessNotGrantedOutput) String ¶

func (s CheckAccessNotGrantedOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CheckNoNewAccessInput ¶

type CheckNoNewAccessInput struct {

    // The JSON policy document to use as the content for the existing policy.
    //
    // ExistingPolicyDocument is a sensitive parameter and its value will be
    // replaced with "sensitive" in string returned by CheckNoNewAccessInput's
    // String and GoString methods.
    //
    // ExistingPolicyDocument is a required field
    ExistingPolicyDocument *string `locationName:"existingPolicyDocument" type:"string" required:"true" sensitive:"true"`

    // The JSON policy document to use as the content for the updated policy.
    //
    // NewPolicyDocument is a sensitive parameter and its value will be
    // replaced with "sensitive" in string returned by CheckNoNewAccessInput's
    // String and GoString methods.
    //
    // NewPolicyDocument is a required field
    NewPolicyDocument *string `locationName:"newPolicyDocument" type:"string" required:"true" sensitive:"true"`

    // The type of policy to compare. Identity policies grant permissions to IAM
    // principals. Identity policies include managed and inline policies for IAM
    // roles, users, and groups.
    //
    // Resource policies grant permissions on Amazon Web Services resources. Resource
    // policies include trust policies for IAM roles and bucket policies for Amazon
    // S3 buckets. You can provide a generic input such as identity policy or resource
    // policy or a specific input such as managed policy or Amazon S3 bucket policy.
    //
    // PolicyType is a required field
    PolicyType *string `locationName:"policyType" type:"string" required:"true" enum:"AccessCheckPolicyType"`
    // contains filtered or unexported fields
}

func (CheckNoNewAccessInput) GoString ¶

func (s CheckNoNewAccessInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoNewAccessInput) SetExistingPolicyDocument ¶

func (s *CheckNoNewAccessInput) SetExistingPolicyDocument(v string) *CheckNoNewAccessInput

SetExistingPolicyDocument sets the ExistingPolicyDocument field's value.

func (*CheckNoNewAccessInput) SetNewPolicyDocument ¶

func (s *CheckNoNewAccessInput) SetNewPolicyDocument(v string) *CheckNoNewAccessInput

SetNewPolicyDocument sets the NewPolicyDocument field's value.

func (*CheckNoNewAccessInput) SetPolicyType ¶

func (s *CheckNoNewAccessInput) SetPolicyType(v string) *CheckNoNewAccessInput

SetPolicyType sets the PolicyType field's value.

func (CheckNoNewAccessInput) String ¶

func (s CheckNoNewAccessInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoNewAccessInput) Validate ¶

func (s *CheckNoNewAccessInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CheckNoNewAccessOutput ¶

type CheckNoNewAccessOutput struct {

    // The message indicating whether the updated policy allows new access.
    Message *string `locationName:"message" type:"string"`

    // A description of the reasoning of the result.
    Reasons []*ReasonSummary `locationName:"reasons" type:"list"`

    // The result of the check for new access. If the result is PASS, no new access
    // is allowed by the updated policy. If the result is FAIL, the updated policy
    // might allow new access.
    Result *string `locationName:"result" type:"string" enum:"CheckNoNewAccessResult"`
    // contains filtered or unexported fields
}

func (CheckNoNewAccessOutput) GoString ¶

func (s CheckNoNewAccessOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoNewAccessOutput) SetMessage ¶

func (s *CheckNoNewAccessOutput) SetMessage(v string) *CheckNoNewAccessOutput

SetMessage sets the Message field's value.

func (*CheckNoNewAccessOutput) SetReasons ¶

func (s *CheckNoNewAccessOutput) SetReasons(v []*ReasonSummary) *CheckNoNewAccessOutput

SetReasons sets the Reasons field's value.

func (*CheckNoNewAccessOutput) SetResult ¶

func (s *CheckNoNewAccessOutput) SetResult(v string) *CheckNoNewAccessOutput

SetResult sets the Result field's value.

func (CheckNoNewAccessOutput) String ¶

func (s CheckNoNewAccessOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CheckNoPublicAccessInput ¶

type CheckNoPublicAccessInput struct {

    // The JSON policy document to evaluate for public access.
    //
    // PolicyDocument is a sensitive parameter and its value will be
    // replaced with "sensitive" in string returned by CheckNoPublicAccessInput's
    // String and GoString methods.
    //
    // PolicyDocument is a required field
    PolicyDocument *string `locationName:"policyDocument" type:"string" required:"true" sensitive:"true"`

    // The type of resource to evaluate for public access. For example, to check
    // for public access to Amazon S3 buckets, you can choose AWS::S3::Bucket for
    // the resource type.
    //
    // For resource types not supported as valid values, IAM Access Analyzer will
    // return an error.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"AccessCheckResourceType"`
    // contains filtered or unexported fields
}

func (CheckNoPublicAccessInput) GoString ¶

func (s CheckNoPublicAccessInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoPublicAccessInput) SetPolicyDocument ¶

func (s *CheckNoPublicAccessInput) SetPolicyDocument(v string) *CheckNoPublicAccessInput

SetPolicyDocument sets the PolicyDocument field's value.

func (*CheckNoPublicAccessInput) SetResourceType ¶

func (s *CheckNoPublicAccessInput) SetResourceType(v string) *CheckNoPublicAccessInput

SetResourceType sets the ResourceType field's value.

func (CheckNoPublicAccessInput) String ¶

func (s CheckNoPublicAccessInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoPublicAccessInput) Validate ¶

func (s *CheckNoPublicAccessInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CheckNoPublicAccessOutput ¶

type CheckNoPublicAccessOutput struct {

    // The message indicating whether the specified policy allows public access
    // to resources.
    Message *string `locationName:"message" type:"string"`

    // A list of reasons why the specified resource policy grants public access
    // for the resource type.
    Reasons []*ReasonSummary `locationName:"reasons" type:"list"`

    // The result of the check for public access to the specified resource type.
    // If the result is PASS, the policy doesn't allow public access to the specified
    // resource type. If the result is FAIL, the policy might allow public access
    // to the specified resource type.
    Result *string `locationName:"result" type:"string" enum:"CheckNoPublicAccessResult"`
    // contains filtered or unexported fields
}

func (CheckNoPublicAccessOutput) GoString ¶

func (s CheckNoPublicAccessOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoPublicAccessOutput) SetMessage ¶

func (s *CheckNoPublicAccessOutput) SetMessage(v string) *CheckNoPublicAccessOutput

SetMessage sets the Message field's value.

func (*CheckNoPublicAccessOutput) SetReasons ¶

func (s *CheckNoPublicAccessOutput) SetReasons(v []*ReasonSummary) *CheckNoPublicAccessOutput

SetReasons sets the Reasons field's value.

func (*CheckNoPublicAccessOutput) SetResult ¶

func (s *CheckNoPublicAccessOutput) SetResult(v string) *CheckNoPublicAccessOutput

SetResult sets the Result field's value.

func (CheckNoPublicAccessOutput) String ¶

func (s CheckNoPublicAccessOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CloudTrailDetails ¶

type CloudTrailDetails struct {

    // The ARN of the service role that IAM Access Analyzer uses to access your
    // CloudTrail trail and service last accessed information.
    //
    // AccessRole is a required field
    AccessRole *string `locationName:"accessRole" type:"string" required:"true"`

    // The end of the time range for which IAM Access Analyzer reviews your CloudTrail
    // events. Events with a timestamp after this time are not considered to generate
    // a policy. If this is not included in the request, the default value is the
    // current time.
    EndTime *time.Time `locationName:"endTime" type:"timestamp" timestampFormat:"iso8601"`

    // The start of the time range for which IAM Access Analyzer reviews your CloudTrail
    // events. Events with a timestamp before this time are not considered to generate
    // a policy.
    //
    // StartTime is a required field
    StartTime *time.Time `locationName:"startTime" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // A Trail object that contains settings for a trail.
    //
    // Trails is a required field
    Trails []*Trail `locationName:"trails" type:"list" required:"true"`
    // contains filtered or unexported fields
}

Contains information about CloudTrail access.

func (CloudTrailDetails) GoString ¶

func (s CloudTrailDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CloudTrailDetails) SetAccessRole ¶

func (s *CloudTrailDetails) SetAccessRole(v string) *CloudTrailDetails

SetAccessRole sets the AccessRole field's value.

func (*CloudTrailDetails) SetEndTime ¶

func (s *CloudTrailDetails) SetEndTime(v time.Time) *CloudTrailDetails

SetEndTime sets the EndTime field's value.

func (*CloudTrailDetails) SetStartTime ¶

func (s *CloudTrailDetails) SetStartTime(v time.Time) *CloudTrailDetails

SetStartTime sets the StartTime field's value.

func (*CloudTrailDetails) SetTrails ¶

func (s *CloudTrailDetails) SetTrails(v []*Trail) *CloudTrailDetails

SetTrails sets the Trails field's value.

func (CloudTrailDetails) String ¶

func (s CloudTrailDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CloudTrailDetails) Validate ¶

func (s *CloudTrailDetails) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CloudTrailProperties ¶

type CloudTrailProperties struct {

    // The end of the time range for which IAM Access Analyzer reviews your CloudTrail
    // events. Events with a timestamp after this time are not considered to generate
    // a policy. If this is not included in the request, the default value is the
    // current time.
    //
    // EndTime is a required field
    EndTime *time.Time `locationName:"endTime" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The start of the time range for which IAM Access Analyzer reviews your CloudTrail
    // events. Events with a timestamp before this time are not considered to generate
    // a policy.
    //
    // StartTime is a required field
    StartTime *time.Time `locationName:"startTime" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // A TrailProperties object that contains settings for trail properties.
    //
    // TrailProperties is a required field
    TrailProperties []*TrailProperties `locationName:"trailProperties" type:"list" required:"true"`
    // contains filtered or unexported fields
}

Contains information about CloudTrail access.

func (CloudTrailProperties) GoString ¶

func (s CloudTrailProperties) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CloudTrailProperties) SetEndTime ¶

func (s *CloudTrailProperties) SetEndTime(v time.Time) *CloudTrailProperties

SetEndTime sets the EndTime field's value.

func (*CloudTrailProperties) SetStartTime ¶

func (s *CloudTrailProperties) SetStartTime(v time.Time) *CloudTrailProperties

SetStartTime sets the StartTime field's value.

func (*CloudTrailProperties) SetTrailProperties ¶

func (s *CloudTrailProperties) SetTrailProperties(v []*TrailProperties) *CloudTrailProperties

SetTrailProperties sets the TrailProperties field's value.

func (CloudTrailProperties) String ¶

func (s CloudTrailProperties) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Configuration ¶

type Configuration struct {

    // The access control configuration is for a DynamoDB stream.
    DynamodbStream *DynamodbStreamConfiguration `locationName:"dynamodbStream" type:"structure"`

    // The access control configuration is for a DynamoDB table or index.
    DynamodbTable *DynamodbTableConfiguration `locationName:"dynamodbTable" type:"structure"`

    // The access control configuration is for an Amazon EBS volume snapshot.
    EbsSnapshot *EbsSnapshotConfiguration `locationName:"ebsSnapshot" type:"structure"`

