-- Hoogle documentation, generated by Haddock -- See Hoogle, http://www.haskell.org/hoogle/ -- | Amazon Access Analyzer SDK. -- -- Derived from API version 2019-11-01 of the AWS service -- descriptions, licensed under Apache 2.0. -- -- The types from this library are intended to be used with -- amazonka, which provides mechanisms for specifying AuthN/AuthZ -- information, sending requests, and receiving responses. -- -- It is recommended to use generic lenses or optics from packages such -- as generic-lens or optics to modify optional fields and -- deconstruct responses. -- -- Generated lenses can be found in Amazonka.AccessAnalyzer.Lens -- and are suitable for use with a lens package such as lens or -- lens-family-core. -- -- See Amazonka.AccessAnalyzer and the AWS documentation to -- get started. @package amazonka-accessanalyzer @version 2.0 module Amazonka.AccessAnalyzer.Types.AccessPreviewStatus newtype AccessPreviewStatus AccessPreviewStatus' :: Text -> AccessPreviewStatus [fromAccessPreviewStatus] :: AccessPreviewStatus -> Text pattern AccessPreviewStatus_COMPLETED :: AccessPreviewStatus pattern AccessPreviewStatus_CREATING :: AccessPreviewStatus pattern AccessPreviewStatus_FAILED :: AccessPreviewStatus instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AccessPreviewStatus.AccessPreviewStatus module Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode newtype AccessPreviewStatusReasonCode AccessPreviewStatusReasonCode' :: Text -> AccessPreviewStatusReasonCode [fromAccessPreviewStatusReasonCode] :: AccessPreviewStatusReasonCode -> Text pattern AccessPreviewStatusReasonCode_INTERNAL_ERROR :: AccessPreviewStatusReasonCode pattern AccessPreviewStatusReasonCode_INVALID_CONFIGURATION :: AccessPreviewStatusReasonCode instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReasonCode.AccessPreviewStatusReasonCode module Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReason -- | Provides more details about the current status of the access preview. -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid proposed -- resource configuration. -- -- See: newAccessPreviewStatusReason smart constructor. data AccessPreviewStatusReason AccessPreviewStatusReason' :: AccessPreviewStatusReasonCode -> AccessPreviewStatusReason -- | The reason code for the current status of the access preview. [$sel:code:AccessPreviewStatusReason'] :: AccessPreviewStatusReason -> AccessPreviewStatusReasonCode -- | Create a value of AccessPreviewStatusReason with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:AccessPreviewStatusReason', -- accessPreviewStatusReason_code - The reason code for the -- current status of the access preview. newAccessPreviewStatusReason :: AccessPreviewStatusReasonCode -> AccessPreviewStatusReason -- | The reason code for the current status of the access preview. accessPreviewStatusReason_code :: Lens' AccessPreviewStatusReason AccessPreviewStatusReasonCode instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReason.AccessPreviewStatusReason instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReason.AccessPreviewStatusReason instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReason.AccessPreviewStatusReason instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReason.AccessPreviewStatusReason instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReason.AccessPreviewStatusReason instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReason.AccessPreviewStatusReason instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AccessPreviewStatusReason.AccessPreviewStatusReason module Amazonka.AccessAnalyzer.Types.AccessPreviewSummary -- | Contains a summary of information about an access preview. -- -- See: newAccessPreviewSummary smart constructor. data AccessPreviewSummary AccessPreviewSummary' :: Maybe AccessPreviewStatusReason -> Text -> Text -> ISO8601 -> AccessPreviewStatus -> AccessPreviewSummary [$sel:statusReason:AccessPreviewSummary'] :: AccessPreviewSummary -> Maybe AccessPreviewStatusReason -- | The unique ID for the access preview. [$sel:id:AccessPreviewSummary'] :: AccessPreviewSummary -> Text -- | The ARN of the analyzer used to generate the access preview. [$sel:analyzerArn:AccessPreviewSummary'] :: AccessPreviewSummary -> Text -- | The time at which the access preview was created. [$sel:createdAt:AccessPreviewSummary'] :: AccessPreviewSummary -> ISO8601 -- | The status of the access preview. -- -- [$sel:status:AccessPreviewSummary'] :: AccessPreviewSummary -> AccessPreviewStatus -- | Create a value of AccessPreviewSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:statusReason:AccessPreviewSummary', -- accessPreviewSummary_statusReason - Undocumented member. -- -- $sel:id:AccessPreviewSummary', accessPreviewSummary_id - -- The unique ID for the access preview. -- -- $sel:analyzerArn:AccessPreviewSummary', -- accessPreviewSummary_analyzerArn - The ARN of the analyzer used -- to generate the access preview. -- -- $sel:createdAt:AccessPreviewSummary', -- accessPreviewSummary_createdAt - The time at which the access -- preview was created. -- -- $sel:status:AccessPreviewSummary', -- accessPreviewSummary_status - The status of the access preview. -- -- newAccessPreviewSummary :: Text -> Text -> UTCTime -> AccessPreviewStatus -> AccessPreviewSummary -- | Undocumented member. accessPreviewSummary_statusReason :: Lens' AccessPreviewSummary (Maybe AccessPreviewStatusReason) -- | The unique ID for the access preview. accessPreviewSummary_id :: Lens' AccessPreviewSummary Text -- | The ARN of the analyzer used to generate the access preview. accessPreviewSummary_analyzerArn :: Lens' AccessPreviewSummary Text -- | The time at which the access preview was created. accessPreviewSummary_createdAt :: Lens' AccessPreviewSummary UTCTime -- | The status of the access preview. -- -- accessPreviewSummary_status :: Lens' AccessPreviewSummary AccessPreviewStatus instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AccessPreviewSummary.AccessPreviewSummary instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AccessPreviewSummary.AccessPreviewSummary instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AccessPreviewSummary.AccessPreviewSummary instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AccessPreviewSummary.AccessPreviewSummary instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AccessPreviewSummary.AccessPreviewSummary instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AccessPreviewSummary.AccessPreviewSummary instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AccessPreviewSummary.AccessPreviewSummary module Amazonka.AccessAnalyzer.Types.AclGrantee -- | You specify each grantee as a type-value pair using one of these -- types. You can specify only one type of grantee. For more information, -- see PutBucketAcl. -- -- See: newAclGrantee smart constructor. data AclGrantee AclGrantee' :: Maybe Text -> Maybe Text -> AclGrantee -- | The value specified is the canonical user ID of an Amazon Web Services -- account. [$sel:id:AclGrantee'] :: AclGrantee -> Maybe Text -- | Used for granting permissions to a predefined group. [$sel:uri:AclGrantee'] :: AclGrantee -> Maybe Text -- | Create a value of AclGrantee with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:id:AclGrantee', aclGrantee_id - The value specified -- is the canonical user ID of an Amazon Web Services account. -- -- $sel:uri:AclGrantee', aclGrantee_uri - Used for granting -- permissions to a predefined group. newAclGrantee :: AclGrantee -- | The value specified is the canonical user ID of an Amazon Web Services -- account. aclGrantee_id :: Lens' AclGrantee (Maybe Text) -- | Used for granting permissions to a predefined group. aclGrantee_uri :: Lens' AclGrantee (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AclGrantee.AclGrantee instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AclGrantee.AclGrantee instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AclGrantee.AclGrantee instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AclGrantee.AclGrantee instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AclGrantee.AclGrantee instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AclGrantee.AclGrantee instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AclGrantee.AclGrantee instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.AclGrantee.AclGrantee module Amazonka.AccessAnalyzer.Types.AclPermission newtype AclPermission AclPermission' :: Text -> AclPermission [fromAclPermission] :: AclPermission -> Text pattern AclPermission_FULL_CONTROL :: AclPermission pattern AclPermission_READ :: AclPermission pattern AclPermission_READ_ACP :: AclPermission pattern AclPermission_WRITE :: AclPermission pattern AclPermission_WRITE_ACP :: AclPermission instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AclPermission.AclPermission module Amazonka.AccessAnalyzer.Types.AnalyzerStatus newtype AnalyzerStatus AnalyzerStatus' :: Text -> AnalyzerStatus [fromAnalyzerStatus] :: AnalyzerStatus -> Text pattern AnalyzerStatus_ACTIVE :: AnalyzerStatus pattern AnalyzerStatus_CREATING :: AnalyzerStatus pattern AnalyzerStatus_DISABLED :: AnalyzerStatus pattern AnalyzerStatus_FAILED :: AnalyzerStatus instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AnalyzerStatus.AnalyzerStatus module Amazonka.AccessAnalyzer.Types.Criterion -- | The criteria to use in the filter that defines the archive rule. For -- more information on available filter keys, see IAM Access Analyzer -- filter keys. -- -- See: newCriterion smart constructor. data Criterion Criterion' :: Maybe (NonEmpty Text) -> Maybe (NonEmpty Text) -> Maybe Bool -> Maybe (NonEmpty Text) -> Criterion -- | A "contains" operator to match for the filter used to create the rule. [$sel:contains:Criterion'] :: Criterion -> Maybe (NonEmpty Text) -- | An "equals" operator to match for the filter used to create the rule. [$sel:eq:Criterion'] :: Criterion -> Maybe (NonEmpty Text) -- | An "exists" operator to match for the filter used to create the rule. [$sel:exists:Criterion'] :: Criterion -> Maybe Bool -- | A "not equals" operator to match for the filter used to create the -- rule. [$sel:neq:Criterion'] :: Criterion -> Maybe (NonEmpty Text) -- | Create a value of Criterion with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:contains:Criterion', criterion_contains - A -- "contains" operator to match for the filter used to create the rule. -- -- $sel:eq:Criterion', criterion_eq - An "equals" operator -- to match for the filter used to create the rule. -- -- $sel:exists:Criterion', criterion_exists - An "exists" -- operator to match for the filter used to create the rule. -- -- $sel:neq:Criterion', criterion_neq - A "not equals" -- operator to match for the filter used to create the rule. newCriterion :: Criterion -- | A "contains" operator to match for the filter used to create the rule. criterion_contains :: Lens' Criterion (Maybe (NonEmpty Text)) -- | An "equals" operator to match for the filter used to create the rule. criterion_eq :: Lens' Criterion (Maybe (NonEmpty Text)) -- | An "exists" operator to match for the filter used to create the rule. criterion_exists :: Lens' Criterion (Maybe Bool) -- | A "not equals" operator to match for the filter used to create the -- rule. criterion_neq :: Lens' Criterion (Maybe (NonEmpty Text)) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Criterion.Criterion instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Criterion.Criterion instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Criterion.Criterion instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Criterion.Criterion instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Criterion.Criterion instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Criterion.Criterion instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Criterion.Criterion instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.Criterion.Criterion module Amazonka.AccessAnalyzer.Types.ArchiveRuleSummary -- | Contains information about an archive rule. -- -- See: newArchiveRuleSummary smart constructor. data ArchiveRuleSummary ArchiveRuleSummary' :: Text -> HashMap Text Criterion -> ISO8601 -> ISO8601 -> ArchiveRuleSummary -- | The name of the archive rule. [$sel:ruleName:ArchiveRuleSummary'] :: ArchiveRuleSummary -> Text -- | A filter used to define the archive rule. [$sel:filter':ArchiveRuleSummary'] :: ArchiveRuleSummary -> HashMap Text Criterion -- | The time at which the archive rule was created. [$sel:createdAt:ArchiveRuleSummary'] :: ArchiveRuleSummary -> ISO8601 -- | The time at which the archive rule was last updated. [$sel:updatedAt:ArchiveRuleSummary'] :: ArchiveRuleSummary -> ISO8601 -- | Create a value of ArchiveRuleSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ruleName:ArchiveRuleSummary', -- archiveRuleSummary_ruleName - The name of the archive rule. -- -- $sel:filter':ArchiveRuleSummary', -- archiveRuleSummary_filter - A filter used to define the archive -- rule. -- -- $sel:createdAt:ArchiveRuleSummary', -- archiveRuleSummary_createdAt - The time at which the archive -- rule was created. -- -- $sel:updatedAt:ArchiveRuleSummary', -- archiveRuleSummary_updatedAt - The time at which the archive -- rule was last updated. newArchiveRuleSummary :: Text -> UTCTime -> UTCTime -> ArchiveRuleSummary -- | The name of the archive rule. archiveRuleSummary_ruleName :: Lens' ArchiveRuleSummary Text -- | A filter used to define the archive rule. archiveRuleSummary_filter :: Lens' ArchiveRuleSummary (HashMap Text Criterion) -- | The time at which the archive rule was created. archiveRuleSummary_createdAt :: Lens' ArchiveRuleSummary UTCTime -- | The time at which the archive rule was last updated. archiveRuleSummary_updatedAt :: Lens' ArchiveRuleSummary UTCTime instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.ArchiveRuleSummary.ArchiveRuleSummary instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.ArchiveRuleSummary.ArchiveRuleSummary instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.ArchiveRuleSummary.ArchiveRuleSummary instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.ArchiveRuleSummary.ArchiveRuleSummary instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.ArchiveRuleSummary.ArchiveRuleSummary instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.ArchiveRuleSummary.ArchiveRuleSummary instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.ArchiveRuleSummary.ArchiveRuleSummary module Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration -- | The proposed access control configuration for an Amazon EBS volume -- snapshot. You can propose a configuration for a new Amazon EBS volume -- snapshot or an Amazon EBS volume snapshot that you own by specifying -- the user IDs, groups, and optional KMS encryption key. For more -- information, see ModifySnapshotAttribute. -- -- See: newEbsSnapshotConfiguration smart constructor. data EbsSnapshotConfiguration EbsSnapshotConfiguration' :: Maybe [Text] -> Maybe Text -> Maybe [Text] -> EbsSnapshotConfiguration -- | The groups that have access to the Amazon EBS volume snapshot. If the -- value all is specified, then the Amazon EBS volume snapshot -- is public. -- -- [$sel:groups:EbsSnapshotConfiguration'] :: EbsSnapshotConfiguration -> Maybe [Text] -- | The KMS key identifier for an encrypted Amazon EBS volume snapshot. -- The KMS key identifier is the key ARN, key ID, alias ARN, or alias -- name for the KMS key. -- -- [$sel:kmsKeyId:EbsSnapshotConfiguration'] :: EbsSnapshotConfiguration -> Maybe Text -- | The IDs of the Amazon Web Services accounts that have access to the -- Amazon EBS volume snapshot. -- -- [$sel:userIds:EbsSnapshotConfiguration'] :: EbsSnapshotConfiguration -> Maybe [Text] -- | Create a value of EbsSnapshotConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:groups:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_groups - The groups that have access -- to the Amazon EBS volume snapshot. If the value all is -- specified, then the Amazon EBS volume snapshot is public. -- -- -- -- $sel:kmsKeyId:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_kmsKeyId - The KMS key identifier for -- an encrypted Amazon EBS volume snapshot. The KMS key identifier is the -- key ARN, key ID, alias ARN, or alias name for the KMS key. -- -- -- -- $sel:userIds:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_userIds - The IDs of the Amazon Web -- Services accounts that have access to the Amazon EBS volume snapshot. -- -- newEbsSnapshotConfiguration :: EbsSnapshotConfiguration -- | The groups that have access to the Amazon EBS volume snapshot. If the -- value all is specified, then the Amazon EBS volume snapshot -- is public. -- -- ebsSnapshotConfiguration_groups :: Lens' EbsSnapshotConfiguration (Maybe [Text]) -- | The KMS key identifier for an encrypted Amazon EBS volume snapshot. -- The KMS key identifier is the key ARN, key ID, alias ARN, or alias -- name for the KMS key. -- -- ebsSnapshotConfiguration_kmsKeyId :: Lens' EbsSnapshotConfiguration (Maybe Text) -- | The IDs of the Amazon Web Services accounts that have access to the -- Amazon EBS volume snapshot. -- -- ebsSnapshotConfiguration_userIds :: Lens' EbsSnapshotConfiguration (Maybe [Text]) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration.EbsSnapshotConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration.EbsSnapshotConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration.EbsSnapshotConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration.EbsSnapshotConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration.EbsSnapshotConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration.EbsSnapshotConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration.EbsSnapshotConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.EbsSnapshotConfiguration.EbsSnapshotConfiguration module Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration -- | The proposed access control configuration for an Amazon ECR -- repository. You can propose a configuration for a new Amazon ECR -- repository or an existing Amazon ECR repository that you own by -- specifying the Amazon ECR policy. For more information, see -- Repository. -- -- -- -- See: newEcrRepositoryConfiguration smart constructor. data EcrRepositoryConfiguration EcrRepositoryConfiguration' :: Maybe Text -> EcrRepositoryConfiguration -- | The JSON repository policy text to apply to the Amazon ECR repository. -- For more information, see Private repository policy examples in -- the Amazon ECR User Guide. [$sel:repositoryPolicy:EcrRepositoryConfiguration'] :: EcrRepositoryConfiguration -> Maybe Text -- | Create a value of EcrRepositoryConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:repositoryPolicy:EcrRepositoryConfiguration', -- ecrRepositoryConfiguration_repositoryPolicy - The JSON -- repository policy text to apply to the Amazon ECR repository. For more -- information, see Private repository policy examples in the -- Amazon ECR User Guide. newEcrRepositoryConfiguration :: EcrRepositoryConfiguration -- | The JSON repository policy text to apply to the Amazon ECR repository. -- For more information, see Private repository policy examples in -- the Amazon ECR User Guide. ecrRepositoryConfiguration_repositoryPolicy :: Lens' EcrRepositoryConfiguration (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration.EcrRepositoryConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration.EcrRepositoryConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration.EcrRepositoryConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration.EcrRepositoryConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration.EcrRepositoryConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration.EcrRepositoryConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration.EcrRepositoryConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.EcrRepositoryConfiguration.EcrRepositoryConfiguration module Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration -- | The proposed access control configuration for an Amazon EFS file -- system. You can propose a configuration for a new Amazon EFS file -- system or an existing Amazon EFS file system that you own by -- specifying the Amazon EFS policy. For more information, see Using -- file systems in Amazon EFS. -- -- -- -- See: newEfsFileSystemConfiguration smart constructor. data EfsFileSystemConfiguration EfsFileSystemConfiguration' :: Maybe Text -> EfsFileSystemConfiguration -- | The JSON policy definition to apply to the Amazon EFS file system. For -- more information on the elements that make up a file system policy, -- see Amazon EFS Resource-based policies. [$sel:fileSystemPolicy:EfsFileSystemConfiguration'] :: EfsFileSystemConfiguration -> Maybe Text -- | Create a value of EfsFileSystemConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:fileSystemPolicy:EfsFileSystemConfiguration', -- efsFileSystemConfiguration_fileSystemPolicy - The JSON policy -- definition to apply to the Amazon EFS file system. For more -- information on the elements that make up a file system policy, see -- Amazon EFS Resource-based policies. newEfsFileSystemConfiguration :: EfsFileSystemConfiguration -- | The JSON policy definition to apply to the Amazon EFS file system. For -- more information on the elements that make up a file system policy, -- see Amazon EFS Resource-based policies. efsFileSystemConfiguration_fileSystemPolicy :: Lens' EfsFileSystemConfiguration (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration.EfsFileSystemConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration.EfsFileSystemConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration.EfsFileSystemConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration.EfsFileSystemConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration.EfsFileSystemConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration.EfsFileSystemConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration.EfsFileSystemConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.EfsFileSystemConfiguration.EfsFileSystemConfiguration module Amazonka.AccessAnalyzer.Types.FindingChangeType newtype FindingChangeType FindingChangeType' :: Text -> FindingChangeType [fromFindingChangeType] :: FindingChangeType -> Text pattern FindingChangeType_CHANGED :: FindingChangeType pattern FindingChangeType_NEW :: FindingChangeType pattern FindingChangeType_UNCHANGED :: FindingChangeType instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.FindingChangeType.FindingChangeType module Amazonka.AccessAnalyzer.Types.FindingSourceDetail -- | Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. -- -- See: newFindingSourceDetail smart constructor. data FindingSourceDetail FindingSourceDetail' :: Maybe Text -> Maybe Text -> FindingSourceDetail -- | The account of the cross-account access point that generated the -- finding. [$sel:accessPointAccount:FindingSourceDetail'] :: FindingSourceDetail -> Maybe Text -- | The ARN of the access point that generated the finding. The ARN format -- depends on whether the ARN represents an access point or a -- multi-region access point. [$sel:accessPointArn:FindingSourceDetail'] :: FindingSourceDetail -> Maybe Text -- | Create a value of FindingSourceDetail with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPointAccount:FindingSourceDetail', -- findingSourceDetail_accessPointAccount - The account of the -- cross-account access point that generated the finding. -- -- $sel:accessPointArn:FindingSourceDetail', -- findingSourceDetail_accessPointArn - The ARN of the access -- point that generated the finding. The ARN format depends on whether -- the ARN represents an access point or a multi-region access point. newFindingSourceDetail :: FindingSourceDetail -- | The account of the cross-account access point that generated the -- finding. findingSourceDetail_accessPointAccount :: Lens' FindingSourceDetail (Maybe Text) -- | The ARN of the access point that generated the finding. The ARN format -- depends on whether the ARN represents an access point or a -- multi-region access point. findingSourceDetail_accessPointArn :: Lens' FindingSourceDetail (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.FindingSourceDetail.FindingSourceDetail instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.FindingSourceDetail.FindingSourceDetail instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.FindingSourceDetail.FindingSourceDetail instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.FindingSourceDetail.FindingSourceDetail instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.FindingSourceDetail.FindingSourceDetail instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.FindingSourceDetail.FindingSourceDetail instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.FindingSourceDetail.FindingSourceDetail module Amazonka.AccessAnalyzer.Types.FindingSourceType newtype FindingSourceType FindingSourceType' :: Text -> FindingSourceType [fromFindingSourceType] :: FindingSourceType -> Text pattern FindingSourceType_BUCKET_ACL :: FindingSourceType pattern FindingSourceType_POLICY :: FindingSourceType pattern FindingSourceType_S3_ACCESS_POINT :: FindingSourceType pattern FindingSourceType_S3_ACCESS_POINT_ACCOUNT :: FindingSourceType instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.FindingSourceType.FindingSourceType module Amazonka.AccessAnalyzer.Types.FindingSource -- | The source of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. -- -- See: newFindingSource smart constructor. data FindingSource FindingSource' :: Maybe FindingSourceDetail -> FindingSourceType -> FindingSource -- | Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. [$sel:detail:FindingSource'] :: FindingSource -> Maybe FindingSourceDetail -- | Indicates the type of access that generated the finding. [$sel:type':FindingSource'] :: FindingSource -> FindingSourceType -- | Create a value of FindingSource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:detail:FindingSource', findingSource_detail - -- Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. -- -- $sel:type':FindingSource', findingSource_type - -- Indicates the type of access that generated the finding. newFindingSource :: FindingSourceType -> FindingSource -- | Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. findingSource_detail :: Lens' FindingSource (Maybe FindingSourceDetail) -- | Indicates the type of access that generated the finding. findingSource_type :: Lens' FindingSource FindingSourceType instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.FindingSource.FindingSource instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.FindingSource.FindingSource instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.FindingSource.FindingSource instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.FindingSource.FindingSource instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.FindingSource.FindingSource instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.FindingSource.FindingSource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.FindingSource.FindingSource module Amazonka.AccessAnalyzer.Types.FindingStatus newtype FindingStatus FindingStatus' :: Text -> FindingStatus [fromFindingStatus] :: FindingStatus -> Text pattern FindingStatus_ACTIVE :: FindingStatus pattern FindingStatus_ARCHIVED :: FindingStatus pattern FindingStatus_RESOLVED :: FindingStatus instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.FindingStatus.FindingStatus module Amazonka.AccessAnalyzer.Types.FindingStatusUpdate newtype FindingStatusUpdate FindingStatusUpdate' :: Text -> FindingStatusUpdate [fromFindingStatusUpdate] :: FindingStatusUpdate -> Text pattern FindingStatusUpdate_ACTIVE :: FindingStatusUpdate pattern FindingStatusUpdate_ARCHIVED :: FindingStatusUpdate instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.FindingStatusUpdate.FindingStatusUpdate module Amazonka.AccessAnalyzer.Types.GeneratedPolicy -- | Contains the text for the generated policy. -- -- See: newGeneratedPolicy smart constructor. data GeneratedPolicy GeneratedPolicy' :: Text -> GeneratedPolicy -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. [$sel:policy:GeneratedPolicy'] :: GeneratedPolicy -> Text -- | Create a value of GeneratedPolicy with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:policy:GeneratedPolicy', generatedPolicy_policy - -- The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. newGeneratedPolicy :: Text -> GeneratedPolicy -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. generatedPolicy_policy :: Lens' GeneratedPolicy Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.GeneratedPolicy.GeneratedPolicy instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.GeneratedPolicy.GeneratedPolicy instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.GeneratedPolicy.GeneratedPolicy instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.GeneratedPolicy.GeneratedPolicy instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.GeneratedPolicy.GeneratedPolicy instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.GeneratedPolicy.GeneratedPolicy instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.GeneratedPolicy.GeneratedPolicy module Amazonka.AccessAnalyzer.Types.IamRoleConfiguration -- | The proposed access control configuration for an IAM role. You can -- propose a configuration for a new IAM role or an existing IAM role -- that you own by specifying the trust policy. If the configuration is -- for a new IAM role, you must specify the trust policy. If the -- configuration is for an existing IAM role that you own and you do not -- propose the trust policy, the access preview uses the existing trust -- policy for the role. The proposed trust policy cannot be an empty -- string. For more information about role trust policy limits, see -- IAM and STS quotas. -- -- See: newIamRoleConfiguration smart constructor. data IamRoleConfiguration IamRoleConfiguration' :: Maybe Text -> IamRoleConfiguration -- | The proposed trust policy for the IAM role. [$sel:trustPolicy:IamRoleConfiguration'] :: IamRoleConfiguration -> Maybe Text -- | Create a value of IamRoleConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:trustPolicy:IamRoleConfiguration', -- iamRoleConfiguration_trustPolicy - The proposed trust policy -- for the IAM role. newIamRoleConfiguration :: IamRoleConfiguration -- | The proposed trust policy for the IAM role. iamRoleConfiguration_trustPolicy :: Lens' IamRoleConfiguration (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.IamRoleConfiguration.IamRoleConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.IamRoleConfiguration.IamRoleConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.IamRoleConfiguration.IamRoleConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.IamRoleConfiguration.IamRoleConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.IamRoleConfiguration.IamRoleConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.IamRoleConfiguration.IamRoleConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.IamRoleConfiguration.IamRoleConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.IamRoleConfiguration.IamRoleConfiguration module Amazonka.AccessAnalyzer.Types.InlineArchiveRule -- | An criterion statement in an archive rule. Each archive rule may have -- multiple criteria. -- -- See: newInlineArchiveRule smart constructor. data InlineArchiveRule InlineArchiveRule' :: Text -> HashMap Text Criterion -> InlineArchiveRule -- | The name of the rule. [$sel:ruleName:InlineArchiveRule'] :: InlineArchiveRule -> Text -- | The condition and values for a criterion. [$sel:filter':InlineArchiveRule'] :: InlineArchiveRule -> HashMap Text Criterion -- | Create a value of InlineArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ruleName:InlineArchiveRule', -- inlineArchiveRule_ruleName - The name of the rule. -- -- $sel:filter':InlineArchiveRule', -- inlineArchiveRule_filter - The condition and values for a -- criterion. newInlineArchiveRule :: Text -> InlineArchiveRule -- | The name of the rule. inlineArchiveRule_ruleName :: Lens' InlineArchiveRule Text -- | The condition and values for a criterion. inlineArchiveRule_filter :: Lens' InlineArchiveRule (HashMap Text Criterion) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.InlineArchiveRule.InlineArchiveRule instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.InlineArchiveRule.InlineArchiveRule instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.InlineArchiveRule.InlineArchiveRule instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.InlineArchiveRule.InlineArchiveRule instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.InlineArchiveRule.InlineArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.InlineArchiveRule.InlineArchiveRule instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.InlineArchiveRule.InlineArchiveRule module Amazonka.AccessAnalyzer.Types.InternetConfiguration -- | This configuration sets the network origin for the Amazon S3 access -- point or multi-region access point to Internet. -- -- See: newInternetConfiguration smart constructor. data InternetConfiguration InternetConfiguration' :: InternetConfiguration -- | Create a value of InternetConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newInternetConfiguration :: InternetConfiguration instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.InternetConfiguration.InternetConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.InternetConfiguration.InternetConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.InternetConfiguration.InternetConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.InternetConfiguration.InternetConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.InternetConfiguration.InternetConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.InternetConfiguration.InternetConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.InternetConfiguration.InternetConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.InternetConfiguration.InternetConfiguration module Amazonka.AccessAnalyzer.Types.JobErrorCode newtype JobErrorCode JobErrorCode' :: Text -> JobErrorCode [fromJobErrorCode] :: JobErrorCode -> Text pattern JobErrorCode_AUTHORIZATION_ERROR :: JobErrorCode pattern JobErrorCode_RESOURCE_NOT_FOUND_ERROR :: JobErrorCode pattern JobErrorCode_SERVICE_ERROR :: JobErrorCode pattern JobErrorCode_SERVICE_QUOTA_EXCEEDED_ERROR :: JobErrorCode instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.JobErrorCode.JobErrorCode module Amazonka.AccessAnalyzer.Types.JobError -- | Contains the details about the policy generation error. -- -- See: newJobError smart constructor. data JobError JobError' :: JobErrorCode -> Text -> JobError -- | The job error code. [$sel:code:JobError'] :: JobError -> JobErrorCode -- | Specific information about the error. For example, which service quota -- was exceeded or which resource was not found. [$sel:message:JobError'] :: JobError -> Text -- | Create a value of JobError with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:JobError', jobError_code - The job error code. -- -- $sel:message:JobError', jobError_message - Specific -- information about the error. For example, which service quota was -- exceeded or which resource was not found. newJobError :: JobErrorCode -> Text -> JobError -- | The job error code. jobError_code :: Lens' JobError JobErrorCode -- | Specific information about the error. For example, which service quota -- was exceeded or which resource was not found. jobError_message :: Lens' JobError Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.JobError.JobError instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.JobError.JobError instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.JobError.JobError instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.JobError.JobError instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.JobError.JobError instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.JobError.JobError instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.JobError.JobError module Amazonka.AccessAnalyzer.Types.JobStatus newtype JobStatus JobStatus' :: Text -> JobStatus [fromJobStatus] :: JobStatus -> Text pattern JobStatus_CANCELED :: JobStatus pattern JobStatus_FAILED :: JobStatus pattern JobStatus_IN_PROGRESS :: JobStatus pattern JobStatus_SUCCEEDED :: JobStatus instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.JobStatus.JobStatus module Amazonka.AccessAnalyzer.Types.JobDetails -- | Contains details about the policy generation request. -- -- See: newJobDetails smart constructor. data JobDetails JobDetails' :: Maybe ISO8601 -> Maybe JobError -> Text -> JobStatus -> ISO8601 -> JobDetails -- | A timestamp of when the job was completed. [$sel:completedOn:JobDetails'] :: JobDetails -> Maybe ISO8601 -- | The job error for the policy generation request. [$sel:jobError:JobDetails'] :: JobDetails -> Maybe JobError -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. [$sel:jobId:JobDetails'] :: JobDetails -> Text -- | The status of the job request. [$sel:status:JobDetails'] :: JobDetails -> JobStatus -- | A timestamp of when the job was started. [$sel:startedOn:JobDetails'] :: JobDetails -> ISO8601 -- | Create a value of JobDetails with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:completedOn:JobDetails', jobDetails_completedOn - A -- timestamp of when the job was completed. -- -- $sel:jobError:JobDetails', jobDetails_jobError - The job -- error for the policy generation request. -- -- $sel:jobId:JobDetails', jobDetails_jobId - The -- JobId that is returned by the StartPolicyGeneration -- operation. The JobId can be used with -- GetGeneratedPolicy to retrieve the generated policies or used -- with CancelPolicyGeneration to cancel the policy generation -- request. -- -- $sel:status:JobDetails', jobDetails_status - The status -- of the job request. -- -- $sel:startedOn:JobDetails', jobDetails_startedOn - A -- timestamp of when the job was started. newJobDetails :: Text -> JobStatus -> UTCTime -> JobDetails -- | A timestamp of when the job was completed. jobDetails_completedOn :: Lens' JobDetails (Maybe UTCTime) -- | The job error for the policy generation request. jobDetails_jobError :: Lens' JobDetails (Maybe JobError) -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. jobDetails_jobId :: Lens' JobDetails Text -- | The status of the job request. jobDetails_status :: Lens' JobDetails JobStatus -- | A timestamp of when the job was started. jobDetails_startedOn :: Lens' JobDetails UTCTime instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.JobDetails.JobDetails instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.JobDetails.JobDetails instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.JobDetails.JobDetails instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.JobDetails.JobDetails instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.JobDetails.JobDetails instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.JobDetails.JobDetails instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.JobDetails.JobDetails module Amazonka.AccessAnalyzer.Types.KmsGrantConstraints -- | Use this structure to propose allowing cryptographic operations -- in the grant only when the operation request includes the specified -- encryption context. You can specify only one type of encryption -- context. An empty map is treated as not specified. For more -- information, see GrantConstraints. -- -- See: newKmsGrantConstraints smart constructor. data KmsGrantConstraints KmsGrantConstraints' :: Maybe (HashMap Text Text) -> Maybe (HashMap Text Text) -> KmsGrantConstraints -- | A list of key-value pairs that must match the encryption context in -- the cryptographic operation request. The grant allows the -- operation only when the encryption context in the request is the same -- as the encryption context specified in this constraint. [$sel:encryptionContextEquals:KmsGrantConstraints'] :: KmsGrantConstraints -> Maybe (HashMap Text Text) -- | A list of key-value pairs that must be included in the encryption -- context of the cryptographic operation request. The grant -- allows the cryptographic operation only when the encryption context in -- the request includes the key-value pairs specified in this constraint, -- although it can include additional key-value pairs. [$sel:encryptionContextSubset:KmsGrantConstraints'] :: KmsGrantConstraints -> Maybe (HashMap Text Text) -- | Create a value of KmsGrantConstraints with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:encryptionContextEquals:KmsGrantConstraints', -- kmsGrantConstraints_encryptionContextEquals - A list of -- key-value pairs that must match the encryption context in the -- cryptographic operation request. The grant allows the operation -- only when the encryption context in the request is the same as the -- encryption context specified in this constraint. -- -- $sel:encryptionContextSubset:KmsGrantConstraints', -- kmsGrantConstraints_encryptionContextSubset - A list of -- key-value pairs that must be included in the encryption context of the -- cryptographic operation request. The grant allows the -- cryptographic operation only when the encryption context in the -- request includes the key-value pairs specified in this constraint, -- although it can include additional key-value pairs. newKmsGrantConstraints :: KmsGrantConstraints -- | A list of key-value pairs that must match the encryption context in -- the cryptographic operation request. The grant allows the -- operation only when the encryption context in the request is the same -- as the encryption context specified in this constraint. kmsGrantConstraints_encryptionContextEquals :: Lens' KmsGrantConstraints (Maybe (HashMap Text Text)) -- | A list of key-value pairs that must be included in the encryption -- context of the cryptographic operation request. The grant -- allows the cryptographic operation only when the encryption context in -- the request includes the key-value pairs specified in this constraint, -- although it can include additional key-value pairs. kmsGrantConstraints_encryptionContextSubset :: Lens' KmsGrantConstraints (Maybe (HashMap Text Text)) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.KmsGrantConstraints.KmsGrantConstraints instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.KmsGrantConstraints.KmsGrantConstraints instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.KmsGrantConstraints.KmsGrantConstraints instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.KmsGrantConstraints.KmsGrantConstraints instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.KmsGrantConstraints.KmsGrantConstraints instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.KmsGrantConstraints.KmsGrantConstraints instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.KmsGrantConstraints.KmsGrantConstraints instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.KmsGrantConstraints.KmsGrantConstraints module Amazonka.AccessAnalyzer.Types.KmsGrantOperation newtype KmsGrantOperation KmsGrantOperation' :: Text -> KmsGrantOperation [fromKmsGrantOperation] :: KmsGrantOperation -> Text pattern KmsGrantOperation_CreateGrant :: KmsGrantOperation pattern KmsGrantOperation_Decrypt :: KmsGrantOperation pattern KmsGrantOperation_DescribeKey :: KmsGrantOperation pattern KmsGrantOperation_Encrypt :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKey :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyPair :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyPairWithoutPlaintext :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyWithoutPlaintext :: KmsGrantOperation pattern KmsGrantOperation_GetPublicKey :: KmsGrantOperation pattern KmsGrantOperation_ReEncryptFrom :: KmsGrantOperation pattern KmsGrantOperation_ReEncryptTo :: KmsGrantOperation pattern KmsGrantOperation_RetireGrant :: KmsGrantOperation pattern KmsGrantOperation_Sign :: KmsGrantOperation pattern KmsGrantOperation_Verify :: KmsGrantOperation instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.KmsGrantOperation.KmsGrantOperation module Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration -- | A proposed grant configuration for a KMS key. For more information, -- see CreateGrant. -- -- See: newKmsGrantConfiguration smart constructor. data KmsGrantConfiguration KmsGrantConfiguration' :: Maybe KmsGrantConstraints -> Maybe Text -> [KmsGrantOperation] -> Text -> Text -> KmsGrantConfiguration -- | Use this structure to propose allowing cryptographic operations -- in the grant only when the operation request includes the specified -- encryption context. [$sel:constraints:KmsGrantConfiguration'] :: KmsGrantConfiguration -> Maybe KmsGrantConstraints -- | The principal that is given permission to retire the grant by using -- RetireGrant operation. [$sel:retiringPrincipal:KmsGrantConfiguration'] :: KmsGrantConfiguration -> Maybe Text -- | A list of operations that the grant permits. [$sel:operations:KmsGrantConfiguration'] :: KmsGrantConfiguration -> [KmsGrantOperation] -- | The principal that is given permission to perform the operations that -- the grant permits. [$sel:granteePrincipal:KmsGrantConfiguration'] :: KmsGrantConfiguration -> Text -- | The Amazon Web Services account under which the grant was issued. The -- account is used to propose KMS grants issued by accounts other than -- the owner of the key. [$sel:issuingAccount:KmsGrantConfiguration'] :: KmsGrantConfiguration -> Text -- | Create a value of KmsGrantConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:constraints:KmsGrantConfiguration', -- kmsGrantConfiguration_constraints - Use this structure to -- propose allowing cryptographic operations in the grant only -- when the operation request includes the specified encryption -- context. -- -- $sel:retiringPrincipal:KmsGrantConfiguration', -- kmsGrantConfiguration_retiringPrincipal - The principal that is -- given permission to retire the grant by using RetireGrant -- operation. -- -- $sel:operations:KmsGrantConfiguration', -- kmsGrantConfiguration_operations - A list of operations that -- the grant permits. -- -- $sel:granteePrincipal:KmsGrantConfiguration', -- kmsGrantConfiguration_granteePrincipal - The principal that is -- given permission to perform the operations that the grant permits. -- -- $sel:issuingAccount:KmsGrantConfiguration', -- kmsGrantConfiguration_issuingAccount - The Amazon Web Services -- account under which the grant was issued. The account is used to -- propose KMS grants issued by accounts other than the owner of the key. newKmsGrantConfiguration :: Text -> Text -> KmsGrantConfiguration -- | Use this structure to propose allowing cryptographic operations -- in the grant only when the operation request includes the specified -- encryption context. kmsGrantConfiguration_constraints :: Lens' KmsGrantConfiguration (Maybe KmsGrantConstraints) -- | The principal that is given permission to retire the grant by using -- RetireGrant operation. kmsGrantConfiguration_retiringPrincipal :: Lens' KmsGrantConfiguration (Maybe Text) -- | A list of operations that the grant permits. kmsGrantConfiguration_operations :: Lens' KmsGrantConfiguration [KmsGrantOperation] -- | The principal that is given permission to perform the operations that -- the grant permits. kmsGrantConfiguration_granteePrincipal :: Lens' KmsGrantConfiguration Text -- | The Amazon Web Services account under which the grant was issued. The -- account is used to propose KMS grants issued by accounts other than -- the owner of the key. kmsGrantConfiguration_issuingAccount :: Lens' KmsGrantConfiguration Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration.KmsGrantConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration.KmsGrantConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration.KmsGrantConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration.KmsGrantConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration.KmsGrantConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration.KmsGrantConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration.KmsGrantConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration.KmsGrantConfiguration module Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration -- | Proposed access control configuration for a KMS key. You can propose a -- configuration for a new KMS key or an existing KMS key that you own by -- specifying the key policy and KMS grant configuration. If the -- configuration is for an existing key and you do not specify the key -- policy, the access preview uses the existing policy for the key. If -- the access preview is for a new resource and you do not specify the -- key policy, then the access preview uses the default key policy. The -- proposed key policy cannot be an empty string. For more information, -- see Default key policy. For more information about key policy -- limits, see Resource quotas. -- -- See: newKmsKeyConfiguration smart constructor. data KmsKeyConfiguration KmsKeyConfiguration' :: Maybe [KmsGrantConfiguration] -> Maybe (HashMap Text Text) -> KmsKeyConfiguration -- | A list of proposed grant configurations for the KMS key. If the -- proposed grant configuration is for an existing key, the access -- preview uses the proposed list of grant configurations in place of the -- existing grants. Otherwise, the access preview uses the existing -- grants for the key. [$sel:grants:KmsKeyConfiguration'] :: KmsKeyConfiguration -> Maybe [KmsGrantConfiguration] -- | Resource policy configuration for the KMS key. The only valid value -- for the name of the key policy is default. For more -- information, see Default key policy. [$sel:keyPolicies:KmsKeyConfiguration'] :: KmsKeyConfiguration -> Maybe (HashMap Text Text) -- | Create a value of KmsKeyConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:grants:KmsKeyConfiguration', -- kmsKeyConfiguration_grants - A list of proposed grant -- configurations for the KMS key. If the proposed grant configuration is -- for an existing key, the access preview uses the proposed list of -- grant configurations in place of the existing grants. Otherwise, the -- access preview uses the existing grants for the key. -- -- $sel:keyPolicies:KmsKeyConfiguration', -- kmsKeyConfiguration_keyPolicies - Resource policy configuration -- for the KMS key. The only valid value for the name of the key policy -- is default. For more information, see Default key -- policy. newKmsKeyConfiguration :: KmsKeyConfiguration -- | A list of proposed grant configurations for the KMS key. If the -- proposed grant configuration is for an existing key, the access -- preview uses the proposed list of grant configurations in place of the -- existing grants. Otherwise, the access preview uses the existing -- grants for the key. kmsKeyConfiguration_grants :: Lens' KmsKeyConfiguration (Maybe [KmsGrantConfiguration]) -- | Resource policy configuration for the KMS key. The only valid value -- for the name of the key policy is default. For more -- information, see Default key policy. kmsKeyConfiguration_keyPolicies :: Lens' KmsKeyConfiguration (Maybe (HashMap Text Text)) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration.KmsKeyConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration.KmsKeyConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration.KmsKeyConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration.KmsKeyConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration.KmsKeyConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration.KmsKeyConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration.KmsKeyConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration.KmsKeyConfiguration module Amazonka.AccessAnalyzer.Types.Locale newtype Locale Locale' :: Text -> Locale [fromLocale] :: Locale -> Text pattern Locale_DE :: Locale pattern Locale_EN :: Locale pattern Locale_ES :: Locale pattern Locale_FR :: Locale pattern Locale_IT :: Locale pattern Locale_JA :: Locale pattern Locale_KO :: Locale pattern Locale_PT_BR :: Locale pattern Locale_ZH_CN :: Locale pattern Locale_ZH_TW :: Locale instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.Locale.Locale instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.Locale.Locale instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.Locale.Locale instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.Locale.Locale instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.Locale.Locale instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Locale.Locale instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.Locale.Locale instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.Locale.Locale instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.Locale.Locale instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.Locale.Locale instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.Locale.Locale instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.Locale.Locale instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Locale.Locale instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Locale.Locale instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Locale.Locale instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.Locale.Locale instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Locale.Locale instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Locale.Locale instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Locale.Locale module Amazonka.AccessAnalyzer.Types.OrderBy newtype OrderBy OrderBy' :: Text -> OrderBy [fromOrderBy] :: OrderBy -> Text pattern OrderBy_ASC :: OrderBy pattern OrderBy_DESC :: OrderBy instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.OrderBy.OrderBy module Amazonka.AccessAnalyzer.Types.PolicyGeneration -- | Contains details about the policy generation status and properties. -- -- See: newPolicyGeneration smart constructor. data PolicyGeneration PolicyGeneration' :: Maybe ISO8601 -> Text -> Text -> JobStatus -> ISO8601 -> PolicyGeneration -- | A timestamp of when the policy generation was completed. [$sel:completedOn:PolicyGeneration'] :: PolicyGeneration -> Maybe ISO8601 -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. [$sel:jobId:PolicyGeneration'] :: PolicyGeneration -> Text -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. [$sel:principalArn:PolicyGeneration'] :: PolicyGeneration -> Text -- | The status of the policy generation request. [$sel:status:PolicyGeneration'] :: PolicyGeneration -> JobStatus -- | A timestamp of when the policy generation started. [$sel:startedOn:PolicyGeneration'] :: PolicyGeneration -> ISO8601 -- | Create a value of PolicyGeneration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:completedOn:PolicyGeneration', -- policyGeneration_completedOn - A timestamp of when the policy -- generation was completed. -- -- $sel:jobId:PolicyGeneration', policyGeneration_jobId - -- The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. -- -- $sel:principalArn:PolicyGeneration', -- policyGeneration_principalArn - The ARN of the IAM entity (user -- or role) for which you are generating a policy. -- -- $sel:status:PolicyGeneration', policyGeneration_status - -- The status of the policy generation request. -- -- $sel:startedOn:PolicyGeneration', -- policyGeneration_startedOn - A timestamp of when the policy -- generation started. newPolicyGeneration :: Text -> Text -> JobStatus -> UTCTime -> PolicyGeneration -- | A timestamp of when the policy generation was completed. policyGeneration_completedOn :: Lens' PolicyGeneration (Maybe UTCTime) -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. policyGeneration_jobId :: Lens' PolicyGeneration Text -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. policyGeneration_principalArn :: Lens' PolicyGeneration Text -- | The status of the policy generation request. policyGeneration_status :: Lens' PolicyGeneration JobStatus -- | A timestamp of when the policy generation started. policyGeneration_startedOn :: Lens' PolicyGeneration UTCTime instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.PolicyGeneration.PolicyGeneration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.PolicyGeneration.PolicyGeneration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.PolicyGeneration.PolicyGeneration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.PolicyGeneration.PolicyGeneration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.PolicyGeneration.PolicyGeneration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.PolicyGeneration.PolicyGeneration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.PolicyGeneration.PolicyGeneration module Amazonka.AccessAnalyzer.Types.PolicyGenerationDetails -- | Contains the ARN details about the IAM entity for which the policy is -- generated. -- -- See: newPolicyGenerationDetails smart constructor. data PolicyGenerationDetails PolicyGenerationDetails' :: Text -> PolicyGenerationDetails -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. [$sel:principalArn:PolicyGenerationDetails'] :: PolicyGenerationDetails -> Text -- | Create a value of PolicyGenerationDetails with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:principalArn:PolicyGenerationDetails', -- policyGenerationDetails_principalArn - The ARN of the IAM -- entity (user or role) for which you are generating a policy. newPolicyGenerationDetails :: Text -> PolicyGenerationDetails -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. policyGenerationDetails_principalArn :: Lens' PolicyGenerationDetails Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.PolicyGenerationDetails.PolicyGenerationDetails instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.PolicyGenerationDetails.PolicyGenerationDetails instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.PolicyGenerationDetails.PolicyGenerationDetails instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.PolicyGenerationDetails.PolicyGenerationDetails instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.PolicyGenerationDetails.PolicyGenerationDetails instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.PolicyGenerationDetails.PolicyGenerationDetails instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.PolicyGenerationDetails.PolicyGenerationDetails module Amazonka.AccessAnalyzer.Types.PolicyType newtype PolicyType PolicyType' :: Text -> PolicyType [fromPolicyType] :: PolicyType -> Text pattern PolicyType_IDENTITY_POLICY :: PolicyType pattern PolicyType_RESOURCE_POLICY :: PolicyType pattern PolicyType_SERVICE_CONTROL_POLICY :: PolicyType instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.PolicyType.PolicyType module Amazonka.AccessAnalyzer.Types.Position -- | A position in a policy. -- -- See: newPosition smart constructor. data Position Position' :: Int -> Int -> Int -> Position -- | The line of the position, starting from 1. [$sel:line:Position'] :: Position -> Int -- | The column of the position, starting from 0. [$sel:column:Position'] :: Position -> Int -- | The offset within the policy that corresponds to the position, -- starting from 0. [$sel:offset:Position'] :: Position -> Int -- | Create a value of Position with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:line:Position', position_line - The line of the -- position, starting from 1. -- -- $sel:column:Position', position_column - The column of -- the position, starting from 0. -- -- $sel:offset:Position', position_offset - The offset -- within the policy that corresponds to the position, starting from 0. newPosition :: Int -> Int -> Int -> Position -- | The line of the position, starting from 1. position_line :: Lens' Position Int -- | The column of the position, starting from 0. position_column :: Lens' Position Int -- | The offset within the policy that corresponds to the position, -- starting from 0. position_offset :: Lens' Position Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Position.Position instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Position.Position instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Position.Position instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Position.Position instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Position.Position instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Position.Position instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Position.Position module Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue -- | The values for a manual Amazon RDS DB cluster snapshot attribute. -- -- See: newRdsDbClusterSnapshotAttributeValue smart -- constructor. data RdsDbClusterSnapshotAttributeValue RdsDbClusterSnapshotAttributeValue' :: Maybe [Text] -> RdsDbClusterSnapshotAttributeValue -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB cluster snapshot. If the value all is -- specified, then the Amazon RDS DB cluster snapshot is public and can -- be copied or restored by all Amazon Web Services accounts. -- -- [$sel:accountIds:RdsDbClusterSnapshotAttributeValue'] :: RdsDbClusterSnapshotAttributeValue -> Maybe [Text] -- | Create a value of RdsDbClusterSnapshotAttributeValue with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accountIds:RdsDbClusterSnapshotAttributeValue', -- rdsDbClusterSnapshotAttributeValue_accountIds - The Amazon Web -- Services account IDs that have access to the manual Amazon RDS DB -- cluster snapshot. If the value all is specified, then the -- Amazon RDS DB cluster snapshot is public and can be copied or restored -- by all Amazon Web Services accounts. -- -- newRdsDbClusterSnapshotAttributeValue :: RdsDbClusterSnapshotAttributeValue -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB cluster snapshot. If the value all is -- specified, then the Amazon RDS DB cluster snapshot is public and can -- be copied or restored by all Amazon Web Services accounts. -- -- rdsDbClusterSnapshotAttributeValue_accountIds :: Lens' RdsDbClusterSnapshotAttributeValue (Maybe [Text]) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue.RdsDbClusterSnapshotAttributeValue instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue.RdsDbClusterSnapshotAttributeValue instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue.RdsDbClusterSnapshotAttributeValue instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue.RdsDbClusterSnapshotAttributeValue instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue.RdsDbClusterSnapshotAttributeValue instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue.RdsDbClusterSnapshotAttributeValue instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue.RdsDbClusterSnapshotAttributeValue instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotAttributeValue.RdsDbClusterSnapshotAttributeValue module Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration -- | The proposed access control configuration for an Amazon RDS DB cluster -- snapshot. You can propose a configuration for a new Amazon RDS DB -- cluster snapshot or an Amazon RDS DB cluster snapshot that you own by -- specifying the RdsDbClusterSnapshotAttributeValue and -- optional KMS encryption key. For more information, see -- ModifyDBClusterSnapshotAttribute. -- -- See: newRdsDbClusterSnapshotConfiguration smart -- constructor. data RdsDbClusterSnapshotConfiguration RdsDbClusterSnapshotConfiguration' :: Maybe (HashMap Text RdsDbClusterSnapshotAttributeValue) -> Maybe Text -> RdsDbClusterSnapshotConfiguration -- | The names and values of manual DB cluster snapshot attributes. Manual -- DB cluster snapshot attributes are used to authorize other Amazon Web -- Services accounts to restore a manual DB cluster snapshot. The only -- valid value for AttributeName for the attribute map is -- restore [$sel:attributes:RdsDbClusterSnapshotConfiguration'] :: RdsDbClusterSnapshotConfiguration -> Maybe (HashMap Text RdsDbClusterSnapshotAttributeValue) -- | The KMS key identifier for an encrypted Amazon RDS DB cluster -- snapshot. The KMS key identifier is the key ARN, key ID, alias ARN, or -- alias name for the KMS key. -- -- [$sel:kmsKeyId:RdsDbClusterSnapshotConfiguration'] :: RdsDbClusterSnapshotConfiguration -> Maybe Text -- | Create a value of RdsDbClusterSnapshotConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributes:RdsDbClusterSnapshotConfiguration', -- rdsDbClusterSnapshotConfiguration_attributes - The names and -- values of manual DB cluster snapshot attributes. Manual DB cluster -- snapshot attributes are used to authorize other Amazon Web Services -- accounts to restore a manual DB cluster snapshot. The only valid value -- for AttributeName for the attribute map is restore -- -- $sel:kmsKeyId:RdsDbClusterSnapshotConfiguration', -- rdsDbClusterSnapshotConfiguration_kmsKeyId - The KMS key -- identifier for an encrypted Amazon RDS DB cluster snapshot. The KMS -- key identifier is the key ARN, key ID, alias ARN, or alias name for -- the KMS key. -- -- newRdsDbClusterSnapshotConfiguration :: RdsDbClusterSnapshotConfiguration -- | The names and values of manual DB cluster snapshot attributes. Manual -- DB cluster snapshot attributes are used to authorize other Amazon Web -- Services accounts to restore a manual DB cluster snapshot. The only -- valid value for AttributeName for the attribute map is -- restore rdsDbClusterSnapshotConfiguration_attributes :: Lens' RdsDbClusterSnapshotConfiguration (Maybe (HashMap Text RdsDbClusterSnapshotAttributeValue)) -- | The KMS key identifier for an encrypted Amazon RDS DB cluster -- snapshot. The KMS key identifier is the key ARN, key ID, alias ARN, or -- alias name for the KMS key. -- -- rdsDbClusterSnapshotConfiguration_kmsKeyId :: Lens' RdsDbClusterSnapshotConfiguration (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration.RdsDbClusterSnapshotConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration.RdsDbClusterSnapshotConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration.RdsDbClusterSnapshotConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration.RdsDbClusterSnapshotConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration.RdsDbClusterSnapshotConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration.RdsDbClusterSnapshotConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration.RdsDbClusterSnapshotConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.RdsDbClusterSnapshotConfiguration.RdsDbClusterSnapshotConfiguration module Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue -- | The name and values of a manual Amazon RDS DB snapshot attribute. -- Manual DB snapshot attributes are used to authorize other Amazon Web -- Services accounts to restore a manual DB snapshot. -- -- See: newRdsDbSnapshotAttributeValue smart constructor. data RdsDbSnapshotAttributeValue RdsDbSnapshotAttributeValue' :: Maybe [Text] -> RdsDbSnapshotAttributeValue -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB snapshot. If the value all is specified, then -- the Amazon RDS DB snapshot is public and can be copied or restored by -- all Amazon Web Services accounts. -- -- [$sel:accountIds:RdsDbSnapshotAttributeValue'] :: RdsDbSnapshotAttributeValue -> Maybe [Text] -- | Create a value of RdsDbSnapshotAttributeValue with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accountIds:RdsDbSnapshotAttributeValue', -- rdsDbSnapshotAttributeValue_accountIds - The Amazon Web -- Services account IDs that have access to the manual Amazon RDS DB -- snapshot. If the value all is specified, then the Amazon RDS -- DB snapshot is public and can be copied or restored by all Amazon Web -- Services accounts. -- -- newRdsDbSnapshotAttributeValue :: RdsDbSnapshotAttributeValue -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB snapshot. If the value all is specified, then -- the Amazon RDS DB snapshot is public and can be copied or restored by -- all Amazon Web Services accounts. -- -- rdsDbSnapshotAttributeValue_accountIds :: Lens' RdsDbSnapshotAttributeValue (Maybe [Text]) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue.RdsDbSnapshotAttributeValue instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue.RdsDbSnapshotAttributeValue instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue.RdsDbSnapshotAttributeValue instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue.RdsDbSnapshotAttributeValue instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue.RdsDbSnapshotAttributeValue instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue.RdsDbSnapshotAttributeValue instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue.RdsDbSnapshotAttributeValue instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.RdsDbSnapshotAttributeValue.RdsDbSnapshotAttributeValue module Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration -- | The proposed access control configuration for an Amazon RDS DB -- snapshot. You can propose a configuration for a new Amazon RDS DB -- snapshot or an Amazon RDS DB snapshot that you own by specifying the -- RdsDbSnapshotAttributeValue and optional KMS encryption key. -- For more information, see ModifyDBSnapshotAttribute. -- -- See: newRdsDbSnapshotConfiguration smart constructor. data RdsDbSnapshotConfiguration RdsDbSnapshotConfiguration' :: Maybe (HashMap Text RdsDbSnapshotAttributeValue) -> Maybe Text -> RdsDbSnapshotConfiguration -- | The names and values of manual DB snapshot attributes. Manual DB -- snapshot attributes are used to authorize other Amazon Web Services -- accounts to restore a manual DB snapshot. The only valid value for -- attributeName for the attribute map is restore. [$sel:attributes:RdsDbSnapshotConfiguration'] :: RdsDbSnapshotConfiguration -> Maybe (HashMap Text RdsDbSnapshotAttributeValue) -- | The KMS key identifier for an encrypted Amazon RDS DB snapshot. The -- KMS key identifier is the key ARN, key ID, alias ARN, or alias name -- for the KMS key. -- -- [$sel:kmsKeyId:RdsDbSnapshotConfiguration'] :: RdsDbSnapshotConfiguration -> Maybe Text -- | Create a value of RdsDbSnapshotConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributes:RdsDbSnapshotConfiguration', -- rdsDbSnapshotConfiguration_attributes - The names and values of -- manual DB snapshot attributes. Manual DB snapshot attributes are used -- to authorize other Amazon Web Services accounts to restore a manual DB -- snapshot. The only valid value for attributeName for the -- attribute map is restore. -- -- $sel:kmsKeyId:RdsDbSnapshotConfiguration', -- rdsDbSnapshotConfiguration_kmsKeyId - The KMS key identifier -- for an encrypted Amazon RDS DB snapshot. The KMS key identifier is the -- key ARN, key ID, alias ARN, or alias name for the KMS key. -- -- newRdsDbSnapshotConfiguration :: RdsDbSnapshotConfiguration -- | The names and values of manual DB snapshot attributes. Manual DB -- snapshot attributes are used to authorize other Amazon Web Services -- accounts to restore a manual DB snapshot. The only valid value for -- attributeName for the attribute map is restore. rdsDbSnapshotConfiguration_attributes :: Lens' RdsDbSnapshotConfiguration (Maybe (HashMap Text RdsDbSnapshotAttributeValue)) -- | The KMS key identifier for an encrypted Amazon RDS DB snapshot. The -- KMS key identifier is the key ARN, key ID, alias ARN, or alias name -- for the KMS key. -- -- rdsDbSnapshotConfiguration_kmsKeyId :: Lens' RdsDbSnapshotConfiguration (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration.RdsDbSnapshotConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration.RdsDbSnapshotConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration.RdsDbSnapshotConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration.RdsDbSnapshotConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration.RdsDbSnapshotConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration.RdsDbSnapshotConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration.RdsDbSnapshotConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.RdsDbSnapshotConfiguration.RdsDbSnapshotConfiguration module Amazonka.AccessAnalyzer.Types.ReasonCode newtype ReasonCode ReasonCode' :: Text -> ReasonCode [fromReasonCode] :: ReasonCode -> Text pattern ReasonCode_AWS_SERVICE_ACCESS_DISABLED :: ReasonCode pattern ReasonCode_DELEGATED_ADMINISTRATOR_DEREGISTERED :: ReasonCode pattern ReasonCode_ORGANIZATION_DELETED :: ReasonCode pattern ReasonCode_SERVICE_LINKED_ROLE_CREATION_FAILED :: ReasonCode instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.ReasonCode.ReasonCode module Amazonka.AccessAnalyzer.Types.ResourceType newtype ResourceType ResourceType' :: Text -> ResourceType [fromResourceType] :: ResourceType -> Text pattern ResourceType_AWS__EC2__Snapshot :: ResourceType pattern ResourceType_AWS__ECR__Repository :: ResourceType pattern ResourceType_AWS__EFS__FileSystem :: ResourceType pattern ResourceType_AWS__IAM__Role :: ResourceType pattern ResourceType_AWS__KMS__Key :: ResourceType pattern ResourceType_AWS__Lambda__Function :: ResourceType pattern ResourceType_AWS__Lambda__LayerVersion :: ResourceType pattern ResourceType_AWS__RDS__DBClusterSnapshot :: ResourceType pattern ResourceType_AWS__RDS__DBSnapshot :: ResourceType pattern ResourceType_AWS__S3__Bucket :: ResourceType pattern ResourceType_AWS__SNS__Topic :: ResourceType pattern ResourceType_AWS__SQS__Queue :: ResourceType pattern ResourceType_AWS__SecretsManager__Secret :: ResourceType instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.ResourceType.ResourceType module Amazonka.AccessAnalyzer.Types.FindingSummary -- | Contains information about a finding. -- -- See: newFindingSummary smart constructor. data FindingSummary FindingSummary' :: Maybe [Text] -> Maybe Text -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> HashMap Text Text -> ISO8601 -> ISO8601 -> ISO8601 -> FindingStatus -> Text -> FindingSummary -- | The action in the analyzed policy statement that an external principal -- has permission to use. [$sel:action:FindingSummary'] :: FindingSummary -> Maybe [Text] -- | The error that resulted in an Error finding. [$sel:error:FindingSummary'] :: FindingSummary -> Maybe Text -- | Indicates whether the finding reports a resource that has a policy -- that allows public access. [$sel:isPublic:FindingSummary'] :: FindingSummary -> Maybe Bool -- | The external principal that has access to a resource within the zone -- of trust. [$sel:principal:FindingSummary'] :: FindingSummary -> Maybe (HashMap Text Text) -- | The resource that the external principal has access to. [$sel:resource:FindingSummary'] :: FindingSummary -> Maybe Text -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. [$sel:sources:FindingSummary'] :: FindingSummary -> Maybe [FindingSource] -- | The ID of the finding. [$sel:id:FindingSummary'] :: FindingSummary -> Text -- | The type of the resource that the external principal has access to. [$sel:resourceType:FindingSummary'] :: FindingSummary -> ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. [$sel:condition:FindingSummary'] :: FindingSummary -> HashMap Text Text -- | The time at which the finding was created. [$sel:createdAt:FindingSummary'] :: FindingSummary -> ISO8601 -- | The time at which the resource-based policy that generated the finding -- was analyzed. [$sel:analyzedAt:FindingSummary'] :: FindingSummary -> ISO8601 -- | The time at which the finding was most recently updated. [$sel:updatedAt:FindingSummary'] :: FindingSummary -> ISO8601 -- | The status of the finding. [$sel:status:FindingSummary'] :: FindingSummary -> FindingStatus -- | The Amazon Web Services account ID that owns the resource. [$sel:resourceOwnerAccount:FindingSummary'] :: FindingSummary -> Text -- | Create a value of FindingSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:FindingSummary', findingSummary_action - The -- action in the analyzed policy statement that an external principal has -- permission to use. -- -- $sel:error:FindingSummary', findingSummary_error - The -- error that resulted in an Error finding. -- -- $sel:isPublic:FindingSummary', findingSummary_isPublic - -- Indicates whether the finding reports a resource that has a policy -- that allows public access. -- -- $sel:principal:FindingSummary', findingSummary_principal -- - The external principal that has access to a resource within the zone -- of trust. -- -- $sel:resource:FindingSummary', findingSummary_resource - -- The resource that the external principal has access to. -- -- $sel:sources:FindingSummary', findingSummary_sources - -- The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. -- -- $sel:id:FindingSummary', findingSummary_id - The ID of -- the finding. -- -- $sel:resourceType:FindingSummary', -- findingSummary_resourceType - The type of the resource that the -- external principal has access to. -- -- $sel:condition:FindingSummary', findingSummary_condition -- - The condition in the analyzed policy statement that resulted in a -- finding. -- -- $sel:createdAt:FindingSummary', findingSummary_createdAt -- - The time at which the finding was created. -- -- $sel:analyzedAt:FindingSummary', -- findingSummary_analyzedAt - The time at which the -- resource-based policy that generated the finding was analyzed. -- -- $sel:updatedAt:FindingSummary', findingSummary_updatedAt -- - The time at which the finding was most recently updated. -- -- $sel:status:FindingSummary', findingSummary_status - The -- status of the finding. -- -- $sel:resourceOwnerAccount:FindingSummary', -- findingSummary_resourceOwnerAccount - The Amazon Web Services -- account ID that owns the resource. newFindingSummary :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> FindingStatus -> Text -> FindingSummary -- | The action in the analyzed policy statement that an external principal -- has permission to use. findingSummary_action :: Lens' FindingSummary (Maybe [Text]) -- | The error that resulted in an Error finding. findingSummary_error :: Lens' FindingSummary (Maybe Text) -- | Indicates whether the finding reports a resource that has a policy -- that allows public access. findingSummary_isPublic :: Lens' FindingSummary (Maybe Bool) -- | The external principal that has access to a resource within the zone -- of trust. findingSummary_principal :: Lens' FindingSummary (Maybe (HashMap Text Text)) -- | The resource that the external principal has access to. findingSummary_resource :: Lens' FindingSummary (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. findingSummary_sources :: Lens' FindingSummary (Maybe [FindingSource]) -- | The ID of the finding. findingSummary_id :: Lens' FindingSummary Text -- | The type of the resource that the external principal has access to. findingSummary_resourceType :: Lens' FindingSummary ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. findingSummary_condition :: Lens' FindingSummary (HashMap Text Text) -- | The time at which the finding was created. findingSummary_createdAt :: Lens' FindingSummary UTCTime -- | The time at which the resource-based policy that generated the finding -- was analyzed. findingSummary_analyzedAt :: Lens' FindingSummary UTCTime -- | The time at which the finding was most recently updated. findingSummary_updatedAt :: Lens' FindingSummary UTCTime -- | The status of the finding. findingSummary_status :: Lens' FindingSummary FindingStatus -- | The Amazon Web Services account ID that owns the resource. findingSummary_resourceOwnerAccount :: Lens' FindingSummary Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.FindingSummary.FindingSummary instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.FindingSummary.FindingSummary instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.FindingSummary.FindingSummary instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.FindingSummary.FindingSummary instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.FindingSummary.FindingSummary instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.FindingSummary.FindingSummary instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.FindingSummary.FindingSummary module Amazonka.AccessAnalyzer.Types.Finding -- | Contains information about a finding. -- -- See: newFinding smart constructor. data Finding Finding' :: Maybe [Text] -> Maybe Text -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> HashMap Text Text -> ISO8601 -> ISO8601 -> ISO8601 -> FindingStatus -> Text -> Finding -- | The action in the analyzed policy statement that an external principal -- has permission to use. [$sel:action:Finding'] :: Finding -> Maybe [Text] -- | An error. [$sel:error:Finding'] :: Finding -> Maybe Text -- | Indicates whether the policy that generated the finding allows public -- access to the resource. [$sel:isPublic:Finding'] :: Finding -> Maybe Bool -- | The external principal that access to a resource within the zone of -- trust. [$sel:principal:Finding'] :: Finding -> Maybe (HashMap Text Text) -- | The resource that an external principal has access to. [$sel:resource:Finding'] :: Finding -> Maybe Text -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. [$sel:sources:Finding'] :: Finding -> Maybe [FindingSource] -- | The ID of the finding. [$sel:id:Finding'] :: Finding -> Text -- | The type of the resource identified in the finding. [$sel:resourceType:Finding'] :: Finding -> ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. [$sel:condition:Finding'] :: Finding -> HashMap Text Text -- | The time at which the finding was generated. [$sel:createdAt:Finding'] :: Finding -> ISO8601 -- | The time at which the resource was analyzed. [$sel:analyzedAt:Finding'] :: Finding -> ISO8601 -- | The time at which the finding was updated. [$sel:updatedAt:Finding'] :: Finding -> ISO8601 -- | The current status of the finding. [$sel:status:Finding'] :: Finding -> FindingStatus -- | The Amazon Web Services account ID that owns the resource. [$sel:resourceOwnerAccount:Finding'] :: Finding -> Text -- | Create a value of Finding with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:Finding', finding_action - The action in the -- analyzed policy statement that an external principal has permission to -- use. -- -- $sel:error:Finding', finding_error - An error. -- -- $sel:isPublic:Finding', finding_isPublic - Indicates -- whether the policy that generated the finding allows public access to -- the resource. -- -- $sel:principal:Finding', finding_principal - The -- external principal that access to a resource within the zone of trust. -- -- $sel:resource:Finding', finding_resource - The resource -- that an external principal has access to. -- -- $sel:sources:Finding', finding_sources - The sources of -- the finding. This indicates how the access that generated the finding -- is granted. It is populated for Amazon S3 bucket findings. -- -- $sel:id:Finding', finding_id - The ID of the finding. -- -- $sel:resourceType:Finding', finding_resourceType - The -- type of the resource identified in the finding. -- -- $sel:condition:Finding', finding_condition - The -- condition in the analyzed policy statement that resulted in a finding. -- -- $sel:createdAt:Finding', finding_createdAt - The time at -- which the finding was generated. -- -- $sel:analyzedAt:Finding', finding_analyzedAt - The time -- at which the resource was analyzed. -- -- $sel:updatedAt:Finding', finding_updatedAt - The time at -- which the finding was updated. -- -- $sel:status:Finding', finding_status - The current -- status of the finding. -- -- $sel:resourceOwnerAccount:Finding', -- finding_resourceOwnerAccount - The Amazon Web Services account -- ID that owns the resource. newFinding :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> FindingStatus -> Text -> Finding -- | The action in the analyzed policy statement that an external principal -- has permission to use. finding_action :: Lens' Finding (Maybe [Text]) -- | An error. finding_error :: Lens' Finding (Maybe Text) -- | Indicates whether the policy that generated the finding allows public -- access to the resource. finding_isPublic :: Lens' Finding (Maybe Bool) -- | The external principal that access to a resource within the zone of -- trust. finding_principal :: Lens' Finding (Maybe (HashMap Text Text)) -- | The resource that an external principal has access to. finding_resource :: Lens' Finding (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. finding_sources :: Lens' Finding (Maybe [FindingSource]) -- | The ID of the finding. finding_id :: Lens' Finding Text -- | The type of the resource identified in the finding. finding_resourceType :: Lens' Finding ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. finding_condition :: Lens' Finding (HashMap Text Text) -- | The time at which the finding was generated. finding_createdAt :: Lens' Finding UTCTime -- | The time at which the resource was analyzed. finding_analyzedAt :: Lens' Finding UTCTime -- | The time at which the finding was updated. finding_updatedAt :: Lens' Finding UTCTime -- | The current status of the finding. finding_status :: Lens' Finding FindingStatus -- | The Amazon Web Services account ID that owns the resource. finding_resourceOwnerAccount :: Lens' Finding Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Finding.Finding instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Finding.Finding instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Finding.Finding instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Finding.Finding instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Finding.Finding instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Finding.Finding instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Finding.Finding module Amazonka.AccessAnalyzer.Types.AnalyzedResourceSummary -- | Contains the ARN of the analyzed resource. -- -- See: newAnalyzedResourceSummary smart constructor. data AnalyzedResourceSummary AnalyzedResourceSummary' :: Text -> Text -> ResourceType -> AnalyzedResourceSummary -- | The ARN of the analyzed resource. [$sel:resourceArn:AnalyzedResourceSummary'] :: AnalyzedResourceSummary -> Text -- | The Amazon Web Services account ID that owns the resource. [$sel:resourceOwnerAccount:AnalyzedResourceSummary'] :: AnalyzedResourceSummary -> Text -- | The type of resource that was analyzed. [$sel:resourceType:AnalyzedResourceSummary'] :: AnalyzedResourceSummary -> ResourceType -- | Create a value of AnalyzedResourceSummary with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:resourceArn:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceArn - The ARN of the analyzed -- resource. -- -- $sel:resourceOwnerAccount:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceOwnerAccount - The Amazon Web -- Services account ID that owns the resource. -- -- $sel:resourceType:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceType - The type of resource -- that was analyzed. newAnalyzedResourceSummary :: Text -> Text -> ResourceType -> AnalyzedResourceSummary -- | The ARN of the analyzed resource. analyzedResourceSummary_resourceArn :: Lens' AnalyzedResourceSummary Text -- | The Amazon Web Services account ID that owns the resource. analyzedResourceSummary_resourceOwnerAccount :: Lens' AnalyzedResourceSummary Text -- | The type of resource that was analyzed. analyzedResourceSummary_resourceType :: Lens' AnalyzedResourceSummary ResourceType instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AnalyzedResourceSummary.AnalyzedResourceSummary instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AnalyzedResourceSummary.AnalyzedResourceSummary instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AnalyzedResourceSummary.AnalyzedResourceSummary instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AnalyzedResourceSummary.AnalyzedResourceSummary instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AnalyzedResourceSummary.AnalyzedResourceSummary instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AnalyzedResourceSummary.AnalyzedResourceSummary instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AnalyzedResourceSummary.AnalyzedResourceSummary module Amazonka.AccessAnalyzer.Types.AnalyzedResource -- | Contains details about the analyzed resource. -- -- See: newAnalyzedResource smart constructor. data AnalyzedResource AnalyzedResource' :: Maybe [Text] -> Maybe Text -> Maybe [Text] -> Maybe FindingStatus -> Text -> ResourceType -> ISO8601 -> ISO8601 -> ISO8601 -> Bool -> Text -> AnalyzedResource -- | The actions that an external principal is granted permission to use by -- the policy that generated the finding. [$sel:actions:AnalyzedResource'] :: AnalyzedResource -> Maybe [Text] -- | An error message. [$sel:error:AnalyzedResource'] :: AnalyzedResource -> Maybe Text -- | Indicates how the access that generated the finding is granted. This -- is populated for Amazon S3 bucket findings. [$sel:sharedVia:AnalyzedResource'] :: AnalyzedResource -> Maybe [Text] -- | The current status of the finding generated from the analyzed -- resource. [$sel:status:AnalyzedResource'] :: AnalyzedResource -> Maybe FindingStatus -- | The ARN of the resource that was analyzed. [$sel:resourceArn:AnalyzedResource'] :: AnalyzedResource -> Text -- | The type of the resource that was analyzed. [$sel:resourceType:AnalyzedResource'] :: AnalyzedResource -> ResourceType -- | The time at which the finding was created. [$sel:createdAt:AnalyzedResource'] :: AnalyzedResource -> ISO8601 -- | The time at which the resource was analyzed. [$sel:analyzedAt:AnalyzedResource'] :: AnalyzedResource -> ISO8601 -- | The time at which the finding was updated. [$sel:updatedAt:AnalyzedResource'] :: AnalyzedResource -> ISO8601 -- | Indicates whether the policy that generated the finding grants public -- access to the resource. [$sel:isPublic:AnalyzedResource'] :: AnalyzedResource -> Bool -- | The Amazon Web Services account ID that owns the resource. [$sel:resourceOwnerAccount:AnalyzedResource'] :: AnalyzedResource -> Text -- | Create a value of AnalyzedResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:actions:AnalyzedResource', analyzedResource_actions -- - The actions that an external principal is granted permission to use -- by the policy that generated the finding. -- -- $sel:error:AnalyzedResource', analyzedResource_error - -- An error message. -- -- $sel:sharedVia:AnalyzedResource', -- analyzedResource_sharedVia - Indicates how the access that -- generated the finding is granted. This is populated for Amazon S3 -- bucket findings. -- -- $sel:status:AnalyzedResource', analyzedResource_status - -- The current status of the finding generated from the analyzed -- resource. -- -- $sel:resourceArn:AnalyzedResource', -- analyzedResource_resourceArn - The ARN of the resource that was -- analyzed. -- -- $sel:resourceType:AnalyzedResource', -- analyzedResource_resourceType - The type of the resource that -- was analyzed. -- -- $sel:createdAt:AnalyzedResource', -- analyzedResource_createdAt - The time at which the finding was -- created. -- -- $sel:analyzedAt:AnalyzedResource', -- analyzedResource_analyzedAt - The time at which the resource -- was analyzed. -- -- $sel:updatedAt:AnalyzedResource', -- analyzedResource_updatedAt - The time at which the finding was -- updated. -- -- $sel:isPublic:AnalyzedResource', -- analyzedResource_isPublic - Indicates whether the policy that -- generated the finding grants public access to the resource. -- -- $sel:resourceOwnerAccount:AnalyzedResource', -- analyzedResource_resourceOwnerAccount - The Amazon Web Services -- account ID that owns the resource. newAnalyzedResource :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> Bool -> Text -> AnalyzedResource -- | The actions that an external principal is granted permission to use by -- the policy that generated the finding. analyzedResource_actions :: Lens' AnalyzedResource (Maybe [Text]) -- | An error message. analyzedResource_error :: Lens' AnalyzedResource (Maybe Text) -- | Indicates how the access that generated the finding is granted. This -- is populated for Amazon S3 bucket findings. analyzedResource_sharedVia :: Lens' AnalyzedResource (Maybe [Text]) -- | The current status of the finding generated from the analyzed -- resource. analyzedResource_status :: Lens' AnalyzedResource (Maybe FindingStatus) -- | The ARN of the resource that was analyzed. analyzedResource_resourceArn :: Lens' AnalyzedResource Text -- | The type of the resource that was analyzed. analyzedResource_resourceType :: Lens' AnalyzedResource ResourceType -- | The time at which the finding was created. analyzedResource_createdAt :: Lens' AnalyzedResource UTCTime -- | The time at which the resource was analyzed. analyzedResource_analyzedAt :: Lens' AnalyzedResource UTCTime -- | The time at which the finding was updated. analyzedResource_updatedAt :: Lens' AnalyzedResource UTCTime -- | Indicates whether the policy that generated the finding grants public -- access to the resource. analyzedResource_isPublic :: Lens' AnalyzedResource Bool -- | The Amazon Web Services account ID that owns the resource. analyzedResource_resourceOwnerAccount :: Lens' AnalyzedResource Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AnalyzedResource.AnalyzedResource instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AnalyzedResource.AnalyzedResource instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AnalyzedResource.AnalyzedResource instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AnalyzedResource.AnalyzedResource instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AnalyzedResource.AnalyzedResource instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AnalyzedResource.AnalyzedResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AnalyzedResource.AnalyzedResource module Amazonka.AccessAnalyzer.Types.AccessPreviewFinding -- | An access preview finding generated by the access preview. -- -- See: newAccessPreviewFinding smart constructor. data AccessPreviewFinding AccessPreviewFinding' :: Maybe [Text] -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe Text -> Maybe FindingStatus -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> ISO8601 -> FindingChangeType -> FindingStatus -> Text -> AccessPreviewFinding -- | The action in the analyzed policy statement that an external principal -- has permission to perform. [$sel:action:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe [Text] -- | The condition in the analyzed policy statement that resulted in a -- finding. [$sel:condition:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe (HashMap Text Text) -- | An error. [$sel:error:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe Text -- | The existing ID of the finding in IAM Access Analyzer, provided only -- for existing findings. [$sel:existingFindingId:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe Text -- | The existing status of the finding, provided only for existing -- findings. [$sel:existingFindingStatus:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe FindingStatus -- | Indicates whether the policy that generated the finding allows public -- access to the resource. [$sel:isPublic:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe Bool -- | The external principal that has access to a resource within the zone -- of trust. [$sel:principal:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe (HashMap Text Text) -- | The resource that an external principal has access to. This is the -- resource associated with the access preview. [$sel:resource:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe Text -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. [$sel:sources:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe [FindingSource] -- | The ID of the access preview finding. This ID uniquely identifies the -- element in the list of access preview findings and is not related to -- the finding ID in Access Analyzer. [$sel:id:AccessPreviewFinding'] :: AccessPreviewFinding -> Text -- | The type of the resource that can be accessed in the finding. [$sel:resourceType:AccessPreviewFinding'] :: AccessPreviewFinding -> ResourceType -- | The time at which the access preview finding was created. [$sel:createdAt:AccessPreviewFinding'] :: AccessPreviewFinding -> ISO8601 -- | Provides context on how the access preview finding compares to -- existing access identified in IAM Access Analyzer. -- -- -- -- For example, a Changed finding with preview status -- Resolved and existing status Active indicates the -- existing Active finding would become Resolved as a -- result of the proposed permissions change. [$sel:changeType:AccessPreviewFinding'] :: AccessPreviewFinding -> FindingChangeType -- | The preview status of the finding. This is what the status of the -- finding would be after permissions deployment. For example, a -- Changed finding with preview status Resolved and -- existing status Active indicates the existing Active -- finding would become Resolved as a result of the proposed -- permissions change. [$sel:status:AccessPreviewFinding'] :: AccessPreviewFinding -> FindingStatus -- | The Amazon Web Services account ID that owns the resource. For most -- Amazon Web Services resources, the owning account is the account in -- which the resource was created. [$sel:resourceOwnerAccount:AccessPreviewFinding'] :: AccessPreviewFinding -> Text -- | Create a value of AccessPreviewFinding with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:AccessPreviewFinding', -- accessPreviewFinding_action - The action in the analyzed policy -- statement that an external principal has permission to perform. -- -- $sel:condition:AccessPreviewFinding', -- accessPreviewFinding_condition - The condition in the analyzed -- policy statement that resulted in a finding. -- -- $sel:error:AccessPreviewFinding', -- accessPreviewFinding_error - An error. -- -- $sel:existingFindingId:AccessPreviewFinding', -- accessPreviewFinding_existingFindingId - The existing ID of the -- finding in IAM Access Analyzer, provided only for existing findings. -- -- $sel:existingFindingStatus:AccessPreviewFinding', -- accessPreviewFinding_existingFindingStatus - The existing -- status of the finding, provided only for existing findings. -- -- $sel:isPublic:AccessPreviewFinding', -- accessPreviewFinding_isPublic - Indicates whether the policy -- that generated the finding allows public access to the resource. -- -- $sel:principal:AccessPreviewFinding', -- accessPreviewFinding_principal - The external principal that -- has access to a resource within the zone of trust. -- -- $sel:resource:AccessPreviewFinding', -- accessPreviewFinding_resource - The resource that an external -- principal has access to. This is the resource associated with the -- access preview. -- -- $sel:sources:AccessPreviewFinding', -- accessPreviewFinding_sources - The sources of the finding. This -- indicates how the access that generated the finding is granted. It is -- populated for Amazon S3 bucket findings. -- -- $sel:id:AccessPreviewFinding', accessPreviewFinding_id - -- The ID of the access preview finding. This ID uniquely identifies the -- element in the list of access preview findings and is not related to -- the finding ID in Access Analyzer. -- -- $sel:resourceType:AccessPreviewFinding', -- accessPreviewFinding_resourceType - The type of the resource -- that can be accessed in the finding. -- -- $sel:createdAt:AccessPreviewFinding', -- accessPreviewFinding_createdAt - The time at which the access -- preview finding was created. -- -- $sel:changeType:AccessPreviewFinding', -- accessPreviewFinding_changeType - Provides context on how the -- access preview finding compares to existing access identified in IAM -- Access Analyzer. -- -- -- -- For example, a Changed finding with preview status -- Resolved and existing status Active indicates the -- existing Active finding would become Resolved as a -- result of the proposed permissions change. -- -- $sel:status:AccessPreviewFinding', -- accessPreviewFinding_status - The preview status of the -- finding. This is what the status of the finding would be after -- permissions deployment. For example, a Changed finding with -- preview status Resolved and existing status Active -- indicates the existing Active finding would become -- Resolved as a result of the proposed permissions change. -- -- $sel:resourceOwnerAccount:AccessPreviewFinding', -- accessPreviewFinding_resourceOwnerAccount - The Amazon Web -- Services account ID that owns the resource. For most Amazon Web -- Services resources, the owning account is the account in which the -- resource was created. newAccessPreviewFinding :: Text -> ResourceType -> UTCTime -> FindingChangeType -> FindingStatus -> Text -> AccessPreviewFinding -- | The action in the analyzed policy statement that an external principal -- has permission to perform. accessPreviewFinding_action :: Lens' AccessPreviewFinding (Maybe [Text]) -- | The condition in the analyzed policy statement that resulted in a -- finding. accessPreviewFinding_condition :: Lens' AccessPreviewFinding (Maybe (HashMap Text Text)) -- | An error. accessPreviewFinding_error :: Lens' AccessPreviewFinding (Maybe Text) -- | The existing ID of the finding in IAM Access Analyzer, provided only -- for existing findings. accessPreviewFinding_existingFindingId :: Lens' AccessPreviewFinding (Maybe Text) -- | The existing status of the finding, provided only for existing -- findings. accessPreviewFinding_existingFindingStatus :: Lens' AccessPreviewFinding (Maybe FindingStatus) -- | Indicates whether the policy that generated the finding allows public -- access to the resource. accessPreviewFinding_isPublic :: Lens' AccessPreviewFinding (Maybe Bool) -- | The external principal that has access to a resource within the zone -- of trust. accessPreviewFinding_principal :: Lens' AccessPreviewFinding (Maybe (HashMap Text Text)) -- | The resource that an external principal has access to. This is the -- resource associated with the access preview. accessPreviewFinding_resource :: Lens' AccessPreviewFinding (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. accessPreviewFinding_sources :: Lens' AccessPreviewFinding (Maybe [FindingSource]) -- | The ID of the access preview finding. This ID uniquely identifies the -- element in the list of access preview findings and is not related to -- the finding ID in Access Analyzer. accessPreviewFinding_id :: Lens' AccessPreviewFinding Text -- | The type of the resource that can be accessed in the finding. accessPreviewFinding_resourceType :: Lens' AccessPreviewFinding ResourceType -- | The time at which the access preview finding was created. accessPreviewFinding_createdAt :: Lens' AccessPreviewFinding UTCTime -- | Provides context on how the access preview finding compares to -- existing access identified in IAM Access Analyzer. -- -- -- -- For example, a Changed finding with preview status -- Resolved and existing status Active indicates the -- existing Active finding would become Resolved as a -- result of the proposed permissions change. accessPreviewFinding_changeType :: Lens' AccessPreviewFinding FindingChangeType -- | The preview status of the finding. This is what the status of the -- finding would be after permissions deployment. For example, a -- Changed finding with preview status Resolved and -- existing status Active indicates the existing Active -- finding would become Resolved as a result of the proposed -- permissions change. accessPreviewFinding_status :: Lens' AccessPreviewFinding FindingStatus -- | The Amazon Web Services account ID that owns the resource. For most -- Amazon Web Services resources, the owning account is the account in -- which the resource was created. accessPreviewFinding_resourceOwnerAccount :: Lens' AccessPreviewFinding Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AccessPreviewFinding.AccessPreviewFinding instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AccessPreviewFinding.AccessPreviewFinding instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AccessPreviewFinding.AccessPreviewFinding instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AccessPreviewFinding.AccessPreviewFinding instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AccessPreviewFinding.AccessPreviewFinding instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AccessPreviewFinding.AccessPreviewFinding instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AccessPreviewFinding.AccessPreviewFinding module Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration -- | A proposed access control list grant configuration for an Amazon S3 -- bucket. For more information, see How to Specify an ACL. -- -- See: newS3BucketAclGrantConfiguration smart constructor. data S3BucketAclGrantConfiguration S3BucketAclGrantConfiguration' :: AclPermission -> AclGrantee -> S3BucketAclGrantConfiguration -- | The permissions being granted. [$sel:permission:S3BucketAclGrantConfiguration'] :: S3BucketAclGrantConfiguration -> AclPermission -- | The grantee to whom you’re assigning access rights. [$sel:grantee:S3BucketAclGrantConfiguration'] :: S3BucketAclGrantConfiguration -> AclGrantee -- | Create a value of S3BucketAclGrantConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:permission:S3BucketAclGrantConfiguration', -- s3BucketAclGrantConfiguration_permission - The permissions -- being granted. -- -- $sel:grantee:S3BucketAclGrantConfiguration', -- s3BucketAclGrantConfiguration_grantee - The grantee to whom -- you’re assigning access rights. newS3BucketAclGrantConfiguration :: AclPermission -> AclGrantee -> S3BucketAclGrantConfiguration -- | The permissions being granted. s3BucketAclGrantConfiguration_permission :: Lens' S3BucketAclGrantConfiguration AclPermission -- | The grantee to whom you’re assigning access rights. s3BucketAclGrantConfiguration_grantee :: Lens' S3BucketAclGrantConfiguration AclGrantee instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration.S3BucketAclGrantConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration.S3BucketAclGrantConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration.S3BucketAclGrantConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration.S3BucketAclGrantConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration.S3BucketAclGrantConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration.S3BucketAclGrantConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration.S3BucketAclGrantConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.S3BucketAclGrantConfiguration.S3BucketAclGrantConfiguration module Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration -- | The PublicAccessBlock configuration to apply to this Amazon -- S3 bucket. If the proposed configuration is for an existing Amazon S3 -- bucket and the configuration is not specified, the access preview uses -- the existing setting. If the proposed configuration is for a new -- bucket and the configuration is not specified, the access preview uses -- false. If the proposed configuration is for a new access -- point or multi-region access point and the access point BPA -- configuration is not specified, the access preview uses true. -- For more information, see PublicAccessBlockConfiguration. -- -- See: newS3PublicAccessBlockConfiguration smart -- constructor. data S3PublicAccessBlockConfiguration S3PublicAccessBlockConfiguration' :: Bool -> Bool -> S3PublicAccessBlockConfiguration -- | Specifies whether Amazon S3 should ignore public ACLs for this bucket -- and objects in this bucket. [$sel:ignorePublicAcls:S3PublicAccessBlockConfiguration'] :: S3PublicAccessBlockConfiguration -> Bool -- | Specifies whether Amazon S3 should restrict public bucket policies for -- this bucket. [$sel:restrictPublicBuckets:S3PublicAccessBlockConfiguration'] :: S3PublicAccessBlockConfiguration -> Bool -- | Create a value of S3PublicAccessBlockConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ignorePublicAcls:S3PublicAccessBlockConfiguration', -- s3PublicAccessBlockConfiguration_ignorePublicAcls - Specifies -- whether Amazon S3 should ignore public ACLs for this bucket and -- objects in this bucket. -- -- $sel:restrictPublicBuckets:S3PublicAccessBlockConfiguration', -- s3PublicAccessBlockConfiguration_restrictPublicBuckets - -- Specifies whether Amazon S3 should restrict public bucket policies for -- this bucket. newS3PublicAccessBlockConfiguration :: Bool -> Bool -> S3PublicAccessBlockConfiguration -- | Specifies whether Amazon S3 should ignore public ACLs for this bucket -- and objects in this bucket. s3PublicAccessBlockConfiguration_ignorePublicAcls :: Lens' S3PublicAccessBlockConfiguration Bool -- | Specifies whether Amazon S3 should restrict public bucket policies for -- this bucket. s3PublicAccessBlockConfiguration_restrictPublicBuckets :: Lens' S3PublicAccessBlockConfiguration Bool instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration.S3PublicAccessBlockConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration.S3PublicAccessBlockConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration.S3PublicAccessBlockConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration.S3PublicAccessBlockConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration.S3PublicAccessBlockConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration.S3PublicAccessBlockConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration.S3PublicAccessBlockConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.S3PublicAccessBlockConfiguration.S3PublicAccessBlockConfiguration module Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration -- | The configuration for a Secrets Manager secret. For more information, -- see CreateSecret. -- -- You can propose a configuration for a new secret or an existing secret -- that you own by specifying the secret policy and optional KMS -- encryption key. If the configuration is for an existing secret and you -- do not specify the secret policy, the access preview uses the existing -- policy for the secret. If the access preview is for a new resource and -- you do not specify the policy, the access preview assumes a secret -- without a policy. To propose deletion of an existing policy, you can -- specify an empty string. If the proposed configuration is for a new -- secret and you do not specify the KMS key ID, the access preview uses -- the Amazon Web Services managed key aws/secretsmanager. If -- you specify an empty string for the KMS key ID, the access preview -- uses the Amazon Web Services managed key of the Amazon Web Services -- account. For more information about secret policy limits, see -- Quotas for Secrets Manager.. -- -- See: newSecretsManagerSecretConfiguration smart -- constructor. data SecretsManagerSecretConfiguration SecretsManagerSecretConfiguration' :: Maybe Text -> Maybe Text -> SecretsManagerSecretConfiguration -- | The proposed ARN, key ID, or alias of the KMS key. [$sel:kmsKeyId:SecretsManagerSecretConfiguration'] :: SecretsManagerSecretConfiguration -> Maybe Text -- | The proposed resource policy defining who can access or manage the -- secret. [$sel:secretPolicy:SecretsManagerSecretConfiguration'] :: SecretsManagerSecretConfiguration -> Maybe Text -- | Create a value of SecretsManagerSecretConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:kmsKeyId:SecretsManagerSecretConfiguration', -- secretsManagerSecretConfiguration_kmsKeyId - The proposed ARN, -- key ID, or alias of the KMS key. -- -- $sel:secretPolicy:SecretsManagerSecretConfiguration', -- secretsManagerSecretConfiguration_secretPolicy - The proposed -- resource policy defining who can access or manage the secret. newSecretsManagerSecretConfiguration :: SecretsManagerSecretConfiguration -- | The proposed ARN, key ID, or alias of the KMS key. secretsManagerSecretConfiguration_kmsKeyId :: Lens' SecretsManagerSecretConfiguration (Maybe Text) -- | The proposed resource policy defining who can access or manage the -- secret. secretsManagerSecretConfiguration_secretPolicy :: Lens' SecretsManagerSecretConfiguration (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration.SecretsManagerSecretConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration.SecretsManagerSecretConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration.SecretsManagerSecretConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration.SecretsManagerSecretConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration.SecretsManagerSecretConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration.SecretsManagerSecretConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration.SecretsManagerSecretConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.SecretsManagerSecretConfiguration.SecretsManagerSecretConfiguration module Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration -- | The proposed access control configuration for an Amazon SNS topic. You -- can propose a configuration for a new Amazon SNS topic or an existing -- Amazon SNS topic that you own by specifying the policy. If the -- configuration is for an existing Amazon SNS topic and you do not -- specify the Amazon SNS policy, then the access preview uses the -- existing Amazon SNS policy for the topic. If the access preview is for -- a new resource and you do not specify the policy, then the access -- preview assumes an Amazon SNS topic without a policy. To propose -- deletion of an existing Amazon SNS topic policy, you can specify an -- empty string for the Amazon SNS policy. For more information, see -- Topic. -- -- See: newSnsTopicConfiguration smart constructor. data SnsTopicConfiguration SnsTopicConfiguration' :: Maybe Text -> SnsTopicConfiguration -- | The JSON policy text that defines who can access an Amazon SNS topic. -- For more information, see Example cases for Amazon SNS access -- control in the Amazon SNS Developer Guide. [$sel:topicPolicy:SnsTopicConfiguration'] :: SnsTopicConfiguration -> Maybe Text -- | Create a value of SnsTopicConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:topicPolicy:SnsTopicConfiguration', -- snsTopicConfiguration_topicPolicy - The JSON policy text that -- defines who can access an Amazon SNS topic. For more information, see -- Example cases for Amazon SNS access control in the Amazon -- SNS Developer Guide. newSnsTopicConfiguration :: SnsTopicConfiguration -- | The JSON policy text that defines who can access an Amazon SNS topic. -- For more information, see Example cases for Amazon SNS access -- control in the Amazon SNS Developer Guide. snsTopicConfiguration_topicPolicy :: Lens' SnsTopicConfiguration (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration.SnsTopicConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration.SnsTopicConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration.SnsTopicConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration.SnsTopicConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration.SnsTopicConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration.SnsTopicConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration.SnsTopicConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.SnsTopicConfiguration.SnsTopicConfiguration module Amazonka.AccessAnalyzer.Types.SortCriteria -- | The criteria used to sort. -- -- See: newSortCriteria smart constructor. data SortCriteria SortCriteria' :: Maybe Text -> Maybe OrderBy -> SortCriteria -- | The name of the attribute to sort on. [$sel:attributeName:SortCriteria'] :: SortCriteria -> Maybe Text -- | The sort order, ascending or descending. [$sel:orderBy:SortCriteria'] :: SortCriteria -> Maybe OrderBy -- | Create a value of SortCriteria with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributeName:SortCriteria', -- sortCriteria_attributeName - The name of the attribute to sort -- on. -- -- $sel:orderBy:SortCriteria', sortCriteria_orderBy - The -- sort order, ascending or descending. newSortCriteria :: SortCriteria -- | The name of the attribute to sort on. sortCriteria_attributeName :: Lens' SortCriteria (Maybe Text) -- | The sort order, ascending or descending. sortCriteria_orderBy :: Lens' SortCriteria (Maybe OrderBy) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.SortCriteria.SortCriteria instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.SortCriteria.SortCriteria instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.SortCriteria.SortCriteria instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.SortCriteria.SortCriteria instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.SortCriteria.SortCriteria instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.SortCriteria.SortCriteria instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.SortCriteria.SortCriteria module Amazonka.AccessAnalyzer.Types.Span -- | A span in a policy. The span consists of a start position (inclusive) -- and end position (exclusive). -- -- See: newSpan smart constructor. data Span Span' :: Position -> Position -> Span -- | The start position of the span (inclusive). [$sel:start:Span'] :: Span -> Position -- | The end position of the span (exclusive). [$sel:end:Span'] :: Span -> Position -- | Create a value of Span with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:start:Span', span_start - The start position of the -- span (inclusive). -- -- $sel:end:Span', span_end - The end position of the span -- (exclusive). newSpan :: Position -> Position -> Span -- | The start position of the span (inclusive). span_start :: Lens' Span Position -- | The end position of the span (exclusive). span_end :: Lens' Span Position instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Span.Span instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Span.Span instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Span.Span instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Span.Span instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Span.Span instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Span.Span instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Span.Span module Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration -- | The proposed access control configuration for an Amazon SQS queue. You -- can propose a configuration for a new Amazon SQS queue or an existing -- Amazon SQS queue that you own by specifying the Amazon SQS policy. If -- the configuration is for an existing Amazon SQS queue and you do not -- specify the Amazon SQS policy, the access preview uses the existing -- Amazon SQS policy for the queue. If the access preview is for a new -- resource and you do not specify the policy, the access preview assumes -- an Amazon SQS queue without a policy. To propose deletion of an -- existing Amazon SQS queue policy, you can specify an empty string for -- the Amazon SQS policy. For more information about Amazon SQS policy -- limits, see Quotas related to policies. -- -- See: newSqsQueueConfiguration smart constructor. data SqsQueueConfiguration SqsQueueConfiguration' :: Maybe Text -> SqsQueueConfiguration -- | The proposed resource policy for the Amazon SQS queue. [$sel:queuePolicy:SqsQueueConfiguration'] :: SqsQueueConfiguration -> Maybe Text -- | Create a value of SqsQueueConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:queuePolicy:SqsQueueConfiguration', -- sqsQueueConfiguration_queuePolicy - The proposed resource -- policy for the Amazon SQS queue. newSqsQueueConfiguration :: SqsQueueConfiguration -- | The proposed resource policy for the Amazon SQS queue. sqsQueueConfiguration_queuePolicy :: Lens' SqsQueueConfiguration (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration.SqsQueueConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration.SqsQueueConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration.SqsQueueConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration.SqsQueueConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration.SqsQueueConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration.SqsQueueConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration.SqsQueueConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.SqsQueueConfiguration.SqsQueueConfiguration module Amazonka.AccessAnalyzer.Types.StatusReason -- | Provides more details about the current status of the analyzer. For -- example, if the creation for the analyzer fails, a Failed -- status is returned. For an analyzer with organization as the type, -- this failure can be due to an issue with creating the service-linked -- roles required in the member accounts of the Amazon Web Services -- organization. -- -- See: newStatusReason smart constructor. data StatusReason StatusReason' :: ReasonCode -> StatusReason -- | The reason code for the current status of the analyzer. [$sel:code:StatusReason'] :: StatusReason -> ReasonCode -- | Create a value of StatusReason with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:StatusReason', statusReason_code - The reason -- code for the current status of the analyzer. newStatusReason :: ReasonCode -> StatusReason -- | The reason code for the current status of the analyzer. statusReason_code :: Lens' StatusReason ReasonCode instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.StatusReason.StatusReason instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.StatusReason.StatusReason instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.StatusReason.StatusReason instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.StatusReason.StatusReason instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.StatusReason.StatusReason instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.StatusReason.StatusReason instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.StatusReason.StatusReason module Amazonka.AccessAnalyzer.Types.Substring -- | A reference to a substring of a literal string in a JSON document. -- -- See: newSubstring smart constructor. data Substring Substring' :: Int -> Int -> Substring -- | The start index of the substring, starting from 0. [$sel:start:Substring'] :: Substring -> Int -- | The length of the substring. [$sel:length:Substring'] :: Substring -> Int -- | Create a value of Substring with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:start:Substring', substring_start - The start index -- of the substring, starting from 0. -- -- $sel:length:Substring', substring_length - The length of -- the substring. newSubstring :: Int -> Int -> Substring -- | The start index of the substring, starting from 0. substring_start :: Lens' Substring Int -- | The length of the substring. substring_length :: Lens' Substring Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Substring.Substring instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Substring.Substring instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Substring.Substring instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Substring.Substring instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Substring.Substring instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Substring.Substring instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Substring.Substring module Amazonka.AccessAnalyzer.Types.PathElement -- | A single element in a path through the JSON representation of a -- policy. -- -- See: newPathElement smart constructor. data PathElement PathElement' :: Maybe Int -> Maybe Text -> Maybe Substring -> Maybe Text -> PathElement -- | Refers to an index in a JSON array. [$sel:index:PathElement'] :: PathElement -> Maybe Int -- | Refers to a key in a JSON object. [$sel:key:PathElement'] :: PathElement -> Maybe Text -- | Refers to a substring of a literal string in a JSON object. [$sel:substring:PathElement'] :: PathElement -> Maybe Substring -- | Refers to the value associated with a given key in a JSON object. [$sel:value:PathElement'] :: PathElement -> Maybe Text -- | Create a value of PathElement with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:index:PathElement', pathElement_index - Refers to -- an index in a JSON array. -- -- $sel:key:PathElement', pathElement_key - Refers to a key -- in a JSON object. -- -- $sel:substring:PathElement', pathElement_substring - -- Refers to a substring of a literal string in a JSON object. -- -- $sel:value:PathElement', pathElement_value - Refers to -- the value associated with a given key in a JSON object. newPathElement :: PathElement -- | Refers to an index in a JSON array. pathElement_index :: Lens' PathElement (Maybe Int) -- | Refers to a key in a JSON object. pathElement_key :: Lens' PathElement (Maybe Text) -- | Refers to a substring of a literal string in a JSON object. pathElement_substring :: Lens' PathElement (Maybe Substring) -- | Refers to the value associated with a given key in a JSON object. pathElement_value :: Lens' PathElement (Maybe Text) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.PathElement.PathElement instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.PathElement.PathElement instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.PathElement.PathElement instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.PathElement.PathElement instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.PathElement.PathElement instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.PathElement.PathElement instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.PathElement.PathElement module Amazonka.AccessAnalyzer.Types.Location -- | A location in a policy that is represented as a path through the JSON -- representation and a corresponding span. -- -- See: newLocation smart constructor. data Location Location' :: [PathElement] -> Span -> Location -- | A path in a policy, represented as a sequence of path elements. [$sel:path:Location'] :: Location -> [PathElement] -- | A span in a policy. [$sel:span:Location'] :: Location -> Span -- | Create a value of Location with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:path:Location', location_path - A path in a policy, -- represented as a sequence of path elements. -- -- $sel:span:Location', location_span - A span in a policy. newLocation :: Span -> Location -- | A path in a policy, represented as a sequence of path elements. location_path :: Lens' Location [PathElement] -- | A span in a policy. location_span :: Lens' Location Span instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Location.Location instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Location.Location instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Location.Location instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Location.Location instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Location.Location instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Location.Location instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Location.Location module Amazonka.AccessAnalyzer.Types.Trail -- | Contains details about the CloudTrail trail being analyzed to generate -- a policy. -- -- See: newTrail smart constructor. data Trail Trail' :: Maybe Bool -> Maybe [Text] -> Text -> Trail -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. [$sel:allRegions:Trail'] :: Trail -> Maybe Bool -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. [$sel:regions:Trail'] :: Trail -> Maybe [Text] -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. [$sel:cloudTrailArn:Trail'] :: Trail -> Text -- | Create a value of Trail with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:allRegions:Trail', trail_allRegions - Possible -- values are true or false. If set to true, -- IAM Access Analyzer retrieves CloudTrail data from all regions to -- analyze and generate a policy. -- -- $sel:regions:Trail', trail_regions - A list of regions -- to get CloudTrail data from and analyze to generate a policy. -- -- $sel:cloudTrailArn:Trail', trail_cloudTrailArn - -- Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. newTrail :: Text -> Trail -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. trail_allRegions :: Lens' Trail (Maybe Bool) -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. trail_regions :: Lens' Trail (Maybe [Text]) -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. trail_cloudTrailArn :: Lens' Trail Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Trail.Trail instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Trail.Trail instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Trail.Trail instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Trail.Trail instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Trail.Trail instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Trail.Trail instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.Trail.Trail module Amazonka.AccessAnalyzer.Types.CloudTrailDetails -- | Contains information about CloudTrail access. -- -- See: newCloudTrailDetails smart constructor. data CloudTrailDetails CloudTrailDetails' :: Maybe ISO8601 -> [Trail] -> Text -> ISO8601 -> CloudTrailDetails -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. [$sel:endTime:CloudTrailDetails'] :: CloudTrailDetails -> Maybe ISO8601 -- | A Trail object that contains settings for a trail. [$sel:trails:CloudTrailDetails'] :: CloudTrailDetails -> [Trail] -- | The ARN of the service role that IAM Access Analyzer uses to access -- your CloudTrail trail and service last accessed information. [$sel:accessRole:CloudTrailDetails'] :: CloudTrailDetails -> Text -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. [$sel:startTime:CloudTrailDetails'] :: CloudTrailDetails -> ISO8601 -- | Create a value of CloudTrailDetails with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:endTime:CloudTrailDetails', -- cloudTrailDetails_endTime - The end of the time range for which -- IAM Access Analyzer reviews your CloudTrail events. Events with a -- timestamp after this time are not considered to generate a policy. If -- this is not included in the request, the default value is the current -- time. -- -- $sel:trails:CloudTrailDetails', cloudTrailDetails_trails -- - A Trail object that contains settings for a trail. -- -- $sel:accessRole:CloudTrailDetails', -- cloudTrailDetails_accessRole - The ARN of the service role that -- IAM Access Analyzer uses to access your CloudTrail trail and service -- last accessed information. -- -- $sel:startTime:CloudTrailDetails', -- cloudTrailDetails_startTime - The start of the time range for -- which IAM Access Analyzer reviews your CloudTrail events. Events with -- a timestamp before this time are not considered to generate a policy. newCloudTrailDetails :: Text -> UTCTime -> CloudTrailDetails -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. cloudTrailDetails_endTime :: Lens' CloudTrailDetails (Maybe UTCTime) -- | A Trail object that contains settings for a trail. cloudTrailDetails_trails :: Lens' CloudTrailDetails [Trail] -- | The ARN of the service role that IAM Access Analyzer uses to access -- your CloudTrail trail and service last accessed information. cloudTrailDetails_accessRole :: Lens' CloudTrailDetails Text -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. cloudTrailDetails_startTime :: Lens' CloudTrailDetails UTCTime instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.CloudTrailDetails.CloudTrailDetails instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.CloudTrailDetails.CloudTrailDetails instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.CloudTrailDetails.CloudTrailDetails instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.CloudTrailDetails.CloudTrailDetails instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.CloudTrailDetails.CloudTrailDetails instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.CloudTrailDetails.CloudTrailDetails instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.CloudTrailDetails.CloudTrailDetails module Amazonka.AccessAnalyzer.Types.TrailProperties -- | Contains details about the CloudTrail trail being analyzed to generate -- a policy. -- -- See: newTrailProperties smart constructor. data TrailProperties TrailProperties' :: Maybe Bool -> Maybe [Text] -> Text -> TrailProperties -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. [$sel:allRegions:TrailProperties'] :: TrailProperties -> Maybe Bool -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. [$sel:regions:TrailProperties'] :: TrailProperties -> Maybe [Text] -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. [$sel:cloudTrailArn:TrailProperties'] :: TrailProperties -> Text -- | Create a value of TrailProperties with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:allRegions:TrailProperties', -- trailProperties_allRegions - Possible values are true -- or false. If set to true, IAM Access Analyzer -- retrieves CloudTrail data from all regions to analyze and generate a -- policy. -- -- $sel:regions:TrailProperties', trailProperties_regions - -- A list of regions to get CloudTrail data from and analyze to generate -- a policy. -- -- $sel:cloudTrailArn:TrailProperties', -- trailProperties_cloudTrailArn - Specifies the ARN of the trail. -- The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. newTrailProperties :: Text -> TrailProperties -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. trailProperties_allRegions :: Lens' TrailProperties (Maybe Bool) -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. trailProperties_regions :: Lens' TrailProperties (Maybe [Text]) -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. trailProperties_cloudTrailArn :: Lens' TrailProperties Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.TrailProperties.TrailProperties instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.TrailProperties.TrailProperties instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.TrailProperties.TrailProperties instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.TrailProperties.TrailProperties instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.TrailProperties.TrailProperties instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.TrailProperties.TrailProperties instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.TrailProperties.TrailProperties module Amazonka.AccessAnalyzer.Types.CloudTrailProperties -- | Contains information about CloudTrail access. -- -- See: newCloudTrailProperties smart constructor. data CloudTrailProperties CloudTrailProperties' :: [TrailProperties] -> ISO8601 -> ISO8601 -> CloudTrailProperties -- | A TrailProperties object that contains settings for trail -- properties. [$sel:trailProperties:CloudTrailProperties'] :: CloudTrailProperties -> [TrailProperties] -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. [$sel:startTime:CloudTrailProperties'] :: CloudTrailProperties -> ISO8601 -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. [$sel:endTime:CloudTrailProperties'] :: CloudTrailProperties -> ISO8601 -- | Create a value of CloudTrailProperties with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:trailProperties:CloudTrailProperties', -- cloudTrailProperties_trailProperties - A -- TrailProperties object that contains settings for trail -- properties. -- -- $sel:startTime:CloudTrailProperties', -- cloudTrailProperties_startTime - The start of the time range -- for which IAM Access Analyzer reviews your CloudTrail events. Events -- with a timestamp before this time are not considered to generate a -- policy. -- -- $sel:endTime:CloudTrailProperties', -- cloudTrailProperties_endTime - The end of the time range for -- which IAM Access Analyzer reviews your CloudTrail events. Events with -- a timestamp after this time are not considered to generate a policy. -- If this is not included in the request, the default value is the -- current time. newCloudTrailProperties :: UTCTime -> UTCTime -> CloudTrailProperties -- | A TrailProperties object that contains settings for trail -- properties. cloudTrailProperties_trailProperties :: Lens' CloudTrailProperties [TrailProperties] -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. cloudTrailProperties_startTime :: Lens' CloudTrailProperties UTCTime -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. cloudTrailProperties_endTime :: Lens' CloudTrailProperties UTCTime instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.CloudTrailProperties.CloudTrailProperties instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.CloudTrailProperties.CloudTrailProperties instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.CloudTrailProperties.CloudTrailProperties instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.CloudTrailProperties.CloudTrailProperties instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.CloudTrailProperties.CloudTrailProperties instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.CloudTrailProperties.CloudTrailProperties instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.CloudTrailProperties.CloudTrailProperties module Amazonka.AccessAnalyzer.Types.GeneratedPolicyProperties -- | Contains the generated policy details. -- -- See: newGeneratedPolicyProperties smart constructor. data GeneratedPolicyProperties GeneratedPolicyProperties' :: Maybe CloudTrailProperties -> Maybe Bool -> Text -> GeneratedPolicyProperties -- | Lists details about the Trail used to generated policy. [$sel:cloudTrailProperties:GeneratedPolicyProperties'] :: GeneratedPolicyProperties -> Maybe CloudTrailProperties -- | This value is set to true if the generated policy contains -- all possible actions for a service that IAM Access Analyzer identified -- from the CloudTrail trail that you specified, and false -- otherwise. [$sel:isComplete:GeneratedPolicyProperties'] :: GeneratedPolicyProperties -> Maybe Bool -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. [$sel:principalArn:GeneratedPolicyProperties'] :: GeneratedPolicyProperties -> Text -- | Create a value of GeneratedPolicyProperties with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:cloudTrailProperties:GeneratedPolicyProperties', -- generatedPolicyProperties_cloudTrailProperties - Lists details -- about the Trail used to generated policy. -- -- $sel:isComplete:GeneratedPolicyProperties', -- generatedPolicyProperties_isComplete - This value is set to -- true if the generated policy contains all possible actions -- for a service that IAM Access Analyzer identified from the CloudTrail -- trail that you specified, and false otherwise. -- -- $sel:principalArn:GeneratedPolicyProperties', -- generatedPolicyProperties_principalArn - The ARN of the IAM -- entity (user or role) for which you are generating a policy. newGeneratedPolicyProperties :: Text -> GeneratedPolicyProperties -- | Lists details about the Trail used to generated policy. generatedPolicyProperties_cloudTrailProperties :: Lens' GeneratedPolicyProperties (Maybe CloudTrailProperties) -- | This value is set to true if the generated policy contains -- all possible actions for a service that IAM Access Analyzer identified -- from the CloudTrail trail that you specified, and false -- otherwise. generatedPolicyProperties_isComplete :: Lens' GeneratedPolicyProperties (Maybe Bool) -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. generatedPolicyProperties_principalArn :: Lens' GeneratedPolicyProperties Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.GeneratedPolicyProperties.GeneratedPolicyProperties instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.GeneratedPolicyProperties.GeneratedPolicyProperties instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.GeneratedPolicyProperties.GeneratedPolicyProperties instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.GeneratedPolicyProperties.GeneratedPolicyProperties instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.GeneratedPolicyProperties.GeneratedPolicyProperties instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.GeneratedPolicyProperties.GeneratedPolicyProperties instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.GeneratedPolicyProperties.GeneratedPolicyProperties module Amazonka.AccessAnalyzer.Types.GeneratedPolicyResult -- | Contains the text for the generated policy and its details. -- -- See: newGeneratedPolicyResult smart constructor. data GeneratedPolicyResult GeneratedPolicyResult' :: Maybe [GeneratedPolicy] -> GeneratedPolicyProperties -> GeneratedPolicyResult -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. [$sel:generatedPolicies:GeneratedPolicyResult'] :: GeneratedPolicyResult -> Maybe [GeneratedPolicy] -- | A GeneratedPolicyProperties object that contains properties -- of the generated policy. [$sel:properties:GeneratedPolicyResult'] :: GeneratedPolicyResult -> GeneratedPolicyProperties -- | Create a value of GeneratedPolicyResult with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:generatedPolicies:GeneratedPolicyResult', -- generatedPolicyResult_generatedPolicies - The text to use as -- the content for the new policy. The policy is created using the -- CreatePolicy action. -- -- $sel:properties:GeneratedPolicyResult', -- generatedPolicyResult_properties - A -- GeneratedPolicyProperties object that contains properties of -- the generated policy. newGeneratedPolicyResult :: GeneratedPolicyProperties -> GeneratedPolicyResult -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. generatedPolicyResult_generatedPolicies :: Lens' GeneratedPolicyResult (Maybe [GeneratedPolicy]) -- | A GeneratedPolicyProperties object that contains properties -- of the generated policy. generatedPolicyResult_properties :: Lens' GeneratedPolicyResult GeneratedPolicyProperties instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.GeneratedPolicyResult.GeneratedPolicyResult instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.GeneratedPolicyResult.GeneratedPolicyResult instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.GeneratedPolicyResult.GeneratedPolicyResult instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.GeneratedPolicyResult.GeneratedPolicyResult instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.GeneratedPolicyResult.GeneratedPolicyResult instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.GeneratedPolicyResult.GeneratedPolicyResult instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.GeneratedPolicyResult.GeneratedPolicyResult module Amazonka.AccessAnalyzer.Types.Type newtype Type Type' :: Text -> Type [fromType] :: Type -> Text pattern Type_ACCOUNT :: Type pattern Type_ORGANIZATION :: Type instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.Type.Type instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.Type.Type instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.Type.Type instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.Type.Type instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.Type.Type instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Type.Type instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.Type.Type instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.Type.Type instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.Type.Type instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.Type.Type instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.Type.Type instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.Type.Type instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Type.Type instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Type.Type instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Type.Type instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.Type.Type instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Type.Type instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Type.Type instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Type.Type module Amazonka.AccessAnalyzer.Types.AnalyzerSummary -- | Contains information about the analyzer. -- -- See: newAnalyzerSummary smart constructor. data AnalyzerSummary AnalyzerSummary' :: Maybe Text -> Maybe ISO8601 -> Maybe StatusReason -> Maybe (HashMap Text Text) -> Text -> Text -> Type -> ISO8601 -> AnalyzerStatus -> AnalyzerSummary -- | The resource that was most recently analyzed by the analyzer. [$sel:lastResourceAnalyzed:AnalyzerSummary'] :: AnalyzerSummary -> Maybe Text -- | The time at which the most recently analyzed resource was analyzed. [$sel:lastResourceAnalyzedAt:AnalyzerSummary'] :: AnalyzerSummary -> Maybe ISO8601 -- | The statusReason provides more details about the current -- status of the analyzer. For example, if the creation for the analyzer -- fails, a Failed status is returned. For an analyzer with -- organization as the type, this failure can be due to an issue with -- creating the service-linked roles required in the member accounts of -- the Amazon Web Services organization. [$sel:statusReason:AnalyzerSummary'] :: AnalyzerSummary -> Maybe StatusReason -- | The tags added to the analyzer. [$sel:tags:AnalyzerSummary'] :: AnalyzerSummary -> Maybe (HashMap Text Text) -- | The ARN of the analyzer. [$sel:arn:AnalyzerSummary'] :: AnalyzerSummary -> Text -- | The name of the analyzer. [$sel:name:AnalyzerSummary'] :: AnalyzerSummary -> Text -- | The type of analyzer, which corresponds to the zone of trust chosen -- for the analyzer. [$sel:type':AnalyzerSummary'] :: AnalyzerSummary -> Type -- | A timestamp for the time at which the analyzer was created. [$sel:createdAt:AnalyzerSummary'] :: AnalyzerSummary -> ISO8601 -- | The status of the analyzer. An Active analyzer successfully -- monitors supported resources and generates new findings. The analyzer -- is Disabled when a user action, such as removing trusted -- access for Identity and Access Management Access Analyzer from -- Organizations, causes the analyzer to stop generating new findings. -- The status is Creating when the analyzer creation is in -- progress and Failed when the analyzer creation has failed. [$sel:status:AnalyzerSummary'] :: AnalyzerSummary -> AnalyzerStatus -- | Create a value of AnalyzerSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:lastResourceAnalyzed:AnalyzerSummary', -- analyzerSummary_lastResourceAnalyzed - The resource that was -- most recently analyzed by the analyzer. -- -- $sel:lastResourceAnalyzedAt:AnalyzerSummary', -- analyzerSummary_lastResourceAnalyzedAt - The time at which the -- most recently analyzed resource was analyzed. -- -- $sel:statusReason:AnalyzerSummary', -- analyzerSummary_statusReason - The statusReason -- provides more details about the current status of the analyzer. For -- example, if the creation for the analyzer fails, a Failed -- status is returned. For an analyzer with organization as the type, -- this failure can be due to an issue with creating the service-linked -- roles required in the member accounts of the Amazon Web Services -- organization. -- -- $sel:tags:AnalyzerSummary', analyzerSummary_tags - The -- tags added to the analyzer. -- -- $sel:arn:AnalyzerSummary', analyzerSummary_arn - The ARN -- of the analyzer. -- -- $sel:name:AnalyzerSummary', analyzerSummary_name - The -- name of the analyzer. -- -- $sel:type':AnalyzerSummary', analyzerSummary_type - The -- type of analyzer, which corresponds to the zone of trust chosen for -- the analyzer. -- -- $sel:createdAt:AnalyzerSummary', -- analyzerSummary_createdAt - A timestamp for the time at which -- the analyzer was created. -- -- $sel:status:AnalyzerSummary', analyzerSummary_status - -- The status of the analyzer. An Active analyzer successfully -- monitors supported resources and generates new findings. The analyzer -- is Disabled when a user action, such as removing trusted -- access for Identity and Access Management Access Analyzer from -- Organizations, causes the analyzer to stop generating new findings. -- The status is Creating when the analyzer creation is in -- progress and Failed when the analyzer creation has failed. newAnalyzerSummary :: Text -> Text -> Type -> UTCTime -> AnalyzerStatus -> AnalyzerSummary -- | The resource that was most recently analyzed by the analyzer. analyzerSummary_lastResourceAnalyzed :: Lens' AnalyzerSummary (Maybe Text) -- | The time at which the most recently analyzed resource was analyzed. analyzerSummary_lastResourceAnalyzedAt :: Lens' AnalyzerSummary (Maybe UTCTime) -- | The statusReason provides more details about the current -- status of the analyzer. For example, if the creation for the analyzer -- fails, a Failed status is returned. For an analyzer with -- organization as the type, this failure can be due to an issue with -- creating the service-linked roles required in the member accounts of -- the Amazon Web Services organization. analyzerSummary_statusReason :: Lens' AnalyzerSummary (Maybe StatusReason) -- | The tags added to the analyzer. analyzerSummary_tags :: Lens' AnalyzerSummary (Maybe (HashMap Text Text)) -- | The ARN of the analyzer. analyzerSummary_arn :: Lens' AnalyzerSummary Text -- | The name of the analyzer. analyzerSummary_name :: Lens' AnalyzerSummary Text -- | The type of analyzer, which corresponds to the zone of trust chosen -- for the analyzer. analyzerSummary_type :: Lens' AnalyzerSummary Type -- | A timestamp for the time at which the analyzer was created. analyzerSummary_createdAt :: Lens' AnalyzerSummary UTCTime -- | The status of the analyzer. An Active analyzer successfully -- monitors supported resources and generates new findings. The analyzer -- is Disabled when a user action, such as removing trusted -- access for Identity and Access Management Access Analyzer from -- Organizations, causes the analyzer to stop generating new findings. -- The status is Creating when the analyzer creation is in -- progress and Failed when the analyzer creation has failed. analyzerSummary_status :: Lens' AnalyzerSummary AnalyzerStatus instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AnalyzerSummary.AnalyzerSummary instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AnalyzerSummary.AnalyzerSummary instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AnalyzerSummary.AnalyzerSummary instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AnalyzerSummary.AnalyzerSummary instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AnalyzerSummary.AnalyzerSummary instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AnalyzerSummary.AnalyzerSummary instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AnalyzerSummary.AnalyzerSummary module Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType newtype ValidatePolicyFindingType ValidatePolicyFindingType' :: Text -> ValidatePolicyFindingType [fromValidatePolicyFindingType] :: ValidatePolicyFindingType -> Text pattern ValidatePolicyFindingType_ERROR :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_SECURITY_WARNING :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_SUGGESTION :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_WARNING :: ValidatePolicyFindingType instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.ValidatePolicyFindingType.ValidatePolicyFindingType module Amazonka.AccessAnalyzer.Types.ValidatePolicyFinding -- | A finding in a policy. Each finding is an actionable recommendation -- that can be used to improve the policy. -- -- See: newValidatePolicyFinding smart constructor. data ValidatePolicyFinding ValidatePolicyFinding' :: Text -> ValidatePolicyFindingType -> Text -> Text -> [Location] -> ValidatePolicyFinding -- | A localized message that explains the finding and provides guidance on -- how to address it. [$sel:findingDetails:ValidatePolicyFinding'] :: ValidatePolicyFinding -> Text -- | The impact of the finding. -- -- Security warnings report when the policy allows access that we -- consider overly permissive. -- -- Errors report when a part of the policy is not functional. -- -- Warnings report non-security issues when a policy does not conform to -- policy writing best practices. -- -- Suggestions recommend stylistic improvements in the policy that do not -- impact access. [$sel:findingType:ValidatePolicyFinding'] :: ValidatePolicyFinding -> ValidatePolicyFindingType -- | The issue code provides an identifier of the issue associated with -- this finding. [$sel:issueCode:ValidatePolicyFinding'] :: ValidatePolicyFinding -> Text -- | A link to additional documentation about the type of finding. [$sel:learnMoreLink:ValidatePolicyFinding'] :: ValidatePolicyFinding -> Text -- | The list of locations in the policy document that are related to the -- finding. The issue code provides a summary of an issue identified by -- the finding. [$sel:locations:ValidatePolicyFinding'] :: ValidatePolicyFinding -> [Location] -- | Create a value of ValidatePolicyFinding with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:findingDetails:ValidatePolicyFinding', -- validatePolicyFinding_findingDetails - A localized message that -- explains the finding and provides guidance on how to address it. -- -- $sel:findingType:ValidatePolicyFinding', -- validatePolicyFinding_findingType - The impact of the finding. -- -- Security warnings report when the policy allows access that we -- consider overly permissive. -- -- Errors report when a part of the policy is not functional. -- -- Warnings report non-security issues when a policy does not conform to -- policy writing best practices. -- -- Suggestions recommend stylistic improvements in the policy that do not -- impact access. -- -- $sel:issueCode:ValidatePolicyFinding', -- validatePolicyFinding_issueCode - The issue code provides an -- identifier of the issue associated with this finding. -- -- $sel:learnMoreLink:ValidatePolicyFinding', -- validatePolicyFinding_learnMoreLink - A link to additional -- documentation about the type of finding. -- -- $sel:locations:ValidatePolicyFinding', -- validatePolicyFinding_locations - The list of locations in the -- policy document that are related to the finding. The issue code -- provides a summary of an issue identified by the finding. newValidatePolicyFinding :: Text -> ValidatePolicyFindingType -> Text -> Text -> ValidatePolicyFinding -- | A localized message that explains the finding and provides guidance on -- how to address it. validatePolicyFinding_findingDetails :: Lens' ValidatePolicyFinding Text -- | The impact of the finding. -- -- Security warnings report when the policy allows access that we -- consider overly permissive. -- -- Errors report when a part of the policy is not functional. -- -- Warnings report non-security issues when a policy does not conform to -- policy writing best practices. -- -- Suggestions recommend stylistic improvements in the policy that do not -- impact access. validatePolicyFinding_findingType :: Lens' ValidatePolicyFinding ValidatePolicyFindingType -- | The issue code provides an identifier of the issue associated with -- this finding. validatePolicyFinding_issueCode :: Lens' ValidatePolicyFinding Text -- | A link to additional documentation about the type of finding. validatePolicyFinding_learnMoreLink :: Lens' ValidatePolicyFinding Text -- | The list of locations in the policy document that are related to the -- finding. The issue code provides a summary of an issue identified by -- the finding. validatePolicyFinding_locations :: Lens' ValidatePolicyFinding [Location] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.ValidatePolicyFinding.ValidatePolicyFinding instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.ValidatePolicyFinding.ValidatePolicyFinding instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.ValidatePolicyFinding.ValidatePolicyFinding instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.ValidatePolicyFinding.ValidatePolicyFinding instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.ValidatePolicyFinding.ValidatePolicyFinding instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.ValidatePolicyFinding.ValidatePolicyFinding instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.ValidatePolicyFinding.ValidatePolicyFinding module Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType newtype ValidatePolicyResourceType ValidatePolicyResourceType' :: Text -> ValidatePolicyResourceType [fromValidatePolicyResourceType] :: ValidatePolicyResourceType -> Text pattern ValidatePolicyResourceType_AWS__IAM__AssumeRolePolicyDocument :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3ObjectLambda__AccessPoint :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__AccessPoint :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__Bucket :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__MultiRegionAccessPoint :: ValidatePolicyResourceType instance Amazonka.Data.XML.ToXML Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Amazonka.Data.XML.FromXML Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Data.Aeson.Types.ToJSON.ToJSONKey Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Data.Aeson.Types.FromJSON.FromJSONKey Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Amazonka.Data.Headers.ToHeader Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Amazonka.Data.Log.ToLog Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Amazonka.Data.ByteString.ToByteString Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Amazonka.Data.Text.ToText Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Amazonka.Data.Text.FromText Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance GHC.Classes.Ord Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.ValidatePolicyResourceType.ValidatePolicyResourceType module Amazonka.AccessAnalyzer.Types.VpcConfiguration -- | The proposed virtual private cloud (VPC) configuration for the Amazon -- S3 access point. VPC configuration does not apply to multi-region -- access points. For more information, see VpcConfiguration. -- -- See: newVpcConfiguration smart constructor. data VpcConfiguration VpcConfiguration' :: Text -> VpcConfiguration -- | If this field is specified, this access point will only allow -- connections from the specified VPC ID. [$sel:vpcId:VpcConfiguration'] :: VpcConfiguration -> Text -- | Create a value of VpcConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:vpcId:VpcConfiguration', vpcConfiguration_vpcId - -- If this field is specified, this access point will only allow -- connections from the specified VPC ID. newVpcConfiguration :: Text -> VpcConfiguration -- | If this field is specified, this access point will only allow -- connections from the specified VPC ID. vpcConfiguration_vpcId :: Lens' VpcConfiguration Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.VpcConfiguration.VpcConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.VpcConfiguration.VpcConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.VpcConfiguration.VpcConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.VpcConfiguration.VpcConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.VpcConfiguration.VpcConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.VpcConfiguration.VpcConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.VpcConfiguration.VpcConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.VpcConfiguration.VpcConfiguration module Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration -- | The proposed InternetConfiguration or -- VpcConfiguration to apply to the Amazon S3 access point. -- VpcConfiguration does not apply to multi-region access -- points. You can make the access point accessible from the internet, or -- you can specify that all requests made through that access point must -- originate from a specific virtual private cloud (VPC). You can specify -- only one type of network configuration. For more information, see -- Creating access points. -- -- See: newNetworkOriginConfiguration smart constructor. data NetworkOriginConfiguration NetworkOriginConfiguration' :: Maybe InternetConfiguration -> Maybe VpcConfiguration -> NetworkOriginConfiguration -- | The configuration for the Amazon S3 access point or multi-region -- access point with an Internet origin. [$sel:internetConfiguration:NetworkOriginConfiguration'] :: NetworkOriginConfiguration -> Maybe InternetConfiguration [$sel:vpcConfiguration:NetworkOriginConfiguration'] :: NetworkOriginConfiguration -> Maybe VpcConfiguration -- | Create a value of NetworkOriginConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:internetConfiguration:NetworkOriginConfiguration', -- networkOriginConfiguration_internetConfiguration - The -- configuration for the Amazon S3 access point or multi-region access -- point with an Internet origin. -- -- $sel:vpcConfiguration:NetworkOriginConfiguration', -- networkOriginConfiguration_vpcConfiguration - Undocumented -- member. newNetworkOriginConfiguration :: NetworkOriginConfiguration -- | The configuration for the Amazon S3 access point or multi-region -- access point with an Internet origin. networkOriginConfiguration_internetConfiguration :: Lens' NetworkOriginConfiguration (Maybe InternetConfiguration) -- | Undocumented member. networkOriginConfiguration_vpcConfiguration :: Lens' NetworkOriginConfiguration (Maybe VpcConfiguration) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration.NetworkOriginConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration.NetworkOriginConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration.NetworkOriginConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration.NetworkOriginConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration.NetworkOriginConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration.NetworkOriginConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration.NetworkOriginConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.NetworkOriginConfiguration.NetworkOriginConfiguration module Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration -- | The configuration for an Amazon S3 access point or multi-region access -- point for the bucket. You can propose up to 10 access points or -- multi-region access points per bucket. If the proposed Amazon S3 -- access point configuration is for an existing bucket, the access -- preview uses the proposed access point configuration in place of the -- existing access points. To propose an access point without a policy, -- you can provide an empty string as the access point policy. For more -- information, see Creating access points. For more information -- about access point policy limits, see Access points restrictions -- and limitations. -- -- See: newS3AccessPointConfiguration smart constructor. data S3AccessPointConfiguration S3AccessPointConfiguration' :: Maybe Text -> Maybe NetworkOriginConfiguration -> Maybe S3PublicAccessBlockConfiguration -> S3AccessPointConfiguration -- | The access point or multi-region access point policy. [$sel:accessPointPolicy:S3AccessPointConfiguration'] :: S3AccessPointConfiguration -> Maybe Text -- | The proposed Internet and VpcConfiguration to apply -- to this Amazon S3 access point. VpcConfiguration does not -- apply to multi-region access points. If the access preview is for a -- new resource and neither is specified, the access preview uses -- Internet for the network origin. If the access preview is for -- an existing resource and neither is specified, the access preview uses -- the exiting network origin. [$sel:networkOrigin:S3AccessPointConfiguration'] :: S3AccessPointConfiguration -> Maybe NetworkOriginConfiguration -- | The proposed S3PublicAccessBlock configuration to apply to -- this Amazon S3 access point or multi-region access point. [$sel:publicAccessBlock:S3AccessPointConfiguration'] :: S3AccessPointConfiguration -> Maybe S3PublicAccessBlockConfiguration -- | Create a value of S3AccessPointConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPointPolicy:S3AccessPointConfiguration', -- s3AccessPointConfiguration_accessPointPolicy - The access point -- or multi-region access point policy. -- -- $sel:networkOrigin:S3AccessPointConfiguration', -- s3AccessPointConfiguration_networkOrigin - The proposed -- Internet and VpcConfiguration to apply to this -- Amazon S3 access point. VpcConfiguration does not apply to -- multi-region access points. If the access preview is for a new -- resource and neither is specified, the access preview uses -- Internet for the network origin. If the access preview is for -- an existing resource and neither is specified, the access preview uses -- the exiting network origin. -- -- $sel:publicAccessBlock:S3AccessPointConfiguration', -- s3AccessPointConfiguration_publicAccessBlock - The proposed -- S3PublicAccessBlock configuration to apply to this Amazon S3 -- access point or multi-region access point. newS3AccessPointConfiguration :: S3AccessPointConfiguration -- | The access point or multi-region access point policy. s3AccessPointConfiguration_accessPointPolicy :: Lens' S3AccessPointConfiguration (Maybe Text) -- | The proposed Internet and VpcConfiguration to apply -- to this Amazon S3 access point. VpcConfiguration does not -- apply to multi-region access points. If the access preview is for a -- new resource and neither is specified, the access preview uses -- Internet for the network origin. If the access preview is for -- an existing resource and neither is specified, the access preview uses -- the exiting network origin. s3AccessPointConfiguration_networkOrigin :: Lens' S3AccessPointConfiguration (Maybe NetworkOriginConfiguration) -- | The proposed S3PublicAccessBlock configuration to apply to -- this Amazon S3 access point or multi-region access point. s3AccessPointConfiguration_publicAccessBlock :: Lens' S3AccessPointConfiguration (Maybe S3PublicAccessBlockConfiguration) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration.S3AccessPointConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration.S3AccessPointConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration.S3AccessPointConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration.S3AccessPointConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration.S3AccessPointConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration.S3AccessPointConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration.S3AccessPointConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.S3AccessPointConfiguration.S3AccessPointConfiguration module Amazonka.AccessAnalyzer.Types.S3BucketConfiguration -- | Proposed access control configuration for an Amazon S3 bucket. You can -- propose a configuration for a new Amazon S3 bucket or an existing -- Amazon S3 bucket that you own by specifying the Amazon S3 bucket -- policy, bucket ACLs, bucket BPA settings, Amazon S3 access points, and -- multi-region access points attached to the bucket. If the -- configuration is for an existing Amazon S3 bucket and you do not -- specify the Amazon S3 bucket policy, the access preview uses the -- existing policy attached to the bucket. If the access preview is for a -- new resource and you do not specify the Amazon S3 bucket policy, the -- access preview assumes a bucket without a policy. To propose deletion -- of an existing bucket policy, you can specify an empty string. For -- more information about bucket policy limits, see Bucket Policy -- Examples. -- -- See: newS3BucketConfiguration smart constructor. data S3BucketConfiguration S3BucketConfiguration' :: Maybe (HashMap Text S3AccessPointConfiguration) -> Maybe [S3BucketAclGrantConfiguration] -> Maybe Text -> Maybe S3PublicAccessBlockConfiguration -> S3BucketConfiguration -- | The configuration of Amazon S3 access points or multi-region access -- points for the bucket. You can propose up to 10 new access points per -- bucket. [$sel:accessPoints:S3BucketConfiguration'] :: S3BucketConfiguration -> Maybe (HashMap Text S3AccessPointConfiguration) -- | The proposed list of ACL grants for the Amazon S3 bucket. You can -- propose up to 100 ACL grants per bucket. If the proposed grant -- configuration is for an existing bucket, the access preview uses the -- proposed list of grant configurations in place of the existing grants. -- Otherwise, the access preview uses the existing grants for the bucket. [$sel:bucketAclGrants:S3BucketConfiguration'] :: S3BucketConfiguration -> Maybe [S3BucketAclGrantConfiguration] -- | The proposed bucket policy for the Amazon S3 bucket. [$sel:bucketPolicy:S3BucketConfiguration'] :: S3BucketConfiguration -> Maybe Text -- | The proposed block public access configuration for the Amazon S3 -- bucket. [$sel:bucketPublicAccessBlock:S3BucketConfiguration'] :: S3BucketConfiguration -> Maybe S3PublicAccessBlockConfiguration -- | Create a value of S3BucketConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPoints:S3BucketConfiguration', -- s3BucketConfiguration_accessPoints - The configuration of -- Amazon S3 access points or multi-region access points for the bucket. -- You can propose up to 10 new access points per bucket. -- -- $sel:bucketAclGrants:S3BucketConfiguration', -- s3BucketConfiguration_bucketAclGrants - The proposed list of -- ACL grants for the Amazon S3 bucket. You can propose up to 100 ACL -- grants per bucket. If the proposed grant configuration is for an -- existing bucket, the access preview uses the proposed list of grant -- configurations in place of the existing grants. Otherwise, the access -- preview uses the existing grants for the bucket. -- -- $sel:bucketPolicy:S3BucketConfiguration', -- s3BucketConfiguration_bucketPolicy - The proposed bucket policy -- for the Amazon S3 bucket. -- -- $sel:bucketPublicAccessBlock:S3BucketConfiguration', -- s3BucketConfiguration_bucketPublicAccessBlock - The proposed -- block public access configuration for the Amazon S3 bucket. newS3BucketConfiguration :: S3BucketConfiguration -- | The configuration of Amazon S3 access points or multi-region access -- points for the bucket. You can propose up to 10 new access points per -- bucket. s3BucketConfiguration_accessPoints :: Lens' S3BucketConfiguration (Maybe (HashMap Text S3AccessPointConfiguration)) -- | The proposed list of ACL grants for the Amazon S3 bucket. You can -- propose up to 100 ACL grants per bucket. If the proposed grant -- configuration is for an existing bucket, the access preview uses the -- proposed list of grant configurations in place of the existing grants. -- Otherwise, the access preview uses the existing grants for the bucket. s3BucketConfiguration_bucketAclGrants :: Lens' S3BucketConfiguration (Maybe [S3BucketAclGrantConfiguration]) -- | The proposed bucket policy for the Amazon S3 bucket. s3BucketConfiguration_bucketPolicy :: Lens' S3BucketConfiguration (Maybe Text) -- | The proposed block public access configuration for the Amazon S3 -- bucket. s3BucketConfiguration_bucketPublicAccessBlock :: Lens' S3BucketConfiguration (Maybe S3PublicAccessBlockConfiguration) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.S3BucketConfiguration.S3BucketConfiguration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.S3BucketConfiguration.S3BucketConfiguration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.S3BucketConfiguration.S3BucketConfiguration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.S3BucketConfiguration.S3BucketConfiguration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.S3BucketConfiguration.S3BucketConfiguration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.S3BucketConfiguration.S3BucketConfiguration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.S3BucketConfiguration.S3BucketConfiguration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.S3BucketConfiguration.S3BucketConfiguration module Amazonka.AccessAnalyzer.Types.Configuration -- | Access control configuration structures for your resource. You specify -- the configuration as a type-value pair. You can specify only one type -- of access control configuration. -- -- See: newConfiguration smart constructor. data Configuration Configuration' :: Maybe EbsSnapshotConfiguration -> Maybe EcrRepositoryConfiguration -> Maybe EfsFileSystemConfiguration -> Maybe IamRoleConfiguration -> Maybe KmsKeyConfiguration -> Maybe RdsDbClusterSnapshotConfiguration -> Maybe RdsDbSnapshotConfiguration -> Maybe S3BucketConfiguration -> Maybe SecretsManagerSecretConfiguration -> Maybe SnsTopicConfiguration -> Maybe SqsQueueConfiguration -> Configuration -- | The access control configuration is for an Amazon EBS volume snapshot. [$sel:ebsSnapshot:Configuration'] :: Configuration -> Maybe EbsSnapshotConfiguration -- | The access control configuration is for an Amazon ECR repository. [$sel:ecrRepository:Configuration'] :: Configuration -> Maybe EcrRepositoryConfiguration -- | The access control configuration is for an Amazon EFS file system. [$sel:efsFileSystem:Configuration'] :: Configuration -> Maybe EfsFileSystemConfiguration -- | The access control configuration is for an IAM role. [$sel:iamRole:Configuration'] :: Configuration -> Maybe IamRoleConfiguration -- | The access control configuration is for a KMS key. [$sel:kmsKey:Configuration'] :: Configuration -> Maybe KmsKeyConfiguration -- | The access control configuration is for an Amazon RDS DB cluster -- snapshot. [$sel:rdsDbClusterSnapshot:Configuration'] :: Configuration -> Maybe RdsDbClusterSnapshotConfiguration -- | The access control configuration is for an Amazon RDS DB snapshot. [$sel:rdsDbSnapshot:Configuration'] :: Configuration -> Maybe RdsDbSnapshotConfiguration -- | The access control configuration is for an Amazon S3 Bucket. [$sel:s3Bucket:Configuration'] :: Configuration -> Maybe S3BucketConfiguration -- | The access control configuration is for a Secrets Manager secret. [$sel:secretsManagerSecret:Configuration'] :: Configuration -> Maybe SecretsManagerSecretConfiguration -- | The access control configuration is for an Amazon SNS topic [$sel:snsTopic:Configuration'] :: Configuration -> Maybe SnsTopicConfiguration -- | The access control configuration is for an Amazon SQS queue. [$sel:sqsQueue:Configuration'] :: Configuration -> Maybe SqsQueueConfiguration -- | Create a value of Configuration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ebsSnapshot:Configuration', -- configuration_ebsSnapshot - The access control configuration is -- for an Amazon EBS volume snapshot. -- -- $sel:ecrRepository:Configuration', -- configuration_ecrRepository - The access control configuration -- is for an Amazon ECR repository. -- -- $sel:efsFileSystem:Configuration', -- configuration_efsFileSystem - The access control configuration -- is for an Amazon EFS file system. -- -- $sel:iamRole:Configuration', configuration_iamRole - The -- access control configuration is for an IAM role. -- -- $sel:kmsKey:Configuration', configuration_kmsKey - The -- access control configuration is for a KMS key. -- -- $sel:rdsDbClusterSnapshot:Configuration', -- configuration_rdsDbClusterSnapshot - The access control -- configuration is for an Amazon RDS DB cluster snapshot. -- -- $sel:rdsDbSnapshot:Configuration', -- configuration_rdsDbSnapshot - The access control configuration -- is for an Amazon RDS DB snapshot. -- -- $sel:s3Bucket:Configuration', configuration_s3Bucket - -- The access control configuration is for an Amazon S3 Bucket. -- -- $sel:secretsManagerSecret:Configuration', -- configuration_secretsManagerSecret - The access control -- configuration is for a Secrets Manager secret. -- -- $sel:snsTopic:Configuration', configuration_snsTopic - -- The access control configuration is for an Amazon SNS topic -- -- $sel:sqsQueue:Configuration', configuration_sqsQueue - -- The access control configuration is for an Amazon SQS queue. newConfiguration :: Configuration -- | The access control configuration is for an Amazon EBS volume snapshot. configuration_ebsSnapshot :: Lens' Configuration (Maybe EbsSnapshotConfiguration) -- | The access control configuration is for an Amazon ECR repository. configuration_ecrRepository :: Lens' Configuration (Maybe EcrRepositoryConfiguration) -- | The access control configuration is for an Amazon EFS file system. configuration_efsFileSystem :: Lens' Configuration (Maybe EfsFileSystemConfiguration) -- | The access control configuration is for an IAM role. configuration_iamRole :: Lens' Configuration (Maybe IamRoleConfiguration) -- | The access control configuration is for a KMS key. configuration_kmsKey :: Lens' Configuration (Maybe KmsKeyConfiguration) -- | The access control configuration is for an Amazon RDS DB cluster -- snapshot. configuration_rdsDbClusterSnapshot :: Lens' Configuration (Maybe RdsDbClusterSnapshotConfiguration) -- | The access control configuration is for an Amazon RDS DB snapshot. configuration_rdsDbSnapshot :: Lens' Configuration (Maybe RdsDbSnapshotConfiguration) -- | The access control configuration is for an Amazon S3 Bucket. configuration_s3Bucket :: Lens' Configuration (Maybe S3BucketConfiguration) -- | The access control configuration is for a Secrets Manager secret. configuration_secretsManagerSecret :: Lens' Configuration (Maybe SecretsManagerSecretConfiguration) -- | The access control configuration is for an Amazon SNS topic configuration_snsTopic :: Lens' Configuration (Maybe SnsTopicConfiguration) -- | The access control configuration is for an Amazon SQS queue. configuration_sqsQueue :: Lens' Configuration (Maybe SqsQueueConfiguration) instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.Configuration.Configuration instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.Configuration.Configuration instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.Configuration.Configuration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.Configuration.Configuration instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.Configuration.Configuration instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.Configuration.Configuration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.Configuration.Configuration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.Types.Configuration.Configuration module Amazonka.AccessAnalyzer.Types.AccessPreview -- | Contains information about an access preview. -- -- See: newAccessPreview smart constructor. data AccessPreview AccessPreview' :: Maybe AccessPreviewStatusReason -> Text -> Text -> HashMap Text Configuration -> ISO8601 -> AccessPreviewStatus -> AccessPreview -- | Provides more details about the current status of the access preview. -- -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid resource -- configuration. [$sel:statusReason:AccessPreview'] :: AccessPreview -> Maybe AccessPreviewStatusReason -- | The unique ID for the access preview. [$sel:id:AccessPreview'] :: AccessPreview -> Text -- | The ARN of the analyzer used to generate the access preview. [$sel:analyzerArn:AccessPreview'] :: AccessPreview -> Text -- | A map of resource ARNs for the proposed resource configuration. [$sel:configurations:AccessPreview'] :: AccessPreview -> HashMap Text Configuration -- | The time at which the access preview was created. [$sel:createdAt:AccessPreview'] :: AccessPreview -> ISO8601 -- | The status of the access preview. -- -- [$sel:status:AccessPreview'] :: AccessPreview -> AccessPreviewStatus -- | Create a value of AccessPreview with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:statusReason:AccessPreview', -- accessPreview_statusReason - Provides more details about the -- current status of the access preview. -- -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid resource -- configuration. -- -- $sel:id:AccessPreview', accessPreview_id - The unique ID -- for the access preview. -- -- $sel:analyzerArn:AccessPreview', -- accessPreview_analyzerArn - The ARN of the analyzer used to -- generate the access preview. -- -- $sel:configurations:AccessPreview', -- accessPreview_configurations - A map of resource ARNs for the -- proposed resource configuration. -- -- $sel:createdAt:AccessPreview', accessPreview_createdAt - -- The time at which the access preview was created. -- -- $sel:status:AccessPreview', accessPreview_status - The -- status of the access preview. -- -- newAccessPreview :: Text -> Text -> UTCTime -> AccessPreviewStatus -> AccessPreview -- | Provides more details about the current status of the access preview. -- -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid resource -- configuration. accessPreview_statusReason :: Lens' AccessPreview (Maybe AccessPreviewStatusReason) -- | The unique ID for the access preview. accessPreview_id :: Lens' AccessPreview Text -- | The ARN of the analyzer used to generate the access preview. accessPreview_analyzerArn :: Lens' AccessPreview Text -- | A map of resource ARNs for the proposed resource configuration. accessPreview_configurations :: Lens' AccessPreview (HashMap Text Configuration) -- | The time at which the access preview was created. accessPreview_createdAt :: Lens' AccessPreview UTCTime -- | The status of the access preview. -- -- accessPreview_status :: Lens' AccessPreview AccessPreviewStatus instance GHC.Generics.Generic Amazonka.AccessAnalyzer.Types.AccessPreview.AccessPreview instance GHC.Show.Show Amazonka.AccessAnalyzer.Types.AccessPreview.AccessPreview instance GHC.Read.Read Amazonka.AccessAnalyzer.Types.AccessPreview.AccessPreview instance GHC.Classes.Eq Amazonka.AccessAnalyzer.Types.AccessPreview.AccessPreview instance Data.Aeson.Types.FromJSON.FromJSON Amazonka.AccessAnalyzer.Types.AccessPreview.AccessPreview instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.Types.AccessPreview.AccessPreview instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.Types.AccessPreview.AccessPreview module Amazonka.AccessAnalyzer.Types -- | API version 2019-11-01 of the Amazon Access Analyzer SDK -- configuration. defaultService :: Service -- | You do not have sufficient access to perform this action. _AccessDeniedException :: AsError a => Fold a ServiceError -- | A conflict exception error. _ConflictException :: AsError a => Fold a ServiceError -- | Internal server error. _InternalServerException :: AsError a => Fold a ServiceError -- | The specified resource could not be found. _ResourceNotFoundException :: AsError a => Fold a ServiceError -- | Service quote met error. _ServiceQuotaExceededException :: AsError a => Fold a ServiceError -- | Throttling limit exceeded error. _ThrottlingException :: AsError a => Fold a ServiceError -- | Validation exception error. _ValidationException :: AsError a => Fold a ServiceError newtype AccessPreviewStatus AccessPreviewStatus' :: Text -> AccessPreviewStatus [fromAccessPreviewStatus] :: AccessPreviewStatus -> Text pattern AccessPreviewStatus_COMPLETED :: AccessPreviewStatus pattern AccessPreviewStatus_CREATING :: AccessPreviewStatus pattern AccessPreviewStatus_FAILED :: AccessPreviewStatus newtype AccessPreviewStatusReasonCode AccessPreviewStatusReasonCode' :: Text -> AccessPreviewStatusReasonCode [fromAccessPreviewStatusReasonCode] :: AccessPreviewStatusReasonCode -> Text pattern AccessPreviewStatusReasonCode_INTERNAL_ERROR :: AccessPreviewStatusReasonCode pattern AccessPreviewStatusReasonCode_INVALID_CONFIGURATION :: AccessPreviewStatusReasonCode newtype AclPermission AclPermission' :: Text -> AclPermission [fromAclPermission] :: AclPermission -> Text pattern AclPermission_FULL_CONTROL :: AclPermission pattern AclPermission_READ :: AclPermission pattern AclPermission_READ_ACP :: AclPermission pattern AclPermission_WRITE :: AclPermission pattern AclPermission_WRITE_ACP :: AclPermission newtype AnalyzerStatus AnalyzerStatus' :: Text -> AnalyzerStatus [fromAnalyzerStatus] :: AnalyzerStatus -> Text pattern AnalyzerStatus_ACTIVE :: AnalyzerStatus pattern AnalyzerStatus_CREATING :: AnalyzerStatus pattern AnalyzerStatus_DISABLED :: AnalyzerStatus pattern AnalyzerStatus_FAILED :: AnalyzerStatus newtype FindingChangeType FindingChangeType' :: Text -> FindingChangeType [fromFindingChangeType] :: FindingChangeType -> Text pattern FindingChangeType_CHANGED :: FindingChangeType pattern FindingChangeType_NEW :: FindingChangeType pattern FindingChangeType_UNCHANGED :: FindingChangeType newtype FindingSourceType FindingSourceType' :: Text -> FindingSourceType [fromFindingSourceType] :: FindingSourceType -> Text pattern FindingSourceType_BUCKET_ACL :: FindingSourceType pattern FindingSourceType_POLICY :: FindingSourceType pattern FindingSourceType_S3_ACCESS_POINT :: FindingSourceType pattern FindingSourceType_S3_ACCESS_POINT_ACCOUNT :: FindingSourceType newtype FindingStatus FindingStatus' :: Text -> FindingStatus [fromFindingStatus] :: FindingStatus -> Text pattern FindingStatus_ACTIVE :: FindingStatus pattern FindingStatus_ARCHIVED :: FindingStatus pattern FindingStatus_RESOLVED :: FindingStatus newtype FindingStatusUpdate FindingStatusUpdate' :: Text -> FindingStatusUpdate [fromFindingStatusUpdate] :: FindingStatusUpdate -> Text pattern FindingStatusUpdate_ACTIVE :: FindingStatusUpdate pattern FindingStatusUpdate_ARCHIVED :: FindingStatusUpdate newtype JobErrorCode JobErrorCode' :: Text -> JobErrorCode [fromJobErrorCode] :: JobErrorCode -> Text pattern JobErrorCode_AUTHORIZATION_ERROR :: JobErrorCode pattern JobErrorCode_RESOURCE_NOT_FOUND_ERROR :: JobErrorCode pattern JobErrorCode_SERVICE_ERROR :: JobErrorCode pattern JobErrorCode_SERVICE_QUOTA_EXCEEDED_ERROR :: JobErrorCode newtype JobStatus JobStatus' :: Text -> JobStatus [fromJobStatus] :: JobStatus -> Text pattern JobStatus_CANCELED :: JobStatus pattern JobStatus_FAILED :: JobStatus pattern JobStatus_IN_PROGRESS :: JobStatus pattern JobStatus_SUCCEEDED :: JobStatus newtype KmsGrantOperation KmsGrantOperation' :: Text -> KmsGrantOperation [fromKmsGrantOperation] :: KmsGrantOperation -> Text pattern KmsGrantOperation_CreateGrant :: KmsGrantOperation pattern KmsGrantOperation_Decrypt :: KmsGrantOperation pattern KmsGrantOperation_DescribeKey :: KmsGrantOperation pattern KmsGrantOperation_Encrypt :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKey :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyPair :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyPairWithoutPlaintext :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyWithoutPlaintext :: KmsGrantOperation pattern KmsGrantOperation_GetPublicKey :: KmsGrantOperation pattern KmsGrantOperation_ReEncryptFrom :: KmsGrantOperation pattern KmsGrantOperation_ReEncryptTo :: KmsGrantOperation pattern KmsGrantOperation_RetireGrant :: KmsGrantOperation pattern KmsGrantOperation_Sign :: KmsGrantOperation pattern KmsGrantOperation_Verify :: KmsGrantOperation newtype Locale Locale' :: Text -> Locale [fromLocale] :: Locale -> Text pattern Locale_DE :: Locale pattern Locale_EN :: Locale pattern Locale_ES :: Locale pattern Locale_FR :: Locale pattern Locale_IT :: Locale pattern Locale_JA :: Locale pattern Locale_KO :: Locale pattern Locale_PT_BR :: Locale pattern Locale_ZH_CN :: Locale pattern Locale_ZH_TW :: Locale newtype OrderBy OrderBy' :: Text -> OrderBy [fromOrderBy] :: OrderBy -> Text pattern OrderBy_ASC :: OrderBy pattern OrderBy_DESC :: OrderBy newtype PolicyType PolicyType' :: Text -> PolicyType [fromPolicyType] :: PolicyType -> Text pattern PolicyType_IDENTITY_POLICY :: PolicyType pattern PolicyType_RESOURCE_POLICY :: PolicyType pattern PolicyType_SERVICE_CONTROL_POLICY :: PolicyType newtype ReasonCode ReasonCode' :: Text -> ReasonCode [fromReasonCode] :: ReasonCode -> Text pattern ReasonCode_AWS_SERVICE_ACCESS_DISABLED :: ReasonCode pattern ReasonCode_DELEGATED_ADMINISTRATOR_DEREGISTERED :: ReasonCode pattern ReasonCode_ORGANIZATION_DELETED :: ReasonCode pattern ReasonCode_SERVICE_LINKED_ROLE_CREATION_FAILED :: ReasonCode newtype ResourceType ResourceType' :: Text -> ResourceType [fromResourceType] :: ResourceType -> Text pattern ResourceType_AWS__EC2__Snapshot :: ResourceType pattern ResourceType_AWS__ECR__Repository :: ResourceType pattern ResourceType_AWS__EFS__FileSystem :: ResourceType pattern ResourceType_AWS__IAM__Role :: ResourceType pattern ResourceType_AWS__KMS__Key :: ResourceType pattern ResourceType_AWS__Lambda__Function :: ResourceType pattern ResourceType_AWS__Lambda__LayerVersion :: ResourceType pattern ResourceType_AWS__RDS__DBClusterSnapshot :: ResourceType pattern ResourceType_AWS__RDS__DBSnapshot :: ResourceType pattern ResourceType_AWS__S3__Bucket :: ResourceType pattern ResourceType_AWS__SNS__Topic :: ResourceType pattern ResourceType_AWS__SQS__Queue :: ResourceType pattern ResourceType_AWS__SecretsManager__Secret :: ResourceType newtype Type Type' :: Text -> Type [fromType] :: Type -> Text pattern Type_ACCOUNT :: Type pattern Type_ORGANIZATION :: Type newtype ValidatePolicyFindingType ValidatePolicyFindingType' :: Text -> ValidatePolicyFindingType [fromValidatePolicyFindingType] :: ValidatePolicyFindingType -> Text pattern ValidatePolicyFindingType_ERROR :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_SECURITY_WARNING :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_SUGGESTION :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_WARNING :: ValidatePolicyFindingType newtype ValidatePolicyResourceType ValidatePolicyResourceType' :: Text -> ValidatePolicyResourceType [fromValidatePolicyResourceType] :: ValidatePolicyResourceType -> Text pattern ValidatePolicyResourceType_AWS__IAM__AssumeRolePolicyDocument :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3ObjectLambda__AccessPoint :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__AccessPoint :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__Bucket :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__MultiRegionAccessPoint :: ValidatePolicyResourceType -- | Contains information about an access preview. -- -- See: newAccessPreview smart constructor. data AccessPreview AccessPreview' :: Maybe AccessPreviewStatusReason -> Text -> Text -> HashMap Text Configuration -> ISO8601 -> AccessPreviewStatus -> AccessPreview -- | Provides more details about the current status of the access preview. -- -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid resource -- configuration. [$sel:statusReason:AccessPreview'] :: AccessPreview -> Maybe AccessPreviewStatusReason -- | The unique ID for the access preview. [$sel:id:AccessPreview'] :: AccessPreview -> Text -- | The ARN of the analyzer used to generate the access preview. [$sel:analyzerArn:AccessPreview'] :: AccessPreview -> Text -- | A map of resource ARNs for the proposed resource configuration. [$sel:configurations:AccessPreview'] :: AccessPreview -> HashMap Text Configuration -- | The time at which the access preview was created. [$sel:createdAt:AccessPreview'] :: AccessPreview -> ISO8601 -- | The status of the access preview. -- -- [$sel:status:AccessPreview'] :: AccessPreview -> AccessPreviewStatus -- | Create a value of AccessPreview with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:statusReason:AccessPreview', -- accessPreview_statusReason - Provides more details about the -- current status of the access preview. -- -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid resource -- configuration. -- -- $sel:id:AccessPreview', accessPreview_id - The unique ID -- for the access preview. -- -- $sel:analyzerArn:AccessPreview', -- accessPreview_analyzerArn - The ARN of the analyzer used to -- generate the access preview. -- -- $sel:configurations:AccessPreview', -- accessPreview_configurations - A map of resource ARNs for the -- proposed resource configuration. -- -- $sel:createdAt:AccessPreview', accessPreview_createdAt - -- The time at which the access preview was created. -- -- $sel:status:AccessPreview', accessPreview_status - The -- status of the access preview. -- -- newAccessPreview :: Text -> Text -> UTCTime -> AccessPreviewStatus -> AccessPreview -- | Provides more details about the current status of the access preview. -- -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid resource -- configuration. accessPreview_statusReason :: Lens' AccessPreview (Maybe AccessPreviewStatusReason) -- | The unique ID for the access preview. accessPreview_id :: Lens' AccessPreview Text -- | The ARN of the analyzer used to generate the access preview. accessPreview_analyzerArn :: Lens' AccessPreview Text -- | A map of resource ARNs for the proposed resource configuration. accessPreview_configurations :: Lens' AccessPreview (HashMap Text Configuration) -- | The time at which the access preview was created. accessPreview_createdAt :: Lens' AccessPreview UTCTime -- | The status of the access preview. -- -- accessPreview_status :: Lens' AccessPreview AccessPreviewStatus -- | An access preview finding generated by the access preview. -- -- See: newAccessPreviewFinding smart constructor. data AccessPreviewFinding AccessPreviewFinding' :: Maybe [Text] -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe Text -> Maybe FindingStatus -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> ISO8601 -> FindingChangeType -> FindingStatus -> Text -> AccessPreviewFinding -- | The action in the analyzed policy statement that an external principal -- has permission to perform. [$sel:action:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe [Text] -- | The condition in the analyzed policy statement that resulted in a -- finding. [$sel:condition:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe (HashMap Text Text) -- | An error. [$sel:error:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe Text -- | The existing ID of the finding in IAM Access Analyzer, provided only -- for existing findings. [$sel:existingFindingId:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe Text -- | The existing status of the finding, provided only for existing -- findings. [$sel:existingFindingStatus:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe FindingStatus -- | Indicates whether the policy that generated the finding allows public -- access to the resource. [$sel:isPublic:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe Bool -- | The external principal that has access to a resource within the zone -- of trust. [$sel:principal:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe (HashMap Text Text) -- | The resource that an external principal has access to. This is the -- resource associated with the access preview. [$sel:resource:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe Text -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. [$sel:sources:AccessPreviewFinding'] :: AccessPreviewFinding -> Maybe [FindingSource] -- | The ID of the access preview finding. This ID uniquely identifies the -- element in the list of access preview