amazonka-iam-1.3.5: Amazon Identity and Access Management SDK.

Copyright(c) 2013-2015 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone
LanguageHaskell2010

Network.AWS.IAM.Types

Contents

Description

 

Synopsis

Service Configuration

iAM :: Service Source

API version '2010-05-08' of the Amazon Identity and Access Management SDK configuration.

Errors

_CredentialReportNotPresentException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the credential report does not exist. To generate a credential report, use GenerateCredentialReport.

_CredentialReportNotReadyException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the credential report is still being generated.

_MalformedPolicyDocumentException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the policy document was malformed. The error message describes the specific error.

_EntityAlreadyExistsException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because it attempted to create a resource that already exists.

_MalformedCertificateException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the certificate was malformed or expired. The error message describes the specific error.

_CredentialReportExpiredException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the most recent credential report has expired. To generate a new credential report, use GenerateCredentialReport. For more information about credential report expiration, see Getting Credential Reports in the IAM User Guide.

_DuplicateCertificateException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the same certificate is associated with an IAM user in the account.

_DeleteConflictException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.

_NoSuchEntityException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because it referenced an entity that does not exist. The error message describes the entity.

_InvalidCertificateException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the certificate is invalid.

_UnrecognizedPublicKeyEncodingException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the public key encoding format is unsupported or unrecognized.

_InvalidUserTypeException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the type of user for the transaction was incorrect.

_ServiceFailureException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request processing has failed because of an unknown error, exception or failure.

_InvalidInputException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because an invalid or out-of-range value was supplied for an input parameter.

_InvalidPublicKeyException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the public key is malformed or otherwise invalid.

_InvalidAuthenticationCodeException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the authentication code was not recognized. The error message describes the specific error.

_EntityTemporarilyUnmodifiableException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.

_DuplicateSSHPublicKeyException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the SSH public key is already associated with the specified IAM user.

_KeyPairMismatchException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the public key certificate and the private key do not match.

_PolicyEvaluationException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request failed because a provided policy could not be successfully evaluated. An additional detail message indicates the source of the failure.

_PasswordPolicyViolationException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because the provided password did not meet the requirements imposed by the account password policy.

_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source

The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.

AssignmentStatusType

data AssignmentStatusType Source

Constructors

Any 
Assigned 
Unassigned 

Instances

ContextKeyTypeEnum

data ContextKeyTypeEnum Source

Constructors

Binary 
BinaryList 
Boolean 
BooleanList 
Date 
DateList 
IP 
IPList 
Numeric 
NumericList 
String 
StringList 

Instances

EncodingType

data EncodingType Source

Constructors

Pem 
SSH 

Instances

EntityType

data EntityType Source

Constructors

ETAWSManagedPolicy 
ETGroup 
ETLocalManagedPolicy 
ETRole 
ETUser 

Instances

PolicyEvaluationDecisionType

data PolicyEvaluationDecisionType Source

Constructors

Allowed 
ExplicitDeny 
ImplicitDeny 

Instances

PolicyScopeType

data PolicyScopeType Source

Constructors

AWS 
All 
Local 

Instances

PolicySourceType

data PolicySourceType Source

Constructors

AWSManaged 
Group 
None 
Resource 
Role 
User 
UserManaged 

Instances

ReportFormatType

data ReportFormatType Source

Constructors

TextCSV 

Instances

ReportStateType

data ReportStateType Source

Constructors

Complete 
Inprogress 
Started 

Instances

StatusType

data StatusType Source

Constructors

Active 
Inactive 

Instances

SummaryKeyType

data SummaryKeyType Source

Constructors

AccessKeysPerUserQuota 
AccountAccessKeysPresent 
AccountMFAEnabled 
AccountSigningCertificatesPresent 
AttachedPoliciesPerGroupQuota 
AttachedPoliciesPerRoleQuota 
AttachedPoliciesPerUserQuota 
GroupPolicySizeQuota 
Groups 
GroupsPerUserQuota 
GroupsQuota 
MFADevices 
MFADevicesInUse 
Policies 
PoliciesQuota 
PolicySizeQuota 
PolicyVersionsInUse 
PolicyVersionsInUseQuota 
ServerCertificates 
ServerCertificatesQuota 
SigningCertificatesPerUserQuota 
UserPolicySizeQuota 
Users 
UsersQuota 
VersionsPerPolicyQuota 

Instances

AccessKey

data AccessKey Source

Contains information about an AWS access key.

This data type is used as a response element in the CreateAccessKey and ListAccessKeys actions.

The SecretAccessKey value is returned only in response to CreateAccessKey. You can get a secret access key only when you first create an access key; you cannot recover the secret access key later. If you lose a secret access key, you must create a new access key.

See: accessKey smart constructor.

