The Analyzed Resource API from Amazon IAM Access Analyzer — 1 operation(s) for analyzed resource.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/amazon-iam-access-analyzer:amazon-iam-access-analyzer-analyzed-resource-api"curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Amazon Iam Access Analyzer Analyzed Resource API
x-refined-note:
- x-apiClientRegistration differs across the merged source definitions and was not carried
- x-apisguru-categories differs across the merged source definitions and was not carried
- x-aws-signingName differs across the merged source definitions and was not carried
- x-logo differs across the merged source definitions and was not carried
- x-origin differs across the merged source definitions and was not carried
- x-preferred differs across the merged source definitions and was not carried
- x-providerName differs across the merged source definitions and was not carried
- x-release differs across the merged source definitions and was not carried
- x-serviceName differs across the merged source definitions and was not carried
version: '1.0'
description: 'Operations tagged Analyzed Resource across 2 of this provider''s published API definitions: amazon-iam-access-analyzer-openapi-original.yml, amazon-iam-access-analyzer-analyzed-resource-api-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: http://access-analyzer.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The Access Analyzer multi-region endpoint
- url: https://access-analyzer.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The Access Analyzer multi-region endpoint
- url: http://access-analyzer.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The Access Analyzer endpoint for China (Beijing) and China (Ningxia)
- url: https://access-analyzer.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The Access Analyzer endpoint for China (Beijing) and China (Ningxia)
tags:
- name: Analyzed Resource
paths:
/analyzed-resource#analyzerArn&resourceArn:
parameters:
- $ref: '#/components/parameters/X-Amz-Content-Sha256'
- $ref: '#/components/parameters/X-Amz-Date'
- $ref: '#/components/parameters/X-Amz-Algorithm'
- $ref: '#/components/parameters/X-Amz-Credential'
- $ref: '#/components/parameters/X-Amz-Security-Token'
- $ref: '#/components/parameters/X-Amz-Signature'
- $ref: '#/components/parameters/X-Amz-SignedHeaders'
get:
operationId: GetAnalyzedResource
description: Retrieves information about a resource that was analyzed.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/GetAnalyzedResourceResponse'
'480':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'481':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException'
'482':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException'
'483':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'484':
description: AccessDeniedException
content:
application/json:
schema:
$ref: '#/components/schemas/AccessDeniedException'
parameters:
- name: analyzerArn
in: query
required: true
description: The <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources">ARN of the analyzer</a> to retrieve information from.
schema:
type: string
pattern: '[^:]*:[^:]*:[^:]*:[^:]*:[^:]*:analyzer/.{1,255}'
- name: resourceArn
in: query
required: true
description: The ARN of the resource to retrieve information about.
schema:
type: string
pattern: arn:[^:]*:[^:]*:[^:]*:[^:]*:.*
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
summary: Amazon IAM Access Analyzer Get Analyzed Resource
tags:
- Analyzed Resource
security:
- hmac: []
servers:
- url: http://access-analyzer.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The Access Analyzer multi-region endpoint
- url: https://access-analyzer.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The Access Analyzer multi-region endpoint
- url: http://access-analyzer.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The Access Analyzer endpoint for China (Beijing) and China (Ningxia)
- url: https://access-analyzer.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The Access Analyzer endpoint for China (Beijing) and China (Ningxia)
/analyzed-resource:
parameters:
- $ref: '#/components/parameters/X-Amz-Content-Sha256'
- $ref: '#/components/parameters/X-Amz-Date'
- $ref: '#/components/parameters/X-Amz-Algorithm'
- $ref: '#/components/parameters/X-Amz-Credential'
- $ref: '#/components/parameters/X-Amz-Security-Token'
- $ref: '#/components/parameters/X-Amz-Signature'
- $ref: '#/components/parameters/X-Amz-SignedHeaders'
post:
operationId: ListAnalyzedResources
description: Retrieves a list of resources of the specified type that have been analyzed by the specified analyzer..
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/ListAnalyzedResourcesResponse'
'480':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'481':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException'
'482':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException'
'483':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'484':
description: AccessDeniedException
content:
application/json:
schema:
$ref: '#/components/schemas/AccessDeniedException'
parameters:
- name: maxResults
in: query
schema:
type: string
description: Pagination limit
required: false
- name: nextToken
in: query
schema:
type: string
description: Pagination token
required: false
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- analyzerArn
properties:
analyzerArn:
description: The <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources">ARN of the analyzer</a> to retrieve a list of analyzed resources from.
type: string
pattern: '[^:]*:[^:]*:[^:]*:[^:]*:[^:]*:analyzer/.{1,255}'
resourceType:
description: The type of resource.
