Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

accessanalyzer

package

Go to main page

Versions in this module

v1

v1.3.0

Aug 3, 2026

v1.2.0

Aug 3, 2026

Changes in this version

type Analyzer

+ Configuration json.RawMessage

type ValidatePolicyFinding

+ FindingDetails string

v1.1.4

Jul 20, 2026

v1.1.3

Jul 20, 2026

v1.1.2

Jul 20, 2026

v1.1.1

Jul 20, 2026

v1.1.0

Jul 19, 2026

Changes in this version

+ var ErrAccessPreviewNotFound = newNotFoundErr("AccessPreviewNotFound")

+ var ErrAnalyzedResourceNotFound = newNotFoundErr("AnalyzedResourceNotFound")

+ var ErrAnalyzerAlreadyExists = awserr.New("ConflictException", awserr.ErrConflict)

+ var ErrAnalyzerNotFound = awserr.New("ResourceNotFoundException", awserr.ErrNotFound)

+ var ErrArchiveRuleAlreadyExists = awserr.New("ConflictException", awserr.ErrConflict)

+ var ErrArchiveRuleNotFound = awserr.New("ResourceNotFoundException", awserr.ErrNotFound)

+ var ErrFindingNotFound = awserr.New("ResourceNotFoundException", awserr.ErrNotFound)

+ var ErrNilAppContext = errors.New("accessanalyzer: nil app context")

+ var ErrPolicyGenerationNotFound = newNotFoundErr("PolicyGenerationNotFound")

+ var ErrValidation = awserr.New("ValidationException", awserr.ErrInvalidParameter)

+ type AccessPreview struct

+ AnalyzerArn string

+ CreatedAt time.Time

+ ID string

+ Status AccessPreviewStatus

+ type AccessPreviewStatus string

+ const AccessPreviewStatusCompleted

+ const AccessPreviewStatusCreating

+ const AccessPreviewStatusFailed

+ type AccessSpec struct

+ Actions []string

+ Resources []string

+ type AnalyzedResource struct

+ AnalyzedAt time.Time

+ AnalyzerArn string

+ CreatedAt time.Time

+ IsPublic bool

+ ResourceArn string

+ ResourceType string

+ UpdatedAt time.Time

+ type Analyzer struct

+ Arn string

+ CreatedAt time.Time

+ LastResourceAnalyzedAt *time.Time

+ Name string

+ Status AnalyzerStatus

+ Tags map[string]string

+ Type AnalyzerType

+ type AnalyzerStatus string

+ const AnalyzerStatusActive

+ const AnalyzerStatusCreating

+ const AnalyzerStatusDisabled

+ const AnalyzerStatusFailed

+ type AnalyzerType string

+ const AnalyzerTypeAccount

+ const AnalyzerTypeAccountUnusedAccess

+ const AnalyzerTypeOrganization

+ const AnalyzerTypeOrganizationUnusedAccess

+ type ArchiveRule struct

+ AnalyzerName string

+ CreatedAt time.Time

+ Filter map[string]FilterCriterion

+ RuleName string

+ UpdatedAt time.Time

+ type FilterCriterion struct

+ Contains []string

+ Eq []string

+ Exists *bool

+ Neq []string

+ type Finding struct

+ Action []string

+ AnalyzerArn string

+ Condition map[string]string

+ CreatedAt time.Time

+ ID string

+ IsPublic *bool

+ Principal map[string]string

+ ResourceArn string

+ ResourceType string

+ Status FindingStatus

+ UpdatedAt time.Time

+ type FindingRecommendation struct

+ AnalyzerArn string

+ CompletedAt *time.Time

+ ID string

+ RecommendationType string

+ StartedAt time.Time

+ Status string

+ type FindingStatus string

+ const FindingStatusActive

+ const FindingStatusArchived

+ const FindingStatusResolved

+ type Handler struct

+ Backend StorageBackend

+ func NewHandler(b StorageBackend) *Handler

+ func (h *Handler) ExtractOperation(c *echo.Context) string

+ func (h *Handler) ExtractResource(c *echo.Context) string

+ func (h *Handler) GetSupportedOperations() []string

+ func (h *Handler) Handler() echo.HandlerFunc

+ func (h *Handler) MatchPriority() int

+ func (h *Handler) Name() string

+ func (h *Handler) Reset()

+ func (h *Handler) Restore(ctx context.Context, data []byte) error

+ func (h *Handler) RouteMatcher() service.Matcher

+ func (h *Handler) Snapshot(ctx context.Context) []byte

+ type InMemoryBackend struct

+ func NewInMemoryBackend(accountID, region string) *InMemoryBackend

+ func (b *InMemoryBackend) AccountID() string

+ func (b *InMemoryBackend) AddAnalyzedResource(analyzerArn, resourceArn, resourceType string, isPublic bool) (*AnalyzedResource, error)

