| Copyright | (c) 2013-2018 Brendan Hay |
|---|---|
| License | Mozilla Public License, v. 2.0. |
| Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
| Stability | auto-generated |
| Portability | non-portable (GHC extensions) |
| Safe Haskell | None |
| Language | Haskell2010 |
Network.AWS.IAM
Contents
- Service Configuration
- Errors
- CredentialReportNotPresentException
- CredentialReportNotReadyException
- MalformedPolicyDocumentException
- EntityAlreadyExistsException
- MalformedCertificateException
- CredentialReportExpiredException
- UnmodifiableEntityException
- DuplicateCertificateException
- DeleteConflictException
- NoSuchEntityException
- InvalidCertificateException
- PolicyNotAttachableException
- ServiceNotSupportedException
- UnrecognizedPublicKeyEncodingException
- InvalidUserTypeException
- ServiceFailureException
- InvalidInputException
- InvalidPublicKeyException
- InvalidAuthenticationCodeException
- EntityTemporarilyUnmodifiableException
- DuplicateSSHPublicKeyException
- KeyPairMismatchException
- PolicyEvaluationException
- PasswordPolicyViolationException
- LimitExceededException
- Waiters
- Operations
- GetContextKeysForPrincipalPolicy
- ListPolicies (Paginated)
- CreatePolicy
- ListInstanceProfilesForRole (Paginated)
- AttachGroupPolicy
- CreateAccessKey
- ListSSHPublicKeys (Paginated)
- ListOpenIdConnectProviders
- CreateVirtualMFADevice
- DeleteAccountPasswordPolicy
- UpdateAccountPasswordPolicy
- AttachRolePolicy
- UpdateSSHPublicKey
- DeleteSSHPublicKey
- GetUserPolicy
- UpdateServiceSpecificCredential
- DeleteServiceSpecificCredential
- ListAttachedRolePolicies (Paginated)
- GetRole
- DeactivateMFADevice
- CreateOpenIdConnectProvider
- DeleteVirtualMFADevice
- ListRoles (Paginated)
- ListUserPolicies (Paginated)
- UploadSSHPublicKey
- SimulateCustomPolicy (Paginated)
- UpdateRole
- DeleteRole
- ListUsers (Paginated)
- UpdateOpenIdConnectProviderThumbprint
- PutUserPolicy
- GetSSHPublicKey
- DetachGroupPolicy
- GetOpenIdConnectProvider
- DeleteUserPolicy
- CreateRole
- ResetServiceSpecificCredential
- GetCredentialReport
- GetAccountSummary
- ListGroupPolicies (Paginated)
- DeletePolicyVersion
- DeleteInstanceProfile
- DetachRolePolicy
- RemoveRoleFromInstanceProfile
- CreatePolicyVersion
- CreateInstanceProfile
- CreateSAMLProvider
- GetAccountAuthorizationDetails (Paginated)
- GetServiceLinkedRoleDeletionStatus
- DeleteAccountAlias
- DetachUserPolicy
- RemoveUserFromGroup
- DeleteGroupPolicy
- PutGroupPolicy
- GetLoginProfile
- GetGroupPolicy
- ChangePassword
- ListServerCertificates (Paginated)
- DeleteServiceLinkedRole
- DeletePolicy
- UpdateAssumeRolePolicy
- GetInstanceProfile
- CreateLoginProfile
- GetSAMLProvider
- AddRoleToInstanceProfile
- ListGroupsForUser (Paginated)
- ListEntitiesForPolicy (Paginated)
- AddUserToGroup
- SimulatePrincipalPolicy (Paginated)
- GetPolicyVersion
- CreateServiceLinkedRole
- ListServiceSpecificCredentials
- DeleteOpenIdConnectProvider
- GetUser
- ListSigningCertificates (Paginated)
- DeleteSigningCertificate
- UpdateSigningCertificate
- ListAttachedUserPolicies (Paginated)
- RemoveClientIdFromOpenIdConnectProvider
- AttachUserPolicy
- CreateServiceSpecificCredential
- ListVirtualMFADevices (Paginated)
- ResyncMFADevice
- DeleteAccessKey
- UpdateAccessKey
- ListAccessKeys (Paginated)
- GetRolePolicy
- CreateUser
- PutRolePolicy
- GetContextKeysForCustomPolicy
- UploadSigningCertificate
- DeleteRolePolicy
- GetAccountPasswordPolicy
- GetAccessKeyLastUsed
- UpdateUser
- DeleteUser
- AddClientIdToOpenIdConnectProvider
- ListRolePolicies (Paginated)
- CreateAccountAlias
- ListInstanceProfiles (Paginated)
- EnableMFADevice
- ListAccountAliases (Paginated)
- DeleteSAMLProvider
- UpdateSAMLProvider
- CreateGroup
- ListMFADevices (Paginated)
- UploadServerCertificate
- SetDefaultPolicyVersion
- ListPolicyVersions (Paginated)
- UpdateRoleDescription
- ListSAMLProviders
- GetServerCertificate
- DeleteGroup
- UpdateGroup
- ListGroups (Paginated)
- GenerateCredentialReport
- GetPolicy
- UpdateLoginProfile
- DeleteLoginProfile
- GetGroup (Paginated)
- DeleteServerCertificate
- UpdateServerCertificate
- ListAttachedGroupPolicies (Paginated)
- Types
- AssignmentStatusType
- ContextKeyTypeEnum
- DeletionTaskStatusType
- EncodingType
- EntityType
- PolicyEvaluationDecisionType
- PolicyScopeType
- PolicySourceType
- ReportFormatType
- ReportStateType
- StatusType
- SummaryKeyType
- AccessKeyInfo
- AccessKeyLastUsed
- AccessKeyMetadata
- AttachedPolicy
- ContextEntry
- DeletionTaskFailureReasonType
- EvaluationResult
- GetContextKeysForPolicyResponse
- Group
- GroupDetail
- InstanceProfile
- LoginProfile
- MFADevice
- ManagedPolicyDetail
- OpenIdConnectProviderListEntry
- OrganizationsDecisionDetail
- PasswordPolicy
- Policy
- PolicyDetail
- PolicyGroup
- PolicyRole
- PolicyUser
- PolicyVersion
- Position
- ResourceSpecificResult
- Role
- RoleDetail
- RoleUsageType
- SAMLProviderListEntry
- SSHPublicKey
- SSHPublicKeyMetadata
- ServerCertificate
- ServerCertificateMetadata
- ServiceSpecificCredential
- ServiceSpecificCredentialMetadata
- SigningCertificate
- SimulatePolicyResponse
- Statement
- User
- UserDetail
- VirtualMFADevice
Description
AWS Identity and Access Management
AWS Identity and Access Management (IAM) is a web service that you can use to manage users and user permissions under your AWS account. This guide provides descriptions of IAM actions that you can call programmatically. For general information about IAM, see AWS Identity and Access Management (IAM) . For the user guide for IAM, see Using IAM .
We recommend that you use the AWS SDKs to make programmatic API calls to IAM. However, you can also use the IAM Query API to make direct calls to the IAM web service. To learn more about the IAM Query API, see Making Query Requests in the Using IAM guide. IAM supports GET and POST requests for all actions. That is, the API does not require you to use GET for some actions and POST for others. However, GET requests are subject to the limitation size of a URL. Therefore, for operations that require larger sizes, use a POST request.
Signing Requests
Requests must be signed using an access key ID and a secret access key. We strongly recommend that you do not use your AWS account access key ID and secret access key for everyday work with IAM. You can use the access key ID and secret access key for an IAM user or you can use the AWS Security Token Service to generate temporary security credentials and use those to sign requests.
To sign requests, we recommend that you use Signature Version 4 . If you have an existing application that uses Signature Version 2, you do not have to update it to use Signature Version 4. However, some operations now require Signature Version 4. The documentation for operations that require version 4 indicate this requirement.
Additional Resources
For more information, see the following:
- AWS Security Credentials . This topic provides general information about the types of credentials used for accessing AWS.
- IAM Best Practices . This topic presents a list of suggestions for using the IAM service to help secure your AWS resources.
- Signing AWS API Requests . This set of topics walk you through the process of signing a request using an access key ID and secret access key.
Synopsis
- iam :: Service
- _CredentialReportNotPresentException :: AsError a => Getting (First ServiceError) a ServiceError
- _CredentialReportNotReadyException :: AsError a => Getting (First ServiceError) a ServiceError
- _MalformedPolicyDocumentException :: AsError a => Getting (First ServiceError) a ServiceError
- _EntityAlreadyExistsException :: AsError a => Getting (First ServiceError) a ServiceError
- _MalformedCertificateException :: AsError a => Getting (First ServiceError) a ServiceError
- _CredentialReportExpiredException :: AsError a => Getting (First ServiceError) a ServiceError
- _UnmodifiableEntityException :: AsError a => Getting (First ServiceError) a ServiceError
- _DuplicateCertificateException :: AsError a => Getting (First ServiceError) a ServiceError
- _DeleteConflictException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchEntityException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidCertificateException :: AsError a => Getting (First ServiceError) a ServiceError
- _PolicyNotAttachableException :: AsError a => Getting (First ServiceError) a ServiceError
- _ServiceNotSupportedException :: AsError a => Getting (First ServiceError) a ServiceError
- _UnrecognizedPublicKeyEncodingException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidUserTypeException :: AsError a => Getting (First ServiceError) a ServiceError
- _ServiceFailureException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidInputException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidPublicKeyException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidAuthenticationCodeException :: AsError a => Getting (First ServiceError) a ServiceError
- _EntityTemporarilyUnmodifiableException :: AsError a => Getting (First ServiceError) a ServiceError
- _DuplicateSSHPublicKeyException :: AsError a => Getting (First ServiceError) a ServiceError
- _KeyPairMismatchException :: AsError a => Getting (First ServiceError) a ServiceError
- _PolicyEvaluationException :: AsError a => Getting (First ServiceError) a ServiceError
- _PasswordPolicyViolationException :: AsError a => Getting (First ServiceError) a ServiceError
- _LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- instanceProfileExists :: Wait GetInstanceProfile
- userExists :: Wait GetUser
- module Network.AWS.IAM.GetContextKeysForPrincipalPolicy
- module Network.AWS.IAM.ListPolicies
- module Network.AWS.IAM.CreatePolicy
- module Network.AWS.IAM.ListInstanceProfilesForRole
- module Network.AWS.IAM.AttachGroupPolicy
- module Network.AWS.IAM.CreateAccessKey
- module Network.AWS.IAM.ListSSHPublicKeys
- module Network.AWS.IAM.ListOpenIdConnectProviders
- module Network.AWS.IAM.CreateVirtualMFADevice
- module Network.AWS.IAM.DeleteAccountPasswordPolicy
- module Network.AWS.IAM.UpdateAccountPasswordPolicy
- module Network.AWS.IAM.AttachRolePolicy
- module Network.AWS.IAM.UpdateSSHPublicKey
- module Network.AWS.IAM.DeleteSSHPublicKey
- module Network.AWS.IAM.GetUserPolicy
- module Network.AWS.IAM.UpdateServiceSpecificCredential
- module Network.AWS.IAM.DeleteServiceSpecificCredential
- module Network.AWS.IAM.ListAttachedRolePolicies
- module Network.AWS.IAM.GetRole
- module Network.AWS.IAM.DeactivateMFADevice
- module Network.AWS.IAM.CreateOpenIdConnectProvider
- module Network.AWS.IAM.DeleteVirtualMFADevice
- module Network.AWS.IAM.ListRoles
- module Network.AWS.IAM.ListUserPolicies
- module Network.AWS.IAM.UploadSSHPublicKey
- module Network.AWS.IAM.SimulateCustomPolicy
- module Network.AWS.IAM.UpdateRole
- module Network.AWS.IAM.DeleteRole
- module Network.AWS.IAM.ListUsers
- module Network.AWS.IAM.UpdateOpenIdConnectProviderThumbprint
- module Network.AWS.IAM.PutUserPolicy
- module Network.AWS.IAM.GetSSHPublicKey
- module Network.AWS.IAM.DetachGroupPolicy
- module Network.AWS.IAM.GetOpenIdConnectProvider
- module Network.AWS.IAM.DeleteUserPolicy
- module Network.AWS.IAM.CreateRole
- module Network.AWS.IAM.ResetServiceSpecificCredential
- module Network.AWS.IAM.GetCredentialReport
- module Network.AWS.IAM.GetAccountSummary
- module Network.AWS.IAM.ListGroupPolicies
- module Network.AWS.IAM.DeletePolicyVersion
- module Network.AWS.IAM.DeleteInstanceProfile
- module Network.AWS.IAM.DetachRolePolicy
- module Network.AWS.IAM.RemoveRoleFromInstanceProfile
- module Network.AWS.IAM.CreatePolicyVersion
- module Network.AWS.IAM.CreateInstanceProfile
- module Network.AWS.IAM.CreateSAMLProvider
- module Network.AWS.IAM.GetAccountAuthorizationDetails
- module Network.AWS.IAM.GetServiceLinkedRoleDeletionStatus
- module Network.AWS.IAM.DeleteAccountAlias
- module Network.AWS.IAM.DetachUserPolicy
- module Network.AWS.IAM.RemoveUserFromGroup
- module Network.AWS.IAM.DeleteGroupPolicy
