awsaccessanalyzer

package
v2.175.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jan 11, 2025 License: Apache-2.0 Imports: 7 Imported by: 0

README

AWS::AccessAnalyzer Construct Library

This module is part of the AWS Cloud Development Kit project.

import accessanalyzer "github.com/aws/aws-cdk-go/awscdk"

There are no official hand-written (L2) constructs for this service yet. Here are some suggestions on how to proceed:

There are no hand-written (L2) constructs for this service yet. However, you can still use the automatically generated L1 constructs, and use this service exactly as you would using CloudFormation directly.

For more information on the resources and properties available for this service, see the CloudFormation documentation for AWS::AccessAnalyzer.

(Read the CDK Contributing Guide and submit an RFC if you are interested in contributing to this construct library.)

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func CfnAnalyzer_CFN_RESOURCE_TYPE_NAME 

func CfnAnalyzer_CFN_RESOURCE_TYPE_NAME() *string

func CfnAnalyzer_IsCfnElement 

func CfnAnalyzer_IsCfnElement(x interface{}) *bool

Returns `true` if a construct is a stack element (i.e. part of the synthesized cloudformation template).

Uses duck-typing instead of `instanceof` to allow stack elements from different versions of this library to be included in the same stack.

Returns: The construct as a stack element or undefined if it is not a stack element.

func CfnAnalyzer_IsCfnResource 

func CfnAnalyzer_IsCfnResource(x interface{}) *bool

Check whether the given object is a CfnResource.

func CfnAnalyzer_IsConstruct 

func CfnAnalyzer_IsConstruct(x interface{}) *bool

Checks if `x` is a construct.

Use this method instead of `instanceof` to properly detect `Construct` instances, even when the construct library is symlinked.

Explanation: in JavaScript, multiple copies of the `constructs` library on disk are seen as independent, completely different libraries. As a consequence, the class `Construct` in each copy of the `constructs` library is seen as a different class, and an instance of one class will not test as `instanceof` the other class. `npm install` will not create installations like this, but users may manually symlink construct libraries together or use a monorepo tool: in those cases, multiple copies of the `constructs` library can be accidentally installed, and `instanceof` will behave unpredictably. It is safest to avoid using `instanceof`, and using this type-testing method instead.

Returns: true if `x` is an object created from a class which extends `Construct`.

func NewCfnAnalyzer_Override 

func NewCfnAnalyzer_Override(c CfnAnalyzer, scope constructs.Construct, id *string, props *CfnAnalyzerProps)