type: string
enum:
- AWS::S3::Bucket
- AWS::IAM::Role
- AWS::SQS::Queue
- AWS::Lambda::Function
- AWS::Lambda::LayerVersion
- AWS::KMS::Key
- AWS::SecretsManager::Secret
- AWS::EFS::FileSystem
- AWS::EC2::Snapshot
- AWS::ECR::Repository
- AWS::RDS::DBSnapshot
- AWS::RDS::DBClusterSnapshot
- AWS::SNS::Topic
nextToken:
description: A token used for pagination of results returned.
type: string
maxResults:
description: The maximum number of results to return in the response.
type: integer
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
summary: Amazon IAM Access Analyzer List Analyzed Resources
tags:
- Analyzed Resource
security:
- hmac: []
get:
operationId: getAnalyzedResource
summary: Get Analyzed Resource
description: Retrieves information about a resource that was analyzed. This action is supported only for external access analyzers.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/GetAnalyzedResourceResponse_2'
'403':
description: AccessDeniedException
content:
application/json:
schema:
$ref: '#/components/schemas/AccessDeniedException_2'
'500':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException_2'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException_2'
'429':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException_2'
'400':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException_2'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/GetAnalyzedResourceRequest'
tags:
- Analyzed Resource
security:
- hmac: []
x-operation-id-source: normalized
x-operation-id-original: GetAnalyzedResource
servers:
- url: http://access-analyzer.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The Access Analyzer multi-region endpoint
- url: https://access-analyzer.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The Access Analyzer multi-region endpoint
- url: http://access-analyzer.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The Access Analyzer endpoint for China (Beijing) and China (Ningxia)
- url: https://access-analyzer.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The Access Analyzer endpoint for China (Beijing) and China (Ningxia)
components:
schemas:
ResourceNotFoundException: {}
AnalyzedResource:
type: object
required:
- resourceArn
- resourceType
- createdAt
- analyzedAt
- updatedAt
- isPublic
- resourceOwnerAccount
properties:
resourceArn:
allOf:
- $ref: '#/components/schemas/ResourceArn'
- description: The ARN of the resource that was analyzed.
resourceType:
allOf:
- $ref: '#/components/schemas/ResourceType'
- description: The type of the resource that was analyzed.
createdAt:
allOf:
- $ref: '#/components/schemas/Timestamp'
- description: The time at which the finding was created.
analyzedAt:
allOf:
- $ref: '#/components/schemas/Timestamp'
- description: The time at which the resource was analyzed.
updatedAt:
allOf:
- $ref: '#/components/schemas/Timestamp'
- description: The time at which the finding was updated.
isPublic:
allOf:
- $ref: '#/components/schemas/Boolean'
- description: Indicates whether the policy that generated the finding grants public access to the resource.
actions:
allOf:
- $ref: '#/components/schemas/ActionList'
- description: The actions that an external principal is granted permission to use by the policy that generated the finding.
sharedVia:
allOf:
- $ref: '#/components/schemas/SharedViaList'
- description: Indicates how the access that generated the finding is granted. This is populated for Amazon S3 bucket findings.
status:
allOf:
- $ref: '#/components/schemas/FindingStatus'
- description: The current status of the finding generated from the analyzed resource.
resourceOwnerAccount:
allOf:
- $ref: '#/components/schemas/String'
- description: The Amazon Web Services account ID that owns the resource.
error:
allOf:
- $ref: '#/components/schemas/String'
- description: An error message.
description: Contains details about the analyzed resource.
ResourceType:
type: string
enum:
- AWS::S3::Bucket
- AWS::IAM::Role
- AWS::SQS::Queue
- AWS::Lambda::Function
- AWS::Lambda::LayerVersion
- AWS::KMS::Key
- AWS::SecretsManager::Secret
- AWS::EFS::FileSystem
- AWS::EC2::Snapshot
- AWS::ECR::Repository
- AWS::RDS::DBSnapshot
- AWS::RDS::DBClusterSnapshot
- AWS::SNS::Topic
InternalServerException: {}
ResourceArn:
type: string
pattern: arn:[^:]*:[^:]*:[^:]*:[^:]*:.*
Timestamp:
type: string
format: date-time
FindingStatus:
type: string
enum:
- ACTIVE
- ARCHIVED
- RESOLVED
ValidationException: {}
SharedViaList:
type: array
items:
$ref: '#/components/schemas/String'
GetAnalyzedResourceResponse:
type: object
properties:
resource:
allOf:
- $ref: '#/components/schemas/AnalyzedResource'
- description: An <code>AnalyzedResource</code> object that contains information that IAM Access Analyzer found when it analyzed the resource.
description: The response to the request.
ThrottlingException: {}
String:
type: string
ListAnalyzedResourcesResponse:
type: object
required:
- analyzedResources
properties:
analyzedResources:
allOf:
- $ref: '#/components/schemas/AnalyzedResourcesList'
- description: A list of resources that were analyzed.
nextToken:
allOf:
- $ref: '#/components/schemas/Token'
- description: A token used for pagination of results returned.
description: The response to the request.
