Network.AWS.KMS

AWS Key Management Service

AWS Key Management Service (AWS KMS) is an encryption and key management web service. This guide describes the AWS KMS operations that you can call programmatically. For general information about AWS KMS, see the AWS Key Management Service Developer Guide .

We recommend that you use the AWS SDKs to make programmatic API calls to AWS KMS.

Clients must support TLS (Transport Layer Security) 1.0. We recommend TLS 1.2. Clients must also support cipher suites with Perfect Forward Secrecy (PFS) such as Ephemeral Diffie-Hellman (DHE) or Elliptic Curve Ephemeral Diffie-Hellman (ECDHE). Most modern systems such as Java 7 and later support these modes.

Signing Requests

Requests must be signed by using an access key ID and a secret access key. We strongly recommend that you do not use your AWS account (root) access key ID and secret key for everyday work with AWS KMS. Instead, use the access key ID and secret access key for an IAM user, or you can use the AWS Security Token Service to generate temporary security credentials that you can use to sign requests.

All AWS KMS operations require Signature Version 4 .

Logging API Requests

AWS KMS supports AWS CloudTrail, a service that logs AWS API calls and related events for your AWS account and delivers them to an Amazon S3 bucket that you specify. By using the information collected by CloudTrail, you can determine what requests were made to AWS KMS, who made the request, when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find your log files, see the AWS CloudTrail User Guide .

Additional Resources

For more information about credentials and request signing, see the following:

• AWS Security Credentials - This topic provides general information about the types of credentials used for accessing AWS.
• Temporary Security Credentials - This section of the IAM User Guide describes how to create and use temporary security credentials.
• Signature Version 4 Signing Process - This set of topics walks you through the process of signing a request using an access key ID and a secret access key.

Commonly Used APIs

Of the APIs discussed in this guide, the following will prove the most useful for most applications. You will likely perform actions other than these, such as creating keys and assigning policies, by using the console.

• Encrypt
• Decrypt
• GenerateDataKey
• GenerateDataKeyWithoutPlaintext

Service Configuration

kms :: Service

API version 2014-11-01 of the Amazon Key Management Service SDK configuration.

Errors

Error matchers are designed for use with the functions provided by Control.Exception.Lens. This allows catching (and rethrowing) service specific errors returned by KMS.

InvalidMarkerException

_InvalidMarkerException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the marker that specifies where pagination should next begin is not valid.

KMSInvalidStateException

_KMSInvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the state of the specified resource is not valid for this request.

For more information about how key state affects the use of a CMK, see How Key State Affects Use of a Customer Master Key in the AWS Key Management Service Developer Guide .

InvalidKeyUsageException

_InvalidKeyUsageException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified KeySpec value is not valid.

MalformedPolicyDocumentException

_MalformedPolicyDocumentException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified policy is not syntactically or semantically correct.

UnsupportedOperationException

_UnsupportedOperationException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because a specified parameter is not supported or a specified resource is not valid for this operation.

DisabledException

_DisabledException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified CMK is not enabled.

KeyUnavailableException

_KeyUnavailableException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified CMK was not available. The request can be retried.

IncorrectKeyMaterialException

_IncorrectKeyMaterialException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the provided key material is invalid or is not the same key material that was previously imported into this customer master key (CMK).

KMSInternalException

_KMSInternalException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because an internal exception occurred. The request can be retried.

TagException

_TagException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because one or more tags are not valid.

InvalidImportTokenException

_InvalidImportTokenException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the provided import token is invalid or is associated with a different customer master key (CMK).

NotFoundException

_NotFoundException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified entity or resource could not be found.

InvalidAliasNameException

_InvalidAliasNameException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified alias name is not valid.

InvalidGrantIdException

_InvalidGrantIdException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified GrantId is not valid.

InvalidGrantTokenException

_InvalidGrantTokenException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified grant token is not valid.

InvalidARNException

_InvalidARNException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because a specified ARN was not valid.

DependencyTimeoutException

_DependencyTimeoutException :: AsError a => Getting (First ServiceError) a ServiceError

The system timed out while trying to fulfill the request. The request can be retried.

ExpiredImportTokenException

_ExpiredImportTokenException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the provided import token is expired. Use GetParametersForImport to get a new import token and public key, use the new public key to encrypt the key material, and then try the request again.

InvalidCiphertextException

_InvalidCiphertextException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because the specified ciphertext, or additional authenticated data incorporated into the ciphertext, such as the encryption context, is corrupted, missing, or otherwise invalid.

AlreadyExistsException

_AlreadyExistsException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because it attempted to create a resource that already exists.

LimitExceededException

_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError

The request was rejected because a limit was exceeded. For more information, see Limits in the AWS Key Management Service Developer Guide .

Waiters

Waiters poll by repeatedly sending a request until some remote success condition configured by the Wait specification is fulfilled. The Wait specification determines how many attempts should be made, in addition to delay and retry strategies.

Operations

Some AWS operations return results that are incomplete and require subsequent requests in order to obtain the entire result set. The process of sending subsequent requests to continue where a previous request left off is called pagination. For example, the ListObjects operation of Amazon S3 returns up to 1000 objects at a time, and you must send subsequent requests with the appropriate Marker in order to retrieve the next page of results.

Operations that have an AWSPager instance can transparently perform subsequent requests, correctly setting Markers and other request facets to iterate through the entire result set of a truncated API operation. Operations which support this have an additional note in the documentation.

Many operations have the ability to filter results on the server side. See the individual operation parameters for details.

Encrypt

module Network.AWS.KMS.Encrypt

ListGrants (Paginated)

module Network.AWS.KMS.ListGrants

DisableKeyRotation

module Network.AWS.KMS.DisableKeyRotation

GenerateDataKeyWithoutPlaintext

module Network.AWS.KMS.GenerateDataKeyWithoutPlaintext

GetParametersForImport

module Network.AWS.KMS.GetParametersForImport

EnableKeyRotation

module Network.AWS.KMS.EnableKeyRotation

CreateAlias

module Network.AWS.KMS.CreateAlias

CreateGrant

module Network.AWS.KMS.CreateGrant

ListAliases (Paginated)

module Network.AWS.KMS.ListAliases

ListRetirableGrants

module Network.AWS.KMS.ListRetirableGrants

GenerateRandom

module Network.AWS.KMS.GenerateRandom

CreateKey

module Network.AWS.KMS.CreateKey

DisableKey

module Network.AWS.KMS.DisableKey

RetireGrant

module Network.AWS.KMS.RetireGrant

ListKeys (Paginated)

module Network.AWS.KMS.ListKeys

ListResourceTags

module Network.AWS.KMS.ListResourceTags

GetKeyRotationStatus

module Network.AWS.KMS.GetKeyRotationStatus

GenerateDataKey

module Network.AWS.KMS.GenerateDataKey

DeleteAlias

module Network.AWS.KMS.DeleteAlias

UpdateAlias

module Network.AWS.KMS.UpdateAlias

DescribeKey

module Network.AWS.KMS.DescribeKey

CancelKeyDeletion

module Network.AWS.KMS.CancelKeyDeletion

Decrypt

module Network.AWS.KMS.Decrypt

UpdateKeyDescription

module Network.AWS.KMS.UpdateKeyDescription

ReEncrypt

module Network.AWS.KMS.ReEncrypt

TagResource

module Network.AWS.KMS.TagResource

ListKeyPolicies (Paginated)

module Network.AWS.KMS.ListKeyPolicies

UntagResource

module Network.AWS.KMS.UntagResource

ScheduleKeyDeletion

module Network.AWS.KMS.ScheduleKeyDeletion

PutKeyPolicy

module Network.AWS.KMS.PutKeyPolicy

EnableKey

module Network.AWS.KMS.EnableKey

RevokeGrant

module Network.AWS.KMS.RevokeGrant

GetKeyPolicy

module Network.AWS.KMS.GetKeyPolicy

ImportKeyMaterial

module Network.AWS.KMS.ImportKeyMaterial

DeleteImportedKeyMaterial

module Network.AWS.KMS.DeleteImportedKeyMaterial

Types

AlgorithmSpec

data AlgorithmSpec

Constructors

RsaesOaepSha1

RsaesOaepSha256

RsaesPKCS1V15

Instances

Bounded AlgorithmSpec

Methods

minBound :: AlgorithmSpec

maxBound :: AlgorithmSpec

Enum AlgorithmSpec

Methods

succ :: AlgorithmSpec -> AlgorithmSpec

pred :: AlgorithmSpec -> AlgorithmSpec

toEnum :: Int -> AlgorithmSpec

fromEnum :: AlgorithmSpec -> Int

enumFrom :: AlgorithmSpec -> [AlgorithmSpec]

enumFromThen :: AlgorithmSpec -> AlgorithmSpec -> [AlgorithmSpec]

enumFromTo :: AlgorithmSpec -> AlgorithmSpec -> [AlgorithmSpec]

enumFromThenTo :: AlgorithmSpec -> AlgorithmSpec -> AlgorithmSpec -> [AlgorithmSpec]