Types

type CfnAnalyzer 

type CfnAnalyzer interface {
	awscdk.CfnResource
	awscdk.IInspectable
	awscdk.ITaggable
	// Contains information about the configuration of an analyzer for an AWS organization or account.
	AnalyzerConfiguration() interface{}
	SetAnalyzerConfiguration(val interface{})
	// The name of the analyzer.
	AnalyzerName() *string
	SetAnalyzerName(val *string)
	// Specifies the archive rules to add for the analyzer.
	ArchiveRules() interface{}
	SetArchiveRules(val interface{})
	// The ARN of the analyzer that was created.
	AttrArn() *string
	// Options for this resource, such as condition, update policy etc.
	CfnOptions() awscdk.ICfnResourceOptions
	CfnProperties() *map[string]interface{}
	// AWS resource type.
	CfnResourceType() *string
	// Returns: the stack trace of the point where this Resource was created from, sourced
	// from the +metadata+ entry typed +aws:cdk:logicalId+, and with the bottom-most
	// node +internal+ entries filtered.
	CreationStack() *[]*string
	// The logical ID for this CloudFormation stack element.
	//
	// The logical ID of the element
	// is calculated from the path of the resource node in the construct tree.
	//
	// To override this value, use `overrideLogicalId(newLogicalId)`.
	//
	// Returns: the logical ID as a stringified token. This value will only get
	// resolved during synthesis.
	LogicalId() *string
	// The tree node.
	Node() constructs.Node
	// Return a string that will be resolved to a CloudFormation `{ Ref }` for this element.
	//
	// If, by any chance, the intrinsic reference of a resource is not a string, you could
	// coerce it to an IResolvable through `Lazy.any({ produce: resource.ref })`.
	Ref() *string
	// The stack in which this element is defined.
	//
	// CfnElements must be defined within a stack scope (directly or indirectly).
	Stack() awscdk.Stack
	// Tag Manager which manages the tags for this resource.
	Tags() awscdk.TagManager
	// An array of key-value pairs to apply to the analyzer.
	TagsRaw() *[]*awscdk.CfnTag
	SetTagsRaw(val *[]*awscdk.CfnTag)
	// The type represents the zone of trust for the analyzer.
	Type() *string
	SetType(val *string)
	// Deprecated.
	// Deprecated: use `updatedProperties`
	//
	// Return properties modified after initiation
	//
	// Resources that expose mutable properties should override this function to
	// collect and return the properties object for this resource.
	UpdatedProperites() *map[string]interface{}
	// Return properties modified after initiation.
	//
	// Resources that expose mutable properties should override this function to
	// collect and return the properties object for this resource.
	UpdatedProperties() *map[string]interface{}
	// Syntactic sugar for `addOverride(path, undefined)`.
	AddDeletionOverride(path *string)
	// Indicates that this resource depends on another resource and cannot be provisioned unless the other resource has been successfully provisioned.
	//
	// This can be used for resources across stacks (or nested stack) boundaries
	// and the dependency will automatically be transferred to the relevant scope.
	AddDependency(target awscdk.CfnResource)
	// Indicates that this resource depends on another resource and cannot be provisioned unless the other resource has been successfully provisioned.
	// Deprecated: use addDependency.
	AddDependsOn(target awscdk.CfnResource)
	// Add a value to the CloudFormation Resource Metadata.
	// See: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/metadata-section-structure.html
	//
	// Note that this is a different set of metadata from CDK node metadata; this
	// metadata ends up in the stack template under the resource, whereas CDK
	// node metadata ends up in the Cloud Assembly.
	//
	AddMetadata(key *string, value interface{})
	// Adds an override to the synthesized CloudFormation resource.
	//
	// To add a
	// property override, either use `addPropertyOverride` or prefix `path` with
	// "Properties." (i.e. `Properties.TopicName`).
	//
	// If the override is nested, separate each nested level using a dot (.) in the path parameter.
	// If there is an array as part of the nesting, specify the index in the path.
	//
	// To include a literal `.` in the property name, prefix with a `\`. In most
	// programming languages you will need to write this as `"\\."` because the
	// `\` itself will need to be escaped.
	//
	// For example,
	// “`typescript
	// cfnResource.addOverride('Properties.GlobalSecondaryIndexes.0.Projection.NonKeyAttributes', ['myattribute']);
	// cfnResource.addOverride('Properties.GlobalSecondaryIndexes.1.ProjectionType', 'INCLUDE');
	// “`
	// would add the overrides
	// “`json
	// "Properties": {
	//   "GlobalSecondaryIndexes": [
	//     {
	//       "Projection": {
	//         "NonKeyAttributes": [ "myattribute" ]
	//         ...
	//       }
	//       ...
	//     },
	//     {
	//       "ProjectionType": "INCLUDE"
	//       ...
	//     },
	//   ]
	//   ...
	// }
	// “`
	//
	// The `value` argument to `addOverride` will not be processed or translated
	// in any way. Pass raw JSON values in here with the correct capitalization
	// for CloudFormation. If you pass CDK classes or structs, they will be
	// rendered with lowercased key names, and CloudFormation will reject the
	// template.
	AddOverride(path *string, value interface{})
	// Adds an override that deletes the value of a property from the resource definition.
	AddPropertyDeletionOverride(propertyPath *string)
	// Adds an override to a resource property.
	//
	// Syntactic sugar for `addOverride("Properties.<...>", value)`.
	AddPropertyOverride(propertyPath *string, value interface{})
	// Sets the deletion policy of the resource based on the removal policy specified.
	//
	// The Removal Policy controls what happens to this resource when it stops
	// being managed by CloudFormation, either because you've removed it from the
	// CDK application or because you've made a change that requires the resource
	// to be replaced.
	//
	// The resource can be deleted (`RemovalPolicy.DESTROY`), or left in your AWS
	// account for data recovery and cleanup later (`RemovalPolicy.RETAIN`). In some
	// cases, a snapshot can be taken of the resource prior to deletion
	// (`RemovalPolicy.SNAPSHOT`). A list of resources that support this policy
	// can be found in the following link:.
	// See: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html#aws-attribute-deletionpolicy-options
	//
	ApplyRemovalPolicy(policy awscdk.RemovalPolicy, options *awscdk.RemovalPolicyOptions)
	// Returns a token for an runtime attribute of this resource.
	//
	// Ideally, use generated attribute accessors (e.g. `resource.arn`), but this can be used for future compatibility
	// in case there is no generated attribute.
	GetAtt(attributeName *string, typeHint awscdk.ResolutionTypeHint) awscdk.Reference
	// Retrieve a value value from the CloudFormation Resource Metadata.
	// See: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/metadata-section-structure.html
	//
	// Note that this is a different set of metadata from CDK node metadata; this
	// metadata ends up in the stack template under the resource, whereas CDK
	// node metadata ends up in the Cloud Assembly.
	//
	GetMetadata(key *string) interface{}
	// Examines the CloudFormation resource and discloses attributes.
	Inspect(inspector awscdk.TreeInspector)
	// Retrieves an array of resources this resource depends on.
	//
	// This assembles dependencies on resources across stacks (including nested stacks)
	// automatically.
	ObtainDependencies() *[]interface{}
	// Get a shallow copy of dependencies between this resource and other resources in the same stack.
	ObtainResourceDependencies() *[]awscdk.CfnResource
	// Overrides the auto-generated logical ID with a specific ID.
	OverrideLogicalId(newLogicalId *string)
	// Indicates that this resource no longer depends on another resource.
	//
	// This can be used for resources across stacks (including nested stacks)
	// and the dependency will automatically be removed from the relevant scope.
	RemoveDependency(target awscdk.CfnResource)
	RenderProperties(props *map[string]interface{}) *map[string]interface{}
	// Replaces one dependency with another.
	ReplaceDependency(target awscdk.CfnResource, newTarget awscdk.CfnResource)
	// Can be overridden by subclasses to determine if this resource will be rendered into the cloudformation template.
	//
	// Returns: `true` if the resource should be included or `false` is the resource
	// should be omitted.
	ShouldSynthesize() *bool
	// Returns a string representation of this construct.
	//
	// Returns: a string representation of this resource.
	ToString() *string
	ValidateProperties(_properties interface{})
}

