kT      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS (c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None:JePresign an URL that is valid from the specified time until the number of seconds expiry has elapsed.See: K, LKnPresign an HTTP request that is valid from the specified time until the number of seconds expiry has elapsed.See: LL A variant of K# that allows modifying the default T+ definition used to configure the request.J Signing time. Expiry time.Request to presign.K Signing time. Expiry time.Request to presign.L)Modify the default service configuration. Signing time. Expiry time.Request to presign.JKLJKLJKL(c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)NoneM@This is a primitive logger which can be used to log builds to a U.Note:/ A more sophisticated logging library such as  *http://hackage.haskell.org/package/tinylogtinylog or  -http://hackage.haskell.org/package/FastLogger fast-logger$ should be used in production code.MVWXYZ?>MVWXYMVWXY (c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None$I N6Convenience function for obtaining the size of a file.O Connect a [ to a response stream.P Construct a 8 from a \, calculating the ] hash and file size.Note: While this function will perform in constant space, it will enumerate the entirety of the file contents _twice_. Firstly to calculate the SHA256 and lastly to stream the contents to the socket during sending.See: ;.Q Construct a 8 from a \, specifying the range of bytes to read. This can be useful for constructing multiple requests from a single file, say for S3 multipart uploads.See: P, ^.R Construct a 8 from a _, manually specifying the ]y hash and file size. It's left up to the caller to calculate these correctly, otherwise AWS will return signing errors.See: ;.S Construct a 7 from a \h, where the contents will be read and signed incrementally in chunks if the target service supports it.Will intelligently revert to 8, if the file is smaller than the specified 6.See: =.T Construct a 7 from a \, specifying the range of bytes to read. This can be useful for constructing multiple requests from a single file, say for S3 multipart uploads.See: S.UUnsafely construct a 7.iThis function is marked unsafe because it does nothing to enforce the chunk size. Typically for conduit `( functions, it's whatever ByteString's defaultBufferSize is, around 32 KB. If the chunk size is less than 8 KB, the request will error. 64 KB or higher chunk size is recommended for performance reasons.QNote that it will always create a chunked body even if the request is too small.See: =.VIncrementally calculate a a b.WIncrementally calculate a ] b.c.A cryptonite compatible incremental hash sink. NOPThe file path to read.QThe file path to read.*The byte offset at which to start reading.$The maximum number of bytes to read.R#A SHA256 hash of the file contents. The size of the stream in bytes.ST=The idealized size of chunks that will be yielded downstream.The file path to read.*The byte offset at which to start reading.$The maximum number of bytes to read.U=The idealized size of chunks that will be yielded downstream. The size of the stream in bytes.de=The idealized size of chunks that will be yielded downstream.The file path to read.*The byte offset at which to start reading.$The maximum number of bytes to read.VWc NOPQRSTUdeVWc NOPQRSTUdeVWc(c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None!"0:[5X+Represents an instance's identity document.Note: Fields such as a are represented as unparsed f, and will need to be manually parsed using C1 when the relevant types from a library such as Network.AWS.EC2 are brought into scope.iReturns information about the last time the instance profile was updated, including the instance's LastUpdated date, InstanceProfileArn, and InstanceProfileId.jvWhere role-name is the name of the IAM role associated with the instance. Returns the temporary security credentials.See:   for JSON deserialisation.lThe device number associated with that interface. Each interface must have a unique device number. The device number serves as a