accessanalyzer

package
v0.0.0-...-c570f4e Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 20, 2023 License: Apache-2.0 Imports: 10 Imported by: 0

Documentation

Overview

Package accessanalyzer provides the client and types for making API requests to Access Analyzer.

Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. Its features include findings for external and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. To start using IAM Access Analyzer to identify external or unused access, you first need to create an analyzer.

External access analyzers help identify potential risks of accessing resources by enabling you to identify any resource policies that grant access to an external principal. It does this by using logic-based reasoning to analyze resource-based policies in your Amazon Web Services environment. An external principal can be another Amazon Web Services account, a root user, an IAM user or role, a federated user, an Amazon Web Services service, or an anonymous user. You can also use IAM Access Analyzer to preview public and cross-account access to your resources before deploying permissions changes.

Unused access analyzers help identify potential identity access risks by enabling you to identify unused IAM roles, unused access keys, unused console passwords, and IAM principals with unused service and action-level permissions.

Beyond findings, IAM Access Analyzer provides basic and custom policy checks to validate IAM policies before deploying permissions changes. You can use policy generation to refine permissions by attaching a policy generated using access activity logged in CloudTrail logs.

This guide describes the IAM Access Analyzer operations that you can call programmatically. For general information about IAM Access Analyzer, see Identity and Access Management Access Analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html) in the IAM User Guide.

See https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01 for more information on this service.

See accessanalyzer package documentation for more information. https://docs.aws.amazon.com/sdk-for-go/api/service/accessanalyzer/

Using the Client

To contact Access Analyzer with the SDK use the New function to create a new service client. With that client you can make API requests to the service. These clients are safe to use concurrently.

See the SDK's documentation for more information on how to use the SDK. https://docs.aws.amazon.com/sdk-for-go/api/

See aws.Config documentation for more information on configuring SDK clients. https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config

See the Access Analyzer client AccessAnalyzer for more information on creating client for this service. https://docs.aws.amazon.com/sdk-for-go/api/service/accessanalyzer/#New

Index

Constants

View Source
const (
	// AccessCheckPolicyTypeIdentityPolicy is a AccessCheckPolicyType enum value
	AccessCheckPolicyTypeIdentityPolicy = "IDENTITY_POLICY"

	// AccessCheckPolicyTypeResourcePolicy is a AccessCheckPolicyType enum value
	AccessCheckPolicyTypeResourcePolicy = "RESOURCE_POLICY"
)
View Source
const (
	// AccessPreviewStatusCompleted is a AccessPreviewStatus enum value
	AccessPreviewStatusCompleted = "COMPLETED"

	// AccessPreviewStatusCreating is a AccessPreviewStatus enum value
	AccessPreviewStatusCreating = "CREATING"

	// AccessPreviewStatusFailed is a AccessPreviewStatus enum value
	AccessPreviewStatusFailed = "FAILED"
)
View Source
const (
	// AccessPreviewStatusReasonCodeInternalError is a AccessPreviewStatusReasonCode enum value
	AccessPreviewStatusReasonCodeInternalError = "INTERNAL_ERROR"

	// AccessPreviewStatusReasonCodeInvalidConfiguration is a AccessPreviewStatusReasonCode enum value
	AccessPreviewStatusReasonCodeInvalidConfiguration = "INVALID_CONFIGURATION"
)
View Source
const (
	// AclPermissionRead is a AclPermission enum value
	AclPermissionRead = "READ"

	// AclPermissionWrite is a AclPermission enum value
	AclPermissionWrite = "WRITE"

	// AclPermissionReadAcp is a AclPermission enum value
	AclPermissionReadAcp = "READ_ACP"

	// AclPermissionWriteAcp is a AclPermission enum value
	AclPermissionWriteAcp = "WRITE_ACP"

	// AclPermissionFullControl is a AclPermission enum value
	AclPermissionFullControl = "FULL_CONTROL"
)
View Source
const (
	// AnalyzerStatusActive is a AnalyzerStatus enum value
	AnalyzerStatusActive = "ACTIVE"

	// AnalyzerStatusCreating is a AnalyzerStatus enum value
	AnalyzerStatusCreating = "CREATING"

	// AnalyzerStatusDisabled is a AnalyzerStatus enum value
	AnalyzerStatusDisabled = "DISABLED"

	// AnalyzerStatusFailed is a AnalyzerStatus enum value
	AnalyzerStatusFailed = "FAILED"
)
View Source
const (
	// CheckAccessNotGrantedResultPass is a CheckAccessNotGrantedResult enum value
	CheckAccessNotGrantedResultPass = "PASS"

	// CheckAccessNotGrantedResultFail is a CheckAccessNotGrantedResult enum value
	CheckAccessNotGrantedResultFail = "FAIL"
)
View Source
const (
	// CheckNoNewAccessResultPass is a CheckNoNewAccessResult enum value
	CheckNoNewAccessResultPass = "PASS"

	// CheckNoNewAccessResultFail is a CheckNoNewAccessResult enum value
	CheckNoNewAccessResultFail = "FAIL"
)
View Source
const (
	// FindingChangeTypeChanged is a FindingChangeType enum value
	FindingChangeTypeChanged = "CHANGED"

	// FindingChangeTypeNew is a FindingChangeType enum value
	FindingChangeTypeNew = "NEW"

	// FindingChangeTypeUnchanged is a FindingChangeType enum value
	FindingChangeTypeUnchanged = "UNCHANGED"
)
View Source
const (
	// FindingSourceTypePolicy is a FindingSourceType enum value
	FindingSourceTypePolicy = "POLICY"

	// FindingSourceTypeBucketAcl is a FindingSourceType enum value
	FindingSourceTypeBucketAcl = "BUCKET_ACL"

	// FindingSourceTypeS3AccessPoint is a FindingSourceType enum value
	FindingSourceTypeS3AccessPoint = "S3_ACCESS_POINT"

	// FindingSourceTypeS3AccessPointAccount is a FindingSourceType enum value
	FindingSourceTypeS3AccessPointAccount = "S3_ACCESS_POINT_ACCOUNT"
)
View Source
const (
	// FindingStatusActive is a FindingStatus enum value
	FindingStatusActive = "ACTIVE"

	// FindingStatusArchived is a FindingStatus enum value
	FindingStatusArchived = "ARCHIVED"

	// FindingStatusResolved is a FindingStatus enum value
	FindingStatusResolved = "RESOLVED"
)
View Source
const (
	// FindingStatusUpdateActive is a FindingStatusUpdate enum value
	FindingStatusUpdateActive = "ACTIVE"

	// FindingStatusUpdateArchived is a FindingStatusUpdate enum value
	FindingStatusUpdateArchived = "ARCHIVED"
)
View Source
const (
	// FindingTypeExternalAccess is a FindingType enum value
	FindingTypeExternalAccess = "ExternalAccess"

	// FindingTypeUnusedIamrole is a FindingType enum value
	FindingTypeUnusedIamrole = "UnusedIAMRole"

	// FindingTypeUnusedIamuserAccessKey is a FindingType enum value
	FindingTypeUnusedIamuserAccessKey = "UnusedIAMUserAccessKey"

	// FindingTypeUnusedIamuserPassword is a FindingType enum value
	FindingTypeUnusedIamuserPassword = "UnusedIAMUserPassword"

	// FindingTypeUnusedPermission is a FindingType enum value
	FindingTypeUnusedPermission = "UnusedPermission"
)
View Source
const (
	// JobErrorCodeAuthorizationError is a JobErrorCode enum value
	JobErrorCodeAuthorizationError = "AUTHORIZATION_ERROR"

	// JobErrorCodeResourceNotFoundError is a JobErrorCode enum value
	JobErrorCodeResourceNotFoundError = "RESOURCE_NOT_FOUND_ERROR"

	// JobErrorCodeServiceQuotaExceededError is a JobErrorCode enum value
	JobErrorCodeServiceQuotaExceededError = "SERVICE_QUOTA_EXCEEDED_ERROR"

	// JobErrorCodeServiceError is a JobErrorCode enum value
	JobErrorCodeServiceError = "SERVICE_ERROR"
)
View Source
const (
	// JobStatusInProgress is a JobStatus enum value
	JobStatusInProgress = "IN_PROGRESS"

	// JobStatusSucceeded is a JobStatus enum value
	JobStatusSucceeded = "SUCCEEDED"

	// JobStatusFailed is a JobStatus enum value
	JobStatusFailed = "FAILED"

	// JobStatusCanceled is a JobStatus enum value
	JobStatusCanceled = "CANCELED"
)
View Source
const (
	// KmsGrantOperationCreateGrant is a KmsGrantOperation enum value
	KmsGrantOperationCreateGrant = "CreateGrant"

	// KmsGrantOperationDecrypt is a KmsGrantOperation enum value
	KmsGrantOperationDecrypt = "Decrypt"

	// KmsGrantOperationDescribeKey is a KmsGrantOperation enum value
	KmsGrantOperationDescribeKey = "DescribeKey"

	// KmsGrantOperationEncrypt is a KmsGrantOperation enum value
	KmsGrantOperationEncrypt = "Encrypt"

	// KmsGrantOperationGenerateDataKey is a KmsGrantOperation enum value
	KmsGrantOperationGenerateDataKey = "GenerateDataKey"

	// KmsGrantOperationGenerateDataKeyPair is a KmsGrantOperation enum value
	KmsGrantOperationGenerateDataKeyPair = "GenerateDataKeyPair"

	// KmsGrantOperationGenerateDataKeyPairWithoutPlaintext is a KmsGrantOperation enum value
	KmsGrantOperationGenerateDataKeyPairWithoutPlaintext = "GenerateDataKeyPairWithoutPlaintext"

	// KmsGrantOperationGenerateDataKeyWithoutPlaintext is a KmsGrantOperation enum value
	KmsGrantOperationGenerateDataKeyWithoutPlaintext = "GenerateDataKeyWithoutPlaintext"

	// KmsGrantOperationGetPublicKey is a KmsGrantOperation enum value
	KmsGrantOperationGetPublicKey = "GetPublicKey"

	// KmsGrantOperationReEncryptFrom is a KmsGrantOperation enum value
	KmsGrantOperationReEncryptFrom = "ReEncryptFrom"

	// KmsGrantOperationReEncryptTo is a KmsGrantOperation enum value
	KmsGrantOperationReEncryptTo = "ReEncryptTo"

	// KmsGrantOperationRetireGrant is a KmsGrantOperation enum value
	KmsGrantOperationRetireGrant = "RetireGrant"

	// KmsGrantOperationSign is a KmsGrantOperation enum value
	KmsGrantOperationSign = "Sign"

	// KmsGrantOperationVerify is a KmsGrantOperation enum value
	KmsGrantOperationVerify = "Verify"
)
View Source
const (
	// LocaleDe is a Locale enum value
	LocaleDe = "DE"

	// LocaleEn is a Locale enum value
	LocaleEn = "EN"

	// LocaleEs is a Locale enum value
	LocaleEs = "ES"

	// LocaleFr is a Locale enum value
	LocaleFr = "FR"

	// LocaleIt is a Locale enum value
	LocaleIt = "IT"

	// LocaleJa is a Locale enum value
	LocaleJa = "JA"

	// LocaleKo is a Locale enum value
	LocaleKo = "KO"

	// LocalePtBr is a Locale enum value
	LocalePtBr = "PT_BR"

	// LocaleZhCn is a Locale enum value
	LocaleZhCn = "ZH_CN"

	// LocaleZhTw is a Locale enum value
	LocaleZhTw = "ZH_TW"
)
View Source
const (
	// OrderByAsc is a OrderBy enum value
	OrderByAsc = "ASC"

	// OrderByDesc is a OrderBy enum value
	OrderByDesc = "DESC"
)
View Source
const (
	// PolicyTypeIdentityPolicy is a PolicyType enum value
	PolicyTypeIdentityPolicy = "IDENTITY_POLICY"

	// PolicyTypeResourcePolicy is a PolicyType enum value
	PolicyTypeResourcePolicy = "RESOURCE_POLICY"

	// PolicyTypeServiceControlPolicy is a PolicyType enum value
	PolicyTypeServiceControlPolicy = "SERVICE_CONTROL_POLICY"
)
View Source
const (
	// ReasonCodeAwsServiceAccessDisabled is a ReasonCode enum value
	ReasonCodeAwsServiceAccessDisabled = "AWS_SERVICE_ACCESS_DISABLED"

	// ReasonCodeDelegatedAdministratorDeregistered is a ReasonCode enum value
	ReasonCodeDelegatedAdministratorDeregistered = "DELEGATED_ADMINISTRATOR_DEREGISTERED"

	// ReasonCodeOrganizationDeleted is a ReasonCode enum value
	ReasonCodeOrganizationDeleted = "ORGANIZATION_DELETED"

	// ReasonCodeServiceLinkedRoleCreationFailed is a ReasonCode enum value
	ReasonCodeServiceLinkedRoleCreationFailed = "SERVICE_LINKED_ROLE_CREATION_FAILED"
)
View Source
const (
	// ResourceTypeAwsS3Bucket is a ResourceType enum value
	ResourceTypeAwsS3Bucket = "AWS::S3::Bucket"

	// ResourceTypeAwsIamRole is a ResourceType enum value
	ResourceTypeAwsIamRole = "AWS::IAM::Role"

	// ResourceTypeAwsSqsQueue is a ResourceType enum value
	ResourceTypeAwsSqsQueue = "AWS::SQS::Queue"

	// ResourceTypeAwsLambdaFunction is a ResourceType enum value
	ResourceTypeAwsLambdaFunction = "AWS::Lambda::Function"

	// ResourceTypeAwsLambdaLayerVersion is a ResourceType enum value
	ResourceTypeAwsLambdaLayerVersion = "AWS::Lambda::LayerVersion"

	// ResourceTypeAwsKmsKey is a ResourceType enum value
	ResourceTypeAwsKmsKey = "AWS::KMS::Key"

	// ResourceTypeAwsSecretsManagerSecret is a ResourceType enum value
	ResourceTypeAwsSecretsManagerSecret = "AWS::SecretsManager::Secret"

	// ResourceTypeAwsEfsFileSystem is a ResourceType enum value
	ResourceTypeAwsEfsFileSystem = "AWS::EFS::FileSystem"

	// ResourceTypeAwsEc2Snapshot is a ResourceType enum value
	ResourceTypeAwsEc2Snapshot = "AWS::EC2::Snapshot"

	// ResourceTypeAwsEcrRepository is a ResourceType enum value
	ResourceTypeAwsEcrRepository = "AWS::ECR::Repository"

	// ResourceTypeAwsRdsDbsnapshot is a ResourceType enum value
	ResourceTypeAwsRdsDbsnapshot = "AWS::RDS::DBSnapshot"

	// ResourceTypeAwsRdsDbclusterSnapshot is a ResourceType enum value
	ResourceTypeAwsRdsDbclusterSnapshot = "AWS::RDS::DBClusterSnapshot"

	// ResourceTypeAwsSnsTopic is a ResourceType enum value
	ResourceTypeAwsSnsTopic = "AWS::SNS::Topic"

	// ResourceTypeAwsS3expressDirectoryBucket is a ResourceType enum value
	ResourceTypeAwsS3expressDirectoryBucket = "AWS::S3Express::DirectoryBucket"
)
View Source
const (
	// TypeAccount is a Type enum value
	TypeAccount = "ACCOUNT"

	// TypeOrganization is a Type enum value
	TypeOrganization = "ORGANIZATION"

	// TypeAccountUnusedAccess is a Type enum value
	TypeAccountUnusedAccess = "ACCOUNT_UNUSED_ACCESS"

	// TypeOrganizationUnusedAccess is a Type enum value
	TypeOrganizationUnusedAccess = "ORGANIZATION_UNUSED_ACCESS"
)
View Source
const (
	// ValidatePolicyFindingTypeError is a ValidatePolicyFindingType enum value
	ValidatePolicyFindingTypeError = "ERROR"

	// ValidatePolicyFindingTypeSecurityWarning is a ValidatePolicyFindingType enum value
	ValidatePolicyFindingTypeSecurityWarning = "SECURITY_WARNING"

	// ValidatePolicyFindingTypeSuggestion is a ValidatePolicyFindingType enum value
	ValidatePolicyFindingTypeSuggestion = "SUGGESTION"

	// ValidatePolicyFindingTypeWarning is a ValidatePolicyFindingType enum value
	ValidatePolicyFindingTypeWarning = "WARNING"
)
View Source
const (
	// ValidatePolicyResourceTypeAwsS3Bucket is a ValidatePolicyResourceType enum value
	ValidatePolicyResourceTypeAwsS3Bucket = "AWS::S3::Bucket"

	// ValidatePolicyResourceTypeAwsS3AccessPoint is a ValidatePolicyResourceType enum value
	ValidatePolicyResourceTypeAwsS3AccessPoint = "AWS::S3::AccessPoint"

	// ValidatePolicyResourceTypeAwsS3MultiRegionAccessPoint is a ValidatePolicyResourceType enum value
	ValidatePolicyResourceTypeAwsS3MultiRegionAccessPoint = "AWS::S3::MultiRegionAccessPoint"

	// ValidatePolicyResourceTypeAwsS3objectLambdaAccessPoint is a ValidatePolicyResourceType enum value
	ValidatePolicyResourceTypeAwsS3objectLambdaAccessPoint = "AWS::S3ObjectLambda::AccessPoint"

	// ValidatePolicyResourceTypeAwsIamAssumeRolePolicyDocument is a ValidatePolicyResourceType enum value
	ValidatePolicyResourceTypeAwsIamAssumeRolePolicyDocument = "AWS::IAM::AssumeRolePolicyDocument"
)
View Source
const (
	// ValidationExceptionReasonUnknownOperation is a ValidationExceptionReason enum value
	ValidationExceptionReasonUnknownOperation = "unknownOperation"

	// ValidationExceptionReasonCannotParse is a ValidationExceptionReason enum value
	ValidationExceptionReasonCannotParse = "cannotParse"

	// ValidationExceptionReasonFieldValidationFailed is a ValidationExceptionReason enum value
	ValidationExceptionReasonFieldValidationFailed = "fieldValidationFailed"

	// ValidationExceptionReasonOther is a ValidationExceptionReason enum value
	ValidationExceptionReasonOther = "other"
)
View Source
const (

	// ErrCodeAccessDeniedException for service response error code
	// "AccessDeniedException".
	//
	// You do not have sufficient access to perform this action.
	ErrCodeAccessDeniedException = "AccessDeniedException"

	// ErrCodeConflictException for service response error code
	// "ConflictException".
	//
	// A conflict exception error.
	ErrCodeConflictException = "ConflictException"

	// ErrCodeInternalServerException for service response error code
	// "InternalServerException".
	//
	// Internal server error.
	ErrCodeInternalServerException = "InternalServerException"

	// ErrCodeInvalidParameterException for service response error code
	// "InvalidParameterException".
	//
	// The specified parameter is invalid.
	ErrCodeInvalidParameterException = "InvalidParameterException"

	// ErrCodeResourceNotFoundException for service response error code
	// "ResourceNotFoundException".
	//
	// The specified resource could not be found.
	ErrCodeResourceNotFoundException = "ResourceNotFoundException"

	// ErrCodeServiceQuotaExceededException for service response error code
	// "ServiceQuotaExceededException".
	//
	// Service quote met error.
	ErrCodeServiceQuotaExceededException = "ServiceQuotaExceededException"

	// ErrCodeThrottlingException for service response error code
	// "ThrottlingException".
	//
	// Throttling limit exceeded error.
	ErrCodeThrottlingException = "ThrottlingException"

	// ErrCodeUnprocessableEntityException for service response error code
	// "UnprocessableEntityException".
	//
	// The specified entity could not be processed.
	ErrCodeUnprocessableEntityException = "UnprocessableEntityException"

	// ErrCodeValidationException for service response error code
	// "ValidationException".
	//
	// Validation exception error.
	ErrCodeValidationException = "ValidationException"
)
View Source
const (
	ServiceName = "AccessAnalyzer"  // Name of service.
	EndpointsID = "access-analyzer" // ID to lookup a service endpoint with.
	ServiceID   = "AccessAnalyzer"  // ServiceID is a unique identifier of a specific service.
)

Service information constants

Variables

This section is empty.

Functions

func AccessCheckPolicyType_Values

func AccessCheckPolicyType_Values() []string

AccessCheckPolicyType_Values returns all elements of the AccessCheckPolicyType enum

func AccessPreviewStatusReasonCode_Values

func AccessPreviewStatusReasonCode_Values() []string

AccessPreviewStatusReasonCode_Values returns all elements of the AccessPreviewStatusReasonCode enum

func AccessPreviewStatus_Values

func AccessPreviewStatus_Values() []string

AccessPreviewStatus_Values returns all elements of the AccessPreviewStatus enum

func AclPermission_Values

func AclPermission_Values() []string

AclPermission_Values returns all elements of the AclPermission enum

func AnalyzerStatus_Values

func AnalyzerStatus_Values() []string

AnalyzerStatus_Values returns all elements of the AnalyzerStatus enum

func CheckAccessNotGrantedResult_Values

func CheckAccessNotGrantedResult_Values() []string

CheckAccessNotGrantedResult_Values returns all elements of the CheckAccessNotGrantedResult enum

func CheckNoNewAccessResult_Values

func CheckNoNewAccessResult_Values() []string

CheckNoNewAccessResult_Values returns all elements of the CheckNoNewAccessResult enum

func FindingChangeType_Values

func FindingChangeType_Values() []string

FindingChangeType_Values returns all elements of the FindingChangeType enum

func FindingSourceType_Values

func FindingSourceType_Values() []string

FindingSourceType_Values returns all elements of the FindingSourceType enum

func FindingStatusUpdate_Values

func FindingStatusUpdate_Values() []string

FindingStatusUpdate_Values returns all elements of the FindingStatusUpdate enum

func FindingStatus_Values

func FindingStatus_Values() []string

FindingStatus_Values returns all elements of the FindingStatus enum

func FindingType_Values

func FindingType_Values() []string

FindingType_Values returns all elements of the FindingType enum

func JobErrorCode_Values

func JobErrorCode_Values() []string

JobErrorCode_Values returns all elements of the JobErrorCode enum

func JobStatus_Values

func JobStatus_Values() []string

JobStatus_Values returns all elements of the JobStatus enum

func KmsGrantOperation_Values

func KmsGrantOperation_Values() []string

KmsGrantOperation_Values returns all elements of the KmsGrantOperation enum

func Locale_Values

func Locale_Values() []string

Locale_Values returns all elements of the Locale enum

func OrderBy_Values

func OrderBy_Values() []string

OrderBy_Values returns all elements of the OrderBy enum

func PolicyType_Values

func PolicyType_Values() []string

PolicyType_Values returns all elements of the PolicyType enum

func ReasonCode_Values

func ReasonCode_Values() []string

ReasonCode_Values returns all elements of the ReasonCode enum

func ResourceType_Values

func ResourceType_Values() []string

ResourceType_Values returns all elements of the ResourceType enum

func Type_Values

func Type_Values() []string

Type_Values returns all elements of the Type enum

func ValidatePolicyFindingType_Values

func ValidatePolicyFindingType_Values() []string

ValidatePolicyFindingType_Values returns all elements of the ValidatePolicyFindingType enum

func ValidatePolicyResourceType_Values

func ValidatePolicyResourceType_Values() []string

ValidatePolicyResourceType_Values returns all elements of the ValidatePolicyResourceType enum

func ValidationExceptionReason_Values

func ValidationExceptionReason_Values() []string

ValidationExceptionReason_Values returns all elements of the ValidationExceptionReason enum

Types

type Access

type Access struct {

	// A list of actions for the access permissions.
	//
	// Actions is a required field
	Actions []*string `locationName:"actions" type:"list" required:"true"`
	// contains filtered or unexported fields
}

Contains information about actions that define permissions to check against a policy.

func (Access) GoString

func (s Access) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Access) SetActions

func (s *Access) SetActions(v []*string) *Access

SetActions sets the Actions field's value.

func (Access) String

func (s Access) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Access) Validate

func (s *Access) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type AccessAnalyzer

type AccessAnalyzer struct {
	*client.Client
}

AccessAnalyzer provides the API operation methods for making requests to Access Analyzer. See this package's package overview docs for details on the service.

AccessAnalyzer methods are safe to use concurrently. It is not safe to modify mutate any of the struct's properties though.

func New

func New(p client.ConfigProvider, cfgs ...*aws.Config) *AccessAnalyzer

New creates a new instance of the AccessAnalyzer client with a session. If additional configuration is needed for the client instance use the optional aws.Config parameter to add your extra config.

Example:

mySession := session.Must(session.NewSession())

// Create a AccessAnalyzer client from just a session.
svc := accessanalyzer.New(mySession)

// Create a AccessAnalyzer client with additional configuration
svc := accessanalyzer.New(mySession, aws.NewConfig().WithRegion("us-west-2"))

func (*AccessAnalyzer) ApplyArchiveRule

func (c *AccessAnalyzer) ApplyArchiveRule(input *ApplyArchiveRuleInput) (*ApplyArchiveRuleOutput, error)

ApplyArchiveRule API operation for Access Analyzer.

Retroactively applies the archive rule to existing findings that meet the archive rule criteria.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ApplyArchiveRule for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ApplyArchiveRule

func (*AccessAnalyzer) ApplyArchiveRuleRequest

func (c *AccessAnalyzer) ApplyArchiveRuleRequest(input *ApplyArchiveRuleInput) (req *request.Request, output *ApplyArchiveRuleOutput)

ApplyArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the ApplyArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ApplyArchiveRule for more information on using the ApplyArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ApplyArchiveRuleRequest method.
req, resp := client.ApplyArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ApplyArchiveRule

func (*AccessAnalyzer) ApplyArchiveRuleWithContext

func (c *AccessAnalyzer) ApplyArchiveRuleWithContext(ctx aws.Context, input *ApplyArchiveRuleInput, opts ...request.Option) (*ApplyArchiveRuleOutput, error)

ApplyArchiveRuleWithContext is the same as ApplyArchiveRule with the addition of the ability to pass a context and additional request options.

See ApplyArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CancelPolicyGeneration

func (c *AccessAnalyzer) CancelPolicyGeneration(input *CancelPolicyGenerationInput) (*CancelPolicyGenerationOutput, error)

CancelPolicyGeneration API operation for Access Analyzer.

Cancels the requested policy generation.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CancelPolicyGeneration for usage and error information.

Returned Error Types:

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CancelPolicyGeneration

func (*AccessAnalyzer) CancelPolicyGenerationRequest

func (c *AccessAnalyzer) CancelPolicyGenerationRequest(input *CancelPolicyGenerationInput) (req *request.Request, output *CancelPolicyGenerationOutput)

CancelPolicyGenerationRequest generates a "aws/request.Request" representing the client's request for the CancelPolicyGeneration operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CancelPolicyGeneration for more information on using the CancelPolicyGeneration API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CancelPolicyGenerationRequest method.
req, resp := client.CancelPolicyGenerationRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CancelPolicyGeneration

func (*AccessAnalyzer) CancelPolicyGenerationWithContext

func (c *AccessAnalyzer) CancelPolicyGenerationWithContext(ctx aws.Context, input *CancelPolicyGenerationInput, opts ...request.Option) (*CancelPolicyGenerationOutput, error)

CancelPolicyGenerationWithContext is the same as CancelPolicyGeneration with the addition of the ability to pass a context and additional request options.

See CancelPolicyGeneration for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CheckAccessNotGranted

func (c *AccessAnalyzer) CheckAccessNotGranted(input *CheckAccessNotGrantedInput) (*CheckAccessNotGrantedOutput, error)

CheckAccessNotGranted API operation for Access Analyzer.

Checks whether the specified access isn't allowed by a policy.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CheckAccessNotGranted for usage and error information.

Returned Error Types:

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • InvalidParameterException The specified parameter is invalid.

  • UnprocessableEntityException The specified entity could not be processed.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckAccessNotGranted

func (*AccessAnalyzer) CheckAccessNotGrantedRequest

func (c *AccessAnalyzer) CheckAccessNotGrantedRequest(input *CheckAccessNotGrantedInput) (req *request.Request, output *CheckAccessNotGrantedOutput)

CheckAccessNotGrantedRequest generates a "aws/request.Request" representing the client's request for the CheckAccessNotGranted operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CheckAccessNotGranted for more information on using the CheckAccessNotGranted API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CheckAccessNotGrantedRequest method.
req, resp := client.CheckAccessNotGrantedRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckAccessNotGranted

func (*AccessAnalyzer) CheckAccessNotGrantedWithContext

func (c *AccessAnalyzer) CheckAccessNotGrantedWithContext(ctx aws.Context, input *CheckAccessNotGrantedInput, opts ...request.Option) (*CheckAccessNotGrantedOutput, error)

CheckAccessNotGrantedWithContext is the same as CheckAccessNotGranted with the addition of the ability to pass a context and additional request options.

See CheckAccessNotGranted for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CheckNoNewAccess

func (c *AccessAnalyzer) CheckNoNewAccess(input *CheckNoNewAccessInput) (*CheckNoNewAccessOutput, error)

CheckNoNewAccess API operation for Access Analyzer.

Checks whether new access is allowed for an updated policy when compared to the existing policy.

You can find examples for reference policies and learn how to set up and run a custom policy check for new access in the IAM Access Analyzer custom policy checks samples (https://github.com/aws-samples/iam-access-analyzer-custom-policy-check-samples) repository on GitHub. The reference policies in this repository are meant to be passed to the existingPolicyDocument request parameter.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CheckNoNewAccess for usage and error information.

Returned Error Types:

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • InvalidParameterException The specified parameter is invalid.

  • UnprocessableEntityException The specified entity could not be processed.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckNoNewAccess

func (*AccessAnalyzer) CheckNoNewAccessRequest

func (c *AccessAnalyzer) CheckNoNewAccessRequest(input *CheckNoNewAccessInput) (req *request.Request, output *CheckNoNewAccessOutput)

CheckNoNewAccessRequest generates a "aws/request.Request" representing the client's request for the CheckNoNewAccess operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CheckNoNewAccess for more information on using the CheckNoNewAccess API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CheckNoNewAccessRequest method.
req, resp := client.CheckNoNewAccessRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CheckNoNewAccess

func (*AccessAnalyzer) CheckNoNewAccessWithContext

func (c *AccessAnalyzer) CheckNoNewAccessWithContext(ctx aws.Context, input *CheckNoNewAccessInput, opts ...request.Option) (*CheckNoNewAccessOutput, error)

CheckNoNewAccessWithContext is the same as CheckNoNewAccess with the addition of the ability to pass a context and additional request options.

See CheckNoNewAccess for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CreateAccessPreview

func (c *AccessAnalyzer) CreateAccessPreview(input *CreateAccessPreviewInput) (*CreateAccessPreviewOutput, error)

CreateAccessPreview API operation for Access Analyzer.

