mypydantic.models.accessanalyzer

  1# Model Generated: Thu Mar  2 21:56:16 2023
  2
  3from __future__ import annotations
  4
  5from datetime import datetime
  6from typing import Any, Dict, List, Literal, Mapping, Optional, Sequence, Union
  7
  8from pydantic import Field
  9
 10from mypydantic.models.base_model import BaseModel
 11
 12
 13class AccessPreviewStatusReasonModel(BaseModel):
 14    code: Literal["INTERNAL_ERROR", "INVALID_CONFIGURATION"] = Field(alias="code")
 15
 16
 17class AclGranteeModel(BaseModel):
 18    id: Optional[str] = Field(default=None, alias="id")
 19    uri: Optional[str] = Field(default=None, alias="uri")
 20
 21
 22class AnalyzedResourceSummaryModel(BaseModel):
 23    resource_arn: str = Field(alias="resourceArn")
 24    resource_owner_account: str = Field(alias="resourceOwnerAccount")
 25    resource_type: Literal[
 26        "AWS::EC2::Snapshot",
 27        "AWS::ECR::Repository",
 28        "AWS::EFS::FileSystem",
 29        "AWS::IAM::Role",
 30        "AWS::KMS::Key",
 31        "AWS::Lambda::Function",
 32        "AWS::Lambda::LayerVersion",
 33        "AWS::RDS::DBClusterSnapshot",
 34        "AWS::RDS::DBSnapshot",
 35        "AWS::S3::Bucket",
 36        "AWS::SNS::Topic",
 37        "AWS::SQS::Queue",
 38        "AWS::SecretsManager::Secret",
 39    ] = Field(alias="resourceType")
 40
 41
 42class AnalyzedResourceModel(BaseModel):
 43    resource_arn: str = Field(alias="resourceArn")
 44    resource_type: Literal[
 45        "AWS::EC2::Snapshot",
 46        "AWS::ECR::Repository",
 47        "AWS::EFS::FileSystem",
 48        "AWS::IAM::Role",
 49        "AWS::KMS::Key",
 50        "AWS::Lambda::Function",
 51        "AWS::Lambda::LayerVersion",
 52        "AWS::RDS::DBClusterSnapshot",
 53        "AWS::RDS::DBSnapshot",
 54        "AWS::S3::Bucket",
 55        "AWS::SNS::Topic",
 56        "AWS::SQS::Queue",
 57        "AWS::SecretsManager::Secret",
 58    ] = Field(alias="resourceType")
 59    created_at: datetime = Field(alias="createdAt")
 60    analyzed_at: datetime = Field(alias="analyzedAt")
 61    updated_at: datetime = Field(alias="updatedAt")
 62    is_public: bool = Field(alias="isPublic")
 63    resource_owner_account: str = Field(alias="resourceOwnerAccount")
 64    actions: Optional[List[str]] = Field(default=None, alias="actions")
 65    shared_via: Optional[List[str]] = Field(default=None, alias="sharedVia")
 66    status: Optional[Literal["ACTIVE", "ARCHIVED", "RESOLVED"]] = Field(
 67        default=None, alias="status"
 68    )
 69    error: Optional[str] = Field(default=None, alias="error")
 70
 71
 72class StatusReasonModel(BaseModel):
 73    code: Literal[
 74        "AWS_SERVICE_ACCESS_DISABLED",
 75        "DELEGATED_ADMINISTRATOR_DEREGISTERED",
 76        "ORGANIZATION_DELETED",
 77        "SERVICE_LINKED_ROLE_CREATION_FAILED",
 78    ] = Field(alias="code")
 79
 80
 81class ApplyArchiveRuleRequestModel(BaseModel):
 82    analyzer_arn: str = Field(alias="analyzerArn")
 83    rule_name: str = Field(alias="ruleName")
 84    client_token: Optional[str] = Field(default=None, alias="clientToken")
 85
 86
 87class CriterionModel(BaseModel):
 88    eq: Optional[Sequence[str]] = Field(default=None, alias="eq")
 89    neq: Optional[Sequence[str]] = Field(default=None, alias="neq")
 90    contains: Optional[Sequence[str]] = Field(default=None, alias="contains")
 91    exists: Optional[bool] = Field(default=None, alias="exists")
 92
 93
 94class CancelPolicyGenerationRequestModel(BaseModel):
 95    job_id: str = Field(alias="jobId")
 96
 97
 98class TrailModel(BaseModel):
 99    cloud_trail_arn: str = Field(alias="cloudTrailArn")
100    regions: Optional[Sequence[str]] = Field(default=None, alias="regions")
101    all_regions: Optional[bool] = Field(default=None, alias="allRegions")
102
103
104class TrailPropertiesModel(BaseModel):
105    cloud_trail_arn: str = Field(alias="cloudTrailArn")
106    regions: Optional[List[str]] = Field(default=None, alias="regions")
107    all_regions: Optional[bool] = Field(default=None, alias="allRegions")
108
109
110class EbsSnapshotConfigurationModel(BaseModel):
111    user_ids: Optional[Sequence[str]] = Field(default=None, alias="userIds")
112    groups: Optional[Sequence[str]] = Field(default=None, alias="groups")
113    kms_key_id: Optional[str] = Field(default=None, alias="kmsKeyId")
114
115
116class EcrRepositoryConfigurationModel(BaseModel):
117    repository_policy: Optional[str] = Field(default=None, alias="repositoryPolicy")
118
119
120class EfsFileSystemConfigurationModel(BaseModel):
121    file_system_policy: Optional[str] = Field(default=None, alias="fileSystemPolicy")
122
123
124class IamRoleConfigurationModel(BaseModel):
125    trust_policy: Optional[str] = Field(default=None, alias="trustPolicy")
126
127
128class SecretsManagerSecretConfigurationModel(BaseModel):