Eq AlgorithmSpec

Methods

(==) :: AlgorithmSpec -> AlgorithmSpec -> Bool

(/=) :: AlgorithmSpec -> AlgorithmSpec -> Bool

Data AlgorithmSpec

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> AlgorithmSpec -> c AlgorithmSpec

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c AlgorithmSpec

toConstr :: AlgorithmSpec -> Constr

dataTypeOf :: AlgorithmSpec -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c AlgorithmSpec)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c AlgorithmSpec)

gmapT :: (forall b. Data b => b -> b) -> AlgorithmSpec -> AlgorithmSpec

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> AlgorithmSpec -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> AlgorithmSpec -> r

gmapQ :: (forall d. Data d => d -> u) -> AlgorithmSpec -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> AlgorithmSpec -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> AlgorithmSpec -> m AlgorithmSpec

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> AlgorithmSpec -> m AlgorithmSpec

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> AlgorithmSpec -> m AlgorithmSpec

Ord AlgorithmSpec

Methods

compare :: AlgorithmSpec -> AlgorithmSpec -> Ordering

(<) :: AlgorithmSpec -> AlgorithmSpec -> Bool

(<=) :: AlgorithmSpec -> AlgorithmSpec -> Bool

(>) :: AlgorithmSpec -> AlgorithmSpec -> Bool

(>=) :: AlgorithmSpec -> AlgorithmSpec -> Bool

max :: AlgorithmSpec -> AlgorithmSpec -> AlgorithmSpec

min :: AlgorithmSpec -> AlgorithmSpec -> AlgorithmSpec

Read AlgorithmSpec

Methods

readsPrec :: Int -> ReadS AlgorithmSpec

readList :: ReadS [AlgorithmSpec]

readPrec :: ReadPrec AlgorithmSpec

readListPrec :: ReadPrec [AlgorithmSpec]

Show AlgorithmSpec

Methods

showsPrec :: Int -> AlgorithmSpec -> ShowS

show :: AlgorithmSpec -> String

showList :: [AlgorithmSpec] -> ShowS

Generic AlgorithmSpec

Associated Types

type Rep AlgorithmSpec :: * -> *

Methods

from :: AlgorithmSpec -> Rep AlgorithmSpec x

to :: Rep AlgorithmSpec x -> AlgorithmSpec

Hashable AlgorithmSpec

Methods

hashWithSalt :: Int -> AlgorithmSpec -> Int

hash :: AlgorithmSpec -> Int

ToJSON AlgorithmSpec

Methods

toJSON :: AlgorithmSpec -> Value

toEncoding :: AlgorithmSpec -> Encoding

toJSONList :: [AlgorithmSpec] -> Value

toEncodingList :: [AlgorithmSpec] -> Encoding

NFData AlgorithmSpec

Methods

rnf :: AlgorithmSpec -> ()

ToHeader AlgorithmSpec

Methods

toHeader :: HeaderName -> AlgorithmSpec -> [Header]

ToQuery AlgorithmSpec

Methods

toQuery :: AlgorithmSpec -> QueryString

ToByteString AlgorithmSpec

Methods

toBS :: AlgorithmSpec -> ByteString

FromText AlgorithmSpec

Methods

parser :: Parser AlgorithmSpec

ToText AlgorithmSpec

Methods

toText :: AlgorithmSpec -> Text

type Rep AlgorithmSpec

type Rep AlgorithmSpec = D1 * (MetaData "AlgorithmSpec" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) ((:+:) * (C1 * (MetaCons "RsaesOaepSha1" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "RsaesOaepSha256" PrefixI False) (U1 *)) (C1 * (MetaCons "RsaesPKCS1V15" PrefixI False) (U1 *))))

DataKeySpec

data DataKeySpec

Constructors

AES128

AES256

Instances

Bounded DataKeySpec

Methods

minBound :: DataKeySpec

maxBound :: DataKeySpec

Enum DataKeySpec

Methods

succ :: DataKeySpec -> DataKeySpec

pred :: DataKeySpec -> DataKeySpec

toEnum :: Int -> DataKeySpec

fromEnum :: DataKeySpec -> Int

enumFrom :: DataKeySpec -> [DataKeySpec]

enumFromThen :: DataKeySpec -> DataKeySpec -> [DataKeySpec]

enumFromTo :: DataKeySpec -> DataKeySpec -> [DataKeySpec]

enumFromThenTo :: DataKeySpec -> DataKeySpec -> DataKeySpec -> [DataKeySpec]

Eq DataKeySpec

Methods

(==) :: DataKeySpec -> DataKeySpec -> Bool

(/=) :: DataKeySpec -> DataKeySpec -> Bool

Data DataKeySpec

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> DataKeySpec -> c DataKeySpec

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c DataKeySpec

toConstr :: DataKeySpec -> Constr

dataTypeOf :: DataKeySpec -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c DataKeySpec)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c DataKeySpec)

gmapT :: (forall b. Data b => b -> b) -> DataKeySpec -> DataKeySpec

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> DataKeySpec -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> DataKeySpec -> r

gmapQ :: (forall d. Data d => d -> u) -> DataKeySpec -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> DataKeySpec -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> DataKeySpec -> m DataKeySpec

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> DataKeySpec -> m DataKeySpec

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> DataKeySpec -> m DataKeySpec

Ord DataKeySpec

Methods

compare :: DataKeySpec -> DataKeySpec -> Ordering

(<) :: DataKeySpec -> DataKeySpec -> Bool

(<=) :: DataKeySpec -> DataKeySpec -> Bool

(>) :: DataKeySpec -> DataKeySpec -> Bool

(>=) :: DataKeySpec -> DataKeySpec -> Bool

max :: DataKeySpec -> DataKeySpec -> DataKeySpec

min :: DataKeySpec -> DataKeySpec -> DataKeySpec

Read DataKeySpec

Methods

readsPrec :: Int -> ReadS DataKeySpec

readList :: ReadS [DataKeySpec]

readPrec :: ReadPrec DataKeySpec

readListPrec :: ReadPrec [DataKeySpec]

Show DataKeySpec

Methods

showsPrec :: Int -> DataKeySpec -> ShowS

show :: DataKeySpec -> String

showList :: [DataKeySpec] -> ShowS

Generic DataKeySpec

Associated Types

type Rep DataKeySpec :: * -> *

Methods

from :: DataKeySpec -> Rep DataKeySpec x

to :: Rep DataKeySpec x -> DataKeySpec

Hashable DataKeySpec

Methods

hashWithSalt :: Int -> DataKeySpec -> Int

hash :: DataKeySpec -> Int

ToJSON DataKeySpec

Methods

toJSON :: DataKeySpec -> Value

toEncoding :: DataKeySpec -> Encoding

toJSONList :: [DataKeySpec] -> Value

toEncodingList :: [DataKeySpec] -> Encoding

NFData DataKeySpec

Methods

rnf :: DataKeySpec -> ()

ToHeader DataKeySpec

Methods

toHeader :: HeaderName -> DataKeySpec -> [Header]

ToQuery DataKeySpec

Methods

toQuery :: DataKeySpec -> QueryString

ToByteString DataKeySpec

Methods

toBS :: DataKeySpec -> ByteString

FromText DataKeySpec

Methods

parser :: Parser DataKeySpec

ToText DataKeySpec

Methods

toText :: DataKeySpec -> Text

type Rep DataKeySpec

type Rep DataKeySpec = D1 * (MetaData "DataKeySpec" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) ((:+:) * (C1 * (MetaCons "AES128" PrefixI False) (U1 *)) (C1 * (MetaCons "AES256" PrefixI False) (U1 *)))

ExpirationModelType

data ExpirationModelType

Constructors

KeyMaterialDoesNotExpire

KeyMaterialExpires

Instances

Bounded ExpirationModelType

Methods

minBound :: ExpirationModelType

maxBound :: ExpirationModelType

Enum ExpirationModelType

Methods

succ :: ExpirationModelType -> ExpirationModelType

pred :: ExpirationModelType -> ExpirationModelType

toEnum :: Int -> ExpirationModelType

fromEnum :: ExpirationModelType -> Int

enumFrom :: ExpirationModelType -> [ExpirationModelType]

enumFromThen :: ExpirationModelType -> ExpirationModelType -> [ExpirationModelType]

enumFromTo :: ExpirationModelType -> ExpirationModelType -> [ExpirationModelType]

enumFromThenTo :: ExpirationModelType -> ExpirationModelType -> ExpirationModelType -> [ExpirationModelType]

Eq ExpirationModelType

Methods

(==) :: ExpirationModelType -> ExpirationModelType -> Bool

(/=) :: ExpirationModelType -> ExpirationModelType -> Bool

Data ExpirationModelType

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> ExpirationModelType -> c ExpirationModelType

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c ExpirationModelType

toConstr :: ExpirationModelType -> Constr

dataTypeOf :: ExpirationModelType -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c ExpirationModelType)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c ExpirationModelType)

gmapT :: (forall b. Data b => b -> b) -> ExpirationModelType -> ExpirationModelType