    // The access control configuration is for an Amazon ECR repository.
    EcrRepository *EcrRepositoryConfiguration `locationName:"ecrRepository" type:"structure"`

    // The access control configuration is for an Amazon EFS file system.
    EfsFileSystem *EfsFileSystemConfiguration `locationName:"efsFileSystem" type:"structure"`

    // The access control configuration is for an IAM role.
    IamRole *IamRoleConfiguration `locationName:"iamRole" type:"structure"`

    // The access control configuration is for a KMS key.
    KmsKey *KmsKeyConfiguration `locationName:"kmsKey" type:"structure"`

    // The access control configuration is for an Amazon RDS DB cluster snapshot.
    RdsDbClusterSnapshot *RdsDbClusterSnapshotConfiguration `locationName:"rdsDbClusterSnapshot" type:"structure"`

    // The access control configuration is for an Amazon RDS DB snapshot.
    RdsDbSnapshot *RdsDbSnapshotConfiguration `locationName:"rdsDbSnapshot" type:"structure"`

    // The access control configuration is for an Amazon S3 bucket.
    S3Bucket *S3BucketConfiguration `locationName:"s3Bucket" type:"structure"`

    // The access control configuration is for an Amazon S3 directory bucket.
    S3ExpressDirectoryBucket *S3ExpressDirectoryBucketConfiguration `locationName:"s3ExpressDirectoryBucket" type:"structure"`

    // The access control configuration is for a Secrets Manager secret.
    SecretsManagerSecret *SecretsManagerSecretConfiguration `locationName:"secretsManagerSecret" type:"structure"`

    // The access control configuration is for an Amazon SNS topic
    SnsTopic *SnsTopicConfiguration `locationName:"snsTopic" type:"structure"`

    // The access control configuration is for an Amazon SQS queue.
    SqsQueue *SqsQueueConfiguration `locationName:"sqsQueue" type:"structure"`
    // contains filtered or unexported fields
}

Access control configuration structures for your resource. You specify the configuration as a type-value pair. You can specify only one type of access control configuration.

func (Configuration) GoString ¶

func (s Configuration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Configuration) SetDynamodbStream ¶

func (s *Configuration) SetDynamodbStream(v *DynamodbStreamConfiguration) *Configuration

SetDynamodbStream sets the DynamodbStream field's value.

func (*Configuration) SetDynamodbTable ¶

func (s *Configuration) SetDynamodbTable(v *DynamodbTableConfiguration) *Configuration

SetDynamodbTable sets the DynamodbTable field's value.

func (*Configuration) SetEbsSnapshot ¶

func (s *Configuration) SetEbsSnapshot(v *EbsSnapshotConfiguration) *Configuration

SetEbsSnapshot sets the EbsSnapshot field's value.

func (*Configuration) SetEcrRepository ¶

func (s *Configuration) SetEcrRepository(v *EcrRepositoryConfiguration) *Configuration

SetEcrRepository sets the EcrRepository field's value.

func (*Configuration) SetEfsFileSystem ¶

func (s *Configuration) SetEfsFileSystem(v *EfsFileSystemConfiguration) *Configuration

SetEfsFileSystem sets the EfsFileSystem field's value.

func (*Configuration) SetIamRole ¶

func (s *Configuration) SetIamRole(v *IamRoleConfiguration) *Configuration

SetIamRole sets the IamRole field's value.

func (*Configuration) SetKmsKey ¶

func (s *Configuration) SetKmsKey(v *KmsKeyConfiguration) *Configuration

SetKmsKey sets the KmsKey field's value.

func (*Configuration) SetRdsDbClusterSnapshot ¶

func (s *Configuration) SetRdsDbClusterSnapshot(v *RdsDbClusterSnapshotConfiguration) *Configuration

SetRdsDbClusterSnapshot sets the RdsDbClusterSnapshot field's value.

func (*Configuration) SetRdsDbSnapshot ¶

func (s *Configuration) SetRdsDbSnapshot(v *RdsDbSnapshotConfiguration) *Configuration

SetRdsDbSnapshot sets the RdsDbSnapshot field's value.

func (*Configuration) SetS3Bucket ¶

func (s *Configuration) SetS3Bucket(v *S3BucketConfiguration) *Configuration

SetS3Bucket sets the S3Bucket field's value.

func (*Configuration) SetS3ExpressDirectoryBucket ¶

func (s *Configuration) SetS3ExpressDirectoryBucket(v *S3ExpressDirectoryBucketConfiguration) *Configuration

SetS3ExpressDirectoryBucket sets the S3ExpressDirectoryBucket field's value.

func (*Configuration) SetSecretsManagerSecret ¶

func (s *Configuration) SetSecretsManagerSecret(v *SecretsManagerSecretConfiguration) *Configuration

SetSecretsManagerSecret sets the SecretsManagerSecret field's value.

func (*Configuration) SetSnsTopic ¶

func (s *Configuration) SetSnsTopic(v *SnsTopicConfiguration) *Configuration

SetSnsTopic sets the SnsTopic field's value.

func (*Configuration) SetSqsQueue ¶

func (s *Configuration) SetSqsQueue(v *SqsQueueConfiguration) *Configuration

SetSqsQueue sets the SqsQueue field's value.

func (Configuration) String ¶

func (s Configuration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Configuration) Validate ¶

func (s *Configuration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ConflictException ¶

type ConflictException struct {
    RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

    Message_ *string `locationName:"message" type:"string"`

    // The ID of the resource.
    //
    // ResourceId is a required field
    ResourceId *string `locationName:"resourceId" type:"string" required:"true"`

    // The resource type.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true"`
    // contains filtered or unexported fields
}

A conflict exception error.

func (*ConflictException) Code ¶

func (s *ConflictException) Code() string

Code returns the exception type name.

func (*ConflictException) Error ¶

func (s *ConflictException) Error() string

func (ConflictException) GoString ¶

func (s ConflictException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ConflictException) Message ¶

func (s *ConflictException) Message() string

Message returns the exception's message.

func (*ConflictException) OrigErr ¶

func (s *ConflictException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*ConflictException) RequestID ¶

func (s *ConflictException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*ConflictException) StatusCode ¶

func (s *ConflictException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (ConflictException) String ¶

func (s ConflictException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CreateAccessPreviewInput ¶

type CreateAccessPreviewInput struct {

    // The ARN of the account analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
    // used to generate the access preview. You can only create an access preview
    // for analyzers with an Account type and Active status.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

    // A client token.
    ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

    // Access control configuration for your resource that is used to generate the
    // access preview. The access preview includes findings for external access
    // allowed to the resource with the proposed access control configuration. The
    // configuration must contain exactly one element.
    //
    // Configurations is a required field
    Configurations map[string]*Configuration `locationName:"configurations" type:"map" required:"true"`
    // contains filtered or unexported fields
}

func (CreateAccessPreviewInput) GoString ¶

func (s CreateAccessPreviewInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAccessPreviewInput) SetAnalyzerArn ¶

func (s *CreateAccessPreviewInput) SetAnalyzerArn(v string) *CreateAccessPreviewInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*CreateAccessPreviewInput) SetClientToken ¶

func (s *CreateAccessPreviewInput) SetClientToken(v string) *CreateAccessPreviewInput

SetClientToken sets the ClientToken field's value.

func (*CreateAccessPreviewInput) SetConfigurations ¶

func (s *CreateAccessPreviewInput) SetConfigurations(v map[string]*Configuration) *CreateAccessPreviewInput

SetConfigurations sets the Configurations field's value.

func (CreateAccessPreviewInput) String ¶

func (s CreateAccessPreviewInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAccessPreviewInput) Validate ¶

func (s *CreateAccessPreviewInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CreateAccessPreviewOutput ¶

type CreateAccessPreviewOutput struct {

    // The unique ID for the access preview.
    //
    // Id is a required field
    Id *string `locationName:"id" type:"string" required:"true"`
    // contains filtered or unexported fields
}

func (CreateAccessPreviewOutput) GoString ¶

func (s CreateAccessPreviewOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAccessPreviewOutput) SetId ¶

func (s *CreateAccessPreviewOutput) SetId(v string) *CreateAccessPreviewOutput

SetId sets the Id field's value.

func (CreateAccessPreviewOutput) String ¶

func (s CreateAccessPreviewOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CreateAnalyzerInput ¶

type CreateAnalyzerInput struct {

    // The name of the analyzer to create.
    //
    // AnalyzerName is a required field
    AnalyzerName *string `locationName:"analyzerName" min:"1" type:"string" required:"true"`

    // Specifies the archive rules to add for the analyzer. Archive rules automatically
    // archive findings that meet the criteria you define for the rule.
    ArchiveRules []*InlineArchiveRule `locationName:"archiveRules" type:"list"`

    // A client token.
    ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

    // Specifies the configuration of the analyzer. If the analyzer is an unused
    // access analyzer, the specified scope of unused access is used for the configuration.
    // If the analyzer is an external access analyzer, this field is not used.
    Configuration *AnalyzerConfiguration `locationName:"configuration" type:"structure"`

    // An array of key-value pairs to apply to the analyzer.
    Tags map[string]*string `locationName:"tags" type:"map"`

    // The type of analyzer to create. Only ACCOUNT, ORGANIZATION, ACCOUNT_UNUSED_ACCESS,
    // and ORGANIZATION_UNUSED_ACCESS analyzers are supported. You can create only
    // one analyzer per account per Region. You can create up to 5 analyzers per
    // organization per Region.
    //
    // Type is a required field
    Type *string `locationName:"type" type:"string" required:"true" enum:"Type"`
    // contains filtered or unexported fields
}

Creates an analyzer.

func (CreateAnalyzerInput) GoString ¶

func (s CreateAnalyzerInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAnalyzerInput) SetAnalyzerName ¶

func (s *CreateAnalyzerInput) SetAnalyzerName(v string) *CreateAnalyzerInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*CreateAnalyzerInput) SetArchiveRules ¶

func (s *CreateAnalyzerInput) SetArchiveRules(v []*InlineArchiveRule) *CreateAnalyzerInput

SetArchiveRules sets the ArchiveRules field's value.

func (*CreateAnalyzerInput) SetClientToken ¶

func (s *CreateAnalyzerInput) SetClientToken(v string) *CreateAnalyzerInput

SetClientToken sets the ClientToken field's value.

func (*CreateAnalyzerInput) SetConfiguration ¶

func (s *CreateAnalyzerInput) SetConfiguration(v *AnalyzerConfiguration) *CreateAnalyzerInput

SetConfiguration sets the Configuration field's value.

func (*CreateAnalyzerInput) SetTags ¶

func (s *CreateAnalyzerInput) SetTags(v map[string]*string) *CreateAnalyzerInput

SetTags sets the Tags field's value.

func (*CreateAnalyzerInput) SetType ¶

func (s *CreateAnalyzerInput) SetType(v string) *CreateAnalyzerInput

SetType sets the Type field's value.

func (CreateAnalyzerInput) String ¶

func (s CreateAnalyzerInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAnalyzerInput) Validate ¶

func (s *CreateAnalyzerInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CreateAnalyzerOutput ¶

type CreateAnalyzerOutput struct {

    // The ARN of the analyzer that was created by the request.
    Arn *string `locationName:"arn" type:"string"`
    // contains filtered or unexported fields
}

