|
170 | 170 | "documentation":"<p>Creates an archive rule for the specified analyzer. Archive rules automatically archive new findings that meet the criteria you define when you create the rule.</p> <p>To learn about filter keys that you can use to create an archive rule, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html\">IAM Access Analyzer filter keys</a> in the <b>IAM User Guide</b>.</p>", |
171 | 171 | "idempotent":true |
172 | 172 | }, |
| 173 | + "CreateServiceLinkedAnalyzer":{ |
| 174 | + "name":"CreateServiceLinkedAnalyzer", |
| 175 | + "http":{ |
| 176 | + "method":"PUT", |
| 177 | + "requestUri":"/service-linked-analyzer", |
| 178 | + "responseCode":200 |
| 179 | + }, |
| 180 | + "input":{"shape":"CreateServiceLinkedAnalyzerRequest"}, |
| 181 | + "output":{"shape":"CreateServiceLinkedAnalyzerResponse"}, |
| 182 | + "errors":[ |
| 183 | + {"shape":"ConflictException"}, |
| 184 | + {"shape":"ValidationException"}, |
| 185 | + {"shape":"InternalServerException"}, |
| 186 | + {"shape":"ServiceQuotaExceededException"}, |
| 187 | + {"shape":"ThrottlingException"}, |
| 188 | + {"shape":"AccessDeniedException"} |
| 189 | + ], |
| 190 | + "documentation":"<p>Creates a service-linked analyzer managed by an Amazon Web Services service. This operation can only be invoked by authorized Amazon Web Services services. Direct customer invocation returns <code>AccessDeniedException</code>.</p> <p>Service-linked analyzers enable Amazon Web Services services to create and manage analyzers on behalf of customers. The lifecycle of these analyzers is managed by the calling service.</p>", |
| 191 | + "idempotent":true |
| 192 | + }, |
173 | 193 | "DeleteAnalyzer":{ |
174 | 194 | "name":"DeleteAnalyzer", |
175 | 195 | "http":{ |
|
206 | 226 | "documentation":"<p>Deletes the specified archive rule.</p>", |
207 | 227 | "idempotent":true |
208 | 228 | }, |
| 229 | + "DeleteServiceLinkedAnalyzer":{ |
| 230 | + "name":"DeleteServiceLinkedAnalyzer", |
| 231 | + "http":{ |
| 232 | + "method":"DELETE", |
| 233 | + "requestUri":"/service-linked-analyzer/{analyzerName}", |
| 234 | + "responseCode":200 |
| 235 | + }, |
| 236 | + "input":{"shape":"DeleteServiceLinkedAnalyzerRequest"}, |
| 237 | + "errors":[ |
| 238 | + {"shape":"ResourceNotFoundException"}, |
| 239 | + {"shape":"ConflictException"}, |
| 240 | + {"shape":"ValidationException"}, |
| 241 | + {"shape":"InternalServerException"}, |
| 242 | + {"shape":"ThrottlingException"}, |
| 243 | + {"shape":"AccessDeniedException"} |
| 244 | + ], |
| 245 | + "documentation":"<p>Deletes a service-linked analyzer. This operation can be invoked by both authorized Amazon Web Services services and customers.</p> <p>When invoked by a customer, IAM Access Analyzer performs a callback to the managing service to verify whether the analyzer is still in use and can be deleted. If the service indicates the analyzer is still in use, the deletion is rejected with <code>ConflictException</code>.</p>", |
| 246 | + "idempotent":true |
| 247 | + }, |
209 | 248 | "GenerateFindingRecommendation":{ |
210 | 249 | "name":"GenerateFindingRecommendation", |
211 | 250 | "http":{ |
|
1156 | 1195 | "documentation":"<p>Contains information about the configuration of an analyzer for an Amazon Web Services organization or account.</p>", |
1157 | 1196 | "union":true |
1158 | 1197 | }, |
| 1198 | + "AnalyzerName":{ |
| 1199 | + "type":"string", |
| 1200 | + "max":255, |
| 1201 | + "min":1, |
| 1202 | + "pattern":"[A-Za-z_][A-Za-z0-9_.-]*" |
| 1203 | + }, |
1159 | 1204 | "AnalyzerStatus":{ |
1160 | 1205 | "type":"string", |
1161 | 1206 | "enum":[ |
