|
1554 | 1554 | "target": "com.amazonaws.accessanalyzer#AccessPreviewSummary" |
1555 | 1555 | } |
1556 | 1556 | }, |
| 1557 | + "com.amazonaws.accessanalyzer#AccountIdsList": { |
| 1558 | + "type": "list", |
| 1559 | + "member": { |
| 1560 | + "target": "smithy.api#String" |
| 1561 | + } |
| 1562 | + }, |
1557 | 1563 | "com.amazonaws.accessanalyzer#AclCanonicalId": { |
1558 | 1564 | "type": "string" |
1559 | 1565 | }, |
|
1622 | 1628 | "target": "com.amazonaws.accessanalyzer#Action" |
1623 | 1629 | } |
1624 | 1630 | }, |
| 1631 | + "com.amazonaws.accessanalyzer#AnalysisRule": { |
| 1632 | + "type": "structure", |
| 1633 | + "members": { |
| 1634 | + "exclusions": { |
| 1635 | + "target": "com.amazonaws.accessanalyzer#AnalysisRuleCriteriaList", |
| 1636 | + "traits": { |
| 1637 | + "smithy.api#documentation": "<p>A list of rules for the analyzer containing criteria to exclude from analysis. Entities\n that meet the rule criteria will not generate findings.</p>" |
| 1638 | + } |
| 1639 | + } |
| 1640 | + }, |
| 1641 | + "traits": { |
| 1642 | + "smithy.api#documentation": "<p>Contains information about analysis rules for the analyzer. Analysis rules determine\n which entities will generate findings based on the criteria you define when you create the\n rule.</p>" |
| 1643 | + } |
| 1644 | + }, |
| 1645 | + "com.amazonaws.accessanalyzer#AnalysisRuleCriteria": { |
| 1646 | + "type": "structure", |
| 1647 | + "members": { |
| 1648 | + "accountIds": { |
| 1649 | + "target": "com.amazonaws.accessanalyzer#AccountIdsList", |
| 1650 | + "traits": { |
| 1651 | + "smithy.api#documentation": "<p>A list of Amazon Web Services account IDs to apply to the analysis rule criteria. The accounts cannot\n include the organization analyzer owner account. Account IDs can only be applied to the\n analysis rule criteria for organization-level analyzers. The list cannot include more than\n 2,000 account IDs.</p>" |
| 1652 | + } |
| 1653 | + }, |
| 1654 | + "resourceTags": { |
| 1655 | + "target": "com.amazonaws.accessanalyzer#TagsList", |
| 1656 | + "traits": { |
| 1657 | + "smithy.api#documentation": "<p>An array of key-value pairs to match for your resources. You can use the set of Unicode\n letters, digits, whitespace, <code>_</code>, <code>.</code>, <code>/</code>,\n <code>=</code>, <code>+</code>, and <code>-</code>.</p>\n <p>For the tag key, you can specify a value that is 1 to 128 characters in length and\n cannot be prefixed with <code>aws:</code>.</p>\n <p>For the tag value, you can specify a value that is 0 to 256 characters in length. If the\n specified tag value is 0 characters, the rule is applied to all principals with the\n specified tag key.</p>" |
| 1658 | + } |
| 1659 | + } |
| 1660 | + }, |
| 1661 | + "traits": { |
| 1662 | + "smithy.api#documentation": "<p>The criteria for an analysis rule for an analyzer. The criteria determine which entities\n will generate findings.</p>" |
| 1663 | + } |
| 1664 | + }, |
| 1665 | + "com.amazonaws.accessanalyzer#AnalysisRuleCriteriaList": { |
| 1666 | + "type": "list", |
| 1667 | + "member": { |
| 1668 | + "target": "com.amazonaws.accessanalyzer#AnalysisRuleCriteria" |
| 1669 | + } |
| 1670 | + }, |
1625 | 1671 | "com.amazonaws.accessanalyzer#AnalyzedResource": { |
1626 | 1672 | "type": "structure", |
1627 | 1673 | "members": { |
|
1751 | 1797 | "read": { |
1752 | 1798 | "target": "com.amazonaws.accessanalyzer#GetAnalyzer" |
1753 | 1799 | }, |
| 1800 | + "update": { |
| 1801 | + "target": "com.amazonaws.accessanalyzer#UpdateAnalyzer" |
| 1802 | + }, |
1754 | 1803 | "delete": { |
1755 | 1804 | "target": "com.amazonaws.accessanalyzer#DeleteAnalyzer" |
1756 | 1805 | }, |
|
1781 | 1830 | "unusedAccess": { |
1782 | 1831 | "target": "com.amazonaws.accessanalyzer#UnusedAccessConfiguration", |
1783 | 1832 | "traits": { |
1784 | | - "smithy.api#documentation": "<p>Specifies the configuration of an unused access analyzer for an Amazon Web Services organization or\n account. External access analyzers do not support any configuration.</p>" |
