const completionSpec = { name : "accessanalyzer" , description : "AWS IAM Access Analyzer helps identify potential resource-access risks by enabling you to identify any policies that grant access to an external principal. It does this by using logic-based reasoning to analyze resource-based policies in your AWS environment. An external principal can be another AWS account, a root user, an IAM user or role, a federated user, an AWS service, or an anonymous user. You can also use Access Analyzer to preview and validate public and cross-account access to your resources before deploying permissions changes. This guide describes the AWS IAM Access Analyzer operations that you can call programmatically. For general information about Access Analyzer, see AWS IAM Access Analyzer in the IAM User Guide. To start using Access Analyzer, you first need to create an analyzer" , subcommands : [ { name : "apply-archive-rule" , description : "Retroactively applies the archive rule to existing findings that meet the archive rule criteria" , options : [ { name : "--analyzer-arn" , description : "The Amazon resource name (ARN) of the analyzer" , args : { name : "string" , } , } , { name : "--client-token" , description : "A client token" , args : { name : "string" , } , } , { name : "--rule-name" , description : "The name of the rule to apply" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "cancel-policy-generation" , description : "Cancels the requested policy generation" , options : [ { name : "--job-id" , description : "The JobId that is returned by the StartPolicyGeneration operation. The JobId can be used with GetGeneratedPolicy to retrieve the generated policies or used with CancelPolicyGeneration to cancel the policy generation request" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "create-access-preview" , description : "Creates an access preview that allows you to preview Access Analyzer findings for your resource before deploying resource permissions" , options : [ { name : "--analyzer-arn" , description : "The ARN of the account analyzer used to generate the access preview. You can only create an access preview for analyzers with an Account type and Active status" , args : { name : "string" , } , } , { name : "--client-token" , description : "A client token" , args : { name : "string" , } , } , { name : "--configurations" , description : "Access control configuration for your resource that is used to generate the access preview. The access preview includes findings for external access allowed to the resource with the proposed access control configuration. The configuration must contain exactly one element" , args : { name : "map" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "create-analyzer" , description : "Creates an analyzer for your account" , options : [ { name : "--analyzer-name" , description : "The name of the analyzer to create" , args : { name : "string" , } , } , { name : "--archive-rules" , description : "Specifies the archive rules to add for the analyzer. Archive rules automatically archive findings that meet the criteria you define for the rule" , args : { name : "list" , } , } , { name : "--client-token" , description : "A client token" , args : { name : "string" , } , } , { name : "--tags" , description : "The tags to apply to the analyzer" , args : { name : "map" , } , } , { name : "--type" , description : "The type of analyzer to create. Only ACCOUNT and ORGANIZATION analyzers are supported. You can create only one analyzer per account per Region. You can create up to 5 analyzers per organization per Region" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "create-archive-rule" , description : "Creates an archive rule for the specified analyzer. Archive rules automatically archive new findings that meet the criteria you define when you create the rule. To learn about filter keys that you can use to create an archive rule, see Access Analyzer filter keys in the IAM User Guide" , options : [ { name : "--analyzer-name" , description : "The name of the created analyzer" , args : { name : "string" , } , } , { name : "--client-token" , description : "A client token" , args : { name : "string" , } , } , { name : "--filter" , description : "The criteria for the rule" , args : { name : "map" , } , } , { name : "--rule-name" , description : "The name of the rule to create" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "delete-analyzer" , description : "Deletes the specified analyzer. When you delete an analyzer, Access Analyzer is disabled for the account or organization in the current or specific Region. All findings that were generated by the analyzer are deleted. You cannot undo this action" , options : [ { name : "--analyzer-name" , description : "The name of the analyzer to delete" , args : { name : "string" , } , } , { name : "--client-token" , description : "A client token" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "delete-archive-rule" , description : "Deletes the specified archive rule" , options : [ { name : "--analyzer-name" , description : "The name of the analyzer that associated with the archive rule to delete" , args : { name : "string" , } , } , { name : "--client-token" , description : "A client token" , args : { name : "string" , } , } , { name : "--rule-name" , description : "The name of the rule to delete" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "get-access-preview" , description : "Retrieves information about an access preview for the specified analyzer" , options : [ { name : "--access-preview-id" , description : "The unique ID for the access preview" , args : { name : "string" , } , } , { name : "--analyzer-arn" , description : "The ARN of the analyzer used to generate the access preview" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "get-analyzed-resource" , description : "Retrieves information about a resource that was analyzed" , options : [ { name : "--analyzer-arn" , description : "The ARN of the analyzer to retrieve information from" , args : { name : "string" , } , } , { name : "--resource-arn" , description : "The ARN of the resource to retrieve information about" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "get-analyzer" , description : "Retrieves information about the specified analyzer" , options : [ { name : "--analyzer-name" , description : "The name of the analyzer retrieved" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "get-archive-rule" , description : "Retrieves information about an archive rule. To learn about filter keys that you can use to create an archive rule, see Access Analyzer filter keys in the IAM User Guide" , options : [ { name : "--analyzer-name" , description : "The name of the analyzer to retrieve rules from" , args : { name : "string" , } , } , { name : "--rule-name" , description : "The name of the rule to retrieve" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "get-finding" , description : "Retrieves information about the specified finding" , options : [ { name : "--analyzer-arn" , description : "The ARN of the analyzer that generated the finding" , args : { name : "string" , } , } , { name : "--id" , description : "The ID of the finding to retrieve" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "get-generated-policy" , description : "Retrieves the policy that was generated using StartPolicyGeneration" , options : [ { name : "--include-resource-placeholders" , description : 'The level of detail that you want to generate. You can specify whether to generate policies with placeholders for resource ARNs for actions that support resource level granularity in policies. For example, in the resource section of a policy, you can receive a placeholder such as "Resource":"arn:aws:s3:::${BucketName}" instead of "*"' , } , { name : "--no-include-resource-placeholders" , description : 'The level of detail that you want to generate. You can specify whether to generate policies with placeholders for resource ARNs for actions that support resource level granularity in policies. For example, in the resource section of a policy, you can receive a placeholder such as "Resource":"arn:aws:s3:::${BucketName}" instead of "*"' , } , { name : "--include-service-level-template" , description : "The level of detail that you want to generate. You can specify whether to generate service-level policies.  Access Analyzer uses iam:servicelastaccessed to identify services that have been used recently to create this service-level template" , } , { name : "--no-include-service-level-template" , description : "The level of detail that you want to generate. You can specify whether to generate service-level policies.  Access Analyzer uses iam:servicelastaccessed to identify services that have been used recently to create this service-level template" , } , { name : "--job-id" , description : "The JobId that is returned by the StartPolicyGeneration operation. The JobId can be used with GetGeneratedPolicy to retrieve the generated policies or used with CancelPolicyGeneration to cancel the policy generation request" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "list-access-preview-findings" , description : "Retrieves a list of access preview findings generated by the specified access preview" , options : [ { name : "--access-preview-id" , description : "The unique ID for the access preview" , args : { name : "string" , } , } , { name : "--analyzer-arn" , description : "The ARN of the analyzer used to generate the access" , args : { name : "string" , } , } , { name : "--filter" , description : "Criteria to filter the returned findings" , args : { name : "map" , } , } , { name : "--max-results" , description : "The maximum number of results to return in the response" , args : { name : "integer" , } , } , { name : "--next-token" , description : "A token used for pagination of results returned" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--starting-token" , description : "A token to specify where to start paginating.  This is the\nNextToken from a previously truncated response.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "string" , } , } , { name : "--page-size" , description : "The size of each page to get in the AWS service call.  This\ndoes not affect the number of items returned in the command's\noutput.  Setting a smaller page size results in more calls to\nthe AWS service, retrieving fewer items in each call.  This can\nhelp prevent the AWS service calls from timing out.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--max-items" , description : "The total number of items to return in the command's output.\nIf the total number of items available is more than the value\nspecified, a NextToken is provided in the command's\noutput.  To resume pagination, provide the\nNextToken value in the starting-token\nargument of a subsequent command.  Do not use the\nNextToken response element directly outside of the\nAWS CLI.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "list-access-previews" , description : "Retrieves a list of access previews for the specified analyzer" , options : [ { name : "--analyzer-arn" , description : "The ARN of the analyzer used to generate the access preview" , args : { name : "string" , } , } , { name : "--max-results" , description : "The maximum number of results to return in the response" , args : { name : "integer" , } , } , { name : "--next-token" , description : "A token used for pagination of results returned" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--starting-token" , description : "A token to specify where to start paginating.  