129    kms_key_id: Optional[str] = Field(default=None, alias="kmsKeyId")
130    secret_policy: Optional[str] = Field(default=None, alias="secretPolicy")
131
132
133class SnsTopicConfigurationModel(BaseModel):
134    topic_policy: Optional[str] = Field(default=None, alias="topicPolicy")
135
136
137class SqsQueueConfigurationModel(BaseModel):
138    queue_policy: Optional[str] = Field(default=None, alias="queuePolicy")
139
140
141class ResponseMetadataModel(BaseModel):
142    request_id: str = Field(alias="RequestId")
143    host_id: str = Field(alias="HostId")
144    http_status_code: int = Field(alias="HTTPStatusCode")
145    http_headers: Dict[str, str] = Field(alias="HTTPHeaders")
146    retry_attempts: int = Field(alias="RetryAttempts")
147
148
149class DeleteAnalyzerRequestModel(BaseModel):
150    analyzer_name: str = Field(alias="analyzerName")
151    client_token: Optional[str] = Field(default=None, alias="clientToken")
152
153
154class DeleteArchiveRuleRequestModel(BaseModel):
155    analyzer_name: str = Field(alias="analyzerName")
156    rule_name: str = Field(alias="ruleName")
157    client_token: Optional[str] = Field(default=None, alias="clientToken")
158
159
160class FindingSourceDetailModel(BaseModel):
161    access_point_arn: Optional[str] = Field(default=None, alias="accessPointArn")
162    access_point_account: Optional[str] = Field(
163        default=None, alias="accessPointAccount"
164    )
165
166
167class GeneratedPolicyModel(BaseModel):
168    policy: str = Field(alias="policy")
169
170
171class GetAccessPreviewRequestModel(BaseModel):
172    access_preview_id: str = Field(alias="accessPreviewId")
173    analyzer_arn: str = Field(alias="analyzerArn")
174
175
176class GetAnalyzedResourceRequestModel(BaseModel):
177    analyzer_arn: str = Field(alias="analyzerArn")
178    resource_arn: str = Field(alias="resourceArn")
179
180
181class GetAnalyzerRequestModel(BaseModel):
182    analyzer_name: str = Field(alias="analyzerName")
183
184
185class GetArchiveRuleRequestModel(BaseModel):
186    analyzer_name: str = Field(alias="analyzerName")
187    rule_name: str = Field(alias="ruleName")
188
189
190class GetFindingRequestModel(BaseModel):
191    analyzer_arn: str = Field(alias="analyzerArn")
192    id: str = Field(alias="id")
193
194
195class GetGeneratedPolicyRequestModel(BaseModel):
196    job_id: str = Field(alias="jobId")
197    include_resource_placeholders: Optional[bool] = Field(
198        default=None, alias="includeResourcePlaceholders"
199    )
200    include_service_level_template: Optional[bool] = Field(
201        default=None, alias="includeServiceLevelTemplate"
202    )
203
204
205class JobErrorModel(BaseModel):
206    code: Literal[
207        "AUTHORIZATION_ERROR",
208        "RESOURCE_NOT_FOUND_ERROR",
209        "SERVICE_ERROR",
210        "SERVICE_QUOTA_EXCEEDED_ERROR",
211    ] = Field(alias="code")
212    message: str = Field(alias="message")
213
214
215class KmsGrantConstraintsModel(BaseModel):
216    encryption_context_equals: Optional[Mapping[str, str]] = Field(
217        default=None, alias="encryptionContextEquals"
218    )
219    encryption_context_subset: Optional[Mapping[str, str]] = Field(
220        default=None, alias="encryptionContextSubset"
221    )
222
223
224class PaginatorConfigModel(BaseModel):
225    max_items: Optional[int] = Field(default=None, alias="MaxItems")
226    page_size: Optional[int] = Field(default=None, alias="PageSize")
227    starting_token: Optional[str] = Field(default=None, alias="StartingToken")
228
229
230class ListAccessPreviewsRequestModel(BaseModel):
231    analyzer_arn: str = Field(alias="analyzerArn")
232    next_token: Optional[str] = Field(default=None, alias="nextToken")
233    max_results: Optional[int] = Field(default=None, alias="maxResults")
234
235
236class ListAnalyzedResourcesRequestModel(BaseModel):
237    analyzer_arn: str = Field(alias="analyzerArn")
238    resource_type: Optional[
239        Literal[
240            "AWS::EC2::Snapshot",
241            "AWS::ECR::Repository",
242            "AWS::EFS::FileSystem",
243            "AWS::IAM::Role",
244            "AWS::KMS::Key",
245            "AWS::Lambda::Function",
246            "AWS::Lambda::LayerVersion",
247            "AWS::RDS::DBClusterSnapshot",
248            "AWS::RDS::DBSnapshot",
249            "AWS::S3::Bucket",
250            "AWS::SNS::Topic",
251            "AWS::SQS::Queue",
252            "AWS::SecretsManager::Secret",
253        ]
254    ] = Field(default=None, alias="resourceType")
255    next_token: Optional[str] = Field(default=None, alias="nextToken")
256    max_results: Optional[int] = Field(default=None, alias="maxResults")
257
258
259class ListAnalyzersRequestModel(BaseModel):
260    next_token: Optional[str] = Field(default=None, alias="nextToken")
261    max_results: Optional[int] = Field(default=None, alias="maxResults")
