CheckAccessNotGranted

Source: src/AWS/AccessAnalyzer/CheckAccessNotGranted.ts

Runtime binding for access-analyzer:CheckAccessNotGranted.

Custom policy check: verifies a policy does not grant the specified actions or resource access. Provide the implementation with Effect.provide(AWS.AccessAnalyzer.CheckAccessNotGrantedHttp).

Custom Policy Checks

const checkAccessNotGranted =
  yield* AWS.AccessAnalyzer.CheckAccessNotGranted();
const result = yield* checkAccessNotGranted({
  policyDocument: JSON.stringify(policy),
  policyType: "IDENTITY_POLICY",
  access: [{ actions: ["s3:DeleteBucket"] }],
});
// result.result === "PASS" | "FAIL"