hint to device naming in the instance; for example, device-number is 2 for the eth2 device.mkThe private IPv4 addresses that are associated with each public-ip address and assigned to that interface.nThe interface's local hostname.o7The private IP addresses associated with the interface.pThe instance's MAC address.qThe ID of the owner of the network interface. In multiple-interface environments, an interface can be attached by a third party, such as Elastic Load Balancing. Traffic on an interface is always billed to the interface owner.rThe interface's public DNS. If the instance is in a VPC, this category is only returned if the enableDnsHostnames attribute is set to true. For more information, see Using DNS with Your VPC.skThe Elastic IP addresses associated with the interface. There may be multiple IP addresses on an instance.tiSecurity groups to which the network interface belongs. Returned only for instances launched into a VPC.uIDs of the security groups to which the network interface belongs. Returned only for instances launched into a VPC. For more information on security groups in the EC2-VPC platform, see Security Groups for Your VPC.vfThe ID of the subnet in which the interface resides. Returned only for instances launched into a VPC.wnThe CIDR block of the subnet in which the interface resides. Returned only for instances launched into a VPC.xcThe ID of the VPC in which the interface resides. Returned only for instances launched into a VPC.ykThe CIDR block of the VPC in which the interface resides. Returned only for instances launched into a VPC.{;The virtual device that contains the root/boot file system.|The virtual devices associated with Amazon EBS volumes, if present. This value is only available in metadata if it is present at launch time. The N indicates the index of the Amazon EBS volume (such as ebs1 or ebs2).}vThe virtual devices associated with ephemeral devices, if present. The N indicates the index of the ephemeral volume.~The virtual devices or partitions associated with the root devices, or partitions on the virtual device, where the root (/ or C:) file system is associated with the given instance.=The virtual devices associated with swap. Not always present.'The AMI ID used to launch the instance.If you started more than one instance at the same time, this value indicates the order in which the instance was launched. The value of the first instance launched is 0.The path to the AMI's manifest file in Amazon S3. If you used an Amazon EBS-backed AMI to launch the instance, the returned result is unknown.The AMI IDs of any instances that were rebundled to create this AMI. This value will only exist if the AMI manifest file contained an ancestor-amis key.See: zThe private hostname of the instance. In cases where multiple network interfaces are present, this refers to the eth0 device (the device for which the device number is 0).See: hyNotifies the instance that it should reboot in preparation for bundling. Valid values: none | shutdown | bundle-pending.The ID of this instance.The type of instance.See:  InstanceType@The ID of the kernel launched with this instance, if applicable.The private DNS hostname of the instance. In cases where multiple network interfaces are present, this refers to the eth0 device (the device for which the device number is 0).The private IP address of the instance. In cases where multiple network interfaces are present, this refers to the eth0 device (the device for which the device number is 0).The instance's media access control (MAC) address. In cases where multiple network interfaces are present, this refers to the eth0 device (the device for which the device number is 0).See: k5The Availability Zone in which the instance launched.3Product codes associated with the instance, if any.The instance's public DNS. If the instance is in a VPC, this category is only returned if the enableDnsHostnames attribute is set to true. For more information, see Using DNS with Your VPC.The public IP address. If an Elastic IP address is associated with the instance, the value returned