logo
pub struct AccessPreviewFinding {
Show 15 fields pub action: Option<Vec<String>>, pub change_type: String, pub condition: Option<HashMap<String, String>>, pub created_at: f64, pub error: Option<String>, pub existing_finding_id: Option<String>, pub existing_finding_status: Option<String>, pub id: String, pub is_public: Option<bool>, pub principal: Option<HashMap<String, String>>, pub resource: Option<String>, pub resource_owner_account: String, pub resource_type: String, pub sources: Option<Vec<FindingSource>>, pub status: String,
}
Expand description

An access preview finding generated by the access preview.

Fields

action: Option<Vec<String>>

The action in the analyzed policy statement that an external principal has permission to perform.

change_type: String

Provides context on how the access preview finding compares to existing access identified in Access Analyzer.

  • New - The finding is for newly-introduced access.

  • Unchanged - The preview finding is an existing finding that would remain unchanged.

  • Changed - The preview finding is an existing finding with a change in status.

For example, a Changed finding with preview status Resolved and existing status Active indicates the existing Active finding would become Resolved as a result of the proposed permissions change.

condition: Option<HashMap<String, String>>

The condition in the analyzed policy statement that resulted in a finding.

created_at: f64

The time at which the access preview finding was created.

error: Option<String>

An error.

existing_finding_id: Option<String>

The existing ID of the finding in Access Analyzer, provided only for existing findings.

existing_finding_status: Option<String>

The existing status of the finding, provided only for existing findings.

id: String

The ID of the access preview finding. This ID uniquely identifies the element in the list of access preview findings and is not related to the finding ID in Access Analyzer.

is_public: Option<bool>

Indicates whether the policy that generated the finding allows public access to the resource.

principal: Option<HashMap<String, String>>

The external principal that has access to a resource within the zone of trust.

resource: Option<String>

The resource that an external principal has access to. This is the resource associated with the access preview.

resource_owner_account: String

The AWS account ID that owns the resource. For most AWS resources, the owning account is the account in which the resource was created.

resource_type: String

The type of the resource that can be accessed in the finding.

sources: Option<Vec<FindingSource>>

The sources of the finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.

status: String

The preview status of the finding. This is what the status of the finding would be after permissions deployment. For example, a Changed finding with preview status Resolved and existing status Active indicates the existing Active finding would become Resolved as a result of the proposed permissions change.

Trait Implementations

Returns a copy of the value. Read more

Performs copy-assignment from source. Read more

Formats the value using the given formatter. Read more

Returns the “default value” for a type. Read more

Deserialize this value from the given Serde deserializer. Read more

This method tests for self and other values to be equal, and is used by ==. Read more

This method tests for !=.

Auto Trait Implementations

Blanket Implementations

Gets the TypeId of self. Read more

Immutably borrows from an owned value. Read more

Mutably borrows from an owned value. Read more

Returns the argument unchanged.

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more

Instruments this type with the current Span, returning an Instrumented wrapper. Read more

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Should always be Self

The resulting type after obtaining ownership.

Creates owned data from borrowed data, usually by cloning. Read more

🔬 This is a nightly-only experimental API. (toowned_clone_into)

Uses borrowed data to replace owned data, usually by cloning. Read more

The type returned in the event of a conversion error.

Performs the conversion.

The type returned in the event of a conversion error.

Performs the conversion.

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more