Creates an access preview that allows you to preview IAM Access Analyzer findings for your resource before deploying resource permissions.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CreateAccessPreview for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ConflictException A conflict exception error.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ServiceQuotaExceededException Service quote met error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateAccessPreview

func (*AccessAnalyzer) CreateAccessPreviewRequest

func (c *AccessAnalyzer) CreateAccessPreviewRequest(input *CreateAccessPreviewInput) (req *request.Request, output *CreateAccessPreviewOutput)

CreateAccessPreviewRequest generates a "aws/request.Request" representing the client's request for the CreateAccessPreview operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CreateAccessPreview for more information on using the CreateAccessPreview API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CreateAccessPreviewRequest method.
req, resp := client.CreateAccessPreviewRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateAccessPreview

func (*AccessAnalyzer) CreateAccessPreviewWithContext

func (c *AccessAnalyzer) CreateAccessPreviewWithContext(ctx aws.Context, input *CreateAccessPreviewInput, opts ...request.Option) (*CreateAccessPreviewOutput, error)

CreateAccessPreviewWithContext is the same as CreateAccessPreview with the addition of the ability to pass a context and additional request options.

See CreateAccessPreview for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CreateAnalyzer

func (c *AccessAnalyzer) CreateAnalyzer(input *CreateAnalyzerInput) (*CreateAnalyzerOutput, error)

CreateAnalyzer API operation for Access Analyzer.

Creates an analyzer for your account.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CreateAnalyzer for usage and error information.

Returned Error Types:

  • ConflictException A conflict exception error.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ServiceQuotaExceededException Service quote met error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateAnalyzer

func (*AccessAnalyzer) CreateAnalyzerRequest

func (c *AccessAnalyzer) CreateAnalyzerRequest(input *CreateAnalyzerInput) (req *request.Request, output *CreateAnalyzerOutput)

CreateAnalyzerRequest generates a "aws/request.Request" representing the client's request for the CreateAnalyzer operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CreateAnalyzer for more information on using the CreateAnalyzer API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CreateAnalyzerRequest method.
req, resp := client.CreateAnalyzerRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateAnalyzer

func (*AccessAnalyzer) CreateAnalyzerWithContext

func (c *AccessAnalyzer) CreateAnalyzerWithContext(ctx aws.Context, input *CreateAnalyzerInput, opts ...request.Option) (*CreateAnalyzerOutput, error)

CreateAnalyzerWithContext is the same as CreateAnalyzer with the addition of the ability to pass a context and additional request options.

See CreateAnalyzer for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) CreateArchiveRule

func (c *AccessAnalyzer) CreateArchiveRule(input *CreateArchiveRuleInput) (*CreateArchiveRuleOutput, error)

CreateArchiveRule API operation for Access Analyzer.

Creates an archive rule for the specified analyzer. Archive rules automatically archive new findings that meet the criteria you define when you create the rule.

To learn about filter keys that you can use to create an archive rule, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the IAM User Guide.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation CreateArchiveRule for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ConflictException A conflict exception error.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ServiceQuotaExceededException Service quote met error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateArchiveRule

func (*AccessAnalyzer) CreateArchiveRuleRequest

func (c *AccessAnalyzer) CreateArchiveRuleRequest(input *CreateArchiveRuleInput) (req *request.Request, output *CreateArchiveRuleOutput)

CreateArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the CreateArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See CreateArchiveRule for more information on using the CreateArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the CreateArchiveRuleRequest method.
req, resp := client.CreateArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/CreateArchiveRule

func (*AccessAnalyzer) CreateArchiveRuleWithContext

func (c *AccessAnalyzer) CreateArchiveRuleWithContext(ctx aws.Context, input *CreateArchiveRuleInput, opts ...request.Option) (*CreateArchiveRuleOutput, error)

CreateArchiveRuleWithContext is the same as CreateArchiveRule with the addition of the ability to pass a context and additional request options.

See CreateArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) DeleteAnalyzer

func (c *AccessAnalyzer) DeleteAnalyzer(input *DeleteAnalyzerInput) (*DeleteAnalyzerOutput, error)

DeleteAnalyzer API operation for Access Analyzer.

Deletes the specified analyzer. When you delete an analyzer, IAM Access Analyzer is disabled for the account or organization in the current or specific Region. All findings that were generated by the analyzer are deleted. You cannot undo this action.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation DeleteAnalyzer for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/DeleteAnalyzer

func (*AccessAnalyzer) DeleteAnalyzerRequest

func (c *AccessAnalyzer) DeleteAnalyzerRequest(input *DeleteAnalyzerInput) (req *request.Request, output *DeleteAnalyzerOutput)

DeleteAnalyzerRequest generates a "aws/request.Request" representing the client's request for the DeleteAnalyzer operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See DeleteAnalyzer for more information on using the DeleteAnalyzer API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the DeleteAnalyzerRequest method.
req, resp := client.DeleteAnalyzerRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/DeleteAnalyzer

func (*AccessAnalyzer) DeleteAnalyzerWithContext

func (c *AccessAnalyzer) DeleteAnalyzerWithContext(ctx aws.Context, input *DeleteAnalyzerInput, opts ...request.Option) (*DeleteAnalyzerOutput, error)

DeleteAnalyzerWithContext is the same as DeleteAnalyzer with the addition of the ability to pass a context and additional request options.

See DeleteAnalyzer for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) DeleteArchiveRule

func (c *AccessAnalyzer) DeleteArchiveRule(input *DeleteArchiveRuleInput) (*DeleteArchiveRuleOutput, error)

DeleteArchiveRule API operation for Access Analyzer.

Deletes the specified archive rule.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation DeleteArchiveRule for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/DeleteArchiveRule

func (*AccessAnalyzer) DeleteArchiveRuleRequest

func (c *AccessAnalyzer) DeleteArchiveRuleRequest(input *DeleteArchiveRuleInput) (req *request.Request, output *DeleteArchiveRuleOutput)

DeleteArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the DeleteArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See DeleteArchiveRule for more information on using the DeleteArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the DeleteArchiveRuleRequest method.
req, resp := client.DeleteArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/DeleteArchiveRule

func (*AccessAnalyzer) DeleteArchiveRuleWithContext

func (c *AccessAnalyzer) DeleteArchiveRuleWithContext(ctx aws.Context, input *DeleteArchiveRuleInput, opts ...request.Option) (*DeleteArchiveRuleOutput, error)

DeleteArchiveRuleWithContext is the same as DeleteArchiveRule with the addition of the ability to pass a context and additional request options.

See DeleteArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetAccessPreview

func (c *AccessAnalyzer) GetAccessPreview(input *GetAccessPreviewInput) (*GetAccessPreviewOutput, error)

GetAccessPreview API operation for Access Analyzer.

Retrieves information about an access preview for the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetAccessPreview for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAccessPreview

func (*AccessAnalyzer) GetAccessPreviewRequest

func (c *AccessAnalyzer) GetAccessPreviewRequest(input *GetAccessPreviewInput) (req *request.Request, output *GetAccessPreviewOutput)

GetAccessPreviewRequest generates a "aws/request.Request" representing the client's request for the GetAccessPreview operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetAccessPreview for more information on using the GetAccessPreview API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetAccessPreviewRequest method.
req, resp := client.GetAccessPreviewRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAccessPreview

func (*AccessAnalyzer) GetAccessPreviewWithContext

func (c *AccessAnalyzer) GetAccessPreviewWithContext(ctx aws.Context, input *GetAccessPreviewInput, opts ...request.Option) (*GetAccessPreviewOutput, error)

GetAccessPreviewWithContext is the same as GetAccessPreview with the addition of the ability to pass a context and additional request options.

See GetAccessPreview for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetAnalyzedResource

func (c *AccessAnalyzer) GetAnalyzedResource(input *GetAnalyzedResourceInput) (*GetAnalyzedResourceOutput, error)

GetAnalyzedResource API operation for Access Analyzer.

Retrieves information about a resource that was analyzed.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetAnalyzedResource for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzedResource

func (*AccessAnalyzer) GetAnalyzedResourceRequest

func (c *AccessAnalyzer) GetAnalyzedResourceRequest(input *GetAnalyzedResourceInput) (req *request.Request, output *GetAnalyzedResourceOutput)

GetAnalyzedResourceRequest generates a "aws/request.Request" representing the client's request for the GetAnalyzedResource operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetAnalyzedResource for more information on using the GetAnalyzedResource API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetAnalyzedResourceRequest method.
req, resp := client.GetAnalyzedResourceRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzedResource

func (*AccessAnalyzer) GetAnalyzedResourceWithContext

func (c *AccessAnalyzer) GetAnalyzedResourceWithContext(ctx aws.Context, input *GetAnalyzedResourceInput, opts ...request.Option) (*GetAnalyzedResourceOutput, error)

GetAnalyzedResourceWithContext is the same as GetAnalyzedResource with the addition of the ability to pass a context and additional request options.

See GetAnalyzedResource for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetAnalyzer

func (c *AccessAnalyzer) GetAnalyzer(input *GetAnalyzerInput) (*GetAnalyzerOutput, error)

GetAnalyzer API operation for Access Analyzer.

Retrieves information about the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetAnalyzer for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzer

func (*AccessAnalyzer) GetAnalyzerRequest

func (c *AccessAnalyzer) GetAnalyzerRequest(input *GetAnalyzerInput) (req *request.Request, output *GetAnalyzerOutput)

GetAnalyzerRequest generates a "aws/request.Request" representing the client's request for the GetAnalyzer operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetAnalyzer for more information on using the GetAnalyzer API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetAnalyzerRequest method.
req, resp := client.GetAnalyzerRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetAnalyzer

func (*AccessAnalyzer) GetAnalyzerWithContext

func (c *AccessAnalyzer) GetAnalyzerWithContext(ctx aws.Context, input *GetAnalyzerInput, opts ...request.Option) (*GetAnalyzerOutput, error)

GetAnalyzerWithContext is the same as GetAnalyzer with the addition of the ability to pass a context and additional request options.

See GetAnalyzer for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetArchiveRule

func (c *AccessAnalyzer) GetArchiveRule(input *GetArchiveRuleInput) (*GetArchiveRuleOutput, error)

GetArchiveRule API operation for Access Analyzer.

Retrieves information about an archive rule.

To learn about filter keys that you can use to create an archive rule, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the IAM User Guide.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetArchiveRule for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetArchiveRule

func (*AccessAnalyzer) GetArchiveRuleRequest

func (c *AccessAnalyzer) GetArchiveRuleRequest(input *GetArchiveRuleInput) (req *request.Request, output *GetArchiveRuleOutput)

GetArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the GetArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetArchiveRule for more information on using the GetArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetArchiveRuleRequest method.
req, resp := client.GetArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetArchiveRule

func (*AccessAnalyzer) GetArchiveRuleWithContext

func (c *AccessAnalyzer) GetArchiveRuleWithContext(ctx aws.Context, input *GetArchiveRuleInput, opts ...request.Option) (*GetArchiveRuleOutput, error)

GetArchiveRuleWithContext is the same as GetArchiveRule with the addition of the ability to pass a context and additional request options.

See GetArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetFinding

func (c *AccessAnalyzer) GetFinding(input *GetFindingInput) (*GetFindingOutput, error)

GetFinding API operation for Access Analyzer.

Retrieves information about the specified finding.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetFinding for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFinding

func (*AccessAnalyzer) GetFindingRequest

func (c *AccessAnalyzer) GetFindingRequest(input *GetFindingInput) (req *request.Request, output *GetFindingOutput)

GetFindingRequest generates a "aws/request.Request" representing the client's request for the GetFinding operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetFinding for more information on using the GetFinding API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetFindingRequest method.
req, resp := client.GetFindingRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFinding

func (*AccessAnalyzer) GetFindingV2

func (c *AccessAnalyzer) GetFindingV2(input *GetFindingV2Input) (*GetFindingV2Output, error)

GetFindingV2 API operation for Access Analyzer.

Retrieves information about the specified finding.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetFindingV2 for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFindingV2

func (*AccessAnalyzer) GetFindingV2Pages

func (c *AccessAnalyzer) GetFindingV2Pages(input *GetFindingV2Input, fn func(*GetFindingV2Output, bool) bool) error

GetFindingV2Pages iterates over the pages of a GetFindingV2 operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See GetFindingV2 method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a GetFindingV2 operation.
pageNum := 0
err := client.GetFindingV2Pages(params,
    func(page *accessanalyzer.GetFindingV2Output, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) GetFindingV2PagesWithContext

func (c *AccessAnalyzer) GetFindingV2PagesWithContext(ctx aws.Context, input *GetFindingV2Input, fn func(*GetFindingV2Output, bool) bool, opts ...request.Option) error

GetFindingV2PagesWithContext same as GetFindingV2Pages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetFindingV2Request

func (c *AccessAnalyzer) GetFindingV2Request(input *GetFindingV2Input) (req *request.Request, output *GetFindingV2Output)

GetFindingV2Request generates a "aws/request.Request" representing the client's request for the GetFindingV2 operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetFindingV2 for more information on using the GetFindingV2 API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetFindingV2Request method.
req, resp := client.GetFindingV2Request(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetFindingV2

func (*AccessAnalyzer) GetFindingV2WithContext

func (c *AccessAnalyzer) GetFindingV2WithContext(ctx aws.Context, input *GetFindingV2Input, opts ...request.Option) (*GetFindingV2Output, error)

GetFindingV2WithContext is the same as GetFindingV2 with the addition of the ability to pass a context and additional request options.

See GetFindingV2 for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetFindingWithContext

func (c *AccessAnalyzer) GetFindingWithContext(ctx aws.Context, input *GetFindingInput, opts ...request.Option) (*GetFindingOutput, error)

GetFindingWithContext is the same as GetFinding with the addition of the ability to pass a context and additional request options.

See GetFinding for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) GetGeneratedPolicy

func (c *AccessAnalyzer) GetGeneratedPolicy(input *GetGeneratedPolicyInput) (*GetGeneratedPolicyOutput, error)

GetGeneratedPolicy API operation for Access Analyzer.

Retrieves the policy that was generated using StartPolicyGeneration.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation GetGeneratedPolicy for usage and error information.

Returned Error Types:

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetGeneratedPolicy

func (*AccessAnalyzer) GetGeneratedPolicyRequest

func (c *AccessAnalyzer) GetGeneratedPolicyRequest(input *GetGeneratedPolicyInput) (req *request.Request, output *GetGeneratedPolicyOutput)

GetGeneratedPolicyRequest generates a "aws/request.Request" representing the client's request for the GetGeneratedPolicy operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See GetGeneratedPolicy for more information on using the GetGeneratedPolicy API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the GetGeneratedPolicyRequest method.
req, resp := client.GetGeneratedPolicyRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/GetGeneratedPolicy

func (*AccessAnalyzer) GetGeneratedPolicyWithContext

func (c *AccessAnalyzer) GetGeneratedPolicyWithContext(ctx aws.Context, input *GetGeneratedPolicyInput, opts ...request.Option) (*GetGeneratedPolicyOutput, error)

GetGeneratedPolicyWithContext is the same as GetGeneratedPolicy with the addition of the ability to pass a context and additional request options.

See GetGeneratedPolicy for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAccessPreviewFindings

ListAccessPreviewFindings API operation for Access Analyzer.

Retrieves a list of access preview findings generated by the specified access preview.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListAccessPreviewFindings for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ConflictException A conflict exception error.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAccessPreviewFindings

func (*AccessAnalyzer) ListAccessPreviewFindingsPages

func (c *AccessAnalyzer) ListAccessPreviewFindingsPages(input *ListAccessPreviewFindingsInput, fn func(*ListAccessPreviewFindingsOutput, bool) bool) error

ListAccessPreviewFindingsPages iterates over the pages of a ListAccessPreviewFindings operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListAccessPreviewFindings method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListAccessPreviewFindings operation.
pageNum := 0
err := client.ListAccessPreviewFindingsPages(params,
    func(page *accessanalyzer.ListAccessPreviewFindingsOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListAccessPreviewFindingsPagesWithContext

func (c *AccessAnalyzer) ListAccessPreviewFindingsPagesWithContext(ctx aws.Context, input *ListAccessPreviewFindingsInput, fn func(*ListAccessPreviewFindingsOutput, bool) bool, opts ...request.Option) error

ListAccessPreviewFindingsPagesWithContext same as ListAccessPreviewFindingsPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAccessPreviewFindingsRequest

func (c *AccessAnalyzer) ListAccessPreviewFindingsRequest(input *ListAccessPreviewFindingsInput) (req *request.Request, output *ListAccessPreviewFindingsOutput)

ListAccessPreviewFindingsRequest generates a "aws/request.Request" representing the client's request for the ListAccessPreviewFindings operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListAccessPreviewFindings for more information on using the ListAccessPreviewFindings API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListAccessPreviewFindingsRequest method.
req, resp := client.ListAccessPreviewFindingsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAccessPreviewFindings

func (*AccessAnalyzer) ListAccessPreviewFindingsWithContext

func (c *AccessAnalyzer) ListAccessPreviewFindingsWithContext(ctx aws.Context, input *ListAccessPreviewFindingsInput, opts ...request.Option) (*ListAccessPreviewFindingsOutput, error)

ListAccessPreviewFindingsWithContext is the same as ListAccessPreviewFindings with the addition of the ability to pass a context and additional request options.

See ListAccessPreviewFindings for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAccessPreviews

func (c *AccessAnalyzer) ListAccessPreviews(input *ListAccessPreviewsInput) (*ListAccessPreviewsOutput, error)

ListAccessPreviews API operation for Access Analyzer.

Retrieves a list of access previews for the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListAccessPreviews for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAccessPreviews

func (*AccessAnalyzer) ListAccessPreviewsPages

func (c *AccessAnalyzer) ListAccessPreviewsPages(input *ListAccessPreviewsInput, fn func(*ListAccessPreviewsOutput, bool) bool) error

ListAccessPreviewsPages iterates over the pages of a ListAccessPreviews operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListAccessPreviews method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListAccessPreviews operation.
pageNum := 0
err := client.ListAccessPreviewsPages(params,
    func(page *accessanalyzer.ListAccessPreviewsOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListAccessPreviewsPagesWithContext

func (c *AccessAnalyzer) ListAccessPreviewsPagesWithContext(ctx aws.Context, input *ListAccessPreviewsInput, fn func(*ListAccessPreviewsOutput, bool) bool, opts ...request.Option) error

ListAccessPreviewsPagesWithContext same as ListAccessPreviewsPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAccessPreviewsRequest

func (c *AccessAnalyzer) ListAccessPreviewsRequest(input *ListAccessPreviewsInput) (req *request.Request, output *ListAccessPreviewsOutput)

ListAccessPreviewsRequest generates a "aws/request.Request" representing the client's request for the ListAccessPreviews operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListAccessPreviews for more information on using the ListAccessPreviews API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListAccessPreviewsRequest method.
req, resp := client.ListAccessPreviewsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAccessPreviews

func (*AccessAnalyzer) ListAccessPreviewsWithContext

func (c *AccessAnalyzer) ListAccessPreviewsWithContext(ctx aws.Context, input *ListAccessPreviewsInput, opts ...request.Option) (*ListAccessPreviewsOutput, error)

ListAccessPreviewsWithContext is the same as ListAccessPreviews with the addition of the ability to pass a context and additional request options.

See ListAccessPreviews for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAnalyzedResources

func (c *AccessAnalyzer) ListAnalyzedResources(input *ListAnalyzedResourcesInput) (*ListAnalyzedResourcesOutput, error)

ListAnalyzedResources API operation for Access Analyzer.

Retrieves a list of resources of the specified type that have been analyzed by the specified analyzer..

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListAnalyzedResources for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzedResources

func (*AccessAnalyzer) ListAnalyzedResourcesPages

func (c *AccessAnalyzer) ListAnalyzedResourcesPages(input *ListAnalyzedResourcesInput, fn func(*ListAnalyzedResourcesOutput, bool) bool) error

ListAnalyzedResourcesPages iterates over the pages of a ListAnalyzedResources operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListAnalyzedResources method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListAnalyzedResources operation.
pageNum := 0
err := client.ListAnalyzedResourcesPages(params,
    func(page *accessanalyzer.ListAnalyzedResourcesOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListAnalyzedResourcesPagesWithContext

func (c *AccessAnalyzer) ListAnalyzedResourcesPagesWithContext(ctx aws.Context, input *ListAnalyzedResourcesInput, fn func(*ListAnalyzedResourcesOutput, bool) bool, opts ...request.Option) error

ListAnalyzedResourcesPagesWithContext same as ListAnalyzedResourcesPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAnalyzedResourcesRequest

func (c *AccessAnalyzer) ListAnalyzedResourcesRequest(input *ListAnalyzedResourcesInput) (req *request.Request, output *ListAnalyzedResourcesOutput)

ListAnalyzedResourcesRequest generates a "aws/request.Request" representing the client's request for the ListAnalyzedResources operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListAnalyzedResources for more information on using the ListAnalyzedResources API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListAnalyzedResourcesRequest method.
req, resp := client.ListAnalyzedResourcesRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzedResources

func (*AccessAnalyzer) ListAnalyzedResourcesWithContext

func (c *AccessAnalyzer) ListAnalyzedResourcesWithContext(ctx aws.Context, input *ListAnalyzedResourcesInput, opts ...request.Option) (*ListAnalyzedResourcesOutput, error)

ListAnalyzedResourcesWithContext is the same as ListAnalyzedResources with the addition of the ability to pass a context and additional request options.

See ListAnalyzedResources for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAnalyzers

func (c *AccessAnalyzer) ListAnalyzers(input *ListAnalyzersInput) (*ListAnalyzersOutput, error)

ListAnalyzers API operation for Access Analyzer.

Retrieves a list of analyzers.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListAnalyzers for usage and error information.

Returned Error Types:

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzers

func (*AccessAnalyzer) ListAnalyzersPages

func (c *AccessAnalyzer) ListAnalyzersPages(input *ListAnalyzersInput, fn func(*ListAnalyzersOutput, bool) bool) error

ListAnalyzersPages iterates over the pages of a ListAnalyzers operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListAnalyzers method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListAnalyzers operation.
pageNum := 0
err := client.ListAnalyzersPages(params,
    func(page *accessanalyzer.ListAnalyzersOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListAnalyzersPagesWithContext

func (c *AccessAnalyzer) ListAnalyzersPagesWithContext(ctx aws.Context, input *ListAnalyzersInput, fn func(*ListAnalyzersOutput, bool) bool, opts ...request.Option) error

ListAnalyzersPagesWithContext same as ListAnalyzersPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListAnalyzersRequest

func (c *AccessAnalyzer) ListAnalyzersRequest(input *ListAnalyzersInput) (req *request.Request, output *ListAnalyzersOutput)

ListAnalyzersRequest generates a "aws/request.Request" representing the client's request for the ListAnalyzers operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListAnalyzers for more information on using the ListAnalyzers API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListAnalyzersRequest method.
req, resp := client.ListAnalyzersRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListAnalyzers

func (*AccessAnalyzer) ListAnalyzersWithContext

func (c *AccessAnalyzer) ListAnalyzersWithContext(ctx aws.Context, input *ListAnalyzersInput, opts ...request.Option) (*ListAnalyzersOutput, error)

ListAnalyzersWithContext is the same as ListAnalyzers with the addition of the ability to pass a context and additional request options.

See ListAnalyzers for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListArchiveRules

func (c *AccessAnalyzer) ListArchiveRules(input *ListArchiveRulesInput) (*ListArchiveRulesOutput, error)

ListArchiveRules API operation for Access Analyzer.

Retrieves a list of archive rules created for the specified analyzer.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListArchiveRules for usage and error information.

Returned Error Types:

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListArchiveRules

func (*AccessAnalyzer) ListArchiveRulesPages

func (c *AccessAnalyzer) ListArchiveRulesPages(input *ListArchiveRulesInput, fn func(*ListArchiveRulesOutput, bool) bool) error

ListArchiveRulesPages iterates over the pages of a ListArchiveRules operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListArchiveRules method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListArchiveRules operation.
pageNum := 0
err := client.ListArchiveRulesPages(params,
    func(page *accessanalyzer.ListArchiveRulesOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListArchiveRulesPagesWithContext

func (c *AccessAnalyzer) ListArchiveRulesPagesWithContext(ctx aws.Context, input *ListArchiveRulesInput, fn func(*ListArchiveRulesOutput, bool) bool, opts ...request.Option) error

ListArchiveRulesPagesWithContext same as ListArchiveRulesPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListArchiveRulesRequest

func (c *AccessAnalyzer) ListArchiveRulesRequest(input *ListArchiveRulesInput) (req *request.Request, output *ListArchiveRulesOutput)

ListArchiveRulesRequest generates a "aws/request.Request" representing the client's request for the ListArchiveRules operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListArchiveRules for more information on using the ListArchiveRules API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListArchiveRulesRequest method.
req, resp := client.ListArchiveRulesRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListArchiveRules

func (*AccessAnalyzer) ListArchiveRulesWithContext

func (c *AccessAnalyzer) ListArchiveRulesWithContext(ctx aws.Context, input *ListArchiveRulesInput, opts ...request.Option) (*ListArchiveRulesOutput, error)

ListArchiveRulesWithContext is the same as ListArchiveRules with the addition of the ability to pass a context and additional request options.

See ListArchiveRules for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListFindings

func (c *AccessAnalyzer) ListFindings(input *ListFindingsInput) (*ListFindingsOutput, error)

ListFindings API operation for Access Analyzer.

Retrieves a list of findings generated by the specified analyzer.

To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the IAM User Guide.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListFindings for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListFindings

func (*AccessAnalyzer) ListFindingsPages

func (c *AccessAnalyzer) ListFindingsPages(input *ListFindingsInput, fn func(*ListFindingsOutput, bool) bool) error

ListFindingsPages iterates over the pages of a ListFindings operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListFindings method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListFindings operation.
pageNum := 0
err := client.ListFindingsPages(params,
    func(page *accessanalyzer.ListFindingsOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListFindingsPagesWithContext

func (c *AccessAnalyzer) ListFindingsPagesWithContext(ctx aws.Context, input *ListFindingsInput, fn func(*ListFindingsOutput, bool) bool, opts ...request.Option) error

ListFindingsPagesWithContext same as ListFindingsPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListFindingsRequest

func (c *AccessAnalyzer) ListFindingsRequest(input *ListFindingsInput) (req *request.Request, output *ListFindingsOutput)

ListFindingsRequest generates a "aws/request.Request" representing the client's request for the ListFindings operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListFindings for more information on using the ListFindings API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListFindingsRequest method.
req, resp := client.ListFindingsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListFindings

func (*AccessAnalyzer) ListFindingsV2

func (c *AccessAnalyzer) ListFindingsV2(input *ListFindingsV2Input) (*ListFindingsV2Output, error)

ListFindingsV2 API operation for Access Analyzer.

Retrieves a list of findings generated by the specified analyzer.

To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the IAM User Guide.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListFindingsV2 for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListFindingsV2

func (*AccessAnalyzer) ListFindingsV2Pages

func (c *AccessAnalyzer) ListFindingsV2Pages(input *ListFindingsV2Input, fn func(*ListFindingsV2Output, bool) bool) error

ListFindingsV2Pages iterates over the pages of a ListFindingsV2 operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListFindingsV2 method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListFindingsV2 operation.
pageNum := 0
err := client.ListFindingsV2Pages(params,
    func(page *accessanalyzer.ListFindingsV2Output, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListFindingsV2PagesWithContext

func (c *AccessAnalyzer) ListFindingsV2PagesWithContext(ctx aws.Context, input *ListFindingsV2Input, fn func(*ListFindingsV2Output, bool) bool, opts ...request.Option) error

ListFindingsV2PagesWithContext same as ListFindingsV2Pages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListFindingsV2Request

func (c *AccessAnalyzer) ListFindingsV2Request(input *ListFindingsV2Input) (req *request.Request, output *ListFindingsV2Output)

ListFindingsV2Request generates a "aws/request.Request" representing the client's request for the ListFindingsV2 operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListFindingsV2 for more information on using the ListFindingsV2 API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListFindingsV2Request method.
req, resp := client.ListFindingsV2Request(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListFindingsV2

func (*AccessAnalyzer) ListFindingsV2WithContext

func (c *AccessAnalyzer) ListFindingsV2WithContext(ctx aws.Context, input *ListFindingsV2Input, opts ...request.Option) (*ListFindingsV2Output, error)

ListFindingsV2WithContext is the same as ListFindingsV2 with the addition of the ability to pass a context and additional request options.

See ListFindingsV2 for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListFindingsWithContext

func (c *AccessAnalyzer) ListFindingsWithContext(ctx aws.Context, input *ListFindingsInput, opts ...request.Option) (*ListFindingsOutput, error)

ListFindingsWithContext is the same as ListFindings with the addition of the ability to pass a context and additional request options.

See ListFindings for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListPolicyGenerations

func (c *AccessAnalyzer) ListPolicyGenerations(input *ListPolicyGenerationsInput) (*ListPolicyGenerationsOutput, error)

ListPolicyGenerations API operation for Access Analyzer.

Lists all of the policy generations requested in the last seven days.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListPolicyGenerations for usage and error information.

Returned Error Types:

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListPolicyGenerations

func (*AccessAnalyzer) ListPolicyGenerationsPages

func (c *AccessAnalyzer) ListPolicyGenerationsPages(input *ListPolicyGenerationsInput, fn func(*ListPolicyGenerationsOutput, bool) bool) error

ListPolicyGenerationsPages iterates over the pages of a ListPolicyGenerations operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ListPolicyGenerations method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ListPolicyGenerations operation.
pageNum := 0
err := client.ListPolicyGenerationsPages(params,
    func(page *accessanalyzer.ListPolicyGenerationsOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ListPolicyGenerationsPagesWithContext

func (c *AccessAnalyzer) ListPolicyGenerationsPagesWithContext(ctx aws.Context, input *ListPolicyGenerationsInput, fn func(*ListPolicyGenerationsOutput, bool) bool, opts ...request.Option) error

ListPolicyGenerationsPagesWithContext same as ListPolicyGenerationsPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListPolicyGenerationsRequest

func (c *AccessAnalyzer) ListPolicyGenerationsRequest(input *ListPolicyGenerationsInput) (req *request.Request, output *ListPolicyGenerationsOutput)

ListPolicyGenerationsRequest generates a "aws/request.Request" representing the client's request for the ListPolicyGenerations operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListPolicyGenerations for more information on using the ListPolicyGenerations API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListPolicyGenerationsRequest method.
req, resp := client.ListPolicyGenerationsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListPolicyGenerations

func (*AccessAnalyzer) ListPolicyGenerationsWithContext

func (c *AccessAnalyzer) ListPolicyGenerationsWithContext(ctx aws.Context, input *ListPolicyGenerationsInput, opts ...request.Option) (*ListPolicyGenerationsOutput, error)

ListPolicyGenerationsWithContext is the same as ListPolicyGenerations with the addition of the ability to pass a context and additional request options.

See ListPolicyGenerations for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ListTagsForResource

func (c *AccessAnalyzer) ListTagsForResource(input *ListTagsForResourceInput) (*ListTagsForResourceOutput, error)

ListTagsForResource API operation for Access Analyzer.

