Updated API models and rebuilt service gems.

Author: aws-sdk-ruby-automation

apis/accessanalyzer/2019-11-01/api-2.json

@@ -327,6 +327,23 @@
         {"shape":"AccessDeniedException"}
       ]
     },
+    "GetFindingsStatistics":{
+      "name":"GetFindingsStatistics",
+      "http":{
+        "method":"POST",
+        "requestUri":"/analyzer/findings/statistics",
+        "responseCode":200
+      },
+      "input":{"shape":"GetFindingsStatisticsRequest"},
+      "output":{"shape":"GetFindingsStatisticsResponse"},
+      "errors":[
+        {"shape":"ResourceNotFoundException"},
+        {"shape":"ValidationException"},
+        {"shape":"InternalServerException"},
+        {"shape":"ThrottlingException"},
+        {"shape":"AccessDeniedException"}
+      ]
+    },
     "GetGeneratedPolicy":{
       "name":"GetGeneratedPolicy",
       "http":{
@@ -804,6 +821,12 @@
       "max":100,
       "min":0
     },
+    "AccountAggregations":{
+      "type":"list",
+      "member":{"shape":"FindingAggregationAccountDetails"},
+      "max":10,
+      "min":1
+    },
     "AccountIdsList":{
       "type":"list",
       "member":{"shape":"String"}
@@ -1337,6 +1360,15 @@
         "resourceControlPolicyRestriction":{"shape":"ResourceControlPolicyRestriction"}
       }
     },
+    "ExternalAccessFindingsStatistics":{
+      "type":"structure",
+      "members":{
+        "resourceTypeStatistics":{"shape":"ResourceTypeStatisticsMap"},
+        "totalActiveFindings":{"shape":"Integer"},
+        "totalArchivedFindings":{"shape":"Integer"},
+        "totalResolvedFindings":{"shape":"Integer"}
+      }
+    },
     "FilterCriteriaMap":{
       "type":"map",
       "key":{"shape":"String"},
@@ -1372,6 +1404,19 @@
         "resourceControlPolicyRestriction":{"shape":"ResourceControlPolicyRestriction"}
       }
     },
+    "FindingAggregationAccountDetails":{
+      "type":"structure",
+      "members":{
+        "account":{"shape":"String"},
+        "numberOfActiveFindings":{"shape":"Integer"},
+        "details":{"shape":"FindingAggregationAccountDetailsMap"}
+      }
+    },
+    "FindingAggregationAccountDetailsMap":{
+      "type":"map",
+      "key":{"shape":"String"},
+      "value":{"shape":"Integer"}
+    },
     "FindingChangeType":{
       "type":"string",
       "enum":[
@@ -1515,6 +1560,18 @@
       "type":"list",
       "member":{"shape":"FindingSummaryV2"}
     },
+    "FindingsStatistics":{
+      "type":"structure",
+      "members":{
+        "externalAccessFindingsStatistics":{"shape":"ExternalAccessFindingsStatistics"},
+        "unusedAccessFindingsStatistics":{"shape":"UnusedAccessFindingsStatistics"}
+      },
+      "union":true
+    },
+    "FindingsStatisticsList":{
+      "type":"list",
+      "member":{"shape":"FindingsStatistics"}
+    },
     "GenerateFindingRecommendationRequest":{
       "type":"structure",
       "required":[
@@ -1802,6 +1859,20 @@
         "findingType":{"shape":"FindingType"}
       }
     },
+    "GetFindingsStatisticsRequest":{
+      "type":"structure",
+      "required":["analyzerArn"],
+      "members":{
+        "analyzerArn":{"shape":"AnalyzerArn"}
+      }
+    },
+    "GetFindingsStatisticsResponse":{
+      "type":"structure",
+      "members":{
+        "findingsStatistics":{"shape":"FindingsStatisticsList"},
+        "lastUpdatedAt":{"shape":"Timestamp"}
+      }
+    },
     "GetGeneratedPolicyRequest":{
       "type":"structure",
       "required":["jobId"],
@@ -2521,6 +2592,18 @@
         "AWS::IAM::User"
       ]
     },
+    "ResourceTypeDetails":{
+      "type":"structure",
+      "members":{
+        "totalActivePublic":{"shape":"Integer"},
+        "totalActiveCrossAccount":{"shape":"Integer"}
+      }
+    },
+    "ResourceTypeStatisticsMap":{
+      "type":"map",
+      "key":{"shape":"ResourceType"},
+      "value":{"shape":"ResourceTypeDetails"}
+    },
     "RetiringPrincipal":{"type":"string"},
     "RoleArn":{
       "type":"string",
@@ -2842,6 +2925,27 @@
         "analysisRule":{"shape":"AnalysisRule"}
       }
     },
+    "UnusedAccessFindingsStatistics":{
+      "type":"structure",
+      "members":{
+        "unusedAccessTypeStatistics":{"shape":"UnusedAccessTypeStatisticsList"},
+        "topAccounts":{"shape":"AccountAggregations"},
+        "totalActiveFindings":{"shape":"Integer"},
+        "totalArchivedFindings":{"shape":"Integer"},
+        "totalResolvedFindings":{"shape":"Integer"}
+      }
+    },
+    "UnusedAccessTypeStatistics":{
+      "type":"structure",
+      "members":{
+        "unusedAccessType":{"shape":"String"},
+        "total":{"shape":"Integer"}
+      }
+    },
+    "UnusedAccessTypeStatisticsList":{