262    type: Optional[Literal["ACCOUNT", "ORGANIZATION"]] = Field(
263        default=None, alias="type"
264    )
265
266
267class ListArchiveRulesRequestModel(BaseModel):
268    analyzer_name: str = Field(alias="analyzerName")
269    next_token: Optional[str] = Field(default=None, alias="nextToken")
270    max_results: Optional[int] = Field(default=None, alias="maxResults")
271
272
273class SortCriteriaModel(BaseModel):
274    attribute_name: Optional[str] = Field(default=None, alias="attributeName")
275    order_by: Optional[Literal["ASC", "DESC"]] = Field(default=None, alias="orderBy")
276
277
278class ListPolicyGenerationsRequestModel(BaseModel):
279    principal_arn: Optional[str] = Field(default=None, alias="principalArn")
280    max_results: Optional[int] = Field(default=None, alias="maxResults")
281    next_token: Optional[str] = Field(default=None, alias="nextToken")
282
283
284class PolicyGenerationModel(BaseModel):
285    job_id: str = Field(alias="jobId")
286    principal_arn: str = Field(alias="principalArn")
287    status: Literal["CANCELED", "FAILED", "IN_PROGRESS", "SUCCEEDED"] = Field(
288        alias="status"
289    )
290    started_on: datetime = Field(alias="startedOn")
291    completed_on: Optional[datetime] = Field(default=None, alias="completedOn")
292
293
294class ListTagsForResourceRequestModel(BaseModel):
295    resource_arn: str = Field(alias="resourceArn")
296
297
298class VpcConfigurationModel(BaseModel):
299    vpc_id: str = Field(alias="vpcId")
300
301
302class SubstringModel(BaseModel):
303    start: int = Field(alias="start")
304    length: int = Field(alias="length")
305
306
307class PolicyGenerationDetailsModel(BaseModel):
308    principal_arn: str = Field(alias="principalArn")
309
310
311class PositionModel(BaseModel):
312    line: int = Field(alias="line")
313    column: int = Field(alias="column")
314    offset: int = Field(alias="offset")
315
316
317class RdsDbClusterSnapshotAttributeValueModel(BaseModel):
318    account_ids: Optional[Sequence[str]] = Field(default=None, alias="accountIds")
319
320
321class RdsDbSnapshotAttributeValueModel(BaseModel):
322    account_ids: Optional[Sequence[str]] = Field(default=None, alias="accountIds")
323
324
325class S3PublicAccessBlockConfigurationModel(BaseModel):
326    ignore_public_acls: bool = Field(alias="ignorePublicAcls")
327    restrict_public_buckets: bool = Field(alias="restrictPublicBuckets")
328
329
330class StartResourceScanRequestModel(BaseModel):
331    analyzer_arn: str = Field(alias="analyzerArn")
332    resource_arn: str = Field(alias="resourceArn")
333    resource_owner_account: Optional[str] = Field(
334        default=None, alias="resourceOwnerAccount"
335    )
336
337
338class TagResourceRequestModel(BaseModel):
339    resource_arn: str = Field(alias="resourceArn")
340    tags: Mapping[str, str] = Field(alias="tags")
341
342
343class UntagResourceRequestModel(BaseModel):
344    resource_arn: str = Field(alias="resourceArn")
345    tag_keys: Sequence[str] = Field(alias="tagKeys")
346
347
348class UpdateFindingsRequestModel(BaseModel):
349    analyzer_arn: str = Field(alias="analyzerArn")
350    status: Literal["ACTIVE", "ARCHIVED"] = Field(alias="status")
351    ids: Optional[Sequence[str]] = Field(default=None, alias="ids")
352    resource_arn: Optional[str] = Field(default=None, alias="resourceArn")
353    client_token: Optional[str] = Field(default=None, alias="clientToken")
354
355
356class ValidatePolicyRequestModel(BaseModel):
357    policy_document: str = Field(alias="policyDocument")
358    policy_type: Literal[
359        "IDENTITY_POLICY", "RESOURCE_POLICY", "SERVICE_CONTROL_POLICY"
360    ] = Field(alias="policyType")
361    locale: Optional[
362        Literal["DE", "EN", "ES", "FR", "IT", "JA", "KO", "PT_BR", "ZH_CN", "ZH_TW"]
363    ] = Field(default=None, alias="locale")
364    max_results: Optional[int] = Field(default=None, alias="maxResults")
365    next_token: Optional[str] = Field(default=None, alias="nextToken")
366    validate_policy_resource_type: Optional[
367        Literal[
368            "AWS::IAM::AssumeRolePolicyDocument",
369            "AWS::S3::AccessPoint",
370            "AWS::S3::Bucket",
371            "AWS::S3::MultiRegionAccessPoint",
372            "AWS::S3ObjectLambda::AccessPoint",
373        ]
374    ] = Field(default=None, alias="validatePolicyResourceType")
375
376
377class AccessPreviewSummaryModel(BaseModel):
378    id: str = Field(alias="id")
379    analyzer_arn: str = Field(alias="analyzerArn")
380    created_at: datetime = Field(alias="createdAt")
381    status: Literal["COMPLETED", "CREATING", "FAILED"] = Field(alias="status")
382    status_reason: Optional[AccessPreviewStatusReasonModel] = Field(
383        default=None, alias="statusReason"
384    )
385
386
387class S3BucketAclGrantConfigurationModel(BaseModel):
