aws accessanalyzer list-archive-rules

Retrieves a list of archive rules created for the specified analyzer. AWS CLI reference

1 example 3 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To retrieve a list of archive rules created for the specified analyzer

The following list-archive-rules example retrieves a list of archive rules created for the specified analyzer in your AWS account.

aws accessanalyzer list-archive-rules --analyzer-name UnusedAccess-ConsoleAnalyzer-organizationIdentify

--analyzer-nameThe name of the analyzer to retrieve rules from.

Its output, shortened

{
    "archiveRules": [
        {
            "createdAt": "2024-02-15T00:49:27+00:00",
            "filter": {
                "resource": {
                    "contains": [
                        "Cognito"
                    ]
                },
                "resourceType": {
                    "eq": [
                        "AWS::IAM::Role"
                    ]
                }
            },
            "ruleName": "MyArchiveRule",
            "updatedAt": "2024-02-15T00:49:27+00:00"
        },
        {
            "createdAt": "2024-02-15T23:27:45+00:00",
            "filter": {
                "findingType": {
                    "eq": [
                        "UnusedIAMUserAccessKey"
                    ]
                }
            },
            "ruleName": "ArchiveRule-56125a39-e517-4ff8-afb1-ef06f58db612",
            "updatedAt": "2024-02-15T23:27:45+00:00"
… 3 more lines

For more information, see Using AWS Identity and Access Management Access Analyzer in the AWS IAM User Guide.

Options

3 in the AWS CLI reference

--analyzer-nameThe name of the analyzer to retrieve rules from.

--max-resultsThe maximum number of results to return in the request.

--next-tokenA token used for pagination of results returned.