- module Network.AWS.IAM.PutGroupPolicy
- module Network.AWS.IAM.GetLoginProfile
- module Network.AWS.IAM.GetGroupPolicy
- module Network.AWS.IAM.ChangePassword
- module Network.AWS.IAM.ListServerCertificates
- module Network.AWS.IAM.DeleteServiceLinkedRole
- module Network.AWS.IAM.DeletePolicy
- module Network.AWS.IAM.UpdateAssumeRolePolicy
- module Network.AWS.IAM.GetInstanceProfile
- module Network.AWS.IAM.CreateLoginProfile
- module Network.AWS.IAM.GetSAMLProvider
- module Network.AWS.IAM.AddRoleToInstanceProfile
- module Network.AWS.IAM.ListGroupsForUser
- module Network.AWS.IAM.ListEntitiesForPolicy
- module Network.AWS.IAM.AddUserToGroup
- module Network.AWS.IAM.SimulatePrincipalPolicy
- module Network.AWS.IAM.GetPolicyVersion
- module Network.AWS.IAM.CreateServiceLinkedRole
- module Network.AWS.IAM.ListServiceSpecificCredentials
- module Network.AWS.IAM.DeleteOpenIdConnectProvider
- module Network.AWS.IAM.GetUser
- module Network.AWS.IAM.ListSigningCertificates
- module Network.AWS.IAM.DeleteSigningCertificate
- module Network.AWS.IAM.UpdateSigningCertificate
- module Network.AWS.IAM.ListAttachedUserPolicies
- module Network.AWS.IAM.RemoveClientIdFromOpenIdConnectProvider
- module Network.AWS.IAM.AttachUserPolicy
- module Network.AWS.IAM.CreateServiceSpecificCredential
- module Network.AWS.IAM.ListVirtualMFADevices
- module Network.AWS.IAM.ResyncMFADevice
- module Network.AWS.IAM.DeleteAccessKey
- module Network.AWS.IAM.UpdateAccessKey
- module Network.AWS.IAM.ListAccessKeys
- module Network.AWS.IAM.GetRolePolicy
- module Network.AWS.IAM.CreateUser
- module Network.AWS.IAM.PutRolePolicy
- module Network.AWS.IAM.GetContextKeysForCustomPolicy
- module Network.AWS.IAM.UploadSigningCertificate
- module Network.AWS.IAM.DeleteRolePolicy
- module Network.AWS.IAM.GetAccountPasswordPolicy
- module Network.AWS.IAM.GetAccessKeyLastUsed
- module Network.AWS.IAM.UpdateUser
- module Network.AWS.IAM.DeleteUser
- module Network.AWS.IAM.AddClientIdToOpenIdConnectProvider
- module Network.AWS.IAM.ListRolePolicies
- module Network.AWS.IAM.CreateAccountAlias
- module Network.AWS.IAM.ListInstanceProfiles
- module Network.AWS.IAM.EnableMFADevice
- module Network.AWS.IAM.ListAccountAliases
- module Network.AWS.IAM.DeleteSAMLProvider
- module Network.AWS.IAM.UpdateSAMLProvider
- module Network.AWS.IAM.CreateGroup
- module Network.AWS.IAM.ListMFADevices
- module Network.AWS.IAM.UploadServerCertificate
- module Network.AWS.IAM.SetDefaultPolicyVersion
- module Network.AWS.IAM.ListPolicyVersions
- module Network.AWS.IAM.UpdateRoleDescription
- module Network.AWS.IAM.ListSAMLProviders
- module Network.AWS.IAM.GetServerCertificate
- module Network.AWS.IAM.DeleteGroup
- module Network.AWS.IAM.UpdateGroup
- module Network.AWS.IAM.ListGroups
- module Network.AWS.IAM.GenerateCredentialReport
- module Network.AWS.IAM.GetPolicy
- module Network.AWS.IAM.UpdateLoginProfile
- module Network.AWS.IAM.DeleteLoginProfile
- module Network.AWS.IAM.GetGroup
- module Network.AWS.IAM.DeleteServerCertificate
- module Network.AWS.IAM.UpdateServerCertificate
- module Network.AWS.IAM.ListAttachedGroupPolicies
- data AssignmentStatusType
- = Any
- | Assigned
- | Unassigned
- data ContextKeyTypeEnum
- = Binary
- | BinaryList
- | Boolean
- | BooleanList
- | Date
- | DateList
- | IP
- | IPList
- | Numeric
- | NumericList
- | String
- | StringList
- data DeletionTaskStatusType
- data EncodingType
- data EntityType
- data PolicyEvaluationDecisionType
- data PolicyScopeType
- data PolicySourceType
- = AWSManaged
- | Group
- | None
- | Resource
- | Role
- | User
- | UserManaged
- data ReportFormatType = TextCSV
- data ReportStateType
- data StatusType
- data SummaryKeyType
- = AccessKeysPerUserQuota
- | AccountAccessKeysPresent
- | AccountMFAEnabled
- | AccountSigningCertificatesPresent
- | AttachedPoliciesPerGroupQuota
- | AttachedPoliciesPerRoleQuota
- | AttachedPoliciesPerUserQuota
- | GroupPolicySizeQuota
- | Groups
- | GroupsPerUserQuota
- | GroupsQuota
- | MFADevices
- | MFADevicesInUse
- | Policies
- | PoliciesQuota
- | PolicySizeQuota
- | PolicyVersionsInUse
- | PolicyVersionsInUseQuota
- | ServerCertificates
- | ServerCertificatesQuota
- | SigningCertificatesPerUserQuota
- | UserPolicySizeQuota
- | Users
- | UsersQuota
- | VersionsPerPolicyQuota
- data AccessKeyInfo
- accessKeyInfo :: Text -> AccessKey -> StatusType -> Text -> AccessKeyInfo
- akiCreateDate :: Lens' AccessKeyInfo (Maybe UTCTime)
- akiUserName :: Lens' AccessKeyInfo Text
- akiAccessKeyId :: Lens' AccessKeyInfo AccessKey
- akiStatus :: Lens' AccessKeyInfo StatusType
- akiSecretAccessKey :: Lens' AccessKeyInfo Text
- data AccessKeyLastUsed
- accessKeyLastUsed :: UTCTime -> Text -> Text -> AccessKeyLastUsed
- akluLastUsedDate :: Lens' AccessKeyLastUsed UTCTime
- akluServiceName :: Lens' AccessKeyLastUsed Text
- akluRegion :: Lens' AccessKeyLastUsed Text
- data AccessKeyMetadata
- accessKeyMetadata :: AccessKeyMetadata
- akmStatus :: Lens' AccessKeyMetadata (Maybe StatusType)
- akmCreateDate :: Lens' AccessKeyMetadata (Maybe UTCTime)
- akmUserName :: Lens' AccessKeyMetadata (Maybe Text)
- akmAccessKeyId :: Lens' AccessKeyMetadata (Maybe AccessKey)
- data AttachedPolicy
- attachedPolicy :: AttachedPolicy
- apPolicyName :: Lens' AttachedPolicy (Maybe Text)
- apPolicyARN :: Lens' AttachedPolicy (Maybe Text)
- data ContextEntry
- contextEntry :: ContextEntry
- ceContextKeyValues :: Lens' ContextEntry [Text]
- ceContextKeyName :: Lens' ContextEntry (Maybe Text)
- ceContextKeyType :: Lens' ContextEntry (Maybe ContextKeyTypeEnum)
- data DeletionTaskFailureReasonType
- deletionTaskFailureReasonType :: DeletionTaskFailureReasonType
- dtfrtRoleUsageList :: Lens' DeletionTaskFailureReasonType [RoleUsageType]
- dtfrtReason :: Lens' DeletionTaskFailureReasonType (Maybe Text)
- data EvaluationResult
- evaluationResult :: Text -> PolicyEvaluationDecisionType -> EvaluationResult
- erMatchedStatements :: Lens' EvaluationResult [Statement]
- erEvalDecisionDetails :: Lens' EvaluationResult (HashMap Text PolicyEvaluationDecisionType)
- erResourceSpecificResults :: Lens' EvaluationResult [ResourceSpecificResult]
- erEvalResourceName :: Lens' EvaluationResult (Maybe Text)
- erMissingContextValues :: Lens' EvaluationResult [Text]
- erOrganizationsDecisionDetail :: Lens' EvaluationResult (Maybe OrganizationsDecisionDetail)
- erEvalActionName :: Lens' EvaluationResult Text
- erEvalDecision :: Lens' EvaluationResult PolicyEvaluationDecisionType
- data GetContextKeysForPolicyResponse
- getContextKeysForPolicyResponse :: GetContextKeysForPolicyResponse
- gckfpContextKeyNames :: Lens' GetContextKeysForPolicyResponse [Text]
- data Group
- group' :: Text -> Text -> Text -> Text -> UTCTime -> Group
- gPath :: Lens' Group Text
- gGroupName :: Lens' Group Text
- gGroupId :: Lens' Group Text
- gARN :: Lens' Group Text
- gCreateDate :: Lens' Group UTCTime
- data GroupDetail
- groupDetail :: GroupDetail
- gdARN :: Lens' GroupDetail (Maybe Text)
- gdPath :: Lens' GroupDetail (Maybe Text)
- gdCreateDate :: Lens' GroupDetail (Maybe UTCTime)
- gdGroupId :: Lens' GroupDetail (Maybe Text)
- gdGroupPolicyList :: Lens' GroupDetail [PolicyDetail]
- gdGroupName :: Lens' GroupDetail (Maybe Text)
- gdAttachedManagedPolicies :: Lens' GroupDetail [AttachedPolicy]
- data InstanceProfile
- instanceProfile :: Text -> Text -> Text -> Text -> UTCTime -> InstanceProfile
- ipPath :: Lens' InstanceProfile Text
- ipInstanceProfileName :: Lens' InstanceProfile Text
- ipInstanceProfileId :: Lens' InstanceProfile Text
- ipARN :: Lens' InstanceProfile Text
- ipCreateDate :: Lens' InstanceProfile UTCTime
- ipRoles :: Lens' InstanceProfile [Role]
- data LoginProfile
- loginProfile :: Text -> UTCTime -> LoginProfile
- lpPasswordResetRequired :: Lens' LoginProfile (Maybe Bool)
- lpUserName :: Lens' LoginProfile Text
- lpCreateDate :: Lens' LoginProfile UTCTime
- data MFADevice
- mfaDevice :: Text -> Text -> UTCTime -> MFADevice
- mdUserName :: Lens' MFADevice Text
- mdSerialNumber :: Lens' MFADevice Text
- mdEnableDate :: Lens' MFADevice UTCTime
- data ManagedPolicyDetail
- managedPolicyDetail :: ManagedPolicyDetail
- mpdPolicyName :: Lens' ManagedPolicyDetail (Maybe Text)
- mpdARN :: Lens' ManagedPolicyDetail (Maybe Text)
- mpdUpdateDate :: Lens' ManagedPolicyDetail (Maybe UTCTime)
- mpdPolicyId :: Lens' ManagedPolicyDetail (Maybe Text)
- mpdPath :: Lens' ManagedPolicyDetail (Maybe Text)
- mpdPolicyVersionList :: Lens' ManagedPolicyDetail [PolicyVersion]
- mpdCreateDate :: Lens' ManagedPolicyDetail (Maybe UTCTime)
- mpdIsAttachable :: Lens' ManagedPolicyDetail (Maybe Bool)
- mpdDefaultVersionId :: Lens' ManagedPolicyDetail (Maybe Text)
- mpdAttachmentCount :: Lens' ManagedPolicyDetail (Maybe Int)
- mpdDescription :: Lens' ManagedPolicyDetail (Maybe Text)
- data OpenIdConnectProviderListEntry
- openIdConnectProviderListEntry :: OpenIdConnectProviderListEntry
- oicpleARN :: Lens' OpenIdConnectProviderListEntry (Maybe Text)
- data OrganizationsDecisionDetail
- organizationsDecisionDetail :: OrganizationsDecisionDetail
- oddAllowedByOrganizations :: Lens' OrganizationsDecisionDetail (Maybe Bool)
- data PasswordPolicy
- passwordPolicy :: PasswordPolicy
- ppExpirePasswords :: Lens' PasswordPolicy (Maybe Bool)
- ppMinimumPasswordLength :: Lens' PasswordPolicy (Maybe Natural)
- ppRequireNumbers :: Lens' PasswordPolicy (Maybe Bool)
- ppPasswordReusePrevention :: Lens' PasswordPolicy (Maybe Natural)
- ppRequireLowercaseCharacters :: Lens' PasswordPolicy (Maybe Bool)
- ppMaxPasswordAge :: Lens' PasswordPolicy (Maybe Natural)
- ppHardExpiry :: Lens' PasswordPolicy (Maybe Bool)
- ppRequireSymbols :: Lens' PasswordPolicy (Maybe Bool)
- ppRequireUppercaseCharacters :: Lens' PasswordPolicy (Maybe Bool)
- ppAllowUsersToChangePassword :: Lens' PasswordPolicy (Maybe Bool)
- data Policy
- policy :: Policy
- pPolicyName :: Lens' Policy (Maybe Text)
- pARN :: Lens' Policy (Maybe Text)
- pUpdateDate :: Lens' Policy (Maybe UTCTime)
- pPolicyId :: Lens' Policy (Maybe Text)
- pPath :: Lens' Policy (Maybe Text)
- pCreateDate :: Lens' Policy (Maybe UTCTime)
- pIsAttachable :: Lens' Policy (Maybe Bool)
- pDefaultVersionId :: Lens' Policy (Maybe Text)
- pAttachmentCount :: Lens' Policy (Maybe Int)
- pDescription :: Lens' Policy (Maybe Text)
- data PolicyDetail
- policyDetail :: PolicyDetail
- pdPolicyDocument :: Lens' PolicyDetail (Maybe Text)
- pdPolicyName :: Lens' PolicyDetail (Maybe Text)
- data PolicyGroup
- policyGroup :: PolicyGroup
- pgGroupId :: Lens' PolicyGroup (Maybe Text)
- pgGroupName :: Lens' PolicyGroup (Maybe Text)
- data PolicyRole
- policyRole :: PolicyRole
- prRoleName :: Lens' PolicyRole (Maybe Text)
- prRoleId :: Lens' PolicyRole (Maybe Text)
- data PolicyUser
- policyUser :: PolicyUser
- puUserName :: Lens' PolicyUser (Maybe Text)
- puUserId :: Lens' PolicyUser (Maybe Text)
- data PolicyVersion
- policyVersion :: PolicyVersion
- pvVersionId :: Lens' PolicyVersion (Maybe Text)
- pvCreateDate :: Lens' PolicyVersion (Maybe UTCTime)
- pvDocument :: Lens' PolicyVersion (Maybe Text)
- pvIsDefaultVersion :: Lens' PolicyVersion (Maybe Bool)
- data Position
- position :: Position
- pLine :: Lens' Position (Maybe Int)
- pColumn :: Lens' Position (Maybe Int)
- data ResourceSpecificResult
- resourceSpecificResult :: Text -> PolicyEvaluationDecisionType -> ResourceSpecificResult
- rsrMatchedStatements :: Lens' ResourceSpecificResult [Statement]
- rsrEvalDecisionDetails :: Lens' ResourceSpecificResult (HashMap Text PolicyEvaluationDecisionType)
- rsrMissingContextValues :: Lens' ResourceSpecificResult [Text]
- rsrEvalResourceName :: Lens' ResourceSpecificResult Text
- rsrEvalResourceDecision :: Lens' ResourceSpecificResult PolicyEvaluationDecisionType
- data Role
- role' :: Text -> Text -> Text -> Text -> UTCTime -> Role
- rMaxSessionDuration :: Lens' Role (Maybe Natural)
- rAssumeRolePolicyDocument :: Lens' Role (Maybe Text)
- rDescription :: Lens' Role (Maybe Text)
- rPath :: Lens' Role Text