The response to the request to create an analyzer.

func (CreateAnalyzerOutput) GoString ¶

func (s CreateAnalyzerOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAnalyzerOutput) SetArn ¶

func (s *CreateAnalyzerOutput) SetArn(v string) *CreateAnalyzerOutput

SetArn sets the Arn field's value.

func (CreateAnalyzerOutput) String ¶

func (s CreateAnalyzerOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CreateArchiveRuleInput ¶

type CreateArchiveRuleInput struct {

    // The name of the created analyzer.
    //
    // AnalyzerName is a required field
    AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

    // A client token.
    ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

    // The criteria for the rule.
    //
    // Filter is a required field
    Filter map[string]*Criterion `locationName:"filter" type:"map" required:"true"`

    // The name of the rule to create.
    //
    // RuleName is a required field
    RuleName *string `locationName:"ruleName" min:"1" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Creates an archive rule.

func (CreateArchiveRuleInput) GoString ¶

func (s CreateArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateArchiveRuleInput) SetAnalyzerName ¶

func (s *CreateArchiveRuleInput) SetAnalyzerName(v string) *CreateArchiveRuleInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*CreateArchiveRuleInput) SetClientToken ¶

func (s *CreateArchiveRuleInput) SetClientToken(v string) *CreateArchiveRuleInput

SetClientToken sets the ClientToken field's value.

func (*CreateArchiveRuleInput) SetFilter ¶

func (s *CreateArchiveRuleInput) SetFilter(v map[string]*Criterion) *CreateArchiveRuleInput

SetFilter sets the Filter field's value.

func (*CreateArchiveRuleInput) SetRuleName ¶

func (s *CreateArchiveRuleInput) SetRuleName(v string) *CreateArchiveRuleInput

SetRuleName sets the RuleName field's value.

func (CreateArchiveRuleInput) String ¶

func (s CreateArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateArchiveRuleInput) Validate ¶

func (s *CreateArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CreateArchiveRuleOutput ¶

type CreateArchiveRuleOutput struct {
    // contains filtered or unexported fields
}

func (CreateArchiveRuleOutput) GoString ¶

func (s CreateArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (CreateArchiveRuleOutput) String ¶

func (s CreateArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Criterion ¶

type Criterion struct {

    // A "contains" operator to match for the filter used to create the rule.
    Contains []*string `locationName:"contains" min:"1" type:"list"`

    // An "equals" operator to match for the filter used to create the rule.
    Eq []*string `locationName:"eq" min:"1" type:"list"`

    // An "exists" operator to match for the filter used to create the rule.
    Exists *bool `locationName:"exists" type:"boolean"`

    // A "not equals" operator to match for the filter used to create the rule.
    Neq []*string `locationName:"neq" min:"1" type:"list"`
    // contains filtered or unexported fields
}

The criteria to use in the filter that defines the archive rule. For more information on available filter keys, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html).

func (Criterion) GoString ¶

func (s Criterion) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Criterion) SetContains ¶

func (s *Criterion) SetContains(v []*string) *Criterion

SetContains sets the Contains field's value.

func (*Criterion) SetEq ¶

func (s *Criterion) SetEq(v []*string) *Criterion

SetEq sets the Eq field's value.

func (*Criterion) SetExists ¶

func (s *Criterion) SetExists(v bool) *Criterion

SetExists sets the Exists field's value.

func (*Criterion) SetNeq ¶

func (s *Criterion) SetNeq(v []*string) *Criterion

SetNeq sets the Neq field's value.

func (Criterion) String ¶

func (s Criterion) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Criterion) Validate ¶

func (s *Criterion) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type DeleteAnalyzerInput ¶

type DeleteAnalyzerInput struct {

    // The name of the analyzer to delete.
    //
    // AnalyzerName is a required field
    AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

    // A client token.
    ClientToken *string `location:"querystring" locationName:"clientToken" type:"string" idempotencyToken:"true"`
    // contains filtered or unexported fields
}

Deletes an analyzer.

func (DeleteAnalyzerInput) GoString ¶

func (s DeleteAnalyzerInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DeleteAnalyzerInput) SetAnalyzerName ¶

func (s *DeleteAnalyzerInput) SetAnalyzerName(v string) *DeleteAnalyzerInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*DeleteAnalyzerInput) SetClientToken ¶

func (s *DeleteAnalyzerInput) SetClientToken(v string) *DeleteAnalyzerInput

SetClientToken sets the ClientToken field's value.

func (DeleteAnalyzerInput) String ¶

func (s DeleteAnalyzerInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DeleteAnalyzerInput) Validate ¶

func (s *DeleteAnalyzerInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type DeleteAnalyzerOutput ¶

type DeleteAnalyzerOutput struct {
    // contains filtered or unexported fields
}

func (DeleteAnalyzerOutput) GoString ¶

func (s DeleteAnalyzerOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (DeleteAnalyzerOutput) String ¶

func (s DeleteAnalyzerOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type DeleteArchiveRuleInput ¶

type DeleteArchiveRuleInput struct {

    // The name of the analyzer that associated with the archive rule to delete.
    //
    // AnalyzerName is a required field
    AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

    // A client token.
    ClientToken *string `location:"querystring" locationName:"clientToken" type:"string" idempotencyToken:"true"`

    // The name of the rule to delete.
    //
    // RuleName is a required field
    RuleName *string `location:"uri" locationName:"ruleName" min:"1" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Deletes an archive rule.

func (DeleteArchiveRuleInput) GoString ¶

func (s DeleteArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DeleteArchiveRuleInput) SetAnalyzerName ¶

func (s *DeleteArchiveRuleInput) SetAnalyzerName(v string) *DeleteArchiveRuleInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*DeleteArchiveRuleInput) SetClientToken ¶

func (s *DeleteArchiveRuleInput) SetClientToken(v string) *DeleteArchiveRuleInput

SetClientToken sets the ClientToken field's value.

func (*DeleteArchiveRuleInput) SetRuleName ¶

func (s *DeleteArchiveRuleInput) SetRuleName(v string) *DeleteArchiveRuleInput

SetRuleName sets the RuleName field's value.

func (DeleteArchiveRuleInput) String ¶

func (s DeleteArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DeleteArchiveRuleInput) Validate ¶

func (s *DeleteArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type DeleteArchiveRuleOutput ¶

type DeleteArchiveRuleOutput struct {
    // contains filtered or unexported fields
}

func (DeleteArchiveRuleOutput) GoString ¶

func (s DeleteArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (DeleteArchiveRuleOutput) String ¶

func (s DeleteArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type DynamodbStreamConfiguration ¶

type DynamodbStreamConfiguration struct {

    // The proposed resource policy defining who can access or manage the DynamoDB
    // stream.
    StreamPolicy *string `locationName:"streamPolicy" type:"string"`
    // contains filtered or unexported fields
}

The proposed access control configuration for a DynamoDB stream. You can propose a configuration for a new DynamoDB stream or an existing DynamoDB stream that you own by specifying the policy for the DynamoDB stream. For more information, see PutResourcePolicy (https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_PutResourcePolicy.html).

• If the configuration is for an existing DynamoDB stream and you do not specify the DynamoDB policy, then the access preview uses the existing DynamoDB policy for the stream.

• If the access preview is for a new resource and you do not specify the policy, then the access preview assumes a DynamoDB stream without a policy.

• To propose deletion of an existing DynamoDB stream policy, you can specify an empty string for the DynamoDB policy.

func (DynamodbStreamConfiguration) GoString ¶

func (s DynamodbStreamConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DynamodbStreamConfiguration) SetStreamPolicy ¶

func (s *DynamodbStreamConfiguration) SetStreamPolicy(v string) *DynamodbStreamConfiguration

SetStreamPolicy sets the StreamPolicy field's value.

func (DynamodbStreamConfiguration) String ¶

func (s DynamodbStreamConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type DynamodbTableConfiguration ¶

type DynamodbTableConfiguration struct {

    // The proposed resource policy defining who can access or manage the DynamoDB
    // table.
    TablePolicy *string `locationName:"tablePolicy" type:"string"`
    // contains filtered or unexported fields
}

The proposed access control configuration for a DynamoDB table or index. You can propose a configuration for a new DynamoDB table or index or an existing DynamoDB table or index that you own by specifying the policy for the DynamoDB table or index. For more information, see PutResourcePolicy (https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_PutResourcePolicy.html).

• If the configuration is for an existing DynamoDB table or index and you do not specify the DynamoDB policy, then the access preview uses the existing DynamoDB policy for the table or index.

• If the access preview is for a new resource and you do not specify the policy, then the access preview assumes a DynamoDB table without a policy.

• To propose deletion of an existing DynamoDB table or index policy, you can specify an empty string for the DynamoDB policy.

func (DynamodbTableConfiguration) GoString ¶

func (s DynamodbTableConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DynamodbTableConfiguration) SetTablePolicy ¶

func (s *DynamodbTableConfiguration) SetTablePolicy(v string) *DynamodbTableConfiguration

SetTablePolicy sets the TablePolicy field's value.

func (DynamodbTableConfiguration) String ¶

func (s DynamodbTableConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type EbsSnapshotConfiguration ¶

type EbsSnapshotConfiguration struct {

    // The groups that have access to the Amazon EBS volume snapshot. If the value
    // all is specified, then the Amazon EBS volume snapshot is public.
    //
    //    * If the configuration is for an existing Amazon EBS volume snapshot and
    //    you do not specify the groups, then the access preview uses the existing
    //    shared groups for the snapshot.
    //
    //    * If the access preview is for a new resource and you do not specify the
    //    groups, then the access preview considers the snapshot without any groups.
    //
    //    * To propose deletion of existing shared groups, you can specify an empty
    //    list for groups.
    Groups []*string `locationName:"groups" type:"list"`

    // The KMS key identifier for an encrypted Amazon EBS volume snapshot. The KMS
    // key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS
    // key.
    //
    //    * If the configuration is for an existing Amazon EBS volume snapshot and
    //    you do not specify the kmsKeyId, or you specify an empty string, then
    //    the access preview uses the existing kmsKeyId of the snapshot.
    //
    //    * If the access preview is for a new resource and you do not specify the
    //    kmsKeyId, the access preview considers the snapshot as unencrypted.
    KmsKeyId *string `locationName:"kmsKeyId" type:"string"`

    // The IDs of the Amazon Web Services accounts that have access to the Amazon
    // EBS volume snapshot.
    //
    //    * If the configuration is for an existing Amazon EBS volume snapshot and
    //    you do not specify the userIds, then the access preview uses the existing
    //    shared userIds for the snapshot.
    //
    //    * If the access preview is for a new resource and you do not specify the
    //    userIds, then the access preview considers the snapshot without any userIds.
    //
    //    * To propose deletion of existing shared accountIds, you can specify an
    //    empty list for userIds.
    UserIds []*string `locationName:"userIds" type:"list"`
    // contains filtered or unexported fields
}