Retrieves a list of tags applied to the specified resource.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ListTagsForResource for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListTagsForResource

func (*AccessAnalyzer) ListTagsForResourceRequest

func (c *AccessAnalyzer) ListTagsForResourceRequest(input *ListTagsForResourceInput) (req *request.Request, output *ListTagsForResourceOutput)

ListTagsForResourceRequest generates a "aws/request.Request" representing the client's request for the ListTagsForResource operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ListTagsForResource for more information on using the ListTagsForResource API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ListTagsForResourceRequest method.
req, resp := client.ListTagsForResourceRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ListTagsForResource

func (*AccessAnalyzer) ListTagsForResourceWithContext

func (c *AccessAnalyzer) ListTagsForResourceWithContext(ctx aws.Context, input *ListTagsForResourceInput, opts ...request.Option) (*ListTagsForResourceOutput, error)

ListTagsForResourceWithContext is the same as ListTagsForResource with the addition of the ability to pass a context and additional request options.

See ListTagsForResource for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) StartPolicyGeneration

func (c *AccessAnalyzer) StartPolicyGeneration(input *StartPolicyGenerationInput) (*StartPolicyGenerationOutput, error)

StartPolicyGeneration API operation for Access Analyzer.

Starts the policy generation request.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation StartPolicyGeneration for usage and error information.

Returned Error Types:

  • ConflictException A conflict exception error.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ServiceQuotaExceededException Service quote met error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StartPolicyGeneration

func (*AccessAnalyzer) StartPolicyGenerationRequest

func (c *AccessAnalyzer) StartPolicyGenerationRequest(input *StartPolicyGenerationInput) (req *request.Request, output *StartPolicyGenerationOutput)

StartPolicyGenerationRequest generates a "aws/request.Request" representing the client's request for the StartPolicyGeneration operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See StartPolicyGeneration for more information on using the StartPolicyGeneration API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the StartPolicyGenerationRequest method.
req, resp := client.StartPolicyGenerationRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StartPolicyGeneration

func (*AccessAnalyzer) StartPolicyGenerationWithContext

func (c *AccessAnalyzer) StartPolicyGenerationWithContext(ctx aws.Context, input *StartPolicyGenerationInput, opts ...request.Option) (*StartPolicyGenerationOutput, error)

StartPolicyGenerationWithContext is the same as StartPolicyGeneration with the addition of the ability to pass a context and additional request options.

See StartPolicyGeneration for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) StartResourceScan

func (c *AccessAnalyzer) StartResourceScan(input *StartResourceScanInput) (*StartResourceScanOutput, error)

StartResourceScan API operation for Access Analyzer.

Immediately starts a scan of the policies applied to the specified resource.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation StartResourceScan for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StartResourceScan

func (*AccessAnalyzer) StartResourceScanRequest

func (c *AccessAnalyzer) StartResourceScanRequest(input *StartResourceScanInput) (req *request.Request, output *StartResourceScanOutput)

StartResourceScanRequest generates a "aws/request.Request" representing the client's request for the StartResourceScan operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See StartResourceScan for more information on using the StartResourceScan API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the StartResourceScanRequest method.
req, resp := client.StartResourceScanRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/StartResourceScan

func (*AccessAnalyzer) StartResourceScanWithContext

func (c *AccessAnalyzer) StartResourceScanWithContext(ctx aws.Context, input *StartResourceScanInput, opts ...request.Option) (*StartResourceScanOutput, error)

StartResourceScanWithContext is the same as StartResourceScan with the addition of the ability to pass a context and additional request options.

See StartResourceScan for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) TagResource

func (c *AccessAnalyzer) TagResource(input *TagResourceInput) (*TagResourceOutput, error)

TagResource API operation for Access Analyzer.

Adds a tag to the specified resource.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation TagResource for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/TagResource

func (*AccessAnalyzer) TagResourceRequest

func (c *AccessAnalyzer) TagResourceRequest(input *TagResourceInput) (req *request.Request, output *TagResourceOutput)

TagResourceRequest generates a "aws/request.Request" representing the client's request for the TagResource operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See TagResource for more information on using the TagResource API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the TagResourceRequest method.
req, resp := client.TagResourceRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/TagResource

func (*AccessAnalyzer) TagResourceWithContext

func (c *AccessAnalyzer) TagResourceWithContext(ctx aws.Context, input *TagResourceInput, opts ...request.Option) (*TagResourceOutput, error)

TagResourceWithContext is the same as TagResource with the addition of the ability to pass a context and additional request options.

See TagResource for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) UntagResource

func (c *AccessAnalyzer) UntagResource(input *UntagResourceInput) (*UntagResourceOutput, error)

UntagResource API operation for Access Analyzer.

Removes a tag from the specified resource.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation UntagResource for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UntagResource

func (*AccessAnalyzer) UntagResourceRequest

func (c *AccessAnalyzer) UntagResourceRequest(input *UntagResourceInput) (req *request.Request, output *UntagResourceOutput)

UntagResourceRequest generates a "aws/request.Request" representing the client's request for the UntagResource operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See UntagResource for more information on using the UntagResource API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the UntagResourceRequest method.
req, resp := client.UntagResourceRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UntagResource

func (*AccessAnalyzer) UntagResourceWithContext

func (c *AccessAnalyzer) UntagResourceWithContext(ctx aws.Context, input *UntagResourceInput, opts ...request.Option) (*UntagResourceOutput, error)

UntagResourceWithContext is the same as UntagResource with the addition of the ability to pass a context and additional request options.

See UntagResource for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) UpdateArchiveRule

func (c *AccessAnalyzer) UpdateArchiveRule(input *UpdateArchiveRuleInput) (*UpdateArchiveRuleOutput, error)

UpdateArchiveRule API operation for Access Analyzer.

Updates the criteria and values for the specified archive rule.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation UpdateArchiveRule for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UpdateArchiveRule

func (*AccessAnalyzer) UpdateArchiveRuleRequest

func (c *AccessAnalyzer) UpdateArchiveRuleRequest(input *UpdateArchiveRuleInput) (req *request.Request, output *UpdateArchiveRuleOutput)

UpdateArchiveRuleRequest generates a "aws/request.Request" representing the client's request for the UpdateArchiveRule operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See UpdateArchiveRule for more information on using the UpdateArchiveRule API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the UpdateArchiveRuleRequest method.
req, resp := client.UpdateArchiveRuleRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UpdateArchiveRule

func (*AccessAnalyzer) UpdateArchiveRuleWithContext

func (c *AccessAnalyzer) UpdateArchiveRuleWithContext(ctx aws.Context, input *UpdateArchiveRuleInput, opts ...request.Option) (*UpdateArchiveRuleOutput, error)

UpdateArchiveRuleWithContext is the same as UpdateArchiveRule with the addition of the ability to pass a context and additional request options.

See UpdateArchiveRule for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) UpdateFindings

func (c *AccessAnalyzer) UpdateFindings(input *UpdateFindingsInput) (*UpdateFindingsOutput, error)

UpdateFindings API operation for Access Analyzer.

Updates the status for the specified findings.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation UpdateFindings for usage and error information.

Returned Error Types:

  • ResourceNotFoundException The specified resource could not be found.

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UpdateFindings

func (*AccessAnalyzer) UpdateFindingsRequest

func (c *AccessAnalyzer) UpdateFindingsRequest(input *UpdateFindingsInput) (req *request.Request, output *UpdateFindingsOutput)

UpdateFindingsRequest generates a "aws/request.Request" representing the client's request for the UpdateFindings operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See UpdateFindings for more information on using the UpdateFindings API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the UpdateFindingsRequest method.
req, resp := client.UpdateFindingsRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/UpdateFindings

func (*AccessAnalyzer) UpdateFindingsWithContext

func (c *AccessAnalyzer) UpdateFindingsWithContext(ctx aws.Context, input *UpdateFindingsInput, opts ...request.Option) (*UpdateFindingsOutput, error)

UpdateFindingsWithContext is the same as UpdateFindings with the addition of the ability to pass a context and additional request options.

See UpdateFindings for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ValidatePolicy

func (c *AccessAnalyzer) ValidatePolicy(input *ValidatePolicyInput) (*ValidatePolicyOutput, error)

ValidatePolicy API operation for Access Analyzer.

Requests the validation of a policy and returns a list of findings. The findings help you identify issues and provide actionable recommendations to resolve the issue and enable you to author functional policies that meet security best practices.

Returns awserr.Error for service API and SDK errors. Use runtime type assertions with awserr.Error's Code and Message methods to get detailed information about the error.

See the AWS API reference guide for Access Analyzer's API operation ValidatePolicy for usage and error information.

Returned Error Types:

  • ValidationException Validation exception error.

  • InternalServerException Internal server error.

  • ThrottlingException Throttling limit exceeded error.

  • AccessDeniedException You do not have sufficient access to perform this action.

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ValidatePolicy

func (*AccessAnalyzer) ValidatePolicyPages

func (c *AccessAnalyzer) ValidatePolicyPages(input *ValidatePolicyInput, fn func(*ValidatePolicyOutput, bool) bool) error

ValidatePolicyPages iterates over the pages of a ValidatePolicy operation, calling the "fn" function with the response data for each page. To stop iterating, return false from the fn function.

See ValidatePolicy method for more information on how to use this operation.

Note: This operation can generate multiple requests to a service.

// Example iterating over at most 3 pages of a ValidatePolicy operation.
pageNum := 0
err := client.ValidatePolicyPages(params,
    func(page *accessanalyzer.ValidatePolicyOutput, lastPage bool) bool {
        pageNum++
        fmt.Println(page)
        return pageNum <= 3
    })

func (*AccessAnalyzer) ValidatePolicyPagesWithContext

func (c *AccessAnalyzer) ValidatePolicyPagesWithContext(ctx aws.Context, input *ValidatePolicyInput, fn func(*ValidatePolicyOutput, bool) bool, opts ...request.Option) error

ValidatePolicyPagesWithContext same as ValidatePolicyPages except it takes a Context and allows setting request options on the pages.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

func (*AccessAnalyzer) ValidatePolicyRequest

func (c *AccessAnalyzer) ValidatePolicyRequest(input *ValidatePolicyInput) (req *request.Request, output *ValidatePolicyOutput)

ValidatePolicyRequest generates a "aws/request.Request" representing the client's request for the ValidatePolicy operation. The "output" return value will be populated with the request's response once the request completes successfully.

Use "Send" method on the returned Request to send the API call to the service. the "output" return value is not valid until after Send returns without error.

See ValidatePolicy for more information on using the ValidatePolicy API call, and error handling.

This method is useful when you want to inject custom logic or configuration into the SDK's request lifecycle. Such as custom headers, or retry logic.

// Example sending a request using the ValidatePolicyRequest method.
req, resp := client.ValidatePolicyRequest(params)

err := req.Send()
if err == nil { // resp is now filled
    fmt.Println(resp)
}

See also, https://docs.aws.amazon.com/goto/WebAPI/accessanalyzer-2019-11-01/ValidatePolicy

func (*AccessAnalyzer) ValidatePolicyWithContext

func (c *AccessAnalyzer) ValidatePolicyWithContext(ctx aws.Context, input *ValidatePolicyInput, opts ...request.Option) (*ValidatePolicyOutput, error)

ValidatePolicyWithContext is the same as ValidatePolicy with the addition of the ability to pass a context and additional request options.

See ValidatePolicy for details on how to use this API operation.

The context must be non-nil and will be used for request cancellation. If the context is nil a panic will occur. In the future the SDK may create sub-contexts for http.Requests. See https://golang.org/pkg/context/ for more information on using Contexts.

type AccessDeniedException

type AccessDeniedException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	Message_ *string `locationName:"message" type:"string"`
	// contains filtered or unexported fields
}

You do not have sufficient access to perform this action.

func (*AccessDeniedException) Code

func (s *AccessDeniedException) Code() string

Code returns the exception type name.

func (*AccessDeniedException) Error

func (s *AccessDeniedException) Error() string

func (AccessDeniedException) GoString

func (s AccessDeniedException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessDeniedException) Message

func (s *AccessDeniedException) Message() string

Message returns the exception's message.

func (*AccessDeniedException) OrigErr

func (s *AccessDeniedException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*AccessDeniedException) RequestID

func (s *AccessDeniedException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*AccessDeniedException) StatusCode

func (s *AccessDeniedException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (AccessDeniedException) String

func (s AccessDeniedException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessPreview

type AccessPreview struct {

	// The ARN of the analyzer used to generate the access preview.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// A map of resource ARNs for the proposed resource configuration.
	//
	// Configurations is a required field
	Configurations map[string]*Configuration `locationName:"configurations" type:"map" required:"true"`

	// The time at which the access preview was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The unique ID for the access preview.
	//
	// Id is a required field
	Id *string `locationName:"id" type:"string" required:"true"`

	// The status of the access preview.
	//
	//    * Creating - The access preview creation is in progress.
	//
	//    * Completed - The access preview is complete. You can preview findings
	//    for external access to the resource.
	//
	//    * Failed - The access preview creation has failed.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"AccessPreviewStatus"`

	// Provides more details about the current status of the access preview.
	//
	// For example, if the creation of the access preview fails, a Failed status
	// is returned. This failure can be due to an internal issue with the analysis
	// or due to an invalid resource configuration.
	StatusReason *AccessPreviewStatusReason `locationName:"statusReason" type:"structure"`
	// contains filtered or unexported fields
}

Contains information about an access preview.

func (AccessPreview) GoString

func (s AccessPreview) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessPreview) SetAnalyzerArn

func (s *AccessPreview) SetAnalyzerArn(v string) *AccessPreview

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*AccessPreview) SetConfigurations

func (s *AccessPreview) SetConfigurations(v map[string]*Configuration) *AccessPreview

SetConfigurations sets the Configurations field's value.

func (*AccessPreview) SetCreatedAt

func (s *AccessPreview) SetCreatedAt(v time.Time) *AccessPreview

SetCreatedAt sets the CreatedAt field's value.

func (*AccessPreview) SetId

func (s *AccessPreview) SetId(v string) *AccessPreview

SetId sets the Id field's value.

func (*AccessPreview) SetStatus

func (s *AccessPreview) SetStatus(v string) *AccessPreview

SetStatus sets the Status field's value.

func (*AccessPreview) SetStatusReason

func (s *AccessPreview) SetStatusReason(v *AccessPreviewStatusReason) *AccessPreview

SetStatusReason sets the StatusReason field's value.

func (AccessPreview) String

func (s AccessPreview) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessPreviewFinding

type AccessPreviewFinding struct {

	// The action in the analyzed policy statement that an external principal has
	// permission to perform.
	Action []*string `locationName:"action" type:"list"`

	// Provides context on how the access preview finding compares to existing access
	// identified in IAM Access Analyzer.
	//
	//    * New - The finding is for newly-introduced access.
	//
	//    * Unchanged - The preview finding is an existing finding that would remain
	//    unchanged.
	//
	//    * Changed - The preview finding is an existing finding with a change in
	//    status.
	//
	// For example, a Changed finding with preview status Resolved and existing
	// status Active indicates the existing Active finding would become Resolved
	// as a result of the proposed permissions change.
	//
	// ChangeType is a required field
	ChangeType *string `locationName:"changeType" type:"string" required:"true" enum:"FindingChangeType"`

	// The condition in the analyzed policy statement that resulted in a finding.
	Condition map[string]*string `locationName:"condition" type:"map"`

	// The time at which the access preview finding was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// An error.
	Error *string `locationName:"error" type:"string"`

	// The existing ID of the finding in IAM Access Analyzer, provided only for
	// existing findings.
	ExistingFindingId *string `locationName:"existingFindingId" type:"string"`

	// The existing status of the finding, provided only for existing findings.
	ExistingFindingStatus *string `locationName:"existingFindingStatus" type:"string" enum:"FindingStatus"`

	// The ID of the access preview finding. This ID uniquely identifies the element
	// in the list of access preview findings and is not related to the finding
	// ID in Access Analyzer.
	//
	// Id is a required field
	Id *string `locationName:"id" type:"string" required:"true"`

	// Indicates whether the policy that generated the finding allows public access
	// to the resource.
	IsPublic *bool `locationName:"isPublic" type:"boolean"`

	// The external principal that has access to a resource within the zone of trust.
	Principal map[string]*string `locationName:"principal" type:"map"`

	// The resource that an external principal has access to. This is the resource
	// associated with the access preview.
	Resource *string `locationName:"resource" type:"string"`

	// The Amazon Web Services account ID that owns the resource. For most Amazon
	// Web Services resources, the owning account is the account in which the resource
	// was created.
	//
	// ResourceOwnerAccount is a required field
	ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

	// The type of the resource that can be accessed in the finding.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

	// The sources of the finding. This indicates how the access that generated
	// the finding is granted. It is populated for Amazon S3 bucket findings.
	Sources []*FindingSource `locationName:"sources" type:"list"`

	// The preview status of the finding. This is what the status of the finding
	// would be after permissions deployment. For example, a Changed finding with
	// preview status Resolved and existing status Active indicates the existing
	// Active finding would become Resolved as a result of the proposed permissions
	// change.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`
	// contains filtered or unexported fields
}

An access preview finding generated by the access preview.

func (AccessPreviewFinding) GoString

func (s AccessPreviewFinding) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessPreviewFinding) SetAction

func (s *AccessPreviewFinding) SetAction(v []*string) *AccessPreviewFinding

SetAction sets the Action field's value.

func (*AccessPreviewFinding) SetChangeType

func (s *AccessPreviewFinding) SetChangeType(v string) *AccessPreviewFinding

SetChangeType sets the ChangeType field's value.

func (*AccessPreviewFinding) SetCondition

func (s *AccessPreviewFinding) SetCondition(v map[string]*string) *AccessPreviewFinding

SetCondition sets the Condition field's value.

func (*AccessPreviewFinding) SetCreatedAt

func (s *AccessPreviewFinding) SetCreatedAt(v time.Time) *AccessPreviewFinding

SetCreatedAt sets the CreatedAt field's value.

func (*AccessPreviewFinding) SetError

SetError sets the Error field's value.

func (*AccessPreviewFinding) SetExistingFindingId

func (s *AccessPreviewFinding) SetExistingFindingId(v string) *AccessPreviewFinding

SetExistingFindingId sets the ExistingFindingId field's value.

func (*AccessPreviewFinding) SetExistingFindingStatus

func (s *AccessPreviewFinding) SetExistingFindingStatus(v string) *AccessPreviewFinding

SetExistingFindingStatus sets the ExistingFindingStatus field's value.

func (*AccessPreviewFinding) SetId

SetId sets the Id field's value.

func (*AccessPreviewFinding) SetIsPublic

func (s *AccessPreviewFinding) SetIsPublic(v bool) *AccessPreviewFinding

SetIsPublic sets the IsPublic field's value.

func (*AccessPreviewFinding) SetPrincipal

func (s *AccessPreviewFinding) SetPrincipal(v map[string]*string) *AccessPreviewFinding

SetPrincipal sets the Principal field's value.

func (*AccessPreviewFinding) SetResource

SetResource sets the Resource field's value.

func (*AccessPreviewFinding) SetResourceOwnerAccount

func (s *AccessPreviewFinding) SetResourceOwnerAccount(v string) *AccessPreviewFinding

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*AccessPreviewFinding) SetResourceType

func (s *AccessPreviewFinding) SetResourceType(v string) *AccessPreviewFinding

SetResourceType sets the ResourceType field's value.

func (*AccessPreviewFinding) SetSources

SetSources sets the Sources field's value.

func (*AccessPreviewFinding) SetStatus

SetStatus sets the Status field's value.

func (AccessPreviewFinding) String

func (s AccessPreviewFinding) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessPreviewStatusReason

type AccessPreviewStatusReason struct {

	// The reason code for the current status of the access preview.
	//
	// Code is a required field
	Code *string `locationName:"code" type:"string" required:"true" enum:"AccessPreviewStatusReasonCode"`
	// contains filtered or unexported fields
}

Provides more details about the current status of the access preview. For example, if the creation of the access preview fails, a Failed status is returned. This failure can be due to an internal issue with the analysis or due to an invalid proposed resource configuration.

func (AccessPreviewStatusReason) GoString

func (s AccessPreviewStatusReason) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessPreviewStatusReason) SetCode

SetCode sets the Code field's value.

func (AccessPreviewStatusReason) String

func (s AccessPreviewStatusReason) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AccessPreviewSummary

type AccessPreviewSummary struct {

	// The ARN of the analyzer used to generate the access preview.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// The time at which the access preview was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The unique ID for the access preview.
	//
	// Id is a required field
	Id *string `locationName:"id" type:"string" required:"true"`

	// The status of the access preview.
	//
	//    * Creating - The access preview creation is in progress.
	//
	//    * Completed - The access preview is complete and previews the findings
	//    for external access to the resource.
	//
	//    * Failed - The access preview creation has failed.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"AccessPreviewStatus"`

	// Provides more details about the current status of the access preview. For
	// example, if the creation of the access preview fails, a Failed status is
	// returned. This failure can be due to an internal issue with the analysis
	// or due to an invalid proposed resource configuration.
	StatusReason *AccessPreviewStatusReason `locationName:"statusReason" type:"structure"`
	// contains filtered or unexported fields
}

Contains a summary of information about an access preview.

func (AccessPreviewSummary) GoString

func (s AccessPreviewSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AccessPreviewSummary) SetAnalyzerArn

func (s *AccessPreviewSummary) SetAnalyzerArn(v string) *AccessPreviewSummary

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*AccessPreviewSummary) SetCreatedAt

func (s *AccessPreviewSummary) SetCreatedAt(v time.Time) *AccessPreviewSummary

SetCreatedAt sets the CreatedAt field's value.

func (*AccessPreviewSummary) SetId

SetId sets the Id field's value.

func (*AccessPreviewSummary) SetStatus

SetStatus sets the Status field's value.

func (*AccessPreviewSummary) SetStatusReason

SetStatusReason sets the StatusReason field's value.

func (AccessPreviewSummary) String

func (s AccessPreviewSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AclGrantee

type AclGrantee struct {

	// The value specified is the canonical user ID of an Amazon Web Services account.
	Id *string `locationName:"id" type:"string"`

	// Used for granting permissions to a predefined group.
	Uri *string `locationName:"uri" type:"string"`
	// contains filtered or unexported fields
}

You specify each grantee as a type-value pair using one of these types. You can specify only one type of grantee. For more information, see PutBucketAcl (https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAcl.html).

func (AclGrantee) GoString

func (s AclGrantee) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AclGrantee) SetId

func (s *AclGrantee) SetId(v string) *AclGrantee

SetId sets the Id field's value.

func (*AclGrantee) SetUri

func (s *AclGrantee) SetUri(v string) *AclGrantee

SetUri sets the Uri field's value.

func (AclGrantee) String

func (s AclGrantee) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AnalyzedResource

type AnalyzedResource struct {

	// The actions that an external principal is granted permission to use by the
	// policy that generated the finding.
	Actions []*string `locationName:"actions" type:"list"`

	// The time at which the resource was analyzed.
	//
	// AnalyzedAt is a required field
	AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The time at which the finding was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// An error message.
	Error *string `locationName:"error" type:"string"`

	// Indicates whether the policy that generated the finding grants public access
	// to the resource.
	//
	// IsPublic is a required field
	IsPublic *bool `locationName:"isPublic" type:"boolean" required:"true"`

	// The ARN of the resource that was analyzed.
	//
	// ResourceArn is a required field
	ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`

	// The Amazon Web Services account ID that owns the resource.
	//
	// ResourceOwnerAccount is a required field
	ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

	// The type of the resource that was analyzed.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

	// Indicates how the access that generated the finding is granted. This is populated
	// for Amazon S3 bucket findings.
	SharedVia []*string `locationName:"sharedVia" type:"list"`

	// The current status of the finding generated from the analyzed resource.
	Status *string `locationName:"status" type:"string" enum:"FindingStatus"`

	// The time at which the finding was updated.
	//
	// UpdatedAt is a required field
	UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
	// contains filtered or unexported fields
}

Contains details about the analyzed resource.

func (AnalyzedResource) GoString

func (s AnalyzedResource) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AnalyzedResource) SetActions

func (s *AnalyzedResource) SetActions(v []*string) *AnalyzedResource

SetActions sets the Actions field's value.

func (*AnalyzedResource) SetAnalyzedAt

func (s *AnalyzedResource) SetAnalyzedAt(v time.Time) *AnalyzedResource

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*AnalyzedResource) SetCreatedAt

func (s *AnalyzedResource) SetCreatedAt(v time.Time) *AnalyzedResource

SetCreatedAt sets the CreatedAt field's value.

func (*AnalyzedResource) SetError

func (s *AnalyzedResource) SetError(v string) *AnalyzedResource

SetError sets the Error field's value.

func (*AnalyzedResource) SetIsPublic

func (s *AnalyzedResource) SetIsPublic(v bool) *AnalyzedResource

SetIsPublic sets the IsPublic field's value.

func (*AnalyzedResource) SetResourceArn

func (s *AnalyzedResource) SetResourceArn(v string) *AnalyzedResource

SetResourceArn sets the ResourceArn field's value.

func (*AnalyzedResource) SetResourceOwnerAccount

func (s *AnalyzedResource) SetResourceOwnerAccount(v string) *AnalyzedResource

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*AnalyzedResource) SetResourceType

func (s *AnalyzedResource) SetResourceType(v string) *AnalyzedResource

SetResourceType sets the ResourceType field's value.

func (*AnalyzedResource) SetSharedVia

func (s *AnalyzedResource) SetSharedVia(v []*string) *AnalyzedResource

SetSharedVia sets the SharedVia field's value.

func (*AnalyzedResource) SetStatus

func (s *AnalyzedResource) SetStatus(v string) *AnalyzedResource

SetStatus sets the Status field's value.

func (*AnalyzedResource) SetUpdatedAt

func (s *AnalyzedResource) SetUpdatedAt(v time.Time) *AnalyzedResource

SetUpdatedAt sets the UpdatedAt field's value.

func (AnalyzedResource) String

func (s AnalyzedResource) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AnalyzedResourceSummary

type AnalyzedResourceSummary struct {

	// The ARN of the analyzed resource.
	//
	// ResourceArn is a required field
	ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`

	// The Amazon Web Services account ID that owns the resource.
	//
	// ResourceOwnerAccount is a required field
	ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

	// The type of resource that was analyzed.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`
	// contains filtered or unexported fields
}

Contains the ARN of the analyzed resource.

func (AnalyzedResourceSummary) GoString

func (s AnalyzedResourceSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AnalyzedResourceSummary) SetResourceArn

SetResourceArn sets the ResourceArn field's value.

func (*AnalyzedResourceSummary) SetResourceOwnerAccount

func (s *AnalyzedResourceSummary) SetResourceOwnerAccount(v string) *AnalyzedResourceSummary

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*AnalyzedResourceSummary) SetResourceType

SetResourceType sets the ResourceType field's value.

func (AnalyzedResourceSummary) String

func (s AnalyzedResourceSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AnalyzerConfiguration

type AnalyzerConfiguration struct {

	// Specifies the configuration of an unused access analyzer for an Amazon Web
	// Services organization or account. External access analyzers do not support
	// any configuration.
	UnusedAccess *UnusedAccessConfiguration `locationName:"unusedAccess" type:"structure"`
	// contains filtered or unexported fields
}

Contains information about the configuration of an unused access analyzer for an Amazon Web Services organization or account.

func (AnalyzerConfiguration) GoString

func (s AnalyzerConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AnalyzerConfiguration) SetUnusedAccess

SetUnusedAccess sets the UnusedAccess field's value.

func (AnalyzerConfiguration) String

func (s AnalyzerConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type AnalyzerSummary

type AnalyzerSummary struct {

	// The ARN of the analyzer.
	//
	// Arn is a required field
	Arn *string `locationName:"arn" type:"string" required:"true"`

	// Specifies whether the analyzer is an external access or unused access analyzer.
	Configuration *AnalyzerConfiguration `locationName:"configuration" type:"structure"`

	// A timestamp for the time at which the analyzer was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The resource that was most recently analyzed by the analyzer.
	LastResourceAnalyzed *string `locationName:"lastResourceAnalyzed" type:"string"`

	// The time at which the most recently analyzed resource was analyzed.
	LastResourceAnalyzedAt *time.Time `locationName:"lastResourceAnalyzedAt" type:"timestamp" timestampFormat:"iso8601"`

	// The name of the analyzer.
	//
	// Name is a required field
	Name *string `locationName:"name" min:"1" type:"string" required:"true"`

	// The status of the analyzer. An Active analyzer successfully monitors supported
	// resources and generates new findings. The analyzer is Disabled when a user
	// action, such as removing trusted access for Identity and Access Management
	// Access Analyzer from Organizations, causes the analyzer to stop generating
	// new findings. The status is Creating when the analyzer creation is in progress
	// and Failed when the analyzer creation has failed.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"AnalyzerStatus"`

	// The statusReason provides more details about the current status of the analyzer.
	// For example, if the creation for the analyzer fails, a Failed status is returned.
	// For an analyzer with organization as the type, this failure can be due to
	// an issue with creating the service-linked roles required in the member accounts
	// of the Amazon Web Services organization.
	StatusReason *StatusReason `locationName:"statusReason" type:"structure"`

	// The tags added to the analyzer.
	Tags map[string]*string `locationName:"tags" type:"map"`

	// The type of analyzer, which corresponds to the zone of trust chosen for the
	// analyzer.
	//
	// Type is a required field
	Type *string `locationName:"type" type:"string" required:"true" enum:"Type"`
	// contains filtered or unexported fields
}

Contains information about the analyzer.

func (AnalyzerSummary) GoString

func (s AnalyzerSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*AnalyzerSummary) SetArn

func (s *AnalyzerSummary) SetArn(v string) *AnalyzerSummary

SetArn sets the Arn field's value.

func (*AnalyzerSummary) SetConfiguration

func (s *AnalyzerSummary) SetConfiguration(v *AnalyzerConfiguration) *AnalyzerSummary

SetConfiguration sets the Configuration field's value.

func (*AnalyzerSummary) SetCreatedAt

func (s *AnalyzerSummary) SetCreatedAt(v time.Time) *AnalyzerSummary

SetCreatedAt sets the CreatedAt field's value.

func (*AnalyzerSummary) SetLastResourceAnalyzed

func (s *AnalyzerSummary) SetLastResourceAnalyzed(v string) *AnalyzerSummary

SetLastResourceAnalyzed sets the LastResourceAnalyzed field's value.

func (*AnalyzerSummary) SetLastResourceAnalyzedAt

func (s *AnalyzerSummary) SetLastResourceAnalyzedAt(v time.Time) *AnalyzerSummary

SetLastResourceAnalyzedAt sets the LastResourceAnalyzedAt field's value.

func (*AnalyzerSummary) SetName

func (s *AnalyzerSummary) SetName(v string) *AnalyzerSummary

SetName sets the Name field's value.

func (*AnalyzerSummary) SetStatus

func (s *AnalyzerSummary) SetStatus(v string) *AnalyzerSummary

SetStatus sets the Status field's value.

func (*AnalyzerSummary) SetStatusReason

func (s *AnalyzerSummary) SetStatusReason(v *StatusReason) *AnalyzerSummary

SetStatusReason sets the StatusReason field's value.