is the Elastic IP address.?Public key. Only available if supplied at instance launch time.?The ID of the RAM disk specified at launch time, if applicable.ID of the reservation.9The names of the security groups applied to the instance.]Value showing whether the customer has enabled detailed one-minute monitoring in CloudWatch.!Valid values: enabled | disabled.UJSON containing instance attributes, such as instance-id, private IP address, etc. See: , InstanceDocument.NUsed to verify the document's authenticity and content against the signature.QTest whether the underlying host is running on EC2 by making an HTTP request to  http://instance-data/latest.Retrieve the specified  data.Throws g if HTTP communication fails.Retrieve the specified .Throws g if HTTP communication fails. Retrieve the user data. Returns h. if no user data is assigned to the instance.Throws g if HTTP communication fails.JRetrieve the instance's identity document, detailing various EC2 metadata.LYou can alternatively retrieve the raw unparsed identity document by using  and the  path.See:  Shttp://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-identity-documents.htmlAWS Instance Identity Documents.bXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ijkXXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~Xz{|}~hijklmnopqrstuvwxyXYZ[\]^_`abcdefg#XYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ijk(c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None ?>A@BCDFEHG FECDBHGA@@?>(c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None0:L['A general authentication error.QAn error occured while communicating over HTTP with the local metadata endpoint.-The named environment variable was not found.<An error occured parsing named environment variable's value.2The specified credentials file could not be found..An error occured parsing the credentials file.=The specified IAM profile could not be found or deserialised.@An error thrown when attempting to read AuthN/AuthZ information.4Determines how AuthN/AuthZ information is retrieved.%Explicit access and secret keys. See .9Explicit access key, secret key and a session token. See .Lookup specific environment variables for access key, secret key, an optional session token, and an optional region, respectively.An IAM Profile name to lookup from the local EC2 instance-data. Environment variables to lookup for the access key, secret key and optional session token.FA credentials profile name (the INI section) and the path to the AWS  zhttp://blogs.aws.amazon.com/security/post/Tx3D6U6WSFGOK2H/A-New-and-Standardized-Way-to-Manage-Credentials-in-the-AWS-SDKs credentials file.HObtain credentials by attempting to contact the ECS container agent at  http://169.254.170.2 using the path in l. See  Nhttp://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.htmlIAM Roles for Tasks0 in the AWS documentation for more information.6Attempt credentials discovery via the following steps: Read the , , and m& from the environment if they are set.Read the credentials file if  exists.4Obtain credentials from the ECS container agent if l is set.7Retrieve the first available IAM profile and read the 28 from the instance identity document, if running on EC2.An attempt is made to resolve  http://instance-data" rather than directly retrieving  http://169.254.169.254r for IAM profile information. This assists in ensuring the DNS lookup terminates promptly if not running on EC2.(Default access key environment variable.(Default secret key environment variable.+Default session token environment variable.n1Default credentials profile environment variable.m#Default region environment variablel@Path to obtain container credentials environment variable (see ).)Credentials INI file access key variable.)Credentials INI file secret key variable.,Credentials INI file session token variable.1Credentials INI default profile section variable.<Default path for the credentials file. This looks in in the HOME! directory as determined by the  ,http://hackage.haskell.org/package/directory directory library.UNIX OSX: @$HOME.aws/credentials@ Windows: C:/Users//<user>.awscredentialsNote:6 This does not match the default AWS SDK location of %USERPROFILE%.awscredentials on Windows. (Sorry.) Explicit access and secret keys.fTemporary credentials from a STS session consisting of the access key, secret key, and session token.See: wTemporary credentials from a STS session consisting of the access key, secret key, session token, and expiration time.See: 6Retrieve authentication information via the specified  mechanism.Throws r when environment variables or IAM profiles cannot be read, and credentials files are invalid or cannot be found.]Retrieve access key, secret key, and a session token from the default environment variables.Throws h if either of the default environment variables cannot be read, but not if the session token is absent.See: , , YRetrieve access key, secret key and a session token from specific environment variables.Throws n if either of the specified key environment variables cannot be read, but not if the session token is absent.Loads the default  credentials) INI file using the default profile name.Throws  if  is missing, or $ if an error occurs during parsing.See: , , and ncRetrieve the access, secret and session token from the specified section (profile) in a valid INI  credentials file.Throws & if the specified file is missing, or $ if an error occurs during parsing.BRetrieve the default IAM Profile from the local EC2 instance-data.cThe default IAM profile is determined by Amazon as the first profile found in the response from:  Ahttp://169.254.169.254/latest/meta-data/iam/security-credentials/Throws  if the HTTP call fails, or , if the default IAM profile cannot be read.GLookup a specific IAM Profile by name from the local EC2 instance-data.NAdditionally starts a refresh thread for the given authentication environment.The resulting oF wrapper + timer is designed so that multiple concurrent accesses of p from the AWSW environment are not required to calculate expiry and sequentially queue to update it.zThe forked timer ensures a singular owner and pre-emptive refresh of the temporary session credentials before expiration.ZA weak reference is used to ensure that the forked thread will eventually terminate when   is no longer referenced.]If no session token or expiration time is present the credentials will be returned verbatim.WObtain credentials exposed to a task via the ECS container agent, as described in the  Nhttp://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.htmlIAM Roles for Tasks] section of the AWS ECS documentation. The credentials are obtained by making a request to  http://169.254.170.2 at the path contained by the l environment variable.The ECS container agent provides an access key, secret key, session token, and expiration time, but it does not include a region, so the region will attempt to be determined from the m$ environment variable if it is set.Like v, additionally starts a refresh thread that will periodically fetch fresh credentials before the current ones expire.Throws  if the l% environment variable is not set or S if the payload returned by the ECS container agent is not of the expected format.q4Implements the background fetching behavior used by  and  . Given an ` action that produces an p), this spawns a thread that mutates the o returned in the resulting  / to keep the temporary credentials up to date.4AWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYAWS_SESSION_TOKENn AWS_PROFILEm AWS_REGIONl&AWS_CONTAINER_CREDENTIALS_RELATIVE_URIaws_access_key_idaws_secret_access_keyaws_session_tokendefault Access key environment variable. Secret key environment variable.#Session token environment variable.Region environment variable.q3 3  nmlq(c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None!"$:OT[The current region.)The function used to output log messages.%The function used to determine if an g should be retried.'The currently applied overrides to all T configuration.The r1 used to create and manage open HTTP connections.BThe credentials used to sign requests for authentication with AWS.HA memoised predicate for whether the underlying host is an EC2 instance.HThe environment containing the parameters required to make AWS requests. pProvide a function which will be added to the existing stack of overrides applied to all service configuration.?To override a specific service, it's suggested you use either   or : with a modified version of the default service, such as Network.AWS.DynamoDB.dynamoDB. Configure a specific service. All requests belonging to the supplied service will use this configuration instead of the default.KIt's suggested you use a modified version of the default service, such as Network.AWS.DynamoDB.dynamoDB.See: .}Scope an action such that all requests belonging to the supplied service will use this configuration instead of the default.KIt's suggested you use a modified version of the default service, such as Network.AWS.DynamoDB.dynamoDB.See:  .$Scope an action within the specific 2.2Scope an action such that any retry logic for the T8 is ignored and any requests will at most be sent once.HScope an action such that any HTTP response will use this timeout value.+Default timeouts are chosen by considering:This  , if set. The related T3 timeout for the sent request if set. (Usually 70s)The  timeout if set. The default s timeout. (Approximately 30s)%Creates a new environment with a new r! without debug logging and uses ! to expand/discover the supplied . Lenses from 0 can be used to further configure the resulting .Since: 1.5.0( - The region is now retrieved from the  AWS_REGIOND environment variable (identical to official SDKs), or defaults to  us-east-1. You can override the  region by using ., or the current operation's region by using .Since: 1.3.6" - The default logic for retrying g s now uses  to retry specific connection failure conditions up to 3 times. Previously only service specific errors were automatically retried. This can be reverted to the old behaviour by resetting the  using  lens to (\_ _ -> False).Throws ; when environment variables or IAM profiles cannot be read.See: .See: The t uE parameter is used by the EC2 instance check. By passing a value of h, the check will be performed. v wN would cause the check to be skipped and the host treated as an EC2 instance.Throws ; when environment variables or IAM profiles cannot be read.rRetry the subset of transport specific errors encompassing connection failure up to the specific number of times.     Credential discovery mechanism.Credential discovery mechanism.Preload the EC2 instance check.                 (c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None !"$:DORT[xThe T) is configured + unwrapped at this point.yzx{|}yzyzx{|}(c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None!"*9:;<=DIORT[ ?An alias for the constraints required to send requests, which  implicitly fulfils.Run an ' action with the specified environment.@Send a request, returning the associated response if successful.Throws ~.qRepeatedly send a request, automatically setting markers and paginating over multiple responses while available.Throws ~.8Poll the API with the supplied request until a specific  condition is fulfilled.Throws ~.ePresign an URL that is valid from the specified time until the number of seconds expiry has elapsed.nPresign an HTTP request that is valid from the specified time until the number of seconds expiry has elapsed. Test whether the underlying host is running on EC2. This is memoised and any external check occurs for the first invocation only.!Retrieve the specified Dynamic data.Throws g."Retrieve the specified Metadata.Throws g.# Retrieve the user data. Returns h. if no user data is assigned to the instance.Throws g. Signing time. Expiry time.Request to presign. Signing time. Expiry time.Request to presign. !"#$%&'()*+,-./s~  Tp 210/.-,+*)('&%$#"!3465789;:=<gIMNOPRSUVW   !"#I210/.-,+*)('&%$#"!  ;:PR=<<653SUONVW !"# M 9874 !"#$%&'()*+,-./(c) 2013-2017 Brendan HayMozilla Public License, v. 2.0..Brendan Hay <brendan.g.hay+amazonka@gmail.com> provisionalnon-portable (GHC extensions)None9:;OT8Monads in which : actions may be embedded.9Lift a computation to the : monad.:A specialisation of the  transformer.;Run the :( monad. Any outstanding HTTP responses' ResumableSource will be closed when the  computation is unwrapped with I.Throws ~, which will include HTTPExceptionsY, serialisation errors, or any particular errors returned by the respective AWS service.See: , I.<}Scope an action such that all requests belonging to the supplied service will use this configuration instead of the default.KIt's suggested you use a modified version of the default service, such as Network.AWS.DynamoDB.dynamoDB.See:  .=$Scope an action within the specific 2.>2Scope an action such that any retry logic for the T8 is ignored and any requests will at most be sent once.?HScope an action such that any HTTP response will use this timeout value.@@Send a request, returning the associated response if successful.AqRepeatedly send a request, automatically setting markers and paginating over multiple responses while available.B8Poll the API with the supplied request until a specific  condition is fulfilled.CePresign an URL that is valid from the specified time until the number of seconds expiry has elapsed.DTest whether the underlying host is running on EC2. This is memoised and an HTTP request is made to the host's metadata endpoint for the first call only.ERetrieve the specified Dynamic data.FRetrieve the specified Metadata.G Retrieve the user data. Returns h. if no user data is assigned to the instance.89:;<=>?@ABC Signing time. Expiry time.Request to presign.DEFGHIJKLMNOPQRS s~  Tp 210/.-,+*)('&%$#"!3465789;:=<gIMNOPQRSTUVW  89:;<=>?@ABCDEFG:89;I210/.-,+*)('&%$#"!@AB  <=>?;:PQR=<<653STUONVWCDEFG M 987489:;<=>?@ABCDEFGHIJKLMNOPQRS  !!"#$%&'(())**+,+-./0123456789:;<=>?@?A?B?B?C?D?E?F?G?H?IJKJLMNMOPQPRPSPTPUPVPWXYZ[\]^ _ ` a b c d e f g hiijklmnopqrstuvw%xyz{|}~      !"#$%&'()*+[\,-./0123456789:;<=>?@ABC)*+[DEFGHIJKLMNOPQRSTUVWJXYZ[Q\]^_`abcYZdefg^hi^jk l m nopqrstQuvwxyz {Q|}~rsQuefQuef      $&Py~X%amazonka-1.5.0-4EO6Z7VnkrV7JugjlX2qe6Control.Monad.Trans.AWSNetwork.AWS.AuthNetwork.AWS.DataNetwork.AWS.Presign Network.AWSNetwork.AWS.EC2.MetadataNetwork.AWS.EnvNetwork.AWS.Internal.LoggerNetwork.AWS.Internal.BodyNetwork.AWS.Internal.HTTP"lens-4.15.4-KUno97tdZMYJKCU13eoExKControl.Exception.Lenscatchingtrying)amazonka-core-1.5.0-LssNx6O1J0znfQCejvUlWNetwork.AWS.ErrorhasCode hasStatus hasService_MatchServiceErrorNetwork.AWS.Endpoint setEndpointNetwork.AWS.Types _ServiceError_SerializeError_TransportError_ErrorAsError_endpointScope _endpointPort_endpointSecure _endpointHostEndpointTraceDebugErrorInfoLogLevelLogger AccessKey SecretKey SessionTokenAuthRefBeijing GovCloudFIPSGovCloud FrankfurtLondonIrelandSaoPauloSydney SingaporeMumbaiSeoulTokyoMontrealOregonNorthCaliforniaOhio NorthVirginiaRegionNetwork.AWS.Data.BodydefaultChunkSizeRsBody ChunkSize ChunkedBody HashedBodyRqBodytoHashed ToHashedBodytoBodyToBodyNetwork.AWS.Data.LogbuildToLogNetwork.AWS.Data.ByteStringtoBS ToByteStringNetwork.AWS.Data.Text takeLowerTextfromText fromTextErrorparserFromTexttoTextToText&resourcet-1.1.9-C4iL7xe8foFJ5dtZR3u3WVControl.Monad.Trans.Resource runResourceT presignURLpresign presignWith newLogger getFileSizesinkBody hashedFilehashedFileRange hashedBody chunkedFilechunkedFileRangeunsafeChunkedBodysinkMD5 sinkSHA256IdentityDocument_devpayProductCodes_billingProducts_version _privateIp_availabilityZone_region _instanceId _instanceType _accountId_imageId _kernelId _ramdiskId _architecture _pendingTimeInfo'SecurityCredentials Interface IDeviceNumberIIPV4AssociationsILocalHostname ILocalIPV4sIMACIOwnerIdIPublicHostname IPublicIPV4sISecurityGroupsISecurityGroupIds ISubnetIdISubnetIPV4_CIDRBlockIVPCIdIVPCIPV4_CIDRBlockMappingAMIEBS EphemeralRootSwapMetadataAMIIdAMILaunchIndexAMIManifestPathAncestorAMIIds BlockDeviceHostnameIAMInstanceAction InstanceId InstanceTypeKernelId LocalHostname LocalIPV4MACNetworkAvailabilityZone ProductCodesPublicHostname PublicIPV4 OpenSSHKey RAMDiskId ReservationIdSecurityGroupsDynamicFWSDocumentPKCS7 SignatureisEC2dynamicmetadatauserdatadevpayProductCodesbillingProductsversion privateIpavailabilityZoneregion instanceId instanceType accountIdimageIdkernelId ramdiskId architecture pendingTimeidentity$fToJSONIdentityDocument$fFromJSONIdentityDocument $fToTextInfo$fToTextInterface$fToTextMapping$fToTextMetadata$fToTextDynamic $fEqDynamic $fOrdDynamic $fShowDynamic $fEqMapping $fOrdMapping $fShowMapping $fEqInterface$fOrdInterface$fShowInterface$fEqInfo $fOrdInfo $fShowInfo $fEqMetadata $fOrdMetadata$fShowMetadata$fEqIdentityDocument$fShowIdentityDocument AsAuthError _AuthError_RetrievalError_MissingEnvError_InvalidEnvError_MissingFileError_InvalidFileError_InvalidIAMError AuthErrorRetrievalErrorMissingEnvErrorInvalidEnvErrorMissingFileErrorInvalidFileErrorInvalidIAMError CredentialsFromKeys FromSessionFromEnv FromProfileFromFile FromContainerDiscover envAccessKey envSecretKeyenvSessionToken credAccessKey credSecretKeycredSessionToken credProfilecredFilefromKeys fromSessionfromTemporarySessiongetAuthfromEnv fromEnvKeysfromFile fromFilePath fromProfilefromProfileName fromContainer$fAsAuthErrorAuthError$fAsAuthErrorSomeException$fToLogAuthError$fExceptionAuthError$fShowCredentials$fToLogCredentials$fEqCredentials$fShowAuthErrorHasEnv environment envRegion envLogger envRetryCheck envOverride envManagerenvAuthenvEC2Env _envRegion _envLogger_envRetryCheck _envOverride _envManager_envEC2_envAuthoverride configure reconfigurewithinoncetimeoutnewEnv newEnvWithretryConnectionFailure $fToLogEnv $fHasEnvEnv AWSConstraintAWST'AWSTrunAWSTsendpaginateawait$fMFunctorTYPEAWST'$fMonadStatesAWST'$fMonadWriterwAWST'$fMonadReaderrAWST'$fMonadErroreAWST'$fMonadResourceAWST'$fMonadBaseControlbAWST'$fMonadTransControlAWST'$fMonadBasebAWST'$fMonadMaskAWST'$fMonadCatchAWST'$fMonadThrowAWST'$fFunctorAWST'$fApplicativeAWST'$fAlternativeAWST' $fMonadAWST'$fMonadPlusAWST'$fMonadIOAWST'$fMonadActiveAWST'$fMonadTransAWST'MonadAWSliftAWSAWSrunAWS$fMonadAWSRWST$fMonadAWSRWST0$fMonadAWSWriterT$fMonadAWSWriterT0$fMonadAWSStateT$fMonadAWSStateT0$fMonadAWSReaderT$fMonadAWSExceptT$fMonadAWSMaybeT$fMonadAWSListT$fMonadAWSIdentityT$fMonadAWSAWST'ServicebaseGHC.IO.Handle.TypesHandlelogErrorlogInfologDebuglogTrace buildLines'conduit-1.2.12.1-6b4TSFRWHoSApJNfxxMPJ4Data.Conduit.Internal.ConduitSinkGHC.IOFilePath&cryptonite-0.24-ESCUEyceqcoFeAr3IydkHiCrypto.Hash.SHA256SHA256*conduit-extra-1.2.0-BCK2oJNEngg5G4PYYmyyQLData.Conduit.BinarysourceFileRangeSourceghc-prim GHC.TypesIOCrypto.Hash.MD5MD5Crypto.Hash.TypesDigestsinkHashsourceFileChunkssourceFileRangeChunks#text-1.2.2.2-KC7dWoG09dA1F6jKj5GSqhData.Text.InternalText)http-client-0.5.7.0-LSsK0UPEqf9khoPYvbWlQNetwork.HTTP.Client.Types HttpExceptionGHC.BaseNothinglatestgetrequestenvContainerCredentialsURI envProfile GHC.IORefIORefAuthEnvfetchAuthInBackgroundManager ClientRequestMaybeBoolJustTrueperformretrierwaiter configured retryStream retryServiceNetwork.AWS.WaiterWaitunAWST hoistErrorAcceptNetwork.AWS.PagerAWSPagerpage_Default_Coerce microsecondssecondswithAuth expiration sessionTokensecretAccessKey accessKeyId rqPresignrqSignrqQueryrqPathrqMethod rqHeadersrqBody rqService clientRequest serviceRetry serviceCheckserviceTimeoutserviceEndpoint serviceSigner retryCheck retryAttemptsexponentGrowth exponentBase endpointScope endpointPortendpointSecure endpointHostserviceRequestIdserviceMessage serviceCodeserviceHeaders serviceStatus serviceAbbrevserializeMessageserializeStatusserializeAbbrev errorCodeClientResponse ResponseBodyAbbrev ErrorCode ErrorMessage RequestId ServiceErrorSerializeErrorTransportErrorSerializeError'_serializeAbbrev_serializeStatus_serializeBody_serializeMessage ServiceError'_serviceAbbrev_serviceStatus_serviceHeaders _serviceCode_serviceMessage_serviceRequestIdRetry Exponential _retryBase _retryGrowth_retryAttempts _retryCheckMetaSignedsgMeta sgRequest AlgorithmSignersgSign sgPresign _svcAbbrev _svcSigner _svcPrefix _svcVersion _svcEndpoint _svcTimeout _svcCheck _svcError _svcRetryRequest _rqService _rqMethod_rqPath_rqQuery _rqHeaders_rqBodyResponse AWSRequestRsresponse _authAccess _authSecret _authToken _authExpirySeconds%Control.Monad.Trans.Resource.Internal ResourceT