The `AWS::AccessAnalyzer::Analyzer` resource specifies a new analyzer.

The analyzer is an object that represents the IAM Access Analyzer feature. An analyzer is required for Access Analyzer to become operational.

Example: 

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

cfnAnalyzer := awscdk.Aws_accessanalyzer.NewCfnAnalyzer(this, jsii.String("MyCfnAnalyzer"), &CfnAnalyzerProps{
	Type: jsii.String("type"),

	// the properties below are optional
	AnalyzerConfiguration: &AnalyzerConfigurationProperty{
		UnusedAccessConfiguration: &UnusedAccessConfigurationProperty{
			AnalysisRule: &AnalysisRuleProperty{
				Exclusions: []interface{}{
					&AnalysisRuleCriteriaProperty{
						AccountIds: []*string{
							jsii.String("accountIds"),
						},
						ResourceTags: []interface{}{
							[]interface{}{
								&CfnTag{
									Key: jsii.String("key"),
									Value: jsii.String("value"),
								},
							},
						},
					},
				},
			},
			UnusedAccessAge: jsii.Number(123),
		},
	},
	AnalyzerName: jsii.String("analyzerName"),
	ArchiveRules: []interface{}{
		&ArchiveRuleProperty{
			Filter: []interface{}{
				&FilterProperty{
					Property: jsii.String("property"),

					// the properties below are optional
					Contains: []*string{
						jsii.String("contains"),
					},
					Eq: []*string{
						jsii.String("eq"),
					},
					Exists: jsii.Boolean(false),
					Neq: []*string{
						jsii.String("neq"),
					},
				},
			},
			RuleName: jsii.String("ruleName"),
		},
	},
	Tags: []cfnTag{
		&cfnTag{
			Key: jsii.String("key"),
			Value: jsii.String("value"),
		},
	},
})