+ func (b *InMemoryBackend) AddFinding(analyzerName, resourceType, resourceArn string, action []string, ...) (*Finding, error)

+ func (b *InMemoryBackend) ApplyArchiveRule(analyzerArn, ruleName string) error

+ func (b *InMemoryBackend) CancelPolicyGeneration(jobID string) error

+ func (b *InMemoryBackend) CreateAccessPreview(analyzerArn string) (*AccessPreview, error)

+ func (b *InMemoryBackend) CreateAnalyzer(name string, analyzerType AnalyzerType, tags map[string]string) (*Analyzer, error)

+ func (b *InMemoryBackend) CreateArchiveRule(analyzerName, ruleName string, filter map[string]FilterCriterion) (*ArchiveRule, error)

+ func (b *InMemoryBackend) CreateServiceLinkedAnalyzer(analyzerType AnalyzerType) (*Analyzer, error)

+ func (b *InMemoryBackend) DeleteAnalyzer(name string) error

+ func (b *InMemoryBackend) DeleteArchiveRule(analyzerName, ruleName string) error

+ func (b *InMemoryBackend) GenerateFindingRecommendation(analyzerArn, findingID string) error

+ func (b *InMemoryBackend) GetAccessPreview(accessPreviewID string) (*AccessPreview, error)

+ func (b *InMemoryBackend) GetAnalyzedResource(analyzerArn, resourceArn string) (*AnalyzedResource, error)

+ func (b *InMemoryBackend) GetAnalyzer(name string) (*Analyzer, error)

+ func (b *InMemoryBackend) GetArchiveRule(analyzerName, ruleName string) (*ArchiveRule, error)

+ func (b *InMemoryBackend) GetFinding(analyzerName, findingID string) (*Finding, error)

+ func (b *InMemoryBackend) GetFindingRecommendation(analyzerArn, findingID string) (*FindingRecommendation, error)

+ func (b *InMemoryBackend) GetFindingV2(analyzerArn, findingID string) (*Finding, error)

+ func (b *InMemoryBackend) GetFindingsStatistics(analyzerArn string) (map[string]int, error)

+ func (b *InMemoryBackend) GetPolicyGeneration(jobID string) (*PolicyGeneration, error)

+ func (b *InMemoryBackend) ListAccessPreviewFindings(accessPreviewID string, maxResults int, nextToken string) ([]*Finding, string, error)

+ func (b *InMemoryBackend) ListAccessPreviews(analyzerArn string) ([]*AccessPreview, error)

+ func (b *InMemoryBackend) ListAnalyzedResources(analyzerArn, resourceType string, maxResults int, nextToken string) ([]*AnalyzedResource, string, error)

+ func (b *InMemoryBackend) ListAnalyzers(analyzerType string) ([]*Analyzer, error)

+ func (b *InMemoryBackend) ListArchiveRules(analyzerName string) ([]*ArchiveRule, error)

+ func (b *InMemoryBackend) ListFindings(analyzerName string, _ map[string]FilterCriterion, status string, ...) ([]*Finding, string, error)

+ func (b *InMemoryBackend) ListFindingsV2(analyzerArn, status string, maxResults int, nextToken string) ([]*Finding, string, error)

+ func (b *InMemoryBackend) ListPolicyGenerations(principalArn string) ([]*PolicyGeneration, error)

+ func (b *InMemoryBackend) ListTagsForResource(resourceARN string) (map[string]string, error)

+ func (b *InMemoryBackend) Region() string

+ func (b *InMemoryBackend) Reset()

+ func (b *InMemoryBackend) Restore(ctx context.Context, data []byte) error

+ func (b *InMemoryBackend) Snapshot(ctx context.Context) []byte

+ func (b *InMemoryBackend) StartPolicyGeneration(principalArn string) (*PolicyGeneration, error)

+ func (b *InMemoryBackend) StartResourceScan(analyzerARN string, _ string) error

+ func (b *InMemoryBackend) TagResource(resourceARN string, kv map[string]string) error

+ func (b *InMemoryBackend) UntagResource(resourceARN string, tagKeys []string) error

+ func (b *InMemoryBackend) UpdateAnalyzer(name string) (*Analyzer, error)

+ func (b *InMemoryBackend) UpdateArchiveRule(analyzerName, ruleName string, filter map[string]FilterCriterion) (*ArchiveRule, error)

+ func (b *InMemoryBackend) UpdateFindings(analyzerName string, findingIDs []string, status FindingStatus) error