Instances

accessKey Source

Arguments

:: Text

akUserName

-> Text

akAccessKeyId

-> StatusType

akStatus

-> Text

akSecretAccessKey

-> AccessKey 

Creates a value of AccessKey with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

akCreateDate :: Lens' AccessKey (Maybe UTCTime) Source

The date when the access key was created.

akUserName :: Lens' AccessKey Text Source

The name of the IAM user that the access key is associated with.

akAccessKeyId :: Lens' AccessKey Text Source

The ID for this access key.

akStatus :: Lens' AccessKey StatusType Source

The status of the access key. Active means the key is valid for API calls, while Inactive means it is not.

akSecretAccessKey :: Lens' AccessKey Text Source

The secret key used to sign requests.

AccessKeyLastUsed

data AccessKeyLastUsed Source

Contains information about the last time an AWS access key was used.

This data type is used as a response element in the GetAccessKeyLastUsed action.

See: accessKeyLastUsed smart constructor.

Instances

accessKeyLastUsed Source

Arguments

:: UTCTime

akluLastUsedDate

-> Text

akluServiceName

-> Text

akluRegion

-> AccessKeyLastUsed 

Creates a value of AccessKeyLastUsed with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

akluLastUsedDate :: Lens' AccessKeyLastUsed UTCTime Source

The date and time, in ISO 8601 date-time format, when the access key was most recently used. This field is null when:

  • The user does not have an access key.
  • An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015.
  • There is no sign-in data associated with the user

akluServiceName :: Lens' AccessKeyLastUsed Text Source

The name of the AWS service with which this access key was most recently used. This field is null when:

  • The user does not have an access key.
  • An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015.
  • There is no sign-in data associated with the user

akluRegion :: Lens' AccessKeyLastUsed Text Source

The AWS region where this access key was most recently used. This field is null when:

  • The user does not have an access key.
  • An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015.
  • There is no sign-in data associated with the user

For more information about AWS regions, see Regions and Endpoints in the Amazon Web Services General Reference.

AccessKeyMetadata

data AccessKeyMetadata Source

Contains information about an AWS access key, without its secret key.

This data type is used as a response element in the ListAccessKeys action.

See: accessKeyMetadata smart constructor.

Instances

accessKeyMetadata :: AccessKeyMetadata Source

Creates a value of AccessKeyMetadata with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

akmStatus :: Lens' AccessKeyMetadata (Maybe StatusType) Source

The status of the access key. Active means the key is valid for API calls; Inactive means it is not.

akmCreateDate :: Lens' AccessKeyMetadata (Maybe UTCTime) Source

The date when the access key was created.

akmUserName :: Lens' AccessKeyMetadata (Maybe Text) Source

The name of the IAM user that the key is associated with.

akmAccessKeyId :: Lens' AccessKeyMetadata (Maybe Text) Source

The ID for this access key.

AttachedPolicy

data AttachedPolicy Source

Contains information about an attached policy.

An attached policy is a managed policy that has been attached to a user, group, or role. This data type is used as a response element in the ListAttachedGroupPolicies, ListAttachedRolePolicies, ListAttachedUserPolicies, and GetAccountAuthorizationDetails actions.

For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.

See: attachedPolicy smart constructor.

Instances

attachedPolicy :: AttachedPolicy Source

Creates a value of AttachedPolicy with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

apPolicyName :: Lens' AttachedPolicy (Maybe Text) Source

The friendly name of the attached policy.

apPolicyARN :: Lens' AttachedPolicy (Maybe Text) Source

Undocumented member.

ContextEntry

data ContextEntry Source

Contains information about a condition context key. It includes the name of the key and specifies the value (or values, if the context key supports multiple values) to use in the simulation. This information is used when evaluating the Condition elements of the input policies.

This data type is used as an input parameter to SimulatePolicy.

See: contextEntry smart constructor.

Instances

contextEntry :: ContextEntry Source

Creates a value of ContextEntry with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

ceContextKeyValues :: Lens' ContextEntry [Text] Source

The value (or values, if the condition context key supports multiple values) to provide to the simulation for use when the key is referenced by a Condition element in an input policy.

ceContextKeyName :: Lens' ContextEntry (Maybe Text) Source

The full name of a condition context key, including the service prefix. For example, 'aws:SourceIp' or 's3:VersionId'.

ceContextKeyType :: Lens' ContextEntry (Maybe ContextKeyTypeEnum) Source

The data type of the value (or values) specified in the ContextKeyValues parameter.

EvaluationResult

data EvaluationResult Source

Contains the results of a simulation.

This data type is used by the return parameter of SimulatePolicy.

See: evaluationResult smart constructor.

Instances

evaluationResult Source

Arguments

:: Text

erEvalActionName

-> Text

erEvalResourceName

-> PolicyEvaluationDecisionType

erEvalDecision

-> EvaluationResult 

Creates a value of EvaluationResult with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

erMatchedStatements :: Lens' EvaluationResult [Statement] Source

A list of the statements in the input policies that determine the result for this scenario. Remember that even if multiple statements allow the action on the resource, if only one statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.

erEvalDecisionDetails :: Lens' EvaluationResult (HashMap Text PolicyEvaluationDecisionType) Source

Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access. See How IAM Roles Differ from Resource-based Policies

erMissingContextValues :: Lens' EvaluationResult [Text] Source

A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.