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html

func NewCfnAnalyzer 

func NewCfnAnalyzer(scope constructs.Construct, id *string, props *CfnAnalyzerProps) CfnAnalyzer

type CfnAnalyzerProps 

type CfnAnalyzerProps struct {
	// The type represents the zone of trust for the analyzer.
	//
	// *Allowed Values* : ACCOUNT | ORGANIZATION | ACCOUNT_UNUSED_ACCESS | ORGANIZATION_UNUSED_ACCESS.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html#cfn-accessanalyzer-analyzer-type
	//
	Type *string `field:"required" json:"type" yaml:"type"`
	// Contains information about the configuration of an analyzer for an AWS organization or account.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html#cfn-accessanalyzer-analyzer-analyzerconfiguration
	//
	AnalyzerConfiguration interface{} `field:"optional" json:"analyzerConfiguration" yaml:"analyzerConfiguration"`
	// The name of the analyzer.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html#cfn-accessanalyzer-analyzer-analyzername
	//
	AnalyzerName *string `field:"optional" json:"analyzerName" yaml:"analyzerName"`
	// Specifies the archive rules to add for the analyzer.
	//
	// Archive rules automatically archive findings that meet the criteria you define for the rule.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html#cfn-accessanalyzer-analyzer-archiverules
	//
	ArchiveRules interface{} `field:"optional" json:"archiveRules" yaml:"archiveRules"`
	// An array of key-value pairs to apply to the analyzer.
	//
	// You can use the set of Unicode letters, digits, whitespace, `_` , `.` , `/` , `=` , `+` , and `-` .
	//
	// For the tag key, you can specify a value that is 1 to 128 characters in length and cannot be prefixed with `aws:` .
	//
	// For the tag value, you can specify a value that is 0 to 256 characters in length.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html#cfn-accessanalyzer-analyzer-tags
	//
	Tags *[]*awscdk.CfnTag `field:"optional" json:"tags" yaml:"tags"`
}

Properties for defining a `CfnAnalyzer`.

Example: 

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

cfnAnalyzerProps := &CfnAnalyzerProps{
	Type: jsii.String("type"),

	// the properties below are optional
	AnalyzerConfiguration: &AnalyzerConfigurationProperty{
		UnusedAccessConfiguration: &UnusedAccessConfigurationProperty{
			AnalysisRule: &AnalysisRuleProperty{
				Exclusions: []interface{}{
					&AnalysisRuleCriteriaProperty{
						AccountIds: []*string{
							jsii.String("accountIds"),
						},
						ResourceTags: []interface{}{
							[]interface{}{
								&CfnTag{
									Key: jsii.String("key"),
									Value: jsii.String("value"),
								},
							},
						},
					},
				},
			},
			UnusedAccessAge: jsii.Number(123),
		},
	},
	AnalyzerName: jsii.String("analyzerName"),
	ArchiveRules: []interface{}{
		&ArchiveRuleProperty{
			Filter: []interface{}{
				&FilterProperty{
					Property: jsii.String("property"),

					// the properties below are optional
					Contains: []*string{
						jsii.String("contains"),
					},
					Eq: []*string{
						jsii.String("eq"),
					},
					Exists: jsii.Boolean(false),
					Neq: []*string{
						jsii.String("neq"),
					},
				},
			},
			RuleName: jsii.String("ruleName"),
		},
	},
	Tags: []cfnTag{
		&cfnTag{
			Key: jsii.String("key"),
			Value: jsii.String("value"),
		},
	},
}

