AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Creates a recommendation for an unused permissions finding.
For .NET Core this operation is only available in asynchronous form. Please refer to GenerateFindingRecommendationAsync.
Namespace: Amazon.AccessAnalyzer
Assembly: AWSSDK.AccessAnalyzer.dll
Version: 3.x.y.z
public virtual GenerateFindingRecommendationResponse GenerateFindingRecommendation( GenerateFindingRecommendationRequest request )
Container for the necessary parameters to execute the GenerateFindingRecommendation service method.
Exception | Condition |
---|---|
AccessDeniedException | You do not have sufficient access to perform this action. |
InternalServerException | Internal server error. |
ThrottlingException | Throttling limit exceeded error. |
ValidationException | Validation exception error. |
var client = new AmazonAccessAnalyzerClient(); var response = client.CheckAccessNotGranted(new CheckAccessNotGrantedRequest { Access = new List<Access> { new Access { Actions = new List<string> { "s3:PutObject" } } }, PolicyDocument = "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:GetObject\",\"Resource\":\"*\"}]}", PolicyType = "RESOURCE_POLICY" }); string message = response.Message; string result = response.Result;
var client = new AmazonAccessAnalyzerClient(); var response = client.CheckAccessNotGranted(new CheckAccessNotGrantedRequest { Access = new List<Access> { new Access { Resources = new List<string> { "arn:aws:s3:::sensitive-bucket/*" } } }, PolicyDocument = "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::non-sensitive-bucket/*\"}]}", PolicyType = "RESOURCE_POLICY" }); string message = response.Message; string result = response.Result;
.NET Framework:
Supported in: 4.5 and newer, 3.5