+      "type":"list",
+      "member":{"shape":"UnusedAccessTypeStatistics"}
+    },
     "UnusedAction":{
       "type":"structure",
       "required":["action"],

apis/accessanalyzer/2019-11-01/docs-2.json

@@ -20,6 +20,7 @@
     "GetFinding": "<p>Retrieves information about the specified finding. GetFinding and GetFindingV2 both use <code>access-analyzer:GetFinding</code> in the <code>Action</code> element of an IAM policy statement. You must have permission to perform the <code>access-analyzer:GetFinding</code> action.</p>",
     "GetFindingRecommendation": "<p>Retrieves information about a finding recommendation for the specified analyzer.</p>",
     "GetFindingV2": "<p>Retrieves information about the specified finding. GetFinding and GetFindingV2 both use <code>access-analyzer:GetFinding</code> in the <code>Action</code> element of an IAM policy statement. You must have permission to perform the <code>access-analyzer:GetFinding</code> action.</p>",
+    "GetFindingsStatistics": "<p>Retrieves a list of aggregated finding statistics for an external access or unused access analyzer.</p>",
     "GetGeneratedPolicy": "<p>Retrieves the policy that was generated using <code>StartPolicyGeneration</code>. </p>",
     "ListAccessPreviewFindings": "<p>Retrieves a list of access preview findings generated by the specified access preview.</p>",
     "ListAccessPreviews": "<p>Retrieves a list of access previews for the specified analyzer.</p>",
@@ -163,6 +164,12 @@
         "Access$resources": "<p>A list of resources for the access permissions. Any strings that can be used as an Amazon Resource Name (ARN) in an IAM policy can be used in the list of resources to check. You can only use a wildcard in the portion of the ARN that specifies the resource ID.</p>"
       }
     },
+    "AccountAggregations": {
+      "base": null,
+      "refs": {
+        "UnusedAccessFindingsStatistics$topAccounts": "<p>A list of one to ten Amazon Web Services accounts that have the most active findings for the unused access analyzer.</p>"
+      }
+    },
     "AccountIdsList": {
       "base": null,
       "refs": {
@@ -260,6 +267,7 @@
         "GetFindingRecommendationRequest$analyzerArn": "<p>The <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources\">ARN of the analyzer</a> used to generate the finding recommendation.</p>",
         "GetFindingRequest$analyzerArn": "<p>The <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources\">ARN of the analyzer</a> that generated the finding.</p>",
         "GetFindingV2Request$analyzerArn": "<p>The <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources\">ARN of the analyzer</a> that generated the finding.</p>",
+        "GetFindingsStatisticsRequest$analyzerArn": "<p>The <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources\">ARN of the analyzer</a> used to generate the statistics.</p>",
         "ListAccessPreviewFindingsRequest$analyzerArn": "<p>The <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources\">ARN of the analyzer</a> used to generate the access.</p>",
         "ListAccessPreviewsRequest$analyzerArn": "<p>The <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources\">ARN of the analyzer</a> used to generate the access preview.</p>",
         "ListAnalyzedResourcesRequest$analyzerArn": "<p>The <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources\">ARN of the analyzer</a> to retrieve a list of analyzed resources from.</p>",
@@ -580,6 +588,12 @@
         "FindingDetails$externalAccessDetails": "<p>The details for an external access analyzer finding.</p>"
       }
     },
+    "ExternalAccessFindingsStatistics": {
+      "base": "<p>Provides aggregate statistics about the findings for the specified external access analyzer.</p>",
+      "refs": {
+        "FindingsStatistics$externalAccessFindingsStatistics": "<p>The aggregate statistics for an external access analyzer.</p>"
+      }
+    },
     "FilterCriteriaMap": {
       "base": null,
       "refs": {
@@ -598,6 +612,18 @@
         "GetFindingResponse$finding": "<p>A <code>finding</code> object that contains finding details.</p>"
       }
     },
+    "FindingAggregationAccountDetails": {
+      "base": "<p>Contains information about the findings for an Amazon Web Services account in an organization unused access analyzer.</p>",
+      "refs": {
+        "AccountAggregations$member": null
+      }
+    },
+    "FindingAggregationAccountDetailsMap": {
+      "base": null,
+      "refs": {
+        "FindingAggregationAccountDetails$details": "<p>Provides the number of active findings for each type of unused access for the specified Amazon Web Services account.</p>"
+      }
+    },
