CheckNoPublicAccess

Source: src/AWS/AccessAnalyzer/CheckNoPublicAccess.ts

Runtime binding for access-analyzer:CheckNoPublicAccess.

Custom policy check: verifies a resource policy cannot grant public access for the given resource type. Provide the implementation with Effect.provide(AWS.AccessAnalyzer.CheckNoPublicAccessHttp).

Custom Policy Checks

const checkNoPublicAccess =
  yield* AWS.AccessAnalyzer.CheckNoPublicAccess();
const result = yield* checkNoPublicAccess({
  policyDocument: JSON.stringify(bucketPolicy),
  resourceType: "AWS::S3::Bucket",
});