func (*AnalyzerSummary) SetTags

func (s *AnalyzerSummary) SetTags(v map[string]*string) *AnalyzerSummary

SetTags sets the Tags field's value.

func (*AnalyzerSummary) SetType

func (s *AnalyzerSummary) SetType(v string) *AnalyzerSummary

SetType sets the Type field's value.

func (AnalyzerSummary) String

func (s AnalyzerSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ApplyArchiveRuleInput

type ApplyArchiveRuleInput struct {

	// The Amazon resource name (ARN) of the analyzer.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// A client token.
	ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

	// The name of the rule to apply.
	//
	// RuleName is a required field
	RuleName *string `locationName:"ruleName" min:"1" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Retroactively applies an archive rule.

func (ApplyArchiveRuleInput) GoString

func (s ApplyArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ApplyArchiveRuleInput) SetAnalyzerArn

func (s *ApplyArchiveRuleInput) SetAnalyzerArn(v string) *ApplyArchiveRuleInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*ApplyArchiveRuleInput) SetClientToken

func (s *ApplyArchiveRuleInput) SetClientToken(v string) *ApplyArchiveRuleInput

SetClientToken sets the ClientToken field's value.

func (*ApplyArchiveRuleInput) SetRuleName

SetRuleName sets the RuleName field's value.

func (ApplyArchiveRuleInput) String

func (s ApplyArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ApplyArchiveRuleInput) Validate

func (s *ApplyArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ApplyArchiveRuleOutput

type ApplyArchiveRuleOutput struct {
	// contains filtered or unexported fields
}

func (ApplyArchiveRuleOutput) GoString

func (s ApplyArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (ApplyArchiveRuleOutput) String

func (s ApplyArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ArchiveRuleSummary

type ArchiveRuleSummary struct {

	// The time at which the archive rule was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// A filter used to define the archive rule.
	//
	// Filter is a required field
	Filter map[string]*Criterion `locationName:"filter" type:"map" required:"true"`

	// The name of the archive rule.
	//
	// RuleName is a required field
	RuleName *string `locationName:"ruleName" min:"1" type:"string" required:"true"`

	// The time at which the archive rule was last updated.
	//
	// UpdatedAt is a required field
	UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
	// contains filtered or unexported fields
}

Contains information about an archive rule.

func (ArchiveRuleSummary) GoString

func (s ArchiveRuleSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ArchiveRuleSummary) SetCreatedAt

func (s *ArchiveRuleSummary) SetCreatedAt(v time.Time) *ArchiveRuleSummary

SetCreatedAt sets the CreatedAt field's value.

func (*ArchiveRuleSummary) SetFilter

func (s *ArchiveRuleSummary) SetFilter(v map[string]*Criterion) *ArchiveRuleSummary

SetFilter sets the Filter field's value.

func (*ArchiveRuleSummary) SetRuleName

func (s *ArchiveRuleSummary) SetRuleName(v string) *ArchiveRuleSummary

SetRuleName sets the RuleName field's value.

func (*ArchiveRuleSummary) SetUpdatedAt

func (s *ArchiveRuleSummary) SetUpdatedAt(v time.Time) *ArchiveRuleSummary

SetUpdatedAt sets the UpdatedAt field's value.

func (ArchiveRuleSummary) String

func (s ArchiveRuleSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CancelPolicyGenerationInput

type CancelPolicyGenerationInput struct {

	// The JobId that is returned by the StartPolicyGeneration operation. The JobId
	// can be used with GetGeneratedPolicy to retrieve the generated policies or
	// used with CancelPolicyGeneration to cancel the policy generation request.
	//
	// JobId is a required field
	JobId *string `location:"uri" locationName:"jobId" type:"string" required:"true"`
	// contains filtered or unexported fields
}

func (CancelPolicyGenerationInput) GoString

func (s CancelPolicyGenerationInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CancelPolicyGenerationInput) SetJobId

SetJobId sets the JobId field's value.

func (CancelPolicyGenerationInput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CancelPolicyGenerationInput) Validate

func (s *CancelPolicyGenerationInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CancelPolicyGenerationOutput

type CancelPolicyGenerationOutput struct {
	// contains filtered or unexported fields
}

func (CancelPolicyGenerationOutput) GoString

func (s CancelPolicyGenerationOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (CancelPolicyGenerationOutput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CheckAccessNotGrantedInput

type CheckAccessNotGrantedInput struct {

	// An access object containing the permissions that shouldn't be granted by
	// the specified policy.
	//
	// Access is a required field
	Access []*Access `locationName:"access" type:"list" required:"true"`

	// The JSON policy document to use as the content for the policy.
	//
	// PolicyDocument is a sensitive parameter and its value will be
	// replaced with "sensitive" in string returned by CheckAccessNotGrantedInput's
	// String and GoString methods.
	//
	// PolicyDocument is a required field
	PolicyDocument *string `locationName:"policyDocument" type:"string" required:"true" sensitive:"true"`

	// The type of policy. Identity policies grant permissions to IAM principals.
	// Identity policies include managed and inline policies for IAM roles, users,
	// and groups.
	//
	// Resource policies grant permissions on Amazon Web Services resources. Resource
	// policies include trust policies for IAM roles and bucket policies for Amazon
	// S3 buckets. You can provide a generic input such as identity policy or resource
	// policy or a specific input such as managed policy or Amazon S3 bucket policy.
	//
	// PolicyType is a required field
	PolicyType *string `locationName:"policyType" type:"string" required:"true" enum:"AccessCheckPolicyType"`
	// contains filtered or unexported fields
}

func (CheckAccessNotGrantedInput) GoString

func (s CheckAccessNotGrantedInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckAccessNotGrantedInput) SetAccess

SetAccess sets the Access field's value.

func (*CheckAccessNotGrantedInput) SetPolicyDocument

SetPolicyDocument sets the PolicyDocument field's value.

func (*CheckAccessNotGrantedInput) SetPolicyType

SetPolicyType sets the PolicyType field's value.

func (CheckAccessNotGrantedInput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckAccessNotGrantedInput) Validate

func (s *CheckAccessNotGrantedInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CheckAccessNotGrantedOutput

type CheckAccessNotGrantedOutput struct {

	// The message indicating whether the specified access is allowed.
	Message *string `locationName:"message" type:"string"`

	// A description of the reasoning of the result.
	Reasons []*ReasonSummary `locationName:"reasons" type:"list"`

	// The result of the check for whether the access is allowed. If the result
	// is PASS, the specified policy doesn't allow any of the specified permissions
	// in the access object. If the result is FAIL, the specified policy might allow
	// some or all of the permissions in the access object.
	Result *string `locationName:"result" type:"string" enum:"CheckAccessNotGrantedResult"`
	// contains filtered or unexported fields
}

func (CheckAccessNotGrantedOutput) GoString

func (s CheckAccessNotGrantedOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckAccessNotGrantedOutput) SetMessage

SetMessage sets the Message field's value.

func (*CheckAccessNotGrantedOutput) SetReasons

SetReasons sets the Reasons field's value.

func (*CheckAccessNotGrantedOutput) SetResult

SetResult sets the Result field's value.

func (CheckAccessNotGrantedOutput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CheckNoNewAccessInput

type CheckNoNewAccessInput struct {

	// The JSON policy document to use as the content for the existing policy.
	//
	// ExistingPolicyDocument is a sensitive parameter and its value will be
	// replaced with "sensitive" in string returned by CheckNoNewAccessInput's
	// String and GoString methods.
	//
	// ExistingPolicyDocument is a required field
	ExistingPolicyDocument *string `locationName:"existingPolicyDocument" type:"string" required:"true" sensitive:"true"`

	// The JSON policy document to use as the content for the updated policy.
	//
	// NewPolicyDocument is a sensitive parameter and its value will be
	// replaced with "sensitive" in string returned by CheckNoNewAccessInput's
	// String and GoString methods.
	//
	// NewPolicyDocument is a required field
	NewPolicyDocument *string `locationName:"newPolicyDocument" type:"string" required:"true" sensitive:"true"`

	// The type of policy to compare. Identity policies grant permissions to IAM
	// principals. Identity policies include managed and inline policies for IAM
	// roles, users, and groups.
	//
	// Resource policies grant permissions on Amazon Web Services resources. Resource
	// policies include trust policies for IAM roles and bucket policies for Amazon
	// S3 buckets. You can provide a generic input such as identity policy or resource
	// policy or a specific input such as managed policy or Amazon S3 bucket policy.
	//
	// PolicyType is a required field
	PolicyType *string `locationName:"policyType" type:"string" required:"true" enum:"AccessCheckPolicyType"`
	// contains filtered or unexported fields
}

func (CheckNoNewAccessInput) GoString

func (s CheckNoNewAccessInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoNewAccessInput) SetExistingPolicyDocument

func (s *CheckNoNewAccessInput) SetExistingPolicyDocument(v string) *CheckNoNewAccessInput

SetExistingPolicyDocument sets the ExistingPolicyDocument field's value.

func (*CheckNoNewAccessInput) SetNewPolicyDocument

func (s *CheckNoNewAccessInput) SetNewPolicyDocument(v string) *CheckNoNewAccessInput

SetNewPolicyDocument sets the NewPolicyDocument field's value.

func (*CheckNoNewAccessInput) SetPolicyType

func (s *CheckNoNewAccessInput) SetPolicyType(v string) *CheckNoNewAccessInput

SetPolicyType sets the PolicyType field's value.

func (CheckNoNewAccessInput) String

func (s CheckNoNewAccessInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoNewAccessInput) Validate

func (s *CheckNoNewAccessInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CheckNoNewAccessOutput

type CheckNoNewAccessOutput struct {

	// The message indicating whether the updated policy allows new access.
	Message *string `locationName:"message" type:"string"`

	// A description of the reasoning of the result.
	Reasons []*ReasonSummary `locationName:"reasons" type:"list"`

	// The result of the check for new access. If the result is PASS, no new access
	// is allowed by the updated policy. If the result is FAIL, the updated policy
	// might allow new access.
	Result *string `locationName:"result" type:"string" enum:"CheckNoNewAccessResult"`
	// contains filtered or unexported fields
}

func (CheckNoNewAccessOutput) GoString

func (s CheckNoNewAccessOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CheckNoNewAccessOutput) SetMessage

SetMessage sets the Message field's value.

func (*CheckNoNewAccessOutput) SetReasons

SetReasons sets the Reasons field's value.

func (*CheckNoNewAccessOutput) SetResult

SetResult sets the Result field's value.

func (CheckNoNewAccessOutput) String

func (s CheckNoNewAccessOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CloudTrailDetails

type CloudTrailDetails struct {

	// The ARN of the service role that IAM Access Analyzer uses to access your
	// CloudTrail trail and service last accessed information.
	//
	// AccessRole is a required field
	AccessRole *string `locationName:"accessRole" type:"string" required:"true"`

	// The end of the time range for which IAM Access Analyzer reviews your CloudTrail
	// events. Events with a timestamp after this time are not considered to generate
	// a policy. If this is not included in the request, the default value is the
	// current time.
	EndTime *time.Time `locationName:"endTime" type:"timestamp" timestampFormat:"iso8601"`

	// The start of the time range for which IAM Access Analyzer reviews your CloudTrail
	// events. Events with a timestamp before this time are not considered to generate
	// a policy.
	//
	// StartTime is a required field
	StartTime *time.Time `locationName:"startTime" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// A Trail object that contains settings for a trail.
	//
	// Trails is a required field
	Trails []*Trail `locationName:"trails" type:"list" required:"true"`
	// contains filtered or unexported fields
}

Contains information about CloudTrail access.

func (CloudTrailDetails) GoString

func (s CloudTrailDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CloudTrailDetails) SetAccessRole

func (s *CloudTrailDetails) SetAccessRole(v string) *CloudTrailDetails

SetAccessRole sets the AccessRole field's value.

func (*CloudTrailDetails) SetEndTime

func (s *CloudTrailDetails) SetEndTime(v time.Time) *CloudTrailDetails

SetEndTime sets the EndTime field's value.

func (*CloudTrailDetails) SetStartTime

func (s *CloudTrailDetails) SetStartTime(v time.Time) *CloudTrailDetails

SetStartTime sets the StartTime field's value.

func (*CloudTrailDetails) SetTrails

func (s *CloudTrailDetails) SetTrails(v []*Trail) *CloudTrailDetails

SetTrails sets the Trails field's value.

func (CloudTrailDetails) String

func (s CloudTrailDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CloudTrailDetails) Validate

func (s *CloudTrailDetails) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CloudTrailProperties

type CloudTrailProperties struct {

	// The end of the time range for which IAM Access Analyzer reviews your CloudTrail
	// events. Events with a timestamp after this time are not considered to generate
	// a policy. If this is not included in the request, the default value is the
	// current time.
	//
	// EndTime is a required field
	EndTime *time.Time `locationName:"endTime" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The start of the time range for which IAM Access Analyzer reviews your CloudTrail
	// events. Events with a timestamp before this time are not considered to generate
	// a policy.
	//
	// StartTime is a required field
	StartTime *time.Time `locationName:"startTime" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// A TrailProperties object that contains settings for trail properties.
	//
	// TrailProperties is a required field
	TrailProperties []*TrailProperties `locationName:"trailProperties" type:"list" required:"true"`
	// contains filtered or unexported fields
}

Contains information about CloudTrail access.

func (CloudTrailProperties) GoString

func (s CloudTrailProperties) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CloudTrailProperties) SetEndTime

SetEndTime sets the EndTime field's value.

func (*CloudTrailProperties) SetStartTime

func (s *CloudTrailProperties) SetStartTime(v time.Time) *CloudTrailProperties

SetStartTime sets the StartTime field's value.

func (*CloudTrailProperties) SetTrailProperties

func (s *CloudTrailProperties) SetTrailProperties(v []*TrailProperties) *CloudTrailProperties

SetTrailProperties sets the TrailProperties field's value.

func (CloudTrailProperties) String

func (s CloudTrailProperties) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Configuration

type Configuration struct {

	// The access control configuration is for an Amazon EBS volume snapshot.
	EbsSnapshot *EbsSnapshotConfiguration `locationName:"ebsSnapshot" type:"structure"`

	// The access control configuration is for an Amazon ECR repository.
	EcrRepository *EcrRepositoryConfiguration `locationName:"ecrRepository" type:"structure"`

	// The access control configuration is for an Amazon EFS file system.
	EfsFileSystem *EfsFileSystemConfiguration `locationName:"efsFileSystem" type:"structure"`

	// The access control configuration is for an IAM role.
	IamRole *IamRoleConfiguration `locationName:"iamRole" type:"structure"`

	// The access control configuration is for a KMS key.
	KmsKey *KmsKeyConfiguration `locationName:"kmsKey" type:"structure"`

	// The access control configuration is for an Amazon RDS DB cluster snapshot.
	RdsDbClusterSnapshot *RdsDbClusterSnapshotConfiguration `locationName:"rdsDbClusterSnapshot" type:"structure"`

	// The access control configuration is for an Amazon RDS DB snapshot.
	RdsDbSnapshot *RdsDbSnapshotConfiguration `locationName:"rdsDbSnapshot" type:"structure"`

	// The access control configuration is for an Amazon S3 bucket.
	S3Bucket *S3BucketConfiguration `locationName:"s3Bucket" type:"structure"`

	// The access control configuration is for an Amazon S3 directory bucket.
	S3ExpressDirectoryBucket *S3ExpressDirectoryBucketConfiguration `locationName:"s3ExpressDirectoryBucket" type:"structure"`

	// The access control configuration is for a Secrets Manager secret.
	SecretsManagerSecret *SecretsManagerSecretConfiguration `locationName:"secretsManagerSecret" type:"structure"`

	// The access control configuration is for an Amazon SNS topic
	SnsTopic *SnsTopicConfiguration `locationName:"snsTopic" type:"structure"`

	// The access control configuration is for an Amazon SQS queue.
	SqsQueue *SqsQueueConfiguration `locationName:"sqsQueue" type:"structure"`
	// contains filtered or unexported fields
}

Access control configuration structures for your resource. You specify the configuration as a type-value pair. You can specify only one type of access control configuration.

func (Configuration) GoString

func (s Configuration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Configuration) SetEbsSnapshot

func (s *Configuration) SetEbsSnapshot(v *EbsSnapshotConfiguration) *Configuration

SetEbsSnapshot sets the EbsSnapshot field's value.

func (*Configuration) SetEcrRepository

func (s *Configuration) SetEcrRepository(v *EcrRepositoryConfiguration) *Configuration

SetEcrRepository sets the EcrRepository field's value.

func (*Configuration) SetEfsFileSystem

func (s *Configuration) SetEfsFileSystem(v *EfsFileSystemConfiguration) *Configuration

SetEfsFileSystem sets the EfsFileSystem field's value.

func (*Configuration) SetIamRole

SetIamRole sets the IamRole field's value.

func (*Configuration) SetKmsKey

SetKmsKey sets the KmsKey field's value.

func (*Configuration) SetRdsDbClusterSnapshot

func (s *Configuration) SetRdsDbClusterSnapshot(v *RdsDbClusterSnapshotConfiguration) *Configuration

SetRdsDbClusterSnapshot sets the RdsDbClusterSnapshot field's value.

func (*Configuration) SetRdsDbSnapshot

func (s *Configuration) SetRdsDbSnapshot(v *RdsDbSnapshotConfiguration) *Configuration

SetRdsDbSnapshot sets the RdsDbSnapshot field's value.

func (*Configuration) SetS3Bucket

SetS3Bucket sets the S3Bucket field's value.

func (*Configuration) SetS3ExpressDirectoryBucket

func (s *Configuration) SetS3ExpressDirectoryBucket(v *S3ExpressDirectoryBucketConfiguration) *Configuration

SetS3ExpressDirectoryBucket sets the S3ExpressDirectoryBucket field's value.

func (*Configuration) SetSecretsManagerSecret

func (s *Configuration) SetSecretsManagerSecret(v *SecretsManagerSecretConfiguration) *Configuration

SetSecretsManagerSecret sets the SecretsManagerSecret field's value.

func (*Configuration) SetSnsTopic

SetSnsTopic sets the SnsTopic field's value.

func (*Configuration) SetSqsQueue

SetSqsQueue sets the SqsQueue field's value.

func (Configuration) String

func (s Configuration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Configuration) Validate

func (s *Configuration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ConflictException

type ConflictException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	Message_ *string `locationName:"message" type:"string"`

	// The ID of the resource.
	//
	// ResourceId is a required field
	ResourceId *string `locationName:"resourceId" type:"string" required:"true"`

	// The resource type.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true"`
	// contains filtered or unexported fields
}

A conflict exception error.

func (*ConflictException) Code

func (s *ConflictException) Code() string

Code returns the exception type name.

func (*ConflictException) Error

func (s *ConflictException) Error() string

func (ConflictException) GoString

func (s ConflictException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ConflictException) Message

func (s *ConflictException) Message() string

Message returns the exception's message.

func (*ConflictException) OrigErr

func (s *ConflictException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*ConflictException) RequestID

func (s *ConflictException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*ConflictException) StatusCode

func (s *ConflictException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (ConflictException) String

func (s ConflictException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CreateAccessPreviewInput

type CreateAccessPreviewInput struct {

	// The ARN of the account analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// used to generate the access preview. You can only create an access preview
	// for analyzers with an Account type and Active status.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// A client token.
	ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

	// Access control configuration for your resource that is used to generate the
	// access preview. The access preview includes findings for external access
	// allowed to the resource with the proposed access control configuration. The
	// configuration must contain exactly one element.
	//
	// Configurations is a required field
	Configurations map[string]*Configuration `locationName:"configurations" type:"map" required:"true"`
	// contains filtered or unexported fields
}

func (CreateAccessPreviewInput) GoString

func (s CreateAccessPreviewInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAccessPreviewInput) SetAnalyzerArn

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*CreateAccessPreviewInput) SetClientToken

SetClientToken sets the ClientToken field's value.

func (*CreateAccessPreviewInput) SetConfigurations

SetConfigurations sets the Configurations field's value.

func (CreateAccessPreviewInput) String

func (s CreateAccessPreviewInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAccessPreviewInput) Validate

func (s *CreateAccessPreviewInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CreateAccessPreviewOutput

type CreateAccessPreviewOutput struct {

	// The unique ID for the access preview.
	//
	// Id is a required field
	Id *string `locationName:"id" type:"string" required:"true"`
	// contains filtered or unexported fields
}

func (CreateAccessPreviewOutput) GoString

func (s CreateAccessPreviewOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAccessPreviewOutput) SetId

SetId sets the Id field's value.

func (CreateAccessPreviewOutput) String

func (s CreateAccessPreviewOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CreateAnalyzerInput

type CreateAnalyzerInput struct {

	// The name of the analyzer to create.
	//
	// AnalyzerName is a required field
	AnalyzerName *string `locationName:"analyzerName" min:"1" type:"string" required:"true"`

	// Specifies the archive rules to add for the analyzer. Archive rules automatically
	// archive findings that meet the criteria you define for the rule.
	ArchiveRules []*InlineArchiveRule `locationName:"archiveRules" type:"list"`

	// A client token.
	ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

	// Specifies the configuration of the analyzer. If the analyzer is an unused
	// access analyzer, the specified scope of unused access is used for the configuration.
	// If the analyzer is an external access analyzer, this field is not used.
	Configuration *AnalyzerConfiguration `locationName:"configuration" type:"structure"`

	// An array of key-value pairs to apply to the analyzer.
	Tags map[string]*string `locationName:"tags" type:"map"`

	// The type of analyzer to create. Only ACCOUNT, ORGANIZATION, ACCOUNT_UNUSED_ACCESS,
	// and ORGANIZTAION_UNUSED_ACCESS analyzers are supported. You can create only
	// one analyzer per account per Region. You can create up to 5 analyzers per
	// organization per Region.
	//
	// Type is a required field
	Type *string `locationName:"type" type:"string" required:"true" enum:"Type"`
	// contains filtered or unexported fields
}

Creates an analyzer.

func (CreateAnalyzerInput) GoString

func (s CreateAnalyzerInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAnalyzerInput) SetAnalyzerName

func (s *CreateAnalyzerInput) SetAnalyzerName(v string) *CreateAnalyzerInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*CreateAnalyzerInput) SetArchiveRules

func (s *CreateAnalyzerInput) SetArchiveRules(v []*InlineArchiveRule) *CreateAnalyzerInput

SetArchiveRules sets the ArchiveRules field's value.

func (*CreateAnalyzerInput) SetClientToken

func (s *CreateAnalyzerInput) SetClientToken(v string) *CreateAnalyzerInput

SetClientToken sets the ClientToken field's value.

func (*CreateAnalyzerInput) SetConfiguration

SetConfiguration sets the Configuration field's value.

func (*CreateAnalyzerInput) SetTags

SetTags sets the Tags field's value.

func (*CreateAnalyzerInput) SetType

SetType sets the Type field's value.

func (CreateAnalyzerInput) String

func (s CreateAnalyzerInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAnalyzerInput) Validate

func (s *CreateAnalyzerInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CreateAnalyzerOutput

type CreateAnalyzerOutput struct {

	// The ARN of the analyzer that was created by the request.
	Arn *string `locationName:"arn" type:"string"`
	// contains filtered or unexported fields
}

The response to the request to create an analyzer.

func (CreateAnalyzerOutput) GoString

func (s CreateAnalyzerOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateAnalyzerOutput) SetArn

SetArn sets the Arn field's value.

func (CreateAnalyzerOutput) String

func (s CreateAnalyzerOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type CreateArchiveRuleInput

type CreateArchiveRuleInput struct {

	// The name of the created analyzer.
	//
	// AnalyzerName is a required field
	AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

	// A client token.
	ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

	// The criteria for the rule.
	//
	// Filter is a required field
	Filter map[string]*Criterion `locationName:"filter" type:"map" required:"true"`

	// The name of the rule to create.
	//
	// RuleName is a required field
	RuleName *string `locationName:"ruleName" min:"1" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Creates an archive rule.

func (CreateArchiveRuleInput) GoString

func (s CreateArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateArchiveRuleInput) SetAnalyzerName

func (s *CreateArchiveRuleInput) SetAnalyzerName(v string) *CreateArchiveRuleInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*CreateArchiveRuleInput) SetClientToken

SetClientToken sets the ClientToken field's value.

func (*CreateArchiveRuleInput) SetFilter

SetFilter sets the Filter field's value.

func (*CreateArchiveRuleInput) SetRuleName

SetRuleName sets the RuleName field's value.

func (CreateArchiveRuleInput) String

func (s CreateArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*CreateArchiveRuleInput) Validate

func (s *CreateArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type CreateArchiveRuleOutput

type CreateArchiveRuleOutput struct {
	// contains filtered or unexported fields
}

func (CreateArchiveRuleOutput) GoString

func (s CreateArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (CreateArchiveRuleOutput) String

func (s CreateArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Criterion

type Criterion struct {

	// A "contains" operator to match for the filter used to create the rule.
	Contains []*string `locationName:"contains" min:"1" type:"list"`

	// An "equals" operator to match for the filter used to create the rule.
	Eq []*string `locationName:"eq" min:"1" type:"list"`

	// An "exists" operator to match for the filter used to create the rule.
	Exists *bool `locationName:"exists" type:"boolean"`

	// A "not equals" operator to match for the filter used to create the rule.
	Neq []*string `locationName:"neq" min:"1" type:"list"`
	// contains filtered or unexported fields
}

The criteria to use in the filter that defines the archive rule. For more information on available filter keys, see IAM Access Analyzer filter keys (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html).

func (Criterion) GoString

func (s Criterion) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Criterion) SetContains

func (s *Criterion) SetContains(v []*string) *Criterion

SetContains sets the Contains field's value.

func (*Criterion) SetEq

func (s *Criterion) SetEq(v []*string) *Criterion

SetEq sets the Eq field's value.

func (*Criterion) SetExists

func (s *Criterion) SetExists(v bool) *Criterion

SetExists sets the Exists field's value.

func (*Criterion) SetNeq

func (s *Criterion) SetNeq(v []*string) *Criterion

SetNeq sets the Neq field's value.

func (Criterion) String

func (s Criterion) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Criterion) Validate

func (s *Criterion) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type DeleteAnalyzerInput

type DeleteAnalyzerInput struct {

	// The name of the analyzer to delete.
	//
	// AnalyzerName is a required field
	AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

	// A client token.
	ClientToken *string `location:"querystring" locationName:"clientToken" type:"string" idempotencyToken:"true"`
	// contains filtered or unexported fields
}

Deletes an analyzer.

func (DeleteAnalyzerInput) GoString

func (s DeleteAnalyzerInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DeleteAnalyzerInput) SetAnalyzerName

func (s *DeleteAnalyzerInput) SetAnalyzerName(v string) *DeleteAnalyzerInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*DeleteAnalyzerInput) SetClientToken

func (s *DeleteAnalyzerInput) SetClientToken(v string) *DeleteAnalyzerInput

SetClientToken sets the ClientToken field's value.

func (DeleteAnalyzerInput) String

func (s DeleteAnalyzerInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DeleteAnalyzerInput) Validate

func (s *DeleteAnalyzerInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type DeleteAnalyzerOutput

type DeleteAnalyzerOutput struct {
	// contains filtered or unexported fields
}

func (DeleteAnalyzerOutput) GoString

func (s DeleteAnalyzerOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (DeleteAnalyzerOutput) String

func (s DeleteAnalyzerOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type DeleteArchiveRuleInput

type DeleteArchiveRuleInput struct {

	// The name of the analyzer that associated with the archive rule to delete.
	//
	// AnalyzerName is a required field
	AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

	// A client token.
	ClientToken *string `location:"querystring" locationName:"clientToken" type:"string" idempotencyToken:"true"`

	// The name of the rule to delete.
	//
	// RuleName is a required field
	RuleName *string `location:"uri" locationName:"ruleName" min:"1" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Deletes an archive rule.

func (DeleteArchiveRuleInput) GoString

func (s DeleteArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DeleteArchiveRuleInput) SetAnalyzerName

func (s *DeleteArchiveRuleInput) SetAnalyzerName(v string) *DeleteArchiveRuleInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*DeleteArchiveRuleInput) SetClientToken

SetClientToken sets the ClientToken field's value.

func (*DeleteArchiveRuleInput) SetRuleName

SetRuleName sets the RuleName field's value.

func (DeleteArchiveRuleInput) String

func (s DeleteArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*DeleteArchiveRuleInput) Validate

func (s *DeleteArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type DeleteArchiveRuleOutput

type DeleteArchiveRuleOutput struct {
	// contains filtered or unexported fields
}

func (DeleteArchiveRuleOutput) GoString

func (s DeleteArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (DeleteArchiveRuleOutput) String

func (s DeleteArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type EbsSnapshotConfiguration

type EbsSnapshotConfiguration struct {

	// The groups that have access to the Amazon EBS volume snapshot. If the value
	// all is specified, then the Amazon EBS volume snapshot is public.
	//
	//    * If the configuration is for an existing Amazon EBS volume snapshot and
	//    you do not specify the groups, then the access preview uses the existing
	//    shared groups for the snapshot.
	//
	//    * If the access preview is for a new resource and you do not specify the
	//    groups, then the access preview considers the snapshot without any groups.
	//
	//    * To propose deletion of existing shared groups, you can specify an empty
	//    list for groups.
	Groups []*string `locationName:"groups" type:"list"`

	// The KMS key identifier for an encrypted Amazon EBS volume snapshot. The KMS
	// key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS
	// key.
	//
	//    * If the configuration is for an existing Amazon EBS volume snapshot and
	//    you do not specify the kmsKeyId, or you specify an empty string, then
	//    the access preview uses the existing kmsKeyId of the snapshot.
	//
	//    * If the access preview is for a new resource and you do not specify the
	//    kmsKeyId, the access preview considers the snapshot as unencrypted.
	KmsKeyId *string `locationName:"kmsKeyId" type:"string"`

	// The IDs of the Amazon Web Services accounts that have access to the Amazon
	// EBS volume snapshot.
	//
	//    * If the configuration is for an existing Amazon EBS volume snapshot and
	//    you do not specify the userIds, then the access preview uses the existing
	//    shared userIds for the snapshot.
	//
	//    * If the access preview is for a new resource and you do not specify the
	//    userIds, then the access preview considers the snapshot without any userIds.
	//
	//    * To propose deletion of existing shared accountIds, you can specify an
	//    empty list for userIds.
	UserIds []*string `locationName:"userIds" type:"list"`
	// contains filtered or unexported fields
}

The proposed access control configuration for an Amazon EBS volume snapshot. You can propose a configuration for a new Amazon EBS volume snapshot or an Amazon EBS volume snapshot that you own by specifying the user IDs, groups, and optional KMS encryption key. For more information, see ModifySnapshotAttribute (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifySnapshotAttribute.html).

func (EbsSnapshotConfiguration) GoString

func (s EbsSnapshotConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*EbsSnapshotConfiguration) SetGroups

SetGroups sets the Groups field's value.

func (*EbsSnapshotConfiguration) SetKmsKeyId

SetKmsKeyId sets the KmsKeyId field's value.

func (*EbsSnapshotConfiguration) SetUserIds

SetUserIds sets the UserIds field's value.

func (EbsSnapshotConfiguration) String

func (s EbsSnapshotConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type EcrRepositoryConfiguration

type EcrRepositoryConfiguration struct {

	// The JSON repository policy text to apply to the Amazon ECR repository. For
	// more information, see Private repository policy examples (https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html)
	// in the Amazon ECR User Guide.
	RepositoryPolicy *string `locationName:"repositoryPolicy" type:"string"`
	// contains filtered or unexported fields
}

The proposed access control configuration for an Amazon ECR repository. You can propose a configuration for a new Amazon ECR repository or an existing Amazon ECR repository that you own by specifying the Amazon ECR policy. For more information, see Repository (https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_Repository.html).

