Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. Its features include findings for external and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. To start using IAM Access Analyzer to identify external or unused access, you first need to create an analyzer.
External access analyzers help identify potential risks of accessing resources by enabling you to identify any resource policies that grant access to an external principal. It does this by using logic-based reasoning to analyze resource-based policies in your Amazon Web Services environment. An external principal can be another Amazon Web Services account, a root user, an IAM user or role, a federated user, an Amazon Web Services service, or an anonymous user. You can also use IAM Access Analyzer to preview public and cross-account access to your resources before deploying permissions changes.
Unused access analyzers help identify potential identity access risks by enabling you to identify unused IAM roles, unused access keys, unused console passwords, and IAM principals with unused service and action-level permissions.
Beyond findings, IAM Access Analyzer provides basic and custom policy checks to validate IAM policies before deploying permissions changes. You can use policy generation to refine permissions by attaching a policy generated using access activity logged in CloudTrail logs.
This guide describes the IAM Access Analyzer operations that you can call programmatically. For general information about IAM Access Analyzer, see Identity and Access Management Access Analyzer in the IAM User Guide.
tags: - name: 2022 01 01 paths: /2022-01-01/osis/createPipeline: POST: summary: Amazon Web Services Createpipeline description: Creates an OpenSearch Ingestion pipeline. For more information, see Creating Amazon OpenSearch Ingestion pipelines. operationId: amazonWebServicesCreatePipeline tags: - 2022 01 01 /2022-01-01/osis/deletePipeline/{PipelineName}: DELETE: summary: Amazon Web Services Deletepipeline description: Deletes an OpenSearch Ingestion pipeline. For more information, see Deleting Amazon OpenSearch Ingestion pipelines. operationId: amazonWebServicesDeletePipeline tags: - 2022 01 01 /2022-01-01/osis/getPipeline/{PipelineName}: GET: summary: Amazon Web Services Getpipeline description: Retrieves information about an OpenSearch Ingestion pipeline. operationId: amazonWebServicesGetPipeline tags: - 2022 01 01 /2022-01-01/osis/getPipelineBlueprint/{BlueprintName}: GET: summary: Amazon Web Services Getpipelineblueprint description: Retrieves information about a specific blueprint for OpenSearch Ingestion. Blueprints are templates for the configuration needed for a CreatePipeline request. For more information, see Using blueprints to create a pipeline. operationId: amazonWebServicesGetPipelineBlueprint tags: - 2022 01 01 /2022-01-01/osis/getPipelineChangeProgress/{PipelineName}: GET: summary: Amazon Web Services Getpipelinechangeprogress description: Returns progress information for the current change happening on an OpenSearch Ingestion pipeline. Currently, this operation only returns information when a pipeline is being created. For more information, see Tracking the status of pipeline creation. operationId: amazonWebServicesGetPipelineChangeProgress tags: - 2022 01 01 /2022-01-01/osis/listPipelineBlueprints: POST: summary: Amazon Web Services Listpipelineblueprints description: Retrieves a list of all available blueprints for Data Prepper. For more information, see Using blueprints to create a pipeline. operationId: amazonWebServicesListPipelineBlueprints tags: - 2022 01 01 /2022-01-01/osis/listPipelines: GET: summary: Amazon Web Services Listpipelines description: Lists all OpenSearch Ingestion pipelines in the current Amazon Web Services account and Region. For more information, see Viewing Amazon OpenSearch Ingestion pipelines. operationId: amazonWebServicesListPipelines tags: - 2022 01 01 /2022-01-01/osis/listTagsForResource/: GET: summary: Amazon Web Services Listtagsforresource description: Lists all resource tags associated with an OpenSearch Ingestion pipeline. For more information, see Tagging Amazon OpenSearch Ingestion pipelines. operationId: amazonWebServicesListTagsForResource tags: - 2022 01 01 /2022-01-01/osis/startPipeline/{PipelineName}: PUT: summary: Amazon Web Services Startpipeline description: Starts an OpenSearch Ingestion pipeline. For more information, see Starting an OpenSearch Ingestion pipeline. operationId: amazonWebServicesStartPipeline tags: - 2022 01 01 /2022-01-01/osis/stopPipeline/{PipelineName}: PUT: summary: Amazon Web Services Stoppipeline description: Stops an OpenSearch Ingestion pipeline. For more information, see Stopping an OpenSearch Ingestion pipeline. operationId: amazonWebServicesStopPipeline tags: - 2022 01 01 /2022-01-01/osis/tagResource/: POST: summary: Amazon Web Services Tagresource description: Tags an OpenSearch Ingestion pipeline. For more information, see Tagging Amazon OpenSearch Ingestion pipelines. operationId: amazonWebServicesTagResource tags: - 2022 01 01 /2022-01-01/osis/untagResource/: POST: summary: Amazon Web Services Untagresource description: Removes one or more tags from an OpenSearch Ingestion pipeline. For more information, see Tagging Amazon OpenSearch Ingestion pipelines. operationId: amazonWebServicesUntagResource tags: - 2022 01 01 /2022-01-01/osis/updatePipeline/{PipelineName}: PUT: summary: Amazon Web Services Updatepipeline description: Updates an OpenSearch Ingestion pipeline. For more information, see Updating Amazon OpenSearch Ingestion pipelines. operationId: amazonWebServicesUpdatePipeline tags: - 2022 01 01 /2022-01-01/osis/validatePipeline: POST: summary: Amazon Web Services Validatepipeline description: Checks whether an OpenSearch Ingestion pipeline configuration is valid prior to creation. For more information, see Creating Amazon OpenSearch Ingestion pipelines. operationId: amazonWebServicesValidatePipeline tags: - 2022 01 01