# Access Analyzer API

> Access Analyzer API on Apizie: 28 endpoints (Retroactively applies the archive rule to existing findings that meet the archive rule criteria., Retrieves the policy that was generated using StartPolicyGeneration ., Cancels the requested policy generation., Creates an access preview that allows you to preview IAM Access Analyzer findings for your resource before…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-accessanalyzer`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://apizie.tech/api/cloud/amazonaws-accessanalyzer
- OpenAPI: https://apizie.tech/api/cloud/amazonaws-accessanalyzer/openapi.json

Identity and Access Management Access Analyzer helps identify potential resource-access risks by enabling you to identify any policies that grant access to an external principal. It does this by using logic-based…

## Endpoints

### Retroactively applies the archive rule to existing findings that meet the archive rule criteria.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/apply-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Retrieves the policy that was generated using StartPolicyGeneration .
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/get-generated-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| jobId | string | yes | The JobId that is returned by the StartPolicyGeneration operation. The JobId can be used with GetGeneratedPolicy to retrieve the generated… |
| includeResourcePlaceholders | boolean | no | The level of detail that you want to generate. You can specify whether to generate policies with placeholders for resource ARNs for… |
| includeServiceLevelTemplate | boolean | no | The level of detail that you want to generate. You can specify whether to generate service-level policies. IAM Access Analyzer uses… |

### Cancels the requested policy generation.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/cancel-policy-generation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| jobId | string | yes | The JobId that is returned by the StartPolicyGeneration operation. The JobId can be used with GetGeneratedPolicy to retrieve the generated… |

### Creates an access preview that allows you to preview IAM Access Analyzer findings for your resource before…
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/create-access-preview` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Retrieves a list of analyzers.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/list-analyzers` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| nextToken | string | no | A token used for pagination of results returned. |
| maxResults | integer | no | The maximum number of results to return in the response. |
| type | string | no | The type of analyzer. |

### Creates an analyzer for your account.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/create-analyzer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Retrieves a list of archive rules created for the specified analyzer.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/list-archive-rules` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerName | string | yes | The name of the analyzer to retrieve rules from. |
| nextToken | string | no | A token used for pagination of results returned. |
| maxResults | integer | no | The maximum number of results to return in the request. |

### Creates an archive rule for the specified analyzer. Archive rules automatically archive new findings that…
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/create-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerName | string | yes | The name of the created analyzer. |
| body | object | yes | JSON request body |

### Retrieves information about the specified analyzer.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/get-analyzer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerName | string | yes | The name of the analyzer retrieved. |

### Deletes the specified analyzer. When you delete an analyzer, IAM Access Analyzer is disabled for the account…
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/delete-analyzer` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerName | string | yes | The name of the analyzer to delete. |
| clientToken | string | no | A client token. |

### Retrieves information about an archive rule. To learn about filter keys that you can use to create an…
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/get-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerName | string | yes | The name of the analyzer to retrieve rules from. |
| ruleName | string | yes | The name of the rule to retrieve. |

### Updates the criteria and values for the specified archive rule.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/update-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerName | string | yes | The name of the analyzer to update the archive rules for. |
| ruleName | string | yes | The name of the rule to update. |
| body | object | yes | JSON request body |

### Deletes the specified archive rule.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/delete-archive-rule` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerName | string | yes | The name of the analyzer that associated with the archive rule to delete. |
| ruleName | string | yes | The name of the rule to delete. |
| clientToken | string | no | A client token. |

### Retrieves information about an access preview for the specified analyzer.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/get-access-preview` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| accessPreviewId | string | yes | The unique ID for the access preview. |
| analyzerArn | string | yes | The ARN of the analyzer used to generate the access preview. |

### Retrieves information about a resource that was analyzed.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/get-analyzed-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerArn | string | yes | The ARN of the analyzer to retrieve information from. |
| resourceArn | string | yes | The ARN of the resource to retrieve information about. |

### Retrieves information about the specified finding.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/get-finding` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerArn | string | yes | The ARN of the analyzer that generated the finding. |
| id | string | yes | The ID of the finding to retrieve. |

### Retrieves a list of access preview findings generated by the specified access preview.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/list-access-preview-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| accessPreviewId | string | yes | The unique ID for the access preview. |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Retrieves a list of access previews for the specified analyzer.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/list-access-previews` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| analyzerArn | string | yes | The ARN of the analyzer used to generate the access preview. |
| nextToken | string | no | A token used for pagination of results returned. |
| maxResults | integer | no | The maximum number of results to return in the response. |

### Retrieves a list of resources of the specified type that have been analyzed by the specified analyzer..
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/list-analyzed-resources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Retrieves a list of findings generated by the specified analyzer. To learn about filter keys that you can…
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/list-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Updates the status for the specified findings.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/update-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Lists all of the policy generations requested in the last seven days.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/list-policy-generations` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| principalArn | string | no | The ARN of the IAM entity (user or role) for which you are generating a policy. Use this with ListGeneratedPolicies to filter the results… |
| maxResults | integer | no | The maximum number of results to return in the response. |
| nextToken | string | no | A token used for pagination of results returned. |

### Starts the policy generation request.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/start-policy-generation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Retrieves a list of tags applied to the specified resource.
`GET https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The ARN of the resource to retrieve tags from. |

### Adds a tag to the specified resource.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The ARN of the resource to add the tag to. |
| body | object | yes | JSON request body |

### Immediately starts a scan of the policies applied to the specified resource.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/start-resource-scan` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Removes a tag from the specified resource.
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The ARN of the resource to remove the tag from. |
| tagKeys | array | yes | The key for the tag to add. |

### Requests the validation of a policy and returns a list of findings. The findings help you identify issues…
`POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/validate-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | integer | no | The maximum number of results to return in the response. |
| nextToken | string | no | A token used for pagination of results returned. |
| body | object | yes | JSON request body |

## Example
```
curl "https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/apply-archive-rule" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Access Analyzer API?
Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:amazonaws-accessanalyzer/apply-archive-rule with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Access Analyzer API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Access Analyzer itself also needs your own key from amazonaws.com.

### Can AI agents use the Access Analyzer API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-accessanalyzer.

### What is the status of the Access Analyzer API?
Needs your own provider key (bring your own key)