findings and is not related to -- the finding ID in Access Analyzer. [$sel:id:AccessPreviewFinding'] :: AccessPreviewFinding -> Text -- | The type of the resource that can be accessed in the finding. [$sel:resourceType:AccessPreviewFinding'] :: AccessPreviewFinding -> ResourceType -- | The time at which the access preview finding was created. [$sel:createdAt:AccessPreviewFinding'] :: AccessPreviewFinding -> ISO8601 -- | Provides context on how the access preview finding compares to -- existing access identified in IAM Access Analyzer. -- -- -- -- For example, a Changed finding with preview status -- Resolved and existing status Active indicates the -- existing Active finding would become Resolved as a -- result of the proposed permissions change. [$sel:changeType:AccessPreviewFinding'] :: AccessPreviewFinding -> FindingChangeType -- | The preview status of the finding. This is what the status of the -- finding would be after permissions deployment. For example, a -- Changed finding with preview status Resolved and -- existing status Active indicates the existing Active -- finding would become Resolved as a result of the proposed -- permissions change. [$sel:status:AccessPreviewFinding'] :: AccessPreviewFinding -> FindingStatus -- | The Amazon Web Services account ID that owns the resource. For most -- Amazon Web Services resources, the owning account is the account in -- which the resource was created. [$sel:resourceOwnerAccount:AccessPreviewFinding'] :: AccessPreviewFinding -> Text -- | Create a value of AccessPreviewFinding with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:AccessPreviewFinding', -- accessPreviewFinding_action - The action in the analyzed policy -- statement that an external principal has permission to perform. -- -- $sel:condition:AccessPreviewFinding', -- accessPreviewFinding_condition - The condition in the analyzed -- policy statement that resulted in a finding. -- -- $sel:error:AccessPreviewFinding', -- accessPreviewFinding_error - An error. -- -- $sel:existingFindingId:AccessPreviewFinding', -- accessPreviewFinding_existingFindingId - The existing ID of the -- finding in IAM Access Analyzer, provided only for existing findings. -- -- $sel:existingFindingStatus:AccessPreviewFinding', -- accessPreviewFinding_existingFindingStatus - The existing -- status of the finding, provided only for existing findings. -- -- $sel:isPublic:AccessPreviewFinding', -- accessPreviewFinding_isPublic - Indicates whether the policy -- that generated the finding allows public access to the resource. -- -- $sel:principal:AccessPreviewFinding', -- accessPreviewFinding_principal - The external principal that -- has access to a resource within the zone of trust. -- -- $sel:resource:AccessPreviewFinding', -- accessPreviewFinding_resource - The resource that an external -- principal has access to. This is the resource associated with the -- access preview. -- -- $sel:sources:AccessPreviewFinding', -- accessPreviewFinding_sources - The sources of the finding. This -- indicates how the access that generated the finding is granted. It is -- populated for Amazon S3 bucket findings. -- -- $sel:id:AccessPreviewFinding', accessPreviewFinding_id - -- The ID of the access preview finding. This ID uniquely identifies the -- element in the list of access preview findings and is not related to -- the finding ID in Access Analyzer. -- -- $sel:resourceType:AccessPreviewFinding', -- accessPreviewFinding_resourceType - The type of the resource -- that can be accessed in the finding. -- -- $sel:createdAt:AccessPreviewFinding', -- accessPreviewFinding_createdAt - The time at which the access -- preview finding was created. -- -- $sel:changeType:AccessPreviewFinding', -- accessPreviewFinding_changeType - Provides context on how the -- access preview finding compares to existing access identified in IAM -- Access Analyzer. -- -- -- -- For example, a Changed finding with preview status -- Resolved and existing status Active indicates the -- existing Active finding would become Resolved as a -- result of the proposed permissions change. -- -- $sel:status:AccessPreviewFinding', -- accessPreviewFinding_status - The preview status of the -- finding. This is what the status of the finding would be after -- permissions deployment. For example, a Changed finding with -- preview status Resolved and existing status Active -- indicates the existing Active finding would become -- Resolved as a result of the proposed permissions change. -- -- $sel:resourceOwnerAccount:AccessPreviewFinding', -- accessPreviewFinding_resourceOwnerAccount - The Amazon Web -- Services account ID that owns the resource. For most Amazon Web -- Services resources, the owning account is the account in which the -- resource was created. newAccessPreviewFinding :: Text -> ResourceType -> UTCTime -> FindingChangeType -> FindingStatus -> Text -> AccessPreviewFinding -- | The action in the analyzed policy statement that an external principal -- has permission to perform. accessPreviewFinding_action :: Lens' AccessPreviewFinding (Maybe [Text]) -- | The condition in the analyzed policy statement that resulted in a -- finding. accessPreviewFinding_condition :: Lens' AccessPreviewFinding (Maybe (HashMap Text Text)) -- | An error. accessPreviewFinding_error :: Lens' AccessPreviewFinding (Maybe Text) -- | The existing ID of the finding in IAM Access Analyzer, provided only -- for existing findings. accessPreviewFinding_existingFindingId :: Lens' AccessPreviewFinding (Maybe Text) -- | The existing status of the finding, provided only for existing -- findings. accessPreviewFinding_existingFindingStatus :: Lens' AccessPreviewFinding (Maybe FindingStatus) -- | Indicates whether the policy that generated the finding allows public -- access to the resource. accessPreviewFinding_isPublic :: Lens' AccessPreviewFinding (Maybe Bool) -- | The external principal that has access to a resource within the zone -- of trust. accessPreviewFinding_principal :: Lens' AccessPreviewFinding (Maybe (HashMap Text Text)) -- | The resource that an external principal has access to. This is the -- resource associated with the access preview. accessPreviewFinding_resource :: Lens' AccessPreviewFinding (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. accessPreviewFinding_sources :: Lens' AccessPreviewFinding (Maybe [FindingSource]) -- | The ID of the access preview finding. This ID uniquely identifies the -- element in the list of access preview findings and is not related to -- the finding ID in Access Analyzer. accessPreviewFinding_id :: Lens' AccessPreviewFinding Text -- | The type of the resource that can be accessed in the finding. accessPreviewFinding_resourceType :: Lens' AccessPreviewFinding ResourceType -- | The time at which the access preview finding was created. accessPreviewFinding_createdAt :: Lens' AccessPreviewFinding UTCTime -- | Provides context on how the access preview finding compares to -- existing access identified in IAM Access Analyzer. -- -- -- -- For example, a Changed finding with preview status -- Resolved and existing status Active indicates the -- existing Active finding would become Resolved as a -- result of the proposed permissions change. accessPreviewFinding_changeType :: Lens' AccessPreviewFinding FindingChangeType -- | The preview status of the finding. This is what the status of the -- finding would be after permissions deployment. For example, a -- Changed finding with preview status Resolved and -- existing status Active indicates the existing Active -- finding would become Resolved as a result of the proposed -- permissions change. accessPreviewFinding_status :: Lens' AccessPreviewFinding FindingStatus -- | The Amazon Web Services account ID that owns the resource. For most -- Amazon Web Services resources, the owning account is the account in -- which the resource was created. accessPreviewFinding_resourceOwnerAccount :: Lens' AccessPreviewFinding Text -- | Provides more details about the current status of the access preview. -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid proposed -- resource configuration. -- -- See: newAccessPreviewStatusReason smart constructor. data AccessPreviewStatusReason AccessPreviewStatusReason' :: AccessPreviewStatusReasonCode -> AccessPreviewStatusReason -- | The reason code for the current status of the access preview. [$sel:code:AccessPreviewStatusReason'] :: AccessPreviewStatusReason -> AccessPreviewStatusReasonCode -- | Create a value of AccessPreviewStatusReason with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:AccessPreviewStatusReason', -- accessPreviewStatusReason_code - The reason code for the -- current status of the access preview. newAccessPreviewStatusReason :: AccessPreviewStatusReasonCode -> AccessPreviewStatusReason -- | The reason code for the current status of the access preview. accessPreviewStatusReason_code :: Lens' AccessPreviewStatusReason AccessPreviewStatusReasonCode -- | Contains a summary of information about an access preview. -- -- See: newAccessPreviewSummary smart constructor. data AccessPreviewSummary AccessPreviewSummary' :: Maybe AccessPreviewStatusReason -> Text -> Text -> ISO8601 -> AccessPreviewStatus -> AccessPreviewSummary [$sel:statusReason:AccessPreviewSummary'] :: AccessPreviewSummary -> Maybe AccessPreviewStatusReason -- | The unique ID for the access preview. [$sel:id:AccessPreviewSummary'] :: AccessPreviewSummary -> Text -- | The ARN of the analyzer used to generate the access preview. [$sel:analyzerArn:AccessPreviewSummary'] :: AccessPreviewSummary -> Text -- | The time at which the access preview was created. [$sel:createdAt:AccessPreviewSummary'] :: AccessPreviewSummary -> ISO8601 -- | The status of the access preview. -- -- [$sel:status:AccessPreviewSummary'] :: AccessPreviewSummary -> AccessPreviewStatus -- | Create a value of AccessPreviewSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:statusReason:AccessPreviewSummary', -- accessPreviewSummary_statusReason - Undocumented member. -- -- $sel:id:AccessPreviewSummary', accessPreviewSummary_id - -- The unique ID for the access preview. -- -- $sel:analyzerArn:AccessPreviewSummary', -- accessPreviewSummary_analyzerArn - The ARN of the analyzer used -- to generate the access preview. -- -- $sel:createdAt:AccessPreviewSummary', -- accessPreviewSummary_createdAt - The time at which the access -- preview was created. -- -- $sel:status:AccessPreviewSummary', -- accessPreviewSummary_status - The status of the access preview. -- -- newAccessPreviewSummary :: Text -> Text -> UTCTime -> AccessPreviewStatus -> AccessPreviewSummary -- | Undocumented member. accessPreviewSummary_statusReason :: Lens' AccessPreviewSummary (Maybe AccessPreviewStatusReason) -- | The unique ID for the access preview. accessPreviewSummary_id :: Lens' AccessPreviewSummary Text -- | The ARN of the analyzer used to generate the access preview. accessPreviewSummary_analyzerArn :: Lens' AccessPreviewSummary Text -- | The time at which the access preview was created. accessPreviewSummary_createdAt :: Lens' AccessPreviewSummary UTCTime -- | The status of the access preview. -- -- accessPreviewSummary_status :: Lens' AccessPreviewSummary AccessPreviewStatus -- | You specify each grantee as a type-value pair using one of these -- types. You can specify only one type of grantee. For more information, -- see PutBucketAcl. -- -- See: newAclGrantee smart constructor. data AclGrantee AclGrantee' :: Maybe Text -> Maybe Text -> AclGrantee -- | The value specified is the canonical user ID of an Amazon Web Services -- account. [$sel:id:AclGrantee'] :: AclGrantee -> Maybe Text -- | Used for granting permissions to a predefined group. [$sel:uri:AclGrantee'] :: AclGrantee -> Maybe Text -- | Create a value of AclGrantee with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:id:AclGrantee', aclGrantee_id - The value specified -- is the canonical user ID of an Amazon Web Services account. -- -- $sel:uri:AclGrantee', aclGrantee_uri - Used for granting -- permissions to a predefined group. newAclGrantee :: AclGrantee -- | The value specified is the canonical user ID of an Amazon Web Services -- account. aclGrantee_id :: Lens' AclGrantee (Maybe Text) -- | Used for granting permissions to a predefined group. aclGrantee_uri :: Lens' AclGrantee (Maybe Text) -- | Contains details about the analyzed resource. -- -- See: newAnalyzedResource smart constructor. data AnalyzedResource AnalyzedResource' :: Maybe [Text] -> Maybe Text -> Maybe [Text] -> Maybe FindingStatus -> Text -> ResourceType -> ISO8601 -> ISO8601 -> ISO8601 -> Bool -> Text -> AnalyzedResource -- | The actions that an external principal is granted permission to use by -- the policy that generated the finding. [$sel:actions:AnalyzedResource'] :: AnalyzedResource -> Maybe [Text] -- | An error message. [$sel:error:AnalyzedResource'] :: AnalyzedResource -> Maybe Text -- | Indicates how the access that generated the finding is granted. This -- is populated for Amazon S3 bucket findings. [$sel:sharedVia:AnalyzedResource'] :: AnalyzedResource -> Maybe [Text] -- | The current status of the finding generated from the analyzed -- resource. [$sel:status:AnalyzedResource'] :: AnalyzedResource -> Maybe FindingStatus -- | The ARN of the resource that was analyzed. [$sel:resourceArn:AnalyzedResource'] :: AnalyzedResource -> Text -- | The type of the resource that was analyzed. [$sel:resourceType:AnalyzedResource'] :: AnalyzedResource -> ResourceType -- | The time at which the finding was created. [$sel:createdAt:AnalyzedResource'] :: AnalyzedResource -> ISO8601 -- | The time at which the resource was analyzed. [$sel:analyzedAt:AnalyzedResource'] :: AnalyzedResource -> ISO8601 -- | The time at which the finding was updated. [$sel:updatedAt:AnalyzedResource'] :: AnalyzedResource -> ISO8601 -- | Indicates whether the policy that generated the finding grants public -- access to the resource. [$sel:isPublic:AnalyzedResource'] :: AnalyzedResource -> Bool -- | The Amazon Web Services account ID that owns the resource. [$sel:resourceOwnerAccount:AnalyzedResource'] :: AnalyzedResource -> Text -- | Create a value of AnalyzedResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:actions:AnalyzedResource', analyzedResource_actions -- - The actions that an external principal is granted permission to use -- by the policy that generated the finding. -- -- $sel:error:AnalyzedResource', analyzedResource_error - -- An error message. -- -- $sel:sharedVia:AnalyzedResource', -- analyzedResource_sharedVia - Indicates how the access that -- generated the finding is granted. This is populated for Amazon S3 -- bucket findings. -- -- $sel:status:AnalyzedResource', analyzedResource_status - -- The current status of the finding generated from the analyzed -- resource. -- -- $sel:resourceArn:AnalyzedResource', -- analyzedResource_resourceArn - The ARN of the resource that was -- analyzed. -- -- $sel:resourceType:AnalyzedResource', -- analyzedResource_resourceType - The type of the resource that -- was analyzed. -- -- $sel:createdAt:AnalyzedResource', -- analyzedResource_createdAt - The time at which the finding was -- created. -- -- $sel:analyzedAt:AnalyzedResource', -- analyzedResource_analyzedAt - The time at which the resource -- was analyzed. -- -- $sel:updatedAt:AnalyzedResource', -- analyzedResource_updatedAt - The time at which the finding was -- updated. -- -- $sel:isPublic:AnalyzedResource', -- analyzedResource_isPublic - Indicates whether the policy that -- generated the finding grants public access to the resource. -- -- $sel:resourceOwnerAccount:AnalyzedResource', -- analyzedResource_resourceOwnerAccount - The Amazon Web Services -- account ID that owns the resource. newAnalyzedResource :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> Bool -> Text -> AnalyzedResource -- | The actions that an external principal is granted permission to use by -- the policy that generated the finding. analyzedResource_actions :: Lens' AnalyzedResource (Maybe [Text]) -- | An error message. analyzedResource_error :: Lens' AnalyzedResource (Maybe Text) -- | Indicates how the access that generated the finding is granted. This -- is populated for Amazon S3 bucket findings. analyzedResource_sharedVia :: Lens' AnalyzedResource (Maybe [Text]) -- | The current status of the finding generated from the analyzed -- resource. analyzedResource_status :: Lens' AnalyzedResource (Maybe FindingStatus) -- | The ARN of the resource that was analyzed. analyzedResource_resourceArn :: Lens' AnalyzedResource Text -- | The type of the resource that was analyzed. analyzedResource_resourceType :: Lens' AnalyzedResource ResourceType -- | The time at which the finding was created. analyzedResource_createdAt :: Lens' AnalyzedResource UTCTime -- | The time at which the resource was analyzed. analyzedResource_analyzedAt :: Lens' AnalyzedResource UTCTime -- | The time at which the finding was updated. analyzedResource_updatedAt :: Lens' AnalyzedResource UTCTime -- | Indicates whether the policy that generated the finding grants public -- access to the resource. analyzedResource_isPublic :: Lens' AnalyzedResource Bool -- | The Amazon Web Services account ID that owns the resource. analyzedResource_resourceOwnerAccount :: Lens' AnalyzedResource Text -- | Contains the ARN of the analyzed resource. -- -- See: newAnalyzedResourceSummary smart constructor. data AnalyzedResourceSummary AnalyzedResourceSummary' :: Text -> Text -> ResourceType -> AnalyzedResourceSummary -- | The ARN of the analyzed resource. [$sel:resourceArn:AnalyzedResourceSummary'] :: AnalyzedResourceSummary -> Text -- | The Amazon Web Services account ID that owns the resource. [$sel:resourceOwnerAccount:AnalyzedResourceSummary'] :: AnalyzedResourceSummary -> Text -- | The type of resource that was analyzed. [$sel:resourceType:AnalyzedResourceSummary'] :: AnalyzedResourceSummary -> ResourceType -- | Create a value of AnalyzedResourceSummary with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:resourceArn:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceArn - The ARN of the analyzed -- resource. -- -- $sel:resourceOwnerAccount:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceOwnerAccount - The Amazon Web -- Services account ID that owns the resource. -- -- $sel:resourceType:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceType - The type of resource -- that was analyzed. newAnalyzedResourceSummary :: Text -> Text -> ResourceType -> AnalyzedResourceSummary -- | The ARN of the analyzed resource. analyzedResourceSummary_resourceArn :: Lens' AnalyzedResourceSummary Text -- | The Amazon Web Services account ID that owns the resource. analyzedResourceSummary_resourceOwnerAccount :: Lens' AnalyzedResourceSummary Text -- | The type of resource that was analyzed. analyzedResourceSummary_resourceType :: Lens' AnalyzedResourceSummary ResourceType -- | Contains information about the analyzer. -- -- See: newAnalyzerSummary smart constructor. data AnalyzerSummary AnalyzerSummary' :: Maybe Text -> Maybe ISO8601 -> Maybe StatusReason -> Maybe (HashMap Text Text) -> Text -> Text -> Type -> ISO8601 -> AnalyzerStatus -> AnalyzerSummary -- | The resource that was most recently analyzed by the analyzer. [$sel:lastResourceAnalyzed:AnalyzerSummary'] :: AnalyzerSummary -> Maybe Text -- | The time at which the most recently analyzed resource was analyzed. [$sel:lastResourceAnalyzedAt:AnalyzerSummary'] :: AnalyzerSummary -> Maybe ISO8601 -- | The statusReason provides more details about the current -- status of the analyzer. For example, if the creation for the analyzer -- fails, a Failed status is returned. For an analyzer with -- organization as the type, this failure can be due to an issue with -- creating the service-linked roles required in the member accounts of -- the Amazon Web Services organization. [$sel:statusReason:AnalyzerSummary'] :: AnalyzerSummary -> Maybe StatusReason -- | The tags added to the analyzer. [$sel:tags:AnalyzerSummary'] :: AnalyzerSummary -> Maybe (HashMap Text Text) -- | The ARN of the analyzer. [$sel:arn:AnalyzerSummary'] :: AnalyzerSummary -> Text -- | The name of the analyzer. [$sel:name:AnalyzerSummary'] :: AnalyzerSummary -> Text -- | The type of analyzer, which corresponds to the zone of trust chosen -- for the analyzer. [$sel:type':AnalyzerSummary'] :: AnalyzerSummary -> Type -- | A timestamp for the time at which the analyzer was created. [$sel:createdAt:AnalyzerSummary'] :: AnalyzerSummary -> ISO8601 -- | The status of the analyzer. An Active analyzer successfully -- monitors supported resources and generates new findings. The analyzer -- is Disabled when a user action, such as removing trusted -- access for Identity and Access Management Access Analyzer from -- Organizations, causes the analyzer to stop generating new findings. -- The status is Creating when the analyzer creation is in -- progress and Failed when the analyzer creation has failed. [$sel:status:AnalyzerSummary'] :: AnalyzerSummary -> AnalyzerStatus -- | Create a value of AnalyzerSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:lastResourceAnalyzed:AnalyzerSummary', -- analyzerSummary_lastResourceAnalyzed - The resource that was -- most recently analyzed by the analyzer. -- -- $sel:lastResourceAnalyzedAt:AnalyzerSummary', -- analyzerSummary_lastResourceAnalyzedAt - The time at which the -- most recently analyzed resource was analyzed. -- -- $sel:statusReason:AnalyzerSummary', -- analyzerSummary_statusReason - The statusReason -- provides more details about the current status of the analyzer. For -- example, if the creation for the analyzer fails, a Failed -- status is returned. For an analyzer with organization as the type, -- this failure can be due to an issue with creating the service-linked -- roles required in the member accounts of the Amazon Web Services -- organization. -- -- $sel:tags:AnalyzerSummary', analyzerSummary_tags - The -- tags added to the analyzer. -- -- $sel:arn:AnalyzerSummary', analyzerSummary_arn - The ARN -- of the analyzer. -- -- $sel:name:AnalyzerSummary', analyzerSummary_name - The -- name of the analyzer. -- -- $sel:type':AnalyzerSummary', analyzerSummary_type - The -- type of analyzer, which corresponds to the zone of trust chosen for -- the analyzer. -- -- $sel:createdAt:AnalyzerSummary', -- analyzerSummary_createdAt - A timestamp for the time at which -- the analyzer was created. -- -- $sel:status:AnalyzerSummary', analyzerSummary_status - -- The status of the analyzer. An Active analyzer successfully -- monitors supported resources and generates new findings. The analyzer -- is Disabled when a user action, such as removing trusted -- access for Identity and Access Management Access Analyzer from -- Organizations, causes the analyzer to stop generating new findings. -- The status is Creating when the analyzer creation is in -- progress and Failed when the analyzer creation has failed. newAnalyzerSummary :: Text -> Text -> Type -> UTCTime -> AnalyzerStatus -> AnalyzerSummary -- | The resource that was most recently analyzed by the analyzer. analyzerSummary_lastResourceAnalyzed :: Lens' AnalyzerSummary (Maybe Text) -- | The time at which the most recently analyzed resource was analyzed. analyzerSummary_lastResourceAnalyzedAt :: Lens' AnalyzerSummary (Maybe UTCTime) -- | The statusReason provides more details about the current -- status of the analyzer. For example, if the creation for the analyzer -- fails, a Failed status is returned. For an analyzer with -- organization as the type, this failure can be due to an issue with -- creating the service-linked roles required in the member accounts of -- the Amazon Web Services organization. analyzerSummary_statusReason :: Lens' AnalyzerSummary (Maybe StatusReason) -- | The tags added to the analyzer. analyzerSummary_tags :: Lens' AnalyzerSummary (Maybe (HashMap Text Text)) -- | The ARN of the analyzer. analyzerSummary_arn :: Lens' AnalyzerSummary Text -- | The name of the analyzer. analyzerSummary_name :: Lens' AnalyzerSummary Text -- | The type of analyzer, which corresponds to the zone of trust chosen -- for the analyzer. analyzerSummary_type :: Lens' AnalyzerSummary Type -- | A timestamp for the time at which the analyzer was created. analyzerSummary_createdAt :: Lens' AnalyzerSummary UTCTime -- | The status of the analyzer. An Active analyzer successfully -- monitors supported resources and generates new findings. The analyzer -- is Disabled when a user action, such as removing trusted -- access for Identity and Access Management Access Analyzer from -- Organizations, causes the analyzer to stop generating new findings. -- The status is Creating when the analyzer creation is in -- progress and Failed when the analyzer creation has failed. analyzerSummary_status :: Lens' AnalyzerSummary AnalyzerStatus -- | Contains information about an archive rule. -- -- See: newArchiveRuleSummary smart constructor. data ArchiveRuleSummary ArchiveRuleSummary' :: Text -> HashMap Text Criterion -> ISO8601 -> ISO8601 -> ArchiveRuleSummary -- | The name of the archive rule. [$sel:ruleName:ArchiveRuleSummary'] :: ArchiveRuleSummary -> Text -- | A filter used to define the archive rule. [$sel:filter':ArchiveRuleSummary'] :: ArchiveRuleSummary -> HashMap Text Criterion -- | The time at which the archive rule was created. [$sel:createdAt:ArchiveRuleSummary'] :: ArchiveRuleSummary -> ISO8601 -- | The time at which the archive rule was last updated. [$sel:updatedAt:ArchiveRuleSummary'] :: ArchiveRuleSummary -> ISO8601 -- | Create a value of ArchiveRuleSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ruleName:ArchiveRuleSummary', -- archiveRuleSummary_ruleName - The name of the archive rule. -- -- $sel:filter':ArchiveRuleSummary', -- archiveRuleSummary_filter - A filter used to define the archive -- rule. -- -- $sel:createdAt:ArchiveRuleSummary', -- archiveRuleSummary_createdAt - The time at which the archive -- rule was created. -- -- $sel:updatedAt:ArchiveRuleSummary', -- archiveRuleSummary_updatedAt - The time at which the archive -- rule was last updated. newArchiveRuleSummary :: Text -> UTCTime -> UTCTime -> ArchiveRuleSummary -- | The name of the archive rule. archiveRuleSummary_ruleName :: Lens' ArchiveRuleSummary Text -- | A filter used to define the archive rule. archiveRuleSummary_filter :: Lens' ArchiveRuleSummary (HashMap Text Criterion) -- | The time at which the archive rule was created. archiveRuleSummary_createdAt :: Lens' ArchiveRuleSummary UTCTime -- | The time at which the archive rule was last updated. archiveRuleSummary_updatedAt :: Lens' ArchiveRuleSummary UTCTime -- | Contains information about CloudTrail access. -- -- See: newCloudTrailDetails smart constructor. data CloudTrailDetails CloudTrailDetails' :: Maybe ISO8601 -> [Trail] -> Text -> ISO8601 -> CloudTrailDetails -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. [$sel:endTime:CloudTrailDetails'] :: CloudTrailDetails -> Maybe ISO8601 -- | A Trail object that contains settings for a trail. [$sel:trails:CloudTrailDetails'] :: CloudTrailDetails -> [Trail] -- | The ARN of the service role that IAM Access Analyzer uses to access -- your CloudTrail trail and service last accessed information. [$sel:accessRole:CloudTrailDetails'] :: CloudTrailDetails -> Text -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. [$sel:startTime:CloudTrailDetails'] :: CloudTrailDetails -> ISO8601 -- | Create a value of CloudTrailDetails with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:endTime:CloudTrailDetails', -- cloudTrailDetails_endTime - The end of the time range for which -- IAM Access Analyzer reviews your CloudTrail events. Events with a -- timestamp after this time are not considered to generate a policy. If -- this is not included in the request, the default value is the current -- time. -- -- $sel:trails:CloudTrailDetails', cloudTrailDetails_trails -- - A Trail object that contains settings for a trail. -- -- $sel:accessRole:CloudTrailDetails', -- cloudTrailDetails_accessRole - The ARN of the service role that -- IAM Access Analyzer uses to access your CloudTrail trail and service -- last accessed information. -- -- $sel:startTime:CloudTrailDetails', -- cloudTrailDetails_startTime - The start of the time range for -- which IAM Access Analyzer reviews your CloudTrail events. Events with -- a timestamp before this time are not considered to generate a policy. newCloudTrailDetails :: Text -> UTCTime -> CloudTrailDetails -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. cloudTrailDetails_endTime :: Lens' CloudTrailDetails (Maybe UTCTime) -- | A Trail object that contains settings for a trail. cloudTrailDetails_trails :: Lens' CloudTrailDetails [Trail] -- | The ARN of the service role that IAM Access Analyzer uses to access -- your CloudTrail trail and service last accessed information. cloudTrailDetails_accessRole :: Lens' CloudTrailDetails Text -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. cloudTrailDetails_startTime :: Lens' CloudTrailDetails UTCTime -- | Contains information about CloudTrail access. -- -- See: newCloudTrailProperties smart constructor. data CloudTrailProperties CloudTrailProperties' :: [TrailProperties] -> ISO8601 -> ISO8601 -> CloudTrailProperties -- | A TrailProperties object that contains settings for trail -- properties. [$sel:trailProperties:CloudTrailProperties'] :: CloudTrailProperties -> [TrailProperties] -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. [$sel:startTime:CloudTrailProperties'] :: CloudTrailProperties -> ISO8601 -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. [$sel:endTime:CloudTrailProperties'] :: CloudTrailProperties -> ISO8601 -- | Create a value of CloudTrailProperties with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:trailProperties:CloudTrailProperties', -- cloudTrailProperties_trailProperties - A -- TrailProperties object that contains settings for trail -- properties. -- -- $sel:startTime:CloudTrailProperties', -- cloudTrailProperties_startTime - The start of the time range -- for which IAM Access Analyzer reviews your CloudTrail events. Events -- with a timestamp before this time are not considered to generate a -- policy. -- -- $sel:endTime:CloudTrailProperties', -- cloudTrailProperties_endTime - The end of the time range for -- which IAM Access Analyzer reviews your CloudTrail events. Events with -- a timestamp after this time are not considered to generate a policy. -- If this is not included in the request, the default value is the -- current time. newCloudTrailProperties :: UTCTime -> UTCTime -> CloudTrailProperties -- | A TrailProperties object that contains settings for trail -- properties. cloudTrailProperties_trailProperties :: Lens' CloudTrailProperties [TrailProperties] -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. cloudTrailProperties_startTime :: Lens' CloudTrailProperties UTCTime -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. cloudTrailProperties_endTime :: Lens' CloudTrailProperties UTCTime -- | Access control configuration structures for your resource. You specify -- the configuration as a type-value pair. You can specify only one type -- of access control configuration. -- -- See: newConfiguration smart constructor. data Configuration Configuration' :: Maybe EbsSnapshotConfiguration -> Maybe EcrRepositoryConfiguration -> Maybe EfsFileSystemConfiguration -> Maybe IamRoleConfiguration -> Maybe KmsKeyConfiguration -> Maybe RdsDbClusterSnapshotConfiguration -> Maybe RdsDbSnapshotConfiguration -> Maybe S3BucketConfiguration -> Maybe SecretsManagerSecretConfiguration -> Maybe SnsTopicConfiguration -> Maybe SqsQueueConfiguration -> Configuration -- | The access control configuration is for an Amazon EBS volume snapshot. [$sel:ebsSnapshot:Configuration'] :: Configuration -> Maybe EbsSnapshotConfiguration -- | The access control configuration is for an Amazon ECR repository. [$sel:ecrRepository:Configuration'] :: Configuration -> Maybe EcrRepositoryConfiguration -- | The access control configuration is for an Amazon EFS file system. [$sel:efsFileSystem:Configuration'] :: Configuration -> Maybe EfsFileSystemConfiguration -- | The access control configuration is for an IAM role. [$sel:iamRole:Configuration'] :: Configuration -> Maybe IamRoleConfiguration -- | The access control configuration is for a KMS key. [$sel:kmsKey:Configuration'] :: Configuration -> Maybe KmsKeyConfiguration -- | The access control configuration is for an Amazon RDS DB cluster -- snapshot. [$sel:rdsDbClusterSnapshot:Configuration'] :: Configuration -> Maybe RdsDbClusterSnapshotConfiguration -- | The access control configuration is for an Amazon RDS DB snapshot. [$sel:rdsDbSnapshot:Configuration'] :: Configuration -> Maybe RdsDbSnapshotConfiguration -- | The access control configuration is for an Amazon S3 Bucket. [$sel:s3Bucket:Configuration'] :: Configuration -> Maybe S3BucketConfiguration -- | The access control configuration is for a Secrets Manager secret. [$sel:secretsManagerSecret:Configuration'] :: Configuration -> Maybe SecretsManagerSecretConfiguration -- | The access control configuration is for an Amazon SNS topic [$sel:snsTopic:Configuration'] :: Configuration -> Maybe SnsTopicConfiguration -- | The access control configuration is for an Amazon SQS queue. [$sel:sqsQueue:Configuration'] :: Configuration -> Maybe SqsQueueConfiguration -- | Create a value of Configuration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ebsSnapshot:Configuration', -- configuration_ebsSnapshot - The access control configuration is -- for an Amazon EBS volume snapshot. -- -- $sel:ecrRepository:Configuration', -- configuration_ecrRepository - The access control configuration -- is for an Amazon ECR repository. -- -- $sel:efsFileSystem:Configuration', -- configuration_efsFileSystem - The access control configuration -- is for an Amazon EFS file system. -- -- $sel:iamRole:Configuration', configuration_iamRole - The -- access control configuration is for an IAM role. -- -- $sel:kmsKey:Configuration', configuration_kmsKey - The -- access control configuration is for a KMS key. -- -- $sel:rdsDbClusterSnapshot:Configuration', -- configuration_rdsDbClusterSnapshot - The access control -- configuration is for an Amazon RDS DB cluster snapshot. -- -- $sel:rdsDbSnapshot:Configuration', -- configuration_rdsDbSnapshot - The access control configuration -- is for an Amazon RDS DB snapshot. -- -- $sel:s3Bucket:Configuration', configuration_s3Bucket - -- The access control configuration is for an Amazon S3 Bucket. -- -- $sel:secretsManagerSecret:Configuration', -- configuration_secretsManagerSecret - The access control -- configuration is for a Secrets Manager secret. -- -- $sel:snsTopic:Configuration', configuration_snsTopic - -- The access control configuration is for an Amazon SNS topic -- -- $sel:sqsQueue:Configuration', configuration_sqsQueue - -- The access control configuration is for an Amazon SQS queue. newConfiguration :: Configuration -- | The access control configuration is for an Amazon EBS volume snapshot. configuration_ebsSnapshot :: Lens' Configuration (Maybe EbsSnapshotConfiguration) -- | The access control configuration is for an Amazon ECR repository. configuration_ecrRepository :: Lens' Configuration (Maybe EcrRepositoryConfiguration) -- | The access control configuration is for an Amazon EFS file system. configuration_efsFileSystem :: Lens' Configuration (Maybe EfsFileSystemConfiguration) -- | The access control configuration is for an IAM role. configuration_iamRole :: Lens' Configuration (Maybe IamRoleConfiguration) -- | The access control configuration is for a KMS key. configuration_kmsKey :: Lens' Configuration (Maybe KmsKeyConfiguration) -- | The access control configuration is for an Amazon RDS DB cluster -- snapshot. configuration_rdsDbClusterSnapshot :: Lens' Configuration (Maybe RdsDbClusterSnapshotConfiguration) -- | The access control configuration is for an Amazon RDS DB snapshot. configuration_rdsDbSnapshot :: Lens' Configuration (Maybe RdsDbSnapshotConfiguration) -- | The access control configuration is for an Amazon S3 Bucket. configuration_s3Bucket :: Lens' Configuration (Maybe S3BucketConfiguration) -- | The access control configuration is for a Secrets Manager secret. configuration_secretsManagerSecret :: Lens' Configuration (Maybe SecretsManagerSecretConfiguration) -- | The access control configuration is for an Amazon SNS topic configuration_snsTopic :: Lens' Configuration (Maybe SnsTopicConfiguration) -- | The access control configuration is for an Amazon SQS queue. configuration_sqsQueue :: Lens' Configuration (Maybe SqsQueueConfiguration) -- | The criteria to use in the filter that defines the archive rule. For -- more information on available filter keys, see IAM Access Analyzer -- filter keys. -- -- See: newCriterion smart constructor. data Criterion Criterion' :: Maybe (NonEmpty Text) -> Maybe (NonEmpty Text) -> Maybe Bool -> Maybe (NonEmpty Text) -> Criterion -- | A "contains" operator to match for the filter used to create the rule. [$sel:contains:Criterion'] :: Criterion -> Maybe (NonEmpty Text) -- | An "equals" operator to match for the filter used to create the rule. [$sel:eq:Criterion'] :: Criterion -> Maybe (NonEmpty Text) -- | An "exists" operator to match for the filter used to create the rule. [$sel:exists:Criterion'] :: Criterion -> Maybe Bool -- | A "not equals" operator to match for the filter used to create the -- rule. [$sel:neq:Criterion'] :: Criterion -> Maybe (NonEmpty Text) -- | Create a value of Criterion with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:contains:Criterion', criterion_contains - A -- "contains" operator to match for the filter used to create the rule. -- -- $sel:eq:Criterion', criterion_eq - An "equals" operator -- to match for the filter used to create the rule. -- -- $sel:exists:Criterion', criterion_exists - An "exists" -- operator to match for the filter used to create the rule. -- -- $sel:neq:Criterion', criterion_neq - A "not equals" -- operator to match for the filter used to create the rule. newCriterion :: Criterion -- | A "contains" operator to match for the filter used to create the rule. criterion_contains :: Lens' Criterion (Maybe (NonEmpty Text)) -- | An "equals" operator to match for the filter used to create the rule. criterion_eq :: Lens' Criterion (Maybe (NonEmpty Text)) -- | An "exists" operator to match for the filter used to create the rule. criterion_exists :: Lens' Criterion (Maybe Bool) -- | A "not equals" operator to match for the filter used to create the -- rule. criterion_neq :: Lens' Criterion (Maybe (NonEmpty Text)) -- | The proposed access control configuration for an Amazon EBS volume -- snapshot. You can propose a configuration