UnusedPermissionsRecommendationStep ¶

class UnusedPermissionsRecommendationStep(TypedDict, closed=True):
    recommended_action: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>A recommendation of whether to create or detach a policy for an unused permissions finding.</p>"""
    existing_policy: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>The contents of the existing policy identified by <code>ExistingPolicyId</code> which needs to be replaced, when the <code>RecommendedAction</code> is <code>CREATE_POLICY</code>.</p>"""
    existing_policy_id: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>The ID of an existing policy to be replaced or detached.</p>"""
    policy_updated_at: NotRequired["capo_securityhub.types.timestamp.Timestamp"]
    """<p>The time at which the existing policy for the unused permissions finding was last updated.</p>"""
    recommended_policy: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>The contents of the least-privileged recommended replacement for <code>ExistingPolicyId</code>, when the <code>RecommendedAction</code> is <code>CREATE_POLICY</code>.</p>"""