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> ExpirationModelType -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> ExpirationModelType -> r

gmapQ :: (forall d. Data d => d -> u) -> ExpirationModelType -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> ExpirationModelType -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> ExpirationModelType -> m ExpirationModelType

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> ExpirationModelType -> m ExpirationModelType

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> ExpirationModelType -> m ExpirationModelType

Ord ExpirationModelType

Methods

compare :: ExpirationModelType -> ExpirationModelType -> Ordering

(<) :: ExpirationModelType -> ExpirationModelType -> Bool

(<=) :: ExpirationModelType -> ExpirationModelType -> Bool

(>) :: ExpirationModelType -> ExpirationModelType -> Bool

(>=) :: ExpirationModelType -> ExpirationModelType -> Bool

max :: ExpirationModelType -> ExpirationModelType -> ExpirationModelType

min :: ExpirationModelType -> ExpirationModelType -> ExpirationModelType

Read ExpirationModelType

Methods

readsPrec :: Int -> ReadS ExpirationModelType

readList :: ReadS [ExpirationModelType]

readPrec :: ReadPrec ExpirationModelType

readListPrec :: ReadPrec [ExpirationModelType]

Show ExpirationModelType

Methods

showsPrec :: Int -> ExpirationModelType -> ShowS

show :: ExpirationModelType -> String

showList :: [ExpirationModelType] -> ShowS

Generic ExpirationModelType

Associated Types

type Rep ExpirationModelType :: * -> *

Methods

from :: ExpirationModelType -> Rep ExpirationModelType x

to :: Rep ExpirationModelType x -> ExpirationModelType

Hashable ExpirationModelType

Methods

hashWithSalt :: Int -> ExpirationModelType -> Int

hash :: ExpirationModelType -> Int

ToJSON ExpirationModelType

Methods

toJSON :: ExpirationModelType -> Value

toEncoding :: ExpirationModelType -> Encoding

toJSONList :: [ExpirationModelType] -> Value

toEncodingList :: [ExpirationModelType] -> Encoding

FromJSON ExpirationModelType

Methods

parseJSON :: Value -> Parser ExpirationModelType

parseJSONList :: Value -> Parser [ExpirationModelType]

NFData ExpirationModelType

Methods

rnf :: ExpirationModelType -> ()

ToHeader ExpirationModelType

Methods

toHeader :: HeaderName -> ExpirationModelType -> [Header]

ToQuery ExpirationModelType

Methods

toQuery :: ExpirationModelType -> QueryString

ToByteString ExpirationModelType

Methods

toBS :: ExpirationModelType -> ByteString

FromText ExpirationModelType

Methods

parser :: Parser ExpirationModelType

ToText ExpirationModelType

Methods

toText :: ExpirationModelType -> Text

type Rep ExpirationModelType

type Rep ExpirationModelType = D1 * (MetaData "ExpirationModelType" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) ((:+:) * (C1 * (MetaCons "KeyMaterialDoesNotExpire" PrefixI False) (U1 *)) (C1 * (MetaCons "KeyMaterialExpires" PrefixI False) (U1 *)))

GrantOperation

data GrantOperation

Constructors

CreateGrant

Decrypt

DescribeKey

Encrypt

GenerateDataKey

GenerateDataKeyWithoutPlaintext

ReEncryptFrom

ReEncryptTo

RetireGrant

Instances

Bounded GrantOperation

Methods

minBound :: GrantOperation

maxBound :: GrantOperation

Enum GrantOperation

Methods

succ :: GrantOperation -> GrantOperation

pred :: GrantOperation -> GrantOperation

toEnum :: Int -> GrantOperation

fromEnum :: GrantOperation -> Int

enumFrom :: GrantOperation -> [GrantOperation]

enumFromThen :: GrantOperation -> GrantOperation -> [GrantOperation]

enumFromTo :: GrantOperation -> GrantOperation -> [GrantOperation]

enumFromThenTo :: GrantOperation -> GrantOperation -> GrantOperation -> [GrantOperation]

Eq GrantOperation

Methods

(==) :: GrantOperation -> GrantOperation -> Bool

(/=) :: GrantOperation -> GrantOperation -> Bool

Data GrantOperation

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> GrantOperation -> c GrantOperation

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c GrantOperation

toConstr :: GrantOperation -> Constr

dataTypeOf :: GrantOperation -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c GrantOperation)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c GrantOperation)

gmapT :: (forall b. Data b => b -> b) -> GrantOperation -> GrantOperation

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> GrantOperation -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> GrantOperation -> r

gmapQ :: (forall d. Data d => d -> u) -> GrantOperation -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> GrantOperation -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> GrantOperation -> m GrantOperation

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> GrantOperation -> m GrantOperation

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> GrantOperation -> m GrantOperation

Ord GrantOperation

Methods

compare :: GrantOperation -> GrantOperation -> Ordering

(<) :: GrantOperation -> GrantOperation -> Bool

(<=) :: GrantOperation -> GrantOperation -> Bool

(>) :: GrantOperation -> GrantOperation -> Bool

(>=) :: GrantOperation -> GrantOperation -> Bool

max :: GrantOperation -> GrantOperation -> GrantOperation

min :: GrantOperation -> GrantOperation -> GrantOperation

Read GrantOperation

Methods

readsPrec :: Int -> ReadS GrantOperation

readList :: ReadS [GrantOperation]

readPrec :: ReadPrec GrantOperation

readListPrec :: ReadPrec [GrantOperation]

Show GrantOperation

Methods

showsPrec :: Int -> GrantOperation -> ShowS

show :: GrantOperation -> String

showList :: [GrantOperation] -> ShowS

Generic GrantOperation

Associated Types

type Rep GrantOperation :: * -> *

Methods

from :: GrantOperation -> Rep GrantOperation x

to :: Rep GrantOperation x -> GrantOperation

Hashable GrantOperation

Methods

hashWithSalt :: Int -> GrantOperation -> Int

hash :: GrantOperation -> Int

ToJSON GrantOperation

Methods

toJSON :: GrantOperation -> Value

toEncoding :: GrantOperation -> Encoding

toJSONList :: [GrantOperation] -> Value

toEncodingList :: [GrantOperation] -> Encoding

FromJSON GrantOperation

Methods

parseJSON :: Value -> Parser GrantOperation

parseJSONList :: Value -> Parser [GrantOperation]

NFData GrantOperation

Methods

rnf :: GrantOperation -> ()

ToHeader GrantOperation

Methods

toHeader :: HeaderName -> GrantOperation -> [Header]

ToQuery GrantOperation

Methods

toQuery :: GrantOperation -> QueryString

ToByteString GrantOperation

Methods

toBS :: GrantOperation -> ByteString

FromText GrantOperation

Methods

parser :: Parser GrantOperation

ToText GrantOperation

Methods

toText :: GrantOperation -> Text

type Rep GrantOperation

type Rep GrantOperation = D1 * (MetaData "GrantOperation" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) ((:+:) * ((:+:) * ((:+:) * (C1 * (MetaCons "CreateGrant" PrefixI False) (U1 *)) (C1 * (MetaCons "Decrypt" PrefixI False) (U1 *))) ((:+:) * (C1 * (MetaCons "DescribeKey" PrefixI False) (U1 *)) (C1 * (MetaCons "Encrypt" PrefixI False) (U1 *)))) ((:+:) * ((:+:) * (C1 * (MetaCons "GenerateDataKey" PrefixI False) (U1 *)) (C1 * (MetaCons "GenerateDataKeyWithoutPlaintext" PrefixI False) (U1 *))) ((:+:) * (C1 * (MetaCons "ReEncryptFrom" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "ReEncryptTo" PrefixI False) (U1 *)) (C1 * (MetaCons "RetireGrant" PrefixI False) (U1 *))))))

KeyManagerType

data KeyManagerType

Constructors

AWS

Customer

Instances

Bounded KeyManagerType

Methods

minBound :: KeyManagerType

maxBound :: KeyManagerType

Enum KeyManagerType

Methods

succ :: KeyManagerType -> KeyManagerType

pred :: KeyManagerType -> KeyManagerType

toEnum :: Int -> KeyManagerType

fromEnum :: KeyManagerType -> Int

enumFrom :: KeyManagerType -> [KeyManagerType]

enumFromThen :: KeyManagerType -> KeyManagerType -> [KeyManagerType]

enumFromTo :: KeyManagerType -> KeyManagerType -> [KeyManagerType]

enumFromThenTo :: KeyManagerType -> KeyManagerType -> KeyManagerType -> [KeyManagerType]

Eq KeyManagerType

Methods

(==) :: KeyManagerType -> KeyManagerType -> Bool

(/=) :: KeyManagerType -> KeyManagerType -> Bool

Data KeyManagerType

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> KeyManagerType -> c KeyManagerType

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c KeyManagerType

toConstr :: KeyManagerType -> Constr

dataTypeOf :: KeyManagerType -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c KeyManagerType)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c KeyManagerType)

gmapT :: (forall b. Data b => b -> b) -> KeyManagerType -> KeyManagerType

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> KeyManagerType -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> KeyManagerType -> r

gmapQ :: (forall d. Data d => d -> u) -> KeyManagerType -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> KeyManagerType -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> KeyManagerType -> m KeyManagerType

