AccessDetail
¶
Source code in docs_src/capo_iam/types/access_detail.py
entity_path
instance-attribute
¶
entity_path: NotRequired[organizationsEntityPathType]
The path of the Organizations entity (root, organizational unit, or account) from which an authenticated principal last attempted to access the service. Amazon Web Services does not report unauthenticated requests.
This field is null if no principals (IAM users, IAM roles, or root user) in the reported Organizations entity attempted to access the service within the tracking period.
last_authenticated_time
instance-attribute
¶
last_authenticated_time: NotRequired[dateType]
The date and time, in ISO 8601 date-time format, when an authenticated principal most recently attempted to access the service. Amazon Web Services does not report unauthenticated requests.
This field is null if no principals in the reported Organizations entity attempted to access the service within the tracking period.
region
instance-attribute
¶
region: NotRequired[stringType]
The Region where the last service access attempt occurred.
This field is null if no principals in the reported Organizations entity attempted to access the service within the tracking period.
service_name
instance-attribute
¶
service_name: serviceNameType
The name of the service in which access was attempted.
service_namespace
instance-attribute
¶
service_namespace: serviceNamespaceType
The namespace of the service in which access was attempted.
To learn the service namespace of a service, see Actions, resources, and condition keys for Amazon Web Services services in the Service Authorization Reference. Choose the name of the service to view details for that service. In the first paragraph, find the service prefix. For example, (service prefix: a4b). For more information about service namespaces, see Amazon Web Services service namespaces in the Amazon Web Services General Reference.
total_authenticated_entities
instance-attribute
¶
total_authenticated_entities: NotRequired[integerType]
The number of accounts with authenticated principals (root user, IAM users, and IAM roles) that attempted to access the service in the tracking period.