388    permission: Literal[
389        "FULL_CONTROL", "READ", "READ_ACP", "WRITE", "WRITE_ACP"
390    ] = Field(alias="permission")
391    grantee: AclGranteeModel = Field(alias="grantee")
392
393
394class AnalyzerSummaryModel(BaseModel):
395    arn: str = Field(alias="arn")
396    name: str = Field(alias="name")
397    type: Literal["ACCOUNT", "ORGANIZATION"] = Field(alias="type")
398    created_at: datetime = Field(alias="createdAt")
399    status: Literal["ACTIVE", "CREATING", "DISABLED", "FAILED"] = Field(alias="status")
400    last_resource_analyzed: Optional[str] = Field(
401        default=None, alias="lastResourceAnalyzed"
402    )
403    last_resource_analyzed_at: Optional[datetime] = Field(
404        default=None, alias="lastResourceAnalyzedAt"
405    )
406    tags: Optional[Dict[str, str]] = Field(default=None, alias="tags")
407    status_reason: Optional[StatusReasonModel] = Field(
408        default=None, alias="statusReason"
409    )
410
411
412class ArchiveRuleSummaryModel(BaseModel):
413    rule_name: str = Field(alias="ruleName")
414    filter: Dict[str, CriterionModel] = Field(alias="filter")
415    created_at: datetime = Field(alias="createdAt")
416    updated_at: datetime = Field(alias="updatedAt")
417
418
419class CreateArchiveRuleRequestModel(BaseModel):
420    analyzer_name: str = Field(alias="analyzerName")
421    rule_name: str = Field(alias="ruleName")
422    filter: Mapping[str, CriterionModel] = Field(alias="filter")
423    client_token: Optional[str] = Field(default=None, alias="clientToken")
424
425
426class InlineArchiveRuleModel(BaseModel):
427    rule_name: str = Field(alias="ruleName")
428    filter: Mapping[str, CriterionModel] = Field(alias="filter")
429
430
431class ListAccessPreviewFindingsRequestModel(BaseModel):
432    access_preview_id: str = Field(alias="accessPreviewId")
433    analyzer_arn: str = Field(alias="analyzerArn")
434    filter: Optional[Mapping[str, CriterionModel]] = Field(default=None, alias="filter")
435    next_token: Optional[str] = Field(default=None, alias="nextToken")
436    max_results: Optional[int] = Field(default=None, alias="maxResults")
437
438
439class UpdateArchiveRuleRequestModel(BaseModel):
440    analyzer_name: str = Field(alias="analyzerName")
441    rule_name: str = Field(alias="ruleName")
442    filter: Mapping[str, CriterionModel] = Field(alias="filter")
443    client_token: Optional[str] = Field(default=None, alias="clientToken")
444
445
446class CloudTrailDetailsModel(BaseModel):
447    trails: Sequence[TrailModel] = Field(alias="trails")
448    access_role: str = Field(alias="accessRole")
449    start_time: Union[datetime, str] = Field(alias="startTime")
450    end_time: Optional[Union[datetime, str]] = Field(default=None, alias="endTime")
451
452
453class CloudTrailPropertiesModel(BaseModel):
454    trail_properties: List[TrailPropertiesModel] = Field(alias="trailProperties")
455    start_time: datetime = Field(alias="startTime")
456    end_time: datetime = Field(alias="endTime")
457
458
459class CreateAccessPreviewResponseModel(BaseModel):
460    id: str = Field(alias="id")
461    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
462
463
464class CreateAnalyzerResponseModel(BaseModel):
465    arn: str = Field(alias="arn")
466    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
467
468
469class EmptyResponseMetadataModel(BaseModel):
470    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
471
472
473class GetAnalyzedResourceResponseModel(BaseModel):
474    resource: AnalyzedResourceModel = Field(alias="resource")
475    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
476
477
478class ListAnalyzedResourcesResponseModel(BaseModel):
479    analyzed_resources: List[AnalyzedResourceSummaryModel] = Field(
480        alias="analyzedResources"
481    )
482    next_token: str = Field(alias="nextToken")
483    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
484
485
486class ListTagsForResourceResponseModel(BaseModel):
487    tags: Dict[str, str] = Field(alias="tags")
488    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
489
490
491class StartPolicyGenerationResponseModel(BaseModel):
492    job_id: str = Field(alias="jobId")
493    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
494
495
496class FindingSourceModel(BaseModel):
497    type: Literal[
498        "BUCKET_ACL", "POLICY", "S3_ACCESS_POINT", "S3_ACCESS_POINT_ACCOUNT"
499    ] = Field(alias="type")
500    detail: Optional[FindingSourceDetailModel] = Field(default=None, alias="detail")
501
502
503class JobDetailsModel(BaseModel):
504    job_id: str = Field(alias="jobId")
505    status: Literal["CANCELED", "FAILED", "IN_PROGRESS", "SUCCEEDED"] = Field(
506        alias="status"
507    )
508    started_on: datetime = Field(alias="startedOn")
509    completed_on: Optional[datetime] = Field(default=None, alias="completedOn")