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyManagerType -> m KeyManagerType

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyManagerType -> m KeyManagerType

Ord KeyManagerType

Methods

compare :: KeyManagerType -> KeyManagerType -> Ordering

(<) :: KeyManagerType -> KeyManagerType -> Bool

(<=) :: KeyManagerType -> KeyManagerType -> Bool

(>) :: KeyManagerType -> KeyManagerType -> Bool

(>=) :: KeyManagerType -> KeyManagerType -> Bool

max :: KeyManagerType -> KeyManagerType -> KeyManagerType

min :: KeyManagerType -> KeyManagerType -> KeyManagerType

Read KeyManagerType

Methods

readsPrec :: Int -> ReadS KeyManagerType

readList :: ReadS [KeyManagerType]

readPrec :: ReadPrec KeyManagerType

readListPrec :: ReadPrec [KeyManagerType]

Show KeyManagerType

Methods

showsPrec :: Int -> KeyManagerType -> ShowS

show :: KeyManagerType -> String

showList :: [KeyManagerType] -> ShowS

Generic KeyManagerType

Associated Types

type Rep KeyManagerType :: * -> *

Methods

from :: KeyManagerType -> Rep KeyManagerType x

to :: Rep KeyManagerType x -> KeyManagerType

Hashable KeyManagerType

Methods

hashWithSalt :: Int -> KeyManagerType -> Int

hash :: KeyManagerType -> Int

FromJSON KeyManagerType

Methods

parseJSON :: Value -> Parser KeyManagerType

parseJSONList :: Value -> Parser [KeyManagerType]

NFData KeyManagerType

Methods

rnf :: KeyManagerType -> ()

ToHeader KeyManagerType

Methods

toHeader :: HeaderName -> KeyManagerType -> [Header]

ToQuery KeyManagerType

Methods

toQuery :: KeyManagerType -> QueryString

ToByteString KeyManagerType

Methods

toBS :: KeyManagerType -> ByteString

FromText KeyManagerType

Methods

parser :: Parser KeyManagerType

ToText KeyManagerType

Methods

toText :: KeyManagerType -> Text

type Rep KeyManagerType

type Rep KeyManagerType = D1 * (MetaData "KeyManagerType" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) ((:+:) * (C1 * (MetaCons "AWS" PrefixI False) (U1 *)) (C1 * (MetaCons "Customer" PrefixI False) (U1 *)))

KeyState

data KeyState

Constructors

Disabled

Enabled

PendingDeletion

PendingImport

Instances

Bounded KeyState

Methods

minBound :: KeyState

maxBound :: KeyState

Enum KeyState

Methods

succ :: KeyState -> KeyState

pred :: KeyState -> KeyState

toEnum :: Int -> KeyState

fromEnum :: KeyState -> Int

enumFrom :: KeyState -> [KeyState]

enumFromThen :: KeyState -> KeyState -> [KeyState]

enumFromTo :: KeyState -> KeyState -> [KeyState]

enumFromThenTo :: KeyState -> KeyState -> KeyState -> [KeyState]

Eq KeyState

Methods

(==) :: KeyState -> KeyState -> Bool

(/=) :: KeyState -> KeyState -> Bool

Data KeyState

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> KeyState -> c KeyState

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c KeyState

toConstr :: KeyState -> Constr

dataTypeOf :: KeyState -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c KeyState)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c KeyState)

gmapT :: (forall b. Data b => b -> b) -> KeyState -> KeyState

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> KeyState -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> KeyState -> r

gmapQ :: (forall d. Data d => d -> u) -> KeyState -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> KeyState -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> KeyState -> m KeyState

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyState -> m KeyState

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyState -> m KeyState

Ord KeyState

Methods

compare :: KeyState -> KeyState -> Ordering

(<) :: KeyState -> KeyState -> Bool

(<=) :: KeyState -> KeyState -> Bool

(>) :: KeyState -> KeyState -> Bool

(>=) :: KeyState -> KeyState -> Bool

max :: KeyState -> KeyState -> KeyState

min :: KeyState -> KeyState -> KeyState

Read KeyState

Methods

readsPrec :: Int -> ReadS KeyState

readList :: ReadS [KeyState]

readPrec :: ReadPrec KeyState

readListPrec :: ReadPrec [KeyState]

Show KeyState

Methods

showsPrec :: Int -> KeyState -> ShowS

show :: KeyState -> String

showList :: [KeyState] -> ShowS

Generic KeyState

Associated Types

type Rep KeyState :: * -> *

Methods

from :: KeyState -> Rep KeyState x

to :: Rep KeyState x -> KeyState

Hashable KeyState

Methods

hashWithSalt :: Int -> KeyState -> Int

hash :: KeyState -> Int

FromJSON KeyState

Methods

parseJSON :: Value -> Parser KeyState

parseJSONList :: Value -> Parser [KeyState]

NFData KeyState

Methods

rnf :: KeyState -> ()

ToHeader KeyState

Methods

toHeader :: HeaderName -> KeyState -> [Header]

ToQuery KeyState

Methods

toQuery :: KeyState -> QueryString

ToByteString KeyState

Methods

toBS :: KeyState -> ByteString

FromText KeyState

Methods

parser :: Parser KeyState

ToText KeyState

Methods

toText :: KeyState -> Text

type Rep KeyState

type Rep KeyState = D1 * (MetaData "KeyState" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) ((:+:) * ((:+:) * (C1 * (MetaCons "Disabled" PrefixI False) (U1 *)) (C1 * (MetaCons "Enabled" PrefixI False) (U1 *))) ((:+:) * (C1 * (MetaCons "PendingDeletion" PrefixI False) (U1 *)) (C1 * (MetaCons "PendingImport" PrefixI False) (U1 *))))

KeyUsageType

data KeyUsageType

Constructors

EncryptDecrypt

Instances

Bounded KeyUsageType

Methods

minBound :: KeyUsageType

maxBound :: KeyUsageType

Enum KeyUsageType

Methods

succ :: KeyUsageType -> KeyUsageType

pred :: KeyUsageType -> KeyUsageType

toEnum :: Int -> KeyUsageType

fromEnum :: KeyUsageType -> Int

enumFrom :: KeyUsageType -> [KeyUsageType]

enumFromThen :: KeyUsageType -> KeyUsageType -> [KeyUsageType]

enumFromTo :: KeyUsageType -> KeyUsageType -> [KeyUsageType]

enumFromThenTo :: KeyUsageType -> KeyUsageType -> KeyUsageType -> [KeyUsageType]

Eq KeyUsageType

Methods

(==) :: KeyUsageType -> KeyUsageType -> Bool

(/=) :: KeyUsageType -> KeyUsageType -> Bool

Data KeyUsageType

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> KeyUsageType -> c KeyUsageType

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c KeyUsageType

toConstr :: KeyUsageType -> Constr

dataTypeOf :: KeyUsageType -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c KeyUsageType)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c KeyUsageType)

gmapT :: (forall b. Data b => b -> b) -> KeyUsageType -> KeyUsageType

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> KeyUsageType -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> KeyUsageType -> r

gmapQ :: (forall d. Data d => d -> u) -> KeyUsageType -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> KeyUsageType -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> KeyUsageType -> m KeyUsageType

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyUsageType -> m KeyUsageType

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyUsageType -> m KeyUsageType

Ord KeyUsageType

Methods

compare :: KeyUsageType -> KeyUsageType -> Ordering

(<) :: KeyUsageType -> KeyUsageType -> Bool

(<=) :: KeyUsageType -> KeyUsageType -> Bool

(>) :: KeyUsageType -> KeyUsageType -> Bool

(>=) :: KeyUsageType -> KeyUsageType -> Bool

max :: KeyUsageType -> KeyUsageType -> KeyUsageType

min :: KeyUsageType -> KeyUsageType -> KeyUsageType

Read KeyUsageType

Methods

readsPrec :: Int -> ReadS KeyUsageType

readList :: ReadS [KeyUsageType]

readPrec :: ReadPrec KeyUsageType

readListPrec :: ReadPrec [KeyUsageType]

Show KeyUsageType

Methods

showsPrec :: Int -> KeyUsageType -> ShowS

show :: KeyUsageType -> String

showList :: [KeyUsageType] -> ShowS

Generic KeyUsageType

Associated Types

type Rep KeyUsageType :: * -> *

Methods

from :: KeyUsageType -> Rep KeyUsageType x

to :: Rep KeyUsageType x -> KeyUsageType

Hashable KeyUsageType

Methods

hashWithSalt :: Int -> KeyUsageType -> Int

hash :: KeyUsageType -> Int

ToJSON KeyUsageType

Methods

toJSON :: KeyUsageType -> Value

toEncoding :: KeyUsageType -> Encoding

toJSONList :: [KeyUsageType] -> Value

toEncodingList :: [KeyUsageType] -> Encoding

FromJSON KeyUsageType

Methods

parseJSON :: Value -> Parser KeyUsageType

parseJSONList :: Value -> Parser [KeyUsageType]