This is the\nNextToken from a previously truncated response.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "string" , } , } , { name : "--page-size" , description : "The size of each page to get in the AWS service call.  This\ndoes not affect the number of items returned in the command's\noutput.  Setting a smaller page size results in more calls to\nthe AWS service, retrieving fewer items in each call.  This can\nhelp prevent the AWS service calls from timing out.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--max-items" , description : "The total number of items to return in the command's output.\nIf the total number of items available is more than the value\nspecified, a NextToken is provided in the command's\noutput.  To resume pagination, provide the\nNextToken value in the starting-token\nargument of a subsequent command.  Do not use the\nNextToken response element directly outside of the\nAWS CLI.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "list-analyzed-resources" , description : "Retrieves a list of resources of the specified type that have been analyzed by the specified analyzer" , options : [ { name : "--analyzer-arn" , description : "The ARN of the analyzer to retrieve a list of analyzed resources from" , args : { name : "string" , } , } , { name : "--max-results" , description : "The maximum number of results to return in the response" , args : { name : "integer" , } , } , { name : "--next-token" , description : "A token used for pagination of results returned" , args : { name : "string" , } , } , { name : "--resource-type" , description : "The type of resource" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--starting-token" , description : "A token to specify where to start paginating.  This is the\nNextToken from a previously truncated response.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "string" , } , } , { name : "--page-size" , description : "The size of each page to get in the AWS service call.  This\ndoes not affect the number of items returned in the command's\noutput.  Setting a smaller page size results in more calls to\nthe AWS service, retrieving fewer items in each call.  This can\nhelp prevent the AWS service calls from timing out.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--max-items" , description : "The total number of items to return in the command's output.\nIf the total number of items available is more than the value\nspecified, a NextToken is provided in the command's\noutput.  To resume pagination, provide the\nNextToken value in the starting-token\nargument of a subsequent command.  Do not use the\nNextToken response element directly outside of the\nAWS CLI.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "list-analyzers" , description : "Retrieves a list of analyzers" , options : [ { name : "--max-results" , description : "The maximum number of results to return in the response" , args : { name : "integer" , } , } , { name : "--next-token" , description : "A token used for pagination of results returned" , args : { name : "string" , } , } , { name : "--type" , description : "The type of analyzer" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--starting-token" , description : "A token to specify where to start paginating.  This is the\nNextToken from a previously truncated response.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "string" , } , } , { name : "--page-size" , description : "The size of each page to get in the AWS service call.  This\ndoes not affect the number of items returned in the command's\noutput.  Setting a smaller page size results in more calls to\nthe AWS service, retrieving fewer items in each call.  This can\nhelp prevent the AWS service calls from timing out.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--max-items" , description : "The total number of items to return in the command's output.\nIf the total number of items available is more than the value\nspecified, a NextToken is provided in the command's\noutput.  To resume pagination, provide the\nNextToken value in the starting-token\nargument of a subsequent command.  Do not use the\nNextToken response element directly outside of the\nAWS CLI.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "list-archive-rules" , description : "Retrieves a list of archive rules created for the specified analyzer" , options : [ { name : "--analyzer-name" , description : "The name of the analyzer to retrieve rules from" , args : { name : "string" , } , } , { name : "--max-results" , description : "The maximum number of results to return in the request" , args : { name : "integer" , } , } , { name : "--next-token" , description : "A token used for pagination of results returned" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--starting-token" , description : "A token to specify where to start paginating.  This is the\nNextToken from a previously truncated response.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "string" , } , } , { name : "--page-size" , description : "The size of each page to get in the AWS service call.  This\ndoes not affect the number of items returned in the command's\noutput.  Setting a smaller page size results in more calls to\nthe AWS service, retrieving fewer items in each call.  This can\nhelp prevent the AWS service calls from timing out.