The proposed access control configuration for an Amazon EBS volume snapshot. You can propose a configuration for a new Amazon EBS volume snapshot or an Amazon EBS volume snapshot that you own by specifying the user IDs, groups, and optional KMS encryption key. For more information, see ModifySnapshotAttribute (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifySnapshotAttribute.html).

func (EbsSnapshotConfiguration) GoString ¶

func (s EbsSnapshotConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*EbsSnapshotConfiguration) SetGroups ¶

func (s *EbsSnapshotConfiguration) SetGroups(v []*string) *EbsSnapshotConfiguration

SetGroups sets the Groups field's value.

func (*EbsSnapshotConfiguration) SetKmsKeyId ¶

func (s *EbsSnapshotConfiguration) SetKmsKeyId(v string) *EbsSnapshotConfiguration

SetKmsKeyId sets the KmsKeyId field's value.

func (*EbsSnapshotConfiguration) SetUserIds ¶

func (s *EbsSnapshotConfiguration) SetUserIds(v []*string) *EbsSnapshotConfiguration

SetUserIds sets the UserIds field's value.

func (EbsSnapshotConfiguration) String ¶

func (s EbsSnapshotConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type EcrRepositoryConfiguration ¶

type EcrRepositoryConfiguration struct {

    // The JSON repository policy text to apply to the Amazon ECR repository. For
    // more information, see Private repository policy examples (https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html)
    // in the Amazon ECR User Guide.
    RepositoryPolicy *string `locationName:"repositoryPolicy" type:"string"`
    // contains filtered or unexported fields
}

The proposed access control configuration for an Amazon ECR repository. You can propose a configuration for a new Amazon ECR repository or an existing Amazon ECR repository that you own by specifying the Amazon ECR policy. For more information, see Repository (https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_Repository.html).

• If the configuration is for an existing Amazon ECR repository and you do not specify the Amazon ECR policy, then the access preview uses the existing Amazon ECR policy for the repository.

• If the access preview is for a new resource and you do not specify the policy, then the access preview assumes an Amazon ECR repository without a policy.

• To propose deletion of an existing Amazon ECR repository policy, you can specify an empty string for the Amazon ECR policy.

func (EcrRepositoryConfiguration) GoString ¶

func (s EcrRepositoryConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*EcrRepositoryConfiguration) SetRepositoryPolicy ¶

func (s *EcrRepositoryConfiguration) SetRepositoryPolicy(v string) *EcrRepositoryConfiguration

SetRepositoryPolicy sets the RepositoryPolicy field's value.

func (EcrRepositoryConfiguration) String ¶

func (s EcrRepositoryConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type EfsFileSystemConfiguration ¶

type EfsFileSystemConfiguration struct {

    // The JSON policy definition to apply to the Amazon EFS file system. For more
    // information on the elements that make up a file system policy, see Amazon
    // EFS Resource-based policies (https://docs.aws.amazon.com/efs/latest/ug/access-control-overview.html#access-control-manage-access-intro-resource-policies).
    FileSystemPolicy *string `locationName:"fileSystemPolicy" type:"string"`
    // contains filtered or unexported fields
}

The proposed access control configuration for an Amazon EFS file system. You can propose a configuration for a new Amazon EFS file system or an existing Amazon EFS file system that you own by specifying the Amazon EFS policy. For more information, see Using file systems in Amazon EFS (https://docs.aws.amazon.com/efs/latest/ug/using-fs.html).

• If the configuration is for an existing Amazon EFS file system and you do not specify the Amazon EFS policy, then the access preview uses the existing Amazon EFS policy for the file system.

• If the access preview is for a new resource and you do not specify the policy, then the access preview assumes an Amazon EFS file system without a policy.

• To propose deletion of an existing Amazon EFS file system policy, you can specify an empty string for the Amazon EFS policy.

func (EfsFileSystemConfiguration) GoString ¶

func (s EfsFileSystemConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*EfsFileSystemConfiguration) SetFileSystemPolicy ¶

func (s *EfsFileSystemConfiguration) SetFileSystemPolicy(v string) *EfsFileSystemConfiguration

SetFileSystemPolicy sets the FileSystemPolicy field's value.

func (EfsFileSystemConfiguration) String ¶

func (s EfsFileSystemConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ExternalAccessDetails ¶

type ExternalAccessDetails struct {

    // The action in the analyzed policy statement that an external principal has
    // permission to use.
    Action []*string `locationName:"action" type:"list"`

    // The condition in the analyzed policy statement that resulted in an external
    // access finding.
    //
    // Condition is a required field
    Condition map[string]*string `locationName:"condition" type:"map" required:"true"`

    // Specifies whether the external access finding is public.
    IsPublic *bool `locationName:"isPublic" type:"boolean"`

    // The external principal that has access to a resource within the zone of trust.
    Principal map[string]*string `locationName:"principal" type:"map"`

    // The sources of the external access finding. This indicates how the access
    // that generated the finding is granted. It is populated for Amazon S3 bucket
    // findings.
    Sources []*FindingSource `locationName:"sources" type:"list"`
    // contains filtered or unexported fields
}

Contains information about an external access finding.

func (ExternalAccessDetails) GoString ¶

func (s ExternalAccessDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ExternalAccessDetails) SetAction ¶

func (s *ExternalAccessDetails) SetAction(v []*string) *ExternalAccessDetails

SetAction sets the Action field's value.

func (*ExternalAccessDetails) SetCondition ¶

func (s *ExternalAccessDetails) SetCondition(v map[string]*string) *ExternalAccessDetails

SetCondition sets the Condition field's value.

func (*ExternalAccessDetails) SetIsPublic ¶

func (s *ExternalAccessDetails) SetIsPublic(v bool) *ExternalAccessDetails

SetIsPublic sets the IsPublic field's value.

func (*ExternalAccessDetails) SetPrincipal ¶

func (s *ExternalAccessDetails) SetPrincipal(v map[string]*string) *ExternalAccessDetails

SetPrincipal sets the Principal field's value.

func (*ExternalAccessDetails) SetSources ¶

func (s *ExternalAccessDetails) SetSources(v []*FindingSource) *ExternalAccessDetails

SetSources sets the Sources field's value.

func (ExternalAccessDetails) String ¶

func (s ExternalAccessDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Finding ¶

type Finding struct {

    // The action in the analyzed policy statement that an external principal has
    // permission to use.
    Action []*string `locationName:"action" type:"list"`

    // The time at which the resource was analyzed.
    //
    // AnalyzedAt is a required field
    AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The condition in the analyzed policy statement that resulted in a finding.
    //
    // Condition is a required field
    Condition map[string]*string `locationName:"condition" type:"map" required:"true"`

    // The time at which the finding was generated.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // An error.
    Error *string `locationName:"error" type:"string"`

    // The ID of the finding.
    //
    // Id is a required field
    Id *string `locationName:"id" type:"string" required:"true"`

    // Indicates whether the policy that generated the finding allows public access
    // to the resource.
    IsPublic *bool `locationName:"isPublic" type:"boolean"`

    // The external principal that has access to a resource within the zone of trust.
    Principal map[string]*string `locationName:"principal" type:"map"`

    // The resource that an external principal has access to.
    Resource *string `locationName:"resource" type:"string"`

    // The Amazon Web Services account ID that owns the resource.
    //
    // ResourceOwnerAccount is a required field
    ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

    // The type of the resource identified in the finding.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

    // The sources of the finding. This indicates how the access that generated
    // the finding is granted. It is populated for Amazon S3 bucket findings.
    Sources []*FindingSource `locationName:"sources" type:"list"`

    // The current status of the finding.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`

    // The time at which the finding was updated.
    //
    // UpdatedAt is a required field
    UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
    // contains filtered or unexported fields
}

Contains information about a finding.

func (Finding) GoString ¶

func (s Finding) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Finding) SetAction ¶

func (s *Finding) SetAction(v []*string) *Finding

SetAction sets the Action field's value.

func (*Finding) SetAnalyzedAt ¶

func (s *Finding) SetAnalyzedAt(v time.Time) *Finding

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*Finding) SetCondition ¶

func (s *Finding) SetCondition(v map[string]*string) *Finding

SetCondition sets the Condition field's value.

func (*Finding) SetCreatedAt ¶

func (s *Finding) SetCreatedAt(v time.Time) *Finding

SetCreatedAt sets the CreatedAt field's value.

func (*Finding) SetError ¶

func (s *Finding) SetError(v string) *Finding

SetError sets the Error field's value.

func (*Finding) SetId ¶

func (s *Finding) SetId(v string) *Finding

SetId sets the Id field's value.

func (*Finding) SetIsPublic ¶

func (s *Finding) SetIsPublic(v bool) *Finding

SetIsPublic sets the IsPublic field's value.

func (*Finding) SetPrincipal ¶

func (s *Finding) SetPrincipal(v map[string]*string) *Finding

SetPrincipal sets the Principal field's value.

func (*Finding) SetResource ¶

func (s *Finding) SetResource(v string) *Finding

SetResource sets the Resource field's value.

func (*Finding) SetResourceOwnerAccount ¶

func (s *Finding) SetResourceOwnerAccount(v string) *Finding

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*Finding) SetResourceType ¶

func (s *Finding) SetResourceType(v string) *Finding

SetResourceType sets the ResourceType field's value.

func (*Finding) SetSources ¶

func (s *Finding) SetSources(v []*FindingSource) *Finding

SetSources sets the Sources field's value.

func (*Finding) SetStatus ¶

func (s *Finding) SetStatus(v string) *Finding

SetStatus sets the Status field's value.

func (*Finding) SetUpdatedAt ¶

func (s *Finding) SetUpdatedAt(v time.Time) *Finding

SetUpdatedAt sets the UpdatedAt field's value.

func (Finding) String ¶

func (s Finding) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingDetails ¶

type FindingDetails struct {

    // The details for an external access analyzer finding.
    ExternalAccessDetails *ExternalAccessDetails `locationName:"externalAccessDetails" type:"structure"`

    // The details for an unused access analyzer finding with an unused IAM role
    // finding type.
    UnusedIamRoleDetails *UnusedIamRoleDetails `locationName:"unusedIamRoleDetails" type:"structure"`

    // The details for an unused access analyzer finding with an unused IAM user
    // access key finding type.
    UnusedIamUserAccessKeyDetails *UnusedIamUserAccessKeyDetails `locationName:"unusedIamUserAccessKeyDetails" type:"structure"`

    // The details for an unused access analyzer finding with an unused IAM user
    // password finding type.
    UnusedIamUserPasswordDetails *UnusedIamUserPasswordDetails `locationName:"unusedIamUserPasswordDetails" type:"structure"`

    // The details for an unused access analyzer finding with an unused permission
    // finding type.
    UnusedPermissionDetails *UnusedPermissionDetails `locationName:"unusedPermissionDetails" type:"structure"`
    // contains filtered or unexported fields
}

Contains information about an external access or unused access finding. Only one parameter can be used in a FindingDetails object.

func (FindingDetails) GoString ¶

func (s FindingDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingDetails) SetExternalAccessDetails ¶

func (s *FindingDetails) SetExternalAccessDetails(v *ExternalAccessDetails) *FindingDetails

