|
15 | 15 | "GetAnalyzedResource": "<p>Retrieves information about a resource that was analyzed.</p>",
|
16 | 16 | "GetAnalyzer": "<p>Retrieves information about the specified analyzer.</p>",
|
17 | 17 | "GetArchiveRule": "<p>Retrieves information about an archive rule.</p> <p>To learn about filter keys that you can use to create an archive rule, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html\">IAM Access Analyzer filter keys</a> in the <b>IAM User Guide</b>.</p>",
|
18 |
| - "GetFinding": "<p>Retrieves information about the specified finding.</p>", |
19 |
| - "GetFindingV2": "<p>Retrieves information about the specified finding.</p>", |
| 18 | + "GetFinding": "<p>Retrieves information about the specified finding. GetFinding and GetFindingV2 both use <code>access-analyzer:GetFinding</code> in the <code>Action</code> element of an IAM policy statement. You must have permission to perform the <code>access-analyzer:GetFinding</code> action.</p>", |
| 19 | + "GetFindingV2": "<p>Retrieves information about the specified finding. GetFinding and GetFindingV2 both use <code>access-analyzer:GetFinding</code> in the <code>Action</code> element of an IAM policy statement. You must have permission to perform the <code>access-analyzer:GetFinding</code> action.</p>", |
20 | 20 | "GetGeneratedPolicy": "<p>Retrieves the policy that was generated using <code>StartPolicyGeneration</code>. </p>",
|
21 | 21 | "ListAccessPreviewFindings": "<p>Retrieves a list of access preview findings generated by the specified access preview.</p>",
|
22 | 22 | "ListAccessPreviews": "<p>Retrieves a list of access previews for the specified analyzer.</p>",
|
23 |
| - "ListAnalyzedResources": "<p>Retrieves a list of resources of the specified type that have been analyzed by the specified analyzer..</p>", |
| 23 | + "ListAnalyzedResources": "<p>Retrieves a list of resources of the specified type that have been analyzed by the specified external access analyzer. This action is not supported for unused access analyzers.</p>", |
24 | 24 | "ListAnalyzers": "<p>Retrieves a list of analyzers.</p>",
|
25 | 25 | "ListArchiveRules": "<p>Retrieves a list of archive rules created for the specified analyzer.</p>",
|
26 |
| - "ListFindings": "<p>Retrieves a list of findings generated by the specified analyzer.</p> <p>To learn about filter keys that you can use to retrieve a list of findings, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html\">IAM Access Analyzer filter keys</a> in the <b>IAM User Guide</b>.</p>", |
27 |
| - "ListFindingsV2": "<p>Retrieves a list of findings generated by the specified analyzer.</p> <p>To learn about filter keys that you can use to retrieve a list of findings, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html\">IAM Access Analyzer filter keys</a> in the <b>IAM User Guide</b>.</p>", |
| 26 | + "ListFindings": "<p>Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use <code>access-analyzer:ListFindings</code> in the <code>Action</code> element of an IAM policy statement. You must have permission to perform the <code>access-analyzer:ListFindings</code> action.</p> <p>To learn about filter keys that you can use to retrieve a list of findings, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html\">IAM Access Analyzer filter keys</a> in the <b>IAM User Guide</b>.</p>", |
| 27 | + "ListFindingsV2": "<p>Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use <code>access-analyzer:ListFindings</code> in the <code>Action</code> element of an IAM policy statement. You must have permission to perform the <code>access-analyzer:ListFindings</code> action.</p> <p>To learn about filter keys that you can use to retrieve a list of findings, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html\">IAM Access Analyzer filter keys</a> in the <b>IAM User Guide</b>.</p>", |
28 | 28 | "ListPolicyGenerations": "<p>Lists all of the policy generations requested in the last seven days.</p>",
|
29 | 29 | "ListTagsForResource": "<p>Retrieves a list of tags applied to the specified resource.</p>",
|
30 | 30 | "StartPolicyGeneration": "<p>Starts the policy generation request.</p>",
|
|
45 | 45 | "AccessActionsList": {
|
46 | 46 | "base": null,
|
47 | 47 | "refs": {
|
48 |
| - "Access$actions": "<p>A list of actions for the access permissions.</p>" |
| 48 | + "Access$actions": "<p>A list of actions for the access permissions. Any strings that can be used as an action in an IAM policy can be used in the list of actions to check.</p>" |
49 | 49 | }
|
50 | 50 | },
|
51 | 51 | "AccessCheckPolicyDocument": {
|
|
1317 | 1317 | }
|
1318 | 1318 | },
|
1319 | 1319 | "S3ExpressDirectoryBucketConfiguration": {
|
1320 |
| - "base": "<p>Proposed access control configuration for an Amazon S3 directory bucket. You can propose a configuration for a new Amazon S3 directory bucket or an existing Amazon S3 directory bucket that you own by specifying the Amazon S3 bucket policy. If the configuration is for an existing Amazon S3 directory bucket and you do not specify the Amazon S3 bucket policy, the access preview uses the existing policy attached to the directory bucket. If the access preview is for a new resource and you do not specify the Amazon S3 bucket policy, the access preview assumes an directory bucket without a policy. To propose deletion of an existing bucket policy, you can specify an empty string. For more information about bucket policy limits, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-example-bucket-policies.html\">Example bucket policies</a>.</p>", |
| 1320 | + "base": "<p>Proposed access control configuration for an Amazon S3 directory bucket. You can propose a configuration for a new Amazon S3 directory bucket or an existing Amazon S3 directory bucket that you own by specifying the Amazon S3 bucket policy. If the configuration is for an existing Amazon S3 directory bucket and you do not specify the Amazon S3 bucket policy, the access preview uses the existing policy attached to the directory bucket. If the access preview is for a new resource and you do not specify the Amazon S3 bucket policy, the access preview assumes an directory bucket without a policy. To propose deletion of an existing bucket policy, you can specify an empty string. For more information about Amazon S3 directory bucket policies, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-example-bucket-policies.html\">Example directory bucket policies for S3 Express One Zone</a>.</p>", |
1321 | 1321 | "refs": {
|
1322 | 1322 | "Configuration$s3ExpressDirectoryBucket": "<p>The access control configuration is for an Amazon S3 directory bucket.</p>"
|
1323 | 1323 | }
|
|
1632 | 1632 | "base": null,
|
1633 | 1633 | "refs": {
|
1634 | 1634 | "AnalyzerSummary$type": "<p>The type of analyzer, which corresponds to the zone of trust chosen for the analyzer.</p>",
|
1635 |
| - "CreateAnalyzerRequest$type": "<p>The type of analyzer to create. Only <code>ACCOUNT</code>, <code>ORGANIZATION</code>, <code>ACCOUNT_UNUSED_ACCESS</code>, and <code>ORGANIZTAION_UNUSED_ACCESS</code> analyzers are supported. You can create only one analyzer per account per Region. You can create up to 5 analyzers per organization per Region.</p>", |
| 1635 | + "CreateAnalyzerRequest$type": "<p>The type of analyzer to create. Only <code>ACCOUNT</code>, <code>ORGANIZATION</code>, <code>ACCOUNT_UNUSED_ACCESS</code>, and <code>ORGANIZATION_UNUSED_ACCESS</code> analyzers are supported. You can create only one analyzer per account per Region. You can create up to 5 analyzers per organization per Region.</p>", |
1636 | 1636 | "ListAnalyzersRequest$type": "<p>The type of analyzer.</p>"
|
1637 | 1637 | }
|
1638 | 1638 | },
|
|
0 commit comments