- rRoleName :: Lens' Role Text
- rRoleId :: Lens' Role Text
- rARN :: Lens' Role Text
- rCreateDate :: Lens' Role UTCTime
- data RoleDetail
- roleDetail :: RoleDetail
- rdAssumeRolePolicyDocument :: Lens' RoleDetail (Maybe Text)
- rdARN :: Lens' RoleDetail (Maybe Text)
- rdPath :: Lens' RoleDetail (Maybe Text)
- rdInstanceProfileList :: Lens' RoleDetail [InstanceProfile]
- rdCreateDate :: Lens' RoleDetail (Maybe UTCTime)
- rdRoleName :: Lens' RoleDetail (Maybe Text)
- rdRoleId :: Lens' RoleDetail (Maybe Text)
- rdRolePolicyList :: Lens' RoleDetail [PolicyDetail]
- rdAttachedManagedPolicies :: Lens' RoleDetail [AttachedPolicy]
- data RoleUsageType
- roleUsageType :: RoleUsageType
- rutResources :: Lens' RoleUsageType [Text]
- rutRegion :: Lens' RoleUsageType (Maybe Text)
- data SAMLProviderListEntry
- sAMLProviderListEntry :: SAMLProviderListEntry
- samlpleARN :: Lens' SAMLProviderListEntry (Maybe Text)
- samlpleCreateDate :: Lens' SAMLProviderListEntry (Maybe UTCTime)
- samlpleValidUntil :: Lens' SAMLProviderListEntry (Maybe UTCTime)
- data SSHPublicKey
- sshPublicKey :: Text -> Text -> Text -> Text -> StatusType -> SSHPublicKey
- spkUploadDate :: Lens' SSHPublicKey (Maybe UTCTime)
- spkUserName :: Lens' SSHPublicKey Text
- spkSSHPublicKeyId :: Lens' SSHPublicKey Text
- spkFingerprint :: Lens' SSHPublicKey Text
- spkSSHPublicKeyBody :: Lens' SSHPublicKey Text
- spkStatus :: Lens' SSHPublicKey StatusType
- data SSHPublicKeyMetadata
- sshPublicKeyMetadata :: Text -> Text -> StatusType -> UTCTime -> SSHPublicKeyMetadata
- spkmUserName :: Lens' SSHPublicKeyMetadata Text
- spkmSSHPublicKeyId :: Lens' SSHPublicKeyMetadata Text
- spkmStatus :: Lens' SSHPublicKeyMetadata StatusType
- spkmUploadDate :: Lens' SSHPublicKeyMetadata UTCTime
- data ServerCertificate
- serverCertificate :: ServerCertificateMetadata -> Text -> ServerCertificate
- sCertificateChain :: Lens' ServerCertificate (Maybe Text)
- sServerCertificateMetadata :: Lens' ServerCertificate ServerCertificateMetadata
- sCertificateBody :: Lens' ServerCertificate Text
- data ServerCertificateMetadata
- serverCertificateMetadata :: Text -> Text -> Text -> Text -> ServerCertificateMetadata
- scmUploadDate :: Lens' ServerCertificateMetadata (Maybe UTCTime)
- scmExpiration :: Lens' ServerCertificateMetadata (Maybe UTCTime)
- scmPath :: Lens' ServerCertificateMetadata Text
- scmServerCertificateName :: Lens' ServerCertificateMetadata Text
- scmServerCertificateId :: Lens' ServerCertificateMetadata Text
- scmARN :: Lens' ServerCertificateMetadata Text
- data ServiceSpecificCredential
- serviceSpecificCredential :: UTCTime -> Text -> Text -> Text -> Text -> Text -> StatusType -> ServiceSpecificCredential
- sscCreateDate :: Lens' ServiceSpecificCredential UTCTime
- sscServiceName :: Lens' ServiceSpecificCredential Text
- sscServiceUserName :: Lens' ServiceSpecificCredential Text
- sscServicePassword :: Lens' ServiceSpecificCredential Text
- sscServiceSpecificCredentialId :: Lens' ServiceSpecificCredential Text
- sscUserName :: Lens' ServiceSpecificCredential Text
- sscStatus :: Lens' ServiceSpecificCredential StatusType
- data ServiceSpecificCredentialMetadata
- serviceSpecificCredentialMetadata :: Text -> StatusType -> Text -> UTCTime -> Text -> Text -> ServiceSpecificCredentialMetadata
- sscmUserName :: Lens' ServiceSpecificCredentialMetadata Text
- sscmStatus :: Lens' ServiceSpecificCredentialMetadata StatusType
- sscmServiceUserName :: Lens' ServiceSpecificCredentialMetadata Text
- sscmCreateDate :: Lens' ServiceSpecificCredentialMetadata UTCTime
- sscmServiceSpecificCredentialId :: Lens' ServiceSpecificCredentialMetadata Text
- sscmServiceName :: Lens' ServiceSpecificCredentialMetadata Text
- data SigningCertificate
- signingCertificate :: Text -> Text -> Text -> StatusType -> SigningCertificate
- scUploadDate :: Lens' SigningCertificate (Maybe UTCTime)
- scUserName :: Lens' SigningCertificate Text
- scCertificateId :: Lens' SigningCertificate Text
- scCertificateBody :: Lens' SigningCertificate Text
- scStatus :: Lens' SigningCertificate StatusType
- data SimulatePolicyResponse
- simulatePolicyResponse :: SimulatePolicyResponse
- spEvaluationResults :: Lens' SimulatePolicyResponse [EvaluationResult]
- spMarker :: Lens' SimulatePolicyResponse (Maybe Text)
- spIsTruncated :: Lens' SimulatePolicyResponse (Maybe Bool)
- data Statement
- statement :: Statement
- sSourcePolicyType :: Lens' Statement (Maybe PolicySourceType)
- sSourcePolicyId :: Lens' Statement (Maybe Text)
- sEndPosition :: Lens' Statement (Maybe Position)
- sStartPosition :: Lens' Statement (Maybe Position)
- data User
- user :: Text -> Text -> Text -> Text -> UTCTime -> User
- uPasswordLastUsed :: Lens' User (Maybe UTCTime)
- uPath :: Lens' User Text
- uUserName :: Lens' User Text
- uUserId :: Lens' User Text
- uARN :: Lens' User Text
- uCreateDate :: Lens' User UTCTime
- data UserDetail
- userDetail :: UserDetail
- udGroupList :: Lens' UserDetail [Text]
- udARN :: Lens' UserDetail (Maybe Text)
- udPath :: Lens' UserDetail (Maybe Text)
- udCreateDate :: Lens' UserDetail (Maybe UTCTime)
- udUserName :: Lens' UserDetail (Maybe Text)
- udUserId :: Lens' UserDetail (Maybe Text)
- udUserPolicyList :: Lens' UserDetail [PolicyDetail]
- udAttachedManagedPolicies :: Lens' UserDetail [AttachedPolicy]
- data VirtualMFADevice
- virtualMFADevice :: Text -> VirtualMFADevice
- vmdQRCodePNG :: Lens' VirtualMFADevice (Maybe ByteString)
- vmdBase32StringSeed :: Lens' VirtualMFADevice (Maybe ByteString)
- vmdUser :: Lens' VirtualMFADevice (Maybe User)
- vmdEnableDate :: Lens' VirtualMFADevice (Maybe UTCTime)
- vmdSerialNumber :: Lens' VirtualMFADevice Text
Service Configuration
API version 2010-05-08 of the Amazon Identity and Access Management SDK configuration.
Errors
Error matchers are designed for use with the functions provided by
Control.Exception.Lens.
This allows catching (and rethrowing) service specific errors returned
by IAM.
CredentialReportNotPresentException
_CredentialReportNotPresentException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the credential report does not exist. To generate a credential report, use GenerateCredentialReport .
CredentialReportNotReadyException
_CredentialReportNotReadyException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the credential report is still being generated.
MalformedPolicyDocumentException
_MalformedPolicyDocumentException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the policy document was malformed. The error message describes the specific error.
EntityAlreadyExistsException
_EntityAlreadyExistsException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because it attempted to create a resource that already exists.
MalformedCertificateException
_MalformedCertificateException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the certificate was malformed or expired. The error message describes the specific error.
CredentialReportExpiredException
_CredentialReportExpiredException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the most recent credential report has expired. To generate a new credential report, use GenerateCredentialReport . For more information about credential report expiration, see Getting Credential Reports in the IAM User Guide .
UnmodifiableEntityException
_UnmodifiableEntityException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
DuplicateCertificateException
_DuplicateCertificateException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the same certificate is associated with an IAM user in the account.
DeleteConflictException
_DeleteConflictException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
NoSuchEntityException
_NoSuchEntityException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because it referenced an entity that does not exist. The error message describes the entity.
InvalidCertificateException
_InvalidCertificateException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the certificate is invalid.
PolicyNotAttachableException
_PolicyNotAttachableException :: AsError a => Getting (First ServiceError) a ServiceError #
The request failed because AWS service role policies can only be attached to the service-linked role for that service.
ServiceNotSupportedException
_ServiceNotSupportedException :: AsError a => Getting (First ServiceError) a ServiceError #
The specified service does not support service-specific credentials.
UnrecognizedPublicKeyEncodingException
_UnrecognizedPublicKeyEncodingException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the public key encoding format is unsupported or unrecognized.
InvalidUserTypeException
_InvalidUserTypeException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the type of user for the transaction was incorrect.
ServiceFailureException
_ServiceFailureException :: AsError a => Getting (First ServiceError) a ServiceError #
The request processing has failed because of an unknown error, exception or failure.
InvalidInputException
_InvalidInputException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
InvalidPublicKeyException
_InvalidPublicKeyException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the public key is malformed or otherwise invalid.
InvalidAuthenticationCodeException
_InvalidAuthenticationCodeException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the authentication code was not recognized. The error message describes the specific error.
EntityTemporarilyUnmodifiableException
_EntityTemporarilyUnmodifiableException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
DuplicateSSHPublicKeyException
_DuplicateSSHPublicKeyException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the SSH public key is already associated with the specified IAM user.
KeyPairMismatchException
_KeyPairMismatchException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the public key certificate and the private key do not match.
PolicyEvaluationException
_PolicyEvaluationException :: AsError a => Getting (First ServiceError) a ServiceError #
The request failed because a provided policy could not be successfully evaluated. An additional detailed message indicates the source of the failure.
PasswordPolicyViolationException
_PasswordPolicyViolationException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because the provided password did not meet the requirements imposed by the account password policy.
LimitExceededException
_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError #
The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
Waiters
Waiters poll by repeatedly sending a request until some remote success condition
configured by the Wait specification is fulfilled. The Wait specification
determines how many attempts should be made, in addition to delay and retry strategies.
InstanceProfileExists
instanceProfileExists :: Wait GetInstanceProfile #
Polls GetInstanceProfile every 1 seconds until a successful state is reached. An error is returned after 40 failed checks.
UserExists
userExists :: Wait GetUser #
Polls GetUser every 1 seconds until a successful state is reached. An error is returned after 20 failed checks.
Operations
Some AWS operations return results that are incomplete and require subsequent
requests in order to obtain the entire result set. The process of sending
subsequent requests to continue where a previous request left off is called
pagination. For example, the ListObjects operation of Amazon S3 returns up to
1000 objects at a time, and you must send subsequent requests with the
appropriate Marker in order to retrieve the next page of results.
Operations that have an AWSPager instance can transparently perform subsequent
requests, correctly setting Markers and other request facets to iterate through
the entire result set of a truncated API operation. Operations which support
this have an additional note in the documentation.
Many operations have the ability to filter results on the server side. See the individual operation parameters for details.
GetContextKeysForPrincipalPolicy
ListPolicies (Paginated)
module Network.AWS.IAM.ListPolicies
CreatePolicy
module Network.AWS.IAM.CreatePolicy
ListInstanceProfilesForRole (Paginated)
AttachGroupPolicy
CreateAccessKey
ListSSHPublicKeys (Paginated)
ListOpenIdConnectProviders
CreateVirtualMFADevice
DeleteAccountPasswordPolicy
UpdateAccountPasswordPolicy
AttachRolePolicy
UpdateSSHPublicKey
DeleteSSHPublicKey
GetUserPolicy
UpdateServiceSpecificCredential
DeleteServiceSpecificCredential
ListAttachedRolePolicies (Paginated)
GetRole
module Network.AWS.IAM.GetRole
DeactivateMFADevice
CreateOpenIdConnectProvider
DeleteVirtualMFADevice
ListRoles (Paginated)
module Network.AWS.IAM.ListRoles
ListUserPolicies (Paginated)
UploadSSHPublicKey
SimulateCustomPolicy (Paginated)
UpdateRole
module Network.AWS.IAM.UpdateRole
DeleteRole
module Network.AWS.IAM.DeleteRole
ListUsers (Paginated)
module Network.AWS.IAM.ListUsers
UpdateOpenIdConnectProviderThumbprint
PutUserPolicy
GetSSHPublicKey
DetachGroupPolicy
GetOpenIdConnectProvider
DeleteUserPolicy
CreateRole
module Network.AWS.IAM.CreateRole
ResetServiceSpecificCredential
GetCredentialReport
GetAccountSummary
ListGroupPolicies (Paginated)
DeletePolicyVersion
DeleteInstanceProfile
DetachRolePolicy
RemoveRoleFromInstanceProfile
CreatePolicyVersion
CreateInstanceProfile
CreateSAMLProvider
GetAccountAuthorizationDetails (Paginated)
GetServiceLinkedRoleDeletionStatus
DeleteAccountAlias
DetachUserPolicy
RemoveUserFromGroup
DeleteGroupPolicy
PutGroupPolicy
GetLoginProfile
GetGroupPolicy
ChangePassword
ListServerCertificates (Paginated)
DeleteServiceLinkedRole
DeletePolicy
module Network.AWS.IAM.DeletePolicy
UpdateAssumeRolePolicy
GetInstanceProfile
CreateLoginProfile
GetSAMLProvider
AddRoleToInstanceProfile
ListGroupsForUser (Paginated)
ListEntitiesForPolicy (Paginated)
AddUserToGroup
SimulatePrincipalPolicy (Paginated)
GetPolicyVersion
CreateServiceLinkedRole
ListServiceSpecificCredentials
DeleteOpenIdConnectProvider
GetUser
module Network.AWS.IAM.GetUser
ListSigningCertificates (Paginated)
DeleteSigningCertificate
UpdateSigningCertificate
ListAttachedUserPolicies (Paginated)
RemoveClientIdFromOpenIdConnectProvider
AttachUserPolicy
CreateServiceSpecificCredential
ListVirtualMFADevices (Paginated)
ResyncMFADevice
DeleteAccessKey
UpdateAccessKey
ListAccessKeys (Paginated)
GetRolePolicy
CreateUser
module Network.AWS.IAM.CreateUser
PutRolePolicy
GetContextKeysForCustomPolicy
UploadSigningCertificate
DeleteRolePolicy
GetAccountPasswordPolicy
GetAccessKeyLastUsed
UpdateUser
module Network.AWS.IAM.UpdateUser
DeleteUser
module Network.AWS.IAM.DeleteUser
AddClientIdToOpenIdConnectProvider
ListRolePolicies (Paginated)
CreateAccountAlias
ListInstanceProfiles (Paginated)
EnableMFADevice
ListAccountAliases (Paginated)
DeleteSAMLProvider
UpdateSAMLProvider
CreateGroup
module Network.AWS.IAM.CreateGroup
ListMFADevices (Paginated)
UploadServerCertificate
SetDefaultPolicyVersion
ListPolicyVersions (Paginated)
UpdateRoleDescription
ListSAMLProviders
GetServerCertificate
DeleteGroup
module Network.AWS.IAM.DeleteGroup
UpdateGroup
module Network.AWS.IAM.UpdateGroup
ListGroups (Paginated)
module Network.AWS.IAM.ListGroups
GenerateCredentialReport
GetPolicy
module Network.AWS.IAM.GetPolicy
UpdateLoginProfile
DeleteLoginProfile
GetGroup (Paginated)
module Network.AWS.IAM.GetGroup
DeleteServerCertificate
UpdateServerCertificate
ListAttachedGroupPolicies (Paginated)
Types
AssignmentStatusType
data AssignmentStatusType #
Constructors
| Any | |
| Assigned | |
| Unassigned |
Instances
ContextKeyTypeEnum
data ContextKeyTypeEnum #
Constructors
| Binary | |
| BinaryList | |
| Boolean | |
| BooleanList | |
| Date | |
| DateList | |
| IP | |
| IPList | |
| Numeric | |
| NumericList | |
| String | |
| StringList |
Instances
DeletionTaskStatusType
data DeletionTaskStatusType #
Constructors
| Failed | |
| InProgress | |
| NotStarted | |
| Succeeded |
Instances
EncodingType
data EncodingType #
Instances
EntityType
data EntityType #
Constructors
| ETAWSManagedPolicy | |
| ETGroup | |
| ETLocalManagedPolicy | |
| ETRole | |
| ETUser |
Instances
PolicyEvaluationDecisionType
data PolicyEvaluationDecisionType #
Constructors
| Allowed | |
| ExplicitDeny | |
| ImplicitDeny |
Instances
PolicyScopeType
data PolicyScopeType #
Instances
PolicySourceType
data PolicySourceType #
Constructors
| AWSManaged | |
| Group | |
| None | |
| Resource | |
| Role | |
| User | |
| UserManaged |
Instances
ReportFormatType
data ReportFormatType #
Constructors
| TextCSV |
Instances
ReportStateType
data ReportStateType #
Constructors
| RSTComplete | |
| RSTInprogress | |
| RSTStarted |
Instances
StatusType
data StatusType #
Instances
SummaryKeyType
data SummaryKeyType #
Constructors
Instances
AccessKeyInfo
data AccessKeyInfo #
Contains information about an AWS access key.
This data type is used as a response element in the CreateAccessKey and ListAccessKeys operations.
See: accessKeyInfo smart constructor.
Instances
Arguments
| :: Text | |
| -> AccessKey | |
| -> StatusType | |
| -> Text | |
| -> AccessKeyInfo |
Creates a value of AccessKeyInfo with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
akiCreateDate- The date when the access key was created.akiUserName- The name of the IAM user that the access key is associated with.akiAccessKeyId- The ID for this access key.akiStatus- The status of the access key.Activemeans that the key is valid for API calls, whileInactivemeans it is not.akiSecretAccessKey- The secret key used to sign requests.
akiCreateDate :: Lens' AccessKeyInfo (Maybe UTCTime) #
The date when the access key was created.
akiUserName :: Lens' AccessKeyInfo Text #
The name of the IAM user that the access key is associated with.
akiAccessKeyId :: Lens' AccessKeyInfo AccessKey #
The ID for this access key.
akiStatus :: Lens' AccessKeyInfo StatusType #
The status of the access key. Active means that the key is valid for API calls, while Inactive means it is not.
akiSecretAccessKey :: Lens' AccessKeyInfo Text #
The secret key used to sign requests.
AccessKeyLastUsed
data AccessKeyLastUsed #
Contains information about the last time an AWS access key was used.
This data type is used as a response element in the GetAccessKeyLastUsed operation.
See: accessKeyLastUsed smart constructor.
Instances
Arguments
| :: UTCTime | |
| -> Text | |
| -> Text | |
| -> AccessKeyLastUsed |
Creates a value of AccessKeyLastUsed with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
akluLastUsedDate- The date and time, in ISO 8601 date-time format , when the access key was most recently used. This field is null in the following situations: * The user does not have an access key. * An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015. * There is no sign-in data associated with the userakluServiceName- The name of the AWS service with which this access key was most recently used. This field displays "N/A" in the following situations: * The user does not have an access key. * An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015. * There is no sign-in data associated with the userakluRegion- The AWS region where this access key was most recently used. This field is displays "NA" in the following situations: * The user does not have an access key. * An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015. * There is no sign-in data associated with the user For more information about AWS regions, see <http:docs.aws.amazon.comgenerallatestgr/rande.html Regions and Endpoints> in the Amazon Web Services General Reference.
akluLastUsedDate :: Lens' AccessKeyLastUsed UTCTime #
The date and time, in ISO 8601 date-time format , when the access key was most recently used. This field is null in the following situations: * The user does not have an access key. * An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015. * There is no sign-in data associated with the user
akluServiceName :: Lens' AccessKeyLastUsed Text #
The name of the AWS service with which this access key was most recently used. This field displays "N/A" in the following situations: * The user does not have an access key. * An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015. * There is no sign-in data associated with the user
akluRegion :: Lens' AccessKeyLastUsed Text #
The AWS region where this access key was most recently used. This field is displays "NA" in the following situations: * The user does not have an access key. * An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015. * There is no sign-in data associated with the user For more information about AWS regions, see <http:docs.aws.amazon.comgenerallatestgr/rande.html Regions and Endpoints> in the Amazon Web Services General Reference.
AccessKeyMetadata
data AccessKeyMetadata #
Contains information about an AWS access key, without its secret key.
This data type is used as a response element in the ListAccessKeys operation.
See: accessKeyMetadata smart constructor.
Instances
accessKeyMetadata :: AccessKeyMetadata #
Creates a value of AccessKeyMetadata with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
akmStatus- The status of the access key.Activemeans the key is valid for API calls;Inactivemeans it is not.akmCreateDate- The date when the access key was created.akmUserName- The name of the IAM user that the key is associated with.akmAccessKeyId- The ID for this access key.
akmStatus :: Lens' AccessKeyMetadata (Maybe StatusType) #
The status of the access key. Active means the key is valid for API calls; Inactive means it is not.
akmCreateDate :: Lens' AccessKeyMetadata (Maybe UTCTime) #
The date when the access key was created.
akmUserName :: Lens' AccessKeyMetadata (Maybe Text) #
The name of the IAM user that the key is associated with.
akmAccessKeyId :: Lens' AccessKeyMetadata (Maybe AccessKey) #
The ID for this access key.
AttachedPolicy
data AttachedPolicy #
Contains information about an attached policy.
An attached policy is a managed policy that has been attached to a user, group, or role. This data type is used as a response element in the ListAttachedGroupPolicies , ListAttachedRolePolicies , ListAttachedUserPolicies , and GetAccountAuthorizationDetails operations.
For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.
See: attachedPolicy smart constructor.
Instances
attachedPolicy :: AttachedPolicy #
Creates a value of AttachedPolicy with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
apPolicyName- The friendly name of the attached policy.apPolicyARN- Undocumented member.
apPolicyName :: Lens' AttachedPolicy (Maybe Text) #
The friendly name of the attached policy.
apPolicyARN :: Lens' AttachedPolicy (Maybe Text) #
Undocumented member.
ContextEntry
data ContextEntry #
Contains information about a condition context key. It includes the name of the key and specifies the value (or values, if the context key supports multiple values) to use in the simulation. This information is used when evaluating the Condition elements of the input policies.
This data type is used as an input parameter to SimulateCustomPolicy SimulateCustomPolicy
See: contextEntry smart constructor.
Instances
contextEntry :: ContextEntry #
Creates a value of ContextEntry with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
ceContextKeyValues- The value (or values, if the condition context key supports multiple values) to provide to the simulation when the key is referenced by aConditionelement in an input policy.ceContextKeyName- The full name of a condition context key, including the service prefix. For example,aws:SourceIpors3:VersionId.ceContextKeyType- The data type of the value (or values) specified in theContextKeyValuesparameter.
ceContextKeyValues :: Lens' ContextEntry [Text] #
The value (or values, if the condition context key supports multiple values) to provide to the simulation when the key is referenced by a Condition element in an input policy.
ceContextKeyName :: Lens' ContextEntry (Maybe Text) #
The full name of a condition context key, including the service prefix. For example, aws:SourceIp or s3:VersionId .
ceContextKeyType :: Lens' ContextEntry (Maybe ContextKeyTypeEnum) #
The data type of the value (or values) specified in the ContextKeyValues parameter.
DeletionTaskFailureReasonType
data DeletionTaskFailureReasonType #
The reason that the service-linked role deletion failed.
This data type is used as a response element in the GetServiceLinkedRoleDeletionStatus operation.
See: deletionTaskFailureReasonType smart constructor.
Instances
deletionTaskFailureReasonType :: DeletionTaskFailureReasonType #
Creates a value of DeletionTaskFailureReasonType with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
dtfrtRoleUsageList- A list of objects that contains details about the service-linked role deletion failure, if that information is returned by the service. If the service-linked role has active sessions or if any resources that were used by the role have not been deleted from the linked service, the role can't be deleted. This parameter includes a list of the resources that are associated with the role and the region in which the resources are being used.dtfrtReason- A short description of the reason that the service-linked role deletion failed.
dtfrtRoleUsageList :: Lens' DeletionTaskFailureReasonType [RoleUsageType] #
A list of objects that contains details about the service-linked role deletion failure, if that information is returned by the service. If the service-linked role has active sessions or if any resources that were used by the role have not been deleted from the linked service, the role can't be deleted. This parameter includes a list of the resources that are associated with the role and the region in which the resources are being used.
dtfrtReason :: Lens' DeletionTaskFailureReasonType (Maybe Text) #
A short description of the reason that the service-linked role deletion failed.
EvaluationResult
data EvaluationResult #
Contains the results of a simulation.
This data type is used by the return parameter of SimulateCustomPolicy SimulatePrincipalPolicy
See: evaluationResult smart constructor.
Instances
Creates a value of EvaluationResult with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
erMatchedStatements- A list of the statements in the input policies that determine the result for this scenario. Remember that even if multiple statements allow the operation on the resource, if only one statement denies that operation, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.erEvalDecisionDetails- Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access. See How IAM Roles Differ from Resource-based PolicieserResourceSpecificResults- The individual results of the simulation of the API operation specified in EvalActionName on each resource.erEvalResourceName- The ARN of the resource that the indicated API operation was tested on.erMissingContextValues- A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when the resource in a simulation is "*", either explicitly, or when theResourceArnsparameter blank. If you include a list of resources, then any missing context values are instead included under theResourceSpecificResultssection. To discover the context keys used by a set of policies, you can callGetContextKeysForCustomPolicyorGetContextKeysForPrincipalPolicy.erOrganizationsDecisionDetail- A structure that details how AWS Organizations and its service control policies affect the results of the simulation. Only applies if the simulated user's account is part of an organization.erEvalActionName- The name of the API operation tested on the indicated resource.erEvalDecision- The result of the simulation.
erMatchedStatements :: Lens' EvaluationResult [Statement] #
A list of the statements in the input policies that determine the result for this scenario. Remember that even if multiple statements allow the operation on the resource, if only one statement denies that operation, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
erEvalDecisionDetails :: Lens' EvaluationResult (HashMap Text PolicyEvaluationDecisionType) #
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access. See How IAM Roles Differ from Resource-based Policies
erResourceSpecificResults :: Lens' EvaluationResult [ResourceSpecificResult] #
The individual results of the simulation of the API operation specified in EvalActionName on each resource.
erEvalResourceName :: Lens' EvaluationResult (Maybe Text) #
The ARN of the resource that the indicated API operation was tested on.
erMissingContextValues :: Lens' EvaluationResult [Text] #
A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when the resource in a simulation is "*", either explicitly, or when the ResourceArns parameter blank. If you include a list of resources, then any missing context values are instead included under the ResourceSpecificResults section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy .
erOrganizationsDecisionDetail :: Lens' EvaluationResult (Maybe OrganizationsDecisionDetail) #
A structure that details how AWS Organizations and its service control policies affect the results of the simulation. Only applies if the simulated user's account is part of an organization.
erEvalActionName :: Lens' EvaluationResult Text #
The name of the API operation tested on the indicated resource.
erEvalDecision :: Lens' EvaluationResult PolicyEvaluationDecisionType #
The result of the simulation.
GetContextKeysForPolicyResponse
data GetContextKeysForPolicyResponse #
Contains the response to a successful GetContextKeysForPrincipalPolicy or GetContextKeysForCustomPolicy request.
See: getContextKeysForPolicyResponse smart constructor.
Instances
getContextKeysForPolicyResponse :: GetContextKeysForPolicyResponse #
Creates a value of GetContextKeysForPolicyResponse with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
gckfpContextKeyNames- The list of context keys that are referenced in the input policies.
gckfpContextKeyNames :: Lens' GetContextKeysForPolicyResponse [Text] #
The list of context keys that are referenced in the input policies.
Group
Contains information about an IAM group entity.
This data type is used as a response element in the following operations:
CreateGroupGetGroupListGroups
See: group' smart constructor.
Instances
| Eq Group # | |
| Data Group # | |
Defined in Network.AWS.IAM.Types.Product Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Group -> c Group # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Group # dataTypeOf :: Group -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c Group) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Group) # gmapT :: (forall b. Data b => b -> b) -> Group -> Group # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Group -> r # gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Group -> r # gmapQ :: (forall d. Data d => d -> u) -> Group -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> Group -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> Group -> m Group # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Group -> m Group # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Group -> m Group # | |
| Read Group # | |
| Show Group # | |
| Generic Group # | |
| Hashable Group # | |
Defined in Network.AWS.IAM.Types.Product | |
| FromXML Group # | |
| NFData Group # | |
Defined in Network.AWS.IAM.Types.Product | |
| type Rep Group # | |
Defined in Network.AWS.IAM.Types.Product type Rep Group = D1 (MetaData "Group" "Network.AWS.IAM.Types.Product" "amazonka-iam-1.6.0-KLHg33OPBsA2oss7MTCyZq" False) (C1 (MetaCons "Group'" PrefixI True) ((S1 (MetaSel (Just "_gPath") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "_gGroupName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text)) :*: (S1 (MetaSel (Just "_gGroupId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: (S1 (MetaSel (Just "_gARN") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "_gCreateDate") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 ISO8601))))) | |
Creates a value of Group with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
gPath- The path to the group. For more information about paths, see IAM Identifiers in the Using IAM guide.gGroupName- The friendly name that identifies the group.gGroupId- The stable and unique string identifying the group. For more information about IDs, see IAM Identifiers in the Using IAM guide.gARN- The Amazon Resource Name (ARN) specifying the group. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.gCreateDate- The date and time, in ISO 8601 date-time format , when the group was created.
The path to the group. For more information about paths, see IAM Identifiers in the Using IAM guide.
gGroupName :: Lens' Group Text #
The friendly name that identifies the group.
gGroupId :: Lens' Group Text #
The stable and unique string identifying the group. For more information about IDs, see IAM Identifiers in the Using IAM guide.
The Amazon Resource Name (ARN) specifying the group. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.
gCreateDate :: Lens' Group UTCTime #
The date and time, in ISO 8601 date-time format , when the group was created.
GroupDetail
data GroupDetail #
Contains information about an IAM group, including all of the group's policies.
This data type is used as a response element in the GetAccountAuthorizationDetails operation.
See: groupDetail smart constructor.
Instances
Creates a value of GroupDetail with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
gdARN- Undocumented member.gdPath- The path to the group. For more information about paths, see IAM Identifiers in the Using IAM guide.gdCreateDate- The date and time, in ISO 8601 date-time format , when the group was created.gdGroupId- The stable and unique string identifying the group. For more information about IDs, see IAM Identifiers in the Using IAM guide.gdGroupPolicyList- A list of the inline policies embedded in the group.gdGroupName- The friendly name that identifies the group.gdAttachedManagedPolicies- A list of the managed policies attached to the group.
gdPath :: Lens' GroupDetail (Maybe Text) #
The path to the group. For more information about paths, see IAM Identifiers in the Using IAM guide.
gdCreateDate :: Lens' GroupDetail (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the group was created.
gdGroupId :: Lens' GroupDetail (Maybe Text) #
The stable and unique string identifying the group. For more information about IDs, see IAM Identifiers in the Using IAM guide.
gdGroupPolicyList :: Lens' GroupDetail [PolicyDetail] #
A list of the inline policies embedded in the group.
gdGroupName :: Lens' GroupDetail (Maybe Text) #
The friendly name that identifies the group.
gdAttachedManagedPolicies :: Lens' GroupDetail [AttachedPolicy] #
A list of the managed policies attached to the group.
InstanceProfile
data InstanceProfile #
Contains information about an instance profile.
This data type is used as a response element in the following operations:
CreateInstanceProfileGetInstanceProfileListInstanceProfilesListInstanceProfilesForRole
See: instanceProfile smart constructor.
Instances
Creates a value of InstanceProfile with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
ipPath- The path to the instance profile. For more information about paths, see IAM Identifiers in the Using IAM guide.ipInstanceProfileName- The name identifying the instance profile.ipInstanceProfileId- The stable and unique string identifying the instance profile. For more information about IDs, see IAM Identifiers in the Using IAM guide.ipARN- The Amazon Resource Name (ARN) specifying the instance profile. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.ipCreateDate- The date when the instance profile was created.ipRoles- The role associated with the instance profile.
ipPath :: Lens' InstanceProfile Text #
The path to the instance profile. For more information about paths, see IAM Identifiers in the Using IAM guide.
ipInstanceProfileName :: Lens' InstanceProfile Text #
The name identifying the instance profile.
ipInstanceProfileId :: Lens' InstanceProfile Text #
The stable and unique string identifying the instance profile. For more information about IDs, see IAM Identifiers in the Using IAM guide.
ipARN :: Lens' InstanceProfile Text #
The Amazon Resource Name (ARN) specifying the instance profile. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.
ipCreateDate :: Lens' InstanceProfile UTCTime #
The date when the instance profile was created.
ipRoles :: Lens' InstanceProfile [Role] #
The role associated with the instance profile.
LoginProfile
data LoginProfile #
Contains the user name and password create date for a user.
This data type is used as a response element in the CreateLoginProfile and GetLoginProfile operations.
See: loginProfile smart constructor.
Instances
Arguments
| :: Text | |
| -> UTCTime | |
| -> LoginProfile |
Creates a value of LoginProfile with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
lpPasswordResetRequired- Specifies whether the user is required to set a new password on next sign-in.lpUserName- The name of the user, which can be used for signing in to the AWS Management Console.lpCreateDate- The date when the password for the user was created.
lpPasswordResetRequired :: Lens' LoginProfile (Maybe Bool) #
Specifies whether the user is required to set a new password on next sign-in.
lpUserName :: Lens' LoginProfile Text #
The name of the user, which can be used for signing in to the AWS Management Console.
lpCreateDate :: Lens' LoginProfile UTCTime #
The date when the password for the user was created.
MFADevice
Contains information about an MFA device.
This data type is used as a response element in the ListMFADevices operation.
See: mfaDevice smart constructor.
Instances
| Eq MFADevice # | |
| Data MFADevice # | |
Defined in Network.AWS.IAM.Types.Product Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> MFADevice -> c MFADevice # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c MFADevice # toConstr :: MFADevice -> Constr # dataTypeOf :: MFADevice -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c MFADevice) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c MFADevice) # gmapT :: (forall b. Data b => b -> b) -> MFADevice -> MFADevice # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> MFADevice -> r # gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> MFADevice -> r # gmapQ :: (forall d. Data d => d -> u) -> MFADevice -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> MFADevice -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> MFADevice -> m MFADevice # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> MFADevice -> m MFADevice # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> MFADevice -> m MFADevice # | |
| Read MFADevice # | |
| Show MFADevice # | |
| Generic MFADevice # | |
| Hashable MFADevice # | |
Defined in Network.AWS.IAM.Types.Product | |
| FromXML MFADevice # | |
| NFData MFADevice # | |
Defined in Network.AWS.IAM.Types.Product | |
| type Rep MFADevice # | |
Defined in Network.AWS.IAM.Types.Product type Rep MFADevice = D1 (MetaData "MFADevice" "Network.AWS.IAM.Types.Product" "amazonka-iam-1.6.0-KLHg33OPBsA2oss7MTCyZq" False) (C1 (MetaCons "MFADevice'" PrefixI True) (S1 (MetaSel (Just "_mdUserName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: (S1 (MetaSel (Just "_mdSerialNumber") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "_mdEnableDate") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 ISO8601)))) | |
Creates a value of MFADevice with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
mdUserName- The user with whom the MFA device is associated.mdSerialNumber- The serial number that uniquely identifies the MFA device. For virtual MFA devices, the serial number is the device ARN.mdEnableDate- The date when the MFA device was enabled for the user.
mdUserName :: Lens' MFADevice Text #
The user with whom the MFA device is associated.
mdSerialNumber :: Lens' MFADevice Text #
The serial number that uniquely identifies the MFA device. For virtual MFA devices, the serial number is the device ARN.
mdEnableDate :: Lens' MFADevice UTCTime #
The date when the MFA device was enabled for the user.
ManagedPolicyDetail
data ManagedPolicyDetail #
Contains information about a managed policy, including the policy's ARN, versions, and the number of principal entities (users, groups, and roles) that the policy is attached to.
This data type is used as a response element in the GetAccountAuthorizationDetails operation.
For more information about managed policies, see Managed Policies and Inline Policies in the Using IAM guide.
See: managedPolicyDetail smart constructor.
Instances
managedPolicyDetail :: ManagedPolicyDetail #
Creates a value of ManagedPolicyDetail with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
mpdPolicyName- The friendly name (not ARN) identifying the policy.mpdARN- Undocumented member.mpdUpdateDate- The date and time, in ISO 8601 date-time format , when the policy was last updated. When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.mpdPolicyId- The stable and unique string identifying the policy. For more information about IDs, see IAM Identifiers in the Using IAM guide.mpdPath- The path to the policy. For more information about paths, see IAM Identifiers in the Using IAM guide.mpdPolicyVersionList- A list containing information about the versions of the policy.mpdCreateDate- The date and time, in ISO 8601 date-time format , when the policy was created.mpdIsAttachable- Specifies whether the policy can be attached to an IAM user, group, or role.mpdDefaultVersionId- The identifier for the version of the policy that is set as the default (operative) version. For more information about policy versions, see Versioning for Managed Policies in the Using IAM guide.mpdAttachmentCount- The number of principal entities (users, groups, and roles) that the policy is attached to.mpdDescription- A friendly description of the policy.
mpdPolicyName :: Lens' ManagedPolicyDetail (Maybe Text) #
The friendly name (not ARN) identifying the policy.
mpdUpdateDate :: Lens' ManagedPolicyDetail (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the policy was last updated. When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.
mpdPolicyId :: Lens' ManagedPolicyDetail (Maybe Text) #
The stable and unique string identifying the policy. For more information about IDs, see IAM Identifiers in the Using IAM guide.
mpdPath :: Lens' ManagedPolicyDetail (Maybe Text) #
The path to the policy. For more information about paths, see IAM Identifiers in the Using IAM guide.
mpdPolicyVersionList :: Lens' ManagedPolicyDetail [PolicyVersion] #
A list containing information about the versions of the policy.
mpdCreateDate :: Lens' ManagedPolicyDetail (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the policy was created.
mpdIsAttachable :: Lens' ManagedPolicyDetail (Maybe Bool) #
Specifies whether the policy can be attached to an IAM user, group, or role.
mpdDefaultVersionId :: Lens' ManagedPolicyDetail (Maybe Text) #
The identifier for the version of the policy that is set as the default (operative) version. For more information about policy versions, see Versioning for Managed Policies in the Using IAM guide.
mpdAttachmentCount :: Lens' ManagedPolicyDetail (Maybe Int) #
The number of principal entities (users, groups, and roles) that the policy is attached to.
mpdDescription :: Lens' ManagedPolicyDetail (Maybe Text) #
A friendly description of the policy.
OpenIdConnectProviderListEntry
data OpenIdConnectProviderListEntry #
Contains the Amazon Resource Name (ARN) for an IAM OpenID Connect provider.
See: openIdConnectProviderListEntry smart constructor.
Instances
openIdConnectProviderListEntry :: OpenIdConnectProviderListEntry #
Creates a value of OpenIdConnectProviderListEntry with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
oicpleARN- Undocumented member.
OrganizationsDecisionDetail
data OrganizationsDecisionDetail #
Contains information about AWS Organizations's effect on a policy simulation.
See: organizationsDecisionDetail smart constructor.
Instances
organizationsDecisionDetail :: OrganizationsDecisionDetail #
Creates a value of OrganizationsDecisionDetail with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
oddAllowedByOrganizations- Specifies whether the simulated operation is allowed by the AWS Organizations service control policies that impact the simulated user's account.
oddAllowedByOrganizations :: Lens' OrganizationsDecisionDetail (Maybe Bool) #
Specifies whether the simulated operation is allowed by the AWS Organizations service control policies that impact the simulated user's account.
PasswordPolicy
data PasswordPolicy #
Contains information about the account password policy.
This data type is used as a response element in the GetAccountPasswordPolicy operation.
See: passwordPolicy smart constructor.
Instances
passwordPolicy :: PasswordPolicy #
Creates a value of PasswordPolicy with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
ppExpirePasswords- Indicates whether passwords in the account expire. Returns true ifMaxPasswordAgecontains a value greater than 0. Returns false if MaxPasswordAge is 0 or not present.ppMinimumPasswordLength- Minimum length to require for IAM user passwords.ppRequireNumbers- Specifies whether to require numbers for IAM user passwords.ppPasswordReusePrevention- Specifies the number of previous passwords that IAM users are prevented from reusing.ppRequireLowercaseCharacters- Specifies whether to require lowercase characters for IAM user passwords.ppMaxPasswordAge- The number of days that an IAM user password is valid.ppHardExpiry- Specifies whether IAM users are prevented from setting a new password after their password has expired.ppRequireSymbols- Specifies whether to require symbols for IAM user passwords.ppRequireUppercaseCharacters- Specifies whether to require uppercase characters for IAM user passwords.ppAllowUsersToChangePassword- Specifies whether IAM users are allowed to change their own password.
ppExpirePasswords :: Lens' PasswordPolicy (Maybe Bool) #
Indicates whether passwords in the account expire. Returns true if MaxPasswordAge contains a value greater than 0. Returns false if MaxPasswordAge is 0 or not present.
ppMinimumPasswordLength :: Lens' PasswordPolicy (Maybe Natural) #
Minimum length to require for IAM user passwords.
ppRequireNumbers :: Lens' PasswordPolicy (Maybe Bool) #
Specifies whether to require numbers for IAM user passwords.
ppPasswordReusePrevention :: Lens' PasswordPolicy (Maybe Natural) #
Specifies the number of previous passwords that IAM users are prevented from reusing.
ppRequireLowercaseCharacters :: Lens' PasswordPolicy (Maybe Bool) #
Specifies whether to require lowercase characters for IAM user passwords.
ppMaxPasswordAge :: Lens' PasswordPolicy (Maybe Natural) #
The number of days that an IAM user password is valid.
ppHardExpiry :: Lens' PasswordPolicy (Maybe Bool) #
Specifies whether IAM users are prevented from setting a new password after their password has expired.
ppRequireSymbols :: Lens' PasswordPolicy (Maybe Bool) #
Specifies whether to require symbols for IAM user passwords.
ppRequireUppercaseCharacters :: Lens' PasswordPolicy (Maybe Bool) #
Specifies whether to require uppercase characters for IAM user passwords.
ppAllowUsersToChangePassword :: Lens' PasswordPolicy (Maybe Bool) #
Specifies whether IAM users are allowed to change their own password.
Policy
Contains information about a managed policy.
This data type is used as a response element in the CreatePolicy , GetPolicy , and ListPolicies operations.
For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.
See: policy smart constructor.
Instances
Creates a value of Policy with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
pPolicyName- The friendly name (not ARN) identifying the policy.pARN- Undocumented member.pUpdateDate- The date and time, in ISO 8601 date-time format , when the policy was last updated. When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.pPolicyId- The stable and unique string identifying the policy. For more information about IDs, see IAM Identifiers in the Using IAM guide.pPath- The path to the policy. For more information about paths, see IAM Identifiers in the Using IAM guide.pCreateDate- The date and time, in ISO 8601 date-time format , when the policy was created.pIsAttachable- Specifies whether the policy can be attached to an IAM user, group, or role.pDefaultVersionId- The identifier for the version of the policy that is set as the default version.pAttachmentCount- The number of entities (users, groups, and roles) that the policy is attached to.pDescription- A friendly description of the policy. This element is included in the response to theGetPolicyoperation. It is not included in the response to theListPoliciesoperation.
pUpdateDate :: Lens' Policy (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the policy was last updated. When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.
pPolicyId :: Lens' Policy (Maybe Text) #
The stable and unique string identifying the policy. For more information about IDs, see IAM Identifiers in the Using IAM guide.
pPath :: Lens' Policy (Maybe Text) #
The path to the policy. For more information about paths, see IAM Identifiers in the Using IAM guide.
pCreateDate :: Lens' Policy (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the policy was created.
pIsAttachable :: Lens' Policy (Maybe Bool) #
Specifies whether the policy can be attached to an IAM user, group, or role.
pDefaultVersionId :: Lens' Policy (Maybe Text) #
The identifier for the version of the policy that is set as the default version.
pAttachmentCount :: Lens' Policy (Maybe Int) #
The number of entities (users, groups, and roles) that the policy is attached to.
pDescription :: Lens' Policy (Maybe Text) #
A friendly description of the policy. This element is included in the response to the GetPolicy operation. It is not included in the response to the ListPolicies operation.
PolicyDetail
data PolicyDetail #
Contains information about an IAM policy, including the policy document.
This data type is used as a response element in the GetAccountAuthorizationDetails operation.
See: policyDetail smart constructor.
Instances
policyDetail :: PolicyDetail #
Creates a value of PolicyDetail with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
pdPolicyDocument- The policy document.pdPolicyName- The name of the policy.
pdPolicyDocument :: Lens' PolicyDetail (Maybe Text) #
The policy document.
pdPolicyName :: Lens' PolicyDetail (Maybe Text) #
The name of the policy.
PolicyGroup
data PolicyGroup #
Contains information about a group that a managed policy is attached to.
This data type is used as a response element in the ListEntitiesForPolicy operation.
For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.
See: policyGroup smart constructor.
Instances
Creates a value of PolicyGroup with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
pgGroupId- The stable and unique string identifying the group. For more information about IDs, see IAM Identifiers in the IAM User Guide .pgGroupName- The name (friendly name, not ARN) identifying the group.
pgGroupId :: Lens' PolicyGroup (Maybe Text) #
The stable and unique string identifying the group. For more information about IDs, see IAM Identifiers in the IAM User Guide .
pgGroupName :: Lens' PolicyGroup (Maybe Text) #
The name (friendly name, not ARN) identifying the group.
PolicyRole
data PolicyRole #
Contains information about a role that a managed policy is attached to.
This data type is used as a response element in the ListEntitiesForPolicy operation.
For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.
See: policyRole smart constructor.
Instances
Creates a value of PolicyRole with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
prRoleName- The name (friendly name, not ARN) identifying the role.prRoleId- The stable and unique string identifying the role. For more information about IDs, see IAM Identifiers in the IAM User Guide .
prRoleName :: Lens' PolicyRole (Maybe Text) #
The name (friendly name, not ARN) identifying the role.
prRoleId :: Lens' PolicyRole (Maybe Text) #
The stable and unique string identifying the role. For more information about IDs, see IAM Identifiers in the IAM User Guide .
PolicyUser
data PolicyUser #
Contains information about a user that a managed policy is attached to.
This data type is used as a response element in the ListEntitiesForPolicy operation.
For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.
See: policyUser smart constructor.
Instances
Creates a value of PolicyUser with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
puUserName- The name (friendly name, not ARN) identifying the user.puUserId- The stable and unique string identifying the user. For more information about IDs, see IAM Identifiers in the IAM User Guide .
puUserName :: Lens' PolicyUser (Maybe Text) #
The name (friendly name, not ARN) identifying the user.
puUserId :: Lens' PolicyUser (Maybe Text) #
The stable and unique string identifying the user. For more information about IDs, see IAM Identifiers in the IAM User Guide .
PolicyVersion
data PolicyVersion #
Contains information about a version of a managed policy.
This data type is used as a response element in the CreatePolicyVersion , GetPolicyVersion , ListPolicyVersions , and GetAccountAuthorizationDetails operations.
For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.
See: policyVersion smart constructor.
Instances
policyVersion :: PolicyVersion #
Creates a value of PolicyVersion with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
pvVersionId- The identifier for the policy version. Policy version identifiers always begin withv(always lowercase). When a policy is created, the first policy version isv1.pvCreateDate- The date and time, in ISO 8601 date-time format , when the policy version was created.pvDocument- The policy document. The policy document is returned in the response to theGetPolicyVersionandGetAccountAuthorizationDetailsoperations. It is not returned in the response to theCreatePolicyVersionorListPolicyVersionsoperations. The policy document returned in this structure is URL-encoded compliant with RFC 3986 . You can use a URL decoding method to convert the policy back to plain JSON text. For example, if you use Java, you can use thedecodemethod of thejava.net.URLDecoderutility class in the Java SDK. Other languages and SDKs provide similar functionality.pvIsDefaultVersion- Specifies whether the policy version is set as the policy's default version.
pvVersionId :: Lens' PolicyVersion (Maybe Text) #
The identifier for the policy version. Policy version identifiers always begin with v (always lowercase). When a policy is created, the first policy version is v1 .
pvCreateDate :: Lens' PolicyVersion (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the policy version was created.
pvDocument :: Lens' PolicyVersion (Maybe Text) #
The policy document. The policy document is returned in the response to the GetPolicyVersion and GetAccountAuthorizationDetails operations. It is not returned in the response to the CreatePolicyVersion or ListPolicyVersions operations. The policy document returned in this structure is URL-encoded compliant with RFC 3986 . You can use a URL decoding method to convert the policy back to plain JSON text. For example, if you use Java, you can use the decode method of the java.net.URLDecoder utility class in the Java SDK. Other languages and SDKs provide similar functionality.
pvIsDefaultVersion :: Lens' PolicyVersion (Maybe Bool) #
Specifies whether the policy version is set as the policy's default version.
Position
Contains the row and column of a location of a Statement element in a policy document.
This data type is used as a member of the Statement
See: position smart constructor.
Instances
| Eq Position # | |
| Data Position # | |
Defined in Network.AWS.IAM.Types.Product Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Position -> c Position # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Position # toConstr :: Position -> Constr # dataTypeOf :: Position -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c Position) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Position) # gmapT :: (forall b. Data b => b -> b) -> Position -> Position # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Position -> r # gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Position -> r # gmapQ :: (forall d. Data d => d -> u) -> Position -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> Position -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> Position -> m Position # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Position -> m Position # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Position -> m Position # | |
| Read Position # | |
| Show Position # | |
| Generic Position # | |
| Hashable Position # | |
Defined in Network.AWS.IAM.Types.Product | |
| FromXML Position # | |
| NFData Position # | |
Defined in Network.AWS.IAM.Types.Product | |
| type Rep Position # | |
Defined in Network.AWS.IAM.Types.Product type Rep Position = D1 (MetaData "Position" "Network.AWS.IAM.Types.Product" "amazonka-iam-1.6.0-KLHg33OPBsA2oss7MTCyZq" False) (C1 (MetaCons "Position'" PrefixI True) (S1 (MetaSel (Just "_pLine") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Int)) :*: S1 (MetaSel (Just "_pColumn") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Int)))) | |
pColumn :: Lens' Position (Maybe Int) #
The column in the line containing the specified position in the document.
ResourceSpecificResult
data ResourceSpecificResult #
Contains the result of the simulation of a single API operation call on a single resource.
This data type is used by a member of the EvaluationResult data type.
See: resourceSpecificResult smart constructor.
Instances
Arguments
| :: Text | |
| -> PolicyEvaluationDecisionType | |
| -> ResourceSpecificResult |
Creates a value of ResourceSpecificResult with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rsrMatchedStatements- A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the operation on the resource, if any statement denies that operation, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.rsrEvalDecisionDetails- Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.rsrMissingContextValues- A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in theResourceArnsparameter instead of "*". If you do not specify individual resources, by settingResourceArnsto "*" or by not including theResourceArnsparameter, then any missing context values are instead included under theEvaluationResultssection. To discover the context keys used by a set of policies, you can callGetContextKeysForCustomPolicyorGetContextKeysForPrincipalPolicy.rsrEvalResourceName- The name of the simulated resource, in Amazon Resource Name (ARN) format.rsrEvalResourceDecision- The result of the simulation of the simulated API operation on the resource specified inEvalResourceName.
rsrMatchedStatements :: Lens' ResourceSpecificResult [Statement] #
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the operation on the resource, if any statement denies that operation, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
rsrEvalDecisionDetails :: Lens' ResourceSpecificResult (HashMap Text PolicyEvaluationDecisionType) #
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
rsrMissingContextValues :: Lens' ResourceSpecificResult [Text] #
A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in the ResourceArns parameter instead of "*". If you do not specify individual resources, by setting ResourceArns to "*" or by not including the ResourceArns parameter, then any missing context values are instead included under the EvaluationResults section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy .
rsrEvalResourceName :: Lens' ResourceSpecificResult Text #
The name of the simulated resource, in Amazon Resource Name (ARN) format.
rsrEvalResourceDecision :: Lens' ResourceSpecificResult PolicyEvaluationDecisionType #
The result of the simulation of the simulated API operation on the resource specified in EvalResourceName .
Role
Contains information about an IAM role. This structure is returned as a response element in several API operations that interact with roles.
See: role' smart constructor.
Instances
| Eq Role # | |
| Data Role # | |
Defined in Network.AWS.IAM.Types.Product Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Role -> c Role # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Role # dataTypeOf :: Role -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c Role) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Role) # gmapT :: (forall b. Data b => b -> b) -> Role -> Role # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Role -> r # gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Role -> r # gmapQ :: (forall d. Data d => d -> u) -> Role -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> Role -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> Role -> m Role # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Role -> m Role # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Role -> m Role # | |
| Read Role # | |
| Show Role # | |
| Generic Role # | |
| Hashable Role # | |
Defined in Network.AWS.IAM.Types.Product | |
| FromXML Role # | |
| NFData Role # | |
Defined in Network.AWS.IAM.Types.Product | |
| type Rep Role # | |
Defined in Network.AWS.IAM.Types.Product type Rep Role = D1 (MetaData "Role" "Network.AWS.IAM.Types.Product" "amazonka-iam-1.6.0-KLHg33OPBsA2oss7MTCyZq" False) (C1 (MetaCons "Role'" PrefixI True) (((S1 (MetaSel (Just "_rMaxSessionDuration") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Nat)) :*: S1 (MetaSel (Just "_rAssumeRolePolicyDocument") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 (MetaSel (Just "_rDescription") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Text)) :*: S1 (MetaSel (Just "_rPath") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text))) :*: ((S1 (MetaSel (Just "_rRoleName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "_rRoleId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text)) :*: (S1 (MetaSel (Just "_rARN") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "_rCreateDate") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 ISO8601))))) | |
Creates a value of Role with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rMaxSessionDuration- The maximum session duration (in seconds) for the specified role. Anyone who uses the AWS CLI or API to assume the role can specify the duration using the optionalDurationSecondsAPI parameter orduration-secondsCLI parameter.rAssumeRolePolicyDocument- The policy that grants an entity permission to assume the role.rDescription- A description of the role that you provide.rPath- The path to the role. For more information about paths, see IAM Identifiers in the Using IAM guide.rRoleName- The friendly name that identifies the role.rRoleId- The stable and unique string identifying the role. For more information about IDs, see IAM Identifiers in the Using IAM guide.rARN- The Amazon Resource Name (ARN) specifying the role. For more information about ARNs and how to use them in policies, see IAM Identifiers in the IAM User Guide guide.rCreateDate- The date and time, in ISO 8601 date-time format , when the role was created.
rMaxSessionDuration :: Lens' Role (Maybe Natural) #
The maximum session duration (in seconds) for the specified role. Anyone who uses the AWS CLI or API to assume the role can specify the duration using the optional DurationSeconds API parameter or duration-seconds CLI parameter.
rAssumeRolePolicyDocument :: Lens' Role (Maybe Text) #
The policy that grants an entity permission to assume the role.
The path to the role. For more information about paths, see IAM Identifiers in the Using IAM guide.
The stable and unique string identifying the role. For more information about IDs, see IAM Identifiers in the Using IAM guide.
The Amazon Resource Name (ARN) specifying the role. For more information about ARNs and how to use them in policies, see IAM Identifiers in the IAM User Guide guide.
rCreateDate :: Lens' Role UTCTime #
The date and time, in ISO 8601 date-time format , when the role was created.
RoleDetail
data RoleDetail #
Contains information about an IAM role, including all of the role's policies.
This data type is used as a response element in the GetAccountAuthorizationDetails operation.
See: roleDetail smart constructor.
Instances
Creates a value of RoleDetail with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rdAssumeRolePolicyDocument- The trust policy that grants permission to assume the role.rdARN- Undocumented member.rdPath- The path to the role. For more information about paths, see IAM Identifiers in the Using IAM guide.rdInstanceProfileList- A list of instance profiles that contain this role.rdCreateDate- The date and time, in ISO 8601 date-time format , when the role was created.rdRoleName- The friendly name that identifies the role.rdRoleId- The stable and unique string identifying the role. For more information about IDs, see IAM Identifiers in the Using IAM guide.rdRolePolicyList- A list of inline policies embedded in the role. These policies are the role's access (permissions) policies.rdAttachedManagedPolicies- A list of managed policies attached to the role. These policies are the role's access (permissions) policies.
rdAssumeRolePolicyDocument :: Lens' RoleDetail (Maybe Text) #
The trust policy that grants permission to assume the role.
rdPath :: Lens' RoleDetail (Maybe Text) #
The path to the role. For more information about paths, see IAM Identifiers in the Using IAM guide.
rdInstanceProfileList :: Lens' RoleDetail [InstanceProfile] #
A list of instance profiles that contain this role.
rdCreateDate :: Lens' RoleDetail (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the role was created.
rdRoleName :: Lens' RoleDetail (Maybe Text) #
The friendly name that identifies the role.
rdRoleId :: Lens' RoleDetail (Maybe Text) #
The stable and unique string identifying the role. For more information about IDs, see IAM Identifiers in the Using IAM guide.
rdRolePolicyList :: Lens' RoleDetail [PolicyDetail] #
A list of inline policies embedded in the role. These policies are the role's access (permissions) policies.
rdAttachedManagedPolicies :: Lens' RoleDetail [AttachedPolicy] #
A list of managed policies attached to the role. These policies are the role's access (permissions) policies.
RoleUsageType
data RoleUsageType #
An object that contains details about how a service-linked role is used, if that information is returned by the service.
This data type is used as a response element in the GetServiceLinkedRoleDeletionStatus operation.
See: roleUsageType smart constructor.
Instances
roleUsageType :: RoleUsageType #
Creates a value of RoleUsageType with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rutResources- The name of the resource that is using the service-linked role.rutRegion- The name of the region where the service-linked role is being used.
rutResources :: Lens' RoleUsageType [Text] #
The name of the resource that is using the service-linked role.
rutRegion :: Lens' RoleUsageType (Maybe Text) #
The name of the region where the service-linked role is being used.
SAMLProviderListEntry
data SAMLProviderListEntry #
Contains the list of SAML providers for this account.
See: sAMLProviderListEntry smart constructor.
Instances
sAMLProviderListEntry :: SAMLProviderListEntry #
Creates a value of SAMLProviderListEntry with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
samlpleARN- The Amazon Resource Name (ARN) of the SAML provider.samlpleCreateDate- The date and time when the SAML provider was created.samlpleValidUntil- The expiration date and time for the SAML provider.
samlpleARN :: Lens' SAMLProviderListEntry (Maybe Text) #
The Amazon Resource Name (ARN) of the SAML provider.
samlpleCreateDate :: Lens' SAMLProviderListEntry (Maybe UTCTime) #
The date and time when the SAML provider was created.
samlpleValidUntil :: Lens' SAMLProviderListEntry (Maybe UTCTime) #
The expiration date and time for the SAML provider.
SSHPublicKey
data SSHPublicKey #
Contains information about an SSH public key.
This data type is used as a response element in the GetSSHPublicKey and UploadSSHPublicKey operations.
See: sshPublicKey smart constructor.
Instances
Arguments
| :: Text | |
| -> Text | |
| -> Text | |
| -> Text | |
| -> StatusType | |
| -> SSHPublicKey |
Creates a value of SSHPublicKey with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
spkUploadDate- The date and time, in ISO 8601 date-time format , when the SSH public key was uploaded.spkUserName- The name of the IAM user associated with the SSH public key.spkSSHPublicKeyId- The unique identifier for the SSH public key.spkFingerprint- The MD5 message digest of the SSH public key.spkSSHPublicKeyBody- The SSH public key.spkStatus- The status of the SSH public key.Activemeans that the key can be used for authentication with an AWS CodeCommit repository.Inactivemeans that the key cannot be used.
spkUploadDate :: Lens' SSHPublicKey (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the SSH public key was uploaded.
spkUserName :: Lens' SSHPublicKey Text #
The name of the IAM user associated with the SSH public key.
spkSSHPublicKeyId :: Lens' SSHPublicKey Text #
The unique identifier for the SSH public key.
spkFingerprint :: Lens' SSHPublicKey Text #
The MD5 message digest of the SSH public key.
spkSSHPublicKeyBody :: Lens' SSHPublicKey Text #
The SSH public key.
spkStatus :: Lens' SSHPublicKey StatusType #
The status of the SSH public key. Active means that the key can be used for authentication with an AWS CodeCommit repository. Inactive means that the key cannot be used.
SSHPublicKeyMetadata
data SSHPublicKeyMetadata #
Contains information about an SSH public key, without the key's body or fingerprint.
This data type is used as a response element in the ListSSHPublicKeys operation.
See: sshPublicKeyMetadata smart constructor.
Instances
Arguments
| :: Text | |
| -> Text | |
| -> StatusType | |
| -> UTCTime | |
| -> SSHPublicKeyMetadata |
Creates a value of SSHPublicKeyMetadata with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
spkmUserName- The name of the IAM user associated with the SSH public key.spkmSSHPublicKeyId- The unique identifier for the SSH public key.spkmStatus- The status of the SSH public key.Activemeans that the key can be used for authentication with an AWS CodeCommit repository.Inactivemeans that the key cannot be used.spkmUploadDate- The date and time, in ISO 8601 date-time format , when the SSH public key was uploaded.
spkmUserName :: Lens' SSHPublicKeyMetadata Text #
The name of the IAM user associated with the SSH public key.
spkmSSHPublicKeyId :: Lens' SSHPublicKeyMetadata Text #
The unique identifier for the SSH public key.
spkmStatus :: Lens' SSHPublicKeyMetadata StatusType #
The status of the SSH public key. Active means that the key can be used for authentication with an AWS CodeCommit repository. Inactive means that the key cannot be used.
spkmUploadDate :: Lens' SSHPublicKeyMetadata UTCTime #
The date and time, in ISO 8601 date-time format , when the SSH public key was uploaded.
ServerCertificate
data ServerCertificate #
Contains information about a server certificate.
This data type is used as a response element in the GetServerCertificate operation.
See: serverCertificate smart constructor.
Instances
Arguments
| :: ServerCertificateMetadata | |
| -> Text | |
| -> ServerCertificate |
Creates a value of ServerCertificate with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sCertificateChain- The contents of the public key certificate chain.sServerCertificateMetadata- The meta information of the server certificate, such as its name, path, ID, and ARN.sCertificateBody- The contents of the public key certificate.
sCertificateChain :: Lens' ServerCertificate (Maybe Text) #
The contents of the public key certificate chain.
sServerCertificateMetadata :: Lens' ServerCertificate ServerCertificateMetadata #
The meta information of the server certificate, such as its name, path, ID, and ARN.
sCertificateBody :: Lens' ServerCertificate Text #
The contents of the public key certificate.
ServerCertificateMetadata
data ServerCertificateMetadata #
Contains information about a server certificate without its certificate body, certificate chain, and private key.
This data type is used as a response element in the UploadServerCertificate and ListServerCertificates operations.
See: serverCertificateMetadata smart constructor.
Instances
Arguments
| :: Text | |
| -> Text | |
| -> Text | |
| -> Text | |
| -> ServerCertificateMetadata |
Creates a value of ServerCertificateMetadata with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
scmUploadDate- The date when the server certificate was uploaded.scmExpiration- The date on which the certificate is set to expire.scmPath- The path to the server certificate. For more information about paths, see IAM Identifiers in the Using IAM guide.scmServerCertificateName- The name that identifies the server certificate.scmServerCertificateId- The stable and unique string identifying the server certificate. For more information about IDs, see IAM Identifiers in the Using IAM guide.scmARN- The Amazon Resource Name (ARN) specifying the server certificate. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.
scmUploadDate :: Lens' ServerCertificateMetadata (Maybe UTCTime) #
The date when the server certificate was uploaded.
scmExpiration :: Lens' ServerCertificateMetadata (Maybe UTCTime) #
The date on which the certificate is set to expire.
scmPath :: Lens' ServerCertificateMetadata Text #
The path to the server certificate. For more information about paths, see IAM Identifiers in the Using IAM guide.
scmServerCertificateName :: Lens' ServerCertificateMetadata Text #
The name that identifies the server certificate.
scmServerCertificateId :: Lens' ServerCertificateMetadata Text #
The stable and unique string identifying the server certificate. For more information about IDs, see IAM Identifiers in the Using IAM guide.
scmARN :: Lens' ServerCertificateMetadata Text #
The Amazon Resource Name (ARN) specifying the server certificate. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.
ServiceSpecificCredential
data ServiceSpecificCredential #
Contains the details of a service-specific credential.
See: serviceSpecificCredential smart constructor.
Instances
Arguments
| :: UTCTime | |
| -> Text | |
| -> Text | |
| -> Text | |
| -> Text | |
| -> Text | |
| -> StatusType | |
| -> ServiceSpecificCredential |
Creates a value of ServiceSpecificCredential with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sscCreateDate- The date and time, in ISO 8601 date-time format , when the service-specific credential were created.sscServiceName- The name of the service associated with the service-specific credential.sscServiceUserName- The generated user name for the service-specific credential. This value is generated by combining the IAM user's name combined with the ID number of the AWS account, as injane-at-123456789012, for example. This value cannot be configured by the user.sscServicePassword- The generated password for the service-specific credential.sscServiceSpecificCredentialId- The unique identifier for the service-specific credential.sscUserName- The name of the IAM user associated with the service-specific credential.sscStatus- The status of the service-specific credential.Activemeans that the key is valid for API calls, whileInactivemeans it is not.
sscCreateDate :: Lens' ServiceSpecificCredential UTCTime #
The date and time, in ISO 8601 date-time format , when the service-specific credential were created.
sscServiceName :: Lens' ServiceSpecificCredential Text #
The name of the service associated with the service-specific credential.
sscServiceUserName :: Lens' ServiceSpecificCredential Text #
The generated user name for the service-specific credential. This value is generated by combining the IAM user's name combined with the ID number of the AWS account, as in jane-at-123456789012 , for example. This value cannot be configured by the user.
sscServicePassword :: Lens' ServiceSpecificCredential Text #
The generated password for the service-specific credential.
sscServiceSpecificCredentialId :: Lens' ServiceSpecificCredential Text #
The unique identifier for the service-specific credential.
sscUserName :: Lens' ServiceSpecificCredential Text #
The name of the IAM user associated with the service-specific credential.
sscStatus :: Lens' ServiceSpecificCredential StatusType #
The status of the service-specific credential. Active means that the key is valid for API calls, while Inactive means it is not.
ServiceSpecificCredentialMetadata
data ServiceSpecificCredentialMetadata #
Contains additional details about a service-specific credential.
See: serviceSpecificCredentialMetadata smart constructor.
Instances
serviceSpecificCredentialMetadata #
Arguments
| :: Text | |
| -> StatusType | |
| -> Text | |
| -> UTCTime | |
| -> Text | |
| -> Text | |
| -> ServiceSpecificCredentialMetadata |
Creates a value of ServiceSpecificCredentialMetadata with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sscmUserName- The name of the IAM user associated with the service-specific credential.sscmStatus- The status of the service-specific credential.Activemeans that the key is valid for API calls, whileInactivemeans it is not.sscmServiceUserName- The generated user name for the service-specific credential.sscmCreateDate- The date and time, in ISO 8601 date-time format , when the service-specific credential were created.sscmServiceSpecificCredentialId- The unique identifier for the service-specific credential.sscmServiceName- The name of the service associated with the service-specific credential.
sscmUserName :: Lens' ServiceSpecificCredentialMetadata Text #
The name of the IAM user associated with the service-specific credential.
sscmStatus :: Lens' ServiceSpecificCredentialMetadata StatusType #
The status of the service-specific credential. Active means that the key is valid for API calls, while Inactive means it is not.
sscmServiceUserName :: Lens' ServiceSpecificCredentialMetadata Text #
The generated user name for the service-specific credential.
sscmCreateDate :: Lens' ServiceSpecificCredentialMetadata UTCTime #
The date and time, in ISO 8601 date-time format , when the service-specific credential were created.
sscmServiceSpecificCredentialId :: Lens' ServiceSpecificCredentialMetadata Text #
The unique identifier for the service-specific credential.
sscmServiceName :: Lens' ServiceSpecificCredentialMetadata Text #
The name of the service associated with the service-specific credential.
SigningCertificate
data SigningCertificate #
Contains information about an X.509 signing certificate.
This data type is used as a response element in the UploadSigningCertificate and ListSigningCertificates operations.
See: signingCertificate smart constructor.
Instances
Arguments
| :: Text | |
| -> Text | |
| -> Text | |
| -> StatusType | |
| -> SigningCertificate |
Creates a value of SigningCertificate with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
scUploadDate- The date when the signing certificate was uploaded.scUserName- The name of the user the signing certificate is associated with.scCertificateId- The ID for the signing certificate.scCertificateBody- The contents of the signing certificate.scStatus- The status of the signing certificate.Activemeans that the key is valid for API calls, whileInactivemeans it is not.
scUploadDate :: Lens' SigningCertificate (Maybe UTCTime) #
The date when the signing certificate was uploaded.
scUserName :: Lens' SigningCertificate Text #
The name of the user the signing certificate is associated with.
scCertificateId :: Lens' SigningCertificate Text #
The ID for the signing certificate.
scCertificateBody :: Lens' SigningCertificate Text #
The contents of the signing certificate.
scStatus :: Lens' SigningCertificate StatusType #
The status of the signing certificate. Active means that the key is valid for API calls, while Inactive means it is not.
SimulatePolicyResponse
data SimulatePolicyResponse #
Contains the response to a successful SimulatePrincipalPolicy or SimulateCustomPolicy request.
See: simulatePolicyResponse smart constructor.
Instances
simulatePolicyResponse :: SimulatePolicyResponse #
Creates a value of SimulatePolicyResponse with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
spEvaluationResults- The results of the simulation.spMarker- WhenIsTruncatedistrue, this element is present and contains the value to use for theMarkerparameter in a subsequent pagination request.spIsTruncated- A flag that indicates whether there are more items to return. If your results were truncated, you can make a subsequent pagination request using theMarkerrequest parameter to retrieve more items. Note that IAM might return fewer than theMaxItemsnumber of results even when there are more results available. We recommend that you checkIsTruncatedafter every call to ensure that you receive all of your results.
spEvaluationResults :: Lens' SimulatePolicyResponse [EvaluationResult] #
The results of the simulation.
spMarker :: Lens' SimulatePolicyResponse (Maybe Text) #
When IsTruncated is true , this element is present and contains the value to use for the Marker parameter in a subsequent pagination request.
spIsTruncated :: Lens' SimulatePolicyResponse (Maybe Bool) #
A flag that indicates whether there are more items to return. If your results were truncated, you can make a subsequent pagination request using the Marker request parameter to retrieve more items. Note that IAM might return fewer than the MaxItems number of results even when there are more results available. We recommend that you check IsTruncated after every call to ensure that you receive all of your results.
Statement
Contains a reference to a Statement element in a policy document that determines the result of the simulation.
This data type is used by the MatchedStatements member of the EvaluationResult
See: statement smart constructor.
Instances
| Eq Statement # | |
| Data Statement # | |
Defined in Network.AWS.IAM.Types.Product Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Statement -> c Statement # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Statement # toConstr :: Statement -> Constr # dataTypeOf :: Statement -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c Statement) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Statement) # gmapT :: (forall b. Data b => b -> b) -> Statement -> Statement # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Statement -> r # gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Statement -> r # gmapQ :: (forall d. Data d => d -> u) -> Statement -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> Statement -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> Statement -> m Statement # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Statement -> m Statement # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Statement -> m Statement # | |
| Read Statement # | |
| Show Statement # | |
| Generic Statement # | |
| Hashable Statement # | |
Defined in Network.AWS.IAM.Types.Product | |
| FromXML Statement # | |
| NFData Statement # | |
Defined in Network.AWS.IAM.Types.Product | |
| type Rep Statement # | |
Defined in Network.AWS.IAM.Types.Product type Rep Statement = D1 (MetaData "Statement" "Network.AWS.IAM.Types.Product" "amazonka-iam-1.6.0-KLHg33OPBsA2oss7MTCyZq" False) (C1 (MetaCons "Statement'" PrefixI True) ((S1 (MetaSel (Just "_sSourcePolicyType") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe PolicySourceType)) :*: S1 (MetaSel (Just "_sSourcePolicyId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 (MetaSel (Just "_sEndPosition") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Position)) :*: S1 (MetaSel (Just "_sStartPosition") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Position))))) | |
Creates a value of Statement with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sSourcePolicyType- The type of the policy.sSourcePolicyId- The identifier of the policy that was provided as an input.sEndPosition- The row and column of the end of aStatementin an IAM policy.sStartPosition- The row and column of the beginning of theStatementin an IAM policy.
sSourcePolicyType :: Lens' Statement (Maybe PolicySourceType) #
The type of the policy.
sSourcePolicyId :: Lens' Statement (Maybe Text) #
The identifier of the policy that was provided as an input.
sEndPosition :: Lens' Statement (Maybe Position) #
The row and column of the end of a Statement in an IAM policy.
sStartPosition :: Lens' Statement (Maybe Position) #
The row and column of the beginning of the Statement in an IAM policy.
User
Contains information about an IAM user entity.
This data type is used as a response element in the following operations:
CreateUserGetUserListUsers
See: user smart constructor.
Instances
| Eq User # | |
| Data User # | |
Defined in Network.AWS.IAM.Types.Product Methods gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> User -> c User # gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c User # dataTypeOf :: User -> DataType # dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c User) # dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c User) # gmapT :: (forall b. Data b => b -> b) -> User -> User # gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> User -> r # gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> User -> r # gmapQ :: (forall d. Data d => d -> u) -> User -> [u] # gmapQi :: Int -> (forall d. Data d => d -> u) -> User -> u # gmapM :: Monad m => (forall d. Data d => d -> m d) -> User -> m User # gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> User -> m User # gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> User -> m User # | |
| Read User # | |
| Show User # | |
| Generic User # | |
| Hashable User # | |
Defined in Network.AWS.IAM.Types.Product | |
| FromXML User # | |
| NFData User # | |
Defined in Network.AWS.IAM.Types.Product | |
| type Rep User # | |
Defined in Network.AWS.IAM.Types.Product type Rep User = D1 (MetaData "User" "Network.AWS.IAM.Types.Product" "amazonka-iam-1.6.0-KLHg33OPBsA2oss7MTCyZq" False) (C1 (MetaCons "User'" PrefixI True) ((S1 (MetaSel (Just "_uPasswordLastUsed") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe ISO8601)) :*: (S1 (MetaSel (Just "_uPath") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "_uUserName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text))) :*: (S1 (MetaSel (Just "_uUserId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: (S1 (MetaSel (Just "_uARN") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "_uCreateDate") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 ISO8601))))) | |
Creates a value of User with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
uPasswordLastUsed- The date and time, in ISO 8601 date-time format , when the user's password was last used to sign in to an AWS website. For a list of AWS websites that capture a user's last sign-in time, see the Credential Reports topic in the Using IAM guide. If a password is used more than once in a five-minute span, only the first use is returned in this field. If the field is null (no value) then it indicates that they never signed in with a password. This can be because: * The user never had a password. * A password exists but has not been used since IAM started tracking this information on October 20th, 2014. A null does not mean that the user never had a password. Also, if the user does not currently have a password, but had one in the past, then this field contains the date and time the most recent password was used. This value is returned only in theGetUserandListUsersoperations.uPath- The path to the user. For more information about paths, see IAM Identifiers in the Using IAM guide.uUserName- The friendly name identifying the user.uUserId- The stable and unique string identifying the user. For more information about IDs, see IAM Identifiers in the Using IAM guide.uARN- The Amazon Resource Name (ARN) that identifies the user. For more information about ARNs and how to use ARNs in policies, see IAM Identifiers in the Using IAM guide.uCreateDate- The date and time, in ISO 8601 date-time format , when the user was created.
uPasswordLastUsed :: Lens' User (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the user's password was last used to sign in to an AWS website. For a list of AWS websites that capture a user's last sign-in time, see the Credential Reports topic in the Using IAM guide. If a password is used more than once in a five-minute span, only the first use is returned in this field. If the field is null (no value) then it indicates that they never signed in with a password. This can be because: * The user never had a password. * A password exists but has not been used since IAM started tracking this information on October 20th, 2014. A null does not mean that the user never had a password. Also, if the user does not currently have a password, but had one in the past, then this field contains the date and time the most recent password was used. This value is returned only in the GetUser and ListUsers operations.
The path to the user. For more information about paths, see IAM Identifiers in the Using IAM guide.
The stable and unique string identifying the user. For more information about IDs, see IAM Identifiers in the Using IAM guide.
The Amazon Resource Name (ARN) that identifies the user. For more information about ARNs and how to use ARNs in policies, see IAM Identifiers in the Using IAM guide.
uCreateDate :: Lens' User UTCTime #
The date and time, in ISO 8601 date-time format , when the user was created.
UserDetail
data UserDetail #
Contains information about an IAM user, including all the user's policies and all the IAM groups the user is in.
This data type is used as a response element in the GetAccountAuthorizationDetails operation.
See: userDetail smart constructor.
Instances
Creates a value of UserDetail with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
udGroupList- A list of IAM groups that the user is in.udARN- Undocumented member.udPath- The path to the user. For more information about paths, see IAM Identifiers in the Using IAM guide.udCreateDate- The date and time, in ISO 8601 date-time format , when the user was created.udUserName- The friendly name identifying the user.udUserId- The stable and unique string identifying the user. For more information about IDs, see IAM Identifiers in the Using IAM guide.udUserPolicyList- A list of the inline policies embedded in the user.udAttachedManagedPolicies- A list of the managed policies attached to the user.
udGroupList :: Lens' UserDetail [Text] #
A list of IAM groups that the user is in.
udPath :: Lens' UserDetail (Maybe Text) #
The path to the user. For more information about paths, see IAM Identifiers in the Using IAM guide.
udCreateDate :: Lens' UserDetail (Maybe UTCTime) #
The date and time, in ISO 8601 date-time format , when the user was created.
udUserName :: Lens' UserDetail (Maybe Text) #
The friendly name identifying the user.
udUserId :: Lens' UserDetail (Maybe Text) #
The stable and unique string identifying the user. For more information about IDs, see IAM Identifiers in the Using IAM guide.
udUserPolicyList :: Lens' UserDetail [PolicyDetail] #
A list of the inline policies embedded in the user.
udAttachedManagedPolicies :: Lens' UserDetail [AttachedPolicy] #
A list of the managed policies attached to the user.
VirtualMFADevice
data VirtualMFADevice #
Contains information about a virtual MFA device.
See: virtualMFADevice smart constructor.
Instances
Arguments
| :: Text | |
| -> VirtualMFADevice |
Creates a value of VirtualMFADevice with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
vmdQRCodePNG- A QR code PNG image that encodesotpauth:/totp$virtualMFADeviceName$AccountName?secret=$Base32Stringwhere> virtualMFADeviceNameis one of the create call arguments,AccountNameis the user name if set (otherwise, the account ID otherwise), andBase32Stringis the seed in Base32 format. TheBase32String@ value is Base64-encoded. -- Note: ThisLensautomatically encodes and decodes Base64 data. The underlying isomorphism will encode to Base64 representation during serialisation, and decode from Base64 representation during deserialisation. ThisLensaccepts and returns only raw unencoded data.vmdBase32StringSeed- The Base32 seed defined as specified in RFC3548 . TheBase32StringSeedis Base64-encoded. -- Note: ThisLensautomatically encodes and decodes Base64 data. The underlying isomorphism will encode to Base64 representation during serialisation, and decode from Base64 representation during deserialisation. ThisLensaccepts and returns only raw unencoded data.vmdUser- The IAM user associated with this virtual MFA device.vmdEnableDate- The date and time on which the virtual MFA device was enabled.vmdSerialNumber- The serial number associated withVirtualMFADevice.
vmdQRCodePNG :: Lens' VirtualMFADevice (Maybe ByteString) #
A QR code PNG image that encodes otpauth:/totp$virtualMFADeviceName$AccountName?secret=$Base32String where > virtualMFADeviceName is one of the create call arguments, AccountName is the user name if set (otherwise, the account ID otherwise), and Base32String is the seed in Base32 format. The Base32String@ value is Base64-encoded. -- Note: This Lens automatically encodes and decodes Base64 data. The underlying isomorphism will encode to Base64 representation during serialisation, and decode from Base64 representation during deserialisation. This Lens accepts and returns only raw unencoded data.
vmdBase32StringSeed :: Lens' VirtualMFADevice (Maybe ByteString) #
The Base32 seed defined as specified in RFC3548 . The Base32StringSeed is Base64-encoded. -- Note: This Lens automatically encodes and decodes Base64 data. The underlying isomorphism will encode to Base64 representation during serialisation, and decode from Base64 representation during deserialisation. This Lens accepts and returns only raw unencoded data.
vmdUser :: Lens' VirtualMFADevice (Maybe User) #
The IAM user associated with this virtual MFA device.
vmdEnableDate :: Lens' VirtualMFADevice (Maybe UTCTime) #
The date and time on which the virtual MFA device was enabled.
vmdSerialNumber :: Lens' VirtualMFADevice Text #
The serial number associated with VirtualMFADevice .