|
1180 | 1225 | "documentation":"<p>The ARN of the analyzer.</p>" |
1181 | 1226 | }, |
1182 | 1227 | "name":{ |
1183 | | - "shape":"Name", |
| 1228 | + "shape":"AnalyzerName", |
1184 | 1229 | "documentation":"<p>The name of the analyzer.</p>" |
1185 | 1230 | }, |
1186 | 1231 | "type":{ |
|
1214 | 1259 | "configuration":{ |
1215 | 1260 | "shape":"AnalyzerConfiguration", |
1216 | 1261 | "documentation":"<p>Specifies if the analyzer is an external access, unused access, or internal access analyzer. The <a href=\"https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_GetAnalyzer.html\">GetAnalyzer</a> action includes this property in its response if a configuration is specified, while the <a href=\"https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_ListAnalyzers.html\">ListAnalyzers</a> action omits it.</p>" |
| 1262 | + }, |
| 1263 | + "managedBy":{ |
| 1264 | + "shape":"String", |
| 1265 | + "documentation":"<p>The service principal that manages this analyzer (for example, <code>securityhubv2.amazonaws.com</code>). This field is only present for service-linked analyzers and is not included for customer-managed analyzers.</p>" |
1217 | 1266 | } |
1218 | 1267 | }, |
1219 | 1268 | "documentation":"<p>Contains information about the analyzer.</p>" |
|
1629 | 1678 | ], |
1630 | 1679 | "members":{ |
1631 | 1680 | "analyzerName":{ |
1632 | | - "shape":"Name", |
| 1681 | + "shape":"AnalyzerName", |
1633 | 1682 | "documentation":"<p>The name of the analyzer to create.</p>" |
1634 | 1683 | }, |
1635 | 1684 | "type":{ |
|
1675 | 1724 | ], |
1676 | 1725 | "members":{ |
1677 | 1726 | "analyzerName":{ |
1678 | | - "shape":"Name", |
| 1727 | + "shape":"AnalyzerName", |
1679 | 1728 | "documentation":"<p>The name of the created analyzer.</p>", |
1680 | 1729 | "location":"uri", |
1681 | 1730 | "locationName":"analyzerName" |
|
1696 | 1745 | }, |
1697 | 1746 | "documentation":"<p>Creates an archive rule.</p>" |
1698 | 1747 | }, |
| 1748 | + "CreateServiceLinkedAnalyzerRequest":{ |
| 1749 | + "type":"structure", |
| 1750 | + "required":["type"], |
| 1751 | + "members":{ |
| 1752 | + "type":{ |
| 1753 | + "shape":"Type", |
| 1754 | + "documentation":"<p>The type of analyzer to create. Valid values are <code>ACCOUNT_UNUSED_ACCESS</code> and <code>ORGANIZATION_UNUSED_ACCESS</code>.</p>" |
| 1755 | + }, |
| 1756 | + "archiveRules":{ |
| 1757 | + "shape":"InlineArchiveRulesList", |
| 1758 | + "documentation":"<p>Specifies the archive rules to add for the analyzer. Archive rules automatically archive findings that meet the criteria you define for the rule.</p>" |
| 1759 | + }, |
| 1760 | + "clientToken":{ |
| 1761 | + "shape":"String", |
| 1762 | + "documentation":"<p>A client token.</p>", |
| 1763 | + "idempotencyToken":true |
| 1764 | + }, |
| 1765 | + "configuration":{ |
| 1766 | + "shape":"AnalyzerConfiguration", |
| 1767 | + "documentation":"<p>Specifies the configuration of the analyzer. The specified scope of unused access is used for the configuration.</p>" |
| 1768 | + } |
| 1769 | + }, |
| 1770 | + "documentation":"<p>Creates a service-linked analyzer.</p>" |
| 1771 | + }, |
| 1772 | + "CreateServiceLinkedAnalyzerResponse":{ |
| 1773 | + "type":"structure", |
| 1774 | + "members":{ |
| 1775 | + "arn":{ |
| 1776 | + "shape":"AnalyzerArn", |
| 1777 | + "documentation":"<p>The ARN of the service-linked analyzer that was created by the request. The analyzer name follows the format <code>_AccessAnalyzerFor{ServiceName}-{Id}</code> where <code>Id</code> is a randomly generated identifier.</p>" |
| 1778 | + } |
| 1779 | + }, |
