aws accessanalyzer
Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. AWS CLI reference
39 commands Its page in the AWS CLI reference
Commands
apply-archive-ruleRetroactively applies the archive rule to existing findings that meet the archive rule criteria.cancel-policy-generationCancels the requested policy generation.check-access-not-grantedChecks whether the specified access isn't allowed by a policy.check-no-new-accessChecks whether new access is allowed for an updated policy when compared to the existing policy.check-no-public-accessChecks whether a resource policy can grant public access to the specified resource type.create-access-previewCreates an access preview that allows you to preview IAM Access Analyzer findings for your resource before deploying resource permissions.create-analyzerCreates an analyzer for your account.create-archive-ruleCreates an archive rule for the specified analyzer.create-service-linked-analyzerCreates a service-linked analyzer managed by an Amazon Web Services service.delete-analyzerDeletes the specified analyzer.delete-archive-ruleDeletes the specified archive rule.delete-service-linked-analyzerDeletes a service-linked analyzer.generate-finding-recommendationCreates a recommendation for an unused permissions finding.get-access-previewRetrieves information about an access preview for the specified analyzer.get-analyzed-resourceRetrieves information about a resource that was analyzed.get-analyzerRetrieves information about the specified analyzer.get-archive-ruleRetrieves information about an archive rule.get-findingRetrieves information about the specified finding.get-finding-recommendationRetrieves information about a finding recommendation for the specified analyzer.get-finding-v2Retrieves information about the specified finding.get-findings-statisticsRetrieves a list of aggregated finding statistics for an external access or unused access analyzer.get-generated-policyRetrieves the policy that was generated using StartPolicyGeneration.list-access-preview-findingsRetrieves a list of access preview findings generated by the specified access preview.list-access-previewsRetrieves a list of access previews for the specified analyzer.list-analyzed-resourcesRetrieves a list of resources of the specified type that have been analyzed by the specified analyzer.list-analyzersRetrieves a list of analyzers.list-archive-rulesRetrieves a list of archive rules created for the specified analyzer.list-findingsRetrieves a list of findings generated by the specified analyzer.list-findings-v2Retrieves a list of findings generated by the specified analyzer.list-policy-generationsLists all of the policy generations requested in the last seven days.list-tags-for-resourceRetrieves a list of tags applied to the specified resource.start-policy-generationStarts the policy generation request.start-resource-scanImmediately starts a scan of the policies applied to the specified resource.tag-resourceAdds a tag to the specified resource.untag-resourceRemoves a tag from the specified resource.update-analyzerModifies the configuration of an existing analyzer.update-archive-ruleUpdates the criteria and values for the specified archive rule.update-findingsUpdates the status for the specified findings.validate-policyRequests the validation of a policy and returns a list of findings.