Skip to content

InternalAccessAnalysisRuleCriteria

Source code in docs_src/capo_accessanalyzer/types/internal_access_analysis_rule_criteria.py 
13
14
15
16
17
18
19
20
21
22
23
24
25
class InternalAccessAnalysisRuleCriteria(TypedDict, closed=True):
    account_ids: NotRequired[
        "capo_accessanalyzer.types.account_ids_list.AccountIdsList"
    ]
    """<p>A list of Amazon Web Services account IDs to apply to the internal access analysis rule criteria. Account IDs can only be applied to the analysis rule criteria for organization-level analyzers.</p>"""
    resource_types: NotRequired[
        "capo_accessanalyzer.types.resource_type_list.ResourceTypeList"
    ]
    """<p>A list of resource types to apply to the internal access analysis rule criteria. The analyzer will only generate findings for resources of these types. These resource types are currently supported for internal access analyzers:</p> <ul> <li> <p> <code>AWS::S3::Bucket</code> </p> </li> <li> <p> <code>AWS::RDS::DBSnapshot</code> </p> </li> <li> <p> <code>AWS::RDS::DBClusterSnapshot</code> </p> </li> <li> <p> <code>AWS::S3Express::DirectoryBucket</code> </p> </li> <li> <p> <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p> <code>AWS::DynamoDB::Stream</code> </p> </li> </ul>"""
    resource_arns: NotRequired[
        "capo_accessanalyzer.types.resource_arns_list.ResourceArnsList"
    ]
    """<p>A list of resource ARNs to apply to the internal access analysis rule criteria. The analyzer will only generate findings for resources that match these ARNs.</p>"""

account_ids instance-attribute 

account_ids: NotRequired[AccountIdsList]

A list of Amazon Web Services account IDs to apply to the internal access analysis rule criteria. Account IDs can only be applied to the analysis rule criteria for organization-level analyzers.

resource_arns instance-attribute 

resource_arns: NotRequired[ResourceArnsList]

A list of resource ARNs to apply to the internal access analysis rule criteria. The analyzer will only generate findings for resources that match these ARNs.

resource_types instance-attribute 

resource_types: NotRequired[ResourceTypeList]

A list of resource types to apply to the internal access analysis rule criteria. The analyzer will only generate findings for resources of these types. These resource types are currently supported for internal access analyzers:

  • AWS::S3::Bucket

  • AWS::RDS::DBSnapshot

  • AWS::RDS::DBClusterSnapshot

  • AWS::S3Express::DirectoryBucket

  • AWS::DynamoDB::Table

  • AWS::DynamoDB::Stream