for a new Amazon EBS volume -- snapshot or an Amazon EBS volume snapshot that you own by specifying -- the user IDs, groups, and optional KMS encryption key. For more -- information, see ModifySnapshotAttribute. -- -- See: newEbsSnapshotConfiguration smart constructor. data EbsSnapshotConfiguration EbsSnapshotConfiguration' :: Maybe [Text] -> Maybe Text -> Maybe [Text] -> EbsSnapshotConfiguration -- | The groups that have access to the Amazon EBS volume snapshot. If the -- value all is specified, then the Amazon EBS volume snapshot -- is public. -- -- [$sel:groups:EbsSnapshotConfiguration'] :: EbsSnapshotConfiguration -> Maybe [Text] -- | The KMS key identifier for an encrypted Amazon EBS volume snapshot. -- The KMS key identifier is the key ARN, key ID, alias ARN, or alias -- name for the KMS key. -- -- [$sel:kmsKeyId:EbsSnapshotConfiguration'] :: EbsSnapshotConfiguration -> Maybe Text -- | The IDs of the Amazon Web Services accounts that have access to the -- Amazon EBS volume snapshot. -- -- [$sel:userIds:EbsSnapshotConfiguration'] :: EbsSnapshotConfiguration -> Maybe [Text] -- | Create a value of EbsSnapshotConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:groups:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_groups - The groups that have access -- to the Amazon EBS volume snapshot. If the value all is -- specified, then the Amazon EBS volume snapshot is public. -- -- -- -- $sel:kmsKeyId:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_kmsKeyId - The KMS key identifier for -- an encrypted Amazon EBS volume snapshot. The KMS key identifier is the -- key ARN, key ID, alias ARN, or alias name for the KMS key. -- -- -- -- $sel:userIds:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_userIds - The IDs of the Amazon Web -- Services accounts that have access to the Amazon EBS volume snapshot. -- -- newEbsSnapshotConfiguration :: EbsSnapshotConfiguration -- | The groups that have access to the Amazon EBS volume snapshot. If the -- value all is specified, then the Amazon EBS volume snapshot -- is public. -- -- ebsSnapshotConfiguration_groups :: Lens' EbsSnapshotConfiguration (Maybe [Text]) -- | The KMS key identifier for an encrypted Amazon EBS volume snapshot. -- The KMS key identifier is the key ARN, key ID, alias ARN, or alias -- name for the KMS key. -- -- ebsSnapshotConfiguration_kmsKeyId :: Lens' EbsSnapshotConfiguration (Maybe Text) -- | The IDs of the Amazon Web Services accounts that have access to the -- Amazon EBS volume snapshot. -- -- ebsSnapshotConfiguration_userIds :: Lens' EbsSnapshotConfiguration (Maybe [Text]) -- | The proposed access control configuration for an Amazon ECR -- repository. You can propose a configuration for a new Amazon ECR -- repository or an existing Amazon ECR repository that you own by -- specifying the Amazon ECR policy. For more information, see -- Repository. -- -- -- -- See: newEcrRepositoryConfiguration smart constructor. data EcrRepositoryConfiguration EcrRepositoryConfiguration' :: Maybe Text -> EcrRepositoryConfiguration -- | The JSON repository policy text to apply to the Amazon ECR repository. -- For more information, see Private repository policy examples in -- the Amazon ECR User Guide. [$sel:repositoryPolicy:EcrRepositoryConfiguration'] :: EcrRepositoryConfiguration -> Maybe Text -- | Create a value of EcrRepositoryConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:repositoryPolicy:EcrRepositoryConfiguration', -- ecrRepositoryConfiguration_repositoryPolicy - The JSON -- repository policy text to apply to the Amazon ECR repository. For more -- information, see Private repository policy examples in the -- Amazon ECR User Guide. newEcrRepositoryConfiguration :: EcrRepositoryConfiguration -- | The JSON repository policy text to apply to the Amazon ECR repository. -- For more information, see Private repository policy examples in -- the Amazon ECR User Guide. ecrRepositoryConfiguration_repositoryPolicy :: Lens' EcrRepositoryConfiguration (Maybe Text) -- | The proposed access control configuration for an Amazon EFS file -- system. You can propose a configuration for a new Amazon EFS file -- system or an existing Amazon EFS file system that you own by -- specifying the Amazon EFS policy. For more information, see Using -- file systems in Amazon EFS. -- -- -- -- See: newEfsFileSystemConfiguration smart constructor. data EfsFileSystemConfiguration EfsFileSystemConfiguration' :: Maybe Text -> EfsFileSystemConfiguration -- | The JSON policy definition to apply to the Amazon EFS file system. For -- more information on the elements that make up a file system policy, -- see Amazon EFS Resource-based policies. [$sel:fileSystemPolicy:EfsFileSystemConfiguration'] :: EfsFileSystemConfiguration -> Maybe Text -- | Create a value of EfsFileSystemConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:fileSystemPolicy:EfsFileSystemConfiguration', -- efsFileSystemConfiguration_fileSystemPolicy - The JSON policy -- definition to apply to the Amazon EFS file system. For more -- information on the elements that make up a file system policy, see -- Amazon EFS Resource-based policies. newEfsFileSystemConfiguration :: EfsFileSystemConfiguration -- | The JSON policy definition to apply to the Amazon EFS file system. For -- more information on the elements that make up a file system policy, -- see Amazon EFS Resource-based policies. efsFileSystemConfiguration_fileSystemPolicy :: Lens' EfsFileSystemConfiguration (Maybe Text) -- | Contains information about a finding. -- -- See: newFinding smart constructor. data Finding Finding' :: Maybe [Text] -> Maybe Text -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> HashMap Text Text -> ISO8601 -> ISO8601 -> ISO8601 -> FindingStatus -> Text -> Finding -- | The action in the analyzed policy statement that an external principal -- has permission to use. [$sel:action:Finding'] :: Finding -> Maybe [Text] -- | An error. [$sel:error:Finding'] :: Finding -> Maybe Text -- | Indicates whether the policy that generated the finding allows public -- access to the resource. [$sel:isPublic:Finding'] :: Finding -> Maybe Bool -- | The external principal that access to a resource within the zone of -- trust. [$sel:principal:Finding'] :: Finding -> Maybe (HashMap Text Text) -- | The resource that an external principal has access to. [$sel:resource:Finding'] :: Finding -> Maybe Text -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. [$sel:sources:Finding'] :: Finding -> Maybe [FindingSource] -- | The ID of the finding. [$sel:id:Finding'] :: Finding -> Text -- | The type of the resource identified in the finding. [$sel:resourceType:Finding'] :: Finding -> ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. [$sel:condition:Finding'] :: Finding -> HashMap Text Text -- | The time at which the finding was generated. [$sel:createdAt:Finding'] :: Finding -> ISO8601 -- | The time at which the resource was analyzed. [$sel:analyzedAt:Finding'] :: Finding -> ISO8601 -- | The time at which the finding was updated. [$sel:updatedAt:Finding'] :: Finding -> ISO8601 -- | The current status of the finding. [$sel:status:Finding'] :: Finding -> FindingStatus -- | The Amazon Web Services account ID that owns the resource. [$sel:resourceOwnerAccount:Finding'] :: Finding -> Text -- | Create a value of Finding with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:Finding', finding_action - The action in the -- analyzed policy statement that an external principal has permission to -- use. -- -- $sel:error:Finding', finding_error - An error. -- -- $sel:isPublic:Finding', finding_isPublic - Indicates -- whether the policy that generated the finding allows public access to -- the resource. -- -- $sel:principal:Finding', finding_principal - The -- external principal that access to a resource within the zone of trust. -- -- $sel:resource:Finding', finding_resource - The resource -- that an external principal has access to. -- -- $sel:sources:Finding', finding_sources - The sources of -- the finding. This indicates how the access that generated the finding -- is granted. It is populated for Amazon S3 bucket findings. -- -- $sel:id:Finding', finding_id - The ID of the finding. -- -- $sel:resourceType:Finding', finding_resourceType - The -- type of the resource identified in the finding. -- -- $sel:condition:Finding', finding_condition - The -- condition in the analyzed policy statement that resulted in a finding. -- -- $sel:createdAt:Finding', finding_createdAt - The time at -- which the finding was generated. -- -- $sel:analyzedAt:Finding', finding_analyzedAt - The time -- at which the resource was analyzed. -- -- $sel:updatedAt:Finding', finding_updatedAt - The time at -- which the finding was updated. -- -- $sel:status:Finding', finding_status - The current -- status of the finding. -- -- $sel:resourceOwnerAccount:Finding', -- finding_resourceOwnerAccount - The Amazon Web Services account -- ID that owns the resource. newFinding :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> FindingStatus -> Text -> Finding -- | The action in the analyzed policy statement that an external principal -- has permission to use. finding_action :: Lens' Finding (Maybe [Text]) -- | An error. finding_error :: Lens' Finding (Maybe Text) -- | Indicates whether the policy that generated the finding allows public -- access to the resource. finding_isPublic :: Lens' Finding (Maybe Bool) -- | The external principal that access to a resource within the zone of -- trust. finding_principal :: Lens' Finding (Maybe (HashMap Text Text)) -- | The resource that an external principal has access to. finding_resource :: Lens' Finding (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. finding_sources :: Lens' Finding (Maybe [FindingSource]) -- | The ID of the finding. finding_id :: Lens' Finding Text -- | The type of the resource identified in the finding. finding_resourceType :: Lens' Finding ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. finding_condition :: Lens' Finding (HashMap Text Text) -- | The time at which the finding was generated. finding_createdAt :: Lens' Finding UTCTime -- | The time at which the resource was analyzed. finding_analyzedAt :: Lens' Finding UTCTime -- | The time at which the finding was updated. finding_updatedAt :: Lens' Finding UTCTime -- | The current status of the finding. finding_status :: Lens' Finding FindingStatus -- | The Amazon Web Services account ID that owns the resource. finding_resourceOwnerAccount :: Lens' Finding Text -- | The source of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. -- -- See: newFindingSource smart constructor. data FindingSource FindingSource' :: Maybe FindingSourceDetail -> FindingSourceType -> FindingSource -- | Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. [$sel:detail:FindingSource'] :: FindingSource -> Maybe FindingSourceDetail -- | Indicates the type of access that generated the finding. [$sel:type':FindingSource'] :: FindingSource -> FindingSourceType -- | Create a value of FindingSource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:detail:FindingSource', findingSource_detail - -- Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. -- -- $sel:type':FindingSource', findingSource_type - -- Indicates the type of access that generated the finding. newFindingSource :: FindingSourceType -> FindingSource -- | Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. findingSource_detail :: Lens' FindingSource (Maybe FindingSourceDetail) -- | Indicates the type of access that generated the finding. findingSource_type :: Lens' FindingSource FindingSourceType -- | Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. -- -- See: newFindingSourceDetail smart constructor. data FindingSourceDetail FindingSourceDetail' :: Maybe Text -> Maybe Text -> FindingSourceDetail -- | The account of the cross-account access point that generated the -- finding. [$sel:accessPointAccount:FindingSourceDetail'] :: FindingSourceDetail -> Maybe Text -- | The ARN of the access point that generated the finding. The ARN format -- depends on whether the ARN represents an access point or a -- multi-region access point. [$sel:accessPointArn:FindingSourceDetail'] :: FindingSourceDetail -> Maybe Text -- | Create a value of FindingSourceDetail with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPointAccount:FindingSourceDetail', -- findingSourceDetail_accessPointAccount - The account of the -- cross-account access point that generated the finding. -- -- $sel:accessPointArn:FindingSourceDetail', -- findingSourceDetail_accessPointArn - The ARN of the access -- point that generated the finding. The ARN format depends on whether -- the ARN represents an access point or a multi-region access point. newFindingSourceDetail :: FindingSourceDetail -- | The account of the cross-account access point that generated the -- finding. findingSourceDetail_accessPointAccount :: Lens' FindingSourceDetail (Maybe Text) -- | The ARN of the access point that generated the finding. The ARN format -- depends on whether the ARN represents an access point or a -- multi-region access point. findingSourceDetail_accessPointArn :: Lens' FindingSourceDetail (Maybe Text) -- | Contains information about a finding. -- -- See: newFindingSummary smart constructor. data FindingSummary FindingSummary' :: Maybe [Text] -> Maybe Text -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> HashMap Text Text -> ISO8601 -> ISO8601 -> ISO8601 -> FindingStatus -> Text -> FindingSummary -- | The action in the analyzed policy statement that an external principal -- has permission to use. [$sel:action:FindingSummary'] :: FindingSummary -> Maybe [Text] -- | The error that resulted in an Error finding. [$sel:error:FindingSummary'] :: FindingSummary -> Maybe Text -- | Indicates whether the finding reports a resource that has a policy -- that allows public access. [$sel:isPublic:FindingSummary'] :: FindingSummary -> Maybe Bool -- | The external principal that has access to a resource within the zone -- of trust. [$sel:principal:FindingSummary'] :: FindingSummary -> Maybe (HashMap Text Text) -- | The resource that the external principal has access to. [$sel:resource:FindingSummary'] :: FindingSummary -> Maybe Text -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. [$sel:sources:FindingSummary'] :: FindingSummary -> Maybe [FindingSource] -- | The ID of the finding. [$sel:id:FindingSummary'] :: FindingSummary -> Text -- | The type of the resource that the external principal has access to. [$sel:resourceType:FindingSummary'] :: FindingSummary -> ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. [$sel:condition:FindingSummary'] :: FindingSummary -> HashMap Text Text -- | The time at which the finding was created. [$sel:createdAt:FindingSummary'] :: FindingSummary -> ISO8601 -- | The time at which the resource-based policy that generated the finding -- was analyzed. [$sel:analyzedAt:FindingSummary'] :: FindingSummary -> ISO8601 -- | The time at which the finding was most recently updated. [$sel:updatedAt:FindingSummary'] :: FindingSummary -> ISO8601 -- | The status of the finding. [$sel:status:FindingSummary'] :: FindingSummary -> FindingStatus -- | The Amazon Web Services account ID that owns the resource. [$sel:resourceOwnerAccount:FindingSummary'] :: FindingSummary -> Text -- | Create a value of FindingSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:FindingSummary', findingSummary_action - The -- action in the analyzed policy statement that an external principal has -- permission to use. -- -- $sel:error:FindingSummary', findingSummary_error - The -- error that resulted in an Error finding. -- -- $sel:isPublic:FindingSummary', findingSummary_isPublic - -- Indicates whether the finding reports a resource that has a policy -- that allows public access. -- -- $sel:principal:FindingSummary', findingSummary_principal -- - The external principal that has access to a resource within the zone -- of trust. -- -- $sel:resource:FindingSummary', findingSummary_resource - -- The resource that the external principal has access to. -- -- $sel:sources:FindingSummary', findingSummary_sources - -- The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. -- -- $sel:id:FindingSummary', findingSummary_id - The ID of -- the finding. -- -- $sel:resourceType:FindingSummary', -- findingSummary_resourceType - The type of the resource that the -- external principal has access to. -- -- $sel:condition:FindingSummary', findingSummary_condition -- - The condition in the analyzed policy statement that resulted in a -- finding. -- -- $sel:createdAt:FindingSummary', findingSummary_createdAt -- - The time at which the finding was created. -- -- $sel:analyzedAt:FindingSummary', -- findingSummary_analyzedAt - The time at which the -- resource-based policy that generated the finding was analyzed. -- -- $sel:updatedAt:FindingSummary', findingSummary_updatedAt -- - The time at which the finding was most recently updated. -- -- $sel:status:FindingSummary', findingSummary_status - The -- status of the finding. -- -- $sel:resourceOwnerAccount:FindingSummary', -- findingSummary_resourceOwnerAccount - The Amazon Web Services -- account ID that owns the resource. newFindingSummary :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> FindingStatus -> Text -> FindingSummary -- | The action in the analyzed policy statement that an external principal -- has permission to use. findingSummary_action :: Lens' FindingSummary (Maybe [Text]) -- | The error that resulted in an Error finding. findingSummary_error :: Lens' FindingSummary (Maybe Text) -- | Indicates whether the finding reports a resource that has a policy -- that allows public access. findingSummary_isPublic :: Lens' FindingSummary (Maybe Bool) -- | The external principal that has access to a resource within the zone -- of trust. findingSummary_principal :: Lens' FindingSummary (Maybe (HashMap Text Text)) -- | The resource that the external principal has access to. findingSummary_resource :: Lens' FindingSummary (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. findingSummary_sources :: Lens' FindingSummary (Maybe [FindingSource]) -- | The ID of the finding. findingSummary_id :: Lens' FindingSummary Text -- | The type of the resource that the external principal has access to. findingSummary_resourceType :: Lens' FindingSummary ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. findingSummary_condition :: Lens' FindingSummary (HashMap Text Text) -- | The time at which the finding was created. findingSummary_createdAt :: Lens' FindingSummary UTCTime -- | The time at which the resource-based policy that generated the finding -- was analyzed. findingSummary_analyzedAt :: Lens' FindingSummary UTCTime -- | The time at which the finding was most recently updated. findingSummary_updatedAt :: Lens' FindingSummary UTCTime -- | The status of the finding. findingSummary_status :: Lens' FindingSummary FindingStatus -- | The Amazon Web Services account ID that owns the resource. findingSummary_resourceOwnerAccount :: Lens' FindingSummary Text -- | Contains the text for the generated policy. -- -- See: newGeneratedPolicy smart constructor. data GeneratedPolicy GeneratedPolicy' :: Text -> GeneratedPolicy -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. [$sel:policy:GeneratedPolicy'] :: GeneratedPolicy -> Text -- | Create a value of GeneratedPolicy with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:policy:GeneratedPolicy', generatedPolicy_policy - -- The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. newGeneratedPolicy :: Text -> GeneratedPolicy -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. generatedPolicy_policy :: Lens' GeneratedPolicy Text -- | Contains the generated policy details. -- -- See: newGeneratedPolicyProperties smart constructor. data GeneratedPolicyProperties GeneratedPolicyProperties' :: Maybe CloudTrailProperties -> Maybe Bool -> Text -> GeneratedPolicyProperties -- | Lists details about the Trail used to generated policy. [$sel:cloudTrailProperties:GeneratedPolicyProperties'] :: GeneratedPolicyProperties -> Maybe CloudTrailProperties -- | This value is set to true if the generated policy contains -- all possible actions for a service that IAM Access Analyzer identified -- from the CloudTrail trail that you specified, and false -- otherwise. [$sel:isComplete:GeneratedPolicyProperties'] :: GeneratedPolicyProperties -> Maybe Bool -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. [$sel:principalArn:GeneratedPolicyProperties'] :: GeneratedPolicyProperties -> Text -- | Create a value of GeneratedPolicyProperties with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:cloudTrailProperties:GeneratedPolicyProperties', -- generatedPolicyProperties_cloudTrailProperties - Lists details -- about the Trail used to generated policy. -- -- $sel:isComplete:GeneratedPolicyProperties', -- generatedPolicyProperties_isComplete - This value is set to -- true if the generated policy contains all possible actions -- for a service that IAM Access Analyzer identified from the CloudTrail -- trail that you specified, and false otherwise. -- -- $sel:principalArn:GeneratedPolicyProperties', -- generatedPolicyProperties_principalArn - The ARN of the IAM -- entity (user or role) for which you are generating a policy. newGeneratedPolicyProperties :: Text -> GeneratedPolicyProperties -- | Lists details about the Trail used to generated policy. generatedPolicyProperties_cloudTrailProperties :: Lens' GeneratedPolicyProperties (Maybe CloudTrailProperties) -- | This value is set to true if the generated policy contains -- all possible actions for a service that IAM Access Analyzer identified -- from the CloudTrail trail that you specified, and false -- otherwise. generatedPolicyProperties_isComplete :: Lens' GeneratedPolicyProperties (Maybe Bool) -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. generatedPolicyProperties_principalArn :: Lens' GeneratedPolicyProperties Text -- | Contains the text for the generated policy and its details. -- -- See: newGeneratedPolicyResult smart constructor. data GeneratedPolicyResult GeneratedPolicyResult' :: Maybe [GeneratedPolicy] -> GeneratedPolicyProperties -> GeneratedPolicyResult -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. [$sel:generatedPolicies:GeneratedPolicyResult'] :: GeneratedPolicyResult -> Maybe [GeneratedPolicy] -- | A GeneratedPolicyProperties object that contains properties -- of the generated policy. [$sel:properties:GeneratedPolicyResult'] :: GeneratedPolicyResult -> GeneratedPolicyProperties -- | Create a value of GeneratedPolicyResult with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:generatedPolicies:GeneratedPolicyResult', -- generatedPolicyResult_generatedPolicies - The text to use as -- the content for the new policy. The policy is created using the -- CreatePolicy action. -- -- $sel:properties:GeneratedPolicyResult', -- generatedPolicyResult_properties - A -- GeneratedPolicyProperties object that contains properties of -- the generated policy. newGeneratedPolicyResult :: GeneratedPolicyProperties -> GeneratedPolicyResult -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. generatedPolicyResult_generatedPolicies :: Lens' GeneratedPolicyResult (Maybe [GeneratedPolicy]) -- | A GeneratedPolicyProperties object that contains properties -- of the generated policy. generatedPolicyResult_properties :: Lens' GeneratedPolicyResult GeneratedPolicyProperties -- | The proposed access control configuration for an IAM role. You can -- propose a configuration for a new IAM role or an existing IAM role -- that you own by specifying the trust policy. If the configuration is -- for a new IAM role, you must specify the trust policy. If the -- configuration is for an existing IAM role that you own and you do not -- propose the trust policy, the access preview uses the existing trust -- policy for the role. The proposed trust policy cannot be an empty -- string. For more information about role trust policy limits, see -- IAM and STS quotas. -- -- See: newIamRoleConfiguration smart constructor. data IamRoleConfiguration IamRoleConfiguration' :: Maybe Text -> IamRoleConfiguration -- | The proposed trust policy for the IAM role. [$sel:trustPolicy:IamRoleConfiguration'] :: IamRoleConfiguration -> Maybe Text -- | Create a value of IamRoleConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:trustPolicy:IamRoleConfiguration', -- iamRoleConfiguration_trustPolicy - The proposed trust policy -- for the IAM role. newIamRoleConfiguration :: IamRoleConfiguration -- | The proposed trust policy for the IAM role. iamRoleConfiguration_trustPolicy :: Lens' IamRoleConfiguration (Maybe Text) -- | An criterion statement in an archive rule. Each archive rule may have -- multiple criteria. -- -- See: newInlineArchiveRule smart constructor. data InlineArchiveRule InlineArchiveRule' :: Text -> HashMap Text Criterion -> InlineArchiveRule -- | The name of the rule. [$sel:ruleName:InlineArchiveRule'] :: InlineArchiveRule -> Text -- | The condition and values for a criterion. [$sel:filter':InlineArchiveRule'] :: InlineArchiveRule -> HashMap Text Criterion -- | Create a value of InlineArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ruleName:InlineArchiveRule', -- inlineArchiveRule_ruleName - The name of the rule. -- -- $sel:filter':InlineArchiveRule', -- inlineArchiveRule_filter - The condition and values for a -- criterion. newInlineArchiveRule :: Text -> InlineArchiveRule -- | The name of the rule. inlineArchiveRule_ruleName :: Lens' InlineArchiveRule Text -- | The condition and values for a criterion. inlineArchiveRule_filter :: Lens' InlineArchiveRule (HashMap Text Criterion) -- | This configuration sets the network origin for the Amazon S3 access -- point or multi-region access point to Internet. -- -- See: newInternetConfiguration smart constructor. data InternetConfiguration InternetConfiguration' :: InternetConfiguration -- | Create a value of InternetConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newInternetConfiguration :: InternetConfiguration -- | Contains details about the policy generation request. -- -- See: newJobDetails smart constructor. data JobDetails JobDetails' :: Maybe ISO8601 -> Maybe JobError -> Text -> JobStatus -> ISO8601 -> JobDetails -- | A timestamp of when the job was completed. [$sel:completedOn:JobDetails'] :: JobDetails -> Maybe ISO8601 -- | The job error for the policy generation request. [$sel:jobError:JobDetails'] :: JobDetails -> Maybe JobError -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. [$sel:jobId:JobDetails'] :: JobDetails -> Text -- | The status of the job request. [$sel:status:JobDetails'] :: JobDetails -> JobStatus -- | A timestamp of when the job was started. [$sel:startedOn:JobDetails'] :: JobDetails -> ISO8601 -- | Create a value of JobDetails with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:completedOn:JobDetails', jobDetails_completedOn - A -- timestamp of when the job was completed. -- -- $sel:jobError:JobDetails', jobDetails_jobError - The job -- error for the policy generation request. -- -- $sel:jobId:JobDetails', jobDetails_jobId - The -- JobId that is returned by the StartPolicyGeneration -- operation. The JobId can be used with -- GetGeneratedPolicy to retrieve the generated policies or used -- with CancelPolicyGeneration to cancel the policy generation -- request. -- -- $sel:status:JobDetails', jobDetails_status - The status -- of the job request. -- -- $sel:startedOn:JobDetails', jobDetails_startedOn - A -- timestamp of when the job was started. newJobDetails :: Text -> JobStatus -> UTCTime -> JobDetails -- | A timestamp of when the job was completed. jobDetails_completedOn :: Lens' JobDetails (Maybe UTCTime) -- | The job error for the policy generation request. jobDetails_jobError :: Lens' JobDetails (Maybe JobError) -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. jobDetails_jobId :: Lens' JobDetails Text -- | The status of the job request. jobDetails_status :: Lens' JobDetails JobStatus -- | A timestamp of when the job was started. jobDetails_startedOn :: Lens' JobDetails UTCTime -- | Contains the details about the policy generation error. -- -- See: newJobError smart constructor. data JobError JobError' :: JobErrorCode -> Text -> JobError -- | The job error code. [$sel:code:JobError'] :: JobError -> JobErrorCode -- | Specific information about the error. For example, which service quota -- was exceeded or which resource was not found. [$sel:message:JobError'] :: JobError -> Text -- | Create a value of JobError with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:JobError', jobError_code - The job error code. -- -- $sel:message:JobError', jobError_message - Specific -- information about the error. For example, which service quota was -- exceeded or which resource was not found. newJobError :: JobErrorCode -> Text -> JobError -- | The job error code. jobError_code :: Lens' JobError JobErrorCode -- | Specific information about the error. For example, which service quota -- was exceeded or which resource was not found. jobError_message :: Lens' JobError Text -- | A proposed grant configuration for a KMS key. For more information, -- see CreateGrant. -- -- See: newKmsGrantConfiguration smart constructor. data KmsGrantConfiguration KmsGrantConfiguration' :: Maybe KmsGrantConstraints -> Maybe Text -> [KmsGrantOperation] -> Text -> Text -> KmsGrantConfiguration -- | Use this structure to propose allowing cryptographic operations -- in the grant only when the operation request includes the specified -- encryption context. [$sel:constraints:KmsGrantConfiguration'] :: KmsGrantConfiguration -> Maybe KmsGrantConstraints -- | The principal that is given permission to retire the grant by using -- RetireGrant operation. [$sel:retiringPrincipal:KmsGrantConfiguration'] :: KmsGrantConfiguration -> Maybe Text -- | A list of operations that the grant permits. [$sel:operations:KmsGrantConfiguration'] :: KmsGrantConfiguration -> [KmsGrantOperation] -- | The principal that is given permission to perform the operations that -- the grant permits. [$sel:granteePrincipal:KmsGrantConfiguration'] :: KmsGrantConfiguration -> Text -- | The Amazon Web Services account under which the grant was issued. The -- account is used to propose KMS grants issued by accounts other than -- the owner of the key. [$sel:issuingAccount:KmsGrantConfiguration'] :: KmsGrantConfiguration -> Text -- | Create a value of KmsGrantConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:constraints:KmsGrantConfiguration', -- kmsGrantConfiguration_constraints - Use this structure to -- propose allowing cryptographic operations in the grant only -- when the operation request includes the specified encryption -- context. -- -- $sel:retiringPrincipal:KmsGrantConfiguration', -- kmsGrantConfiguration_retiringPrincipal - The principal that is -- given permission to retire the grant by using RetireGrant -- operation. -- -- $sel:operations:KmsGrantConfiguration', -- kmsGrantConfiguration_operations - A list of operations that -- the grant permits. -- -- $sel:granteePrincipal:KmsGrantConfiguration', -- kmsGrantConfiguration_granteePrincipal - The principal that is -- given permission to perform the operations that the grant permits. -- -- $sel:issuingAccount:KmsGrantConfiguration', -- kmsGrantConfiguration_issuingAccount - The Amazon Web Services -- account under which the grant was issued. The account is used to -- propose KMS grants issued by accounts other than the owner of the key. newKmsGrantConfiguration :: Text -> Text -> KmsGrantConfiguration -- | Use this structure to propose allowing cryptographic operations -- in the grant only when the operation request includes the specified -- encryption context. kmsGrantConfiguration_constraints :: Lens' KmsGrantConfiguration (Maybe KmsGrantConstraints) -- | The principal that is given permission to retire the grant by using -- RetireGrant operation. kmsGrantConfiguration_retiringPrincipal :: Lens' KmsGrantConfiguration (Maybe Text) -- | A list of operations that the grant permits. kmsGrantConfiguration_operations :: Lens' KmsGrantConfiguration [KmsGrantOperation] -- | The principal that is given permission to perform the operations that -- the grant permits. kmsGrantConfiguration_granteePrincipal :: Lens' KmsGrantConfiguration Text -- | The Amazon Web Services account under which the grant was issued. The -- account is used to propose KMS grants issued by accounts other than -- the owner of the key. kmsGrantConfiguration_issuingAccount :: Lens' KmsGrantConfiguration Text -- | Use this structure to propose allowing cryptographic operations -- in the grant only when the operation request includes the specified -- encryption context. You can specify only one type of encryption -- context. An empty map is treated as not specified. For more -- information, see GrantConstraints. -- -- See: newKmsGrantConstraints smart constructor. data KmsGrantConstraints KmsGrantConstraints' :: Maybe (HashMap Text Text) -> Maybe (HashMap Text Text) -> KmsGrantConstraints -- | A list of key-value pairs that must match the encryption context in -- the cryptographic operation request. The grant allows the -- operation only when the encryption context in the request is the same -- as the encryption context specified in this constraint. [$sel:encryptionContextEquals:KmsGrantConstraints'] :: KmsGrantConstraints -> Maybe (HashMap Text Text) -- | A list of key-value pairs that must be included in the encryption -- context of the cryptographic operation request. The grant -- allows the cryptographic operation only when the encryption context in -- the request includes the key-value pairs specified in this constraint, -- although it can include additional key-value pairs. [$sel:encryptionContextSubset:KmsGrantConstraints'] :: KmsGrantConstraints -> Maybe (HashMap Text Text) -- | Create a value of KmsGrantConstraints with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:encryptionContextEquals:KmsGrantConstraints', -- kmsGrantConstraints_encryptionContextEquals - A list of -- key-value pairs that must match the encryption context in the -- cryptographic operation request. The grant allows the operation -- only when the encryption context in the request is the same as the -- encryption context specified in this constraint. -- -- $sel:encryptionContextSubset:KmsGrantConstraints', -- kmsGrantConstraints_encryptionContextSubset - A list of -- key-value pairs that must be included in the encryption context of the -- cryptographic operation request. The grant allows the -- cryptographic operation only when the encryption context in the -- request includes the key-value pairs specified in this constraint, -- although it can include additional key-value pairs. newKmsGrantConstraints :: KmsGrantConstraints -- | A list of key-value pairs that must match the encryption context in -- the cryptographic operation request. The grant allows the -- operation only when the encryption context in the request is the same -- as the encryption context specified in this constraint. kmsGrantConstraints_encryptionContextEquals :: Lens' KmsGrantConstraints (Maybe (HashMap Text Text)) -- | A list of key-value pairs that must be included in the encryption -- context of the cryptographic operation request. The grant -- allows the cryptographic operation only when the encryption context in -- the request includes the key-value pairs specified in this constraint, -- although it can include additional key-value pairs. kmsGrantConstraints_encryptionContextSubset :: Lens' KmsGrantConstraints (Maybe (HashMap Text Text)) -- | Proposed access control configuration for a KMS key. You can propose a -- configuration for a new KMS key or an existing KMS key that you own by -- specifying the key policy and KMS grant configuration. If the -- configuration is for an existing key and you do not specify the key -- policy, the access preview uses the existing policy for the key. If -- the access preview is for a new resource and you do not specify the -- key policy, then the access preview uses the default key policy. The -- proposed key policy cannot be an empty string. For more information, -- see Default key policy. For more information about key policy -- limits, see Resource quotas. -- -- See: newKmsKeyConfiguration smart constructor. data KmsKeyConfiguration KmsKeyConfiguration' :: Maybe [KmsGrantConfiguration] -> Maybe (HashMap Text Text) -> KmsKeyConfiguration -- | A list of proposed grant configurations for the KMS key. If the -- proposed grant configuration is for an existing key, the access -- preview uses the proposed list of grant configurations in place of the -- existing grants. Otherwise, the access preview uses the existing -- grants for the key. [$sel:grants:KmsKeyConfiguration'] :: KmsKeyConfiguration -> Maybe [KmsGrantConfiguration] -- | Resource policy configuration for the KMS key. The only valid value -- for the name of the key policy is default. For more -- information, see Default key policy. [$sel:keyPolicies:KmsKeyConfiguration'] :: KmsKeyConfiguration -> Maybe (HashMap Text Text) -- | Create a value of KmsKeyConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:grants:KmsKeyConfiguration', -- kmsKeyConfiguration_grants - A list of proposed grant -- configurations for the KMS key. If the proposed grant configuration is -- for an existing key, the access preview uses the proposed list of -- grant configurations in place of the existing grants. Otherwise, the -- access preview uses the existing grants for the key. -- -- $sel:keyPolicies:KmsKeyConfiguration', -- kmsKeyConfiguration_keyPolicies - Resource policy configuration -- for the KMS key. The only valid value for the name of the key policy -- is default. For more information, see Default key -- policy. newKmsKeyConfiguration :: KmsKeyConfiguration -- | A list of proposed grant configurations for the KMS key. If the -- proposed grant configuration is for an existing key, the access -- preview uses the proposed list of grant configurations in place of the -- existing grants. Otherwise, the access preview uses the existing -- grants for the key. kmsKeyConfiguration_grants :: Lens' KmsKeyConfiguration (Maybe [KmsGrantConfiguration]) -- | Resource policy configuration for the KMS key. The only valid value -- for the name of the key policy is default. For more -- information, see Default key policy. kmsKeyConfiguration_keyPolicies :: Lens' KmsKeyConfiguration (Maybe (HashMap Text Text)) -- | A location in a policy that is represented as a path through the JSON -- representation and a corresponding span. -- -- See: newLocation smart constructor. data Location Location' :: [PathElement] -> Span -> Location -- | A path in a policy, represented