Struct ExternalAccessDetails

#[non_exhaustive]
pub struct ExternalAccessDetails {
    pub action: Option<Vec<String>>,
    pub condition: HashMap<String, String>,
    pub is_public: Option<bool>,
    pub principal: Option<HashMap<String, String>>,
    pub sources: Option<Vec<FindingSource>>,
    pub resource_control_policy_restriction: Option<ResourceControlPolicyRestriction>,
}

Contains information about an external access finding.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

action: Option<Vec<String>>

The action in the analyzed policy statement that an external principal has permission to use.

condition: HashMap<String, String>

The condition in the analyzed policy statement that resulted in an external access finding.

is_public: Option<bool>

Specifies whether the external access finding is public.

principal: Option<HashMap<String, String>>

The external principal that has access to a resource within the zone of trust.

sources: Option<Vec<FindingSource>>

The sources of the external access finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.

resource_control_policy_restriction: Option<ResourceControlPolicyRestriction>

The type of restriction applied to the finding by the resource owner with an Organizations resource control policy (RCP).

• APPLICABLE: There is an RCP present in the organization but IAM Access Analyzer does not include it in the evaluation of effective permissions. For example, if s3:DeleteObject is blocked by the RCP and the restriction is APPLICABLE, then s3:DeleteObject would still be included in the list of actions for the finding.

• FAILED_TO_EVALUATE_RCP: There was an error evaluating the RCP.

• NOT_APPLICABLE: There was no RCP present in the organization, or there was no RCP applicable to the resource. For example, the resource being analyzed is an Amazon RDS snapshot and there is an RCP in the organization, but the RCP only impacts Amazon S3 buckets.

• APPLIED: This restriction is not currently available for external access findings.

Implementations

impl ExternalAccessDetails

pub fn action(&self) -> &[String]

The action in the analyzed policy statement that an external principal has permission to use.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .action.is_none().

pub fn condition(&self) -> &HashMap<String, String>

The condition in the analyzed policy statement that resulted in an external access finding.

pub fn is_public(&self) -> Option<bool>

Specifies whether the external access finding is public.

pub fn principal(&self) -> Option<&HashMap<String, String>>

The external principal that has access to a resource within the zone of trust.

pub fn sources(&self) -> &[FindingSource]

The sources of the external access finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .sources.is_none().

pub fn resource_control_policy_restriction( &self, ) -> Option<&ResourceControlPolicyRestriction>

The type of restriction applied to the finding by the resource owner with an Organizations resource control policy (RCP).

• APPLICABLE: There is an RCP present in the organization but IAM Access Analyzer does not include it in the evaluation of effective permissions. For example, if s3:DeleteObject is blocked by the RCP and the restriction is APPLICABLE, then s3:DeleteObject would still be included in the list of actions for the finding.

• FAILED_TO_EVALUATE_RCP: There was an error evaluating the RCP.

• NOT_APPLICABLE: There was no RCP present in the organization, or there was no RCP applicable to the resource. For example, the resource being analyzed is an Amazon RDS snapshot and there is an RCP in the organization, but the RCP only impacts Amazon S3 buckets.

• APPLIED: This restriction is not currently available for external access findings.

impl ExternalAccessDetails

pub fn builder() -> ExternalAccessDetailsBuilder

Creates a new builder-style object to manufacture ExternalAccessDetails.

Trait Implementations

impl Clone for ExternalAccessDetails

fn clone(&self) -> ExternalAccessDetails

Returns a duplicate of the value.

const fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExternalAccessDetails

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ExternalAccessDetails

fn eq(&self, other: &ExternalAccessDetails) -> bool

Tests for self and other values to be equal, and is used by ==.

const fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ExternalAccessDetails