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--max-items" , description : "The total number of items to return in the command's output.\nIf the total number of items available is more than the value\nspecified, a NextToken is provided in the command's\noutput.  To resume pagination, provide the\nNextToken value in the starting-token\nargument of a subsequent command.  Do not use the\nNextToken response element directly outside of the\nAWS CLI.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "list-findings" , description : "Retrieves a list of findings generated by the specified analyzer. To learn about filter keys that you can use to retrieve a list of findings, see Access Analyzer filter keys in the IAM User Guide" , options : [ { name : "--analyzer-arn" , description : "The ARN of the analyzer to retrieve findings from" , args : { name : "string" , } , } , { name : "--filter" , description : "A filter to match for the findings to return" , args : { name : "map" , } , } , { name : "--max-results" , description : "The maximum number of results to return in the response" , args : { name : "integer" , } , } , { name : "--next-token" , description : "A token used for pagination of results returned" , args : { name : "string" , } , } , { name : "--sort" , description : "The sort order for the findings returned" , args : { name : "structure" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--starting-token" , description : "A token to specify where to start paginating.  This is the\nNextToken from a previously truncated response.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "string" , } , } , { name : "--page-size" , description : "The size of each page to get in the AWS service call.  This\ndoes not affect the number of items returned in the command's\noutput.  Setting a smaller page size results in more calls to\nthe AWS service, retrieving fewer items in each call.  This can\nhelp prevent the AWS service calls from timing out.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--max-items" , description : "The total number of items to return in the command's output.\nIf the total number of items available is more than the value\nspecified, a NextToken is provided in the command's\noutput.  To resume pagination, provide the\nNextToken value in the starting-token\nargument of a subsequent command.  Do not use the\nNextToken response element directly outside of the\nAWS CLI.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "list-policy-generations" , description : "Lists all of the policy generations requested in the last seven days" , options : [ { name : "--max-results" , description : "The maximum number of results to return in the response" , args : { name : "integer" , } , } , { name : "--next-token" , description : "A token used for pagination of results returned" , args : { name : "string" , } , } , { name : "--principal-arn" , description : "The ARN of the IAM entity (user or role) for which you are generating a policy. Use this with ListGeneratedPolicies to filter the results to only include results for a specific principal" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--starting-token" , description : "A token to specify where to start paginating.  This is the\nNextToken from a previously truncated response.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "string" , } , } , { name : "--page-size" , description : "The size of each page to get in the AWS service call.  This\ndoes not affect the number of items returned in the command's\noutput.  Setting a smaller page size results in more calls to\nthe AWS service, retrieving fewer items in each call.  This can\nhelp prevent the AWS service calls from timing out.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--max-items" , description : "The total number of items to return in the command's output.\nIf the total number of items available is more than the value\nspecified, a NextToken is provided in the command's\noutput.  To resume pagination, provide the\nNextToken value in the starting-token\nargument of a subsequent command.  Do not use the\nNextToken response element directly outside of the\nAWS CLI.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "list-tags-for-resource" , description : "Retrieves a list of tags applied to the specified resource" , options : [ { name : "--resource-arn" , description : "The ARN of the resource to retrieve tags from" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "start-policy-generation" , description : "Starts the policy generation request" , options : [ { name : "--client-token" , description : "A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, the subsequent retries with the same client token return the result from the original successful request and they have no additional effect. If you do not specify a client token, one is automatically generated by the AWS SDK" , args : { name : "string" , } , } , { name : "--cloud-trail-details" , description : "A CloudTrailDetails object that contains details about a Trail that you want to analyze to generate policies" , args : { name : "structure" , } , } , { name : "--policy-generation-details" , description : "Contains the ARN of the IAM entity (user or role) for which you are generating a policy" , args : { name : "structure" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "start-resource-scan" , description : "Immediately starts a scan of the policies applied to the specified resource" , options : [ { name : "--analyzer-arn" , description : "The ARN of the analyzer to use to scan the policies applied to the specified resource" , args : { name : "string" , } , } , { name : "--resource-arn" , description : "The