510    job_error: Optional[JobErrorModel] = Field(default=None, alias="jobError")
511
512
513class KmsGrantConfigurationModel(BaseModel):
514    operations: Sequence[
515        Literal[
516            "CreateGrant",
517            "Decrypt",
518            "DescribeKey",
519            "Encrypt",
520            "GenerateDataKey",
521            "GenerateDataKeyPair",
522            "GenerateDataKeyPairWithoutPlaintext",
523            "GenerateDataKeyWithoutPlaintext",
524            "GetPublicKey",
525            "ReEncryptFrom",
526            "ReEncryptTo",
527            "RetireGrant",
528            "Sign",
529            "Verify",
530        ]
531    ] = Field(alias="operations")
532    grantee_principal: str = Field(alias="granteePrincipal")
533    issuing_account: str = Field(alias="issuingAccount")
534    retiring_principal: Optional[str] = Field(default=None, alias="retiringPrincipal")
535    constraints: Optional[KmsGrantConstraintsModel] = Field(
536        default=None, alias="constraints"
537    )
538
539
540class ListAccessPreviewFindingsRequestListAccessPreviewFindingsPaginateModel(BaseModel):
541    access_preview_id: str = Field(alias="accessPreviewId")
542    analyzer_arn: str = Field(alias="analyzerArn")
543    filter: Optional[Mapping[str, CriterionModel]] = Field(default=None, alias="filter")
544    pagination_config: Optional[PaginatorConfigModel] = Field(
545        default=None, alias="PaginationConfig"
546    )
547
548
549class ListAccessPreviewsRequestListAccessPreviewsPaginateModel(BaseModel):
550    analyzer_arn: str = Field(alias="analyzerArn")
551    pagination_config: Optional[PaginatorConfigModel] = Field(
552        default=None, alias="PaginationConfig"
553    )
554
555
556class ListAnalyzedResourcesRequestListAnalyzedResourcesPaginateModel(BaseModel):
557    analyzer_arn: str = Field(alias="analyzerArn")
558    resource_type: Optional[
559        Literal[
560            "AWS::EC2::Snapshot",
561            "AWS::ECR::Repository",
562            "AWS::EFS::FileSystem",
563            "AWS::IAM::Role",
564            "AWS::KMS::Key",
565            "AWS::Lambda::Function",
566            "AWS::Lambda::LayerVersion",
567            "AWS::RDS::DBClusterSnapshot",
568            "AWS::RDS::DBSnapshot",
569            "AWS::S3::Bucket",
570            "AWS::SNS::Topic",
571            "AWS::SQS::Queue",
572            "AWS::SecretsManager::Secret",
573        ]
574    ] = Field(default=None, alias="resourceType")
575    pagination_config: Optional[PaginatorConfigModel] = Field(
576        default=None, alias="PaginationConfig"
577    )
578
579
580class ListAnalyzersRequestListAnalyzersPaginateModel(BaseModel):
581    type: Optional[Literal["ACCOUNT", "ORGANIZATION"]] = Field(
582        default=None, alias="type"
583    )
584    pagination_config: Optional[PaginatorConfigModel] = Field(
585        default=None, alias="PaginationConfig"
586    )
587
588
589class ListArchiveRulesRequestListArchiveRulesPaginateModel(BaseModel):
590    analyzer_name: str = Field(alias="analyzerName")
591    pagination_config: Optional[PaginatorConfigModel] = Field(
592        default=None, alias="PaginationConfig"
593    )
594
595
596class ListPolicyGenerationsRequestListPolicyGenerationsPaginateModel(BaseModel):
597    principal_arn: Optional[str] = Field(default=None, alias="principalArn")
598    pagination_config: Optional[PaginatorConfigModel] = Field(
599        default=None, alias="PaginationConfig"
600    )
601
602
603class ValidatePolicyRequestValidatePolicyPaginateModel(BaseModel):
604    policy_document: str = Field(alias="policyDocument")
605    policy_type: Literal[
606        "IDENTITY_POLICY", "RESOURCE_POLICY", "SERVICE_CONTROL_POLICY"
607    ] = Field(alias="policyType")
608    locale: Optional[
609        Literal["DE", "EN", "ES", "FR", "IT", "JA", "KO", "PT_BR", "ZH_CN", "ZH_TW"]
610    ] = Field(default=None, alias="locale")
611    validate_policy_resource_type: Optional[
612        Literal[
613            "AWS::IAM::AssumeRolePolicyDocument",
614            "AWS::S3::AccessPoint",
615            "AWS::S3::Bucket",
616            "AWS::S3::MultiRegionAccessPoint",
617            "AWS::S3ObjectLambda::AccessPoint",
618        ]
619    ] = Field(default=None, alias="validatePolicyResourceType")
620    pagination_config: Optional[PaginatorConfigModel] = Field(
621        default=None, alias="PaginationConfig"
622    )
623
624
625class ListFindingsRequestListFindingsPaginateModel(BaseModel):
626    analyzer_arn: str = Field(alias="analyzerArn")
627    filter: Optional[Mapping[str, CriterionModel]] = Field(default=None, alias="filter")
628    sort: Optional[SortCriteriaModel] = Field(default=None, alias="sort")
629    pagination_config: Optional[PaginatorConfigModel] = Field(
630        default=None, alias="PaginationConfig"
