IAmazonAccessAnalyzer.GenerateFindingRecommendation Method (GenerateFindingRecommendationRequest)

Creates a recommendation for an unused permissions finding.

Note:

For .NET Core this operation is only available in asynchronous form. Please refer to GenerateFindingRecommendationAsync.

Namespace: Amazon.AccessAnalyzer
Assembly: AWSSDK.AccessAnalyzer.dll
Version: 3.x.y.z

Syntax

public abstract GenerateFindingRecommendationResponse GenerateFindingRecommendation(
         GenerateFindingRecommendationRequest request
)

Parameters

request: Type: Amazon.AccessAnalyzer.Model.GenerateFindingRecommendationRequest

Container for the necessary parameters to execute the GenerateFindingRecommendation service method.

Return Value

Type: GenerateFindingRecommendationResponse

The response from the GenerateFindingRecommendation service method, as returned by AccessAnalyzer.

Exceptions

Exception	Condition
AccessDeniedException	You do not have sufficient access to perform this action.
InternalServerException	Internal server error.
ThrottlingException	Throttling limit exceeded error.
ValidationException	Validation exception error.

Examples

Successfully started generating finding recommendation


var client = new AmazonAccessAnalyzerClient();
var response = client.CheckAccessNotGranted(new CheckAccessNotGrantedRequest 
{
    Access = new List<Access> {
        new Access { Actions = new List<string> {
            "s3:PutObject"
        } }
    },
    PolicyDocument = "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:GetObject\",\"Resource\":\"*\"}]}",
    PolicyType = "RESOURCE_POLICY"
});

string message = response.Message;
string result = response.Result;

Failed field validation for id value


var client = new AmazonAccessAnalyzerClient();
var response = client.CheckAccessNotGranted(new CheckAccessNotGrantedRequest 
{
    Access = new List<Access> {
        new Access { Resources = new List<string> {
            "arn:aws:s3:::sensitive-bucket/*"
        } }
    },
    PolicyDocument = "{\"Version\":\"2012-10-17\",\"Id\":\"123\",\"Statement\":[{\"Sid\":\"AllowJohnDoe\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:user/JohnDoe\"},\"Action\":\"s3:PutObject\",\"Resource\":\"arn:aws:s3:::non-sensitive-bucket/*\"}]}",
    PolicyType = "RESOURCE_POLICY"
});

string message = response.Message;
string result = response.Result;

Version Information

.NET Framework:
Supported in: 4.5 and newer, 3.5

IAmazonAccessAnalyzer.GenerateFindingRecommendation (GenerateFindingRecommendationRequest)

Method