Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. Its features include findings for external and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. To start using IAM Access Analyzer to identify external or unused access, you first need to create an analyzer.
External access analyzers help identify potential risks of accessing resources by enabling you to identify any resource policies that grant access to an external principal. It does this by using logic-based reasoning to analyze resource-based policies in your Amazon Web Services environment. An external principal can be another Amazon Web Services account, a root user, an IAM user or role, a federated user, an Amazon Web Services service, or an anonymous user. You can also use IAM Access Analyzer to preview public and cross-account access to your resources before deploying permissions changes.
Unused access analyzers help identify potential identity access risks by enabling you to identify unused IAM roles, unused access keys, unused console passwords, and IAM principals with unused service and action-level permissions.
Beyond findings, IAM Access Analyzer provides basic and custom policy checks to validate IAM policies before deploying permissions changes. You can use policy generation to refine permissions by attaching a policy generated using access activity logged in CloudTrail logs.
This guide describes the IAM Access Analyzer operations that you can call programmatically. For general information about IAM Access Analyzer, see Identity and Access Management Access Analyzer in the IAM User Guide.
tags: - name: 2020 05 31 paths: /2020-05-31/distribution/{TargetDistributionId}/associate-alias: PUT: summary: Amazon Web Services Associatealias description: Associates an alias (also known as a CNAME or an alternate domain name) with a CloudFront distribution. With this operation you can move an alias that's already in use on a CloudFront distribution to a different distribution in one step. This prevents the downtime that could occur if you first remove the alias from one distribution and then separately add the alias to another distribution. To use this operation to associate an alias with a distribution, you provide the alias and the ID of the target distribution for the alias. For more information, including how to set up the target distribution, prerequisites that you must complete, and other restrictions, see Moving an alternate domain name to a different distribution in the Amazon CloudFront Developer Guide. operationId: amazonWebServicesAssociateAlias tags: - 2020 05 31 /2020-05-31/distribution/{PrimaryDistributionId}/copy: POST: summary: Amazon Web Services Copydistribution description: 'Creates a staging distribution using the configuration of the provided primary distribution. A staging distribution is a copy of an existing distribution (called the primary distribution) that you can use in a continuous deployment workflow. After you create a staging distribution, you can use UpdateDistribution to modify the staging distribution''s configuration. Then you can use CreateContinuousDeploymentPolicy to incrementally move traffic to the staging distribution. This API operation requires the following IAM permissions: GetDistribution CreateDistribution CopyDistribution ' operationId: amazonWebServicesCopyDistribution tags: - 2020 05 31 /2020-05-31/cache-policy: GET: summary: Amazon Web Services Listcachepolicies description: Gets a list of cache policies. You can optionally apply a filter to return only the managed policies created by Amazon Web Services, or only the custom policies created in your Amazon Web Services account. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListCachePolicies tags: - 2020 05 31 /2020-05-31/origin-access-identity/cloudfront: GET: summary: Amazon Web Services Listcloudfrontoriginaccessidentities description: Lists origin access identities. operationId: amazonWebServicesListCloudFrontOriginAccessIdentities tags: - 2020 05 31 /2020-05-31/continuous-deployment-policy: GET: summary: Amazon Web Services Listcontinuousdeploymentpolicies description: Gets a list of the continuous deployment policies in your Amazon Web Services account. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListContinuousDeploymentPolicies tags: - 2020 05 31 /2020-05-31/distribution: GET: summary: Amazon Web Services Listdistributions description: List CloudFront distributions. operationId: amazonWebServicesListDistributions tags: - 2020 05 31 /2020-05-31/distribution?WithTags: POST: summary: Amazon Web Services Createdistributionwithtags description: 'Create a new distribution with tags. This API operation requires the following IAM permissions: CreateDistribution TagResource ' operationId: amazonWebServicesCreateDistributionWithTags tags: - 2020 05 31 /2020-05-31/field-level-encryption: GET: summary: Amazon Web Services Listfieldlevelencryptionconfigs description: List all field-level encryption configurations that have been created in CloudFront for this account. operationId: amazonWebServicesListFieldLevelEncryptionConfigs tags: - 2020 05 31 /2020-05-31/field-level-encryption-profile: GET: summary: Amazon Web Services Listfieldlevelencryptionprofiles description: Request a list of field-level encryption profiles that have been created in CloudFront for this account. operationId: amazonWebServicesListFieldLevelEncryptionProfiles tags: - 2020 05 31 /2020-05-31/function: GET: summary: Amazon Web Services Listfunctions description: Gets a list of all CloudFront functions in your Amazon Web Services account. You can optionally apply a filter to return only the functions that are in the specified stage, either DEVELOPMENT or LIVE. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListFunctions tags: - 2020 05 31 /2020-05-31/distribution/{DistributionId}/invalidation: GET: summary: Amazon Web Services Listinvalidations description: Lists invalidation batches. operationId: amazonWebServicesListInvalidations tags: - 2020 05 31 /2020-05-31/key-group: GET: summary: Amazon Web Services Listkeygroups description: Gets a list of key groups. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListKeyGroups tags: - 2020 05 31 /2020-05-31/key-value-store/: POST: summary: Amazon Web Services Createkeyvaluestore description: Specifies the Key Value Store resource to add to your account. In your account, the Key Value Store names must be unique. You can also import Key Value Store data in JSON format from an S3 bucket by providing a valid ImportSource that you own. operationId: amazonWebServicesCreateKeyValueStore tags: - 2020 05 31 /2020-05-31/distributions/{DistributionId}/monitoring-subscription/: GET: summary: Amazon Web Services Getmonitoringsubscription description: Gets information about whether additional CloudWatch metrics are enabled for the specified CloudFront distribution. operationId: amazonWebServicesGetMonitoringSubscription tags: - 2020 05 31 /2020-05-31/origin-access-control: GET: summary: Amazon Web Services Listoriginaccesscontrols description: Gets the list of CloudFront origin access controls in this Amazon Web Services account. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send another request that specifies the NextMarker value from the current response as the Marker value in the next request. operationId: amazonWebServicesListOriginAccessControls tags: - 2020 05 31 /2020-05-31/origin-request-policy: GET: summary: Amazon Web Services Listoriginrequestpolicies description: Gets a list of origin request policies. You can optionally apply a filter to return only the managed policies created by Amazon Web Services, or only the custom policies created in your Amazon Web Services account. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListOriginRequestPolicies tags: - 2020 05 31 /2020-05-31/public-key: GET: summary: Amazon Web Services Listpublickeys description: List all public keys that have been added to CloudFront for this account. operationId: amazonWebServicesListPublicKeys tags: - 2020 05 31 /2020-05-31/realtime-log-config: GET: summary: Amazon Web Services Listrealtimelogconfigs description: Gets a list of real-time log configurations. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListRealtimeLogConfigs tags: - 2020 05 31 /2020-05-31/response-headers-policy: GET: summary: Amazon Web Services Listresponseheaderspolicies description: Gets a list of response headers policies. You can optionally apply a filter to get only the managed policies created by Amazon Web Services, or only the custom policies created in your Amazon Web Services account. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListResponseHeadersPolicies tags: - 2020 05 31 /2020-05-31/streaming-distribution: GET: summary: Amazon Web Services Liststreamingdistributions description: List streaming distributions. operationId: amazonWebServicesListStreamingDistributions tags: - 2020 05 31 /2020-05-31/streaming-distribution?WithTags: POST: summary: Amazon Web Services Createstreamingdistributionwithtags description: This API is deprecated. Amazon CloudFront is deprecating real-time messaging protocol (RTMP) distributions on December 31, 2020. For more information, read the announcement on the Amazon CloudFront discussion forum. operationId: amazonWebServicesCreateStreamingDistributionWithTags tags: - 2020 05 31 /2020-05-31/cache-policy/{Id}: PUT: summary: Amazon Web Services Updatecachepolicy description: 'Updates a cache policy configuration. When you update a cache policy configuration, all the fields are updated with the values provided in the request. You cannot update some fields independent of others. To update a cache policy configuration: Use GetCachePolicyConfig to get the current configuration. Locally modify the fields in the cache policy configuration that you want to update. Call UpdateCachePolicy by providing the entire cache policy configuration, including the fields that you modified and those that you didn''t. ' operationId: amazonWebServicesUpdateCachePolicy tags: - 2020 05 31 /2020-05-31/origin-access-identity/cloudfront/{Id}: GET: summary: Amazon Web Services Getcloudfrontoriginaccessidentity description: Get the information about an origin access identity. operationId: amazonWebServicesGetCloudFrontOriginAccessIdentity tags: - 2020 05 31 /2020-05-31/continuous-deployment-policy/{Id}: PUT: summary: Amazon Web Services Updatecontinuousdeploymentpolicy description: 'Updates a continuous deployment policy. You can update a continuous deployment policy to enable or disable it, to change the percentage of traffic that it sends to the staging distribution, or to change the staging distribution that it sends traffic to. When you update a continuous deployment policy configuration, all the fields are updated with the values that are provided in the request. You cannot update some fields independent of others. To update a continuous deployment policy configuration: Use GetContinuousDeploymentPolicyConfig to get the current configuration. Locally modify the fields in the continuous deployment policy configuration that you want to update. Use UpdateContinuousDeploymentPolicy, providing the entire continuous deployment policy configuration, including the fields that you modified and those that you didn''t. ' operationId: amazonWebServicesUpdateContinuousDeploymentPolicy tags: - 2020 05 31 /2020-05-31/distribution/{Id}: GET: summary: Amazon Web Services Getdistribution description: Get the information about a distribution. operationId: amazonWebServicesGetDistribution tags: - 2020 05 31 /2020-05-31/field-level-encryption/{Id}: GET: summary: Amazon Web Services Getfieldlevelencryption description: Get the field-level encryption configuration information. operationId: amazonWebServicesGetFieldLevelEncryption tags: - 2020 05 31 /2020-05-31/field-level-encryption-profile/{Id}: GET: summary: Amazon Web Services Getfieldlevelencryptionprofile description: Get the field-level encryption profile information. operationId: amazonWebServicesGetFieldLevelEncryptionProfile tags: - 2020 05 31 /2020-05-31/function/{Name}: PUT: summary: Amazon Web Services Updatefunction description: Updates a CloudFront function. You can update a function's code or the comment that describes the function. You cannot update a function's name. To update a function, you provide the function's name and version (ETag value) along with the updated function code. To get the name and version, you can use ListFunctions and DescribeFunction. operationId: amazonWebServicesUpdateFunction tags: - 2020 05 31 /2020-05-31/key-group/{Id}: PUT: summary: Amazon Web Services Updatekeygroup description: 'Updates a key group. When you update a key group, all the fields are updated with the values provided in the request. You cannot update some fields independent of others. To update a key group: Get the current key group with GetKeyGroup or GetKeyGroupConfig. Locally modify the fields in the key group that you want to update. For example, add or remove public key IDs. Call UpdateKeyGroup with the entire key group object, including the fields that you modified and those that you didn''t. ' operationId: amazonWebServicesUpdateKeyGroup tags: - 2020 05 31 /2020-05-31/key-value-store/{Name}: PUT: summary: Amazon Web Services Updatekeyvaluestore description: Specifies the Key Value Store to update. operationId: amazonWebServicesUpdateKeyValueStore tags: - 2020 05 31 /2020-05-31/origin-access-control/{Id}: GET: summary: Amazon Web Services Getoriginaccesscontrol description: Gets a CloudFront origin access control, including its unique identifier. operationId: amazonWebServicesGetOriginAccessControl tags: - 2020 05 31 /2020-05-31/origin-request-policy/{Id}: PUT: summary: Amazon Web Services Updateoriginrequestpolicy description: 'Updates an origin request policy configuration. When you update an origin request policy configuration, all the fields are updated with the values provided in the request. You cannot update some fields independent of others. To update an origin request policy configuration: Use GetOriginRequestPolicyConfig to get the current configuration. Locally modify the fields in the origin request policy configuration that you want to update. Call UpdateOriginRequestPolicy by providing the entire origin request policy configuration, including the fields that you modified and those that you didn''t. ' operationId: amazonWebServicesUpdateOriginRequestPolicy tags: - 2020 05 31 /2020-05-31/public-key/{Id}: GET: summary: Amazon Web Services Getpublickey description: Gets a public key. operationId: amazonWebServicesGetPublicKey tags: - 2020 05 31 /2020-05-31/delete-realtime-log-config/: POST: summary: Amazon Web Services Deleterealtimelogconfig description: Deletes a real-time log configuration. You cannot delete a real-time log configuration if it's attached to a cache behavior. First update your distributions to remove the real-time log configuration from all cache behaviors, then delete the real-time log configuration. To delete a real-time log configuration, you can provide the configuration's name or its Amazon Resource Name (ARN). You must provide at least one. If you provide both, CloudFront uses the name to identify the real-time log configuration to delete. operationId: amazonWebServicesDeleteRealtimeLogConfig tags: - 2020 05 31 /2020-05-31/response-headers-policy/{Id}: PUT: summary: Amazon Web Services Updateresponseheaderspolicy description: 'Updates a response headers policy. When you update a response headers policy, the entire policy is replaced. You cannot update some policy fields independent of others. To update a response headers policy configuration: Use GetResponseHeadersPolicyConfig to get the current policy''s configuration. Modify the fields in the response headers policy configuration that you want to update. Call UpdateResponseHeadersPolicy, providing the entire response headers policy configuration, including the fields that you modified and those that you didn''t. ' operationId: amazonWebServicesUpdateResponseHeadersPolicy tags: - 2020 05 31 /2020-05-31/streaming-distribution/{Id}: GET: summary: Amazon Web Services Getstreamingdistribution description: Gets information about a specified RTMP distribution, including the distribution configuration. operationId: amazonWebServicesGetStreamingDistribution tags: - 2020 05 31 /2020-05-31/function/{Name}/describe: GET: summary: Amazon Web Services Describefunction description: Gets configuration information and metadata about a CloudFront function, but not the function's code. To get a function's code, use GetFunction. To get configuration information and metadata about a function, you must provide the function's name and stage. To get these values, you can use ListFunctions. operationId: amazonWebServicesDescribeFunction tags: - 2020 05 31 /2020-05-31/cache-policy/{Id}/config: GET: summary: Amazon Web Services Getcachepolicyconfig description: Gets a cache policy configuration. To get a cache policy configuration, you must provide the policy's identifier. If the cache policy is attached to a distribution's cache behavior, you can get the policy's identifier using ListDistributions or GetDistribution. If the cache policy is not attached to a cache behavior, you can get the identifier using ListCachePolicies. operationId: amazonWebServicesGetCachePolicyConfig tags: - 2020 05 31 /2020-05-31/origin-access-identity/cloudfront/{Id}/config: PUT: summary: Amazon Web Services Updatecloudfrontoriginaccessidentity description: Update an origin access identity. operationId: amazonWebServicesUpdateCloudFrontOriginAccessIdentity tags: - 2020 05 31 /2020-05-31/continuous-deployment-policy/{Id}/config: GET: summary: Amazon Web Services Getcontinuousdeploymentpolicyconfig description: Gets configuration information about a continuous