FindingSummary ¶

class FindingSummary(TypedDict, closed=True):
    id: "capo_accessanalyzer.types.finding_id.FindingId"
    """<p>The ID of the finding.</p>"""
    principal: NotRequired["capo_accessanalyzer.types.principal_map.PrincipalMap"]
    """<p>The external principal that has access to a resource within the zone of trust.</p>"""
    action: NotRequired["capo_accessanalyzer.types.action_list.ActionList"]
    """<p>The action in the analyzed policy statement that an external principal has permission to use.</p>"""
    resource: NotRequired["str"]
    """<p>The resource that the external principal has access to.</p>"""
    is_public: NotRequired["bool"]
    """<p>Indicates whether the finding reports a resource that has a policy that allows public access.</p>"""
    resource_type: "capo_accessanalyzer.types.resource_type.ResourceType"
    """<p>The type of the resource that the external principal has access to.</p>"""
    condition: "capo_accessanalyzer.types.condition_key_map.ConditionKeyMap"
    """<p>The condition in the analyzed policy statement that resulted in a finding.</p>"""
    created_at: "capo_accessanalyzer.types.timestamp.Timestamp"
    """<p>The time at which the finding was created.</p>"""
    analyzed_at: "capo_accessanalyzer.types.timestamp.Timestamp"
    """<p>The time at which the resource-based policy that generated the finding was analyzed.</p>"""
    updated_at: "capo_accessanalyzer.types.timestamp.Timestamp"
    """<p>The time at which the finding was most recently updated.</p>"""
    status: "capo_accessanalyzer.types.finding_status.FindingStatus"
    """<p>The status of the finding.</p>"""
    resource_owner_account: "str"
    """<p>The Amazon Web Services account ID that owns the resource.</p>"""
    error: NotRequired["str"]
    """<p>The error that resulted in an Error finding.</p>"""
    sources: NotRequired[
        "capo_accessanalyzer.types.finding_source_list.FindingSourceList"
    ]
    """<p>The sources of the finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.</p>"""
    resource_control_policy_restriction: NotRequired[
        "capo_accessanalyzer.types.resource_control_policy_restriction.ResourceControlPolicyRestriction"
    ]
    """<p>The type of restriction applied to the finding by the resource owner with an Organizations resource control policy (RCP).</p>"""