If the response includes any keys in this list, then the reported results might be untrustworthy because the simulation could not completely evaluate all of the conditions specified in the policies that would occur in a real world request.

erEvalActionName :: Lens' EvaluationResult Text Source

The name of the API action tested on the indicated resource.

erEvalResourceName :: Lens' EvaluationResult Text Source

The ARN of the resource that the indicated API action was tested on.

erEvalDecision :: Lens' EvaluationResult PolicyEvaluationDecisionType Source

The result of the simulation.

GetContextKeysForPolicyResponse

data GetContextKeysForPolicyResponse Source

Contains the response to a successful GetContextKeysForPrincipalPolicy or GetContextKeysForCustomPolicy request.

See: getContextKeysForPolicyResponse smart constructor.

Instances

getContextKeysForPolicyResponse :: GetContextKeysForPolicyResponse Source

Creates a value of GetContextKeysForPolicyResponse with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

gckfpContextKeyNames :: Lens' GetContextKeysForPolicyResponse [Text] Source

The list of context keys that are used in the Condition elements of the input policies.

Group

data Group Source

Contains information about an IAM group entity.

This data type is used as a response element in the following actions:

  • CreateGroup
  • GetGroup
  • ListGroups

See: group' smart constructor.

Instances

group' Source

Arguments

:: Text

gPath

-> Text

gGroupName

-> Text

gGroupId

-> Text

gARN

-> UTCTime

gCreateDate

-> Group 

Creates a value of Group with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

gPath :: Lens' Group Text Source

The path to the group. For more information about paths, see IAM Identifiers in the Using IAM guide.

gGroupName :: Lens' Group Text Source

The friendly name that identifies the group.

gGroupId :: Lens' Group Text Source

The stable and unique string identifying the group. For more information about IDs, see IAM Identifiers in the Using IAM guide.

gARN :: Lens' Group Text Source

The Amazon Resource Name (ARN) specifying the group. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.

gCreateDate :: Lens' Group UTCTime Source

The date and time, in ISO 8601 date-time format, when the group was created.

GroupDetail

data GroupDetail Source

Contains information about an IAM group, including all of the group's policies.

This data type is used as a response element in the GetAccountAuthorizationDetails action.

See: groupDetail smart constructor.

Instances

groupDetail :: GroupDetail Source

Creates a value of GroupDetail with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

gdARN :: Lens' GroupDetail (Maybe Text) Source

Undocumented member.

gdPath :: Lens' GroupDetail (Maybe Text) Source

The path to the group. For more information about paths, see IAM Identifiers in the Using IAM guide.

gdCreateDate :: Lens' GroupDetail (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the group was created.

gdGroupId :: Lens' GroupDetail (Maybe Text) Source

The stable and unique string identifying the group. For more information about IDs, see IAM Identifiers in the Using IAM guide.

gdGroupPolicyList :: Lens' GroupDetail [PolicyDetail] Source

A list of the inline policies embedded in the group.

gdGroupName :: Lens' GroupDetail (Maybe Text) Source

The friendly name that identifies the group.

gdAttachedManagedPolicies :: Lens' GroupDetail [AttachedPolicy] Source

A list of the managed policies attached to the group.

InstanceProfile

data InstanceProfile Source

Contains information about an instance profile.

This data type is used as a response element in the following actions:

  • CreateInstanceProfile
  • GetInstanceProfile
  • ListInstanceProfiles
  • ListInstanceProfilesForRole

See: instanceProfile smart constructor.

Instances

instanceProfile Source

Arguments

:: Text

ipPath

-> Text

ipInstanceProfileName

-> Text

ipInstanceProfileId

-> Text

ipARN

-> UTCTime

ipCreateDate

-> InstanceProfile 

Creates a value of InstanceProfile with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

ipPath :: Lens' InstanceProfile Text Source

The path to the instance profile. For more information about paths, see IAM Identifiers in the Using IAM guide.

ipInstanceProfileName :: Lens' InstanceProfile Text Source

The name identifying the instance profile.

ipInstanceProfileId :: Lens' InstanceProfile Text Source

The stable and unique string identifying the instance profile. For more information about IDs, see IAM Identifiers in the Using IAM guide.

ipARN :: Lens' InstanceProfile Text Source

The Amazon Resource Name (ARN) specifying the instance profile. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.

ipCreateDate :: Lens' InstanceProfile UTCTime Source

The date when the instance profile was created.

ipRoles :: Lens' InstanceProfile [Role] Source

The role associated with the instance profile.

LoginProfile

data LoginProfile Source

Contains the user name and password create date for a user.

This data type is used as a response element in the CreateLoginProfile and GetLoginProfile actions.

See: loginProfile smart constructor.

Instances

loginProfile Source

Arguments

:: Text

lpUserName

-> UTCTime

lpCreateDate

-> LoginProfile 

Creates a value of LoginProfile with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

lpPasswordResetRequired :: Lens' LoginProfile (Maybe Bool) Source

Specifies whether the user is required to set a new password on next sign-in.

lpUserName :: Lens' LoginProfile Text Source

The name of the user, which can be used for signing in to the AWS Management Console.

lpCreateDate :: Lens' LoginProfile UTCTime Source

The date when the password for the user was created.