deployment policy. operationId: amazonWebServicesGetContinuousDeploymentPolicyConfig tags: - 2020 05 31 /2020-05-31/distribution/{Id}/config: PUT: summary: Amazon Web Services Updatedistribution description: 'Updates the configuration for a CloudFront distribution. The update process includes getting the current distribution configuration, updating it to make your changes, and then submitting an UpdateDistribution request to make the updates. To update a web distribution using the CloudFront API Use GetDistributionConfig to get the current configuration, including the version identifier (ETag). Update the distribution configuration that was returned in the response. Note the following important requirements and restrictions: You must rename the ETag field to IfMatch, leaving the value unchanged. (Set the value of IfMatch to the value of ETag, then remove the ETag field.) You can''t change the value of CallerReference. Submit an UpdateDistribution request, providing the distribution configuration. The new configuration replaces the existing configuration. The values that you specify in an UpdateDistribution request are not merged into your existing configuration. Make sure to include all fields: the ones that you modified and also the ones that you didn''t. ' operationId: amazonWebServicesUpdateDistribution tags: - 2020 05 31 /2020-05-31/field-level-encryption/{Id}/config: PUT: summary: Amazon Web Services Updatefieldlevelencryptionconfig description: Update a field-level encryption configuration. operationId: amazonWebServicesUpdateFieldLevelEncryptionConfig tags: - 2020 05 31 /2020-05-31/field-level-encryption-profile/{Id}/config: PUT: summary: Amazon Web Services Updatefieldlevelencryptionprofile description: Update a field-level encryption profile. operationId: amazonWebServicesUpdateFieldLevelEncryptionProfile tags: - 2020 05 31 /2020-05-31/distribution/{DistributionId}/invalidation/{Id}: GET: summary: Amazon Web Services Getinvalidation description: Get the information about an invalidation. operationId: amazonWebServicesGetInvalidation tags: - 2020 05 31 /2020-05-31/key-group/{Id}/config: GET: summary: Amazon Web Services Getkeygroupconfig description: Gets a key group configuration. To get a key group configuration, you must provide the key group's identifier. If the key group is referenced in a distribution's cache behavior, you can get the key group's identifier using ListDistributions or GetDistribution. If the key group is not referenced in a cache behavior, you can get the identifier using ListKeyGroups. operationId: amazonWebServicesGetKeyGroupConfig tags: - 2020 05 31 /2020-05-31/origin-access-control/{Id}/config: PUT: summary: Amazon Web Services Updateoriginaccesscontrol description: Updates a CloudFront origin access control. operationId: amazonWebServicesUpdateOriginAccessControl tags: - 2020 05 31 /2020-05-31/origin-request-policy/{Id}/config: GET: summary: Amazon Web Services Getoriginrequestpolicyconfig description: Gets an origin request policy configuration. To get an origin request policy configuration, you must provide the policy's identifier. If the origin request policy is attached to a distribution's cache behavior, you can get the policy's identifier using ListDistributions or GetDistribution. If the origin request policy is not attached to a cache behavior, you can get the identifier using ListOriginRequestPolicies. operationId: amazonWebServicesGetOriginRequestPolicyConfig tags: - 2020 05 31 /2020-05-31/public-key/{Id}/config: PUT: summary: Amazon Web Services Updatepublickey description: Update public key information. Note that the only value you can change is the comment. operationId: amazonWebServicesUpdatePublicKey tags: - 2020 05 31 /2020-05-31/get-realtime-log-config/: POST: summary: Amazon Web Services Getrealtimelogconfig description: Gets a real-time log configuration. To get a real-time log configuration, you can provide the configuration's name or its Amazon Resource Name (ARN). You must provide at least one. If you provide both, CloudFront uses the name to identify the real-time log configuration to get. operationId: amazonWebServicesGetRealtimeLogConfig tags: - 2020 05 31 /2020-05-31/response-headers-policy/{Id}/config: GET: summary: Amazon Web Services Getresponseheaderspolicyconfig description: Gets a response headers policy configuration. To get a response headers policy configuration, you must provide the policy's identifier. If the