631    )
632
633
634class ListFindingsRequestModel(BaseModel):
635    analyzer_arn: str = Field(alias="analyzerArn")
636    filter: Optional[Mapping[str, CriterionModel]] = Field(default=None, alias="filter")
637    sort: Optional[SortCriteriaModel] = Field(default=None, alias="sort")
638    next_token: Optional[str] = Field(default=None, alias="nextToken")
639    max_results: Optional[int] = Field(default=None, alias="maxResults")
640
641
642class ListPolicyGenerationsResponseModel(BaseModel):
643    policy_generations: List[PolicyGenerationModel] = Field(alias="policyGenerations")
644    next_token: str = Field(alias="nextToken")
645    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
646
647
648class NetworkOriginConfigurationModel(BaseModel):
649    vpc_configuration: Optional[VpcConfigurationModel] = Field(
650        default=None, alias="vpcConfiguration"
651    )
652    internet_configuration: Optional[Mapping[str, Any]] = Field(
653        default=None, alias="internetConfiguration"
654    )
655
656
657class PathElementModel(BaseModel):
658    index: Optional[int] = Field(default=None, alias="index")
659    key: Optional[str] = Field(default=None, alias="key")
660    substring: Optional[SubstringModel] = Field(default=None, alias="substring")
661    value: Optional[str] = Field(default=None, alias="value")
662
663
664class SpanModel(BaseModel):
665    start: PositionModel = Field(alias="start")
666    end: PositionModel = Field(alias="end")
667
668
669class RdsDbClusterSnapshotConfigurationModel(BaseModel):
670    attributes: Optional[Mapping[str, RdsDbClusterSnapshotAttributeValueModel]] = Field(
671        default=None, alias="attributes"
672    )
673    kms_key_id: Optional[str] = Field(default=None, alias="kmsKeyId")
674
675
676class RdsDbSnapshotConfigurationModel(BaseModel):
677    attributes: Optional[Mapping[str, RdsDbSnapshotAttributeValueModel]] = Field(
678        default=None, alias="attributes"
679    )
680    kms_key_id: Optional[str] = Field(default=None, alias="kmsKeyId")
681
682
683class ListAccessPreviewsResponseModel(BaseModel):
684    access_previews: List[AccessPreviewSummaryModel] = Field(alias="accessPreviews")
685    next_token: str = Field(alias="nextToken")
686    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
687
688
689class GetAnalyzerResponseModel(BaseModel):
690    analyzer: AnalyzerSummaryModel = Field(alias="analyzer")
691    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
692
693
694class ListAnalyzersResponseModel(BaseModel):
695    analyzers: List[AnalyzerSummaryModel] = Field(alias="analyzers")
696    next_token: str = Field(alias="nextToken")
697    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
698
699
700class GetArchiveRuleResponseModel(BaseModel):
701    archive_rule: ArchiveRuleSummaryModel = Field(alias="archiveRule")
702    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
703
704
705class ListArchiveRulesResponseModel(BaseModel):
706    archive_rules: List[ArchiveRuleSummaryModel] = Field(alias="archiveRules")
707    next_token: str = Field(alias="nextToken")
708    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
709
710
711class CreateAnalyzerRequestModel(BaseModel):
712    analyzer_name: str = Field(alias="analyzerName")
713    type: Literal["ACCOUNT", "ORGANIZATION"] = Field(alias="type")
714    archive_rules: Optional[Sequence[InlineArchiveRuleModel]] = Field(
715        default=None, alias="archiveRules"
716    )
717    tags: Optional[Mapping[str, str]] = Field(default=None, alias="tags")
718    client_token: Optional[str] = Field(default=None, alias="clientToken")
719
720
721class StartPolicyGenerationRequestModel(BaseModel):
722    policy_generation_details: PolicyGenerationDetailsModel = Field(
723        alias="policyGenerationDetails"
724    )
725    cloud_trail_details: Optional[CloudTrailDetailsModel] = Field(
726        default=None, alias="cloudTrailDetails"
727    )
728    client_token: Optional[str] = Field(default=None, alias="clientToken")
729
730
731class GeneratedPolicyPropertiesModel(BaseModel):
732    principal_arn: str = Field(alias="principalArn")
733    is_complete: Optional[bool] = Field(default=None, alias="isComplete")
734    cloud_trail_properties: Optional[CloudTrailPropertiesModel] = Field(
735        default=None, alias="cloudTrailProperties"
736    )
737
738
739class AccessPreviewFindingModel(BaseModel):
740    id: str = Field(alias="id")
741    resource_type: Literal[
742        "AWS::EC2::Snapshot",
743        "AWS::ECR::Repository",
744        "AWS::EFS::FileSystem",
745        "AWS::IAM::Role",
746        "AWS::KMS::Key",
747        "AWS::Lambda::Function",
748        "AWS::Lambda::LayerVersion",
749        "AWS::RDS::DBClusterSnapshot",
750        "AWS::RDS::DBSnapshot",
751        "AWS::S3::Bucket",
752        "AWS::SNS::Topic",
