Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Documentation

data KmsGrantConfiguration

A proposed grant configuration for a KMS key. For more information, see CreateGrant.

See: newKmsGrantConfiguration smart constructor.

Constructors

KmsGrantConfiguration'

Fields

• constraints :: Maybe KmsGrantConstraints

  Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.

• retiringPrincipal :: Maybe Text

  The principal that is given permission to retire the grant by using RetireGrant operation.

• operations :: [KmsGrantOperation]

  A list of operations that the grant permits.

• granteePrincipal :: Text

  The principal that is given permission to perform the operations that the grant permits.

• issuingAccount :: Text

  The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.

Instances

FromJSON KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Methods

parseJSON :: Value -> Parser KmsGrantConfiguration

parseJSONList :: Value -> Parser [KmsGrantConfiguration]

ToJSON KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Methods

toJSON :: KmsGrantConfiguration -> Value

toEncoding :: KmsGrantConfiguration -> Encoding

toJSONList :: [KmsGrantConfiguration] -> Value

toEncodingList :: [KmsGrantConfiguration] -> Encoding

Generic KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Associated Types

type Rep KmsGrantConfiguration :: Type -> Type

Methods

from :: KmsGrantConfiguration -> Rep KmsGrantConfiguration x

to :: Rep KmsGrantConfiguration x -> KmsGrantConfiguration

Read KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Methods

readsPrec :: Int -> ReadS KmsGrantConfiguration

readList :: ReadS [KmsGrantConfiguration]

readPrec :: ReadPrec KmsGrantConfiguration

readListPrec :: ReadPrec [KmsGrantConfiguration]

Show KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Methods

showsPrec :: Int -> KmsGrantConfiguration -> ShowS

show :: KmsGrantConfiguration -> String

showList :: [KmsGrantConfiguration] -> ShowS

NFData KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Methods

rnf :: KmsGrantConfiguration -> ()

Eq KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Methods

(==) :: KmsGrantConfiguration -> KmsGrantConfiguration -> Bool

(/=) :: KmsGrantConfiguration -> KmsGrantConfiguration -> Bool

Hashable KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Methods

hashWithSalt :: Int -> KmsGrantConfiguration -> Int

hash :: KmsGrantConfiguration -> Int

type Rep KmsGrantConfiguration

Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

type Rep KmsGrantConfiguration = D1 ('MetaData "KmsGrantConfiguration" "Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration" "amazonka-accessanalyzer-2.0-A0JZirwj4a95MolJaaBere" 'False) (C1 ('MetaCons "KmsGrantConfiguration'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "constraints") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KmsGrantConstraints)) :*: S1 ('MetaSel ('Just "retiringPrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "operations") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 [KmsGrantOperation]) :*: (S1 ('MetaSel ('Just "granteePrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "issuingAccount") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))

newKmsGrantConfiguration

Arguments

:: Text

$sel:granteePrincipal:KmsGrantConfiguration'

-> Text

$sel:issuingAccount:KmsGrantConfiguration'

-> KmsGrantConfiguration

Create a value of KmsGrantConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:constraints:KmsGrantConfiguration', kmsGrantConfiguration_constraints - Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.

$sel:retiringPrincipal:KmsGrantConfiguration', kmsGrantConfiguration_retiringPrincipal - The principal that is given permission to retire the grant by using RetireGrant operation.

$sel:operations:KmsGrantConfiguration', kmsGrantConfiguration_operations - A list of operations that the grant permits.

$sel:granteePrincipal:KmsGrantConfiguration', kmsGrantConfiguration_granteePrincipal - The principal that is given permission to perform the operations that the grant permits.

$sel:issuingAccount:KmsGrantConfiguration', kmsGrantConfiguration_issuingAccount - The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.

kmsGrantConfiguration_constraints :: Lens' KmsGrantConfiguration (Maybe KmsGrantConstraints)

Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.

kmsGrantConfiguration_retiringPrincipal :: Lens' KmsGrantConfiguration (Maybe Text)

The principal that is given permission to retire the grant by using RetireGrant operation.

kmsGrantConfiguration_operations :: Lens' KmsGrantConfiguration [KmsGrantOperation]

A list of operations that the grant permits.

kmsGrantConfiguration_granteePrincipal :: Lens' KmsGrantConfiguration Text

The principal that is given permission to perform the operations that the grant permits.

kmsGrantConfiguration_issuingAccount :: Lens' KmsGrantConfiguration Text

The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.