response headers policy is attached to a distribution's cache behavior, you can get the policy's identifier using ListDistributions or GetDistribution. If the response headers policy is not attached to a cache behavior, you can get the identifier using ListResponseHeadersPolicies. operationId: amazonWebServicesGetResponseHeadersPolicyConfig tags: - 2020 05 31 /2020-05-31/streaming-distribution/{Id}/config: PUT: summary: Amazon Web Services Updatestreamingdistribution description: Update a streaming distribution. operationId: amazonWebServicesUpdateStreamingDistribution tags: - 2020 05 31 /2020-05-31/conflicting-alias: GET: summary: Amazon Web Services Listconflictingaliases description: Gets a list of aliases (also called CNAMEs or alternate domain names) that conflict or overlap with the provided alias, and the associated CloudFront distributions and Amazon Web Services accounts for each conflicting alias. In the returned list, the distribution and account IDs are partially hidden, which allows you to identify the distributions and accounts that you own, but helps to protect the information of ones that you don't own. Use this operation to find aliases that are in use in CloudFront that conflict or overlap with the provided alias. For example, if you provide www.example.com as input, the returned list can include www.example.com and the overlapping wildcard alternate domain name (*.example.com), if they exist. If you provide *.example.com as input, the returned list can include *.example.com and any alternate domain names covered by that wildcard (for example, www.example.com, test.example.com, dev.example.com, and so on), if they exist. To list conflicting aliases, you provide the alias to search and the ID of a distribution in your account that has an attached SSL/TLS certificate that includes the provided alias. For more information, including how to set up the distribution and certificate, see Moving an alternate domain name to a different distribution in the Amazon CloudFront Developer Guide. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListConflictingAliases tags: - 2020 05 31 /2020-05-31/distributionsByCachePolicyId/{CachePolicyId}: GET: summary: Amazon Web Services Listdistributionsbycachepolicyid description: Gets a list of distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListDistributionsByCachePolicyId tags: - 2020 05 31 /2020-05-31/distributionsByKeyGroupId/{KeyGroupId}: GET: summary: Amazon Web Services Listdistributionsbykeygroup description: Gets a list of distribution IDs for distributions that have a cache behavior that references the specified key group. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListDistributionsByKeyGroup tags: - 2020 05 31 /2020-05-31/distributionsByOriginRequestPolicyId/{OriginRequestPolicyId}: GET: summary: Amazon Web Services Listdistributionsbyoriginrequestpolicyid description: Gets a list of distribution IDs for distributions that have a cache behavior that's associated with the specified origin request policy. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListDistributionsByOriginRequestPolicyId tags: - 2020 05 31 /2020-05-31/distributionsByRealtimeLogConfig/: POST: summary: Amazon Web Services Listdistributionsbyrealtimelogconfig description: Gets a list of distributions that have a cache behavior that's associated with the specified real-time log configuration. You can specify the real-time log configuration by its name or its Amazon Resource Name (ARN). You must provide at least one. If you provide both, CloudFront uses the name to identify the real-time log configuration to list distributions for. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListDistributionsByRealtimeLogConfig tags: - 2020 05 31 /2020-05-31/distributionsByResponseHeadersPolicyId/{ResponseHeadersPolicyId}: GET: summary: Amazon Web Services Listdistributionsbyresponseheaderspolicyid description: Gets a list of distribution IDs for distributions that have a cache behavior that's associated with the specified response headers policy. You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the NextMarker value from the current response as the Marker value in the subsequent request. operationId: amazonWebServicesListDistributionsByResponseHeadersPolicyId tags: - 2020 05 31 /2020-05-31/distributionsByWebACLId/{WebACLId}: GET: summary: Amazon Web Services Listdistributionsbywebaclid description: List the distributions that are associated