  • If the configuration is for an existing Amazon ECR repository and you do not specify the Amazon ECR policy, then the access preview uses the existing Amazon ECR policy for the repository.

  • If the access preview is for a new resource and you do not specify the policy, then the access preview assumes an Amazon ECR repository without a policy.

  • To propose deletion of an existing Amazon ECR repository policy, you can specify an empty string for the Amazon ECR policy.

func (EcrRepositoryConfiguration) GoString

func (s EcrRepositoryConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*EcrRepositoryConfiguration) SetRepositoryPolicy

SetRepositoryPolicy sets the RepositoryPolicy field's value.

func (EcrRepositoryConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type EfsFileSystemConfiguration

type EfsFileSystemConfiguration struct {

	// The JSON policy definition to apply to the Amazon EFS file system. For more
	// information on the elements that make up a file system policy, see Amazon
	// EFS Resource-based policies (https://docs.aws.amazon.com/efs/latest/ug/access-control-overview.html#access-control-manage-access-intro-resource-policies).
	FileSystemPolicy *string `locationName:"fileSystemPolicy" type:"string"`
	// contains filtered or unexported fields
}

The proposed access control configuration for an Amazon EFS file system. You can propose a configuration for a new Amazon EFS file system or an existing Amazon EFS file system that you own by specifying the Amazon EFS policy. For more information, see Using file systems in Amazon EFS (https://docs.aws.amazon.com/efs/latest/ug/using-fs.html).

  • If the configuration is for an existing Amazon EFS file system and you do not specify the Amazon EFS policy, then the access preview uses the existing Amazon EFS policy for the file system.

  • If the access preview is for a new resource and you do not specify the policy, then the access preview assumes an Amazon EFS file system without a policy.

  • To propose deletion of an existing Amazon EFS file system policy, you can specify an empty string for the Amazon EFS policy.

func (EfsFileSystemConfiguration) GoString

func (s EfsFileSystemConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*EfsFileSystemConfiguration) SetFileSystemPolicy

SetFileSystemPolicy sets the FileSystemPolicy field's value.

func (EfsFileSystemConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ExternalAccessDetails

type ExternalAccessDetails struct {

	// The action in the analyzed policy statement that an external principal has
	// permission to use.
	Action []*string `locationName:"action" type:"list"`

	// The condition in the analyzed policy statement that resulted in an external
	// access finding.
	//
	// Condition is a required field
	Condition map[string]*string `locationName:"condition" type:"map" required:"true"`

	// Specifies whether the external access finding is public.
	IsPublic *bool `locationName:"isPublic" type:"boolean"`

	// The external principal that has access to a resource within the zone of trust.
	Principal map[string]*string `locationName:"principal" type:"map"`

	// The sources of the external access finding. This indicates how the access
	// that generated the finding is granted. It is populated for Amazon S3 bucket
	// findings.
	Sources []*FindingSource `locationName:"sources" type:"list"`
	// contains filtered or unexported fields
}

Contains information about an external access finding.

func (ExternalAccessDetails) GoString

func (s ExternalAccessDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ExternalAccessDetails) SetAction

SetAction sets the Action field's value.

func (*ExternalAccessDetails) SetCondition

func (s *ExternalAccessDetails) SetCondition(v map[string]*string) *ExternalAccessDetails

SetCondition sets the Condition field's value.

func (*ExternalAccessDetails) SetIsPublic

SetIsPublic sets the IsPublic field's value.

func (*ExternalAccessDetails) SetPrincipal

func (s *ExternalAccessDetails) SetPrincipal(v map[string]*string) *ExternalAccessDetails

SetPrincipal sets the Principal field's value.

func (*ExternalAccessDetails) SetSources

SetSources sets the Sources field's value.

func (ExternalAccessDetails) String

func (s ExternalAccessDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Finding

type Finding struct {

	// The action in the analyzed policy statement that an external principal has
	// permission to use.
	Action []*string `locationName:"action" type:"list"`

	// The time at which the resource was analyzed.
	//
	// AnalyzedAt is a required field
	AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The condition in the analyzed policy statement that resulted in a finding.
	//
	// Condition is a required field
	Condition map[string]*string `locationName:"condition" type:"map" required:"true"`

	// The time at which the finding was generated.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// An error.
	Error *string `locationName:"error" type:"string"`

	// The ID of the finding.
	//
	// Id is a required field
	Id *string `locationName:"id" type:"string" required:"true"`

	// Indicates whether the policy that generated the finding allows public access
	// to the resource.
	IsPublic *bool `locationName:"isPublic" type:"boolean"`

	// The external principal that has access to a resource within the zone of trust.
	Principal map[string]*string `locationName:"principal" type:"map"`

	// The resource that an external principal has access to.
	Resource *string `locationName:"resource" type:"string"`

	// The Amazon Web Services account ID that owns the resource.
	//
	// ResourceOwnerAccount is a required field
	ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

	// The type of the resource identified in the finding.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

	// The sources of the finding. This indicates how the access that generated
	// the finding is granted. It is populated for Amazon S3 bucket findings.
	Sources []*FindingSource `locationName:"sources" type:"list"`

	// The current status of the finding.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`

	// The time at which the finding was updated.
	//
	// UpdatedAt is a required field
	UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
	// contains filtered or unexported fields
}

Contains information about a finding.

func (Finding) GoString

func (s Finding) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Finding) SetAction

func (s *Finding) SetAction(v []*string) *Finding

SetAction sets the Action field's value.

func (*Finding) SetAnalyzedAt

func (s *Finding) SetAnalyzedAt(v time.Time) *Finding

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*Finding) SetCondition

func (s *Finding) SetCondition(v map[string]*string) *Finding

SetCondition sets the Condition field's value.

func (*Finding) SetCreatedAt

func (s *Finding) SetCreatedAt(v time.Time) *Finding

SetCreatedAt sets the CreatedAt field's value.

func (*Finding) SetError

func (s *Finding) SetError(v string) *Finding

SetError sets the Error field's value.

func (*Finding) SetId

func (s *Finding) SetId(v string) *Finding

SetId sets the Id field's value.

func (*Finding) SetIsPublic

func (s *Finding) SetIsPublic(v bool) *Finding

SetIsPublic sets the IsPublic field's value.

func (*Finding) SetPrincipal

func (s *Finding) SetPrincipal(v map[string]*string) *Finding

SetPrincipal sets the Principal field's value.

func (*Finding) SetResource

func (s *Finding) SetResource(v string) *Finding

SetResource sets the Resource field's value.

func (*Finding) SetResourceOwnerAccount

func (s *Finding) SetResourceOwnerAccount(v string) *Finding

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*Finding) SetResourceType

func (s *Finding) SetResourceType(v string) *Finding

SetResourceType sets the ResourceType field's value.

func (*Finding) SetSources

func (s *Finding) SetSources(v []*FindingSource) *Finding

SetSources sets the Sources field's value.

func (*Finding) SetStatus

func (s *Finding) SetStatus(v string) *Finding

SetStatus sets the Status field's value.

func (*Finding) SetUpdatedAt

func (s *Finding) SetUpdatedAt(v time.Time) *Finding

SetUpdatedAt sets the UpdatedAt field's value.

func (Finding) String

func (s Finding) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingDetails

type FindingDetails struct {

	// The details for an external access analyzer finding.
	ExternalAccessDetails *ExternalAccessDetails `locationName:"externalAccessDetails" type:"structure"`

	// The details for an unused access analyzer finding with an unused IAM role
	// finding type.
	UnusedIamRoleDetails *UnusedIamRoleDetails `locationName:"unusedIamRoleDetails" type:"structure"`

	// The details for an unused access analyzer finding with an unused IAM user
	// access key finding type.
	UnusedIamUserAccessKeyDetails *UnusedIamUserAccessKeyDetails `locationName:"unusedIamUserAccessKeyDetails" type:"structure"`

	// The details for an unused access analyzer finding with an unused IAM user
	// password finding type.
	UnusedIamUserPasswordDetails *UnusedIamUserPasswordDetails `locationName:"unusedIamUserPasswordDetails" type:"structure"`

	// The details for an unused access analyzer finding with an unused permission
	// finding type.
	UnusedPermissionDetails *UnusedPermissionDetails `locationName:"unusedPermissionDetails" type:"structure"`
	// contains filtered or unexported fields
}

Contains information about an external access or unused access finding. Only one parameter can be used in a FindingDetails object.

func (FindingDetails) GoString

func (s FindingDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingDetails) SetExternalAccessDetails

func (s *FindingDetails) SetExternalAccessDetails(v *ExternalAccessDetails) *FindingDetails

SetExternalAccessDetails sets the ExternalAccessDetails field's value.

func (*FindingDetails) SetUnusedIamRoleDetails

func (s *FindingDetails) SetUnusedIamRoleDetails(v *UnusedIamRoleDetails) *FindingDetails

SetUnusedIamRoleDetails sets the UnusedIamRoleDetails field's value.

func (*FindingDetails) SetUnusedIamUserAccessKeyDetails

func (s *FindingDetails) SetUnusedIamUserAccessKeyDetails(v *UnusedIamUserAccessKeyDetails) *FindingDetails

SetUnusedIamUserAccessKeyDetails sets the UnusedIamUserAccessKeyDetails field's value.

func (*FindingDetails) SetUnusedIamUserPasswordDetails

func (s *FindingDetails) SetUnusedIamUserPasswordDetails(v *UnusedIamUserPasswordDetails) *FindingDetails

SetUnusedIamUserPasswordDetails sets the UnusedIamUserPasswordDetails field's value.

func (*FindingDetails) SetUnusedPermissionDetails

func (s *FindingDetails) SetUnusedPermissionDetails(v *UnusedPermissionDetails) *FindingDetails

SetUnusedPermissionDetails sets the UnusedPermissionDetails field's value.

func (FindingDetails) String

func (s FindingDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingSource

type FindingSource struct {

	// Includes details about how the access that generated the finding is granted.
	// This is populated for Amazon S3 bucket findings.
	Detail *FindingSourceDetail `locationName:"detail" type:"structure"`

	// Indicates the type of access that generated the finding.
	//
	// Type is a required field
	Type *string `locationName:"type" type:"string" required:"true" enum:"FindingSourceType"`
	// contains filtered or unexported fields
}

The source of the finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.

func (FindingSource) GoString

func (s FindingSource) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingSource) SetDetail

SetDetail sets the Detail field's value.

func (*FindingSource) SetType

func (s *FindingSource) SetType(v string) *FindingSource

SetType sets the Type field's value.

func (FindingSource) String

func (s FindingSource) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingSourceDetail

type FindingSourceDetail struct {

	// The account of the cross-account access point that generated the finding.
	AccessPointAccount *string `locationName:"accessPointAccount" type:"string"`

	// The ARN of the access point that generated the finding. The ARN format depends
	// on whether the ARN represents an access point or a multi-region access point.
	AccessPointArn *string `locationName:"accessPointArn" type:"string"`
	// contains filtered or unexported fields
}

Includes details about how the access that generated the finding is granted. This is populated for Amazon S3 bucket findings.

func (FindingSourceDetail) GoString

func (s FindingSourceDetail) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingSourceDetail) SetAccessPointAccount

func (s *FindingSourceDetail) SetAccessPointAccount(v string) *FindingSourceDetail

SetAccessPointAccount sets the AccessPointAccount field's value.

func (*FindingSourceDetail) SetAccessPointArn

func (s *FindingSourceDetail) SetAccessPointArn(v string) *FindingSourceDetail

SetAccessPointArn sets the AccessPointArn field's value.

func (FindingSourceDetail) String

func (s FindingSourceDetail) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingSummary

type FindingSummary struct {

	// The action in the analyzed policy statement that an external principal has
	// permission to use.
	Action []*string `locationName:"action" type:"list"`

	// The time at which the resource-based policy that generated the finding was
	// analyzed.
	//
	// AnalyzedAt is a required field
	AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The condition in the analyzed policy statement that resulted in a finding.
	//
	// Condition is a required field
	Condition map[string]*string `locationName:"condition" type:"map" required:"true"`

	// The time at which the finding was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The error that resulted in an Error finding.
	Error *string `locationName:"error" type:"string"`

	// The ID of the finding.
	//
	// Id is a required field
	Id *string `locationName:"id" type:"string" required:"true"`

	// Indicates whether the finding reports a resource that has a policy that allows
	// public access.
	IsPublic *bool `locationName:"isPublic" type:"boolean"`

	// The external principal that has access to a resource within the zone of trust.
	Principal map[string]*string `locationName:"principal" type:"map"`

	// The resource that the external principal has access to.
	Resource *string `locationName:"resource" type:"string"`

	// The Amazon Web Services account ID that owns the resource.
	//
	// ResourceOwnerAccount is a required field
	ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

	// The type of the resource that the external principal has access to.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

	// The sources of the finding. This indicates how the access that generated
	// the finding is granted. It is populated for Amazon S3 bucket findings.
	Sources []*FindingSource `locationName:"sources" type:"list"`

	// The status of the finding.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`

	// The time at which the finding was most recently updated.
	//
	// UpdatedAt is a required field
	UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
	// contains filtered or unexported fields
}

Contains information about a finding.

func (FindingSummary) GoString

func (s FindingSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingSummary) SetAction

func (s *FindingSummary) SetAction(v []*string) *FindingSummary

SetAction sets the Action field's value.

func (*FindingSummary) SetAnalyzedAt

func (s *FindingSummary) SetAnalyzedAt(v time.Time) *FindingSummary

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*FindingSummary) SetCondition

func (s *FindingSummary) SetCondition(v map[string]*string) *FindingSummary

SetCondition sets the Condition field's value.

func (*FindingSummary) SetCreatedAt

func (s *FindingSummary) SetCreatedAt(v time.Time) *FindingSummary

SetCreatedAt sets the CreatedAt field's value.

func (*FindingSummary) SetError

func (s *FindingSummary) SetError(v string) *FindingSummary

SetError sets the Error field's value.

func (*FindingSummary) SetId

func (s *FindingSummary) SetId(v string) *FindingSummary

SetId sets the Id field's value.

func (*FindingSummary) SetIsPublic

func (s *FindingSummary) SetIsPublic(v bool) *FindingSummary

SetIsPublic sets the IsPublic field's value.

func (*FindingSummary) SetPrincipal

func (s *FindingSummary) SetPrincipal(v map[string]*string) *FindingSummary

SetPrincipal sets the Principal field's value.

func (*FindingSummary) SetResource

func (s *FindingSummary) SetResource(v string) *FindingSummary

SetResource sets the Resource field's value.

func (*FindingSummary) SetResourceOwnerAccount

func (s *FindingSummary) SetResourceOwnerAccount(v string) *FindingSummary

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*FindingSummary) SetResourceType

func (s *FindingSummary) SetResourceType(v string) *FindingSummary

SetResourceType sets the ResourceType field's value.

func (*FindingSummary) SetSources

func (s *FindingSummary) SetSources(v []*FindingSource) *FindingSummary

SetSources sets the Sources field's value.

func (*FindingSummary) SetStatus

func (s *FindingSummary) SetStatus(v string) *FindingSummary

SetStatus sets the Status field's value.

func (*FindingSummary) SetUpdatedAt

func (s *FindingSummary) SetUpdatedAt(v time.Time) *FindingSummary

SetUpdatedAt sets the UpdatedAt field's value.

func (FindingSummary) String

func (s FindingSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type FindingSummaryV2

type FindingSummaryV2 struct {

	// The time at which the resource-based policy or IAM entity that generated
	// the finding was analyzed.
	//
	// AnalyzedAt is a required field
	AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The time at which the finding was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The error that resulted in an Error finding.
	Error *string `locationName:"error" type:"string"`

	// The type of the external access or unused access finding.
	FindingType *string `locationName:"findingType" type:"string" enum:"FindingType"`

	// The ID of the finding.
	//
	// Id is a required field
	Id *string `locationName:"id" type:"string" required:"true"`

	// The resource that the external principal has access to.
	Resource *string `locationName:"resource" type:"string"`

	// The Amazon Web Services account ID that owns the resource.
	//
	// ResourceOwnerAccount is a required field
	ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

	// The type of the resource that the external principal has access to.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

	// The status of the finding.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`

	// The time at which the finding was most recently updated.
	//
	// UpdatedAt is a required field
	UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
	// contains filtered or unexported fields
}

Contains information about a finding.

func (FindingSummaryV2) GoString

func (s FindingSummaryV2) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*FindingSummaryV2) SetAnalyzedAt

func (s *FindingSummaryV2) SetAnalyzedAt(v time.Time) *FindingSummaryV2

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*FindingSummaryV2) SetCreatedAt

func (s *FindingSummaryV2) SetCreatedAt(v time.Time) *FindingSummaryV2

SetCreatedAt sets the CreatedAt field's value.

func (*FindingSummaryV2) SetError

func (s *FindingSummaryV2) SetError(v string) *FindingSummaryV2

SetError sets the Error field's value.

func (*FindingSummaryV2) SetFindingType

func (s *FindingSummaryV2) SetFindingType(v string) *FindingSummaryV2

SetFindingType sets the FindingType field's value.

func (*FindingSummaryV2) SetId

SetId sets the Id field's value.

func (*FindingSummaryV2) SetResource

func (s *FindingSummaryV2) SetResource(v string) *FindingSummaryV2

SetResource sets the Resource field's value.

func (*FindingSummaryV2) SetResourceOwnerAccount

func (s *FindingSummaryV2) SetResourceOwnerAccount(v string) *FindingSummaryV2

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*FindingSummaryV2) SetResourceType

func (s *FindingSummaryV2) SetResourceType(v string) *FindingSummaryV2

SetResourceType sets the ResourceType field's value.

func (*FindingSummaryV2) SetStatus

func (s *FindingSummaryV2) SetStatus(v string) *FindingSummaryV2

SetStatus sets the Status field's value.

func (*FindingSummaryV2) SetUpdatedAt

func (s *FindingSummaryV2) SetUpdatedAt(v time.Time) *FindingSummaryV2

SetUpdatedAt sets the UpdatedAt field's value.

func (FindingSummaryV2) String

func (s FindingSummaryV2) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GeneratedPolicy

type GeneratedPolicy struct {

	// The text to use as the content for the new policy. The policy is created
	// using the CreatePolicy (https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreatePolicy.html)
	// action.
	//
	// Policy is a required field
	Policy *string `locationName:"policy" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Contains the text for the generated policy.

func (GeneratedPolicy) GoString

func (s GeneratedPolicy) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GeneratedPolicy) SetPolicy

func (s *GeneratedPolicy) SetPolicy(v string) *GeneratedPolicy

SetPolicy sets the Policy field's value.

func (GeneratedPolicy) String

func (s GeneratedPolicy) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GeneratedPolicyProperties

type GeneratedPolicyProperties struct {

	// Lists details about the Trail used to generated policy.
	CloudTrailProperties *CloudTrailProperties `locationName:"cloudTrailProperties" type:"structure"`

	// This value is set to true if the generated policy contains all possible actions
	// for a service that IAM Access Analyzer identified from the CloudTrail trail
	// that you specified, and false otherwise.
	IsComplete *bool `locationName:"isComplete" type:"boolean"`

	// The ARN of the IAM entity (user or role) for which you are generating a policy.
	//
	// PrincipalArn is a required field
	PrincipalArn *string `locationName:"principalArn" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Contains the generated policy details.

func (GeneratedPolicyProperties) GoString

func (s GeneratedPolicyProperties) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GeneratedPolicyProperties) SetCloudTrailProperties

SetCloudTrailProperties sets the CloudTrailProperties field's value.

func (*GeneratedPolicyProperties) SetIsComplete

SetIsComplete sets the IsComplete field's value.

func (*GeneratedPolicyProperties) SetPrincipalArn

SetPrincipalArn sets the PrincipalArn field's value.

func (GeneratedPolicyProperties) String

func (s GeneratedPolicyProperties) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GeneratedPolicyResult

type GeneratedPolicyResult struct {

	// The text to use as the content for the new policy. The policy is created
	// using the CreatePolicy (https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreatePolicy.html)
	// action.
	GeneratedPolicies []*GeneratedPolicy `locationName:"generatedPolicies" type:"list"`

	// A GeneratedPolicyProperties object that contains properties of the generated
	// policy.
	//
	// Properties is a required field
	Properties *GeneratedPolicyProperties `locationName:"properties" type:"structure" required:"true"`
	// contains filtered or unexported fields
}

Contains the text for the generated policy and its details.

func (GeneratedPolicyResult) GoString

func (s GeneratedPolicyResult) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GeneratedPolicyResult) SetGeneratedPolicies

func (s *GeneratedPolicyResult) SetGeneratedPolicies(v []*GeneratedPolicy) *GeneratedPolicyResult

SetGeneratedPolicies sets the GeneratedPolicies field's value.

func (*GeneratedPolicyResult) SetProperties

SetProperties sets the Properties field's value.

func (GeneratedPolicyResult) String

func (s GeneratedPolicyResult) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetAccessPreviewInput

type GetAccessPreviewInput struct {

	// The unique ID for the access preview.
	//
	// AccessPreviewId is a required field
	AccessPreviewId *string `location:"uri" locationName:"accessPreviewId" type:"string" required:"true"`

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// used to generate the access preview.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`
	// contains filtered or unexported fields
}

func (GetAccessPreviewInput) GoString

func (s GetAccessPreviewInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAccessPreviewInput) SetAccessPreviewId

func (s *GetAccessPreviewInput) SetAccessPreviewId(v string) *GetAccessPreviewInput

SetAccessPreviewId sets the AccessPreviewId field's value.

func (*GetAccessPreviewInput) SetAnalyzerArn

func (s *GetAccessPreviewInput) SetAnalyzerArn(v string) *GetAccessPreviewInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (GetAccessPreviewInput) String

func (s GetAccessPreviewInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAccessPreviewInput) Validate

func (s *GetAccessPreviewInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetAccessPreviewOutput

type GetAccessPreviewOutput struct {

	// An object that contains information about the access preview.
	//
	// AccessPreview is a required field
	AccessPreview *AccessPreview `locationName:"accessPreview" type:"structure" required:"true"`
	// contains filtered or unexported fields
}

func (GetAccessPreviewOutput) GoString

func (s GetAccessPreviewOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAccessPreviewOutput) SetAccessPreview

SetAccessPreview sets the AccessPreview field's value.

func (GetAccessPreviewOutput) String

func (s GetAccessPreviewOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetAnalyzedResourceInput

type GetAnalyzedResourceInput struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// to retrieve information from.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

	// The ARN of the resource to retrieve information about.
	//
	// ResourceArn is a required field
	ResourceArn *string `location:"querystring" locationName:"resourceArn" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Retrieves an analyzed resource.

func (GetAnalyzedResourceInput) GoString

func (s GetAnalyzedResourceInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzedResourceInput) SetAnalyzerArn

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*GetAnalyzedResourceInput) SetResourceArn

SetResourceArn sets the ResourceArn field's value.

func (GetAnalyzedResourceInput) String

func (s GetAnalyzedResourceInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzedResourceInput) Validate

func (s *GetAnalyzedResourceInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetAnalyzedResourceOutput

type GetAnalyzedResourceOutput struct {

	// An AnalyzedResource object that contains information that IAM Access Analyzer
	// found when it analyzed the resource.
	Resource *AnalyzedResource `locationName:"resource" type:"structure"`
	// contains filtered or unexported fields
}

The response to the request.

func (GetAnalyzedResourceOutput) GoString

func (s GetAnalyzedResourceOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzedResourceOutput) SetResource

SetResource sets the Resource field's value.

func (GetAnalyzedResourceOutput) String

func (s GetAnalyzedResourceOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetAnalyzerInput

type GetAnalyzerInput struct {

	// The name of the analyzer retrieved.
	//
	// AnalyzerName is a required field
	AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Retrieves an analyzer.

func (GetAnalyzerInput) GoString

func (s GetAnalyzerInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzerInput) SetAnalyzerName

func (s *GetAnalyzerInput) SetAnalyzerName(v string) *GetAnalyzerInput

SetAnalyzerName sets the AnalyzerName field's value.

func (GetAnalyzerInput) String

func (s GetAnalyzerInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzerInput) Validate

func (s *GetAnalyzerInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetAnalyzerOutput

type GetAnalyzerOutput struct {

	// An AnalyzerSummary object that contains information about the analyzer.
	//
	// Analyzer is a required field
	Analyzer *AnalyzerSummary `locationName:"analyzer" type:"structure" required:"true"`
	// contains filtered or unexported fields
}

The response to the request.

func (GetAnalyzerOutput) GoString

func (s GetAnalyzerOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetAnalyzerOutput) SetAnalyzer

SetAnalyzer sets the Analyzer field's value.

func (GetAnalyzerOutput) String

func (s GetAnalyzerOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetArchiveRuleInput

type GetArchiveRuleInput struct {

	// The name of the analyzer to retrieve rules from.
	//
	// AnalyzerName is a required field
	AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

	// The name of the rule to retrieve.
	//
	// RuleName is a required field
	RuleName *string `location:"uri" locationName:"ruleName" min:"1" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Retrieves an archive rule.

func (GetArchiveRuleInput) GoString

func (s GetArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetArchiveRuleInput) SetAnalyzerName

func (s *GetArchiveRuleInput) SetAnalyzerName(v string) *GetArchiveRuleInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*GetArchiveRuleInput) SetRuleName

func (s *GetArchiveRuleInput) SetRuleName(v string) *GetArchiveRuleInput

SetRuleName sets the RuleName field's value.

func (GetArchiveRuleInput) String

func (s GetArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetArchiveRuleInput) Validate

func (s *GetArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetArchiveRuleOutput

type GetArchiveRuleOutput struct {

	// Contains information about an archive rule.
	//
	// ArchiveRule is a required field
	ArchiveRule *ArchiveRuleSummary `locationName:"archiveRule" type:"structure" required:"true"`
	// contains filtered or unexported fields
}

The response to the request.

func (GetArchiveRuleOutput) GoString

func (s GetArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetArchiveRuleOutput) SetArchiveRule

SetArchiveRule sets the ArchiveRule field's value.

func (GetArchiveRuleOutput) String

func (s GetArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetFindingInput

type GetFindingInput struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// that generated the finding.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

	// The ID of the finding to retrieve.
	//
	// Id is a required field
	Id *string `location:"uri" locationName:"id" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Retrieves a finding.

func (GetFindingInput) GoString

func (s GetFindingInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingInput) SetAnalyzerArn

func (s *GetFindingInput) SetAnalyzerArn(v string) *GetFindingInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*GetFindingInput) SetId

func (s *GetFindingInput) SetId(v string) *GetFindingInput

SetId sets the Id field's value.

func (GetFindingInput) String

func (s GetFindingInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingInput) Validate

func (s *GetFindingInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetFindingOutput

type GetFindingOutput struct {

	// A finding object that contains finding details.
	Finding *Finding `locationName:"finding" type:"structure"`
	// contains filtered or unexported fields
}

The response to the request.

func (GetFindingOutput) GoString

func (s GetFindingOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingOutput) SetFinding

func (s *GetFindingOutput) SetFinding(v *Finding) *GetFindingOutput

SetFinding sets the Finding field's value.

func (GetFindingOutput) String

func (s GetFindingOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetFindingV2Input

type GetFindingV2Input struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// that generated the finding.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

	// The ID of the finding to retrieve.
	//
	// Id is a required field
	Id *string `location:"uri" locationName:"id" type:"string" required:"true"`

	// The maximum number of results to return in the response.
	MaxResults *int64 `location:"querystring" locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `location:"querystring" locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

func (GetFindingV2Input) GoString

func (s GetFindingV2Input) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingV2Input) SetAnalyzerArn

func (s *GetFindingV2Input) SetAnalyzerArn(v string) *GetFindingV2Input

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*GetFindingV2Input) SetId

SetId sets the Id field's value.

func (*GetFindingV2Input) SetMaxResults

func (s *GetFindingV2Input) SetMaxResults(v int64) *GetFindingV2Input

SetMaxResults sets the MaxResults field's value.

func (*GetFindingV2Input) SetNextToken

func (s *GetFindingV2Input) SetNextToken(v string) *GetFindingV2Input

SetNextToken sets the NextToken field's value.

func (GetFindingV2Input) String

func (s GetFindingV2Input) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingV2Input) Validate

func (s *GetFindingV2Input) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetFindingV2Output

type GetFindingV2Output struct {

	// The time at which the resource-based policy or IAM entity that generated
	// the finding was analyzed.
	//
	// AnalyzedAt is a required field
	AnalyzedAt *time.Time `locationName:"analyzedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The time at which the finding was created.
	//
	// CreatedAt is a required field
	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// An error.
	Error *string `locationName:"error" type:"string"`

	// A localized message that explains the finding and provides guidance on how
	// to address it.
	//
	// FindingDetails is a required field
	FindingDetails []*FindingDetails `locationName:"findingDetails" type:"list" required:"true"`

	// The type of the finding. For external access analyzers, the type is ExternalAccess.
	// For unused access analyzers, the type can be UnusedIAMRole, UnusedIAMUserAccessKey,
	// UnusedIAMUserPassword, or UnusedPermission.
	FindingType *string `locationName:"findingType" type:"string" enum:"FindingType"`

	// The ID of the finding to retrieve.
	//
	// Id is a required field
	Id *string `locationName:"id" type:"string" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`

	// The resource that generated the finding.
	Resource *string `locationName:"resource" type:"string"`

	// Tye Amazon Web Services account ID that owns the resource.
	//
	// ResourceOwnerAccount is a required field
	ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string" required:"true"`

	// The type of the resource identified in the finding.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true" enum:"ResourceType"`

	// The status of the finding.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatus"`

	// The time at which the finding was updated.
	//
	// UpdatedAt is a required field
	UpdatedAt *time.Time `locationName:"updatedAt" type:"timestamp" timestampFormat:"iso8601" required:"true"`
	// contains filtered or unexported fields
}

func (GetFindingV2Output) GoString

func (s GetFindingV2Output) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetFindingV2Output) SetAnalyzedAt

func (s *GetFindingV2Output) SetAnalyzedAt(v time.Time) *GetFindingV2Output

SetAnalyzedAt sets the AnalyzedAt field's value.

func (*GetFindingV2Output) SetCreatedAt

func (s *GetFindingV2Output) SetCreatedAt(v time.Time) *GetFindingV2Output

SetCreatedAt sets the CreatedAt field's value.