MFADevice

data MFADevice Source

Contains information about an MFA device.

This data type is used as a response element in the ListMFADevices action.

See: mfaDevice smart constructor.

Instances

mfaDevice Source

Arguments

:: Text

mdUserName

-> Text

mdSerialNumber

-> UTCTime

mdEnableDate

-> MFADevice 

Creates a value of MFADevice with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

mdUserName :: Lens' MFADevice Text Source

The user with whom the MFA device is associated.

mdSerialNumber :: Lens' MFADevice Text Source

The serial number that uniquely identifies the MFA device. For virtual MFA devices, the serial number is the device ARN.

mdEnableDate :: Lens' MFADevice UTCTime Source

The date when the MFA device was enabled for the user.

ManagedPolicyDetail

data ManagedPolicyDetail Source

Contains information about a managed policy, including the policy's ARN, versions, and the number of principal entities (users, groups, and roles) that the policy is attached to.

This data type is used as a response element in the GetAccountAuthorizationDetails action.

For more information about managed policies, see Managed Policies and Inline Policies in the Using IAM guide.

See: managedPolicyDetail smart constructor.

Instances

managedPolicyDetail :: ManagedPolicyDetail Source

Creates a value of ManagedPolicyDetail with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

mpdPolicyName :: Lens' ManagedPolicyDetail (Maybe Text) Source

The friendly name (not ARN) identifying the policy.

mpdARN :: Lens' ManagedPolicyDetail (Maybe Text) Source

Undocumented member.

mpdUpdateDate :: Lens' ManagedPolicyDetail (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the policy was last updated.

When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.

mpdPolicyId :: Lens' ManagedPolicyDetail (Maybe Text) Source

The stable and unique string identifying the policy.

For more information about IDs, see IAM Identifiers in the Using IAM guide.

mpdPath :: Lens' ManagedPolicyDetail (Maybe Text) Source

The path to the policy.

For more information about paths, see IAM Identifiers in the Using IAM guide.

mpdPolicyVersionList :: Lens' ManagedPolicyDetail [PolicyVersion] Source

A list containing information about the versions of the policy.

mpdCreateDate :: Lens' ManagedPolicyDetail (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the policy was created.

mpdIsAttachable :: Lens' ManagedPolicyDetail (Maybe Bool) Source

Specifies whether the policy can be attached to an IAM user, group, or role.

mpdDefaultVersionId :: Lens' ManagedPolicyDetail (Maybe Text) Source

The identifier for the version of the policy that is set as the default (operative) version.

For more information about policy versions, see Versioning for Managed Policies in the Using IAM guide.

mpdAttachmentCount :: Lens' ManagedPolicyDetail (Maybe Int) Source

The number of principal entities (users, groups, and roles) that the policy is attached to.

mpdDescription :: Lens' ManagedPolicyDetail (Maybe Text) Source

A friendly description of the policy.

OpenIdConnectProviderListEntry

data OpenIdConnectProviderListEntry Source

Contains the Amazon Resource Name (ARN) for an IAM OpenID Connect provider.

See: openIdConnectProviderListEntry smart constructor.

Instances

openIdConnectProviderListEntry :: OpenIdConnectProviderListEntry Source

Creates a value of OpenIdConnectProviderListEntry with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

oicpleARN :: Lens' OpenIdConnectProviderListEntry (Maybe Text) Source

Undocumented member.

PasswordPolicy

data PasswordPolicy Source

Contains information about the account password policy.

This data type is used as a response element in the GetAccountPasswordPolicy action.

See: passwordPolicy smart constructor.

Instances

passwordPolicy :: PasswordPolicy Source

Creates a value of PasswordPolicy with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

ppExpirePasswords :: Lens' PasswordPolicy (Maybe Bool) Source

Specifies whether IAM users are required to change their password after a specified number of days.

ppMinimumPasswordLength :: Lens' PasswordPolicy (Maybe Natural) Source

Minimum length to require for IAM user passwords.

ppRequireNumbers :: Lens' PasswordPolicy (Maybe Bool) Source

Specifies whether to require numbers for IAM user passwords.

ppPasswordReusePrevention :: Lens' PasswordPolicy (Maybe Natural) Source

Specifies the number of previous passwords that IAM users are prevented from reusing.

ppRequireLowercaseCharacters :: Lens' PasswordPolicy (Maybe Bool) Source

Specifies whether to require lowercase characters for IAM user passwords.

ppMaxPasswordAge :: Lens' PasswordPolicy (Maybe Natural) Source

The number of days that an IAM user password is valid.

ppHardExpiry :: Lens' PasswordPolicy (Maybe Bool) Source

Specifies whether IAM users are prevented from setting a new password after their password has expired.

ppRequireSymbols :: Lens' PasswordPolicy (Maybe Bool) Source

Specifies whether to require symbols for IAM user passwords.

ppRequireUppercaseCharacters :: Lens' PasswordPolicy (Maybe Bool) Source

Specifies whether to require uppercase characters for IAM user passwords.

ppAllowUsersToChangePassword :: Lens' PasswordPolicy (Maybe Bool) Source

Specifies whether IAM users are allowed to change their own password.

Policy

data Policy Source

Contains information about a managed policy.

This data type is used as a response element in the CreatePolicy, GetPolicy, and ListPolicies actions.

For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.

See: policy smart constructor.

Instances

policy :: Policy Source

Creates a value of Policy with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

pPolicyName :: Lens' Policy (Maybe Text) Source

The friendly name (not ARN) identifying the policy.

pARN :: Lens' Policy (Maybe Text) Source

Undocumented member.

pUpdateDate :: Lens' Policy (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the policy was last updated.

When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.

pPolicyId :: Lens' Policy (Maybe Text) Source

The stable and unique string identifying the policy.

For more information about IDs, see IAM Identifiers in the Using IAM guide.

pPath :: Lens' Policy (Maybe Text) Source

The path to the policy.

For more information about paths, see IAM Identifiers in the Using IAM guide.

pCreateDate :: Lens' Policy (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the policy was created.

pIsAttachable :: Lens' Policy (Maybe Bool) Source

Specifies whether the policy can be attached to an IAM user, group, or role.

pDefaultVersionId :: Lens' Policy (Maybe Text) Source

The identifier for the version of the policy that is set as the default version.

pAttachmentCount :: Lens' Policy (Maybe Int) Source

The number of entities (users, groups, and roles) that the policy is attached to.

pDescription :: Lens' Policy (Maybe Text) Source

A friendly description of the policy.

This element is included in the response to the GetPolicy operation. It is not included in the response to the ListPolicies operation.

PolicyDetail

data PolicyDetail Source

Contains information about an IAM policy, including the policy document.

This data type is used as a response element in the GetAccountAuthorizationDetails action.

See: policyDetail smart constructor.

Instances

policyDetail :: PolicyDetail Source

Creates a value of PolicyDetail with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

pdPolicyDocument :: Lens' PolicyDetail (Maybe Text) Source

The policy document.

pdPolicyName :: Lens' PolicyDetail (Maybe Text) Source

The name of the policy.

PolicyGroup

data PolicyGroup Source

Contains information about a group that a managed policy is attached to.

This data type is used as a response element in the ListEntitiesForPolicy action.

For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.

See: policyGroup smart constructor.

Instances

policyGroup :: PolicyGroup Source

Creates a value of PolicyGroup with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

pgGroupName :: Lens' PolicyGroup (Maybe Text) Source

The name (friendly name, not ARN) identifying the group.

PolicyRole

data PolicyRole Source

Contains information about a role that a managed policy is attached to.

This data type is used as a response element in the ListEntitiesForPolicy action.

For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.

See: policyRole smart constructor.

Instances

policyRole :: PolicyRole Source

Creates a value of PolicyRole with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

prRoleName :: Lens' PolicyRole (Maybe Text) Source

The name (friendly name, not ARN) identifying the role.

PolicyUser

data PolicyUser Source

Contains information about a user that a managed policy is attached to.

This data type is used as a response element in the ListEntitiesForPolicy action.

For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.

See: policyUser smart constructor.

Instances

policyUser :: PolicyUser Source

Creates a value of PolicyUser with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

puUserName :: Lens' PolicyUser (Maybe Text) Source

The name (friendly name, not ARN) identifying the user.

PolicyVersion

data PolicyVersion Source

Contains information about a version of a managed policy.

This data type is used as a response element in the CreatePolicyVersion, GetPolicyVersion, ListPolicyVersions, and GetAccountAuthorizationDetails actions.

For more information about managed policies, refer to Managed Policies and Inline Policies in the Using IAM guide.

See: policyVersion smart constructor.

Instances

policyVersion :: PolicyVersion Source

Creates a value of PolicyVersion with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

pvVersionId :: Lens' PolicyVersion (Maybe Text) Source

The identifier for the policy version.

Policy version identifiers always begin with v (always lowercase). When a policy is created, the first policy version is v1.

pvCreateDate :: Lens' PolicyVersion (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the policy version was created.

pvDocument :: Lens' PolicyVersion (Maybe Text) Source

The policy document.

The policy document is returned in the response to the GetPolicyVersion and GetAccountAuthorizationDetails operations. It is not returned in the response to the CreatePolicyVersion or ListPolicyVersions operations.

pvIsDefaultVersion :: Lens' PolicyVersion (Maybe Bool) Source

Specifies whether the policy version is set as the policy's default version.

Position

data Position Source

Contains the row and column of a location of a Statement element in a policy document.

This data type is used as a member of the Statement type.

See: position smart constructor.

Instances

position :: Position Source

Creates a value of Position with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

pLine :: Lens' Position (Maybe Int) Source

The line containing the specified position in the document.

pColumn :: Lens' Position (Maybe Int) Source

The column in the line containing the specified position in the document.

Role

data Role Source

Contains information about an IAM role.

This data type is used as a response element in the following actions:

  • CreateRole
  • GetRole
  • ListRoles

See: role smart constructor.

Instances

role Source

Arguments

:: Text

rPath

-> Text

rRoleName

-> Text

rRoleId

-> Text

rARN

-> UTCTime

rCreateDate

-> Role 

Creates a value of Role with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

rAssumeRolePolicyDocument :: Lens' Role (Maybe Text) Source

The policy that grants an entity permission to assume the role.

rPath :: Lens' Role Text Source

The path to the role. For more information about paths, see IAM Identifiers in the Using IAM guide.

rRoleName :: Lens' Role Text Source

The friendly name that identifies the role.

rRoleId :: Lens' Role Text Source

The stable and unique string identifying the role. For more information about IDs, see IAM Identifiers in the Using IAM guide.

rARN :: Lens' Role Text Source

The Amazon Resource Name (ARN) specifying the role. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.

rCreateDate :: Lens' Role UTCTime Source

The date and time, in ISO 8601 date-time format, when the role was created.

RoleDetail

data RoleDetail Source

Contains information about an IAM role, including all of the role's policies.

This data type is used as a response element in the GetAccountAuthorizationDetails action.

See: roleDetail smart constructor.

Instances

roleDetail :: RoleDetail Source

Creates a value of RoleDetail with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

rdAssumeRolePolicyDocument :: Lens' RoleDetail (Maybe Text) Source

The trust policy that grants permission to assume the role.

rdARN :: Lens' RoleDetail (Maybe Text) Source

Undocumented member.

rdPath :: Lens' RoleDetail (Maybe Text) Source

The path to the role. For more information about paths, see IAM Identifiers in the Using IAM guide.

rdInstanceProfileList :: Lens' RoleDetail [InstanceProfile] Source

Undocumented member.

rdCreateDate :: Lens' RoleDetail (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the role was created.

rdRoleName :: Lens' RoleDetail (Maybe Text) Source

The friendly name that identifies the role.

rdRoleId :: Lens' RoleDetail (Maybe Text) Source

The stable and unique string identifying the role. For more information about IDs, see IAM Identifiers in the Using IAM guide.

rdRolePolicyList :: Lens' RoleDetail [PolicyDetail] Source

A list of inline policies embedded in the role. These policies are the role's access (permissions) policies.

rdAttachedManagedPolicies :: Lens' RoleDetail [AttachedPolicy] Source

A list of managed policies attached to the role. These policies are the role's access (permissions) policies.

SAMLProviderListEntry

data SAMLProviderListEntry Source

Contains the list of SAML providers for this account.

See: sAMLProviderListEntry smart constructor.

Instances

sAMLProviderListEntry :: SAMLProviderListEntry Source

Creates a value of SAMLProviderListEntry with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

samlpleARN :: Lens' SAMLProviderListEntry (Maybe Text) Source

The Amazon Resource Name (ARN) of the SAML provider.

samlpleCreateDate :: Lens' SAMLProviderListEntry (Maybe UTCTime) Source

The date and time when the SAML provider was created.

samlpleValidUntil :: Lens' SAMLProviderListEntry (Maybe UTCTime) Source

The expiration date and time for the SAML provider.

SSHPublicKey

data SSHPublicKey Source

Contains information about an SSH public key.

This data type is used as a response element in the GetSSHPublicKey and UploadSSHPublicKey actions.

See: sshPublicKey smart constructor.

Instances

sshPublicKey Source

Arguments

:: Text

spkUserName

-> Text

spkSSHPublicKeyId

-> Text

spkFingerprint

-> Text

spkSSHPublicKeyBody

-> StatusType

spkStatus

-> SSHPublicKey 

Creates a value of SSHPublicKey with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

spkUploadDate :: Lens' SSHPublicKey (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the SSH public key was uploaded.

spkUserName :: Lens' SSHPublicKey Text Source

The name of the IAM user associated with the SSH public key.

spkSSHPublicKeyId :: Lens' SSHPublicKey Text Source

The unique identifier for the SSH public key.

spkFingerprint :: Lens' SSHPublicKey Text Source

The MD5 message digest of the SSH public key.

spkSSHPublicKeyBody :: Lens' SSHPublicKey Text Source

The SSH public key.

spkStatus :: Lens' SSHPublicKey StatusType Source

The status of the SSH public key. Active means the key can be used for authentication with an AWS CodeCommit repository. Inactive means the key cannot be used.

SSHPublicKeyMetadata

data SSHPublicKeyMetadata Source

Contains information about an SSH public key, without the key's body or fingerprint.

This data type is used as a response element in the ListSSHPublicKeys action.

See: sshPublicKeyMetadata smart constructor.

Instances

sshPublicKeyMetadata Source

Arguments

:: Text

spkmUserName

-> Text

spkmSSHPublicKeyId

-> StatusType

spkmStatus

-> UTCTime

spkmUploadDate

-> SSHPublicKeyMetadata 

Creates a value of SSHPublicKeyMetadata with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

spkmUserName :: Lens' SSHPublicKeyMetadata Text Source

The name of the IAM user associated with the SSH public key.

spkmSSHPublicKeyId :: Lens' SSHPublicKeyMetadata Text Source

The unique identifier for the SSH public key.

spkmStatus :: Lens' SSHPublicKeyMetadata StatusType Source

The status of the SSH public key. Active means the key can be used for authentication with an AWS CodeCommit repository. Inactive means the key cannot be used.

spkmUploadDate :: Lens' SSHPublicKeyMetadata UTCTime Source

The date and time, in ISO 8601 date-time format, when the SSH public key was uploaded.

ServerCertificate

data ServerCertificate Source

Contains information about a server certificate.

This data type is used as a response element in the GetServerCertificate action.

See: serverCertificate smart constructor.

Instances

serverCertificate Source

Arguments

:: ServerCertificateMetadata

sServerCertificateMetadata

-> Text

sCertificateBody

-> ServerCertificate 

Creates a value of ServerCertificate with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

sCertificateChain :: Lens' ServerCertificate (Maybe Text) Source

The contents of the public key certificate chain.

sServerCertificateMetadata :: Lens' ServerCertificate ServerCertificateMetadata Source

The meta information of the server certificate, such as its name, path, ID, and ARN.

sCertificateBody :: Lens' ServerCertificate Text Source

The contents of the public key certificate.

ServerCertificateMetadata

data ServerCertificateMetadata Source

Contains information about a server certificate without its certificate body, certificate chain, and private key.

This data type is used as a response element in the UploadServerCertificate and ListServerCertificates actions.

See: serverCertificateMetadata smart constructor.

Instances

serverCertificateMetadata Source

Arguments

:: Text

scmPath

-> Text

scmServerCertificateName

-> Text

scmServerCertificateId

-> Text

scmARN

-> ServerCertificateMetadata 

Creates a value of ServerCertificateMetadata with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

scmUploadDate :: Lens' ServerCertificateMetadata (Maybe UTCTime) Source

The date when the server certificate was uploaded.

scmExpiration :: Lens' ServerCertificateMetadata (Maybe UTCTime) Source

The date on which the certificate is set to expire.

scmPath :: Lens' ServerCertificateMetadata Text Source

The path to the server certificate. For more information about paths, see IAM Identifiers in the Using IAM guide.

scmServerCertificateName :: Lens' ServerCertificateMetadata Text Source

The name that identifies the server certificate.

scmServerCertificateId :: Lens' ServerCertificateMetadata Text Source

The stable and unique string identifying the server certificate. For more information about IDs, see IAM Identifiers in the Using IAM guide.

scmARN :: Lens' ServerCertificateMetadata Text Source

The Amazon Resource Name (ARN) specifying the server certificate. For more information about ARNs and how to use them in policies, see IAM Identifiers in the Using IAM guide.

SigningCertificate

data SigningCertificate Source

Contains information about an X.509 signing certificate.

This data type is used as a response element in the UploadSigningCertificate and ListSigningCertificates actions.

See: signingCertificate smart constructor.

Instances

signingCertificate Source

Arguments

:: Text

scUserName

-> Text

scCertificateId

-> Text

scCertificateBody

-> StatusType

scStatus

-> SigningCertificate 

Creates a value of SigningCertificate with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

scUploadDate :: Lens' SigningCertificate (Maybe UTCTime) Source

The date when the signing certificate was uploaded.

scUserName :: Lens' SigningCertificate Text Source

The name of the user the signing certificate is associated with.

scCertificateId :: Lens' SigningCertificate Text Source

The ID for the signing certificate.

scCertificateBody :: Lens' SigningCertificate Text Source

The contents of the signing certificate.

scStatus :: Lens' SigningCertificate StatusType Source

The status of the signing certificate. Active means the key is valid for API calls, while Inactive means it is not.

SimulatePolicyResponse

data SimulatePolicyResponse Source

Contains the response to a successful SimulatePrincipalPolicy or SimulateCustomPolicy request.

See: simulatePolicyResponse smart constructor.

Instances

simulatePolicyResponse :: SimulatePolicyResponse Source

Creates a value of SimulatePolicyResponse with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

spEvaluationResults :: Lens' SimulatePolicyResponse [EvaluationResult] Source

The results of the simulation.

spMarker :: Lens' SimulatePolicyResponse (Maybe Text) Source

When IsTruncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent pagination request.

spIsTruncated :: Lens' SimulatePolicyResponse (Maybe Bool) Source

A flag that indicates whether there are more items to return. If your results were truncated, you can make a subsequent pagination request using the Marker request parameter to retrieve more items. Note that IAM might return fewer than the MaxItems number of results even when there are more results available. We recommend that you check IsTruncated after every call to ensure that you receive all of your results.

Statement

data Statement Source

Contains a reference to a Statement element in a policy document that determines the result of the simulation.

This data type is used by the MatchedStatements member of the EvaluationResult type.

See: statement smart constructor.

Instances

statement :: Statement Source

Creates a value of Statement with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

sSourcePolicyType :: Lens' Statement (Maybe PolicySourceType) Source

The type of the policy.

sSourcePolicyId :: Lens' Statement (Maybe Text) Source

The identifier of the policy that was provided as an input.

sEndPosition :: Lens' Statement (Maybe Position) Source

The row and column of the end of a Statement in an IAM policy.

sStartPosition :: Lens' Statement (Maybe Position) Source

The row and column of the beginning of the Statement in an IAM policy.

User

data User Source

Contains information about an IAM user entity.

This data type is used as a response element in the following actions:

  • CreateUser
  • GetUser
  • ListUsers

See: user smart constructor.

Instances

user Source

Arguments

:: Text

uPath

-> Text

uUserName

-> Text

uUserId

-> Text

uARN

-> UTCTime

uCreateDate

-> User 

Creates a value of User with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

uPasswordLastUsed :: Lens' User (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the user's password was last used to sign in to an AWS website. For a list of AWS websites that capture a user's last sign-in time, see the Credential Reports topic in the Using IAM guide. If a password is used more than once in a five-minute span, only the first use is returned in this field. This field is null (not present) when:

  • The user does not have a password
  • The password exists but has never been used (at least not since IAM started tracking this information on October 20th, 2014
  • there is no sign-in data associated with the user

This value is returned only in the GetUser and ListUsers actions.

uPath :: Lens' User Text Source

The path to the user. For more information about paths, see IAM Identifiers in the Using IAM guide.

uUserName :: Lens' User Text Source

The friendly name identifying the user.

uUserId :: Lens' User Text Source

The stable and unique string identifying the user. For more information about IDs, see IAM Identifiers in the Using IAM guide.

uARN :: Lens' User Text Source

The Amazon Resource Name (ARN) that identifies the user. For more information about ARNs and how to use ARNs in policies, see IAM Identifiers in the Using IAM guide.

uCreateDate :: Lens' User UTCTime Source

The date and time, in ISO 8601 date-time format, when the user was created.

UserDetail

data UserDetail Source

Contains information about an IAM user, including all the user's policies and all the IAM groups the user is in.

This data type is used as a response element in the GetAccountAuthorizationDetails action.

See: userDetail smart constructor.

Instances

userDetail :: UserDetail Source

Creates a value of UserDetail with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

udGroupList :: Lens' UserDetail [Text] Source

A list of IAM groups that the user is in.

udARN :: Lens' UserDetail (Maybe Text) Source

Undocumented member.

udPath :: Lens' UserDetail (Maybe Text) Source

The path to the user. For more information about paths, see IAM Identifiers in the Using IAM guide.

udCreateDate :: Lens' UserDetail (Maybe UTCTime) Source

The date and time, in ISO 8601 date-time format, when the user was created.

udUserName :: Lens' UserDetail (Maybe Text) Source

The friendly name identifying the user.

udUserId :: Lens' UserDetail (Maybe Text) Source

The stable and unique string identifying the user. For more information about IDs, see IAM Identifiers in the Using IAM guide.

udUserPolicyList :: Lens' UserDetail [PolicyDetail] Source

A list of the inline policies embedded in the user.

udAttachedManagedPolicies :: Lens' UserDetail [AttachedPolicy] Source

A list of the managed policies attached to the user.

VirtualMFADevice

data VirtualMFADevice Source

Contains information about a virtual MFA device.

See: virtualMFADevice smart constructor.

Instances

virtualMFADevice Source

Arguments

:: Text

vmdSerialNumber

-> VirtualMFADevice 

Creates a value of VirtualMFADevice with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

vmdQRCodePNG :: Lens' VirtualMFADevice (Maybe ByteString) Source

A QR code PNG image that encodes 'otpauth:\/\/totp\/$virtualMFADeviceName\'$AccountName?secret=$Base32String' where '$virtualMFADeviceName' is one of the create call arguments, AccountName is the user name if set (otherwise, the account ID otherwise), and Base32String is the seed in Base32 format. The Base32String value is Base64-encoded.

Note: This Lens automatically encodes and decodes Base64 data, despite what the AWS documentation might say. The underlying isomorphism will encode to Base64 representation during serialisation, and decode from Base64 representation during deserialisation. This Lens accepts and returns only raw unencoded data.

vmdBase32StringSeed :: Lens' VirtualMFADevice (Maybe ByteString) Source

The Base32 seed defined as specified in RFC3548. The Base32StringSeed is Base64-encoded.

Note: This Lens automatically encodes and decodes Base64 data, despite what the AWS documentation might say. The underlying isomorphism will encode to Base64 representation during serialisation, and decode from Base64 representation during deserialisation. This Lens accepts and returns only raw unencoded data.

vmdUser :: Lens' VirtualMFADevice (Maybe User) Source

Undocumented member.

vmdEnableDate :: Lens' VirtualMFADevice (Maybe UTCTime) Source

The date and time on which the virtual MFA device was enabled.

vmdSerialNumber :: Lens' VirtualMFADevice Text Source

The serial number associated with VirtualMFADevice.