NFData KeyUsageType

Methods

rnf :: KeyUsageType -> ()

ToHeader KeyUsageType

Methods

toHeader :: HeaderName -> KeyUsageType -> [Header]

ToQuery KeyUsageType

Methods

toQuery :: KeyUsageType -> QueryString

ToByteString KeyUsageType

Methods

toBS :: KeyUsageType -> ByteString

FromText KeyUsageType

Methods

parser :: Parser KeyUsageType

ToText KeyUsageType

Methods

toText :: KeyUsageType -> Text

type Rep KeyUsageType

type Rep KeyUsageType = D1 * (MetaData "KeyUsageType" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "EncryptDecrypt" PrefixI False) (U1 *))

OriginType

data OriginType

Constructors

AWSKMS

External

Instances

Bounded OriginType

Methods

minBound :: OriginType

maxBound :: OriginType

Enum OriginType

Methods

succ :: OriginType -> OriginType

pred :: OriginType -> OriginType

toEnum :: Int -> OriginType

fromEnum :: OriginType -> Int

enumFrom :: OriginType -> [OriginType]

enumFromThen :: OriginType -> OriginType -> [OriginType]

enumFromTo :: OriginType -> OriginType -> [OriginType]

enumFromThenTo :: OriginType -> OriginType -> OriginType -> [OriginType]

Eq OriginType

Methods

(==) :: OriginType -> OriginType -> Bool

(/=) :: OriginType -> OriginType -> Bool

Data OriginType

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> OriginType -> c OriginType

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c OriginType

toConstr :: OriginType -> Constr

dataTypeOf :: OriginType -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c OriginType)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c OriginType)

gmapT :: (forall b. Data b => b -> b) -> OriginType -> OriginType

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> OriginType -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> OriginType -> r

gmapQ :: (forall d. Data d => d -> u) -> OriginType -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> OriginType -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> OriginType -> m OriginType

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> OriginType -> m OriginType

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> OriginType -> m OriginType

Ord OriginType

Methods

compare :: OriginType -> OriginType -> Ordering

(<) :: OriginType -> OriginType -> Bool

(<=) :: OriginType -> OriginType -> Bool

(>) :: OriginType -> OriginType -> Bool

(>=) :: OriginType -> OriginType -> Bool

max :: OriginType -> OriginType -> OriginType

min :: OriginType -> OriginType -> OriginType

Read OriginType

Methods

readsPrec :: Int -> ReadS OriginType

readList :: ReadS [OriginType]

readPrec :: ReadPrec OriginType

readListPrec :: ReadPrec [OriginType]

Show OriginType

Methods

showsPrec :: Int -> OriginType -> ShowS

show :: OriginType -> String

showList :: [OriginType] -> ShowS

Generic OriginType

Associated Types

type Rep OriginType :: * -> *

Methods

from :: OriginType -> Rep OriginType x

to :: Rep OriginType x -> OriginType

Hashable OriginType

Methods

hashWithSalt :: Int -> OriginType -> Int

hash :: OriginType -> Int

ToJSON OriginType

Methods

toJSON :: OriginType -> Value

toEncoding :: OriginType -> Encoding

toJSONList :: [OriginType] -> Value

toEncodingList :: [OriginType] -> Encoding

FromJSON OriginType

Methods

parseJSON :: Value -> Parser OriginType

parseJSONList :: Value -> Parser [OriginType]

NFData OriginType

Methods

rnf :: OriginType -> ()

ToHeader OriginType

Methods

toHeader :: HeaderName -> OriginType -> [Header]

ToQuery OriginType

Methods

toQuery :: OriginType -> QueryString

ToByteString OriginType

Methods

toBS :: OriginType -> ByteString

FromText OriginType

Methods

parser :: Parser OriginType

ToText OriginType

Methods

toText :: OriginType -> Text

type Rep OriginType

type Rep OriginType = D1 * (MetaData "OriginType" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) ((:+:) * (C1 * (MetaCons "AWSKMS" PrefixI False) (U1 *)) (C1 * (MetaCons "External" PrefixI False) (U1 *)))

WrappingKeySpec

data WrappingKeySpec

Constructors

Rsa2048

Instances

Bounded WrappingKeySpec

Methods

minBound :: WrappingKeySpec

maxBound :: WrappingKeySpec

Enum WrappingKeySpec

Methods

succ :: WrappingKeySpec -> WrappingKeySpec

pred :: WrappingKeySpec -> WrappingKeySpec

toEnum :: Int -> WrappingKeySpec

fromEnum :: WrappingKeySpec -> Int

enumFrom :: WrappingKeySpec -> [WrappingKeySpec]

enumFromThen :: WrappingKeySpec -> WrappingKeySpec -> [WrappingKeySpec]

enumFromTo :: WrappingKeySpec -> WrappingKeySpec -> [WrappingKeySpec]

enumFromThenTo :: WrappingKeySpec -> WrappingKeySpec -> WrappingKeySpec -> [WrappingKeySpec]

Eq WrappingKeySpec

Methods

(==) :: WrappingKeySpec -> WrappingKeySpec -> Bool

(/=) :: WrappingKeySpec -> WrappingKeySpec -> Bool

Data WrappingKeySpec

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> WrappingKeySpec -> c WrappingKeySpec

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c WrappingKeySpec

toConstr :: WrappingKeySpec -> Constr

dataTypeOf :: WrappingKeySpec -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c WrappingKeySpec)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c WrappingKeySpec)

gmapT :: (forall b. Data b => b -> b) -> WrappingKeySpec -> WrappingKeySpec

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> WrappingKeySpec -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> WrappingKeySpec -> r

gmapQ :: (forall d. Data d => d -> u) -> WrappingKeySpec -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> WrappingKeySpec -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> WrappingKeySpec -> m WrappingKeySpec

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> WrappingKeySpec -> m WrappingKeySpec

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> WrappingKeySpec -> m WrappingKeySpec

Ord WrappingKeySpec

Methods

compare :: WrappingKeySpec -> WrappingKeySpec -> Ordering

(<) :: WrappingKeySpec -> WrappingKeySpec -> Bool

(<=) :: WrappingKeySpec -> WrappingKeySpec -> Bool

(>) :: WrappingKeySpec -> WrappingKeySpec -> Bool

(>=) :: WrappingKeySpec -> WrappingKeySpec -> Bool

max :: WrappingKeySpec -> WrappingKeySpec -> WrappingKeySpec

min :: WrappingKeySpec -> WrappingKeySpec -> WrappingKeySpec

Read WrappingKeySpec

Methods

readsPrec :: Int -> ReadS WrappingKeySpec

readList :: ReadS [WrappingKeySpec]

readPrec :: ReadPrec WrappingKeySpec

readListPrec :: ReadPrec [WrappingKeySpec]

Show WrappingKeySpec

Methods

showsPrec :: Int -> WrappingKeySpec -> ShowS

show :: WrappingKeySpec -> String

showList :: [WrappingKeySpec] -> ShowS

Generic WrappingKeySpec

Associated Types

type Rep WrappingKeySpec :: * -> *

Methods

from :: WrappingKeySpec -> Rep WrappingKeySpec x

to :: Rep WrappingKeySpec x -> WrappingKeySpec

Hashable WrappingKeySpec

Methods

hashWithSalt :: Int -> WrappingKeySpec -> Int

hash :: WrappingKeySpec -> Int

ToJSON WrappingKeySpec

Methods

toJSON :: WrappingKeySpec -> Value

toEncoding :: WrappingKeySpec -> Encoding

toJSONList :: [WrappingKeySpec] -> Value

toEncodingList :: [WrappingKeySpec] -> Encoding

NFData WrappingKeySpec

Methods

rnf :: WrappingKeySpec -> ()

ToHeader WrappingKeySpec

Methods

toHeader :: HeaderName -> WrappingKeySpec -> [Header]

ToQuery WrappingKeySpec

Methods

toQuery :: WrappingKeySpec -> QueryString

ToByteString WrappingKeySpec

Methods

toBS :: WrappingKeySpec -> ByteString

FromText WrappingKeySpec

Methods

parser :: Parser WrappingKeySpec

ToText WrappingKeySpec

Methods

toText :: WrappingKeySpec -> Text

type Rep WrappingKeySpec

type Rep WrappingKeySpec = D1 * (MetaData "WrappingKeySpec" "Network.AWS.KMS.Types.Sum" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "Rsa2048" PrefixI False) (U1 *))

AliasListEntry

data AliasListEntry

Contains information about an alias.

See: aliasListEntry smart constructor.