AnalyzedResourceSummary:
type: object
required:
- resourceArn
- resourceOwnerAccount
- resourceType
properties:
resourceArn:
allOf:
- $ref: '#/components/schemas/ResourceArn'
- description: The ARN of the analyzed resource.
resourceOwnerAccount:
allOf:
- $ref: '#/components/schemas/String'
- description: The Amazon Web Services account ID that owns the resource.
resourceType:
allOf:
- $ref: '#/components/schemas/ResourceType'
- description: The type of resource that was analyzed.
description: Contains the ARN of the analyzed resource.
ActionList:
type: array
items:
$ref: '#/components/schemas/String'
Token:
type: string
AnalyzedResourcesList:
type: array
items:
$ref: '#/components/schemas/AnalyzedResourceSummary'
AccessDeniedException: {}
Boolean:
type: boolean
InternalServerException_2:
type: object
properties:
message:
type: string
retryAfterSeconds:
type: integer
description: The seconds to wait to retry.
required:
- message
ResourceNotFoundException_2:
type: object
properties:
message:
type: string
resourceId:
type: string
description: The ID of the resource.
resourceType:
type: string
description: The type of the resource.
required:
- message
- resourceId
- resourceType
AnalyzedResource_2:
type: object
properties:
resourceArn:
type: string
description: The ARN of the resource that was analyzed.
resourceType:
type: string
description: The type of the resource that was analyzed.
createdAt:
type: string
format: date-time
description: The time at which the finding was created.
analyzedAt:
type: string
format: date-time
description: The time at which the resource was analyzed.
updatedAt:
type: string
format: date-time
description: The time at which the finding was updated.
isPublic:
type: boolean
description: Indicates whether the policy that generated the finding grants public access to the resource.
actions:
type: array
items:
type: string
description: The actions that an external principal is granted permission to use by the policy that generated the finding.
sharedVia:
type: array
items:
type: string
description: Indicates how the access that generated the finding is granted. This is populated for Amazon S3 bucket findings.
status:
type: string
description: The current status of the finding generated from the analyzed resource.
resourceOwnerAccount:
type: string
description: The Amazon Web Services account ID that owns the resource.
error:
type: string
description: An error message.
required:
- resourceArn
- resourceType
- createdAt
- analyzedAt
- updatedAt
- isPublic
- resourceOwnerAccount
GetAnalyzedResourceRequest:
type: object
properties:
analyzerArn:
type: string
description: The ARN of the analyzer to retrieve information from.
resourceArn:
type: string
description: The ARN of the resource to retrieve information about.
required:
- analyzerArn
- resourceArn
AccessDeniedException_2:
type: object
properties:
message:
type: string
required:
- message
GetAnalyzedResourceResponse_2:
type: object
properties:
resource:
$ref: '#/components/schemas/AnalyzedResource_2'
ThrottlingException_2:
type: object
properties:
message:
type: string
retryAfterSeconds:
type: integer
description: The seconds to wait to retry.
required:
- message
ValidationException_2:
type: object
properties:
message:
type: string
reason:
type: string
description: The reason for the exception.
fieldList:
type: array
items:
$ref: '#/components/schemas/ValidationExceptionField'
description: A list of fields that didn't validate.
required:
- message
- reason
ValidationExceptionField:
type: object
properties:
name:
type: string
description: The name of the validation exception.
message:
type: string
description: A message about the validation exception.
required:
- name
- message
parameters:
X-Amz-Date:
name: X-Amz-Date
in: header
schema:
type: string
required: false
X-Amz-Signature:
name: X-Amz-Signature
in: header
schema:
type: string
required: false
X-Amz-Content-Sha256:
name: X-Amz-Content-Sha256
in: header
schema:
type: string
required: false
X-Amz-Algorithm:
name: X-Amz-Algorithm
in: header
schema:
type: string
required: false
X-Amz-Credential:
name: X-Amz-Credential
in: header
schema:
type: string
required: false
X-Amz-Security-Token:
name: X-Amz-Security-Token
in: header
schema:
type: string
required: false
X-Amz-SignedHeaders:
name: X-Amz-SignedHeaders
in: header
schema:
type: string
required: false
securitySchemes:
hmac:
type: apiKey
name: Authorization
in: header
description: Amazon Signature authorization v4
x-amazon-apigateway-authtype: awsSigv4
sigv4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
x-aws-sigv4:
signingName: access-analyzer
externalDocs:
description: Amazon Web Services documentation
url: https://docs.aws.amazon.com/access-analyzer/
x-refined-from:
- amazon-iam-access-analyzer-openapi-original.yml
- amazon-iam-access-analyzer-analyzed-resource-api-openapi.yml
x-hasEquivalentPaths: true