as a sequence of path elements. [$sel:path:Location'] :: Location -> [PathElement] -- | A span in a policy. [$sel:span:Location'] :: Location -> Span -- | Create a value of Location with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:path:Location', location_path - A path in a policy, -- represented as a sequence of path elements. -- -- $sel:span:Location', location_span - A span in a policy. newLocation :: Span -> Location -- | A path in a policy, represented as a sequence of path elements. location_path :: Lens' Location [PathElement] -- | A span in a policy. location_span :: Lens' Location Span -- | The proposed InternetConfiguration or -- VpcConfiguration to apply to the Amazon S3 access point. -- VpcConfiguration does not apply to multi-region access -- points. You can make the access point accessible from the internet, or -- you can specify that all requests made through that access point must -- originate from a specific virtual private cloud (VPC). You can specify -- only one type of network configuration. For more information, see -- Creating access points. -- -- See: newNetworkOriginConfiguration smart constructor. data NetworkOriginConfiguration NetworkOriginConfiguration' :: Maybe InternetConfiguration -> Maybe VpcConfiguration -> NetworkOriginConfiguration -- | The configuration for the Amazon S3 access point or multi-region -- access point with an Internet origin. [$sel:internetConfiguration:NetworkOriginConfiguration'] :: NetworkOriginConfiguration -> Maybe InternetConfiguration [$sel:vpcConfiguration:NetworkOriginConfiguration'] :: NetworkOriginConfiguration -> Maybe VpcConfiguration -- | Create a value of NetworkOriginConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:internetConfiguration:NetworkOriginConfiguration', -- networkOriginConfiguration_internetConfiguration - The -- configuration for the Amazon S3 access point or multi-region access -- point with an Internet origin. -- -- $sel:vpcConfiguration:NetworkOriginConfiguration', -- networkOriginConfiguration_vpcConfiguration - Undocumented -- member. newNetworkOriginConfiguration :: NetworkOriginConfiguration -- | The configuration for the Amazon S3 access point or multi-region -- access point with an Internet origin. networkOriginConfiguration_internetConfiguration :: Lens' NetworkOriginConfiguration (Maybe InternetConfiguration) -- | Undocumented member. networkOriginConfiguration_vpcConfiguration :: Lens' NetworkOriginConfiguration (Maybe VpcConfiguration) -- | A single element in a path through the JSON representation of a -- policy. -- -- See: newPathElement smart constructor. data PathElement PathElement' :: Maybe Int -> Maybe Text -> Maybe Substring -> Maybe Text -> PathElement -- | Refers to an index in a JSON array. [$sel:index:PathElement'] :: PathElement -> Maybe Int -- | Refers to a key in a JSON object. [$sel:key:PathElement'] :: PathElement -> Maybe Text -- | Refers to a substring of a literal string in a JSON object. [$sel:substring:PathElement'] :: PathElement -> Maybe Substring -- | Refers to the value associated with a given key in a JSON object. [$sel:value:PathElement'] :: PathElement -> Maybe Text -- | Create a value of PathElement with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:index:PathElement', pathElement_index - Refers to -- an index in a JSON array. -- -- $sel:key:PathElement', pathElement_key - Refers to a key -- in a JSON object. -- -- $sel:substring:PathElement', pathElement_substring - -- Refers to a substring of a literal string in a JSON object. -- -- $sel:value:PathElement', pathElement_value - Refers to -- the value associated with a given key in a JSON object. newPathElement :: PathElement -- | Refers to an index in a JSON array. pathElement_index :: Lens' PathElement (Maybe Int) -- | Refers to a key in a JSON object. pathElement_key :: Lens' PathElement (Maybe Text) -- | Refers to a substring of a literal string in a JSON object. pathElement_substring :: Lens' PathElement (Maybe Substring) -- | Refers to the value associated with a given key in a JSON object. pathElement_value :: Lens' PathElement (Maybe Text) -- | Contains details about the policy generation status and properties. -- -- See: newPolicyGeneration smart constructor. data PolicyGeneration PolicyGeneration' :: Maybe ISO8601 -> Text -> Text -> JobStatus -> ISO8601 -> PolicyGeneration -- | A timestamp of when the policy generation was completed. [$sel:completedOn:PolicyGeneration'] :: PolicyGeneration -> Maybe ISO8601 -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. [$sel:jobId:PolicyGeneration'] :: PolicyGeneration -> Text -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. [$sel:principalArn:PolicyGeneration'] :: PolicyGeneration -> Text -- | The status of the policy generation request. [$sel:status:PolicyGeneration'] :: PolicyGeneration -> JobStatus -- | A timestamp of when the policy generation started. [$sel:startedOn:PolicyGeneration'] :: PolicyGeneration -> ISO8601 -- | Create a value of PolicyGeneration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:completedOn:PolicyGeneration', -- policyGeneration_completedOn - A timestamp of when the policy -- generation was completed. -- -- $sel:jobId:PolicyGeneration', policyGeneration_jobId - -- The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. -- -- $sel:principalArn:PolicyGeneration', -- policyGeneration_principalArn - The ARN of the IAM entity (user -- or role) for which you are generating a policy. -- -- $sel:status:PolicyGeneration', policyGeneration_status - -- The status of the policy generation request. -- -- $sel:startedOn:PolicyGeneration', -- policyGeneration_startedOn - A timestamp of when the policy -- generation started. newPolicyGeneration :: Text -> Text -> JobStatus -> UTCTime -> PolicyGeneration -- | A timestamp of when the policy generation was completed. policyGeneration_completedOn :: Lens' PolicyGeneration (Maybe UTCTime) -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. policyGeneration_jobId :: Lens' PolicyGeneration Text -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. policyGeneration_principalArn :: Lens' PolicyGeneration Text -- | The status of the policy generation request. policyGeneration_status :: Lens' PolicyGeneration JobStatus -- | A timestamp of when the policy generation started. policyGeneration_startedOn :: Lens' PolicyGeneration UTCTime -- | Contains the ARN details about the IAM entity for which the policy is -- generated. -- -- See: newPolicyGenerationDetails smart constructor. data PolicyGenerationDetails PolicyGenerationDetails' :: Text -> PolicyGenerationDetails -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. [$sel:principalArn:PolicyGenerationDetails'] :: PolicyGenerationDetails -> Text -- | Create a value of PolicyGenerationDetails with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:principalArn:PolicyGenerationDetails', -- policyGenerationDetails_principalArn - The ARN of the IAM -- entity (user or role) for which you are generating a policy. newPolicyGenerationDetails :: Text -> PolicyGenerationDetails -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. policyGenerationDetails_principalArn :: Lens' PolicyGenerationDetails Text -- | A position in a policy. -- -- See: newPosition smart constructor. data Position Position' :: Int -> Int -> Int -> Position -- | The line of the position, starting from 1. [$sel:line:Position'] :: Position -> Int -- | The column of the position, starting from 0. [$sel:column:Position'] :: Position -> Int -- | The offset within the policy that corresponds to the position, -- starting from 0. [$sel:offset:Position'] :: Position -> Int -- | Create a value of Position with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:line:Position', position_line - The line of the -- position, starting from 1. -- -- $sel:column:Position', position_column - The column of -- the position, starting from 0. -- -- $sel:offset:Position', position_offset - The offset -- within the policy that corresponds to the position, starting from 0. newPosition :: Int -> Int -> Int -> Position -- | The line of the position, starting from 1. position_line :: Lens' Position Int -- | The column of the position, starting from 0. position_column :: Lens' Position Int -- | The offset within the policy that corresponds to the position, -- starting from 0. position_offset :: Lens' Position Int -- | The values for a manual Amazon RDS DB cluster snapshot attribute. -- -- See: newRdsDbClusterSnapshotAttributeValue smart -- constructor. data RdsDbClusterSnapshotAttributeValue RdsDbClusterSnapshotAttributeValue' :: Maybe [Text] -> RdsDbClusterSnapshotAttributeValue -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB cluster snapshot. If the value all is -- specified, then the Amazon RDS DB cluster snapshot is public and can -- be copied or restored by all Amazon Web Services accounts. -- -- [$sel:accountIds:RdsDbClusterSnapshotAttributeValue'] :: RdsDbClusterSnapshotAttributeValue -> Maybe [Text] -- | Create a value of RdsDbClusterSnapshotAttributeValue with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accountIds:RdsDbClusterSnapshotAttributeValue', -- rdsDbClusterSnapshotAttributeValue_accountIds - The Amazon Web -- Services account IDs that have access to the manual Amazon RDS DB -- cluster snapshot. If the value all is specified, then the -- Amazon RDS DB cluster snapshot is public and can be copied or restored -- by all Amazon Web Services accounts. -- -- newRdsDbClusterSnapshotAttributeValue :: RdsDbClusterSnapshotAttributeValue -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB cluster snapshot. If the value all is -- specified, then the Amazon RDS DB cluster snapshot is public and can -- be copied or restored by all Amazon Web Services accounts. -- -- rdsDbClusterSnapshotAttributeValue_accountIds :: Lens' RdsDbClusterSnapshotAttributeValue (Maybe [Text]) -- | The proposed access control configuration for an Amazon RDS DB cluster -- snapshot. You can propose a configuration for a new Amazon RDS DB -- cluster snapshot or an Amazon RDS DB cluster snapshot that you own by -- specifying the RdsDbClusterSnapshotAttributeValue and -- optional KMS encryption key. For more information, see -- ModifyDBClusterSnapshotAttribute. -- -- See: newRdsDbClusterSnapshotConfiguration smart -- constructor. data RdsDbClusterSnapshotConfiguration RdsDbClusterSnapshotConfiguration' :: Maybe (HashMap Text RdsDbClusterSnapshotAttributeValue) -> Maybe Text -> RdsDbClusterSnapshotConfiguration -- | The names and values of manual DB cluster snapshot attributes. Manual -- DB cluster snapshot attributes are used to authorize other Amazon Web -- Services accounts to restore a manual DB cluster snapshot. The only -- valid value for AttributeName for the attribute map is -- restore [$sel:attributes:RdsDbClusterSnapshotConfiguration'] :: RdsDbClusterSnapshotConfiguration -> Maybe (HashMap Text RdsDbClusterSnapshotAttributeValue) -- | The KMS key identifier for an encrypted Amazon RDS DB cluster -- snapshot. The KMS key identifier is the key ARN, key ID, alias ARN, or -- alias name for the KMS key. -- -- [$sel:kmsKeyId:RdsDbClusterSnapshotConfiguration'] :: RdsDbClusterSnapshotConfiguration -> Maybe Text -- | Create a value of RdsDbClusterSnapshotConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributes:RdsDbClusterSnapshotConfiguration', -- rdsDbClusterSnapshotConfiguration_attributes - The names and -- values of manual DB cluster snapshot attributes. Manual DB cluster -- snapshot attributes are used to authorize other Amazon Web Services -- accounts to restore a manual DB cluster snapshot. The only valid value -- for AttributeName for the attribute map is restore -- -- $sel:kmsKeyId:RdsDbClusterSnapshotConfiguration', -- rdsDbClusterSnapshotConfiguration_kmsKeyId - The KMS key -- identifier for an encrypted Amazon RDS DB cluster snapshot. The KMS -- key identifier is the key ARN, key ID, alias ARN, or alias name for -- the KMS key. -- -- newRdsDbClusterSnapshotConfiguration :: RdsDbClusterSnapshotConfiguration -- | The names and values of manual DB cluster snapshot attributes. Manual -- DB cluster snapshot attributes are used to authorize other Amazon Web -- Services accounts to restore a manual DB cluster snapshot. The only -- valid value for AttributeName for the attribute map is -- restore rdsDbClusterSnapshotConfiguration_attributes :: Lens' RdsDbClusterSnapshotConfiguration (Maybe (HashMap Text RdsDbClusterSnapshotAttributeValue)) -- | The KMS key identifier for an encrypted Amazon RDS DB cluster -- snapshot. The KMS key identifier is the key ARN, key ID, alias ARN, or -- alias name for the KMS key. -- -- rdsDbClusterSnapshotConfiguration_kmsKeyId :: Lens' RdsDbClusterSnapshotConfiguration (Maybe Text) -- | The name and values of a manual Amazon RDS DB snapshot attribute. -- Manual DB snapshot attributes are used to authorize other Amazon Web -- Services accounts to restore a manual DB snapshot. -- -- See: newRdsDbSnapshotAttributeValue smart constructor. data RdsDbSnapshotAttributeValue RdsDbSnapshotAttributeValue' :: Maybe [Text] -> RdsDbSnapshotAttributeValue -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB snapshot. If the value all is specified, then -- the Amazon RDS DB snapshot is public and can be copied or restored by -- all Amazon Web Services accounts. -- -- [$sel:accountIds:RdsDbSnapshotAttributeValue'] :: RdsDbSnapshotAttributeValue -> Maybe [Text] -- | Create a value of RdsDbSnapshotAttributeValue with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accountIds:RdsDbSnapshotAttributeValue', -- rdsDbSnapshotAttributeValue_accountIds - The Amazon Web -- Services account IDs that have access to the manual Amazon RDS DB -- snapshot. If the value all is specified, then the Amazon RDS -- DB snapshot is public and can be copied or restored by all Amazon Web -- Services accounts. -- -- newRdsDbSnapshotAttributeValue :: RdsDbSnapshotAttributeValue -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB snapshot. If the value all is specified, then -- the Amazon RDS DB snapshot is public and can be copied or restored by -- all Amazon Web Services accounts. -- -- rdsDbSnapshotAttributeValue_accountIds :: Lens' RdsDbSnapshotAttributeValue (Maybe [Text]) -- | The proposed access control configuration for an Amazon RDS DB -- snapshot. You can propose a configuration for a new Amazon RDS DB -- snapshot or an Amazon RDS DB snapshot that you own by specifying the -- RdsDbSnapshotAttributeValue and optional KMS encryption key. -- For more information, see ModifyDBSnapshotAttribute. -- -- See: newRdsDbSnapshotConfiguration smart constructor. data RdsDbSnapshotConfiguration RdsDbSnapshotConfiguration' :: Maybe (HashMap Text RdsDbSnapshotAttributeValue) -> Maybe Text -> RdsDbSnapshotConfiguration -- | The names and values of manual DB snapshot attributes. Manual DB -- snapshot attributes are used to authorize other Amazon Web Services -- accounts to restore a manual DB snapshot. The only valid value for -- attributeName for the attribute map is restore. [$sel:attributes:RdsDbSnapshotConfiguration'] :: RdsDbSnapshotConfiguration -> Maybe (HashMap Text RdsDbSnapshotAttributeValue) -- | The KMS key identifier for an encrypted Amazon RDS DB snapshot. The -- KMS key identifier is the key ARN, key ID, alias ARN, or alias name -- for the KMS key. -- -- [$sel:kmsKeyId:RdsDbSnapshotConfiguration'] :: RdsDbSnapshotConfiguration -> Maybe Text -- | Create a value of RdsDbSnapshotConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributes:RdsDbSnapshotConfiguration', -- rdsDbSnapshotConfiguration_attributes - The names and values of -- manual DB snapshot attributes. Manual DB snapshot attributes are used -- to authorize other Amazon Web Services accounts to restore a manual DB -- snapshot. The only valid value for attributeName for the -- attribute map is restore. -- -- $sel:kmsKeyId:RdsDbSnapshotConfiguration', -- rdsDbSnapshotConfiguration_kmsKeyId - The KMS key identifier -- for an encrypted Amazon RDS DB snapshot. The KMS key identifier is the -- key ARN, key ID, alias ARN, or alias name for the KMS key. -- -- newRdsDbSnapshotConfiguration :: RdsDbSnapshotConfiguration -- | The names and values of manual DB snapshot attributes. Manual DB -- snapshot attributes are used to authorize other Amazon Web Services -- accounts to restore a manual DB snapshot. The only valid value for -- attributeName for the attribute map is restore. rdsDbSnapshotConfiguration_attributes :: Lens' RdsDbSnapshotConfiguration (Maybe (HashMap Text RdsDbSnapshotAttributeValue)) -- | The KMS key identifier for an encrypted Amazon RDS DB snapshot. The -- KMS key identifier is the key ARN, key ID, alias ARN, or alias name -- for the KMS key. -- -- rdsDbSnapshotConfiguration_kmsKeyId :: Lens' RdsDbSnapshotConfiguration (Maybe Text) -- | The configuration for an Amazon S3 access point or multi-region access -- point for the bucket. You can propose up to 10 access points or -- multi-region access points per bucket. If the proposed Amazon S3 -- access point configuration is for an existing bucket, the access -- preview uses the proposed access point configuration in place of the -- existing access points. To propose an access point without a policy, -- you can provide an empty string as the access point policy. For more -- information, see Creating access points. For more information -- about access point policy limits, see Access points restrictions -- and limitations. -- -- See: newS3AccessPointConfiguration smart constructor. data S3AccessPointConfiguration S3AccessPointConfiguration' :: Maybe Text -> Maybe NetworkOriginConfiguration -> Maybe S3PublicAccessBlockConfiguration -> S3AccessPointConfiguration -- | The access point or multi-region access point policy. [$sel:accessPointPolicy:S3AccessPointConfiguration'] :: S3AccessPointConfiguration -> Maybe Text -- | The proposed Internet and VpcConfiguration to apply -- to this Amazon S3 access point. VpcConfiguration does not -- apply to multi-region access points. If the access preview is for a -- new resource and neither is specified, the access preview uses -- Internet for the network origin. If the access preview is for -- an existing resource and neither is specified, the access preview uses -- the exiting network origin. [$sel:networkOrigin:S3AccessPointConfiguration'] :: S3AccessPointConfiguration -> Maybe NetworkOriginConfiguration -- | The proposed S3PublicAccessBlock configuration to apply to -- this Amazon S3 access point or multi-region access point. [$sel:publicAccessBlock:S3AccessPointConfiguration'] :: S3AccessPointConfiguration -> Maybe S3PublicAccessBlockConfiguration -- | Create a value of S3AccessPointConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPointPolicy:S3AccessPointConfiguration', -- s3AccessPointConfiguration_accessPointPolicy - The access point -- or multi-region access point policy. -- -- $sel:networkOrigin:S3AccessPointConfiguration', -- s3AccessPointConfiguration_networkOrigin - The proposed -- Internet and VpcConfiguration to apply to this -- Amazon S3 access point. VpcConfiguration does not apply to -- multi-region access points. If the access preview is for a new -- resource and neither is specified, the access preview uses -- Internet for the network origin. If the access preview is for -- an existing resource and neither is specified, the access preview uses -- the exiting network origin. -- -- $sel:publicAccessBlock:S3AccessPointConfiguration', -- s3AccessPointConfiguration_publicAccessBlock - The proposed -- S3PublicAccessBlock configuration to apply to this Amazon S3 -- access point or multi-region access point. newS3AccessPointConfiguration :: S3AccessPointConfiguration -- | The access point or multi-region access point policy. s3AccessPointConfiguration_accessPointPolicy :: Lens' S3AccessPointConfiguration (Maybe Text) -- | The proposed Internet and VpcConfiguration to apply -- to this Amazon S3 access point. VpcConfiguration does not -- apply to multi-region access points. If the access preview is for a -- new resource and neither is specified, the access preview uses -- Internet for the network origin. If the access preview is for -- an existing resource and neither is specified, the access preview uses -- the exiting network origin. s3AccessPointConfiguration_networkOrigin :: Lens' S3AccessPointConfiguration (Maybe NetworkOriginConfiguration) -- | The proposed S3PublicAccessBlock configuration to apply to -- this Amazon S3 access point or multi-region access point. s3AccessPointConfiguration_publicAccessBlock :: Lens' S3AccessPointConfiguration (Maybe S3PublicAccessBlockConfiguration) -- | A proposed access control list grant configuration for an Amazon S3 -- bucket. For more information, see How to Specify an ACL. -- -- See: newS3BucketAclGrantConfiguration smart constructor. data S3BucketAclGrantConfiguration S3BucketAclGrantConfiguration' :: AclPermission -> AclGrantee -> S3BucketAclGrantConfiguration -- | The permissions being granted. [$sel:permission:S3BucketAclGrantConfiguration'] :: S3BucketAclGrantConfiguration -> AclPermission -- | The grantee to whom you’re assigning access rights. [$sel:grantee:S3BucketAclGrantConfiguration'] :: S3BucketAclGrantConfiguration -> AclGrantee -- | Create a value of S3BucketAclGrantConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:permission:S3BucketAclGrantConfiguration', -- s3BucketAclGrantConfiguration_permission - The permissions -- being granted. -- -- $sel:grantee:S3BucketAclGrantConfiguration', -- s3BucketAclGrantConfiguration_grantee - The grantee to whom -- you’re assigning access rights. newS3BucketAclGrantConfiguration :: AclPermission -> AclGrantee -> S3BucketAclGrantConfiguration -- | The permissions being granted. s3BucketAclGrantConfiguration_permission :: Lens' S3BucketAclGrantConfiguration AclPermission -- | The grantee to whom you’re assigning access rights. s3BucketAclGrantConfiguration_grantee :: Lens' S3BucketAclGrantConfiguration AclGrantee -- | Proposed access control configuration for an Amazon S3 bucket. You can -- propose a configuration for a new Amazon S3 bucket or an existing -- Amazon S3 bucket that you own by specifying the Amazon S3 bucket -- policy, bucket ACLs, bucket BPA settings, Amazon S3 access points, and -- multi-region access points attached to the bucket. If the -- configuration is for an existing Amazon S3 bucket and you do not -- specify the Amazon S3 bucket policy, the access preview uses the -- existing policy attached to the bucket. If the access preview is for a -- new resource and you do not specify the Amazon S3 bucket policy, the -- access preview assumes a bucket without a policy. To propose deletion -- of an existing bucket policy, you can specify an empty string. For -- more information about bucket policy limits, see Bucket Policy -- Examples. -- -- See: newS3BucketConfiguration smart constructor. data S3BucketConfiguration S3BucketConfiguration' :: Maybe (HashMap Text S3AccessPointConfiguration) -> Maybe [S3BucketAclGrantConfiguration] -> Maybe Text -> Maybe S3PublicAccessBlockConfiguration -> S3BucketConfiguration -- | The configuration of Amazon S3 access points or multi-region access -- points for the bucket. You can propose up to 10 new access points per -- bucket. [$sel:accessPoints:S3BucketConfiguration'] :: S3BucketConfiguration -> Maybe (HashMap Text S3AccessPointConfiguration) -- | The proposed list of ACL grants for the Amazon S3 bucket. You can -- propose up to 100 ACL grants per bucket. If the proposed grant -- configuration is for an existing bucket, the access preview uses the -- proposed list of grant configurations in place of the existing grants. -- Otherwise, the access preview uses the existing grants for the bucket. [$sel:bucketAclGrants:S3BucketConfiguration'] :: S3BucketConfiguration -> Maybe [S3BucketAclGrantConfiguration] -- | The proposed bucket policy for the Amazon S3 bucket. [$sel:bucketPolicy:S3BucketConfiguration'] :: S3BucketConfiguration -> Maybe Text -- | The proposed block public access configuration for the Amazon S3 -- bucket. [$sel:bucketPublicAccessBlock:S3BucketConfiguration'] :: S3BucketConfiguration -> Maybe S3PublicAccessBlockConfiguration -- | Create a value of S3BucketConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPoints:S3BucketConfiguration', -- s3BucketConfiguration_accessPoints - The configuration of -- Amazon S3 access points or multi-region access points for the bucket. -- You can propose up to 10 new access points per bucket. -- -- $sel:bucketAclGrants:S3BucketConfiguration', -- s3BucketConfiguration_bucketAclGrants - The proposed list of -- ACL grants for the Amazon S3 bucket. You can propose up to 100 ACL -- grants per bucket. If the proposed grant configuration is for an -- existing bucket, the access preview uses the proposed list of grant -- configurations in place of the existing grants. Otherwise, the access -- preview uses the existing grants for the bucket. -- -- $sel:bucketPolicy:S3BucketConfiguration', -- s3BucketConfiguration_bucketPolicy - The proposed bucket policy -- for the Amazon S3 bucket. -- -- $sel:bucketPublicAccessBlock:S3BucketConfiguration', -- s3BucketConfiguration_bucketPublicAccessBlock - The proposed -- block public access configuration for the Amazon S3 bucket. newS3BucketConfiguration :: S3BucketConfiguration -- | The configuration of Amazon S3 access points or multi-region access -- points for the bucket. You can propose up to 10 new access points per -- bucket. s3BucketConfiguration_accessPoints :: Lens' S3BucketConfiguration (Maybe (HashMap Text S3AccessPointConfiguration)) -- | The proposed list of ACL grants for the Amazon S3 bucket. You can -- propose up to 100 ACL grants per bucket. If the proposed grant -- configuration is for an existing bucket, the access preview uses the -- proposed list of grant configurations in place of the existing grants. -- Otherwise, the access preview uses the existing grants for the bucket. s3BucketConfiguration_bucketAclGrants :: Lens' S3BucketConfiguration (Maybe [S3BucketAclGrantConfiguration]) -- | The proposed bucket policy for the Amazon S3 bucket. s3BucketConfiguration_bucketPolicy :: Lens' S3BucketConfiguration (Maybe Text) -- | The proposed block public access configuration for the Amazon S3 -- bucket. s3BucketConfiguration_bucketPublicAccessBlock :: Lens' S3BucketConfiguration (Maybe S3PublicAccessBlockConfiguration) -- | The PublicAccessBlock configuration to apply to this Amazon -- S3 bucket. If the proposed configuration is for an existing Amazon S3 -- bucket and the configuration is not specified, the access preview uses -- the existing setting. If the proposed configuration is for a new -- bucket and the configuration is not specified, the access preview uses -- false. If the proposed configuration is for a new access -- point or multi-region access point and the access point BPA -- configuration is not specified, the access preview uses true. -- For more information, see PublicAccessBlockConfiguration. -- -- See: newS3PublicAccessBlockConfiguration smart -- constructor. data S3PublicAccessBlockConfiguration S3PublicAccessBlockConfiguration' :: Bool -> Bool -> S3PublicAccessBlockConfiguration -- | Specifies whether Amazon S3 should ignore public ACLs for this bucket -- and objects in this bucket. [$sel:ignorePublicAcls:S3PublicAccessBlockConfiguration'] :: S3PublicAccessBlockConfiguration -> Bool -- | Specifies whether Amazon S3 should restrict public bucket policies for -- this bucket. [$sel:restrictPublicBuckets:S3PublicAccessBlockConfiguration'] :: S3PublicAccessBlockConfiguration -> Bool -- | Create a value of S3PublicAccessBlockConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ignorePublicAcls:S3PublicAccessBlockConfiguration', -- s3PublicAccessBlockConfiguration_ignorePublicAcls - Specifies -- whether Amazon S3 should ignore public ACLs for this bucket and -- objects in this bucket. -- -- $sel:restrictPublicBuckets:S3PublicAccessBlockConfiguration', -- s3PublicAccessBlockConfiguration_restrictPublicBuckets - -- Specifies whether Amazon S3 should restrict public bucket policies for -- this bucket. newS3PublicAccessBlockConfiguration :: Bool -> Bool -> S3PublicAccessBlockConfiguration -- | Specifies whether Amazon S3 should ignore public ACLs for this bucket -- and objects in this bucket. s3PublicAccessBlockConfiguration_ignorePublicAcls :: Lens' S3PublicAccessBlockConfiguration Bool -- | Specifies whether Amazon S3 should restrict public bucket policies for -- this bucket. s3PublicAccessBlockConfiguration_restrictPublicBuckets :: Lens' S3PublicAccessBlockConfiguration Bool -- | The configuration for a Secrets Manager secret. For more information, -- see CreateSecret. -- -- You can propose a configuration for a new secret or an existing secret -- that you own by specifying the secret policy and optional KMS -- encryption key. If the configuration is for an existing secret and you -- do not specify the secret policy, the access preview uses the existing -- policy for the secret. If the access preview is for a new resource and -- you do not specify the policy, the access preview assumes a secret -- without a policy. To propose deletion of an existing policy, you can -- specify an empty string. If the proposed configuration is for a new -- secret and you do not specify the KMS key ID, the access preview uses -- the Amazon Web Services managed key aws/secretsmanager. If -- you specify an empty string for the KMS key ID, the access preview -- uses the Amazon Web Services managed key of the Amazon Web Services -- account. For more information about secret policy limits, see -- Quotas for Secrets Manager.. -- -- See: newSecretsManagerSecretConfiguration smart -- constructor. data SecretsManagerSecretConfiguration SecretsManagerSecretConfiguration' :: Maybe Text -> Maybe Text -> SecretsManagerSecretConfiguration -- | The proposed ARN, key ID, or alias of the KMS key. [$sel:kmsKeyId:SecretsManagerSecretConfiguration'] :: SecretsManagerSecretConfiguration -> Maybe Text -- | The proposed resource policy defining who can access or manage the -- secret. [$sel:secretPolicy:SecretsManagerSecretConfiguration'] :: SecretsManagerSecretConfiguration -> Maybe Text -- | Create a value of SecretsManagerSecretConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:kmsKeyId:SecretsManagerSecretConfiguration', -- secretsManagerSecretConfiguration_kmsKeyId - The proposed ARN, -- key ID, or alias of the KMS key. -- -- $sel:secretPolicy:SecretsManagerSecretConfiguration', -- secretsManagerSecretConfiguration_secretPolicy - The proposed -- resource policy defining who can access or manage the secret. newSecretsManagerSecretConfiguration :: SecretsManagerSecretConfiguration -- | The proposed ARN, key ID, or alias of the KMS key. secretsManagerSecretConfiguration_kmsKeyId :: Lens' SecretsManagerSecretConfiguration (Maybe Text) -- | The proposed resource policy defining who can access or manage the -- secret. secretsManagerSecretConfiguration_secretPolicy :: Lens' SecretsManagerSecretConfiguration (Maybe Text) -- | The proposed access control configuration for an Amazon SNS topic. You -- can propose a configuration for a new Amazon SNS topic or an existing -- Amazon SNS topic that you own by specifying the policy. If the -- configuration is for an existing Amazon SNS topic and you do not -- specify the Amazon SNS policy, then the access preview uses the -- existing Amazon SNS policy for the topic. If the access preview is for -- a new resource and you do not specify the policy, then the access -- preview assumes an Amazon SNS topic without a policy. To propose -- deletion of an existing Amazon SNS topic policy, you can specify an -- empty string for the Amazon SNS policy. For more information, see -- Topic. -- -- See: newSnsTopicConfiguration smart constructor. data SnsTopicConfiguration SnsTopicConfiguration' :: Maybe Text -> SnsTopicConfiguration -- | The JSON policy text that defines who can access an Amazon SNS topic. -- For more information, see Example cases for Amazon SNS access -- control in the Amazon SNS Developer Guide. [$sel:topicPolicy:SnsTopicConfiguration'] :: SnsTopicConfiguration -> Maybe Text -- | Create a value of SnsTopicConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:topicPolicy:SnsTopicConfiguration', -- snsTopicConfiguration_topicPolicy - The JSON policy text that -- defines who can access an Amazon SNS topic. For more information, see -- Example cases for Amazon SNS access control in the Amazon -- SNS Developer Guide. newSnsTopicConfiguration :: SnsTopicConfiguration -- | The JSON policy text that defines who can access an Amazon SNS topic. -- For more information, see Example cases for Amazon SNS access -- control in the Amazon SNS Developer Guide. snsTopicConfiguration_topicPolicy :: Lens' SnsTopicConfiguration (Maybe Text) -- | The criteria used to sort. -- -- See: newSortCriteria smart constructor. data SortCriteria SortCriteria' :: Maybe Text -> Maybe OrderBy -> SortCriteria -- | The name of the attribute to sort on. [$sel:attributeName:SortCriteria'] :: SortCriteria -> Maybe Text -- | The sort order, ascending or descending. [$sel:orderBy:SortCriteria'] :: SortCriteria -> Maybe OrderBy -- | Create a value of SortCriteria with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributeName:SortCriteria', -- sortCriteria_attributeName - The name of the attribute to sort -- on. -- -- $sel:orderBy:SortCriteria', sortCriteria_orderBy - The -- sort order, ascending or descending. newSortCriteria :: SortCriteria -- | The name of the attribute to sort on. sortCriteria_attributeName :: Lens' SortCriteria (Maybe Text) -- | The sort order, ascending or descending. sortCriteria_orderBy :: Lens' SortCriteria (Maybe OrderBy) -- | A span in a policy. The span consists of a start position (inclusive) -- and end position (exclusive). -- -- See: newSpan smart constructor. data Span Span' :: Position -> Position -> Span -- | The start position of the span (inclusive). [$sel:start:Span'] :: Span -> Position -- | The end position of the span (exclusive). [$sel:end:Span'] :: Span -> Position -- | Create a value of Span with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:start:Span', span_start - The start position of the -- span (inclusive). -- -- $sel:end:Span', span_end - The end position of the span -- (exclusive). newSpan :: Position -> Position -> Span -- | The start position of the span (inclusive). span_start :: Lens' Span Position -- | The end position of the span (exclusive). span_end :: Lens' Span Position -- | The proposed access control configuration for an Amazon SQS queue. You -- can propose a configuration for a new Amazon SQS queue or an existing -- Amazon SQS queue that you own by specifying the Amazon SQS policy. If -- the configuration is for an existing Amazon SQS queue and you do not -- specify the Amazon SQS policy, the access preview uses the existing -- Amazon SQS policy for the queue. If the access preview is for a new -- resource and you do not specify the policy, the access preview assumes -- an Amazon SQS queue without a policy. To propose deletion of an -- existing Amazon SQS queue policy, you can specify an empty string for -- the Amazon SQS policy. For more information about Amazon SQS policy -- limits, see Quotas related to policies. -- -- See: newSqsQueueConfiguration smart constructor. data SqsQueueConfiguration SqsQueueConfiguration' :: Maybe Text -> SqsQueueConfiguration -- | The proposed resource policy for the Amazon SQS queue. [$sel:queuePolicy:SqsQueueConfiguration'] :: SqsQueueConfiguration -> Maybe Text -- | Create a value of SqsQueueConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:queuePolicy:SqsQueueConfiguration', -- sqsQueueConfiguration_queuePolicy - The proposed resource -- policy for the Amazon SQS queue. newSqsQueueConfiguration :: SqsQueueConfiguration -- | The proposed resource policy for the Amazon SQS queue. sqsQueueConfiguration_queuePolicy :: Lens' SqsQueueConfiguration (Maybe Text) -- | Provides more details about the current status of the analyzer. For -- example, if the creation for the analyzer fails, a Failed -- status is returned. For an analyzer with organization as the type, -- this failure can be due to an issue with creating the service-linked -- roles required in the member accounts of the Amazon Web Services -- organization. -- -- See: newStatusReason smart constructor. data StatusReason StatusReason' :: ReasonCode -> StatusReason -- | The reason code for the current status of the analyzer. [$sel:code:StatusReason'] :: StatusReason -> ReasonCode -- | Create a value of StatusReason with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:StatusReason', statusReason_code - The reason -- code for the current status of the analyzer. newStatusReason :: ReasonCode -> StatusReason -- | The reason code for the current status of the analyzer. statusReason_code :: Lens' StatusReason ReasonCode -- | A reference to a substring of a literal string in a JSON document. -- -- See: newSubstring smart constructor. data Substring Substring' :: Int -> Int -> Substring -- | The start index of the substring, starting from 0. [$sel:start:Substring'] :: Substring -> Int -- | The length of the substring. [$sel:length:Substring'] :: Substring -> Int -- | Create a value of Substring with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:start:Substring', substring_start - The start index -- of the substring, starting from 0. -- -- $sel:length:Substring', substring_length - The length of -- the substring. newSubstring :: Int -> Int -> Substring -- | The start index of the substring, starting from 0. substring_start :: Lens' Substring Int -- | The length of the substring. substring_length :: Lens' Substring Int -- | Contains details about the CloudTrail trail being analyzed to generate -- a policy. -- -- See: newTrail smart constructor. data Trail Trail' :: Maybe Bool -> Maybe [Text] -> Text -> Trail -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. [$sel:allRegions:Trail'] :: Trail -> Maybe Bool -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. [$sel:regions:Trail'] :: Trail -> Maybe [Text] -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. [$sel:cloudTrailArn:Trail'] :: Trail -> Text -- | Create a value of Trail with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:allRegions:Trail', trail_allRegions - Possible -- values are true or false. If set to true, -- IAM Access Analyzer retrieves CloudTrail data from all regions to -- analyze and generate a policy. -- -- $sel:regions:Trail', trail_regions - A list of regions -- to get CloudTrail data from and analyze to generate a policy. -- -- $sel:cloudTrailArn:Trail', trail_cloudTrailArn - -- