Network.AWS.KMS.RevokeGrant

Revokes the specified grant for the specified customer master key (CMK). You can revoke a grant to actively deny operations that depend on it.

To perform this operation on a CMK in a different AWS account, specify the key ARN in the value of the KeyId parameter.

Creating a Request

revokeGrant

Arguments

:: Text

rKeyId

-> Text

rGrantId

-> RevokeGrant

Creates a value of RevokeGrant with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• rKeyId - A unique identifier for the customer master key associated with the grant. Specify the key ID or the Amazon Resource Name (ARN) of the CMK. To specify a CMK in a different AWS account, you must use the key ARN. For example: * Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab * Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab To get the key ID and key ARN for a CMK, use ListKeys or DescribeKey .
• rGrantId - Identifier of the grant to be revoked.

data RevokeGrant

See: revokeGrant smart constructor.

Instances

Eq RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

(==) :: RevokeGrant -> RevokeGrant -> Bool

(/=) :: RevokeGrant -> RevokeGrant -> Bool

Data RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> RevokeGrant -> c RevokeGrant

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c RevokeGrant

toConstr :: RevokeGrant -> Constr

dataTypeOf :: RevokeGrant -> DataType

dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c RevokeGrant)

dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c RevokeGrant)

gmapT :: (forall b. Data b => b -> b) -> RevokeGrant -> RevokeGrant

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> RevokeGrant -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> RevokeGrant -> r

gmapQ :: (forall d. Data d => d -> u) -> RevokeGrant -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> RevokeGrant -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> RevokeGrant -> m RevokeGrant

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> RevokeGrant -> m RevokeGrant

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> RevokeGrant -> m RevokeGrant

Read RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

readsPrec :: Int -> ReadS RevokeGrant

readList :: ReadS [RevokeGrant]

readPrec :: ReadPrec RevokeGrant

readListPrec :: ReadPrec [RevokeGrant]

Show RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

showsPrec :: Int -> RevokeGrant -> ShowS

show :: RevokeGrant -> String

showList :: [RevokeGrant] -> ShowS

Generic RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Associated Types

type Rep RevokeGrant :: Type -> Type

Methods

from :: RevokeGrant -> Rep RevokeGrant x

to :: Rep RevokeGrant x -> RevokeGrant

Hashable RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

hashWithSalt :: Int -> RevokeGrant -> Int

hash :: RevokeGrant -> Int

ToJSON RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

toJSON :: RevokeGrant -> Value

toEncoding :: RevokeGrant -> Encoding

toJSONList :: [RevokeGrant] -> Value

toEncodingList :: [RevokeGrant] -> Encoding

AWSRequest RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Associated Types

type Rs RevokeGrant :: Type

Methods

request :: RevokeGrant -> Request RevokeGrant

response :: (MonadResource m, MonadThrow m) => Logger -> Service -> Proxy RevokeGrant -> ClientResponse -> m (Response RevokeGrant)

ToHeaders RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

toHeaders :: RevokeGrant -> [Header]

ToPath RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

toPath :: RevokeGrant -> ByteString

ToQuery RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

toQuery :: RevokeGrant -> QueryString

NFData RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

Methods

rnf :: RevokeGrant -> ()

type Rep RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

type Rep RevokeGrant = D1 (MetaData "RevokeGrant" "Network.AWS.KMS.RevokeGrant" "amazonka-kms-1.6.1-1UDljZYfeha1jjHbbMax4v" False) (C1 (MetaCons "RevokeGrant'" PrefixI True) (S1 (MetaSel (Just "_rKeyId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "_rGrantId") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text)))

type Rs RevokeGrant

Defined in Network.AWS.KMS.RevokeGrant

type Rs RevokeGrant = RevokeGrantResponse

Request Lenses

rKeyId :: Lens' RevokeGrant Text

A unique identifier for the customer master key associated with the grant. Specify the key ID or the Amazon Resource Name (ARN) of the CMK. To specify a CMK in a different AWS account, you must use the key ARN. For example: * Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab * Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab To get the key ID and key ARN for a CMK, use ListKeys or DescribeKey .

rGrantId :: Lens' RevokeGrant Text

Identifier of the grant to be revoked.

Destructuring the Response

revokeGrantResponse :: RevokeGrantResponse

Creates a value of RevokeGrantResponse with the minimum fields required to make a request.

data RevokeGrantResponse

See: revokeGrantResponse smart constructor.

Instances

Eq RevokeGrantResponse

Defined in Network.AWS.KMS.RevokeGrant

Methods

(==) :: RevokeGrantResponse -> RevokeGrantResponse -> Bool

(/=) :: RevokeGrantResponse -> RevokeGrantResponse -> Bool

Data RevokeGrantResponse

Defined in Network.AWS.KMS.RevokeGrant

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> RevokeGrantResponse -> c RevokeGrantResponse

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c RevokeGrantResponse

toConstr :: RevokeGrantResponse -> Constr

dataTypeOf :: RevokeGrantResponse -> DataType

dataCast1 :: Typeable t => (forall d. Data d => c (t d)) -> Maybe (c RevokeGrantResponse)

dataCast2 :: Typeable t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c RevokeGrantResponse)

gmapT :: (forall b. Data b => b -> b) -> RevokeGrantResponse -> RevokeGrantResponse

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> RevokeGrantResponse -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> RevokeGrantResponse -> r

gmapQ :: (forall d. Data d => d -> u) -> RevokeGrantResponse -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> RevokeGrantResponse -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> RevokeGrantResponse -> m RevokeGrantResponse

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> RevokeGrantResponse -> m RevokeGrantResponse

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> RevokeGrantResponse -> m RevokeGrantResponse

Read RevokeGrantResponse

Defined in Network.AWS.KMS.RevokeGrant

Methods

readsPrec :: Int -> ReadS RevokeGrantResponse

readList :: ReadS [RevokeGrantResponse]

readPrec :: ReadPrec RevokeGrantResponse

readListPrec :: ReadPrec [RevokeGrantResponse]

Show RevokeGrantResponse

Defined in Network.AWS.KMS.RevokeGrant

Methods

showsPrec :: Int -> RevokeGrantResponse -> ShowS

show :: RevokeGrantResponse -> String

showList :: [RevokeGrantResponse] -> ShowS

Generic RevokeGrantResponse

Defined in Network.AWS.KMS.RevokeGrant

Associated Types

type Rep RevokeGrantResponse :: Type -> Type

Methods

from :: RevokeGrantResponse -> Rep RevokeGrantResponse x

to :: Rep RevokeGrantResponse x -> RevokeGrantResponse

NFData RevokeGrantResponse

Defined in Network.AWS.KMS.RevokeGrant

Methods

rnf :: RevokeGrantResponse -> ()

type Rep RevokeGrantResponse

Defined in Network.AWS.KMS.RevokeGrant

type Rep RevokeGrantResponse = D1 (MetaData "RevokeGrantResponse" "Network.AWS.KMS.RevokeGrant" "amazonka-kms-1.6.1-1UDljZYfeha1jjHbbMax4v" False) (C1 (MetaCons "RevokeGrantResponse'" PrefixI False) (U1 :: Type -> Type))