ARN of the resource to scan" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "tag-resource" , description : "Adds a tag to the specified resource" , options : [ { name : "--resource-arn" , description : "The ARN of the resource to add the tag to" , args : { name : "string" , } , } , { name : "--tags" , description : "The tags to add to the resource" , args : { name : "map" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "untag-resource" , description : "Removes a tag from the specified resource" , options : [ { name : "--resource-arn" , description : "The ARN of the resource to remove the tag from" , args : { name : "string" , } , } , { name : "--tag-keys" , description : "The key for the tag to add" , args : { name : "list" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "update-archive-rule" , description : "Updates the criteria and values for the specified archive rule" , options : [ { name : "--analyzer-name" , description : "The name of the analyzer to update the archive rules for" , args : { name : "string" , } , } , { name : "--client-token" , description : "A client token" , args : { name : "string" , } , } , { name : "--filter" , description : "A filter to match for the rules to update. Only rules that match the filter are updated" , args : { name : "map" , } , } , { name : "--rule-name" , description : "The name of the rule to update" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "update-findings" , description : "Updates the status for the specified findings" , options : [ { name : "--analyzer-arn" , description : "The ARN of the analyzer that generated the findings to update" , args : { name : "string" , } , } , { name : "--client-token" , description : "A client token" , args : { name : "string" , } , } , { name : "--ids" , description : "The IDs of the findings to update" , args : { name : "list" , } , } , { name : "--resource-arn" , description : "The ARN of the resource identified in the finding" , args : { name : "string" , } , } , { name : "--status" , description : "The state represents the action to take to update the finding Status. Use ARCHIVE to change an Active finding to an Archived finding. Use ACTIVE to change an Archived finding to an Active finding" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , { name : "validate-policy" , description : "Requests the validation of a policy and returns a list of findings. The findings help you identify issues and provide actionable recommendations to resolve the issue and enable you to author functional policies that meet security best practices" , options : [ { name : "--locale" , description : "The locale to use for localizing the findings" , args : { name : "string" , } , } , { name : "--max-results" , description : "The maximum number of results to return in the response" , args : { name : "integer" , } , } , { name : "--next-token" , description : "A token used for pagination of results returned" , args : { name : "string" , } , } , { name : "--policy-document" , description : "The JSON policy document to use as the content for the policy" , args : { name : "string" , } , } , { name : "--policy-type" , description : "The type of policy to validate. Identity policies grant permissions to IAM principals. Identity policies include managed and inline policies for IAM roles, users, and groups. They also include service-control policies (SCPs) that are attached to an AWS organization, organizational unit (OU), or an account. Resource policies grant permissions on AWS resources. Resource policies include trust policies for IAM roles and bucket policies for S3 buckets. You can provide a generic input such as identity policy or resource policy or a specific input such as managed policy or S3 bucket policy" , args : { name : "string" , } , } , { name : "--cli-input-json" , description : "Performs service operation based on the JSON string provided. The JSON string follows the format provided by ``--generate-cli-skeleton``. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally" , args : { name : "string" , } , } , { name : "--starting-token" , description : "A token to specify where to start paginating.  This is the\nNextToken from a previously truncated response.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "string" , } , } , { name : "--page-size" , description : "The size of each page to get in the AWS service call.  This\ndoes not affect the number of items returned in the command's\noutput.  Setting a smaller page size results in more calls to\nthe AWS service, retrieving fewer items in each call.  This can\nhelp prevent the AWS service calls from timing out.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--max-items" , description : "The total number of items to return in the command's output.\nIf the total number of items available is more than the value\nspecified, a NextToken is provided in the command's\noutput.  To resume pagination, provide the\nNextToken value in the starting-token\nargument of a subsequent command.  Do not use the\nNextToken response element directly outside of the\nAWS CLI.\nFor usage examples, see Pagination in the AWS Command Line Interface User\nGuide" , args : { name : "integer" , } , } , { name : "--generate-cli-skeleton" , description : "Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value ``input``, prints a sample input JSON that can be used as an argument for ``--cli-input-json``. If provided with the value ``output``, it validates the command inputs and returns a sample output JSON for that command" , args : { name : "string" , suggestions : [ "input" , "output" ] , } , } , ] , } , ] , } ; export default completionSpec ;