753        "AWS::SQS::Queue",
754        "AWS::SecretsManager::Secret",
755    ] = Field(alias="resourceType")
756    created_at: datetime = Field(alias="createdAt")
757    change_type: Literal["CHANGED", "NEW", "UNCHANGED"] = Field(alias="changeType")
758    status: Literal["ACTIVE", "ARCHIVED", "RESOLVED"] = Field(alias="status")
759    resource_owner_account: str = Field(alias="resourceOwnerAccount")
760    existing_finding_id: Optional[str] = Field(default=None, alias="existingFindingId")
761    existing_finding_status: Optional[
762        Literal["ACTIVE", "ARCHIVED", "RESOLVED"]
763    ] = Field(default=None, alias="existingFindingStatus")
764    principal: Optional[Dict[str, str]] = Field(default=None, alias="principal")
765    action: Optional[List[str]] = Field(default=None, alias="action")
766    condition: Optional[Dict[str, str]] = Field(default=None, alias="condition")
767    resource: Optional[str] = Field(default=None, alias="resource")
768    is_public: Optional[bool] = Field(default=None, alias="isPublic")
769    error: Optional[str] = Field(default=None, alias="error")
770    sources: Optional[List[FindingSourceModel]] = Field(default=None, alias="sources")
771
772
773class FindingSummaryModel(BaseModel):
774    id: str = Field(alias="id")
775    resource_type: Literal[
776        "AWS::EC2::Snapshot",
777        "AWS::ECR::Repository",
778        "AWS::EFS::FileSystem",
779        "AWS::IAM::Role",
780        "AWS::KMS::Key",
781        "AWS::Lambda::Function",
782        "AWS::Lambda::LayerVersion",
783        "AWS::RDS::DBClusterSnapshot",
784        "AWS::RDS::DBSnapshot",
785        "AWS::S3::Bucket",
786        "AWS::SNS::Topic",
787        "AWS::SQS::Queue",
788        "AWS::SecretsManager::Secret",
789    ] = Field(alias="resourceType")
790    condition: Dict[str, str] = Field(alias="condition")
791    created_at: datetime = Field(alias="createdAt")
792    analyzed_at: datetime = Field(alias="analyzedAt")
793    updated_at: datetime = Field(alias="updatedAt")
794    status: Literal["ACTIVE", "ARCHIVED", "RESOLVED"] = Field(alias="status")
795    resource_owner_account: str = Field(alias="resourceOwnerAccount")
796    principal: Optional[Dict[str, str]] = Field(default=None, alias="principal")
797    action: Optional[List[str]] = Field(default=None, alias="action")
798    resource: Optional[str] = Field(default=None, alias="resource")
799    is_public: Optional[bool] = Field(default=None, alias="isPublic")
800    error: Optional[str] = Field(default=None, alias="error")
801    sources: Optional[List[FindingSourceModel]] = Field(default=None, alias="sources")
802
803
804class FindingModel(BaseModel):
805    id: str = Field(alias="id")
806    resource_type: Literal[
807        "AWS::EC2::Snapshot",
808        "AWS::ECR::Repository",
809        "AWS::EFS::FileSystem",
810        "AWS::IAM::Role",
811        "AWS::KMS::Key",
812        "AWS::Lambda::Function",
813        "AWS::Lambda::LayerVersion",
814        "AWS::RDS::DBClusterSnapshot",
815        "AWS::RDS::DBSnapshot",
816        "AWS::S3::Bucket",
817        "AWS::SNS::Topic",
818        "AWS::SQS::Queue",
819        "AWS::SecretsManager::Secret",
820    ] = Field(alias="resourceType")
821    condition: Dict[str, str] = Field(alias="condition")
822    created_at: datetime = Field(alias="createdAt")
823    analyzed_at: datetime = Field(alias="analyzedAt")
824    updated_at: datetime = Field(alias="updatedAt")
825    status: Literal["ACTIVE", "ARCHIVED", "RESOLVED"] = Field(alias="status")
826    resource_owner_account: str = Field(alias="resourceOwnerAccount")
827    principal: Optional[Dict[str, str]] = Field(default=None, alias="principal")
828    action: Optional[List[str]] = Field(default=None, alias="action")
829    resource: Optional[str] = Field(default=None, alias="resource")
830    is_public: Optional[bool] = Field(default=None, alias="isPublic")
831    error: Optional[str] = Field(default=None, alias="error")
832    sources: Optional[List[FindingSourceModel]] = Field(default=None, alias="sources")
833
834
835class KmsKeyConfigurationModel(BaseModel):
836    key_policies: Optional[Mapping[str, str]] = Field(default=None, alias="keyPolicies")
837    grants: Optional[Sequence[KmsGrantConfigurationModel]] = Field(
838        default=None, alias="grants"
839    )
840
841
842class S3AccessPointConfigurationModel(BaseModel):
843    access_point_policy: Optional[str] = Field(default=None, alias="accessPointPolicy")
844    public_access_block: Optional[S3PublicAccessBlockConfigurationModel] = Field(
845        default=None, alias="publicAccessBlock"
846    )
847    network_origin: Optional[NetworkOriginConfigurationModel] = Field(
848        default=None, alias="networkOrigin"
849    )
850
851
852class LocationModel(BaseModel):
853    path: List[PathElementModel] = Field(alias="path")