Instances

Eq AliasListEntry

Methods

(==) :: AliasListEntry -> AliasListEntry -> Bool

(/=) :: AliasListEntry -> AliasListEntry -> Bool

Data AliasListEntry

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> AliasListEntry -> c AliasListEntry

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c AliasListEntry

toConstr :: AliasListEntry -> Constr

dataTypeOf :: AliasListEntry -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c AliasListEntry)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c AliasListEntry)

gmapT :: (forall b. Data b => b -> b) -> AliasListEntry -> AliasListEntry

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> AliasListEntry -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> AliasListEntry -> r

gmapQ :: (forall d. Data d => d -> u) -> AliasListEntry -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> AliasListEntry -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> AliasListEntry -> m AliasListEntry

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> AliasListEntry -> m AliasListEntry

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> AliasListEntry -> m AliasListEntry

Read AliasListEntry

Methods

readsPrec :: Int -> ReadS AliasListEntry

readList :: ReadS [AliasListEntry]

readPrec :: ReadPrec AliasListEntry

readListPrec :: ReadPrec [AliasListEntry]

Show AliasListEntry

Methods

showsPrec :: Int -> AliasListEntry -> ShowS

show :: AliasListEntry -> String

showList :: [AliasListEntry] -> ShowS

Generic AliasListEntry

Associated Types

type Rep AliasListEntry :: * -> *

Methods

from :: AliasListEntry -> Rep AliasListEntry x

to :: Rep AliasListEntry x -> AliasListEntry

Hashable AliasListEntry

Methods

hashWithSalt :: Int -> AliasListEntry -> Int

hash :: AliasListEntry -> Int

FromJSON AliasListEntry

Methods

parseJSON :: Value -> Parser AliasListEntry

parseJSONList :: Value -> Parser [AliasListEntry]

NFData AliasListEntry

Methods

rnf :: AliasListEntry -> ()

type Rep AliasListEntry

type Rep AliasListEntry = D1 * (MetaData "AliasListEntry" "Network.AWS.KMS.Types.Product" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "AliasListEntry'" PrefixI True) ((:*:) * (S1 * (MetaSel (Just Symbol "_aleTargetKeyId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) ((:*:) * (S1 * (MetaSel (Just Symbol "_aleAliasName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_aleAliasARN") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))))))

aliasListEntry :: AliasListEntry

Creates a value of AliasListEntry with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• aleTargetKeyId - String that contains the key identifier referred to by the alias.
• aleAliasName - String that contains the alias.
• aleAliasARN - String that contains the key ARN.

aleTargetKeyId :: Lens' AliasListEntry (Maybe Text)

String that contains the key identifier referred to by the alias.

aleAliasName :: Lens' AliasListEntry (Maybe Text)

String that contains the alias.

aleAliasARN :: Lens' AliasListEntry (Maybe Text)

String that contains the key ARN.

GrantConstraints

data GrantConstraints

A structure that you can use to allow certain operations in the grant only when the desired encryption context is present. For more information about encryption context, see Encryption Context in the AWS Key Management Service Developer Guide .

Grant constraints apply only to operations that accept encryption context as input. For example, the DescribeKey operation does not accept encryption context as input. A grant that allows the DescribeKey operation does so regardless of the grant constraints. In constrast, the Encrypt operation accepts encryption context as input. A grant that allows the Encrypt operation does so only when the encryption context of the Encrypt operation satisfies the grant constraints.

See: grantConstraints smart constructor.

Instances

Eq GrantConstraints

Methods

(==) :: GrantConstraints -> GrantConstraints -> Bool

(/=) :: GrantConstraints -> GrantConstraints -> Bool

Data GrantConstraints

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> GrantConstraints -> c GrantConstraints

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c GrantConstraints

toConstr :: GrantConstraints -> Constr

dataTypeOf :: GrantConstraints -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c GrantConstraints)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c GrantConstraints)

gmapT :: (forall b. Data b => b -> b) -> GrantConstraints -> GrantConstraints

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> GrantConstraints -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> GrantConstraints -> r

gmapQ :: (forall d. Data d => d -> u) -> GrantConstraints -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> GrantConstraints -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> GrantConstraints -> m GrantConstraints

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> GrantConstraints -> m GrantConstraints

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> GrantConstraints -> m GrantConstraints

Read GrantConstraints

Methods

readsPrec :: Int -> ReadS GrantConstraints

readList :: ReadS [GrantConstraints]

readPrec :: ReadPrec GrantConstraints

readListPrec :: ReadPrec [GrantConstraints]

Show GrantConstraints

Methods

showsPrec :: Int -> GrantConstraints -> ShowS

show :: GrantConstraints -> String

showList :: [GrantConstraints] -> ShowS

Generic GrantConstraints

Associated Types

type Rep GrantConstraints :: * -> *

Methods

from :: GrantConstraints -> Rep GrantConstraints x

to :: Rep GrantConstraints x -> GrantConstraints

Hashable GrantConstraints

Methods

hashWithSalt :: Int -> GrantConstraints -> Int

hash :: GrantConstraints -> Int

ToJSON GrantConstraints

Methods

toJSON :: GrantConstraints -> Value

toEncoding :: GrantConstraints -> Encoding

toJSONList :: [GrantConstraints] -> Value

toEncodingList :: [GrantConstraints] -> Encoding

FromJSON GrantConstraints

Methods

parseJSON :: Value -> Parser GrantConstraints

parseJSONList :: Value -> Parser [GrantConstraints]

NFData GrantConstraints

Methods

rnf :: GrantConstraints -> ()

type Rep GrantConstraints

type Rep GrantConstraints = D1 * (MetaData "GrantConstraints" "Network.AWS.KMS.Types.Product" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "GrantConstraints'" PrefixI True) ((:*:) * (S1 * (MetaSel (Just Symbol "_gcEncryptionContextEquals") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe (Map Text Text)))) (S1 * (MetaSel (Just Symbol "_gcEncryptionContextSubset") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe (Map Text Text))))))

grantConstraints :: GrantConstraints

Creates a value of GrantConstraints with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• gcEncryptionContextEquals - A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows. When certain subsequent operations allowed by the grant include encryption context that matches this list, the grant allows the operation. Otherwise, the grant does not allow the operation.
• gcEncryptionContextSubset - A list of key-value pairs, all of which must be present in the encryption context of certain subsequent operations that the grant allows. When certain subsequent operations allowed by the grant include encryption context that matches this list or is a superset of this list, the grant allows the operation. Otherwise, the grant does not allow the operation.

gcEncryptionContextEquals :: Lens' GrantConstraints (HashMap Text Text)

A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows. When certain subsequent operations allowed by the grant include encryption context that matches this list, the grant allows the operation. Otherwise, the grant does not allow the operation.

gcEncryptionContextSubset :: Lens' GrantConstraints (HashMap Text Text)

A list of key-value pairs, all of which must be present in the encryption context of certain subsequent operations that the grant allows. When certain subsequent operations allowed by the grant include encryption context that matches this list or is a superset of this list, the grant allows the operation. Otherwise, the grant does not allow the operation.

GrantListEntry

data GrantListEntry

Contains information about an entry in a list of grants.

See: grantListEntry smart constructor.

Instances

Eq GrantListEntry

Methods

(==) :: GrantListEntry -> GrantListEntry -> Bool

(/=) :: GrantListEntry -> GrantListEntry -> Bool

Data GrantListEntry

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> GrantListEntry -> c GrantListEntry

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c GrantListEntry

toConstr :: GrantListEntry -> Constr

dataTypeOf :: GrantListEntry -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c GrantListEntry)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c GrantListEntry)

gmapT :: (forall b. Data b => b -> b) -> GrantListEntry -> GrantListEntry

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> GrantListEntry -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> GrantListEntry -> r

gmapQ :: (forall d. Data d => d -> u) -> GrantListEntry -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> GrantListEntry -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> GrantListEntry -> m GrantListEntry

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> GrantListEntry -> m GrantListEntry

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> GrantListEntry -> m GrantListEntry

Read GrantListEntry

Methods

readsPrec :: Int -> ReadS GrantListEntry

readList :: ReadS [GrantListEntry]

readPrec :: ReadPrec GrantListEntry

readListPrec :: ReadPrec [GrantListEntry]

Show GrantListEntry

Methods

showsPrec :: Int -> GrantListEntry -> ShowS

show :: GrantListEntry -> String

showList :: [GrantListEntry] -> ShowS

Generic GrantListEntry

Associated Types

type Rep GrantListEntry :: * -> *

Methods

from :: GrantListEntry -> Rep GrantListEntry x

to :: Rep GrantListEntry x -> GrantListEntry

Hashable GrantListEntry

Methods

hashWithSalt :: Int -> GrantListEntry -> Int

hash :: GrantListEntry -> Int

FromJSON GrantListEntry

Methods

parseJSON :: Value -> Parser GrantListEntry

parseJSONList :: Value -> Parser [GrantListEntry]

NFData GrantListEntry

Methods

rnf :: GrantListEntry -> ()

type Rep GrantListEntry

type Rep GrantListEntry = D1 * (MetaData "GrantListEntry" "Network.AWS.KMS.Types.Product" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "GrantListEntry'" PrefixI True) ((:*:) * ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_gleKeyId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_gleRetiringPrincipal") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text)))) ((:*:) * (S1 * (MetaSel (Just Symbol "_gleIssuingAccount") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_gleGrantId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))))) ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_gleConstraints") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe GrantConstraints))) (S1 * (MetaSel (Just Symbol "_gleGranteePrincipal") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text)))) ((:*:) * (S1 * (MetaSel (Just Symbol "_gleName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) ((:*:) * (S1 * (MetaSel (Just Symbol "_gleCreationDate") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe POSIX))) (S1 * (MetaSel (Just Symbol "_gleOperations") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe [GrantOperation]))))))))

grantListEntry :: GrantListEntry

Creates a value of GrantListEntry with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• gleKeyId - The unique identifier for the customer master key (CMK) to which the grant applies.
• gleRetiringPrincipal - The principal that can retire the grant.
• gleIssuingAccount - The AWS account under which the grant was issued.
• gleGrantId - The unique identifier for the grant.
• gleConstraints - A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows.
• gleGranteePrincipal - The principal that receives the grant's permissions.
• gleName - The friendly name that identifies the grant. If a name was provided in the CreateGrant request, that name is returned. Otherwise this value is null.
• gleCreationDate - The date and time when the grant was created.
• gleOperations - The list of operations permitted by the grant.

gleKeyId :: Lens' GrantListEntry (Maybe Text)

The unique identifier for the customer master key (CMK) to which the grant applies.

gleRetiringPrincipal :: Lens' GrantListEntry (Maybe Text)

The principal that can retire the grant.

gleIssuingAccount :: Lens' GrantListEntry (Maybe Text)

The AWS account under which the grant was issued.

gleGrantId :: Lens' GrantListEntry (Maybe Text)

The unique identifier for the grant.

gleConstraints :: Lens' GrantListEntry (Maybe GrantConstraints)

A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows.

gleGranteePrincipal :: Lens' GrantListEntry (Maybe Text)

The principal that receives the grant's permissions.

gleName :: Lens' GrantListEntry (Maybe Text)

The friendly name that identifies the grant. If a name was provided in the CreateGrant request, that name is returned. Otherwise this value is null.

gleCreationDate :: Lens' GrantListEntry (Maybe UTCTime)

The date and time when the grant was created.

gleOperations :: Lens' GrantListEntry [GrantOperation]

The list of operations permitted by the grant.

KeyListEntry

data KeyListEntry

Contains information about each entry in the key list.

See: keyListEntry smart constructor.

Instances

Eq KeyListEntry

Methods

(==) :: KeyListEntry -> KeyListEntry -> Bool

(/=) :: KeyListEntry -> KeyListEntry -> Bool

Data KeyListEntry

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> KeyListEntry -> c KeyListEntry

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c KeyListEntry

toConstr :: KeyListEntry -> Constr

dataTypeOf :: KeyListEntry -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c KeyListEntry)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c KeyListEntry)

gmapT :: (forall b. Data b => b -> b) -> KeyListEntry -> KeyListEntry

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> KeyListEntry -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> KeyListEntry -> r

gmapQ :: (forall d. Data d => d -> u) -> KeyListEntry -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> KeyListEntry -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> KeyListEntry -> m KeyListEntry

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyListEntry -> m KeyListEntry

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyListEntry -> m KeyListEntry

Read KeyListEntry

Methods

readsPrec :: Int -> ReadS KeyListEntry

readList :: ReadS [KeyListEntry]

readPrec :: ReadPrec KeyListEntry

readListPrec :: ReadPrec [KeyListEntry]

Show KeyListEntry

Methods

showsPrec :: Int -> KeyListEntry -> ShowS

show :: KeyListEntry -> String

showList :: [KeyListEntry] -> ShowS

Generic KeyListEntry

Associated Types

type Rep KeyListEntry :: * -> *

Methods

from :: KeyListEntry -> Rep KeyListEntry x

to :: Rep KeyListEntry x -> KeyListEntry

Hashable KeyListEntry

Methods

hashWithSalt :: Int -> KeyListEntry -> Int

hash :: KeyListEntry -> Int

FromJSON KeyListEntry

Methods

parseJSON :: Value -> Parser KeyListEntry

parseJSONList :: Value -> Parser [KeyListEntry]

NFData KeyListEntry

Methods

rnf :: KeyListEntry -> ()

type Rep KeyListEntry

type Rep KeyListEntry = D1 * (MetaData "KeyListEntry" "Network.AWS.KMS.Types.Product" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "KeyListEntry'" PrefixI True) ((:*:) * (S1 * (MetaSel (Just Symbol "_kleKeyId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_kleKeyARN") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text)))))

keyListEntry :: KeyListEntry

Creates a value of KeyListEntry with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• kleKeyId - Unique identifier of the key.
• kleKeyARN - ARN of the key.

kleKeyId :: Lens' KeyListEntry (Maybe Text)

Unique identifier of the key.

kleKeyARN :: Lens' KeyListEntry (Maybe Text)

ARN of the key.

KeyMetadata

data KeyMetadata

Contains metadata about a customer master key (CMK).

This data type is used as a response element for the CreateKey and DescribeKey operations.

See: keyMetadata smart constructor.

Instances

Eq KeyMetadata

Methods

(==) :: KeyMetadata -> KeyMetadata -> Bool

(/=) :: KeyMetadata -> KeyMetadata -> Bool

Data KeyMetadata

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> KeyMetadata -> c KeyMetadata

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c KeyMetadata

toConstr :: KeyMetadata -> Constr

dataTypeOf :: KeyMetadata -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c KeyMetadata)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c KeyMetadata)

gmapT :: (forall b. Data b => b -> b) -> KeyMetadata -> KeyMetadata

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> KeyMetadata -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> KeyMetadata -> r

gmapQ :: (forall d. Data d => d -> u) -> KeyMetadata -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> KeyMetadata -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> KeyMetadata -> m KeyMetadata

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyMetadata -> m KeyMetadata

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyMetadata -> m KeyMetadata

Read KeyMetadata

Methods

readsPrec :: Int -> ReadS KeyMetadata

readList :: ReadS [KeyMetadata]

readPrec :: ReadPrec KeyMetadata

readListPrec :: ReadPrec [KeyMetadata]

Show KeyMetadata

Methods

showsPrec :: Int -> KeyMetadata -> ShowS

show :: KeyMetadata -> String

showList :: [KeyMetadata] -> ShowS

Generic KeyMetadata

Associated Types

type Rep KeyMetadata :: * -> *

Methods

from :: KeyMetadata -> Rep KeyMetadata x

to :: Rep KeyMetadata x -> KeyMetadata

Hashable KeyMetadata

Methods

hashWithSalt :: Int -> KeyMetadata -> Int

hash :: KeyMetadata -> Int

FromJSON KeyMetadata

Methods

parseJSON :: Value -> Parser KeyMetadata

parseJSONList :: Value -> Parser [KeyMetadata]

NFData KeyMetadata

Methods

rnf :: KeyMetadata -> ()

type Rep KeyMetadata

type Rep KeyMetadata = D1 * (MetaData "KeyMetadata" "Network.AWS.KMS.Types.Product" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "KeyMetadata'" PrefixI True) ((:*:) * ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_kmOrigin") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe OriginType))) ((:*:) * (S1 * (MetaSel (Just Symbol "_kmExpirationModel") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe ExpirationModelType))) (S1 * (MetaSel (Just Symbol "_kmKeyManager") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe KeyManagerType))))) ((:*:) * (S1 * (MetaSel (Just Symbol "_kmEnabled") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Bool))) ((:*:) * (S1 * (MetaSel (Just Symbol "_kmValidTo") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe POSIX))) (S1 * (MetaSel (Just Symbol "_kmARN") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text)))))) ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_kmKeyState") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe KeyState))) ((:*:) * (S1 * (MetaSel (Just Symbol "_kmAWSAccountId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_kmKeyUsage") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe KeyUsageType))))) ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_kmCreationDate") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe POSIX))) (S1 * (MetaSel (Just Symbol "_kmDeletionDate") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe POSIX)))) ((:*:) * (S1 * (MetaSel (Just Symbol "_kmDescription") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_kmKeyId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * Text)))))))

keyMetadata

Arguments

:: Text

kmKeyId

-> KeyMetadata

Creates a value of KeyMetadata with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• kmOrigin - The source of the CMK's key material. When this value is AWS_KMS , AWS KMS created the key material. When this value is EXTERNAL , the key material was imported from your existing key management infrastructure or the CMK lacks key material.
• kmExpirationModel - Specifies whether the CMK's key material expires. This value is present only when Origin is EXTERNAL , otherwise this value is omitted.
• kmKeyManager - The CMK's manager. CMKs are either customer-managed or AWS-managed. For more information about the difference, see Customer Master Keys in the AWS Key Management Service Developer Guide .
• kmEnabled - Specifies whether the CMK is enabled. When KeyState is Enabled this value is true, otherwise it is false.
• kmValidTo - The time at which the imported key material expires. When the key material expires, AWS KMS deletes the key material and the CMK becomes unusable. This value is present only for CMKs whose Origin is EXTERNAL and whose ExpirationModel is KEY_MATERIAL_EXPIRES , otherwise this value is omitted.
• kmARN - The Amazon Resource Name (ARN) of the CMK. For examples, see AWS Key Management Service (AWS KMS) in the Example ARNs section of the AWS General Reference .
• kmKeyState - The state of the CMK. For more information about how key state affects the use of a CMK, see How Key State Affects the Use of a Customer Master Key in the AWS Key Management Service Developer Guide .
• kmAWSAccountId - The twelve-digit account ID of the AWS account that owns the CMK.
• kmKeyUsage - The cryptographic operations for which you can use the CMK. Currently the only allowed value is ENCRYPT_DECRYPT , which means you can use the CMK for the Encrypt and Decrypt operations.
• kmCreationDate - The date and time when the CMK was created.
• kmDeletionDate - The date and time after which AWS KMS deletes the CMK. This value is present only when KeyState is PendingDeletion , otherwise this value is omitted.
• kmDescription - The description of the CMK.
• kmKeyId - The globally unique identifier for the CMK.