| 1780 | + "documentation":"<p>The response to the request to create a service-linked analyzer.</p>" |
| 1781 | + }, |
1699 | 1782 | "Criterion":{ |
1700 | 1783 | "type":"structure", |
1701 | 1784 | "members":{ |
|
1723 | 1806 | "required":["analyzerName"], |
1724 | 1807 | "members":{ |
1725 | 1808 | "analyzerName":{ |
1726 | | - "shape":"Name", |
| 1809 | + "shape":"AnalyzerName", |
1727 | 1810 | "documentation":"<p>The name of the analyzer to delete.</p>", |
1728 | 1811 | "location":"uri", |
1729 | 1812 | "locationName":"analyzerName" |
|
1746 | 1829 | ], |
1747 | 1830 | "members":{ |
1748 | 1831 | "analyzerName":{ |
1749 | | - "shape":"Name", |
| 1832 | + "shape":"AnalyzerName", |
1750 | 1833 | "documentation":"<p>The name of the analyzer that associated with the archive rule to delete.</p>", |
1751 | 1834 | "location":"uri", |
1752 | 1835 | "locationName":"analyzerName" |
|
1767 | 1850 | }, |
1768 | 1851 | "documentation":"<p>Deletes an archive rule.</p>" |
1769 | 1852 | }, |
| 1853 | + "DeleteServiceLinkedAnalyzerRequest":{ |
| 1854 | + "type":"structure", |
| 1855 | + "required":["analyzerName"], |
| 1856 | + "members":{ |
| 1857 | + "analyzerName":{ |
| 1858 | + "shape":"AnalyzerName", |
| 1859 | + "documentation":"<p>The name of the service-linked analyzer to delete. Service-linked analyzer names follow the format <code>_AccessAnalyzerFor{ServiceName}-{Id}</code>.</p>", |
| 1860 | + "location":"uri", |
| 1861 | + "locationName":"analyzerName" |
| 1862 | + }, |
| 1863 | + "clientToken":{ |
| 1864 | + "shape":"String", |
| 1865 | + "documentation":"<p>A client token.</p>", |
| 1866 | + "idempotencyToken":true, |
| 1867 | + "location":"querystring", |
| 1868 | + "locationName":"clientToken" |
| 1869 | + } |
| 1870 | + }, |
| 1871 | + "documentation":"<p>Deletes a service-linked analyzer.</p>" |
| 1872 | + }, |
1770 | 1873 | "DynamodbStreamConfiguration":{ |
1771 | 1874 | "type":"structure", |
1772 | 1875 | "members":{ |
|
2418 | 2521 | "required":["analyzerName"], |
2419 | 2522 | "members":{ |
2420 | 2523 | "analyzerName":{ |
2421 | | - "shape":"Name", |
| 2524 | + "shape":"AnalyzerName", |
2422 | 2525 | "documentation":"<p>The name of the analyzer retrieved.</p>", |
2423 | 2526 | "location":"uri", |
2424 | 2527 | "locationName":"analyzerName" |
|
2445 | 2548 | ], |
2446 | 2549 | "members":{ |
2447 | 2550 | "analyzerName":{ |
2448 | | - "shape":"Name", |
| 2551 | + "shape":"AnalyzerName", |
2449 | 2552 | "documentation":"<p>The name of the analyzer to retrieve rules from.</p>", |
2450 | 2553 | "location":"uri", |
2451 | 2554 | "locationName":"analyzerName" |
|
3291 | 3394 | "required":["analyzerName"], |
3292 | 3395 | "members":{ |
3293 | 3396 | "analyzerName":{ |
3294 | | - "shape":"Name", |
| 3397 | + "shape":"AnalyzerName", |
3295 | 3398 | "documentation":"<p>The name of the analyzer to retrieve rules from.</p>", |
3296 | 3399 | "location":"uri", |
3297 | 3400 | "locationName":"analyzerName" |
|
4549 | 4652 | "required":["analyzerName"], |
4550 | 4653 | "members":{ |
4551 | 4654 | "analyzerName":{ |
4552 | | - "shape":"Name", |
| 4655 | + "shape":"AnalyzerName", |
4553 | 4656 | "documentation":"<p>The name of the analyzer to modify.</p>", |
4554 | 4657 | "location":"uri", |
4555 | 4658 | "locationName":"analyzerName" |
|
4572 | 4675 | ], |
4573 | 4676 | "members":{ |
4574 | 4677 | "analyzerName":{ |
4575 | | - "shape":"Name", |
| 4678 | + "shape":"AnalyzerName", |
4576 | 4679 | "documentation":"<p>The name of the analyzer to update the archive rules for.</p>", |
4577 | 4680 | "location":"uri", |
4578 | 4681 | "locationName":"analyzerName" |
|
0 commit comments