854    span: SpanModel = Field(alias="span")
855
856
857class GeneratedPolicyResultModel(BaseModel):
858    properties: GeneratedPolicyPropertiesModel = Field(alias="properties")
859    generated_policies: Optional[List[GeneratedPolicyModel]] = Field(
860        default=None, alias="generatedPolicies"
861    )
862
863
864class ListAccessPreviewFindingsResponseModel(BaseModel):
865    findings: List[AccessPreviewFindingModel] = Field(alias="findings")
866    next_token: str = Field(alias="nextToken")
867    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
868
869
870class ListFindingsResponseModel(BaseModel):
871    findings: List[FindingSummaryModel] = Field(alias="findings")
872    next_token: str = Field(alias="nextToken")
873    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
874
875
876class GetFindingResponseModel(BaseModel):
877    finding: FindingModel = Field(alias="finding")
878    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
879
880
881class S3BucketConfigurationModel(BaseModel):
882    bucket_policy: Optional[str] = Field(default=None, alias="bucketPolicy")
883    bucket_acl_grants: Optional[Sequence[S3BucketAclGrantConfigurationModel]] = Field(
884        default=None, alias="bucketAclGrants"
885    )
886    bucket_public_access_block: Optional[S3PublicAccessBlockConfigurationModel] = Field(
887        default=None, alias="bucketPublicAccessBlock"
888    )
889    access_points: Optional[Mapping[str, S3AccessPointConfigurationModel]] = Field(
890        default=None, alias="accessPoints"
891    )
892
893
894class ValidatePolicyFindingModel(BaseModel):
895    finding_details: str = Field(alias="findingDetails")
896    finding_type: Literal["ERROR", "SECURITY_WARNING", "SUGGESTION", "WARNING"] = Field(
897        alias="findingType"
898    )
899    issue_code: str = Field(alias="issueCode")
900    learn_more_link: str = Field(alias="learnMoreLink")
901    locations: List[LocationModel] = Field(alias="locations")
902
903
904class GetGeneratedPolicyResponseModel(BaseModel):
905    job_details: JobDetailsModel = Field(alias="jobDetails")
906    generated_policy_result: GeneratedPolicyResultModel = Field(
907        alias="generatedPolicyResult"
908    )
909    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
910
911
912class ConfigurationModel(BaseModel):
913    ebs_snapshot: Optional[EbsSnapshotConfigurationModel] = Field(
914        default=None, alias="ebsSnapshot"
915    )
916    ecr_repository: Optional[EcrRepositoryConfigurationModel] = Field(
917        default=None, alias="ecrRepository"
918    )
919    iam_role: Optional[IamRoleConfigurationModel] = Field(default=None, alias="iamRole")
920    efs_file_system: Optional[EfsFileSystemConfigurationModel] = Field(
921        default=None, alias="efsFileSystem"
922    )
923    kms_key: Optional[KmsKeyConfigurationModel] = Field(default=None, alias="kmsKey")
924    rds_db_cluster_snapshot: Optional[RdsDbClusterSnapshotConfigurationModel] = Field(
925        default=None, alias="rdsDbClusterSnapshot"
926    )
927    rds_db_snapshot: Optional[RdsDbSnapshotConfigurationModel] = Field(
928        default=None, alias="rdsDbSnapshot"
929    )
930    secrets_manager_secret: Optional[SecretsManagerSecretConfigurationModel] = Field(
931        default=None, alias="secretsManagerSecret"
932    )
933    s3_bucket: Optional[S3BucketConfigurationModel] = Field(
934        default=None, alias="s3Bucket"
935    )
936    sns_topic: Optional[SnsTopicConfigurationModel] = Field(
937        default=None, alias="snsTopic"
938    )
939    sqs_queue: Optional[SqsQueueConfigurationModel] = Field(
940        default=None, alias="sqsQueue"
941    )
942
943
944class ValidatePolicyResponseModel(BaseModel):
945    findings: List[ValidatePolicyFindingModel] = Field(alias="findings")
946    next_token: str = Field(alias="nextToken")
947    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
948
949
950class AccessPreviewModel(BaseModel):
951    id: str = Field(alias="id")
952    analyzer_arn: str = Field(alias="analyzerArn")
953    configurations: Dict[str, ConfigurationModel] = Field(alias="configurations")
954    created_at: datetime = Field(alias="createdAt")
955    status: Literal["COMPLETED", "CREATING", "FAILED"] = Field(alias="status")
956    status_reason: Optional[AccessPreviewStatusReasonModel] = Field(
957        default=None, alias="statusReason"
958    )
959
960
961class CreateAccessPreviewRequestModel(BaseModel):
962    analyzer_arn: str = Field(alias="analyzerArn")
963    configurations: Mapping[str, ConfigurationModel] = Field(alias="configurations")
964    client_token: Optional[str] = Field(default=None, alias="clientToken")
965
966
967class GetAccessPreviewResponseModel(BaseModel):
968    access_preview: AccessPreviewModel = Field(alias="accessPreview")
969    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")