func (*GetFindingV2Output) SetError

SetError sets the Error field's value.

func (*GetFindingV2Output) SetFindingDetails

func (s *GetFindingV2Output) SetFindingDetails(v []*FindingDetails) *GetFindingV2Output

SetFindingDetails sets the FindingDetails field's value.

func (*GetFindingV2Output) SetFindingType

func (s *GetFindingV2Output) SetFindingType(v string) *GetFindingV2Output

SetFindingType sets the FindingType field's value.

func (*GetFindingV2Output) SetId

SetId sets the Id field's value.

func (*GetFindingV2Output) SetNextToken

func (s *GetFindingV2Output) SetNextToken(v string) *GetFindingV2Output

SetNextToken sets the NextToken field's value.

func (*GetFindingV2Output) SetResource

func (s *GetFindingV2Output) SetResource(v string) *GetFindingV2Output

SetResource sets the Resource field's value.

func (*GetFindingV2Output) SetResourceOwnerAccount

func (s *GetFindingV2Output) SetResourceOwnerAccount(v string) *GetFindingV2Output

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (*GetFindingV2Output) SetResourceType

func (s *GetFindingV2Output) SetResourceType(v string) *GetFindingV2Output

SetResourceType sets the ResourceType field's value.

func (*GetFindingV2Output) SetStatus

func (s *GetFindingV2Output) SetStatus(v string) *GetFindingV2Output

SetStatus sets the Status field's value.

func (*GetFindingV2Output) SetUpdatedAt

func (s *GetFindingV2Output) SetUpdatedAt(v time.Time) *GetFindingV2Output

SetUpdatedAt sets the UpdatedAt field's value.

func (GetFindingV2Output) String

func (s GetFindingV2Output) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type GetGeneratedPolicyInput

type GetGeneratedPolicyInput struct {

	// The level of detail that you want to generate. You can specify whether to
	// generate policies with placeholders for resource ARNs for actions that support
	// resource level granularity in policies.
	//
	// For example, in the resource section of a policy, you can receive a placeholder
	// such as "Resource":"arn:aws:s3:::${BucketName}" instead of "*".
	IncludeResourcePlaceholders *bool `location:"querystring" locationName:"includeResourcePlaceholders" type:"boolean"`

	// The level of detail that you want to generate. You can specify whether to
	// generate service-level policies.
	//
	// IAM Access Analyzer uses iam:servicelastaccessed to identify services that
	// have been used recently to create this service-level template.
	IncludeServiceLevelTemplate *bool `location:"querystring" locationName:"includeServiceLevelTemplate" type:"boolean"`

	// The JobId that is returned by the StartPolicyGeneration operation. The JobId
	// can be used with GetGeneratedPolicy to retrieve the generated policies or
	// used with CancelPolicyGeneration to cancel the policy generation request.
	//
	// JobId is a required field
	JobId *string `location:"uri" locationName:"jobId" type:"string" required:"true"`
	// contains filtered or unexported fields
}

func (GetGeneratedPolicyInput) GoString

func (s GetGeneratedPolicyInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetGeneratedPolicyInput) SetIncludeResourcePlaceholders

func (s *GetGeneratedPolicyInput) SetIncludeResourcePlaceholders(v bool) *GetGeneratedPolicyInput

SetIncludeResourcePlaceholders sets the IncludeResourcePlaceholders field's value.

func (*GetGeneratedPolicyInput) SetIncludeServiceLevelTemplate

func (s *GetGeneratedPolicyInput) SetIncludeServiceLevelTemplate(v bool) *GetGeneratedPolicyInput

SetIncludeServiceLevelTemplate sets the IncludeServiceLevelTemplate field's value.

func (*GetGeneratedPolicyInput) SetJobId

SetJobId sets the JobId field's value.

func (GetGeneratedPolicyInput) String

func (s GetGeneratedPolicyInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetGeneratedPolicyInput) Validate

func (s *GetGeneratedPolicyInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type GetGeneratedPolicyOutput

type GetGeneratedPolicyOutput struct {

	// A GeneratedPolicyResult object that contains the generated policies and associated
	// details.
	//
	// GeneratedPolicyResult is a required field
	GeneratedPolicyResult *GeneratedPolicyResult `locationName:"generatedPolicyResult" type:"structure" required:"true"`

	// A GeneratedPolicyDetails object that contains details about the generated
	// policy.
	//
	// JobDetails is a required field
	JobDetails *JobDetails `locationName:"jobDetails" type:"structure" required:"true"`
	// contains filtered or unexported fields
}

func (GetGeneratedPolicyOutput) GoString

func (s GetGeneratedPolicyOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*GetGeneratedPolicyOutput) SetGeneratedPolicyResult

SetGeneratedPolicyResult sets the GeneratedPolicyResult field's value.

func (*GetGeneratedPolicyOutput) SetJobDetails

SetJobDetails sets the JobDetails field's value.

func (GetGeneratedPolicyOutput) String

func (s GetGeneratedPolicyOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type IamRoleConfiguration

type IamRoleConfiguration struct {

	// The proposed trust policy for the IAM role.
	TrustPolicy *string `locationName:"trustPolicy" type:"string"`
	// contains filtered or unexported fields
}

The proposed access control configuration for an IAM role. You can propose a configuration for a new IAM role or an existing IAM role that you own by specifying the trust policy. If the configuration is for a new IAM role, you must specify the trust policy. If the configuration is for an existing IAM role that you own and you do not propose the trust policy, the access preview uses the existing trust policy for the role. The proposed trust policy cannot be an empty string. For more information about role trust policy limits, see IAM and STS quotas (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html).

func (IamRoleConfiguration) GoString

func (s IamRoleConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*IamRoleConfiguration) SetTrustPolicy

func (s *IamRoleConfiguration) SetTrustPolicy(v string) *IamRoleConfiguration

SetTrustPolicy sets the TrustPolicy field's value.

func (IamRoleConfiguration) String

func (s IamRoleConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type InlineArchiveRule

type InlineArchiveRule struct {

	// The condition and values for a criterion.
	//
	// Filter is a required field
	Filter map[string]*Criterion `locationName:"filter" type:"map" required:"true"`

	// The name of the rule.
	//
	// RuleName is a required field
	RuleName *string `locationName:"ruleName" min:"1" type:"string" required:"true"`
	// contains filtered or unexported fields
}

An criterion statement in an archive rule. Each archive rule may have multiple criteria.

func (InlineArchiveRule) GoString

func (s InlineArchiveRule) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*InlineArchiveRule) SetFilter

func (s *InlineArchiveRule) SetFilter(v map[string]*Criterion) *InlineArchiveRule

SetFilter sets the Filter field's value.

func (*InlineArchiveRule) SetRuleName

func (s *InlineArchiveRule) SetRuleName(v string) *InlineArchiveRule

SetRuleName sets the RuleName field's value.

func (InlineArchiveRule) String

func (s InlineArchiveRule) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*InlineArchiveRule) Validate

func (s *InlineArchiveRule) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type InternalServerException

type InternalServerException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	Message_ *string `locationName:"message" type:"string"`

	// The seconds to wait to retry.
	RetryAfterSeconds *int64 `location:"header" locationName:"Retry-After" type:"integer"`
	// contains filtered or unexported fields
}

Internal server error.

func (*InternalServerException) Code

func (s *InternalServerException) Code() string

Code returns the exception type name.

func (*InternalServerException) Error

func (s *InternalServerException) Error() string

func (InternalServerException) GoString

func (s InternalServerException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*InternalServerException) Message

func (s *InternalServerException) Message() string

Message returns the exception's message.

func (*InternalServerException) OrigErr

func (s *InternalServerException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*InternalServerException) RequestID

func (s *InternalServerException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*InternalServerException) StatusCode

func (s *InternalServerException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (InternalServerException) String

func (s InternalServerException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type InternetConfiguration

type InternetConfiguration struct {
	// contains filtered or unexported fields
}

This configuration sets the network origin for the Amazon S3 access point or multi-region access point to Internet.

func (InternetConfiguration) GoString

func (s InternetConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (InternetConfiguration) String

func (s InternetConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type InvalidParameterException

type InvalidParameterException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	Message_ *string `locationName:"message" type:"string"`
	// contains filtered or unexported fields
}

The specified parameter is invalid.

func (*InvalidParameterException) Code

Code returns the exception type name.

func (*InvalidParameterException) Error

func (s *InvalidParameterException) Error() string

func (InvalidParameterException) GoString

func (s InvalidParameterException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*InvalidParameterException) Message

func (s *InvalidParameterException) Message() string

Message returns the exception's message.

func (*InvalidParameterException) OrigErr

func (s *InvalidParameterException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*InvalidParameterException) RequestID

func (s *InvalidParameterException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*InvalidParameterException) StatusCode

func (s *InvalidParameterException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (InvalidParameterException) String

func (s InvalidParameterException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type JobDetails

type JobDetails struct {

	// A timestamp of when the job was completed.
	CompletedOn *time.Time `locationName:"completedOn" type:"timestamp" timestampFormat:"iso8601"`

	// The job error for the policy generation request.
	JobError *JobError `locationName:"jobError" type:"structure"`

	// The JobId that is returned by the StartPolicyGeneration operation. The JobId
	// can be used with GetGeneratedPolicy to retrieve the generated policies or
	// used with CancelPolicyGeneration to cancel the policy generation request.
	//
	// JobId is a required field
	JobId *string `locationName:"jobId" type:"string" required:"true"`

	// A timestamp of when the job was started.
	//
	// StartedOn is a required field
	StartedOn *time.Time `locationName:"startedOn" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The status of the job request.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"JobStatus"`
	// contains filtered or unexported fields
}

Contains details about the policy generation request.

func (JobDetails) GoString

func (s JobDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*JobDetails) SetCompletedOn

func (s *JobDetails) SetCompletedOn(v time.Time) *JobDetails

SetCompletedOn sets the CompletedOn field's value.

func (*JobDetails) SetJobError

func (s *JobDetails) SetJobError(v *JobError) *JobDetails

SetJobError sets the JobError field's value.

func (*JobDetails) SetJobId

func (s *JobDetails) SetJobId(v string) *JobDetails

SetJobId sets the JobId field's value.

func (*JobDetails) SetStartedOn

func (s *JobDetails) SetStartedOn(v time.Time) *JobDetails

SetStartedOn sets the StartedOn field's value.

func (*JobDetails) SetStatus

func (s *JobDetails) SetStatus(v string) *JobDetails

SetStatus sets the Status field's value.

func (JobDetails) String

func (s JobDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type JobError

type JobError struct {

	// The job error code.
	//
	// Code is a required field
	Code *string `locationName:"code" type:"string" required:"true" enum:"JobErrorCode"`

	// Specific information about the error. For example, which service quota was
	// exceeded or which resource was not found.
	//
	// Message is a required field
	Message *string `locationName:"message" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Contains the details about the policy generation error.

func (JobError) GoString

func (s JobError) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*JobError) SetCode

func (s *JobError) SetCode(v string) *JobError

SetCode sets the Code field's value.

func (*JobError) SetMessage

func (s *JobError) SetMessage(v string) *JobError

SetMessage sets the Message field's value.

func (JobError) String

func (s JobError) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type KmsGrantConfiguration

type KmsGrantConfiguration struct {

	// Use this structure to propose allowing cryptographic operations (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations)
	// in the grant only when the operation request includes the specified encryption
	// context (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context).
	Constraints *KmsGrantConstraints `locationName:"constraints" type:"structure"`

	// The principal that is given permission to perform the operations that the
	// grant permits.
	//
	// GranteePrincipal is a required field
	GranteePrincipal *string `locationName:"granteePrincipal" type:"string" required:"true"`

	// The Amazon Web Services account under which the grant was issued. The account
	// is used to propose KMS grants issued by accounts other than the owner of
	// the key.
	//
	// IssuingAccount is a required field
	IssuingAccount *string `locationName:"issuingAccount" type:"string" required:"true"`

	// A list of operations that the grant permits.
	//
	// Operations is a required field
	Operations []*string `locationName:"operations" type:"list" required:"true" enum:"KmsGrantOperation"`

	// The principal that is given permission to retire the grant by using RetireGrant
	// (https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html)
	// operation.
	RetiringPrincipal *string `locationName:"retiringPrincipal" type:"string"`
	// contains filtered or unexported fields
}

A proposed grant configuration for a KMS key. For more information, see CreateGrant (https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html).

func (KmsGrantConfiguration) GoString

func (s KmsGrantConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*KmsGrantConfiguration) SetConstraints

SetConstraints sets the Constraints field's value.

func (*KmsGrantConfiguration) SetGranteePrincipal

func (s *KmsGrantConfiguration) SetGranteePrincipal(v string) *KmsGrantConfiguration

SetGranteePrincipal sets the GranteePrincipal field's value.

func (*KmsGrantConfiguration) SetIssuingAccount

func (s *KmsGrantConfiguration) SetIssuingAccount(v string) *KmsGrantConfiguration

SetIssuingAccount sets the IssuingAccount field's value.

func (*KmsGrantConfiguration) SetOperations

func (s *KmsGrantConfiguration) SetOperations(v []*string) *KmsGrantConfiguration

SetOperations sets the Operations field's value.

func (*KmsGrantConfiguration) SetRetiringPrincipal

func (s *KmsGrantConfiguration) SetRetiringPrincipal(v string) *KmsGrantConfiguration

SetRetiringPrincipal sets the RetiringPrincipal field's value.

func (KmsGrantConfiguration) String

func (s KmsGrantConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*KmsGrantConfiguration) Validate

func (s *KmsGrantConfiguration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type KmsGrantConstraints

type KmsGrantConstraints struct {

	// A list of key-value pairs that must match the encryption context in the cryptographic
	// operation (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations)
	// request. The grant allows the operation only when the encryption context
	// in the request is the same as the encryption context specified in this constraint.
	EncryptionContextEquals map[string]*string `locationName:"encryptionContextEquals" type:"map"`

	// A list of key-value pairs that must be included in the encryption context
	// of the cryptographic operation (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations)
	// request. The grant allows the cryptographic operation only when the encryption
	// context in the request includes the key-value pairs specified in this constraint,
	// although it can include additional key-value pairs.
	EncryptionContextSubset map[string]*string `locationName:"encryptionContextSubset" type:"map"`
	// contains filtered or unexported fields
}

Use this structure to propose allowing cryptographic operations (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) in the grant only when the operation request includes the specified encryption context (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context). You can specify only one type of encryption context. An empty map is treated as not specified. For more information, see GrantConstraints (https://docs.aws.amazon.com/kms/latest/APIReference/API_GrantConstraints.html).

func (KmsGrantConstraints) GoString

func (s KmsGrantConstraints) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*KmsGrantConstraints) SetEncryptionContextEquals

func (s *KmsGrantConstraints) SetEncryptionContextEquals(v map[string]*string) *KmsGrantConstraints

SetEncryptionContextEquals sets the EncryptionContextEquals field's value.

func (*KmsGrantConstraints) SetEncryptionContextSubset

func (s *KmsGrantConstraints) SetEncryptionContextSubset(v map[string]*string) *KmsGrantConstraints

SetEncryptionContextSubset sets the EncryptionContextSubset field's value.

func (KmsGrantConstraints) String

func (s KmsGrantConstraints) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type KmsKeyConfiguration

type KmsKeyConfiguration struct {

	// A list of proposed grant configurations for the KMS key. If the proposed
	// grant configuration is for an existing key, the access preview uses the proposed
	// list of grant configurations in place of the existing grants. Otherwise,
	// the access preview uses the existing grants for the key.
	Grants []*KmsGrantConfiguration `locationName:"grants" type:"list"`

	// Resource policy configuration for the KMS key. The only valid value for the
	// name of the key policy is default. For more information, see Default key
	// policy (https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default).
	KeyPolicies map[string]*string `locationName:"keyPolicies" type:"map"`
	// contains filtered or unexported fields
}

Proposed access control configuration for a KMS key. You can propose a configuration for a new KMS key or an existing KMS key that you own by specifying the key policy and KMS grant configuration. If the configuration is for an existing key and you do not specify the key policy, the access preview uses the existing policy for the key. If the access preview is for a new resource and you do not specify the key policy, then the access preview uses the default key policy. The proposed key policy cannot be an empty string. For more information, see Default key policy (https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default). For more information about key policy limits, see Resource quotas (https://docs.aws.amazon.com/kms/latest/developerguide/resource-limits.html).

func (KmsKeyConfiguration) GoString

func (s KmsKeyConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*KmsKeyConfiguration) SetGrants

SetGrants sets the Grants field's value.

func (*KmsKeyConfiguration) SetKeyPolicies

func (s *KmsKeyConfiguration) SetKeyPolicies(v map[string]*string) *KmsKeyConfiguration

SetKeyPolicies sets the KeyPolicies field's value.

func (KmsKeyConfiguration) String

func (s KmsKeyConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*KmsKeyConfiguration) Validate

func (s *KmsKeyConfiguration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListAccessPreviewFindingsInput

type ListAccessPreviewFindingsInput struct {

	// The unique ID for the access preview.
	//
	// AccessPreviewId is a required field
	AccessPreviewId *string `location:"uri" locationName:"accessPreviewId" type:"string" required:"true"`

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// used to generate the access.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// Criteria to filter the returned findings.
	Filter map[string]*Criterion `locationName:"filter" type:"map"`

	// The maximum number of results to return in the response.
	MaxResults *int64 `locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

func (ListAccessPreviewFindingsInput) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAccessPreviewFindingsInput) SetAccessPreviewId

SetAccessPreviewId sets the AccessPreviewId field's value.

func (*ListAccessPreviewFindingsInput) SetAnalyzerArn

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*ListAccessPreviewFindingsInput) SetFilter

SetFilter sets the Filter field's value.

func (*ListAccessPreviewFindingsInput) SetMaxResults

SetMaxResults sets the MaxResults field's value.

func (*ListAccessPreviewFindingsInput) SetNextToken

SetNextToken sets the NextToken field's value.

func (ListAccessPreviewFindingsInput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAccessPreviewFindingsInput) Validate

func (s *ListAccessPreviewFindingsInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListAccessPreviewFindingsOutput

type ListAccessPreviewFindingsOutput struct {

	// A list of access preview findings that match the specified filter criteria.
	//
	// Findings is a required field
	Findings []*AccessPreviewFinding `locationName:"findings" type:"list" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

func (ListAccessPreviewFindingsOutput) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAccessPreviewFindingsOutput) SetFindings

SetFindings sets the Findings field's value.

func (*ListAccessPreviewFindingsOutput) SetNextToken

SetNextToken sets the NextToken field's value.

func (ListAccessPreviewFindingsOutput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListAccessPreviewsInput

type ListAccessPreviewsInput struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// used to generate the access preview.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `location:"querystring" locationName:"analyzerArn" type:"string" required:"true"`

	// The maximum number of results to return in the response.
	MaxResults *int64 `location:"querystring" locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `location:"querystring" locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

func (ListAccessPreviewsInput) GoString

func (s ListAccessPreviewsInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAccessPreviewsInput) SetAnalyzerArn

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*ListAccessPreviewsInput) SetMaxResults

SetMaxResults sets the MaxResults field's value.

func (*ListAccessPreviewsInput) SetNextToken

SetNextToken sets the NextToken field's value.

func (ListAccessPreviewsInput) String

func (s ListAccessPreviewsInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAccessPreviewsInput) Validate

func (s *ListAccessPreviewsInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListAccessPreviewsOutput

type ListAccessPreviewsOutput struct {

	// A list of access previews retrieved for the analyzer.
	//
	// AccessPreviews is a required field
	AccessPreviews []*AccessPreviewSummary `locationName:"accessPreviews" type:"list" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

func (ListAccessPreviewsOutput) GoString

func (s ListAccessPreviewsOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAccessPreviewsOutput) SetAccessPreviews

SetAccessPreviews sets the AccessPreviews field's value.

func (*ListAccessPreviewsOutput) SetNextToken

SetNextToken sets the NextToken field's value.

func (ListAccessPreviewsOutput) String

func (s ListAccessPreviewsOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListAnalyzedResourcesInput

type ListAnalyzedResourcesInput struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// to retrieve a list of analyzed resources from.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// The maximum number of results to return in the response.
	MaxResults *int64 `locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`

	// The type of resource.
	ResourceType *string `locationName:"resourceType" type:"string" enum:"ResourceType"`
	// contains filtered or unexported fields
}

Retrieves a list of resources that have been analyzed.

func (ListAnalyzedResourcesInput) GoString

func (s ListAnalyzedResourcesInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAnalyzedResourcesInput) SetAnalyzerArn

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*ListAnalyzedResourcesInput) SetMaxResults

SetMaxResults sets the MaxResults field's value.

func (*ListAnalyzedResourcesInput) SetNextToken

SetNextToken sets the NextToken field's value.

func (*ListAnalyzedResourcesInput) SetResourceType

SetResourceType sets the ResourceType field's value.

func (ListAnalyzedResourcesInput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAnalyzedResourcesInput) Validate

func (s *ListAnalyzedResourcesInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListAnalyzedResourcesOutput

type ListAnalyzedResourcesOutput struct {

	// A list of resources that were analyzed.
	//
	// AnalyzedResources is a required field
	AnalyzedResources []*AnalyzedResourceSummary `locationName:"analyzedResources" type:"list" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

The response to the request.

func (ListAnalyzedResourcesOutput) GoString

func (s ListAnalyzedResourcesOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAnalyzedResourcesOutput) SetAnalyzedResources

SetAnalyzedResources sets the AnalyzedResources field's value.

func (*ListAnalyzedResourcesOutput) SetNextToken

SetNextToken sets the NextToken field's value.

func (ListAnalyzedResourcesOutput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListAnalyzersInput

type ListAnalyzersInput struct {

	// The maximum number of results to return in the response.
	MaxResults *int64 `location:"querystring" locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `location:"querystring" locationName:"nextToken" type:"string"`

	// The type of analyzer.
	Type *string `location:"querystring" locationName:"type" type:"string" enum:"Type"`
	// contains filtered or unexported fields
}

Retrieves a list of analyzers.

func (ListAnalyzersInput) GoString

func (s ListAnalyzersInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAnalyzersInput) SetMaxResults

func (s *ListAnalyzersInput) SetMaxResults(v int64) *ListAnalyzersInput

SetMaxResults sets the MaxResults field's value.

func (*ListAnalyzersInput) SetNextToken

func (s *ListAnalyzersInput) SetNextToken(v string) *ListAnalyzersInput

SetNextToken sets the NextToken field's value.

func (*ListAnalyzersInput) SetType

SetType sets the Type field's value.

func (ListAnalyzersInput) String

func (s ListAnalyzersInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListAnalyzersOutput

type ListAnalyzersOutput struct {

	// The analyzers retrieved.
	//
	// Analyzers is a required field
	Analyzers []*AnalyzerSummary `locationName:"analyzers" type:"list" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

The response to the request.

func (ListAnalyzersOutput) GoString

func (s ListAnalyzersOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListAnalyzersOutput) SetAnalyzers

SetAnalyzers sets the Analyzers field's value.

func (*ListAnalyzersOutput) SetNextToken

func (s *ListAnalyzersOutput) SetNextToken(v string) *ListAnalyzersOutput

SetNextToken sets the NextToken field's value.

func (ListAnalyzersOutput) String

func (s ListAnalyzersOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListArchiveRulesInput

type ListArchiveRulesInput struct {

	// The name of the analyzer to retrieve rules from.
	//
	// AnalyzerName is a required field
	AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

	// The maximum number of results to return in the request.
	MaxResults *int64 `location:"querystring" locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `location:"querystring" locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

Retrieves a list of archive rules created for the specified analyzer.

func (ListArchiveRulesInput) GoString

func (s ListArchiveRulesInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListArchiveRulesInput) SetAnalyzerName

func (s *ListArchiveRulesInput) SetAnalyzerName(v string) *ListArchiveRulesInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*ListArchiveRulesInput) SetMaxResults

func (s *ListArchiveRulesInput) SetMaxResults(v int64) *ListArchiveRulesInput

SetMaxResults sets the MaxResults field's value.

func (*ListArchiveRulesInput) SetNextToken

SetNextToken sets the NextToken field's value.

func (ListArchiveRulesInput) String

func (s ListArchiveRulesInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListArchiveRulesInput) Validate

func (s *ListArchiveRulesInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListArchiveRulesOutput

type ListArchiveRulesOutput struct {

	// A list of archive rules created for the specified analyzer.
	//
	// ArchiveRules is a required field
	ArchiveRules []*ArchiveRuleSummary `locationName:"archiveRules" type:"list" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

The response to the request.

func (ListArchiveRulesOutput) GoString

func (s ListArchiveRulesOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListArchiveRulesOutput) SetArchiveRules

SetArchiveRules sets the ArchiveRules field's value.

func (*ListArchiveRulesOutput) SetNextToken

SetNextToken sets the NextToken field's value.

func (ListArchiveRulesOutput) String

func (s ListArchiveRulesOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListFindingsInput

type ListFindingsInput struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// to retrieve findings from.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// A filter to match for the findings to return.
	Filter map[string]*Criterion `locationName:"filter" type:"map"`

	// The maximum number of results to return in the response.
	MaxResults *int64 `locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`

	// The sort order for the findings returned.
	Sort *SortCriteria `locationName:"sort" type:"structure"`
	// contains filtered or unexported fields
}

Retrieves a list of findings generated by the specified analyzer.

func (ListFindingsInput) GoString

func (s ListFindingsInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListFindingsInput) SetAnalyzerArn

func (s *ListFindingsInput) SetAnalyzerArn(v string) *ListFindingsInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*ListFindingsInput) SetFilter

func (s *ListFindingsInput) SetFilter(v map[string]*Criterion) *ListFindingsInput

SetFilter sets the Filter field's value.

func (*ListFindingsInput) SetMaxResults

func (s *ListFindingsInput) SetMaxResults(v int64) *ListFindingsInput

SetMaxResults sets the MaxResults field's value.

func (*ListFindingsInput) SetNextToken

func (s *ListFindingsInput) SetNextToken(v string) *ListFindingsInput

SetNextToken sets the NextToken field's value.

func (*ListFindingsInput) SetSort

SetSort sets the Sort field's value.

func (ListFindingsInput) String

func (s ListFindingsInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListFindingsInput) Validate

func (s *ListFindingsInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListFindingsOutput

type ListFindingsOutput struct {

	// A list of findings retrieved from the analyzer that match the filter criteria
	// specified, if any.
	//
	// Findings is a required field
	Findings []*FindingSummary `locationName:"findings" type:"list" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

The response to the request.

func (ListFindingsOutput) GoString

func (s ListFindingsOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListFindingsOutput) SetFindings

SetFindings sets the Findings field's value.

func (*ListFindingsOutput) SetNextToken

func (s *ListFindingsOutput) SetNextToken(v string) *ListFindingsOutput

SetNextToken sets the NextToken field's value.

func (ListFindingsOutput) String

func (s ListFindingsOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListFindingsV2Input

type ListFindingsV2Input struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// to retrieve findings from.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// A filter to match for the findings to return.
	Filter map[string]*Criterion `locationName:"filter" type:"map"`

	// The maximum number of results to return in the response.
	MaxResults *int64 `locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`

	// The criteria used to sort.
	Sort *SortCriteria `locationName:"sort" type:"structure"`
	// contains filtered or unexported fields
}

func (ListFindingsV2Input) GoString

func (s ListFindingsV2Input) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListFindingsV2Input) SetAnalyzerArn

func (s *ListFindingsV2Input) SetAnalyzerArn(v string) *ListFindingsV2Input

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*ListFindingsV2Input) SetFilter

SetFilter sets the Filter field's value.

func (*ListFindingsV2Input) SetMaxResults

func (s *ListFindingsV2Input) SetMaxResults(v int64) *ListFindingsV2Input

SetMaxResults sets the MaxResults field's value.

func (*ListFindingsV2Input) SetNextToken

func (s *ListFindingsV2Input) SetNextToken(v string) *ListFindingsV2Input

SetNextToken sets the NextToken field's value.

func (*ListFindingsV2Input) SetSort

SetSort sets the Sort field's value.

func (ListFindingsV2Input) String

func (s ListFindingsV2Input) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListFindingsV2Input) Validate

func (s *ListFindingsV2Input) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListFindingsV2Output

type ListFindingsV2Output struct {

	// A list of findings retrieved from the analyzer that match the filter criteria
	// specified, if any.
	//
	// Findings is a required field
	Findings []*FindingSummaryV2 `locationName:"findings" type:"list" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

func (ListFindingsV2Output) GoString

func (s ListFindingsV2Output) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListFindingsV2Output) SetFindings

SetFindings sets the Findings field's value.

func (*ListFindingsV2Output) SetNextToken

func (s *ListFindingsV2Output) SetNextToken(v string) *ListFindingsV2Output

SetNextToken sets the NextToken field's value.

func (ListFindingsV2Output) String

func (s ListFindingsV2Output) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListPolicyGenerationsInput

type ListPolicyGenerationsInput struct {

	// The maximum number of results to return in the response.
	MaxResults *int64 `location:"querystring" locationName:"maxResults" min:"1" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `location:"querystring" locationName:"nextToken" type:"string"`

	// The ARN of the IAM entity (user or role) for which you are generating a policy.
	// Use this with ListGeneratedPolicies to filter the results to only include
	// results for a specific principal.
	PrincipalArn *string `location:"querystring" locationName:"principalArn" type:"string"`
	// contains filtered or unexported fields
}

func (ListPolicyGenerationsInput) GoString

func (s ListPolicyGenerationsInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListPolicyGenerationsInput) SetMaxResults

SetMaxResults sets the MaxResults field's value.

func (*ListPolicyGenerationsInput) SetNextToken

SetNextToken sets the NextToken field's value.

func (*ListPolicyGenerationsInput) SetPrincipalArn

SetPrincipalArn sets the PrincipalArn field's value.

func (ListPolicyGenerationsInput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListPolicyGenerationsInput) Validate

func (s *ListPolicyGenerationsInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListPolicyGenerationsOutput

type ListPolicyGenerationsOutput struct {

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`

	// A PolicyGeneration object that contains details about the generated policy.
	//
	// PolicyGenerations is a required field
	PolicyGenerations []*PolicyGeneration `locationName:"policyGenerations" type:"list" required:"true"`
	// contains filtered or unexported fields
}

func (ListPolicyGenerationsOutput) GoString

func (s ListPolicyGenerationsOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListPolicyGenerationsOutput) SetNextToken

SetNextToken sets the NextToken field's value.

func (*ListPolicyGenerationsOutput) SetPolicyGenerations

SetPolicyGenerations sets the PolicyGenerations field's value.

func (ListPolicyGenerationsOutput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ListTagsForResourceInput

type ListTagsForResourceInput struct {

	// The ARN of the resource to retrieve tags from.
	//
	// ResourceArn is a required field
	ResourceArn *string `location:"uri" locationName:"resourceArn" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Retrieves a list of tags applied to the specified resource.