with a specified WAF web ACL. operationId: amazonWebServicesListDistributionsByWebACLId tags: - 2020 05 31 /2020-05-31/key-value-store: GET: summary: Amazon Web Services Listkeyvaluestores description: Specifies the Key Value Stores to list. operationId: amazonWebServicesListKeyValueStores tags: - 2020 05 31 /2020-05-31/tagging: GET: summary: Amazon Web Services Listtagsforresource description: List tags for a CloudFront resource. operationId: amazonWebServicesListTagsForResource tags: - 2020 05 31 /2020-05-31/function/{Name}/publish: POST: summary: Amazon Web Services Publishfunction description: Publishes a CloudFront function by copying the function code from the DEVELOPMENT stage to LIVE. This automatically updates all cache behaviors that are using this function to use the newly published copy in the LIVE stage. When a function is published to the LIVE stage, you can attach the function to a distribution's cache behavior, using the function's Amazon Resource Name (ARN). To publish a function, you must provide the function's name and version (ETag value). To get these values, you can use ListFunctions and DescribeFunction. operationId: amazonWebServicesPublishFunction tags: - 2020 05 31 /2020-05-31/tagging?Operation=Tag: POST: summary: Amazon Web Services Tagresource description: Add tags to a CloudFront resource. operationId: amazonWebServicesTagResource tags: - 2020 05 31 /2020-05-31/function/{Name}/test: POST: summary: Amazon Web Services Testfunction description: Tests a CloudFront function. To test a function, you provide an event object that represents an HTTP request or response that your CloudFront distribution could receive in production. CloudFront runs the function, passing it the event object that you provided, and returns the function's result (the modified event object) in the response. The response also contains function logs and error messages, if any exist. For more information about testing functions, see Testing functions in the Amazon CloudFront Developer Guide. To test a function, you provide the function's name and version (ETag value) along with the event object. To get the function's name and version, you can use ListFunctions and DescribeFunction. operationId: amazonWebServicesTestFunction tags: - 2020 05 31 /2020-05-31/tagging?Operation=Untag: POST: summary: Amazon Web Services Untagresource description: Remove tags from a CloudFront resource. operationId: amazonWebServicesUntagResource tags: - 2020 05 31 /2020-05-31/distribution/{Id}/promote-staging-config: PUT: summary: Amazon Web Services Updatedistributionwithstagingconfig description: 'Copies the staging distribution''s configuration to its corresponding primary distribution. The primary distribution retains its Aliases (also known as alternate domain names or CNAMEs) and ContinuousDeploymentPolicyId value, but otherwise its configuration is overwritten to match the staging distribution. You can use this operation in a continuous deployment workflow after you have tested configuration changes on the staging distribution. After using a continuous deployment policy to move a portion of your domain name''s traffic to the staging distribution and verifying that it works as intended, you can use this operation to copy the staging distribution''s configuration to the primary distribution. This action will disable the continuous deployment policy and move your domain''s traffic back to the primary distribution. This API operation requires the following IAM permissions: GetDistribution UpdateDistribution ' operationId: amazonWebServicesUpdateDistributionWithStagingConfig tags: - 2020 05 31 /2020-05-31/realtime-log-config/: PUT: summary: Amazon Web Services Updaterealtimelogconfig description: 'Updates a real-time log configuration. When you update a real-time log configuration, all the parameters are updated with the values provided in the request. You cannot update some parameters independent of others. To update a real-time log configuration: Call GetRealtimeLogConfig to get the current real-time log configuration. Locally modify the parameters in the real-time log configuration that you want to update. Call this API (UpdateRealtimeLogConfig) by providing the entire real-time log configuration, including the parameters that you modified and those that you didn''t. You cannot update a real-time log configuration''s Name or ARN.' operationId: amazonWebServicesUpdateRealtimeLogConfig tags: - 2020 05 31