AmazonAccessAnalyzerClient.GetFindingRecommendation Method (GetFindingRecommendationRequest)

Retrieves information about a finding recommendation for the specified analyzer.

Note:

For .NET Core this operation is only available in asynchronous form. Please refer to GetFindingRecommendationAsync.

Namespace: Amazon.AccessAnalyzer
Assembly: AWSSDK.AccessAnalyzer.dll
Version: 3.x.y.z

Syntax

public virtual GetFindingRecommendationResponse GetFindingRecommendation(
         GetFindingRecommendationRequest request
)

Parameters

request: Type: Amazon.AccessAnalyzer.Model.GetFindingRecommendationRequest

Container for the necessary parameters to execute the GetFindingRecommendation service method.

Return Value

Type: GetFindingRecommendationResponse

The response from the GetFindingRecommendation service method, as returned by AccessAnalyzer.

Exceptions

Exception	Condition
AccessDeniedException	You do not have sufficient access to perform this action.
InternalServerException	Internal server error.
ResourceNotFoundException	The specified resource could not be found.
ThrottlingException	Throttling limit exceeded error.
ValidationException	Validation exception error.

Examples

Successfully fetched finding recommendation


var client = new AmazonAccessAnalyzerClient();
var response = client.CheckAccessNotGranted(new CheckAccessNotGrantedRequest 
{
    Access = new List<Access> {
        new Access { Actions = new List<string> {
            "s3:PutObject"
        } }
    },
    PolicyDocument = "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:GetObject\",\"Resource\":\"*\"}]}",
    PolicyType = "RESOURCE_POLICY"
});

string message = response.Message;
string result = response.Result;

In progress finding recommendation


var client = new AmazonAccessAnalyzerClient();
var response = client.CheckAccessNotGranted(new CheckAccessNotGrantedRequest 
{
    Access = new List<Access> {
        new Access { Resources = new List<string> {
            "arn:aws:s3:::sensitive-bucket/*"
        } }
    },
    PolicyDocument = "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::non-sensitive-bucket/*\"}]}",
    PolicyType = "RESOURCE_POLICY"
});

string message = response.Message;
string result = response.Result;

Failed finding recommendation


var client = new AmazonAccessAnalyzerClient();
var response = client.CheckAccessNotGranted(new CheckAccessNotGrantedRequest 
{
    Access = new List<Access> {
        new Access { Resources = new List<string> {
            "arn:aws:s3:::my-bucket/*"
        } }
    },
    PolicyDocument = "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::my-bucket/*\"}]}",
    PolicyType = "RESOURCE_POLICY"
});

string message = response.Message;
List<ReasonSummary> reasons = response.Reasons;
string result = response.Result;

Failed field validation for id value


var client = new AmazonAccessAnalyzerClient();
var response = client.GetFindingRecommendation(new GetFindingRecommendationRequest 
{
    AnalyzerArn = "arn:aws:access-analyzer:us-east-1:111122223333:analyzer/a",
    Id = "!"
});

Version Information

.NET Framework:
Supported in: 4.5 and newer, 3.5

AmazonAccessAnalyzerClient.GetFindingRecommendation (GetFindingRecommendationRequest)

Method