func (ListTagsForResourceInput) GoString

func (s ListTagsForResourceInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListTagsForResourceInput) SetResourceArn

SetResourceArn sets the ResourceArn field's value.

func (ListTagsForResourceInput) String

func (s ListTagsForResourceInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListTagsForResourceInput) Validate

func (s *ListTagsForResourceInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ListTagsForResourceOutput

type ListTagsForResourceOutput struct {

	// The tags that are applied to the specified resource.
	Tags map[string]*string `locationName:"tags" type:"map"`
	// contains filtered or unexported fields
}

The response to the request.

func (ListTagsForResourceOutput) GoString

func (s ListTagsForResourceOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ListTagsForResourceOutput) SetTags

SetTags sets the Tags field's value.

func (ListTagsForResourceOutput) String

func (s ListTagsForResourceOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Location

type Location struct {

	// A path in a policy, represented as a sequence of path elements.
	//
	// Path is a required field
	Path []*PathElement `locationName:"path" type:"list" required:"true"`

	// A span in a policy.
	//
	// Span is a required field
	Span *Span `locationName:"span" type:"structure" required:"true"`
	// contains filtered or unexported fields
}

A location in a policy that is represented as a path through the JSON representation and a corresponding span.

func (Location) GoString

func (s Location) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Location) SetPath

func (s *Location) SetPath(v []*PathElement) *Location

SetPath sets the Path field's value.

func (*Location) SetSpan

func (s *Location) SetSpan(v *Span) *Location

SetSpan sets the Span field's value.

func (Location) String

func (s Location) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type NetworkOriginConfiguration

type NetworkOriginConfiguration struct {

	// The configuration for the Amazon S3 access point or multi-region access point
	// with an Internet origin.
	InternetConfiguration *InternetConfiguration `locationName:"internetConfiguration" type:"structure"`

	// The proposed virtual private cloud (VPC) configuration for the Amazon S3
	// access point. VPC configuration does not apply to multi-region access points.
	// For more information, see VpcConfiguration (https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_VpcConfiguration.html).
	VpcConfiguration *VpcConfiguration `locationName:"vpcConfiguration" type:"structure"`
	// contains filtered or unexported fields
}

The proposed InternetConfiguration or VpcConfiguration to apply to the Amazon S3 access point. VpcConfiguration does not apply to multi-region access points. You can make the access point accessible from the internet, or you can specify that all requests made through that access point must originate from a specific virtual private cloud (VPC). You can specify only one type of network configuration. For more information, see Creating access points (https://docs.aws.amazon.com/AmazonS3/latest/dev/creating-access-points.html).

func (NetworkOriginConfiguration) GoString

func (s NetworkOriginConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*NetworkOriginConfiguration) SetInternetConfiguration

SetInternetConfiguration sets the InternetConfiguration field's value.

func (*NetworkOriginConfiguration) SetVpcConfiguration

SetVpcConfiguration sets the VpcConfiguration field's value.

func (NetworkOriginConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*NetworkOriginConfiguration) Validate

func (s *NetworkOriginConfiguration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type PathElement

type PathElement struct {

	// Refers to an index in a JSON array.
	Index *int64 `locationName:"index" type:"integer"`

	// Refers to a key in a JSON object.
	Key *string `locationName:"key" type:"string"`

	// Refers to a substring of a literal string in a JSON object.
	Substring *Substring `locationName:"substring" type:"structure"`

	// Refers to the value associated with a given key in a JSON object.
	Value *string `locationName:"value" type:"string"`
	// contains filtered or unexported fields
}

A single element in a path through the JSON representation of a policy.

func (PathElement) GoString

func (s PathElement) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*PathElement) SetIndex

func (s *PathElement) SetIndex(v int64) *PathElement

SetIndex sets the Index field's value.

func (*PathElement) SetKey

func (s *PathElement) SetKey(v string) *PathElement

SetKey sets the Key field's value.

func (*PathElement) SetSubstring

func (s *PathElement) SetSubstring(v *Substring) *PathElement

SetSubstring sets the Substring field's value.

func (*PathElement) SetValue

func (s *PathElement) SetValue(v string) *PathElement

SetValue sets the Value field's value.

func (PathElement) String

func (s PathElement) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type PolicyGeneration

type PolicyGeneration struct {

	// A timestamp of when the policy generation was completed.
	CompletedOn *time.Time `locationName:"completedOn" type:"timestamp" timestampFormat:"iso8601"`

	// The JobId that is returned by the StartPolicyGeneration operation. The JobId
	// can be used with GetGeneratedPolicy to retrieve the generated policies or
	// used with CancelPolicyGeneration to cancel the policy generation request.
	//
	// JobId is a required field
	JobId *string `locationName:"jobId" type:"string" required:"true"`

	// The ARN of the IAM entity (user or role) for which you are generating a policy.
	//
	// PrincipalArn is a required field
	PrincipalArn *string `locationName:"principalArn" type:"string" required:"true"`

	// A timestamp of when the policy generation started.
	//
	// StartedOn is a required field
	StartedOn *time.Time `locationName:"startedOn" type:"timestamp" timestampFormat:"iso8601" required:"true"`

	// The status of the policy generation request.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"JobStatus"`
	// contains filtered or unexported fields
}

Contains details about the policy generation status and properties.

func (PolicyGeneration) GoString

func (s PolicyGeneration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*PolicyGeneration) SetCompletedOn

func (s *PolicyGeneration) SetCompletedOn(v time.Time) *PolicyGeneration

SetCompletedOn sets the CompletedOn field's value.

func (*PolicyGeneration) SetJobId

func (s *PolicyGeneration) SetJobId(v string) *PolicyGeneration

SetJobId sets the JobId field's value.

func (*PolicyGeneration) SetPrincipalArn

func (s *PolicyGeneration) SetPrincipalArn(v string) *PolicyGeneration

SetPrincipalArn sets the PrincipalArn field's value.

func (*PolicyGeneration) SetStartedOn

func (s *PolicyGeneration) SetStartedOn(v time.Time) *PolicyGeneration

SetStartedOn sets the StartedOn field's value.

func (*PolicyGeneration) SetStatus

func (s *PolicyGeneration) SetStatus(v string) *PolicyGeneration

SetStatus sets the Status field's value.

func (PolicyGeneration) String

func (s PolicyGeneration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type PolicyGenerationDetails

type PolicyGenerationDetails struct {

	// The ARN of the IAM entity (user or role) for which you are generating a policy.
	//
	// PrincipalArn is a required field
	PrincipalArn *string `locationName:"principalArn" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Contains the ARN details about the IAM entity for which the policy is generated.

func (PolicyGenerationDetails) GoString

func (s PolicyGenerationDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*PolicyGenerationDetails) SetPrincipalArn

SetPrincipalArn sets the PrincipalArn field's value.

func (PolicyGenerationDetails) String

func (s PolicyGenerationDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*PolicyGenerationDetails) Validate

func (s *PolicyGenerationDetails) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type Position

type Position struct {

	// The column of the position, starting from 0.
	//
	// Column is a required field
	Column *int64 `locationName:"column" type:"integer" required:"true"`

	// The line of the position, starting from 1.
	//
	// Line is a required field
	Line *int64 `locationName:"line" type:"integer" required:"true"`

	// The offset within the policy that corresponds to the position, starting from
	// 0.
	//
	// Offset is a required field
	Offset *int64 `locationName:"offset" type:"integer" required:"true"`
	// contains filtered or unexported fields
}

A position in a policy.

func (Position) GoString

func (s Position) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Position) SetColumn

func (s *Position) SetColumn(v int64) *Position

SetColumn sets the Column field's value.

func (*Position) SetLine

func (s *Position) SetLine(v int64) *Position

SetLine sets the Line field's value.

func (*Position) SetOffset

func (s *Position) SetOffset(v int64) *Position

SetOffset sets the Offset field's value.

func (Position) String

func (s Position) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type RdsDbClusterSnapshotAttributeValue

type RdsDbClusterSnapshotAttributeValue struct {

	// The Amazon Web Services account IDs that have access to the manual Amazon
	// RDS DB cluster snapshot. If the value all is specified, then the Amazon RDS
	// DB cluster snapshot is public and can be copied or restored by all Amazon
	// Web Services accounts.
	//
	//    * If the configuration is for an existing Amazon RDS DB cluster snapshot
	//    and you do not specify the accountIds in RdsDbClusterSnapshotAttributeValue,
	//    then the access preview uses the existing shared accountIds for the snapshot.
	//
	//    * If the access preview is for a new resource and you do not specify the
	//    specify the accountIds in RdsDbClusterSnapshotAttributeValue, then the
	//    access preview considers the snapshot without any attributes.
	//
	//    * To propose deletion of existing shared accountIds, you can specify an
	//    empty list for accountIds in the RdsDbClusterSnapshotAttributeValue.
	AccountIds []*string `locationName:"accountIds" type:"list"`
	// contains filtered or unexported fields
}

The values for a manual Amazon RDS DB cluster snapshot attribute.

func (RdsDbClusterSnapshotAttributeValue) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*RdsDbClusterSnapshotAttributeValue) SetAccountIds

SetAccountIds sets the AccountIds field's value.

func (RdsDbClusterSnapshotAttributeValue) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type RdsDbClusterSnapshotConfiguration

type RdsDbClusterSnapshotConfiguration struct {

	// The names and values of manual DB cluster snapshot attributes. Manual DB
	// cluster snapshot attributes are used to authorize other Amazon Web Services
	// accounts to restore a manual DB cluster snapshot. The only valid value for
	// AttributeName for the attribute map is restore
	Attributes map[string]*RdsDbClusterSnapshotAttributeValue `locationName:"attributes" type:"map"`

	// The KMS key identifier for an encrypted Amazon RDS DB cluster snapshot. The
	// KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the
	// KMS key.
	//
	//    * If the configuration is for an existing Amazon RDS DB cluster snapshot
	//    and you do not specify the kmsKeyId, or you specify an empty string, then
	//    the access preview uses the existing kmsKeyId of the snapshot.
	//
	//    * If the access preview is for a new resource and you do not specify the
	//    specify the kmsKeyId, then the access preview considers the snapshot as
	//    unencrypted.
	KmsKeyId *string `locationName:"kmsKeyId" type:"string"`
	// contains filtered or unexported fields
}

The proposed access control configuration for an Amazon RDS DB cluster snapshot. You can propose a configuration for a new Amazon RDS DB cluster snapshot or an Amazon RDS DB cluster snapshot that you own by specifying the RdsDbClusterSnapshotAttributeValue and optional KMS encryption key. For more information, see ModifyDBClusterSnapshotAttribute (https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBClusterSnapshotAttribute.html).

func (RdsDbClusterSnapshotConfiguration) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*RdsDbClusterSnapshotConfiguration) SetAttributes

SetAttributes sets the Attributes field's value.

func (*RdsDbClusterSnapshotConfiguration) SetKmsKeyId

SetKmsKeyId sets the KmsKeyId field's value.

func (RdsDbClusterSnapshotConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type RdsDbSnapshotAttributeValue

type RdsDbSnapshotAttributeValue struct {

	// The Amazon Web Services account IDs that have access to the manual Amazon
	// RDS DB snapshot. If the value all is specified, then the Amazon RDS DB snapshot
	// is public and can be copied or restored by all Amazon Web Services accounts.
	//
	//    * If the configuration is for an existing Amazon RDS DB snapshot and you
	//    do not specify the accountIds in RdsDbSnapshotAttributeValue, then the
	//    access preview uses the existing shared accountIds for the snapshot.
	//
	//    * If the access preview is for a new resource and you do not specify the
	//    specify the accountIds in RdsDbSnapshotAttributeValue, then the access
	//    preview considers the snapshot without any attributes.
	//
	//    * To propose deletion of an existing shared accountIds, you can specify
	//    an empty list for accountIds in the RdsDbSnapshotAttributeValue.
	AccountIds []*string `locationName:"accountIds" type:"list"`
	// contains filtered or unexported fields
}

The name and values of a manual Amazon RDS DB snapshot attribute. Manual DB snapshot attributes are used to authorize other Amazon Web Services accounts to restore a manual DB snapshot.

func (RdsDbSnapshotAttributeValue) GoString

func (s RdsDbSnapshotAttributeValue) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*RdsDbSnapshotAttributeValue) SetAccountIds

SetAccountIds sets the AccountIds field's value.

func (RdsDbSnapshotAttributeValue) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type RdsDbSnapshotConfiguration

type RdsDbSnapshotConfiguration struct {

	// The names and values of manual DB snapshot attributes. Manual DB snapshot
	// attributes are used to authorize other Amazon Web Services accounts to restore
	// a manual DB snapshot. The only valid value for attributeName for the attribute
	// map is restore.
	Attributes map[string]*RdsDbSnapshotAttributeValue `locationName:"attributes" type:"map"`

	// The KMS key identifier for an encrypted Amazon RDS DB snapshot. The KMS key
	// identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.
	//
	//    * If the configuration is for an existing Amazon RDS DB snapshot and you
	//    do not specify the kmsKeyId, or you specify an empty string, then the
	//    access preview uses the existing kmsKeyId of the snapshot.
	//
	//    * If the access preview is for a new resource and you do not specify the
	//    specify the kmsKeyId, then the access preview considers the snapshot as
	//    unencrypted.
	KmsKeyId *string `locationName:"kmsKeyId" type:"string"`
	// contains filtered or unexported fields
}

The proposed access control configuration for an Amazon RDS DB snapshot. You can propose a configuration for a new Amazon RDS DB snapshot or an Amazon RDS DB snapshot that you own by specifying the RdsDbSnapshotAttributeValue and optional KMS encryption key. For more information, see ModifyDBSnapshotAttribute (https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBSnapshotAttribute.html).

func (RdsDbSnapshotConfiguration) GoString

func (s RdsDbSnapshotConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*RdsDbSnapshotConfiguration) SetAttributes

SetAttributes sets the Attributes field's value.

func (*RdsDbSnapshotConfiguration) SetKmsKeyId

SetKmsKeyId sets the KmsKeyId field's value.

func (RdsDbSnapshotConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ReasonSummary

type ReasonSummary struct {

	// A description of the reasoning of a result of checking for access.
	Description *string `locationName:"description" type:"string"`

	// The identifier for the reason statement.
	StatementId *string `locationName:"statementId" type:"string"`

	// The index number of the reason statement.
	StatementIndex *int64 `locationName:"statementIndex" type:"integer"`
	// contains filtered or unexported fields
}

Contains information about the reasoning why a check for access passed or failed.

func (ReasonSummary) GoString

func (s ReasonSummary) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ReasonSummary) SetDescription

func (s *ReasonSummary) SetDescription(v string) *ReasonSummary

SetDescription sets the Description field's value.

func (*ReasonSummary) SetStatementId

func (s *ReasonSummary) SetStatementId(v string) *ReasonSummary

SetStatementId sets the StatementId field's value.

func (*ReasonSummary) SetStatementIndex

func (s *ReasonSummary) SetStatementIndex(v int64) *ReasonSummary

SetStatementIndex sets the StatementIndex field's value.

func (ReasonSummary) String

func (s ReasonSummary) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ResourceNotFoundException

type ResourceNotFoundException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	Message_ *string `locationName:"message" type:"string"`

	// The ID of the resource.
	//
	// ResourceId is a required field
	ResourceId *string `locationName:"resourceId" type:"string" required:"true"`

	// The type of the resource.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true"`
	// contains filtered or unexported fields
}

The specified resource could not be found.

func (*ResourceNotFoundException) Code

Code returns the exception type name.

func (*ResourceNotFoundException) Error

func (s *ResourceNotFoundException) Error() string

func (ResourceNotFoundException) GoString

func (s ResourceNotFoundException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ResourceNotFoundException) Message

func (s *ResourceNotFoundException) Message() string

Message returns the exception's message.

func (*ResourceNotFoundException) OrigErr

func (s *ResourceNotFoundException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*ResourceNotFoundException) RequestID

func (s *ResourceNotFoundException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*ResourceNotFoundException) StatusCode

func (s *ResourceNotFoundException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (ResourceNotFoundException) String

func (s ResourceNotFoundException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type S3AccessPointConfiguration

type S3AccessPointConfiguration struct {

	// The access point or multi-region access point policy.
	AccessPointPolicy *string `locationName:"accessPointPolicy" type:"string"`

	// The proposed Internet and VpcConfiguration to apply to this Amazon S3 access
	// point. VpcConfiguration does not apply to multi-region access points. If
	// the access preview is for a new resource and neither is specified, the access
	// preview uses Internet for the network origin. If the access preview is for
	// an existing resource and neither is specified, the access preview uses the
	// exiting network origin.
	NetworkOrigin *NetworkOriginConfiguration `locationName:"networkOrigin" type:"structure"`

	// The proposed S3PublicAccessBlock configuration to apply to this Amazon S3
	// access point or multi-region access point.
	PublicAccessBlock *S3PublicAccessBlockConfiguration `locationName:"publicAccessBlock" type:"structure"`
	// contains filtered or unexported fields
}

The configuration for an Amazon S3 access point or multi-region access point for the bucket. You can propose up to 10 access points or multi-region access points per bucket. If the proposed Amazon S3 access point configuration is for an existing bucket, the access preview uses the proposed access point configuration in place of the existing access points. To propose an access point without a policy, you can provide an empty string as the access point policy. For more information, see Creating access points (https://docs.aws.amazon.com/AmazonS3/latest/dev/creating-access-points.html). For more information about access point policy limits, see Access points restrictions and limitations (https://docs.aws.amazon.com/AmazonS3/latest/dev/access-points-restrictions-limitations.html).

func (S3AccessPointConfiguration) GoString

func (s S3AccessPointConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3AccessPointConfiguration) SetAccessPointPolicy

func (s *S3AccessPointConfiguration) SetAccessPointPolicy(v string) *S3AccessPointConfiguration

SetAccessPointPolicy sets the AccessPointPolicy field's value.

func (*S3AccessPointConfiguration) SetNetworkOrigin

SetNetworkOrigin sets the NetworkOrigin field's value.

func (*S3AccessPointConfiguration) SetPublicAccessBlock

SetPublicAccessBlock sets the PublicAccessBlock field's value.

func (S3AccessPointConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3AccessPointConfiguration) Validate

func (s *S3AccessPointConfiguration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type S3BucketAclGrantConfiguration

type S3BucketAclGrantConfiguration struct {

	// The grantee to whom you’re assigning access rights.
	//
	// Grantee is a required field
	Grantee *AclGrantee `locationName:"grantee" type:"structure" required:"true"`

	// The permissions being granted.
	//
	// Permission is a required field
	Permission *string `locationName:"permission" type:"string" required:"true" enum:"AclPermission"`
	// contains filtered or unexported fields
}

A proposed access control list grant configuration for an Amazon S3 bucket. For more information, see How to Specify an ACL (https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#setting-acls).

func (S3BucketAclGrantConfiguration) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3BucketAclGrantConfiguration) SetGrantee

SetGrantee sets the Grantee field's value.

func (*S3BucketAclGrantConfiguration) SetPermission

SetPermission sets the Permission field's value.

func (S3BucketAclGrantConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3BucketAclGrantConfiguration) Validate

func (s *S3BucketAclGrantConfiguration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type S3BucketConfiguration

type S3BucketConfiguration struct {

	// The configuration of Amazon S3 access points or multi-region access points
	// for the bucket. You can propose up to 10 new access points per bucket.
	AccessPoints map[string]*S3AccessPointConfiguration `locationName:"accessPoints" type:"map"`

	// The proposed list of ACL grants for the Amazon S3 bucket. You can propose
	// up to 100 ACL grants per bucket. If the proposed grant configuration is for
	// an existing bucket, the access preview uses the proposed list of grant configurations
	// in place of the existing grants. Otherwise, the access preview uses the existing
	// grants for the bucket.
	BucketAclGrants []*S3BucketAclGrantConfiguration `locationName:"bucketAclGrants" type:"list"`

	// The proposed bucket policy for the Amazon S3 bucket.
	BucketPolicy *string `locationName:"bucketPolicy" type:"string"`

	// The proposed block public access configuration for the Amazon S3 bucket.
	BucketPublicAccessBlock *S3PublicAccessBlockConfiguration `locationName:"bucketPublicAccessBlock" type:"structure"`
	// contains filtered or unexported fields
}

Proposed access control configuration for an Amazon S3 bucket. You can propose a configuration for a new Amazon S3 bucket or an existing Amazon S3 bucket that you own by specifying the Amazon S3 bucket policy, bucket ACLs, bucket BPA settings, Amazon S3 access points, and multi-region access points attached to the bucket. If the configuration is for an existing Amazon S3 bucket and you do not specify the Amazon S3 bucket policy, the access preview uses the existing policy attached to the bucket. If the access preview is for a new resource and you do not specify the Amazon S3 bucket policy, the access preview assumes a bucket without a policy. To propose deletion of an existing bucket policy, you can specify an empty string. For more information about bucket policy limits, see Bucket Policy Examples (https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html).

func (S3BucketConfiguration) GoString

func (s S3BucketConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3BucketConfiguration) SetAccessPoints

SetAccessPoints sets the AccessPoints field's value.

func (*S3BucketConfiguration) SetBucketAclGrants

SetBucketAclGrants sets the BucketAclGrants field's value.

func (*S3BucketConfiguration) SetBucketPolicy

func (s *S3BucketConfiguration) SetBucketPolicy(v string) *S3BucketConfiguration

SetBucketPolicy sets the BucketPolicy field's value.

func (*S3BucketConfiguration) SetBucketPublicAccessBlock

SetBucketPublicAccessBlock sets the BucketPublicAccessBlock field's value.

func (S3BucketConfiguration) String

func (s S3BucketConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3BucketConfiguration) Validate

func (s *S3BucketConfiguration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type S3ExpressDirectoryBucketConfiguration

type S3ExpressDirectoryBucketConfiguration struct {

	// The proposed bucket policy for the Amazon S3 directory bucket.
	BucketPolicy *string `locationName:"bucketPolicy" type:"string"`
	// contains filtered or unexported fields
}

Proposed access control configuration for an Amazon S3 directory bucket. You can propose a configuration for a new Amazon S3 directory bucket or an existing Amazon S3 directory bucket that you own by specifying the Amazon S3 bucket policy. If the configuration is for an existing Amazon S3 directory bucket and you do not specify the Amazon S3 bucket policy, the access preview uses the existing policy attached to the directory bucket. If the access preview is for a new resource and you do not specify the Amazon S3 bucket policy, the access preview assumes an directory bucket without a policy. To propose deletion of an existing bucket policy, you can specify an empty string. For more information about bucket policy limits, see Example bucket policies (https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-example-bucket-policies.html).

func (S3ExpressDirectoryBucketConfiguration) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3ExpressDirectoryBucketConfiguration) SetBucketPolicy

SetBucketPolicy sets the BucketPolicy field's value.

func (S3ExpressDirectoryBucketConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type S3PublicAccessBlockConfiguration

type S3PublicAccessBlockConfiguration struct {

	// Specifies whether Amazon S3 should ignore public ACLs for this bucket and
	// objects in this bucket.
	//
	// IgnorePublicAcls is a required field
	IgnorePublicAcls *bool `locationName:"ignorePublicAcls" type:"boolean" required:"true"`

	// Specifies whether Amazon S3 should restrict public bucket policies for this
	// bucket.
	//
	// RestrictPublicBuckets is a required field
	RestrictPublicBuckets *bool `locationName:"restrictPublicBuckets" type:"boolean" required:"true"`
	// contains filtered or unexported fields
}

The PublicAccessBlock configuration to apply to this Amazon S3 bucket. If the proposed configuration is for an existing Amazon S3 bucket and the configuration is not specified, the access preview uses the existing setting. If the proposed configuration is for a new bucket and the configuration is not specified, the access preview uses false. If the proposed configuration is for a new access point or multi-region access point and the access point BPA configuration is not specified, the access preview uses true. For more information, see PublicAccessBlockConfiguration (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-publicaccessblockconfiguration.html).

func (S3PublicAccessBlockConfiguration) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3PublicAccessBlockConfiguration) SetIgnorePublicAcls

SetIgnorePublicAcls sets the IgnorePublicAcls field's value.

func (*S3PublicAccessBlockConfiguration) SetRestrictPublicBuckets

SetRestrictPublicBuckets sets the RestrictPublicBuckets field's value.

func (S3PublicAccessBlockConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*S3PublicAccessBlockConfiguration) Validate

Validate inspects the fields of the type to determine if they are valid.

type SecretsManagerSecretConfiguration

type SecretsManagerSecretConfiguration struct {

	// The proposed ARN, key ID, or alias of the KMS key.
	KmsKeyId *string `locationName:"kmsKeyId" type:"string"`

	// The proposed resource policy defining who can access or manage the secret.
	SecretPolicy *string `locationName:"secretPolicy" type:"string"`
	// contains filtered or unexported fields
}

The configuration for a Secrets Manager secret. For more information, see CreateSecret (https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CreateSecret.html).

You can propose a configuration for a new secret or an existing secret that you own by specifying the secret policy and optional KMS encryption key. If the configuration is for an existing secret and you do not specify the secret policy, the access preview uses the existing policy for the secret. If the access preview is for a new resource and you do not specify the policy, the access preview assumes a secret without a policy. To propose deletion of an existing policy, you can specify an empty string. If the proposed configuration is for a new secret and you do not specify the KMS key ID, the access preview uses the Amazon Web Services managed key aws/secretsmanager. If you specify an empty string for the KMS key ID, the access preview uses the Amazon Web Services managed key of the Amazon Web Services account. For more information about secret policy limits, see Quotas for Secrets Manager. (https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_limits.html).

func (SecretsManagerSecretConfiguration) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*SecretsManagerSecretConfiguration) SetKmsKeyId

SetKmsKeyId sets the KmsKeyId field's value.

func (*SecretsManagerSecretConfiguration) SetSecretPolicy

SetSecretPolicy sets the SecretPolicy field's value.

func (SecretsManagerSecretConfiguration) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ServiceQuotaExceededException

type ServiceQuotaExceededException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	Message_ *string `locationName:"message" type:"string"`

	// The resource ID.
	//
	// ResourceId is a required field
	ResourceId *string `locationName:"resourceId" type:"string" required:"true"`

	// The resource type.
	//
	// ResourceType is a required field
	ResourceType *string `locationName:"resourceType" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Service quote met error.

func (*ServiceQuotaExceededException) Code

Code returns the exception type name.

func (*ServiceQuotaExceededException) Error

func (ServiceQuotaExceededException) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ServiceQuotaExceededException) Message

Message returns the exception's message.

func (*ServiceQuotaExceededException) OrigErr

func (s *ServiceQuotaExceededException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*ServiceQuotaExceededException) RequestID

func (s *ServiceQuotaExceededException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*ServiceQuotaExceededException) StatusCode

func (s *ServiceQuotaExceededException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (ServiceQuotaExceededException) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type SnsTopicConfiguration

type SnsTopicConfiguration struct {

	// The JSON policy text that defines who can access an Amazon SNS topic. For
	// more information, see Example cases for Amazon SNS access control (https://docs.aws.amazon.com/sns/latest/dg/sns-access-policy-use-cases.html)
	// in the Amazon SNS Developer Guide.
	TopicPolicy *string `locationName:"topicPolicy" type:"string"`
	// contains filtered or unexported fields
}

The proposed access control configuration for an Amazon SNS topic. You can propose a configuration for a new Amazon SNS topic or an existing Amazon SNS topic that you own by specifying the policy. If the configuration is for an existing Amazon SNS topic and you do not specify the Amazon SNS policy, then the access preview uses the existing Amazon SNS policy for the topic. If the access preview is for a new resource and you do not specify the policy, then the access preview assumes an Amazon SNS topic without a policy. To propose deletion of an existing Amazon SNS topic policy, you can specify an empty string for the Amazon SNS policy. For more information, see Topic (https://docs.aws.amazon.com/sns/latest/api/API_Topic.html).

func (SnsTopicConfiguration) GoString

func (s SnsTopicConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*SnsTopicConfiguration) SetTopicPolicy

func (s *SnsTopicConfiguration) SetTopicPolicy(v string) *SnsTopicConfiguration

SetTopicPolicy sets the TopicPolicy field's value.

func (SnsTopicConfiguration) String

func (s SnsTopicConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type SortCriteria

type SortCriteria struct {

	// The name of the attribute to sort on.
	AttributeName *string `locationName:"attributeName" type:"string"`

	// The sort order, ascending or descending.
	OrderBy *string `locationName:"orderBy" type:"string" enum:"OrderBy"`
	// contains filtered or unexported fields
}

The criteria used to sort.

func (SortCriteria) GoString

func (s SortCriteria) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*SortCriteria) SetAttributeName

func (s *SortCriteria) SetAttributeName(v string) *SortCriteria

SetAttributeName sets the AttributeName field's value.

func (*SortCriteria) SetOrderBy

func (s *SortCriteria) SetOrderBy(v string) *SortCriteria

SetOrderBy sets the OrderBy field's value.

func (SortCriteria) String

func (s SortCriteria) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Span

type Span struct {

	// The end position of the span (exclusive).
	//
	// End is a required field
	End *Position `locationName:"end" type:"structure" required:"true"`

	// The start position of the span (inclusive).
	//
	// Start is a required field
	Start *Position `locationName:"start" type:"structure" required:"true"`
	// contains filtered or unexported fields
}

A span in a policy. The span consists of a start position (inclusive) and end position (exclusive).

func (Span) GoString

func (s Span) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Span) SetEnd

func (s *Span) SetEnd(v *Position) *Span

SetEnd sets the End field's value.

func (*Span) SetStart

func (s *Span) SetStart(v *Position) *Span

SetStart sets the Start field's value.

func (Span) String

func (s Span) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type SqsQueueConfiguration

type SqsQueueConfiguration struct {

	// The proposed resource policy for the Amazon SQS queue.
	QueuePolicy *string `locationName:"queuePolicy" type:"string"`
	// contains filtered or unexported fields
}

The proposed access control configuration for an Amazon SQS queue. You can propose a configuration for a new Amazon SQS queue or an existing Amazon SQS queue that you own by specifying the Amazon SQS policy. If the configuration is for an existing Amazon SQS queue and you do not specify the Amazon SQS policy, the access preview uses the existing Amazon SQS policy for the queue. If the access preview is for a new resource and you do not specify the policy, the access preview assumes an Amazon SQS queue without a policy. To propose deletion of an existing Amazon SQS queue policy, you can specify an empty string for the Amazon SQS policy. For more information about Amazon SQS policy limits, see Quotas related to policies (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-policies.html).

func (SqsQueueConfiguration) GoString

func (s SqsQueueConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*SqsQueueConfiguration) SetQueuePolicy

func (s *SqsQueueConfiguration) SetQueuePolicy(v string) *SqsQueueConfiguration

SetQueuePolicy sets the QueuePolicy field's value.

func (SqsQueueConfiguration) String

func (s SqsQueueConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type StartPolicyGenerationInput

type StartPolicyGenerationInput struct {

	// A unique, case-sensitive identifier that you provide to ensure the idempotency
	// of the request. Idempotency ensures that an API request completes only once.
	// With an idempotent request, if the original request completes successfully,
	// the subsequent retries with the same client token return the result from
	// the original successful request and they have no additional effect.
	//
	// If you do not specify a client token, one is automatically generated by the
	// Amazon Web Services SDK.
	ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