+ type PolicyCheckResult struct

+ Message string

+ Reasons []map[string]any

+ Result string

+ func CheckAccessNotGranted(policyDoc string, accesses []AccessSpec) PolicyCheckResult

+ func CheckNoNewAccess(existingDoc, newDoc string) PolicyCheckResult

+ func CheckNoPublicAccess(policyDoc string) PolicyCheckResult

+ type PolicyGeneration struct

+ CompletedOn *time.Time

+ JobID string

+ PrincipalArn string

+ StartedOn time.Time

+ Status PolicyGenerationStatus

+ type PolicyGenerationStatus string

+ const PolicyGenerationStatusCanceled

+ const PolicyGenerationStatusFailed

+ const PolicyGenerationStatusRunning

+ const PolicyGenerationStatusSucceeded

+ type Provider struct

+ func (p *Provider) Init(ctx *service.AppContext) (service.Registerable, error)

+ func (p *Provider) Name() string

+ type StorageBackend interface

+ AccountID func() string

+ AddAnalyzedResource func(analyzerArn, resourceArn, resourceType string, isPublic bool) (*AnalyzedResource, error)

+ AddFinding func(analyzerName, resourceType, resourceArn string, action []string, ...) (*Finding, error)

+ ApplyArchiveRule func(analyzerArn, ruleName string) error

+ CancelPolicyGeneration func(jobID string) error

+ CreateAccessPreview func(analyzerArn string) (*AccessPreview, error)

+ CreateAnalyzer func(name string, analyzerType AnalyzerType, tags map[string]string) (*Analyzer, error)

+ CreateArchiveRule func(analyzerName, ruleName string, filter map[string]FilterCriterion) (*ArchiveRule, error)

+ CreateServiceLinkedAnalyzer func(analyzerType AnalyzerType) (*Analyzer, error)

+ DeleteAnalyzer func(name string) error

+ DeleteArchiveRule func(analyzerName, ruleName string) error

+ GenerateFindingRecommendation func(analyzerArn, findingID string) error

+ GetAccessPreview func(accessPreviewID string) (*AccessPreview, error)

+ GetAnalyzedResource func(analyzerArn, resourceArn string) (*AnalyzedResource, error)

+ GetAnalyzer func(name string) (*Analyzer, error)

+ GetArchiveRule func(analyzerName, ruleName string) (*ArchiveRule, error)

+ GetFinding func(analyzerName, findingID string) (*Finding, error)

+ GetFindingRecommendation func(analyzerArn, findingID string) (*FindingRecommendation, error)

+ GetFindingV2 func(analyzerArn, findingID string) (*Finding, error)

+ GetFindingsStatistics func(analyzerArn string) (map[string]int, error)

+ GetPolicyGeneration func(jobID string) (*PolicyGeneration, error)

+ ListAccessPreviewFindings func(accessPreviewID string, maxResults int, nextToken string) ([]*Finding, string, error)

+ ListAccessPreviews func(analyzerArn string) ([]*AccessPreview, error)

+ ListAnalyzedResources func(analyzerArn, resourceType string, maxResults int, nextToken string) ([]*AnalyzedResource, string, error)

+ ListAnalyzers func(analyzerType string) ([]*Analyzer, error)

+ ListArchiveRules func(analyzerName string) ([]*ArchiveRule, error)

+ ListFindings func(analyzerName string, filter map[string]FilterCriterion, status string, ...) ([]*Finding, string, error)

+ ListFindingsV2 func(analyzerArn, status string, maxResults int, nextToken string) ([]*Finding, string, error)

+ ListPolicyGenerations func(principalArn string) ([]*PolicyGeneration, error)

+ ListTagsForResource func(resourceARN string) (map[string]string, error)

+ Region func() string

+ Reset func()

+ Restore func(ctx context.Context, data []byte) error

+ Snapshot func(ctx context.Context) []byte

+ StartPolicyGeneration func(principalArn string) (*PolicyGeneration, error)

+ StartResourceScan func(analyzerARN, resourceARN string) error

+ TagResource func(resourceARN string, kv map[string]string) error

+ UntagResource func(resourceARN string, tagKeys []string) error

+ UpdateAnalyzer func(name string) (*Analyzer, error)

+ UpdateArchiveRule func(analyzerName, ruleName string, filter map[string]FilterCriterion) (*ArchiveRule, error)

+ UpdateFindings func(analyzerName string, findingIDs []string, status FindingStatus) error

+ type ValidatePolicyFinding struct

+ FindingType string

+ IssueCode string

+ LearnMoreLink string

+ Locations []map[string]any

+ func ValidatePolicy(policyDoc, policyType string) []ValidatePolicyFinding