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html

type CfnAnalyzer_AnalysisRuleCriteriaProperty added in v2.169.0 

type CfnAnalyzer_AnalysisRuleCriteriaProperty struct {
	// A list of AWS account IDs to apply to the analysis rule criteria.
	//
	// The accounts cannot include the organization analyzer owner account. Account IDs can only be applied to the analysis rule criteria for organization-level analyzers. The list cannot include more than 2,000 account IDs.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-analysisrulecriteria.html#cfn-accessanalyzer-analyzer-analysisrulecriteria-accountids
	//
	AccountIds *[]*string `field:"optional" json:"accountIds" yaml:"accountIds"`
	// An array of key-value pairs to match for your resources.
	//
	// You can use the set of Unicode letters, digits, whitespace, `_` , `.` , `/` , `=` , `+` , and `-` .
	//
	// For the tag key, you can specify a value that is 1 to 128 characters in length and cannot be prefixed with `aws:` .
	//
	// For the tag value, you can specify a value that is 0 to 256 characters in length. If the specified tag value is 0 characters, the rule is applied to all principals with the specified tag key.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-analysisrulecriteria.html#cfn-accessanalyzer-analyzer-analysisrulecriteria-resourcetags
	//
	ResourceTags interface{} `field:"optional" json:"resourceTags" yaml:"resourceTags"`
}

The criteria for an analysis rule for an analyzer.

The criteria determine which entities will generate findings.

Example: 

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

analysisRuleCriteriaProperty := &AnalysisRuleCriteriaProperty{
	AccountIds: []*string{
		jsii.String("accountIds"),
	},
	ResourceTags: []interface{}{
		[]interface{}{
			&CfnTag{
				Key: jsii.String("key"),
				Value: jsii.String("value"),
			},
		},
	},
}

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-analysisrulecriteria.html

type CfnAnalyzer_AnalysisRuleProperty added in v2.169.0 

type CfnAnalyzer_AnalysisRuleProperty struct {
	// A list of rules for the analyzer containing criteria to exclude from analysis.
	//
	// Entities that meet the rule criteria will not generate findings.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-analysisrule.html#cfn-accessanalyzer-analyzer-analysisrule-exclusions
	//
	Exclusions interface{} `field:"optional" json:"exclusions" yaml:"exclusions"`
}

Contains information about analysis rules for the analyzer.

Analysis rules determine which entities will generate findings based on the criteria you define when you create the rule.

Example: 

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

analysisRuleProperty := &AnalysisRuleProperty{
	Exclusions: []interface{}{
		&AnalysisRuleCriteriaProperty{
			AccountIds: []*string{
				jsii.String("accountIds"),
			},
			ResourceTags: []interface{}{
				[]interface{}{
					&CfnTag{
						Key: jsii.String("key"),
						Value: jsii.String("value"),
					},
				},
			},
		},
	},
}

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-analysisrule.html

type CfnAnalyzer_AnalyzerConfigurationProperty added in v2.113.0 

type CfnAnalyzer_AnalyzerConfigurationProperty struct {
	// Specifies the configuration of an unused access analyzer for an AWS organization or account.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-analyzerconfiguration.html#cfn-accessanalyzer-analyzer-analyzerconfiguration-unusedaccessconfiguration
	//
	UnusedAccessConfiguration interface{} `field:"optional" json:"unusedAccessConfiguration" yaml:"unusedAccessConfiguration"`
}

Contains information about the configuration of an analyzer for an AWS organization or account.

Example: 

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

analyzerConfigurationProperty := &AnalyzerConfigurationProperty{
	UnusedAccessConfiguration: &UnusedAccessConfigurationProperty{
		AnalysisRule: &AnalysisRuleProperty{
			Exclusions: []interface{}{
				&AnalysisRuleCriteriaProperty{
					AccountIds: []*string{
						jsii.String("accountIds"),
					},
					ResourceTags: []interface{}{
						[]interface{}{
							&CfnTag{
								Key: jsii.String("key"),
								Value: jsii.String("value"),
							},
						},
					},
				},
			},
		},
		UnusedAccessAge: jsii.Number(123),
	},
}

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-analyzerconfiguration.html

type CfnAnalyzer_ArchiveRuleProperty 

type CfnAnalyzer_ArchiveRuleProperty struct {
	// The criteria for the rule.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-archiverule.html#cfn-accessanalyzer-analyzer-archiverule-filter
	//
	Filter interface{} `field:"required" json:"filter" yaml:"filter"`
	// The name of the rule to create.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-archiverule.html#cfn-accessanalyzer-analyzer-archiverule-rulename
	//
	RuleName *string `field:"required" json:"ruleName" yaml:"ruleName"`
}

Contains information about an archive rule.