| 1833 | + "smithy.api#documentation": "<p>Specifies the configuration of an unused access analyzer for an Amazon Web Services organization or\n account.</p>" |
1785 | 1834 | } |
1786 | 1835 | } |
1787 | 1836 | }, |
1788 | 1837 | "traits": { |
1789 | | - "smithy.api#documentation": "<p>Contains information about the configuration of an unused access analyzer for an Amazon Web Services\n organization or account.</p>" |
| 1838 | + "smithy.api#documentation": "<p>Contains information about the configuration of an analyzer for an Amazon Web Services organization or\n account.</p>" |
1790 | 1839 | } |
1791 | 1840 | }, |
1792 | 1841 | "com.amazonaws.accessanalyzer#AnalyzerStatus": { |
|
2020 | 2069 | } |
2021 | 2070 | }, |
2022 | 2071 | "traits": { |
2023 | | - "smithy.api#documentation": "<p>Contains information about an archive rule.</p>" |
| 2072 | + "smithy.api#documentation": "<p>Contains information about an archive rule. Archive rules automatically archive new\n findings that meet the criteria you define when you create the rule.</p>" |
2024 | 2073 | } |
2025 | 2074 | }, |
2026 | 2075 | "com.amazonaws.accessanalyzer#ArchiveRulesList": { |
|
2857 | 2906 | "tags": { |
2858 | 2907 | "target": "com.amazonaws.accessanalyzer#TagsMap", |
2859 | 2908 | "traits": { |
2860 | | - "smithy.api#documentation": "<p>An array of key-value pairs to apply to the analyzer.</p>" |
| 2909 | + "smithy.api#documentation": "<p>An array of key-value pairs to apply to the analyzer. You can use the set of Unicode\n letters, digits, whitespace, <code>_</code>, <code>.</code>, <code>/</code>,\n <code>=</code>, <code>+</code>, and <code>-</code>.</p>\n <p>For the tag key, you can specify a value that is 1 to 128 characters in length and\n cannot be prefixed with <code>aws:</code>.</p>\n <p>For the tag value, you can specify a value that is 0 to 256 characters in length.</p>" |
2861 | 2910 | } |
2862 | 2911 | }, |
2863 | 2912 | "clientToken": { |
|
2870 | 2919 | "configuration": { |
2871 | 2920 | "target": "com.amazonaws.accessanalyzer#AnalyzerConfiguration", |
2872 | 2921 | "traits": { |
2873 | | - "smithy.api#documentation": "<p>Specifies the configuration of the analyzer. If the analyzer is an unused access\n analyzer, the specified scope of unused access is used for the configuration. If the\n analyzer is an external access analyzer, this field is not used.</p>" |
| 2922 | + "smithy.api#documentation": "<p>Specifies the configuration of the analyzer. If the analyzer is an unused access\n analyzer, the specified scope of unused access is used for the configuration.</p>" |
2874 | 2923 | } |
2875 | 2924 | } |
2876 | 2925 | }, |
|
5383 | 5432 | } |
5384 | 5433 | ], |
5385 | 5434 | "traits": { |
5386 | | - "smithy.api#documentation": "<p>Retrieves a list of resources of the specified type that have been analyzed by the\n specified external access analyzer. This action is not supported for unused access\n analyzers.</p>", |
| 5435 | + "smithy.api#documentation": "<p>Retrieves a list of resources of the specified type that have been analyzed by the\n specified analyzer.</p>", |
5387 | 5436 | "smithy.api#http": { |
5388 | 5437 | "uri": "/analyzed-resource", |
5389 | 5438 | "method": "POST", |
|
6634 | 6683 | { |
6635 | 6684 | "value": "AWS::DynamoDB::Stream", |
6636 | 6685 | "name": "AWS_DYNAMODB_STREAM" |
| 6686 | + }, |
| 6687 | + { |
| 6688 | + "value": "AWS::IAM::User", |
| 6689 | + "name": "AWS_IAM_USER" |
6637 | 6690 | } |
6638 | 6691 | ] |
6639 | 6692 | } |
|
7196 | 7249 | "smithy.api#documentation": "<p>The response to the request.</p>" |
7197 | 7250 | } |
7198 | 7251 | }, |
| 7252 | + "com.amazonaws.accessanalyzer#TagsList": { |
| 7253 | + "type": "list", |
| 7254 | + "member": { |
| 7255 | + "target": "com.amazonaws.accessanalyzer#TagsMap" |
| 7256 | + } |
| 7257 | + }, |
7199 | 7258 | "com.amazonaws.accessanalyzer#TagsMap": { |