kmOrigin :: Lens' KeyMetadata (Maybe OriginType)

The source of the CMK's key material. When this value is AWS_KMS , AWS KMS created the key material. When this value is EXTERNAL , the key material was imported from your existing key management infrastructure or the CMK lacks key material.

kmExpirationModel :: Lens' KeyMetadata (Maybe ExpirationModelType)

Specifies whether the CMK's key material expires. This value is present only when Origin is EXTERNAL , otherwise this value is omitted.

kmKeyManager :: Lens' KeyMetadata (Maybe KeyManagerType)

The CMK's manager. CMKs are either customer-managed or AWS-managed. For more information about the difference, see Customer Master Keys in the AWS Key Management Service Developer Guide .

kmEnabled :: Lens' KeyMetadata (Maybe Bool)

Specifies whether the CMK is enabled. When KeyState is Enabled this value is true, otherwise it is false.

kmValidTo :: Lens' KeyMetadata (Maybe UTCTime)

The time at which the imported key material expires. When the key material expires, AWS KMS deletes the key material and the CMK becomes unusable. This value is present only for CMKs whose Origin is EXTERNAL and whose ExpirationModel is KEY_MATERIAL_EXPIRES , otherwise this value is omitted.

kmARN :: Lens' KeyMetadata (Maybe Text)

The Amazon Resource Name (ARN) of the CMK. For examples, see AWS Key Management Service (AWS KMS) in the Example ARNs section of the AWS General Reference .

kmKeyState :: Lens' KeyMetadata (Maybe KeyState)

The state of the CMK. For more information about how key state affects the use of a CMK, see How Key State Affects the Use of a Customer Master Key in the AWS Key Management Service Developer Guide .

kmAWSAccountId :: Lens' KeyMetadata (Maybe Text)

The twelve-digit account ID of the AWS account that owns the CMK.

kmKeyUsage :: Lens' KeyMetadata (Maybe KeyUsageType)

The cryptographic operations for which you can use the CMK. Currently the only allowed value is ENCRYPT_DECRYPT , which means you can use the CMK for the Encrypt and Decrypt operations.

kmCreationDate :: Lens' KeyMetadata (Maybe UTCTime)

The date and time when the CMK was created.

kmDeletionDate :: Lens' KeyMetadata (Maybe UTCTime)

The date and time after which AWS KMS deletes the CMK. This value is present only when KeyState is PendingDeletion , otherwise this value is omitted.

kmDescription :: Lens' KeyMetadata (Maybe Text)

The description of the CMK.

kmKeyId :: Lens' KeyMetadata Text

The globally unique identifier for the CMK.

ListGrantsResponse

data ListGrantsResponse

See: listGrantsResponse smart constructor.

Instances

Eq ListGrantsResponse

Methods

(==) :: ListGrantsResponse -> ListGrantsResponse -> Bool

(/=) :: ListGrantsResponse -> ListGrantsResponse -> Bool

Data ListGrantsResponse

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> ListGrantsResponse -> c ListGrantsResponse

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c ListGrantsResponse

toConstr :: ListGrantsResponse -> Constr

dataTypeOf :: ListGrantsResponse -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c ListGrantsResponse)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c ListGrantsResponse)

gmapT :: (forall b. Data b => b -> b) -> ListGrantsResponse -> ListGrantsResponse

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> ListGrantsResponse -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> ListGrantsResponse -> r

gmapQ :: (forall d. Data d => d -> u) -> ListGrantsResponse -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> ListGrantsResponse -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> ListGrantsResponse -> m ListGrantsResponse

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> ListGrantsResponse -> m ListGrantsResponse

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> ListGrantsResponse -> m ListGrantsResponse

Read ListGrantsResponse

Methods

readsPrec :: Int -> ReadS ListGrantsResponse

readList :: ReadS [ListGrantsResponse]

readPrec :: ReadPrec ListGrantsResponse

readListPrec :: ReadPrec [ListGrantsResponse]

Show ListGrantsResponse

Methods

showsPrec :: Int -> ListGrantsResponse -> ShowS

show :: ListGrantsResponse -> String

showList :: [ListGrantsResponse] -> ShowS

Generic ListGrantsResponse

Associated Types

type Rep ListGrantsResponse :: * -> *

Methods

from :: ListGrantsResponse -> Rep ListGrantsResponse x

to :: Rep ListGrantsResponse x -> ListGrantsResponse

Hashable ListGrantsResponse

Methods

hashWithSalt :: Int -> ListGrantsResponse -> Int

hash :: ListGrantsResponse -> Int

FromJSON ListGrantsResponse

Methods

parseJSON :: Value -> Parser ListGrantsResponse

parseJSONList :: Value -> Parser [ListGrantsResponse]

NFData ListGrantsResponse

Methods

rnf :: ListGrantsResponse -> ()

type Rep ListGrantsResponse

type Rep ListGrantsResponse = D1 * (MetaData "ListGrantsResponse" "Network.AWS.KMS.Types.Product" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "ListGrantsResponse'" PrefixI True) ((:*:) * (S1 * (MetaSel (Just Symbol "_lgTruncated") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Bool))) ((:*:) * (S1 * (MetaSel (Just Symbol "_lgGrants") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe [GrantListEntry]))) (S1 * (MetaSel (Just Symbol "_lgNextMarker") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))))))

listGrantsResponse :: ListGrantsResponse

Creates a value of ListGrantsResponse with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• lgTruncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in this response to the Marker parameter in a subsequent request.
• lgGrants - A list of grants.
• lgNextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

lgTruncated :: Lens' ListGrantsResponse (Maybe Bool)

A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in this response to the Marker parameter in a subsequent request.

lgGrants :: Lens' ListGrantsResponse [GrantListEntry]

A list of grants.

lgNextMarker :: Lens' ListGrantsResponse (Maybe Text)

When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

Tag

data Tag

A key-value pair. A tag consists of a tag key and a tag value. Tag keys and tag values are both required, but tag values can be empty (null) strings.

For information about the rules that apply to tag keys and tag values, see User-Defined Tag Restrictions in the AWS Billing and Cost Management User Guide .

See: tag smart constructor.

Instances

Eq Tag

Methods

(==) :: Tag -> Tag -> Bool

(/=) :: Tag -> Tag -> Bool

Data Tag

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Tag -> c Tag

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Tag

toConstr :: Tag -> Constr

dataTypeOf :: Tag -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c Tag)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Tag)

gmapT :: (forall b. Data b => b -> b) -> Tag -> Tag

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Tag -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Tag -> r

gmapQ :: (forall d. Data d => d -> u) -> Tag -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> Tag -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> Tag -> m Tag

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Tag -> m Tag

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Tag -> m Tag

Read Tag

Methods

readsPrec :: Int -> ReadS Tag

readList :: ReadS [Tag]

readPrec :: ReadPrec Tag

readListPrec :: ReadPrec [Tag]

Show Tag

Methods

showsPrec :: Int -> Tag -> ShowS

show :: Tag -> String

showList :: [Tag] -> ShowS

Generic Tag

Associated Types

type Rep Tag :: * -> *

Methods

from :: Tag -> Rep Tag x

to :: Rep Tag x -> Tag

Hashable Tag

Methods

hashWithSalt :: Int -> Tag -> Int

hash :: Tag -> Int

ToJSON Tag

Methods

toJSON :: Tag -> Value

toEncoding :: Tag -> Encoding

toJSONList :: [Tag] -> Value

toEncodingList :: [Tag] -> Encoding

FromJSON Tag

Methods

parseJSON :: Value -> Parser Tag

parseJSONList :: Value -> Parser [Tag]

NFData Tag

Methods

rnf :: Tag -> ()

type Rep Tag

type Rep Tag = D1 * (MetaData "Tag" "Network.AWS.KMS.Types.Product" "amazonka-kms-1.6.0-6a1SDMHmleyARI8mxMgB7S" False) (C1 * (MetaCons "Tag'" PrefixI True) ((:*:) * (S1 * (MetaSel (Just Symbol "_tagTagKey") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * Text)) (S1 * (MetaSel (Just Symbol "_tagTagValue") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * Text))))

tag

Arguments

:: Text

tagTagKey

-> Text

tagTagValue

-> Tag

Creates a value of Tag with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• tagTagKey - The key of the tag.
• tagTagValue - The value of the tag.

tagTagKey :: Lens' Tag Text

The key of the tag.

tagTagValue :: Lens' Tag Text

The value of the tag.