Continuum / Client / get_collector_data_access_authorization

get_collector_data_access_authorization

Continuum.Client.get_collector_data_access_authorization(**kwargs)

Authorizes an Environment’s access to a Collector’s data. Continuum calls this operation with the Environment’s Collector data-access role before it reads the Collector’s inventory, so grant continuum:GetCollectorDataAccessAuthorization to that role and, for a Collector in another account, in the Collector’s resource policy. The operation evaluates the action against the exact Collector ARN and the Collector’s current resource policy using IAM and the caller’s authenticated request context, with environmentArn as the continuum:EnvironmentArn condition key. A successful request returns HTTP 200 with no response members. If access is not granted, the operation returns AccessDeniedException without disclosing Collector existence, ownership, or the policy layer that denied access. The service does not reinterpret the policy using only an account ID.

See also: AWS API Documentation

Request Syntax

response = client.get_collector_data_access_authorization(
    accountId='string',
    collectorId='string',
    environmentArn='string'
)
Parameters:

  • accountId (string) –

    [REQUIRED]

    The AWS account that owns the Collector.

  • collectorId (string) –

    [REQUIRED]

    The unique identifier of the Collector.

  • environmentArn (string) – The full ARN of the Environment requesting the Collector’s data. The Environment must be in the caller’s account. Continuum supplies this value as the continuum:EnvironmentArn condition key.

Return type:

dict

Returns:

Response Syntax

{}

Response Structure

  • (dict) –

    Empty response returned when the authenticated caller is authorized to access the Collector’s data.

Exceptions

  • Continuum.Client.exceptions.ValidationException

  • Continuum.Client.exceptions.InternalServerException

  • Continuum.Client.exceptions.ThrottlingException

  • Continuum.Client.exceptions.AccessDeniedException