Archive rules automatically archive new findings that meet the criteria you define when you create the rule.

Example: 

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

archiveRuleProperty := &ArchiveRuleProperty{
	Filter: []interface{}{
		&FilterProperty{
			Property: jsii.String("property"),

			// the properties below are optional
			Contains: []*string{
				jsii.String("contains"),
			},
			Eq: []*string{
				jsii.String("eq"),
			},
			Exists: jsii.Boolean(false),
			Neq: []*string{
				jsii.String("neq"),
			},
		},
	},
	RuleName: jsii.String("ruleName"),
}

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-archiverule.html

type CfnAnalyzer_FilterProperty 

type CfnAnalyzer_FilterProperty struct {
	// The property used to define the criteria in the filter for the rule.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-filter.html#cfn-accessanalyzer-analyzer-filter-property
	//
	Property *string `field:"required" json:"property" yaml:"property"`
	// A "contains" condition to match for the rule.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-filter.html#cfn-accessanalyzer-analyzer-filter-contains
	//
	Contains *[]*string `field:"optional" json:"contains" yaml:"contains"`
	// An "equals" condition to match for the rule.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-filter.html#cfn-accessanalyzer-analyzer-filter-eq
	//
	Eq *[]*string `field:"optional" json:"eq" yaml:"eq"`
	// An "exists" condition to match for the rule.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-filter.html#cfn-accessanalyzer-analyzer-filter-exists
	//
	Exists interface{} `field:"optional" json:"exists" yaml:"exists"`
	// A "not equal" condition to match for the rule.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-filter.html#cfn-accessanalyzer-analyzer-filter-neq
	//
	Neq *[]*string `field:"optional" json:"neq" yaml:"neq"`
}

The criteria that defines the archive rule.

To learn about filter keys that you can use to create an archive rule, see [filter keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the *User Guide* .

Example: 

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

filterProperty := &FilterProperty{
	Property: jsii.String("property"),

	// the properties below are optional
	Contains: []*string{
		jsii.String("contains"),
	},
	Eq: []*string{
		jsii.String("eq"),
	},
	Exists: jsii.Boolean(false),
	Neq: []*string{
		jsii.String("neq"),
	},
}

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-filter.html

type CfnAnalyzer_UnusedAccessConfigurationProperty added in v2.113.0 

type CfnAnalyzer_UnusedAccessConfigurationProperty struct {
	// Contains information about analysis rules for the analyzer.
	//
	// Analysis rules determine which entities will generate findings based on the criteria you define when you create the rule.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-unusedaccessconfiguration.html#cfn-accessanalyzer-analyzer-unusedaccessconfiguration-analysisrule
	//
	AnalysisRule interface{} `field:"optional" json:"analysisRule" yaml:"analysisRule"`
	// The specified access age in days for which to generate findings for unused access.
	//
	// For example, if you specify 90 days, the analyzer will generate findings for IAM entities within the accounts of the selected organization for any access that hasn't been used in 90 or more days since the analyzer's last scan. You can choose a value between 1 and 365 days.
	// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-unusedaccessconfiguration.html#cfn-accessanalyzer-analyzer-unusedaccessconfiguration-unusedaccessage
	//
	UnusedAccessAge *float64 `field:"optional" json:"unusedAccessAge" yaml:"unusedAccessAge"`
}

Contains information about an unused access analyzer.

Example: 

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import "github.com/aws/aws-cdk-go/awscdk"

unusedAccessConfigurationProperty := &UnusedAccessConfigurationProperty{
	AnalysisRule: &AnalysisRuleProperty{
		Exclusions: []interface{}{
			&AnalysisRuleCriteriaProperty{
				AccountIds: []*string{
					jsii.String("accountIds"),
				},
				ResourceTags: []interface{}{
					[]interface{}{
						&CfnTag{
							Key: jsii.String("key"),
							Value: jsii.String("value"),
						},
					},
				},
			},
		},
	},
	UnusedAccessAge: jsii.Number(123),
}

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-accessanalyzer-analyzer-unusedaccessconfiguration.html

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.