CheckNoNewAccess

Source: src/AWS/AccessAnalyzer/CheckNoNewAccess.ts

Runtime binding for access-analyzer:CheckNoNewAccess.

Custom policy check: verifies an updated policy grants no access beyond what the existing policy allows. Provide the implementation with Effect.provide(AWS.AccessAnalyzer.CheckNoNewAccessHttp).

Custom Policy Checks

const checkNoNewAccess = yield* AWS.AccessAnalyzer.CheckNoNewAccess();
const result = yield* checkNoNewAccess({
  existingPolicyDocument: JSON.stringify(existing),
  newPolicyDocument: JSON.stringify(proposed),
  policyType: "IDENTITY_POLICY",
});