SetExternalAccessDetails sets the ExternalAccessDetails field's value.

func (*FindingDetails) SetUnusedIamRoleDetails ¶

func (s *FindingDetails) SetUnusedIamRoleDetails(v *UnusedIamRoleDetails) *FindingDetails

SetUnusedIamRoleDetails sets the UnusedIamRoleDetails field's value.

func (*FindingDetails) SetUnusedIamUserAccessKeyDetails ¶

func (s *FindingDetails) SetUnusedIamUserAccessKeyDetails(v *UnusedIamUserAccessKeyDetails) *FindingDetails

SetUnusedIamUserAccessKeyDetails sets the UnusedIamUserAccessKeyDetails field's value.

func (*FindingDetails) SetUnusedIamUserPasswordDetails ¶

func (s *FindingDetails) SetUnusedIamUserPasswordDetails(v *UnusedIamUserPasswordDetails) *FindingDetails

SetUnusedIamUserPasswordDetails sets the UnusedIamUserPasswordDetails field's value.

func (*FindingDetails) SetUnusedPermissionDetails ¶

func (s *FindingDetails) SetUnusedPermissionDetails(v *UnusedPermissionDetails) *FindingDetails

SetUnusedPermissionDetails sets the UnusedPermissionDetails field's value.

func (FindingDetails) String ¶

func (s FindingDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingSource ¶

type FindingSource struct {

    // Includes details about how the access that generated the finding is granted.
    // This is populated for Amazon S3 bucket findings.
    Detail *FindingSourceDetail `locationName:"detail" type:"structure"`

    // Indicates the type of access that generated the finding.
    //
    // Type is a required field
    Type *string `locationName:"type" type:"string" required:"true" enum:"FindingSourceType"`
    // contains filtered or unexported fields
}

The source of the finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.

func (FindingSource) GoString ¶

func (s FindingSource) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingSource) SetDetail ¶

func (s *FindingSource) SetDetail(v *FindingSourceDetail) *FindingSource

SetDetail sets the Detail field's value.

func (*FindingSource) SetType ¶

func (s *FindingSource) SetType(v string) *FindingSource

SetType sets the Type field's value.

func (FindingSource) String ¶

func (s FindingSource) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingSourceDetail ¶

type FindingSourceDetail struct {

    // The account of the cross-account access point that generated the finding.
    AccessPointAccount *string `locationName:"accessPointAccount" type:"string"`

    // The ARN of the access point that generated the finding. The ARN format depends
    // on whether the ARN represents an access point or a multi-region access point.
    AccessPointArn *string `locationName:"accessPointArn" type:"string"`
    // contains filtered or unexported fields
}

Includes details about how the access that generated the finding is granted. This is populated for Amazon S3 bucket findings.

func (FindingSourceDetail) GoString ¶

func (s FindingSourceDetail) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingSourceDetail) SetAccessPointAccount ¶

func (s *FindingSourceDetail) SetAccessPointAccount(v string) *FindingSourceDetail

SetAccessPointAccount sets the AccessPointAccount field's value.

func (*FindingSourceDetail) SetAccessPointArn ¶

func (s *FindingSourceDetail) SetAccessPointArn(v string) *FindingSourceDetail

SetAccessPointArn sets the AccessPointArn field's value.

func (FindingSourceDetail) String ¶

func (s FindingSourceDetail) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingSummary ¶

type FindingSummary struct {

    // The action in the analyzed policy statement that an external principal has
    // permission to use.
    Action []*string `locationName:"action" type:"list"`

    // The time at which the resource-based policy that generated the finding was
    // analyzed.
    //
    // AnalyzedAt is a required field
    AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The condition in the analyzed policy statement that resulted in a finding.
    //
    // Condition is a required field
    Condition map[string]*string `locationName:"condition" type:"map" required:"true"`

    // The time at which the finding was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The error that resulted in an Error finding.
    Error *string `locationName:"error" type:"string"`

    // The ID of the finding.
    //
    // Id is a required field
    Id *string `locationName:"id" type:"string" required:"true"`

    // Indicates whether the finding reports a resource that has a policy that allows
    // public access.
    IsPublic *bool `locationName:"isPublic" type:"boolean"`

    // The external principal that has access to a resource within the zone of trust.
    Principal map[string]*string `locationName:"principal" type:"map"`

    // The resource that the external principal has access to.
    Resource *string `locationName:"resource" type:"string"`

    // The Amazon Web Services account ID that owns the resource.
    //
    // ResourceOwnerAccount is a required field
    ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

    // The type of the resource that the external principal has access to.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

    // The sources of the finding. This indicates how the access that generated
    // the finding is granted. It is populated for Amazon S3 bucket findings.
    Sources []*FindingSource `locationName:"sources" type:"list"`

    // The status of the finding.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`

    // The time at which the finding was most recently updated.
    //
    // UpdatedAt is a required field
    UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
    // contains filtered or unexported fields
}

Contains information about a finding.

func (FindingSummary) GoString ¶

func (s FindingSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingSummary) SetAction ¶

func (s *FindingSummary) SetAction(v []*string) *FindingSummary

SetAction sets the Action field's value.

func (*FindingSummary) SetAnalyzedAt ¶

func (s *FindingSummary) SetAnalyzedAt(v time.Time) *FindingSummary

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*FindingSummary) SetCondition ¶

func (s *FindingSummary) SetCondition(v map[string]*string) *FindingSummary

SetCondition sets the Condition field's value.

func (*FindingSummary) SetCreatedAt ¶

func (s *FindingSummary) SetCreatedAt(v time.Time) *FindingSummary

SetCreatedAt sets the CreatedAt field's value.

func (*FindingSummary) SetError ¶

func (s *FindingSummary) SetError(v string) *FindingSummary

SetError sets the Error field's value.

func (*FindingSummary) SetId ¶

func (s *FindingSummary) SetId(v string) *FindingSummary

SetId sets the Id field's value.

func (*FindingSummary) SetIsPublic ¶

func (s *FindingSummary) SetIsPublic(v bool) *FindingSummary

SetIsPublic sets the IsPublic field's value.

func (*FindingSummary) SetPrincipal ¶

func (s *FindingSummary) SetPrincipal(v map[string]*string) *FindingSummary

SetPrincipal sets the Principal field's value.

func (*FindingSummary) SetResource ¶

func (s *FindingSummary) SetResource(v string) *FindingSummary

SetResource sets the Resource field's value.

func (*FindingSummary) SetResourceOwnerAccount ¶

func (s *FindingSummary) SetResourceOwnerAccount(v string) *FindingSummary

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*FindingSummary) SetResourceType ¶

func (s *FindingSummary) SetResourceType(v string) *FindingSummary

SetResourceType sets the ResourceType field's value.

func (*FindingSummary) SetSources ¶

func (s *FindingSummary) SetSources(v []*FindingSource) *FindingSummary

SetSources sets the Sources field's value.

func (*FindingSummary) SetStatus ¶

func (s *FindingSummary) SetStatus(v string) *FindingSummary

SetStatus sets the Status field's value.

func (*FindingSummary) SetUpdatedAt ¶

func (s *FindingSummary) SetUpdatedAt(v time.Time) *FindingSummary

SetUpdatedAt sets the UpdatedAt field's value.

func (FindingSummary) String ¶

func (s FindingSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingSummaryV2 ¶

type FindingSummaryV2 struct {

    // The time at which the resource-based policy or IAM entity that generated
    // the finding was analyzed.
    //
    // AnalyzedAt is a required field
    AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The time at which the finding was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The error that resulted in an Error finding.
    Error *string `locationName:"error" type:"string"`

    // The type of the external access or unused access finding.
    FindingType *string `locationName:"findingType" type:"string" enum:"FindingType"`

    // The ID of the finding.
    //
    // Id is a required field
    Id *string `locationName:"id" type:"string" required:"true"`

    // The resource that the external principal has access to.
    Resource *string `locationName:"resource" type:"string"`

    // The Amazon Web Services account ID that owns the resource.
    //
    // ResourceOwnerAccount is a required field
    ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

    // The type of the resource that the external principal has access to.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

    // The status of the finding.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`

    // The time at which the finding was most recently updated.
    //
    // UpdatedAt is a required field
    UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
    // contains filtered or unexported fields
}

Contains information about a finding.

func (FindingSummaryV2) GoString ¶

func (s FindingSummaryV2) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingSummaryV2) SetAnalyzedAt ¶

func (s *FindingSummaryV2) SetAnalyzedAt(v time.Time) *FindingSummaryV2

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*FindingSummaryV2) SetCreatedAt ¶

func (s *FindingSummaryV2) SetCreatedAt(v time.Time) *FindingSummaryV2

SetCreatedAt sets the CreatedAt field's value.

func (*FindingSummaryV2) SetError ¶

func (s *FindingSummaryV2) SetError(v string) *FindingSummaryV2

SetError sets the Error field's value.

func (*FindingSummaryV2) SetFindingType ¶

func (s *FindingSummaryV2) SetFindingType(v string) *FindingSummaryV2

SetFindingType sets the FindingType field's value.

func (*FindingSummaryV2) SetId ¶

func (s *FindingSummaryV2) SetId(v string) *FindingSummaryV2

SetId sets the Id field's value.

func (*FindingSummaryV2) SetResource ¶

func (s *FindingSummaryV2) SetResource(v string) *FindingSummaryV2

SetResource sets the Resource field's value.

func (*FindingSummaryV2) SetResourceOwnerAccount ¶

func (s *FindingSummaryV2) SetResourceOwnerAccount(v string) *FindingSummaryV2

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*FindingSummaryV2) SetResourceType ¶

func (s *FindingSummaryV2) SetResourceType(v string) *FindingSummaryV2

SetResourceType sets the ResourceType field's value.

func (*FindingSummaryV2) SetStatus ¶

func (s *FindingSummaryV2) SetStatus(v string) *FindingSummaryV2

SetStatus sets the Status field's value.

func (*FindingSummaryV2) SetUpdatedAt ¶

func (s *FindingSummaryV2) SetUpdatedAt(v time.Time) *FindingSummaryV2

SetUpdatedAt sets the UpdatedAt field's value.

func (FindingSummaryV2) String ¶

func (s FindingSummaryV2) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GenerateFindingRecommendationInput ¶

type GenerateFindingRecommendationInput struct {

    // The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
    // used to generate the finding recommendation.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

    // The unique ID for the finding recommendation.
    //
    // Id is a required field
    Id *string `location:"uri" locationName:"id" min:"1" type:"string" required:"true"`
    // contains filtered or unexported fields
}

func (GenerateFindingRecommendationInput) GoString ¶

func (s GenerateFindingRecommendationInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GenerateFindingRecommendationInput) SetAnalyzerArn ¶

func (s *GenerateFindingRecommendationInput) SetAnalyzerArn(v string) *GenerateFindingRecommendationInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*GenerateFindingRecommendationInput) SetId ¶

func (s *GenerateFindingRecommendationInput) SetId(v string) *GenerateFindingRecommendationInput

SetId sets the Id field's value.

func (GenerateFindingRecommendationInput) String ¶

func (s GenerateFindingRecommendationInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GenerateFindingRecommendationInput) Validate ¶

func (s *GenerateFindingRecommendationInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GenerateFindingRecommendationOutput ¶

type GenerateFindingRecommendationOutput struct {
    // contains filtered or unexported fields
}

func (GenerateFindingRecommendationOutput) GoString ¶

func (s GenerateFindingRecommendationOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (GenerateFindingRecommendationOutput) String ¶

func (s GenerateFindingRecommendationOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GeneratedPolicy ¶

type GeneratedPolicy struct {

    // The text to use as the content for the new policy. The policy is created
    // using the CreatePolicy (https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreatePolicy.html)
    // action.
    //
    // Policy is a required field
    Policy *string `locationName:"policy" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Contains the text for the generated policy.

func (GeneratedPolicy) GoString ¶

func (s GeneratedPolicy) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GeneratedPolicy) SetPolicy ¶

func (s *GeneratedPolicy) SetPolicy(v string) *GeneratedPolicy

SetPolicy sets the Policy field's value.

func (GeneratedPolicy) String ¶

func (s GeneratedPolicy) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GeneratedPolicyProperties ¶

type GeneratedPolicyProperties struct {

    // Lists details about the Trail used to generated policy.
    CloudTrailProperties *CloudTrailProperties `locationName:"cloudTrailProperties" type:"structure"`

    // This value is set to true if the generated policy contains all possible actions
    // for a service that IAM Access Analyzer identified from the CloudTrail trail
    // that you specified, and false otherwise.
    IsComplete *bool `locationName:"isComplete" type:"boolean"`

    // The ARN of the IAM entity (user or role) for which you are generating a policy.
    //
    // PrincipalArn is a required field
    PrincipalArn *string `locationName:"principalArn" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Contains the generated policy details.

func (GeneratedPolicyProperties) GoString ¶

func (s GeneratedPolicyProperties) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GeneratedPolicyProperties) SetCloudTrailProperties ¶

func (s *GeneratedPolicyProperties) SetCloudTrailProperties(v *CloudTrailProperties) *GeneratedPolicyProperties

SetCloudTrailProperties sets the CloudTrailProperties field's value.

func (*GeneratedPolicyProperties) SetIsComplete ¶

func (s *GeneratedPolicyProperties) SetIsComplete(v bool) *GeneratedPolicyProperties

SetIsComplete sets the IsComplete field's value.

func (*GeneratedPolicyProperties) SetPrincipalArn ¶

func (s *GeneratedPolicyProperties) SetPrincipalArn(v string) *GeneratedPolicyProperties

SetPrincipalArn sets the PrincipalArn field's value.

func (GeneratedPolicyProperties) String ¶

func (s GeneratedPolicyProperties) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GeneratedPolicyResult ¶

type GeneratedPolicyResult struct {

    // The text to use as the content for the new policy. The policy is created
    // using the CreatePolicy (https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreatePolicy.html)
    // action.
    GeneratedPolicies []*GeneratedPolicy `locationName:"generatedPolicies" type:"list"`

    // A GeneratedPolicyProperties object that contains properties of the generated
    // policy.
    //
    // Properties is a required field
    Properties *GeneratedPolicyProperties `locationName:"properties" type:"structure" required:"true"`
    // contains filtered or unexported fields
}

Contains the text for the generated policy and its details.

func (GeneratedPolicyResult) GoString ¶

func (s GeneratedPolicyResult) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GeneratedPolicyResult) SetGeneratedPolicies ¶

func (s *GeneratedPolicyResult) SetGeneratedPolicies(v []*GeneratedPolicy) *GeneratedPolicyResult

SetGeneratedPolicies sets the GeneratedPolicies field's value.

func (*GeneratedPolicyResult) SetProperties ¶

func (s *GeneratedPolicyResult) SetProperties(v *GeneratedPolicyProperties) *GeneratedPolicyResult

SetProperties sets the Properties field's value.

func (GeneratedPolicyResult) String ¶

func (s GeneratedPolicyResult) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetAccessPreviewInput ¶

type GetAccessPreviewInput struct {

    // The unique ID for the access preview.
    //
    // AccessPreviewId is a required field
    AccessPreviewId *string `location:"uri" locationName:"accessPreviewId" type:"string" required:"true"`

    // The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
    // used to generate the access preview.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`
    // contains filtered or unexported fields
}

func (GetAccessPreviewInput) GoString ¶

func (s GetAccessPreviewInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAccessPreviewInput) SetAccessPreviewId ¶

func (s *GetAccessPreviewInput) SetAccessPreviewId(v string) *GetAccessPreviewInput

SetAccessPreviewId sets the AccessPreviewId field's value.

func (*GetAccessPreviewInput) SetAnalyzerArn ¶

func (s *GetAccessPreviewInput) SetAnalyzerArn(v string) *GetAccessPreviewInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (GetAccessPreviewInput) String ¶

func (s GetAccessPreviewInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAccessPreviewInput) Validate ¶

func (s *GetAccessPreviewInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetAccessPreviewOutput ¶

type GetAccessPreviewOutput struct {

    // An object that contains information about the access preview.
    //
    // AccessPreview is a required field
    AccessPreview *AccessPreview `locationName:"accessPreview" type:"structure" required:"true"`
    // contains filtered or unexported fields
}

func (GetAccessPreviewOutput) GoString ¶

func (s GetAccessPreviewOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAccessPreviewOutput) SetAccessPreview ¶

func (s *GetAccessPreviewOutput) SetAccessPreview(v *AccessPreview) *GetAccessPreviewOutput

SetAccessPreview sets the AccessPreview field's value.

func (GetAccessPreviewOutput) String ¶

func (s GetAccessPreviewOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetAnalyzedResourceInput ¶

type GetAnalyzedResourceInput struct {

    // The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
    // to retrieve information from.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

    // The ARN of the resource to retrieve information about.
    //
    // ResourceArn is a required field
    ResourceArn *string `location:"querystring" locationName:"resourceArn" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Retrieves an analyzed resource.

func (GetAnalyzedResourceInput) GoString ¶

func (s GetAnalyzedResourceInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzedResourceInput) SetAnalyzerArn ¶

func (s *GetAnalyzedResourceInput) SetAnalyzerArn(v string) *GetAnalyzedResourceInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*GetAnalyzedResourceInput) SetResourceArn ¶

func (s *GetAnalyzedResourceInput) SetResourceArn(v string) *GetAnalyzedResourceInput

SetResourceArn sets the ResourceArn field's value.

func (GetAnalyzedResourceInput) String ¶

func (s GetAnalyzedResourceInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzedResourceInput) Validate ¶

func (s *GetAnalyzedResourceInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetAnalyzedResourceOutput ¶

type GetAnalyzedResourceOutput struct {

    // An AnalyzedResource object that contains information that IAM Access Analyzer
    // found when it analyzed the resource.
    Resource *AnalyzedResource `locationName:"resource" type:"structure"`
    // contains filtered or unexported fields
}

The response to the request.

func (GetAnalyzedResourceOutput) GoString ¶

func (s GetAnalyzedResourceOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzedResourceOutput) SetResource ¶

func (s *GetAnalyzedResourceOutput) SetResource(v *AnalyzedResource) *GetAnalyzedResourceOutput

SetResource sets the Resource field's value.

func (GetAnalyzedResourceOutput) String ¶

func (s GetAnalyzedResourceOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetAnalyzerInput ¶

type GetAnalyzerInput struct {

    // The name of the analyzer retrieved.
    //
    // AnalyzerName is a required field
    AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Retrieves an analyzer.

func (GetAnalyzerInput) GoString ¶

func (s GetAnalyzerInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzerInput) SetAnalyzerName ¶

func (s *GetAnalyzerInput) SetAnalyzerName(v string) *GetAnalyzerInput

SetAnalyzerName sets the AnalyzerName field's value.

func (GetAnalyzerInput) String ¶

func (s GetAnalyzerInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzerInput) Validate ¶

func (s *GetAnalyzerInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetAnalyzerOutput ¶

type GetAnalyzerOutput struct {

    // An AnalyzerSummary object that contains information about the analyzer.
    //
    // Analyzer is a required field
    Analyzer *AnalyzerSummary `locationName:"analyzer" type:"structure" required:"true"`
    // contains filtered or unexported fields
}

The response to the request.

func (GetAnalyzerOutput) GoString ¶

func (s GetAnalyzerOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzerOutput) SetAnalyzer ¶

func (s *GetAnalyzerOutput) SetAnalyzer(v *AnalyzerSummary) *GetAnalyzerOutput

SetAnalyzer sets the Analyzer field's value.

func (GetAnalyzerOutput) String ¶

func (s GetAnalyzerOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetArchiveRuleInput ¶

type GetArchiveRuleInput struct {

    // The name of the analyzer to retrieve rules from.
    //
    // AnalyzerName is a required field
    AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

    // The name of the rule to retrieve.
    //
    // RuleName is a required field
    RuleName *string `location:"uri" locationName:"ruleName" min:"1" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Retrieves an archive rule.

func (GetArchiveRuleInput) GoString ¶

func (s GetArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetArchiveRuleInput) SetAnalyzerName ¶

func (s *GetArchiveRuleInput) SetAnalyzerName(v string) *GetArchiveRuleInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*GetArchiveRuleInput) SetRuleName ¶

func (s *GetArchiveRuleInput) SetRuleName(v string) *GetArchiveRuleInput

SetRuleName sets the RuleName field's value.

func (GetArchiveRuleInput) String ¶

func (s GetArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetArchiveRuleInput) Validate ¶

func (s *GetArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetArchiveRuleOutput ¶

type GetArchiveRuleOutput struct {

    // Contains information about an archive rule.
    //
    // ArchiveRule is a required field
    ArchiveRule *ArchiveRuleSummary `locationName:"archiveRule" type:"structure" required:"true"`
    // contains filtered or unexported fields
}

The response to the request.

func (GetArchiveRuleOutput) GoString ¶

func (s GetArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetArchiveRuleOutput) SetArchiveRule ¶

func (s *GetArchiveRuleOutput) SetArchiveRule(v *ArchiveRuleSummary) *GetArchiveRuleOutput

SetArchiveRule sets the ArchiveRule field's value.

func (GetArchiveRuleOutput) String ¶

func (s GetArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetFindingInput ¶

type GetFindingInput struct {

    // The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
    // that generated the finding.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

    // The ID of the finding to retrieve.
    //
    // Id is a required field
    Id *string `location:"uri" locationName:"id" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Retrieves a finding.

func (GetFindingInput) GoString ¶

func (s GetFindingInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingInput) SetAnalyzerArn ¶

func (s *GetFindingInput) SetAnalyzerArn(v string) *GetFindingInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*GetFindingInput) SetId ¶

func (s *GetFindingInput) SetId(v string) *GetFindingInput

SetId sets the Id field's value.

func (GetFindingInput) String ¶

func (s GetFindingInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingInput) Validate ¶

func (s *GetFindingInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetFindingOutput ¶

type GetFindingOutput struct {

    // A finding object that contains finding details.
    Finding *Finding `locationName:"finding" type:"structure"`
    // contains filtered or unexported fields
}

The response to the request.

func (GetFindingOutput) GoString ¶

func (s GetFindingOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingOutput) SetFinding ¶

func (s *GetFindingOutput) SetFinding(v *Finding) *GetFindingOutput

SetFinding sets the Finding field's value.

func (GetFindingOutput) String ¶

func (s GetFindingOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetFindingRecommendationInput ¶

type GetFindingRecommendationInput struct {

    // The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
    // used to generate the finding recommendation.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

    // The unique ID for the finding recommendation.
    //
    // Id is a required field
    Id *string `location:"uri" locationName:"id" min:"1" type:"string" required:"true"`

    // The maximum number of results to return in the response.
    MaxResults *int64 `location:"querystring" locationName:"maxResults" min:"1" type:"integer"`

    // A token used for pagination of results returned.
    NextToken *string `location:"querystring" locationName:"nextToken" type:"string"`
    // contains filtered or unexported fields
}

func (GetFindingRecommendationInput) GoString ¶

func (s GetFindingRecommendationInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingRecommendationInput) SetAnalyzerArn ¶

func (s *GetFindingRecommendationInput) SetAnalyzerArn(v string) *GetFindingRecommendationInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*GetFindingRecommendationInput) SetId ¶

func (s *GetFindingRecommendationInput) SetId(v string) *GetFindingRecommendationInput

SetId sets the Id field's value.

func (*GetFindingRecommendationInput) SetMaxResults ¶

func (s *GetFindingRecommendationInput) SetMaxResults(v int64) *GetFindingRecommendationInput

SetMaxResults sets the MaxResults field's value.

func (*GetFindingRecommendationInput) SetNextToken ¶

func (s *GetFindingRecommendationInput) SetNextToken(v string) *GetFindingRecommendationInput

SetNextToken sets the NextToken field's value.

func (GetFindingRecommendationInput) String ¶

func (s GetFindingRecommendationInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingRecommendationInput) Validate ¶

func (s *GetFindingRecommendationInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetFindingRecommendationOutput ¶

type GetFindingRecommendationOutput struct {

    // The time at which the retrieval of the finding recommendation was completed.
    CompletedAt *time.Time `locationName:"completedAt" type:"timestamp" timestampFormat:"iso8601"`

    // Detailed information about the reason that the retrieval of a recommendation
    // for the finding failed.
    Error *RecommendationError `locationName:"error" type:"structure"`

    // A token used for pagination of results returned.
    NextToken *string `locationName:"nextToken" type:"string"`

    // The type of recommendation for the finding.
    //
    // RecommendationType is a required field
    RecommendationType *string `locationName:"recommendationType" type:"string" required:"true" enum:"RecommendationType"`

    // A group of recommended steps for the finding.
    RecommendedSteps []*RecommendedStep `locationName:"recommendedSteps" type:"list"`

    // The ARN of the resource of the finding.
    //
    // ResourceArn is a required field
    ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`

    // The time at which the retrieval of the finding recommendation was started.
    //
    // StartedAt is a required field
    StartedAt *time.Time `locationName:"startedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The status of the retrieval of the finding recommendation.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"Status"`
    // contains filtered or unexported fields
}

func (GetFindingRecommendationOutput) GoString ¶

func (s GetFindingRecommendationOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingRecommendationOutput) SetCompletedAt ¶

func (s *GetFindingRecommendationOutput) SetCompletedAt(v time.Time) *GetFindingRecommendationOutput

SetCompletedAt sets the CompletedAt field's value.

func (*GetFindingRecommendationOutput) SetError ¶

func (s *GetFindingRecommendationOutput) SetError(v *RecommendationError) *GetFindingRecommendationOutput

SetError sets the Error field's value.

func (*GetFindingRecommendationOutput) SetNextToken ¶

func (s *GetFindingRecommendationOutput) SetNextToken(v string) *GetFindingRecommendationOutput

SetNextToken sets the NextToken field's value.

func (*GetFindingRecommendationOutput) SetRecommendationType ¶

func (s *GetFindingRecommendationOutput) SetRecommendationType(v string) *GetFindingRecommendationOutput

SetRecommendationType sets the RecommendationType field's value.

func (*GetFindingRecommendationOutput) SetRecommendedSteps ¶

func (s *GetFindingRecommendationOutput) SetRecommendedSteps(v []*RecommendedStep) *GetFindingRecommendationOutput

SetRecommendedSteps sets the RecommendedSteps field's value.

func (*GetFindingRecommendationOutput) SetResourceArn ¶

func (s *GetFindingRecommendationOutput) SetResourceArn(v string) *GetFindingRecommendationOutput

SetResourceArn sets the ResourceArn field's value.

func (*GetFindingRecommendationOutput) SetStartedAt ¶

func (s *GetFindingRecommendationOutput) SetStartedAt(v time.Time) *GetFindingRecommendationOutput

SetStartedAt sets the StartedAt field's value.

func (*GetFindingRecommendationOutput) SetStatus ¶

func (s *GetFindingRecommendationOutput) SetStatus(v string) *GetFindingRecommendationOutput

SetStatus sets the Status field's value.

func (GetFindingRecommendationOutput) String ¶

func (s GetFindingRecommendationOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetFindingV2Input ¶

type GetFindingV2Input struct {

    // The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
    // that generated the finding.
    //
    // AnalyzerArn is a required field
    AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

    // The ID of the finding to retrieve.
    //
    // Id is a required field
    Id *string `location:"uri" locationName:"id" type:"string" required:"true"`

    // The maximum number of results to return in the response.
    MaxResults *int64 `location:"querystring" locationName:"maxResults" type:"integer"`

    // A token used for pagination of results returned.
    NextToken *string `location:"querystring" locationName:"nextToken" type:"string"`
    // contains filtered or unexported fields
}

func (GetFindingV2Input) GoString ¶

func (s GetFindingV2Input) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingV2Input) SetAnalyzerArn ¶

func (s *GetFindingV2Input) SetAnalyzerArn(v string) *GetFindingV2Input

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*GetFindingV2Input) SetId ¶

func (s *GetFindingV2Input) SetId(v string) *GetFindingV2Input

SetId sets the Id field's value.

func (*GetFindingV2Input) SetMaxResults ¶

func (s *GetFindingV2Input) SetMaxResults(v int64) *GetFindingV2Input

SetMaxResults sets the MaxResults field's value.

func (*GetFindingV2Input) SetNextToken ¶

func (s *GetFindingV2Input) SetNextToken(v string) *GetFindingV2Input

SetNextToken sets the NextToken field's value.

func (GetFindingV2Input) String ¶

func (s GetFindingV2Input) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingV2Input) Validate ¶

func (s *GetFindingV2Input) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetFindingV2Output ¶

type GetFindingV2Output struct {

    // The time at which the resource-based policy or IAM entity that generated
    // the finding was analyzed.
    //
    // AnalyzedAt is a required field
    AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The time at which the finding was created.
    //
    // CreatedAt is a required field
    CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // An error.
    Error *string `locationName:"error" type:"string"`

    // A localized message that explains the finding and provides guidance on how
    // to address it.
    //
    // FindingDetails is a required field
    FindingDetails []*FindingDetails `locationName:"findingDetails" type:"list" required:"true"`

    // The type of the finding. For external access analyzers, the type is ExternalAccess.
    // For unused access analyzers, the type can be UnusedIAMRole, UnusedIAMUserAccessKey,
    // UnusedIAMUserPassword, or UnusedPermission.
    FindingType *string `locationName:"findingType" type:"string" enum:"FindingType"`

    // The ID of the finding to retrieve.
    //
    // Id is a required field
    Id *string `locationName:"id" type:"string" required:"true"`

    // A token used for pagination of results returned.
    NextToken *string `locationName:"nextToken" type:"string"`

    // The resource that generated the finding.
    Resource *string `locationName:"resource" type:"string"`

    // Tye Amazon Web Services account ID that owns the resource.
    //
    // ResourceOwnerAccount is a required field
    ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

    // The type of the resource identified in the finding.
    //
    // ResourceType is a required field
    ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

    // The status of the finding.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`

    // The time at which the finding was updated.
    //
    // UpdatedAt is a required field
    UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
    // contains filtered or unexported fields
}

func (GetFindingV2Output) GoString ¶

func (s GetFindingV2Output) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingV2Output) SetAnalyzedAt ¶

func (s *GetFindingV2Output) SetAnalyzedAt(v time.Time) *GetFindingV2Output

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*GetFindingV2Output) SetCreatedAt ¶

func (s *GetFindingV2Output) SetCreatedAt(v time.Time) *GetFindingV2Output

SetCreatedAt sets the CreatedAt field's value.

func (*GetFindingV2Output) SetError ¶

func (s *GetFindingV2Output) SetError(v string) *GetFindingV2Output

SetError sets the Error field's value.

func (*GetFindingV2Output) SetFindingDetails ¶

func (s *GetFindingV2Output) SetFindingDetails(v []*FindingDetails) *GetFindingV2Output

SetFindingDetails sets the FindingDetails field's value.

func (*GetFindingV2Output) SetFindingType ¶

func (s *GetFindingV2Output) SetFindingType(v string) *GetFindingV2Output

SetFindingType sets the FindingType field's value.

func (*GetFindingV2Output) SetId ¶

func (s *GetFindingV2Output) SetId(v string) *GetFindingV2Output

SetId sets the Id field's value.

func (*GetFindingV2Output) SetNextToken ¶

func (s *GetFindingV2Output) SetNextToken(v string) *GetFindingV2Output

SetNextToken sets the NextToken field's value.

func (*GetFindingV2Output) SetResource ¶

func (s *GetFindingV2Output) SetResource(v string) *GetFindingV2Output

SetResource sets the Resource field's value.

func (*GetFindingV2Output) SetResourceOwnerAccount ¶

func (s *GetFindingV2Output) SetResourceOwnerAccount(v string) *GetFindingV2Output

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*GetFindingV2Output) SetResourceType ¶

func (s *GetFindingV2Output) SetResourceType(v string) *GetFindingV2Output

SetResourceType sets the ResourceType field's value.

func (*GetFindingV2Output) SetStatus ¶

func (s *GetFindingV2Output) SetStatus(v string) *GetFindingV2Output

SetStatus sets the Status field's value.

func (*GetFindingV2Output) SetUpdatedAt ¶

func (s *GetFindingV2Output) SetUpdatedAt(v time.Time) *GetFindingV2Output

SetUpdatedAt sets the UpdatedAt field's value.

func (GetFindingV2Output) String ¶

func (s GetFindingV2Output) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetGeneratedPolicyInput ¶

type GetGeneratedPolicyInput struct {

    // The level of detail that you want to generate. You can specify whether to
    // generate policies with placeholders for resource ARNs for actions that support
    // resource level granularity in policies.
    //
    // For example, in the resource section of a policy, you can receive a placeholder
    // such as "Resource":"arn:aws:s3:::${BucketName}" instead of "*".
    IncludeResourcePlaceholders *bool `location:"querystring" locationName:"includeResourcePlaceholders" type:"boolean"`