7200 | 7259 | "type": "map", |
7201 | 7260 | "key": { |
|
7417 | 7476 | "unusedAccessAge": { |
7418 | 7477 | "target": "smithy.api#Integer", |
7419 | 7478 | "traits": { |
7420 | | - "smithy.api#documentation": "<p>The specified access age in days for which to generate findings for unused access. For\n example, if you specify 90 days, the analyzer will generate findings for IAM entities\n within the accounts of the selected organization for any access that hasn't been used in 90\n or more days since the analyzer's last scan. You can choose a value between 1 and 180\n days.</p>" |
| 7479 | + "smithy.api#documentation": "<p>The specified access age in days for which to generate findings for unused access. For\n example, if you specify 90 days, the analyzer will generate findings for IAM entities\n within the accounts of the selected organization for any access that hasn't been used in 90\n or more days since the analyzer's last scan. You can choose a value between 1 and 365\n days.</p>" |
7421 | 7480 | } |
| 7481 | + }, |
| 7482 | + "analysisRule": { |
| 7483 | + "target": "com.amazonaws.accessanalyzer#AnalysisRule" |
7422 | 7484 | } |
7423 | 7485 | }, |
7424 | 7486 | "traits": { |
|
7561 | 7623 | "smithy.api#documentation": "<p>Contains information about the action to take for a policy in an unused permissions\n finding.</p>" |
7562 | 7624 | } |
7563 | 7625 | }, |
| 7626 | + "com.amazonaws.accessanalyzer#UpdateAnalyzer": { |
| 7627 | + "type": "operation", |
| 7628 | + "input": { |
| 7629 | + "target": "com.amazonaws.accessanalyzer#UpdateAnalyzerRequest" |
| 7630 | + }, |
| 7631 | + "output": { |
| 7632 | + "target": "com.amazonaws.accessanalyzer#UpdateAnalyzerResponse" |
| 7633 | + }, |
| 7634 | + "errors": [ |
| 7635 | + { |
| 7636 | + "target": "com.amazonaws.accessanalyzer#AccessDeniedException" |
| 7637 | + }, |
| 7638 | + { |
| 7639 | + "target": "com.amazonaws.accessanalyzer#ConflictException" |
| 7640 | + }, |
| 7641 | + { |
| 7642 | + "target": "com.amazonaws.accessanalyzer#InternalServerException" |
| 7643 | + }, |
| 7644 | + { |
| 7645 | + "target": "com.amazonaws.accessanalyzer#ResourceNotFoundException" |
| 7646 | + }, |
| 7647 | + { |
| 7648 | + "target": "com.amazonaws.accessanalyzer#ThrottlingException" |
| 7649 | + }, |
| 7650 | + { |
| 7651 | + "target": "com.amazonaws.accessanalyzer#ValidationException" |
| 7652 | + } |
| 7653 | + ], |
| 7654 | + "traits": { |
| 7655 | + "smithy.api#documentation": "<p>Modifies the configuration of an existing analyzer.</p>", |
| 7656 | + "smithy.api#http": { |
| 7657 | + "uri": "/analyzer/{analyzerName}", |
| 7658 | + "method": "PUT", |
| 7659 | + "code": 200 |
| 7660 | + }, |
| 7661 | + "smithy.api#idempotent": {} |
| 7662 | + } |
| 7663 | + }, |
| 7664 | + "com.amazonaws.accessanalyzer#UpdateAnalyzerRequest": { |
| 7665 | + "type": "structure", |
| 7666 | + "members": { |
| 7667 | + "analyzerName": { |
| 7668 | + "target": "com.amazonaws.accessanalyzer#Name", |
| 7669 | + "traits": { |
| 7670 | + "smithy.api#documentation": "<p>The name of the analyzer to modify.</p>", |
| 7671 | + "smithy.api#httpLabel": {}, |
| 7672 | + "smithy.api#required": {} |
| 7673 | + } |
| 7674 | + }, |
| 7675 | + "configuration": { |
| 7676 | + "target": "com.amazonaws.accessanalyzer#AnalyzerConfiguration" |
| 7677 | + } |
| 7678 | + }, |
| 7679 | + "traits": { |
| 7680 | + "smithy.api#input": {} |
| 7681 | + } |
| 7682 | + }, |
| 7683 | + "com.amazonaws.accessanalyzer#UpdateAnalyzerResponse": { |
| 7684 | + "type": "structure", |
| 7685 | + "members": { |
| 7686 | + "configuration": { |
| 7687 | + "target": "com.amazonaws.accessanalyzer#AnalyzerConfiguration" |
| 7688 | + } |
| 7689 | + }, |
| 7690 | + "traits": { |
| 7691 | + "smithy.api#output": {} |
| 7692 | + } |
| 7693 | + }, |
7564 | 7694 | "com.amazonaws.accessanalyzer#UpdateArchiveRule": { |
7565 | 7695 | "type": "operation", |
7566 | 7696 | "input": { |
|
0 commit comments