	// A CloudTrailDetails object that contains details about a Trail that you want
	// to analyze to generate policies.
	CloudTrailDetails *CloudTrailDetails `locationName:"cloudTrailDetails" type:"structure"`

	// Contains the ARN of the IAM entity (user or role) for which you are generating
	// a policy.
	//
	// PolicyGenerationDetails is a required field
	PolicyGenerationDetails *PolicyGenerationDetails `locationName:"policyGenerationDetails" type:"structure" required:"true"`
	// contains filtered or unexported fields
}

func (StartPolicyGenerationInput) GoString

func (s StartPolicyGenerationInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*StartPolicyGenerationInput) SetClientToken

SetClientToken sets the ClientToken field's value.

func (*StartPolicyGenerationInput) SetCloudTrailDetails

SetCloudTrailDetails sets the CloudTrailDetails field's value.

func (*StartPolicyGenerationInput) SetPolicyGenerationDetails

SetPolicyGenerationDetails sets the PolicyGenerationDetails field's value.

func (StartPolicyGenerationInput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*StartPolicyGenerationInput) Validate

func (s *StartPolicyGenerationInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type StartPolicyGenerationOutput

type StartPolicyGenerationOutput struct {

	// The JobId that is returned by the StartPolicyGeneration operation. The JobId
	// can be used with GetGeneratedPolicy to retrieve the generated policies or
	// used with CancelPolicyGeneration to cancel the policy generation request.
	//
	// JobId is a required field
	JobId *string `locationName:"jobId" type:"string" required:"true"`
	// contains filtered or unexported fields
}

func (StartPolicyGenerationOutput) GoString

func (s StartPolicyGenerationOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*StartPolicyGenerationOutput) SetJobId

SetJobId sets the JobId field's value.

func (StartPolicyGenerationOutput) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type StartResourceScanInput

type StartResourceScanInput struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// to use to scan the policies applied to the specified resource.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// The ARN of the resource to scan.
	//
	// ResourceArn is a required field
	ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`

	// The Amazon Web Services account ID that owns the resource. For most Amazon
	// Web Services resources, the owning account is the account in which the resource
	// was created.
	ResourceOwnerAccount *string `locationName:"resourceOwnerAccount" type:"string"`
	// contains filtered or unexported fields
}

Starts a scan of the policies applied to the specified resource.

func (StartResourceScanInput) GoString

func (s StartResourceScanInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*StartResourceScanInput) SetAnalyzerArn

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*StartResourceScanInput) SetResourceArn

SetResourceArn sets the ResourceArn field's value.

func (*StartResourceScanInput) SetResourceOwnerAccount

func (s *StartResourceScanInput) SetResourceOwnerAccount(v string) *StartResourceScanInput

SetResourceOwnerAccount sets the ResourceOwnerAccount field's value.

func (StartResourceScanInput) String

func (s StartResourceScanInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*StartResourceScanInput) Validate

func (s *StartResourceScanInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type StartResourceScanOutput

type StartResourceScanOutput struct {
	// contains filtered or unexported fields
}

func (StartResourceScanOutput) GoString

func (s StartResourceScanOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (StartResourceScanOutput) String

func (s StartResourceScanOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type StatusReason

type StatusReason struct {

	// The reason code for the current status of the analyzer.
	//
	// Code is a required field
	Code *string `locationName:"code" type:"string" required:"true" enum:"ReasonCode"`
	// contains filtered or unexported fields
}

Provides more details about the current status of the analyzer. For example, if the creation for the analyzer fails, a Failed status is returned. For an analyzer with organization as the type, this failure can be due to an issue with creating the service-linked roles required in the member accounts of the Amazon Web Services organization.

func (StatusReason) GoString

func (s StatusReason) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*StatusReason) SetCode

func (s *StatusReason) SetCode(v string) *StatusReason

SetCode sets the Code field's value.

func (StatusReason) String

func (s StatusReason) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Substring

type Substring struct {

	// The length of the substring.
	//
	// Length is a required field
	Length *int64 `locationName:"length" type:"integer" required:"true"`

	// The start index of the substring, starting from 0.
	//
	// Start is a required field
	Start *int64 `locationName:"start" type:"integer" required:"true"`
	// contains filtered or unexported fields
}

A reference to a substring of a literal string in a JSON document.

func (Substring) GoString

func (s Substring) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Substring) SetLength

func (s *Substring) SetLength(v int64) *Substring

SetLength sets the Length field's value.

func (*Substring) SetStart

func (s *Substring) SetStart(v int64) *Substring

SetStart sets the Start field's value.

func (Substring) String

func (s Substring) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type TagResourceInput

type TagResourceInput struct {

	// The ARN of the resource to add the tag to.
	//
	// ResourceArn is a required field
	ResourceArn *string `location:"uri" locationName:"resourceArn" type:"string" required:"true"`

	// The tags to add to the resource.
	//
	// Tags is a required field
	Tags map[string]*string `locationName:"tags" type:"map" required:"true"`
	// contains filtered or unexported fields
}

Adds a tag to the specified resource.

func (TagResourceInput) GoString

func (s TagResourceInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*TagResourceInput) SetResourceArn

func (s *TagResourceInput) SetResourceArn(v string) *TagResourceInput

SetResourceArn sets the ResourceArn field's value.

func (*TagResourceInput) SetTags

func (s *TagResourceInput) SetTags(v map[string]*string) *TagResourceInput

SetTags sets the Tags field's value.

func (TagResourceInput) String

func (s TagResourceInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*TagResourceInput) Validate

func (s *TagResourceInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type TagResourceOutput

type TagResourceOutput struct {
	// contains filtered or unexported fields
}

The response to the request.

func (TagResourceOutput) GoString

func (s TagResourceOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (TagResourceOutput) String

func (s TagResourceOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ThrottlingException

type ThrottlingException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	Message_ *string `locationName:"message" type:"string"`

	// The seconds to wait to retry.
	RetryAfterSeconds *int64 `location:"header" locationName:"Retry-After" type:"integer"`
	// contains filtered or unexported fields
}

Throttling limit exceeded error.

func (*ThrottlingException) Code

func (s *ThrottlingException) Code() string

Code returns the exception type name.

func (*ThrottlingException) Error

func (s *ThrottlingException) Error() string

func (ThrottlingException) GoString

func (s ThrottlingException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ThrottlingException) Message

func (s *ThrottlingException) Message() string

Message returns the exception's message.

func (*ThrottlingException) OrigErr

func (s *ThrottlingException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*ThrottlingException) RequestID

func (s *ThrottlingException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*ThrottlingException) StatusCode

func (s *ThrottlingException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (ThrottlingException) String

func (s ThrottlingException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type Trail

type Trail struct {

	// Possible values are true or false. If set to true, IAM Access Analyzer retrieves
	// CloudTrail data from all regions to analyze and generate a policy.
	AllRegions *bool `locationName:"allRegions" type:"boolean"`

	// Specifies the ARN of the trail. The format of a trail ARN is arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail.
	//
	// CloudTrailArn is a required field
	CloudTrailArn *string `locationName:"cloudTrailArn" type:"string" required:"true"`

	// A list of regions to get CloudTrail data from and analyze to generate a policy.
	Regions []*string `locationName:"regions" type:"list"`
	// contains filtered or unexported fields
}

Contains details about the CloudTrail trail being analyzed to generate a policy.

func (Trail) GoString

func (s Trail) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Trail) SetAllRegions

func (s *Trail) SetAllRegions(v bool) *Trail

SetAllRegions sets the AllRegions field's value.

func (*Trail) SetCloudTrailArn

func (s *Trail) SetCloudTrailArn(v string) *Trail

SetCloudTrailArn sets the CloudTrailArn field's value.

func (*Trail) SetRegions

func (s *Trail) SetRegions(v []*string) *Trail

SetRegions sets the Regions field's value.

func (Trail) String

func (s Trail) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*Trail) Validate

func (s *Trail) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type TrailProperties

type TrailProperties struct {

	// Possible values are true or false. If set to true, IAM Access Analyzer retrieves
	// CloudTrail data from all regions to analyze and generate a policy.
	AllRegions *bool `locationName:"allRegions" type:"boolean"`

	// Specifies the ARN of the trail. The format of a trail ARN is arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail.
	//
	// CloudTrailArn is a required field
	CloudTrailArn *string `locationName:"cloudTrailArn" type:"string" required:"true"`

	// A list of regions to get CloudTrail data from and analyze to generate a policy.
	Regions []*string `locationName:"regions" type:"list"`
	// contains filtered or unexported fields
}

Contains details about the CloudTrail trail being analyzed to generate a policy.

func (TrailProperties) GoString

func (s TrailProperties) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*TrailProperties) SetAllRegions

func (s *TrailProperties) SetAllRegions(v bool) *TrailProperties

SetAllRegions sets the AllRegions field's value.

func (*TrailProperties) SetCloudTrailArn

func (s *TrailProperties) SetCloudTrailArn(v string) *TrailProperties

SetCloudTrailArn sets the CloudTrailArn field's value.

func (*TrailProperties) SetRegions

func (s *TrailProperties) SetRegions(v []*string) *TrailProperties

SetRegions sets the Regions field's value.

func (TrailProperties) String

func (s TrailProperties) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UnprocessableEntityException

type UnprocessableEntityException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	Message_ *string `locationName:"message" type:"string"`
	// contains filtered or unexported fields
}

The specified entity could not be processed.

func (*UnprocessableEntityException) Code

Code returns the exception type name.

func (*UnprocessableEntityException) Error

func (UnprocessableEntityException) GoString

func (s UnprocessableEntityException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UnprocessableEntityException) Message

func (s *UnprocessableEntityException) Message() string

Message returns the exception's message.

func (*UnprocessableEntityException) OrigErr

func (s *UnprocessableEntityException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*UnprocessableEntityException) RequestID

func (s *UnprocessableEntityException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*UnprocessableEntityException) StatusCode

func (s *UnprocessableEntityException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (UnprocessableEntityException) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UntagResourceInput

type UntagResourceInput struct {

	// The ARN of the resource to remove the tag from.
	//
	// ResourceArn is a required field
	ResourceArn *string `location:"uri" locationName:"resourceArn" type:"string" required:"true"`

	// The key for the tag to add.
	//
	// TagKeys is a required field
	TagKeys []*string `location:"querystring" locationName:"tagKeys" type:"list" required:"true"`
	// contains filtered or unexported fields
}

Removes a tag from the specified resource.

func (UntagResourceInput) GoString

func (s UntagResourceInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UntagResourceInput) SetResourceArn

func (s *UntagResourceInput) SetResourceArn(v string) *UntagResourceInput

SetResourceArn sets the ResourceArn field's value.

func (*UntagResourceInput) SetTagKeys

func (s *UntagResourceInput) SetTagKeys(v []*string) *UntagResourceInput

SetTagKeys sets the TagKeys field's value.

func (UntagResourceInput) String

func (s UntagResourceInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UntagResourceInput) Validate

func (s *UntagResourceInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type UntagResourceOutput

type UntagResourceOutput struct {
	// contains filtered or unexported fields
}

The response to the request.

func (UntagResourceOutput) GoString

func (s UntagResourceOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (UntagResourceOutput) String

func (s UntagResourceOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UnusedAccessConfiguration

type UnusedAccessConfiguration struct {

	// The specified access age in days for which to generate findings for unused
	// access. For example, if you specify 90 days, the analyzer will generate findings
	// for IAM entities within the accounts of the selected organization for any
	// access that hasn't been used in 90 or more days since the analyzer's last
	// scan. You can choose a value between 1 and 180 days.
	UnusedAccessAge *int64 `locationName:"unusedAccessAge" type:"integer"`
	// contains filtered or unexported fields
}

Contains information about an unused access analyzer.

func (UnusedAccessConfiguration) GoString

func (s UnusedAccessConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UnusedAccessConfiguration) SetUnusedAccessAge

func (s *UnusedAccessConfiguration) SetUnusedAccessAge(v int64) *UnusedAccessConfiguration

SetUnusedAccessAge sets the UnusedAccessAge field's value.

func (UnusedAccessConfiguration) String

func (s UnusedAccessConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UnusedAction

type UnusedAction struct {

	// The action for which the unused access finding was generated.
	//
	// Action is a required field
	Action *string `locationName:"action" type:"string" required:"true"`

	// The time at which the action was last accessed.
	LastAccessed *time.Time `locationName:"lastAccessed" type:"timestamp" timestampFormat:"iso8601"`
	// contains filtered or unexported fields
}

Contains information about an unused access finding for an action. IAM Access Analyzer charges for unused access analysis based on the number of IAM roles and users analyzed per month. For more details on pricing, see IAM Access Analyzer pricing (https://aws.amazon.com/iam/access-analyzer/pricing).

func (UnusedAction) GoString

func (s UnusedAction) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UnusedAction) SetAction

func (s *UnusedAction) SetAction(v string) *UnusedAction

SetAction sets the Action field's value.

func (*UnusedAction) SetLastAccessed

func (s *UnusedAction) SetLastAccessed(v time.Time) *UnusedAction

SetLastAccessed sets the LastAccessed field's value.

func (UnusedAction) String

func (s UnusedAction) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UnusedIamRoleDetails

type UnusedIamRoleDetails struct {

	// The time at which the role was last accessed.
	LastAccessed *time.Time `locationName:"lastAccessed" type:"timestamp" timestampFormat:"iso8601"`
	// contains filtered or unexported fields
}

Contains information about an unused access finding for an IAM role. IAM Access Analyzer charges for unused access analysis based on the number of IAM roles and users analyzed per month. For more details on pricing, see IAM Access Analyzer pricing (https://aws.amazon.com/iam/access-analyzer/pricing).

func (UnusedIamRoleDetails) GoString

func (s UnusedIamRoleDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UnusedIamRoleDetails) SetLastAccessed

func (s *UnusedIamRoleDetails) SetLastAccessed(v time.Time) *UnusedIamRoleDetails

SetLastAccessed sets the LastAccessed field's value.

func (UnusedIamRoleDetails) String

func (s UnusedIamRoleDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UnusedIamUserAccessKeyDetails

type UnusedIamUserAccessKeyDetails struct {

	// The ID of the access key for which the unused access finding was generated.
	//
	// AccessKeyId is a required field
	AccessKeyId *string `locationName:"accessKeyId" type:"string" required:"true"`

	// The time at which the access key was last accessed.
	LastAccessed *time.Time `locationName:"lastAccessed" type:"timestamp" timestampFormat:"iso8601"`
	// contains filtered or unexported fields
}

Contains information about an unused access finding for an IAM user access key. IAM Access Analyzer charges for unused access analysis based on the number of IAM roles and users analyzed per month. For more details on pricing, see IAM Access Analyzer pricing (https://aws.amazon.com/iam/access-analyzer/pricing).

func (UnusedIamUserAccessKeyDetails) GoString

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UnusedIamUserAccessKeyDetails) SetAccessKeyId

SetAccessKeyId sets the AccessKeyId field's value.

func (*UnusedIamUserAccessKeyDetails) SetLastAccessed

SetLastAccessed sets the LastAccessed field's value.

func (UnusedIamUserAccessKeyDetails) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UnusedIamUserPasswordDetails

type UnusedIamUserPasswordDetails struct {

	// The time at which the password was last accessed.
	LastAccessed *time.Time `locationName:"lastAccessed" type:"timestamp" timestampFormat:"iso8601"`
	// contains filtered or unexported fields
}

Contains information about an unused access finding for an IAM user password. IAM Access Analyzer charges for unused access analysis based on the number of IAM roles and users analyzed per month. For more details on pricing, see IAM Access Analyzer pricing (https://aws.amazon.com/iam/access-analyzer/pricing).

func (UnusedIamUserPasswordDetails) GoString

func (s UnusedIamUserPasswordDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UnusedIamUserPasswordDetails) SetLastAccessed

SetLastAccessed sets the LastAccessed field's value.

func (UnusedIamUserPasswordDetails) String

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UnusedPermissionDetails

type UnusedPermissionDetails struct {

	// A list of unused actions for which the unused access finding was generated.
	Actions []*UnusedAction `locationName:"actions" type:"list"`

	// The time at which the permission last accessed.
	LastAccessed *time.Time `locationName:"lastAccessed" type:"timestamp" timestampFormat:"iso8601"`

	// The namespace of the Amazon Web Services service that contains the unused
	// actions.
	//
	// ServiceNamespace is a required field
	ServiceNamespace *string `locationName:"serviceNamespace" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Contains information about an unused access finding for a permission. IAM Access Analyzer charges for unused access analysis based on the number of IAM roles and users analyzed per month. For more details on pricing, see IAM Access Analyzer pricing (https://aws.amazon.com/iam/access-analyzer/pricing).

func (UnusedPermissionDetails) GoString

func (s UnusedPermissionDetails) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UnusedPermissionDetails) SetActions

SetActions sets the Actions field's value.

func (*UnusedPermissionDetails) SetLastAccessed

SetLastAccessed sets the LastAccessed field's value.

func (*UnusedPermissionDetails) SetServiceNamespace

func (s *UnusedPermissionDetails) SetServiceNamespace(v string) *UnusedPermissionDetails

SetServiceNamespace sets the ServiceNamespace field's value.

func (UnusedPermissionDetails) String

func (s UnusedPermissionDetails) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UpdateArchiveRuleInput

type UpdateArchiveRuleInput struct {

	// The name of the analyzer to update the archive rules for.
	//
	// AnalyzerName is a required field
	AnalyzerName *string `location:"uri" locationName:"analyzerName" min:"1" type:"string" required:"true"`

	// A client token.
	ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

	// A filter to match for the rules to update. Only rules that match the filter
	// are updated.
	//
	// Filter is a required field
	Filter map[string]*Criterion `locationName:"filter" type:"map" required:"true"`

	// The name of the rule to update.
	//
	// RuleName is a required field
	RuleName *string `location:"uri" locationName:"ruleName" min:"1" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Updates the specified archive rule.

func (UpdateArchiveRuleInput) GoString

func (s UpdateArchiveRuleInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UpdateArchiveRuleInput) SetAnalyzerName

func (s *UpdateArchiveRuleInput) SetAnalyzerName(v string) *UpdateArchiveRuleInput

SetAnalyzerName sets the AnalyzerName field's value.

func (*UpdateArchiveRuleInput) SetClientToken

SetClientToken sets the ClientToken field's value.

func (*UpdateArchiveRuleInput) SetFilter

SetFilter sets the Filter field's value.

func (*UpdateArchiveRuleInput) SetRuleName

SetRuleName sets the RuleName field's value.

func (UpdateArchiveRuleInput) String

func (s UpdateArchiveRuleInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UpdateArchiveRuleInput) Validate

func (s *UpdateArchiveRuleInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type UpdateArchiveRuleOutput

type UpdateArchiveRuleOutput struct {
	// contains filtered or unexported fields
}

func (UpdateArchiveRuleOutput) GoString

func (s UpdateArchiveRuleOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (UpdateArchiveRuleOutput) String

func (s UpdateArchiveRuleOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type UpdateFindingsInput

type UpdateFindingsInput struct {

	// The ARN of the analyzer (https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources)
	// that generated the findings to update.
	//
	// AnalyzerArn is a required field
	AnalyzerArn *string `locationName:"analyzerArn" type:"string" required:"true"`

	// A client token.
	ClientToken *string `locationName:"clientToken" type:"string" idempotencyToken:"true"`

	// The IDs of the findings to update.
	Ids []*string `locationName:"ids" type:"list"`

	// The ARN of the resource identified in the finding.
	ResourceArn *string `locationName:"resourceArn" type:"string"`

	// The state represents the action to take to update the finding Status. Use
	// ARCHIVE to change an Active finding to an Archived finding. Use ACTIVE to
	// change an Archived finding to an Active finding.
	//
	// Status is a required field
	Status *string `locationName:"status" type:"string" required:"true" enum:"FindingStatusUpdate"`
	// contains filtered or unexported fields
}

Updates findings with the new values provided in the request.

func (UpdateFindingsInput) GoString

func (s UpdateFindingsInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UpdateFindingsInput) SetAnalyzerArn

func (s *UpdateFindingsInput) SetAnalyzerArn(v string) *UpdateFindingsInput

SetAnalyzerArn sets the AnalyzerArn field's value.

func (*UpdateFindingsInput) SetClientToken

func (s *UpdateFindingsInput) SetClientToken(v string) *UpdateFindingsInput

SetClientToken sets the ClientToken field's value.

func (*UpdateFindingsInput) SetIds

SetIds sets the Ids field's value.

func (*UpdateFindingsInput) SetResourceArn

func (s *UpdateFindingsInput) SetResourceArn(v string) *UpdateFindingsInput

SetResourceArn sets the ResourceArn field's value.

func (*UpdateFindingsInput) SetStatus

SetStatus sets the Status field's value.

func (UpdateFindingsInput) String

func (s UpdateFindingsInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*UpdateFindingsInput) Validate

func (s *UpdateFindingsInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type UpdateFindingsOutput

type UpdateFindingsOutput struct {
	// contains filtered or unexported fields
}

func (UpdateFindingsOutput) GoString

func (s UpdateFindingsOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (UpdateFindingsOutput) String

func (s UpdateFindingsOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ValidatePolicyFinding

type ValidatePolicyFinding struct {

	// A localized message that explains the finding and provides guidance on how
	// to address it.
	//
	// FindingDetails is a required field
	FindingDetails *string `locationName:"findingDetails" type:"string" required:"true"`

	// The impact of the finding.
	//
	// Security warnings report when the policy allows access that we consider overly
	// permissive.
	//
	// Errors report when a part of the policy is not functional.
	//
	// Warnings report non-security issues when a policy does not conform to policy
	// writing best practices.
	//
	// Suggestions recommend stylistic improvements in the policy that do not impact
	// access.
	//
	// FindingType is a required field
	FindingType *string `locationName:"findingType" type:"string" required:"true" enum:"ValidatePolicyFindingType"`

	// The issue code provides an identifier of the issue associated with this finding.
	//
	// IssueCode is a required field
	IssueCode *string `locationName:"issueCode" type:"string" required:"true"`

	// A link to additional documentation about the type of finding.
	//
	// LearnMoreLink is a required field
	LearnMoreLink *string `locationName:"learnMoreLink" type:"string" required:"true"`

	// The list of locations in the policy document that are related to the finding.
	// The issue code provides a summary of an issue identified by the finding.
	//
	// Locations is a required field
	Locations []*Location `locationName:"locations" type:"list" required:"true"`
	// contains filtered or unexported fields
}

A finding in a policy. Each finding is an actionable recommendation that can be used to improve the policy.

func (ValidatePolicyFinding) GoString

func (s ValidatePolicyFinding) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ValidatePolicyFinding) SetFindingDetails

func (s *ValidatePolicyFinding) SetFindingDetails(v string) *ValidatePolicyFinding

SetFindingDetails sets the FindingDetails field's value.

func (*ValidatePolicyFinding) SetFindingType

func (s *ValidatePolicyFinding) SetFindingType(v string) *ValidatePolicyFinding

SetFindingType sets the FindingType field's value.

func (*ValidatePolicyFinding) SetIssueCode

SetIssueCode sets the IssueCode field's value.

func (s *ValidatePolicyFinding) SetLearnMoreLink(v string) *ValidatePolicyFinding

SetLearnMoreLink sets the LearnMoreLink field's value.

func (*ValidatePolicyFinding) SetLocations

func (s *ValidatePolicyFinding) SetLocations(v []*Location) *ValidatePolicyFinding

SetLocations sets the Locations field's value.

func (ValidatePolicyFinding) String

func (s ValidatePolicyFinding) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ValidatePolicyInput

type ValidatePolicyInput struct {

	// The locale to use for localizing the findings.
	Locale *string `locationName:"locale" type:"string" enum:"Locale"`

	// The maximum number of results to return in the response.
	MaxResults *int64 `location:"querystring" locationName:"maxResults" type:"integer"`

	// A token used for pagination of results returned.
	NextToken *string `location:"querystring" locationName:"nextToken" type:"string"`

	// The JSON policy document to use as the content for the policy.
	//
	// PolicyDocument is a required field
	PolicyDocument *string `locationName:"policyDocument" type:"string" required:"true"`

	// The type of policy to validate. Identity policies grant permissions to IAM
	// principals. Identity policies include managed and inline policies for IAM
	// roles, users, and groups.
	//
	// Resource policies grant permissions on Amazon Web Services resources. Resource
	// policies include trust policies for IAM roles and bucket policies for Amazon
	// S3 buckets. You can provide a generic input such as identity policy or resource
	// policy or a specific input such as managed policy or Amazon S3 bucket policy.
	//
	// Service control policies (SCPs) are a type of organization policy attached
	// to an Amazon Web Services organization, organizational unit (OU), or an account.
	//
	// PolicyType is a required field
	PolicyType *string `locationName:"policyType" type:"string" required:"true" enum:"PolicyType"`

	// The type of resource to attach to your resource policy. Specify a value for
	// the policy validation resource type only if the policy type is RESOURCE_POLICY.
	// For example, to validate a resource policy to attach to an Amazon S3 bucket,
	// you can choose AWS::S3::Bucket for the policy validation resource type.
	//
	// For resource types not supported as valid values, IAM Access Analyzer runs
	// policy checks that apply to all resource policies. For example, to validate
	// a resource policy to attach to a KMS key, do not specify a value for the
	// policy validation resource type and IAM Access Analyzer will run policy checks
	// that apply to all resource policies.
	ValidatePolicyResourceType *string `locationName:"validatePolicyResourceType" type:"string" enum:"ValidatePolicyResourceType"`
	// contains filtered or unexported fields
}

func (ValidatePolicyInput) GoString

func (s ValidatePolicyInput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ValidatePolicyInput) SetLocale

SetLocale sets the Locale field's value.

func (*ValidatePolicyInput) SetMaxResults

func (s *ValidatePolicyInput) SetMaxResults(v int64) *ValidatePolicyInput

SetMaxResults sets the MaxResults field's value.

func (*ValidatePolicyInput) SetNextToken

func (s *ValidatePolicyInput) SetNextToken(v string) *ValidatePolicyInput

SetNextToken sets the NextToken field's value.

func (*ValidatePolicyInput) SetPolicyDocument

func (s *ValidatePolicyInput) SetPolicyDocument(v string) *ValidatePolicyInput

SetPolicyDocument sets the PolicyDocument field's value.

func (*ValidatePolicyInput) SetPolicyType

func (s *ValidatePolicyInput) SetPolicyType(v string) *ValidatePolicyInput

SetPolicyType sets the PolicyType field's value.

func (*ValidatePolicyInput) SetValidatePolicyResourceType

func (s *ValidatePolicyInput) SetValidatePolicyResourceType(v string) *ValidatePolicyInput

SetValidatePolicyResourceType sets the ValidatePolicyResourceType field's value.

func (ValidatePolicyInput) String

func (s ValidatePolicyInput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ValidatePolicyInput) Validate

func (s *ValidatePolicyInput) Validate() error

Validate inspects the fields of the type to determine if they are valid.

type ValidatePolicyOutput

type ValidatePolicyOutput struct {

	// The list of findings in a policy returned by IAM Access Analyzer based on
	// its suite of policy checks.
	//
	// Findings is a required field
	Findings []*ValidatePolicyFinding `locationName:"findings" type:"list" required:"true"`

	// A token used for pagination of results returned.
	NextToken *string `locationName:"nextToken" type:"string"`
	// contains filtered or unexported fields
}

func (ValidatePolicyOutput) GoString

func (s ValidatePolicyOutput) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ValidatePolicyOutput) SetFindings

SetFindings sets the Findings field's value.

func (*ValidatePolicyOutput) SetNextToken

func (s *ValidatePolicyOutput) SetNextToken(v string) *ValidatePolicyOutput

SetNextToken sets the NextToken field's value.

func (ValidatePolicyOutput) String

func (s ValidatePolicyOutput) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ValidationException

type ValidationException struct {
	RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"`

	// A list of fields that didn't validate.
	FieldList []*ValidationExceptionField `locationName:"fieldList" type:"list"`

	Message_ *string `locationName:"message" type:"string"`

	// The reason for the exception.
	//
	// Reason is a required field
	Reason *string `locationName:"reason" type:"string" required:"true" enum:"ValidationExceptionReason"`
	// contains filtered or unexported fields
}

Validation exception error.

func (*ValidationException) Code

func (s *ValidationException) Code() string

Code returns the exception type name.

func (*ValidationException) Error

func (s *ValidationException) Error() string

func (ValidationException) GoString

func (s ValidationException) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ValidationException) Message

func (s *ValidationException) Message() string

Message returns the exception's message.

func (*ValidationException) OrigErr

func (s *ValidationException) OrigErr() error

OrigErr always returns nil, satisfies awserr.Error interface.

func (*ValidationException) RequestID

func (s *ValidationException) RequestID() string

RequestID returns the service's response RequestID for request.

func (*ValidationException) StatusCode

func (s *ValidationException) StatusCode() int

Status code returns the HTTP status code for the request's response error.

func (ValidationException) String

func (s ValidationException) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type ValidationExceptionField

type ValidationExceptionField struct {

	// A message about the validation exception.
	//
	// Message is a required field
	Message *string `locationName:"message" type:"string" required:"true"`

	// The name of the validation exception.
	//
	// Name is a required field
	Name *string `locationName:"name" type:"string" required:"true"`
	// contains filtered or unexported fields
}

Contains information about a validation exception.

func (ValidationExceptionField) GoString

func (s ValidationExceptionField) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*ValidationExceptionField) SetMessage

SetMessage sets the Message field's value.

func (*ValidationExceptionField) SetName

SetName sets the Name field's value.

func (ValidationExceptionField) String

func (s ValidationExceptionField) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

type VpcConfiguration

type VpcConfiguration struct {

	// If this field is specified, this access point will only allow connections
	// from the specified VPC ID.
	//
	// VpcId is a required field
	VpcId *string `locationName:"vpcId" type:"string" required:"true"`
	// contains filtered or unexported fields
}

The proposed virtual private cloud (VPC) configuration for the Amazon S3 access point. VPC configuration does not apply to multi-region access points. For more information, see VpcConfiguration (https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_VpcConfiguration.html).

func (VpcConfiguration) GoString

func (s VpcConfiguration) GoString() string

GoString returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*VpcConfiguration) SetVpcId

func (s *VpcConfiguration) SetVpcId(v string) *VpcConfiguration

SetVpcId sets the VpcId field's value.

func (VpcConfiguration) String

func (s VpcConfiguration) String() string

String returns the string representation.

API parameter values that are decorated as "sensitive" in the API will not be included in the string output. The member name will be present, but the value will be replaced with "sensitive".

func (*VpcConfiguration) Validate

func (s *VpcConfiguration) Validate() error

Validate inspects the fields of the type to determine if they are valid.

Directories

Path Synopsis
Package accessanalyzeriface provides an interface to enable mocking the Access Analyzer service client for testing your code.
Package accessanalyzeriface provides an interface to enable mocking the Access Analyzer service client for testing your code.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL