amazonka-iam-1.4.3: Amazon Identity and Access Management SDK.

Copyright(c) 2013-2016 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone
LanguageHaskell2010

Network.AWS.IAM.UpdateOpenIdConnectProviderThumbprint

Contents

Description

Replaces the existing list of server certificate thumbprints with a new list.

The list that you pass with this action completely replaces the existing list of thumbprints. (The lists are not merged.)

Typically, you need to update a thumbprint only when the identity provider's certificate changes, which occurs rarely. However, if the provider's certificate does change, any attempt to assume an IAM role that specifies the OIDC provider as a principal will fail until the certificate thumbprint is updated.

Because trust for the OpenID Connect provider is ultimately derived from the provider's certificate and is validated by the thumbprint, it is a best practice to limit access to the UpdateOpenIDConnectProviderThumbprint action to highly-privileged users.

Synopsis

Creating a Request

updateOpenIdConnectProviderThumbprint Source #

Creates a value of UpdateOpenIdConnectProviderThumbprint with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

data UpdateOpenIdConnectProviderThumbprint Source #

Instances

Eq UpdateOpenIdConnectProviderThumbprint Source # 
Data UpdateOpenIdConnectProviderThumbprint Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> UpdateOpenIdConnectProviderThumbprint -> c UpdateOpenIdConnectProviderThumbprint #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c UpdateOpenIdConnectProviderThumbprint #

toConstr :: UpdateOpenIdConnectProviderThumbprint -> Constr #

dataTypeOf :: UpdateOpenIdConnectProviderThumbprint -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c UpdateOpenIdConnectProviderThumbprint) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c UpdateOpenIdConnectProviderThumbprint) #

gmapT :: (forall b. Data b => b -> b) -> UpdateOpenIdConnectProviderThumbprint -> UpdateOpenIdConnectProviderThumbprint #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> UpdateOpenIdConnectProviderThumbprint -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> UpdateOpenIdConnectProviderThumbprint -> r #

gmapQ :: (forall d. Data d => d -> u) -> UpdateOpenIdConnectProviderThumbprint -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> UpdateOpenIdConnectProviderThumbprint -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> UpdateOpenIdConnectProviderThumbprint -> m UpdateOpenIdConnectProviderThumbprint #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> UpdateOpenIdConnectProviderThumbprint -> m UpdateOpenIdConnectProviderThumbprint #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> UpdateOpenIdConnectProviderThumbprint -> m UpdateOpenIdConnectProviderThumbprint #

Read UpdateOpenIdConnectProviderThumbprint Source # 
Show UpdateOpenIdConnectProviderThumbprint Source # 
Generic UpdateOpenIdConnectProviderThumbprint Source # 
Hashable UpdateOpenIdConnectProviderThumbprint Source # 
NFData UpdateOpenIdConnectProviderThumbprint Source # 
AWSRequest UpdateOpenIdConnectProviderThumbprint Source # 
ToPath UpdateOpenIdConnectProviderThumbprint Source # 
ToHeaders UpdateOpenIdConnectProviderThumbprint Source # 
ToQuery UpdateOpenIdConnectProviderThumbprint Source # 
type Rep UpdateOpenIdConnectProviderThumbprint Source # 
type Rep UpdateOpenIdConnectProviderThumbprint = D1 (MetaData "UpdateOpenIdConnectProviderThumbprint" "Network.AWS.IAM.UpdateOpenIdConnectProviderThumbprint" "amazonka-iam-1.4.3-KkHaDC3pmsZLURksVtoSGT" False) (C1 (MetaCons "UpdateOpenIdConnectProviderThumbprint'" PrefixI True) ((:*:) (S1 (MetaSel (Just Symbol "_uoicptOpenIdConnectProviderARN") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text)) (S1 (MetaSel (Just Symbol "_uoicptThumbprintList") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 [Text]))))
type Rs UpdateOpenIdConnectProviderThumbprint Source # 

Request Lenses

uoicptOpenIdConnectProviderARN :: Lens' UpdateOpenIdConnectProviderThumbprint Text Source #

The Amazon Resource Name (ARN) of the IAM OpenID Connect (OIDC) provider to update the thumbprint for. You can get a list of OIDC provider ARNs by using the ListOpenIDConnectProviders action.

uoicptThumbprintList :: Lens' UpdateOpenIdConnectProviderThumbprint [Text] Source #

A list of certificate thumbprints that are associated with the specified IAM OpenID Connect provider. For more information, see CreateOpenIDConnectProvider.

Destructuring the Response

data UpdateOpenIdConnectProviderThumbprintResponse Source #

Instances

Eq UpdateOpenIdConnectProviderThumbprintResponse Source # 
Data UpdateOpenIdConnectProviderThumbprintResponse Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> UpdateOpenIdConnectProviderThumbprintResponse -> c UpdateOpenIdConnectProviderThumbprintResponse #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c UpdateOpenIdConnectProviderThumbprintResponse #

toConstr :: UpdateOpenIdConnectProviderThumbprintResponse -> Constr #

dataTypeOf :: UpdateOpenIdConnectProviderThumbprintResponse -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c UpdateOpenIdConnectProviderThumbprintResponse) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c UpdateOpenIdConnectProviderThumbprintResponse) #

gmapT :: (forall b. Data b => b -> b) -> UpdateOpenIdConnectProviderThumbprintResponse -> UpdateOpenIdConnectProviderThumbprintResponse #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> UpdateOpenIdConnectProviderThumbprintResponse -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> UpdateOpenIdConnectProviderThumbprintResponse -> r #

gmapQ :: (forall d. Data d => d -> u) -> UpdateOpenIdConnectProviderThumbprintResponse -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> UpdateOpenIdConnectProviderThumbprintResponse -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> UpdateOpenIdConnectProviderThumbprintResponse -> m UpdateOpenIdConnectProviderThumbprintResponse #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> UpdateOpenIdConnectProviderThumbprintResponse -> m UpdateOpenIdConnectProviderThumbprintResponse #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> UpdateOpenIdConnectProviderThumbprintResponse -> m UpdateOpenIdConnectProviderThumbprintResponse #

Read UpdateOpenIdConnectProviderThumbprintResponse Source # 
Show UpdateOpenIdConnectProviderThumbprintResponse Source # 
Generic UpdateOpenIdConnectProviderThumbprintResponse Source # 
NFData UpdateOpenIdConnectProviderThumbprintResponse Source # 
type Rep UpdateOpenIdConnectProviderThumbprintResponse Source # 
type Rep UpdateOpenIdConnectProviderThumbprintResponse = D1 (MetaData "UpdateOpenIdConnectProviderThumbprintResponse" "Network.AWS.IAM.UpdateOpenIdConnectProviderThumbprint" "amazonka-iam-1.4.3-KkHaDC3pmsZLURksVtoSGT" False) (C1 (MetaCons "UpdateOpenIdConnectProviderThumbprintResponse'" PrefixI False) U1)