    // The level of detail that you want to generate. You can specify whether to
    // generate service-level policies.
    //
    // IAM Access Analyzer uses iam:servicelastaccessed to identify services that
    // have been used recently to create this service-level template.
    IncludeServiceLevelTemplate *bool `location:"querystring" locationName:"includeServiceLevelTemplate" type:"boolean"`

    // The JobId that is returned by the StartPolicyGeneration operation. The JobId
    // can be used with GetGeneratedPolicy to retrieve the generated policies or
    // used with CancelPolicyGeneration to cancel the policy generation request.
    //
    // JobId is a required field
    JobId *string `location:"uri" locationName:"jobId" type:"string" required:"true"`
    // contains filtered or unexported fields
}

func (GetGeneratedPolicyInput) GoString ¶

func (s GetGeneratedPolicyInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetGeneratedPolicyInput) SetIncludeResourcePlaceholders ¶

func (s *GetGeneratedPolicyInput) SetIncludeResourcePlaceholders(v bool) *GetGeneratedPolicyInput

SetIncludeResourcePlaceholders sets the IncludeResourcePlaceholders field's value.

func (*GetGeneratedPolicyInput) SetIncludeServiceLevelTemplate ¶

func (s *GetGeneratedPolicyInput) SetIncludeServiceLevelTemplate(v bool) *GetGeneratedPolicyInput

SetIncludeServiceLevelTemplate sets the IncludeServiceLevelTemplate field's value.

func (*GetGeneratedPolicyInput) SetJobId ¶

func (s *GetGeneratedPolicyInput) SetJobId(v string) *GetGeneratedPolicyInput

SetJobId sets the JobId field's value.

func (GetGeneratedPolicyInput) String ¶

func (s GetGeneratedPolicyInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetGeneratedPolicyInput) Validate ¶

func (s *GetGeneratedPolicyInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetGeneratedPolicyOutput ¶

type GetGeneratedPolicyOutput struct {

    // A GeneratedPolicyResult object that contains the generated policies and associated
    // details.
    //
    // GeneratedPolicyResult is a required field
    GeneratedPolicyResult *GeneratedPolicyResult `locationName:"generatedPolicyResult" type:"structure" required:"true"`

    // A GeneratedPolicyDetails object that contains details about the generated
    // policy.
    //
    // JobDetails is a required field
    JobDetails *JobDetails `locationName:"jobDetails" type:"structure" required:"true"`
    // contains filtered or unexported fields
}

func (GetGeneratedPolicyOutput) GoString ¶

func (s GetGeneratedPolicyOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetGeneratedPolicyOutput) SetGeneratedPolicyResult ¶

func (s *GetGeneratedPolicyOutput) SetGeneratedPolicyResult(v *GeneratedPolicyResult) *GetGeneratedPolicyOutput

SetGeneratedPolicyResult sets the GeneratedPolicyResult field's value.

func (*GetGeneratedPolicyOutput) SetJobDetails ¶

func (s *GetGeneratedPolicyOutput) SetJobDetails(v *JobDetails) *GetGeneratedPolicyOutput

SetJobDetails sets the JobDetails field's value.

func (GetGeneratedPolicyOutput) String ¶

func (s GetGeneratedPolicyOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type IamRoleConfiguration ¶

type IamRoleConfiguration struct {

    // The proposed trust policy for the IAM role.
    TrustPolicy *string `locationName:"trustPolicy" type:"string"`
    // contains filtered or unexported fields
}

The proposed access control configuration for an IAM role. You can propose a configuration for a new IAM role or an existing IAM role that you own by specifying the trust policy. If the configuration is for a new IAM role, you must specify the trust policy. If the configuration is for an existing IAM role that you own and you do not propose the trust policy, the access preview uses the existing trust policy for the role. The proposed trust policy cannot be an empty string. For more information about role trust policy limits, see IAM and STS quotas (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html).

func (IamRoleConfiguration) GoString ¶

func (s IamRoleConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*IamRoleConfiguration) SetTrustPolicy ¶

func (s *IamRoleConfiguration) SetTrustPolicy(v string) *IamRoleConfiguration

SetTrustPolicy sets the TrustPolicy field's value.

func (IamRoleConfiguration) String ¶

func (s IamRoleConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type InlineArchiveRule ¶

type InlineArchiveRule struct {

    // The condition and values for a criterion.
    //
    // Filter is a required field
    Filter map[string]*Criterion `locationName:"filter" type:"map" required:"true"`

    // The name of the rule.
    //
    // RuleName is a required field
    RuleName *string `locationName:"ruleName" min:"1" type:"string" required:"true"`
    // contains filtered or unexported fields
}

An criterion statement in an archive rule. Each archive rule may have multiple criteria.

func (InlineArchiveRule) GoString ¶

func (s InlineArchiveRule) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*InlineArchiveRule) SetFilter ¶

func (s *InlineArchiveRule) SetFilter(v map[string]*Criterion) *InlineArchiveRule

SetFilter sets the Filter field's value.

func (*InlineArchiveRule) SetRuleName ¶

func (s *InlineArchiveRule) SetRuleName(v string) *InlineArchiveRule

SetRuleName sets the RuleName field's value.

func (InlineArchiveRule) String ¶

func (s InlineArchiveRule) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*InlineArchiveRule) Validate ¶

func (s *InlineArchiveRule) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type InternalServerException ¶

type InternalServerException struct {
    RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

    Message_ *string `locationName:"message" type:"string"`

    // The seconds to wait to retry.
    RetryAfterSeconds *int64 `location:"header" locationName:"Retry-After" type:"integer"`
    // contains filtered or unexported fields
}

Internal server error.

func (*InternalServerException) Code ¶

func (s *InternalServerException) Code() string

Code returns the exception type name.

func (*InternalServerException) Error ¶

func (s *InternalServerException) Error() string

func (InternalServerException) GoString ¶

func (s InternalServerException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*InternalServerException) Message ¶

func (s *InternalServerException) Message() string

Message returns the exception's message.

func (*InternalServerException) OrigErr ¶

func (s *InternalServerException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*InternalServerException) RequestID ¶

func (s *InternalServerException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*InternalServerException) StatusCode ¶

func (s *InternalServerException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (InternalServerException) String ¶

func (s InternalServerException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type InternetConfiguration ¶

type InternetConfiguration struct {
    // contains filtered or unexported fields
}

This configuration sets the network origin for the Amazon S3 access point or multi-region access point to Internet.

func (InternetConfiguration) GoString ¶

func (s InternetConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (InternetConfiguration) String ¶

func (s InternetConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type InvalidParameterException ¶

type InvalidParameterException struct {
    RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

    Message_ *string `locationName:"message" type:"string"`
    // contains filtered or unexported fields
}

The specified parameter is invalid.

func (*InvalidParameterException) Code ¶

func (s *InvalidParameterException) Code() string

Code returns the exception type name.

func (*InvalidParameterException) Error ¶

func (s *InvalidParameterException) Error() string

func (InvalidParameterException) GoString ¶

func (s InvalidParameterException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*InvalidParameterException) Message ¶

func (s *InvalidParameterException) Message() string

Message returns the exception's message.

func (*InvalidParameterException) OrigErr ¶

func (s *InvalidParameterException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*InvalidParameterException) RequestID ¶

func (s *InvalidParameterException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*InvalidParameterException) StatusCode ¶

func (s *InvalidParameterException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (InvalidParameterException) String ¶

func (s InvalidParameterException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type JobDetails ¶

type JobDetails struct {

    // A timestamp of when the job was completed.
    CompletedOn *time.Time `locationName:"completedOn" type:"timestamp" timestampFormat:"iso8601"`

    // The job error for the policy generation request.
    JobError *JobError `locationName:"jobError" type:"structure"`

    // The JobId that is returned by the StartPolicyGeneration operation. The JobId
    // can be used with GetGeneratedPolicy to retrieve the generated policies or
    // used with CancelPolicyGeneration to cancel the policy generation request.
    //
    // JobId is a required field
    JobId *string `locationName:"jobId" type:"string" required:"true"`

    // A timestamp of when the job was started.
    //
    // StartedOn is a required field
    StartedOn *time.Time `locationName:"startedOn" type:"timestamp" timestampFormat:"iso8601" required:"true"`

    // The status of the job request.
    //
    // Status is a required field
    Status *string `locationName:"status" type:"string" required:"true" enum:"JobStatus"`
    // contains filtered or unexported fields
}

Contains details about the policy generation request.

func (JobDetails) GoString ¶

func (s JobDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*JobDetails) SetCompletedOn ¶

func (s *JobDetails) SetCompletedOn(v time.Time) *JobDetails

SetCompletedOn sets the CompletedOn field's value.

func (*JobDetails) SetJobError ¶

func (s *JobDetails) SetJobError(v *JobError) *JobDetails

SetJobError sets the JobError field's value.

func (*JobDetails) SetJobId ¶

func (s *JobDetails) SetJobId(v string) *JobDetails

SetJobId sets the JobId field's value.

func (*JobDetails) SetStartedOn ¶

func (s *JobDetails) SetStartedOn(v time.Time) *JobDetails

SetStartedOn sets the StartedOn field's value.

func (*JobDetails) SetStatus ¶

func (s *JobDetails) SetStatus(v string) *JobDetails

SetStatus sets the Status field's value.

func (JobDetails) String ¶

func (s JobDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type JobError ¶

type JobError struct {

    // The job error code.
    //
    // Code is a required field
    Code *string `locationName:"code" type:"string" required:"true" enum:"JobErrorCode"`

    // Specific information about the error. For example, which service quota was
    // exceeded or which resource was not found.
    //
    // Message is a required field
    Message *string `locationName:"message" type:"string" required:"true"`
    // contains filtered or unexported fields
}

Contains the details about the policy generation error.

func (JobError) GoString ¶

func (s JobError) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*JobError) SetCode ¶

func (s *JobError) SetCode(v string) *JobError

SetCode sets the Code field's value.

func (*JobError) SetMessage ¶

func (s *JobError) SetMessage(v string) *JobError

SetMessage sets the Message field's value.

func (JobError) String ¶

func (s JobError) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type KmsGrantConfiguration ¶

type KmsGrantConfiguration struct {

    // Use this structure to propose allowing cryptographic operations (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations)
    // in the grant only when the operation request includes the specified encryption
    // context (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context).
    Constraints *KmsGrantConstraints `locationName:"constraints" type:"structure"`

    // The principal that is given permission to perform the operations that the
    // grant permits.
    //
    // GranteePrincipal is a required field
    GranteePrincipal *string `locationName:"granteePrincipal" type:"string" required:"true"`

    // The Amazon Web Services account under which the grant was issued. The account
    // is used to propose KMS grants issued by accounts other than the owner of
    // the key.
    //
    // IssuingAccount is a required field
    IssuingAccount *string `locationName:"issuingAccount" type:"string" required:"true"`

    // A list of operations that the grant permits.
    //
    // Operations is a required field
    Operations []*string `locationName:"operations" type:"list" required:"true" enum:"KmsGrantOperation"`

    // The principal that is given permission to retire the grant by using RetireGrant
    // (https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html)
    // operation.
    RetiringPrincipal *string `locationName:"retiringPrincipal" type:"string"`
    // contains filtered or unexported fields
}