     "FindingChangeType": {
       "base": null,
       "refs": {
@@ -711,6 +737,18 @@
         "ListFindingsV2Response$findings": "<p>A list of findings retrieved from the analyzer that match the filter criteria specified, if any.</p>"
       }
     },
+    "FindingsStatistics": {
+      "base": "<p>Contains information about the aggregate statistics for an external or unused access analyzer. Only one parameter can be used in a <code>FindingsStatistics</code> object.</p>",
+      "refs": {
+        "FindingsStatisticsList$member": null
+      }
+    },
+    "FindingsStatisticsList": {
+      "base": null,
+      "refs": {
+        "GetFindingsStatisticsResponse$findingsStatistics": "<p>A group of external access or unused access findings statistics.</p>"
+      }
+    },
     "GenerateFindingRecommendationRequest": {
       "base": null,
       "refs": {
@@ -828,6 +866,16 @@
       "refs": {
       }
     },
+    "GetFindingsStatisticsRequest": {
+      "base": null,
+      "refs": {
+      }
+    },
+    "GetFindingsStatisticsResponse": {
+      "base": null,
+      "refs": {
+      }
+    },
     "GetGeneratedPolicyRequest": {
       "base": null,
       "refs": {
@@ -871,6 +919,11 @@
     "Integer": {
       "base": null,
       "refs": {
+        "ExternalAccessFindingsStatistics$totalActiveFindings": "<p>The number of active findings for the specified external access analyzer.</p>",
+        "ExternalAccessFindingsStatistics$totalArchivedFindings": "<p>The number of archived findings for the specified external access analyzer.</p>",
+        "ExternalAccessFindingsStatistics$totalResolvedFindings": "<p>The number of resolved findings for the specified external access analyzer.</p>",
+        "FindingAggregationAccountDetails$numberOfActiveFindings": "<p>The number of active unused access findings for the specified Amazon Web Services account.</p>",
+        "FindingAggregationAccountDetailsMap$value": null,
         "GetFindingV2Request$maxResults": "<p>The maximum number of results to return in the response.</p>",
         "InternalServerException$retryAfterSeconds": "<p>The seconds to wait to retry.</p>",
         "ListAccessPreviewFindingsRequest$maxResults": "<p>The maximum number of results to return in the response.</p>",
@@ -885,10 +938,16 @@
         "Position$column": "<p>The column of the position, starting from 0.</p>",
         "Position$offset": "<p>The offset within the policy that corresponds to the position, starting from 0.</p>",
         "ReasonSummary$statementIndex": "<p>The index number of the reason statement.</p>",
+        "ResourceTypeDetails$totalActivePublic": "<p>The total number of active public findings for the resource type.</p>",
+        "ResourceTypeDetails$totalActiveCrossAccount": "<p>The total number of active cross-account findings for the resource type.</p>",
         "Substring$start": "<p>The start index of the substring, starting from 0.</p>",
         "Substring$length": "<p>The length of the substring.</p>",
         "ThrottlingException$retryAfterSeconds": "<p>The seconds to wait to retry.</p>",
         "UnusedAccessConfiguration$unusedAccessAge": "<p>The specified access age in days for which to generate findings for unused access. For example, if you specify 90 days, the analyzer will generate findings for IAM entities within the accounts of the selected organization for any access that hasn't been used in 90 or more days since the analyzer's last scan. You can choose a value between 1 and 365 days.</p>",
+        "UnusedAccessFindingsStatistics$totalActiveFindings": "<p>The total number of active findings for the unused access analyzer.</p>",
+        "UnusedAccessFindingsStatistics$totalArchivedFindings": "<p>The total number of archived findings for the unused access analyzer.</p>",
+        "UnusedAccessFindingsStatistics$totalResolvedFindings": "<p>The total number of resolved findings for the unused access analyzer.</p>",
+        "UnusedAccessTypeStatistics$total": "<p>The total number of findings for the specified unused access type.</p>",
         "ValidatePolicyRequest$maxResults": "<p>The maximum number of results to return in the response.</p>"
       }
     },
@@ -1431,7 +1490,20 @@
         "FindingSummary$resourceType": "<p>The type of the resource that the external principal has access to.</p>",
         "FindingSummaryV2$resourceType": "<p>The type of the resource that the external principal has access to.</p>",
         "GetFindingV2Response$resourceType": "<p>The type of the resource identified in the finding.</p>",
-        "ListAnalyzedResourcesRequest$resourceType": "<p>The type of resource.</p>"
+        "ListAnalyzedResourcesRequest$resourceType": "<p>The type of resource.</p>",
+        "ResourceTypeStatisticsMap$key": null
+      }
+    },
+    "ResourceTypeDetails": {
+      "base": "<p>Contains information about the total number of active cross-account and public findings for a resource type of an external access analyzer.</p>",
+      "refs": {
+        "ResourceTypeStatisticsMap$value": null
+      }
+    },
+    "ResourceTypeStatisticsMap": {
+      "base": null,
+      "refs": {
+        "ExternalAccessFindingsStatistics$resourceTypeStatistics": "<p>The total number of active cross-account and public findings for each resource type of the specified external access analyzer.</p>"
       }
     },
     "RetiringPrincipal": {
@@ -1625,6 +1697,8 @@
         "Finding$resource": "<p>The resource that an external principal has access to.</p>",
         "Finding$resourceOwnerAccount": "<p>The Amazon Web Services account ID that owns the resource.</p>",
         "Finding$error": "<p>An error.</p>",
+        "FindingAggregationAccountDetails$account": "<p>The ID of the Amazon Web Services account for which unused access finding details are provided.</p>",
+        "FindingAggregationAccountDetailsMap$key": null,
         "FindingSourceDetail$accessPointArn": "<p>The ARN of the access point that generated the finding. The ARN format depends on whether the ARN represents an access point or a multi-region access point.</p>",
         "FindingSourceDetail$accessPointAccount": "<p>The account of the cross-account access point that generated the finding.</p>",
         "FindingSummary$resource": "<p>The resource that the external principal has access to.</p>",
@@ -1667,6 +1741,7 @@
         "ThrottlingException$message": null,
         "UnprocessableEntityException$message": null,
         "UntagResourceRequest$resourceArn": "<p>The ARN of the resource to remove the tag from.</p>",
+        "UnusedAccessTypeStatistics$unusedAccessType": "<p>The type of unused access.</p>",
         "UnusedAction$action": "<p>The action for which the unused access finding was generated.</p>",
         "UnusedIamUserAccessKeyDetails$accessKeyId": "<p>The ID of the access key for which the unused access finding was generated.</p>",
         "UnusedPermissionDetails$serviceNamespace": "<p>The namespace of the Amazon Web Services service that contains the unused actions.</p>",
@@ -1755,6 +1830,7 @@
         "GetFindingV2Response$analyzedAt": "<p>The time at which the resource-based policy or IAM entity that generated the finding was analyzed.</p>",
         "GetFindingV2Response$createdAt": "<p>The time at which the finding was created.</p>",
         "GetFindingV2Response$updatedAt": "<p>The time at which the finding was updated.</p>",
+        "GetFindingsStatisticsResponse$lastUpdatedAt": "<p>The time at which the retrieval of the findings statistics was last updated. If the findings statistics have not been previously retrieved for the specified analyzer, this field will not be populated.</p>",
         "JobDetails$startedOn": "<p>A timestamp of when the job was started.</p>",
         "JobDetails$completedOn": "<p>A timestamp of when the job was completed.</p>",
         "PolicyGeneration$startedOn": "<p>A timestamp of when the policy generation started.</p>",
@@ -1847,6 +1923,24 @@
         "AnalyzerConfiguration$unusedAccess": "<p>Specifies the configuration of an unused access analyzer for an Amazon Web Services organization or account.</p>"
       }
     },
+    "UnusedAccessFindingsStatistics": {
+      "base": "<p>Provides aggregate statistics about the findings for the specified unused access analyzer.</p>",
+      "refs": {
+        "FindingsStatistics$unusedAccessFindingsStatistics": "<p>The aggregate statistics for an unused access analyzer.</p>"
+      }
+    },
+    "UnusedAccessTypeStatistics": {
+      "base": "<p>Contains information about the total number of findings for a type of unused access.</p>",
+      "refs": {
+        "UnusedAccessTypeStatisticsList$member": null
+      }
+    },
+    "UnusedAccessTypeStatisticsList": {
+      "base": null,
+      "refs": {
+        "UnusedAccessFindingsStatistics$unusedAccessTypeStatistics": "<p>A list of details about the total number of findings for each type of unused access for the analyzer. </p>"
+      }
+    },
     "UnusedAction": {
       "base": "<p>Contains information about an unused access finding for an action. IAM Access Analyzer charges for unused access analysis based on the number of IAM roles and users analyzed per month. For more details on pricing, see <a href=\"https://aws.amazon.com/iam/access-analyzer/pricing\">IAM Access Analyzer pricing</a>.</p>",
       "refs": {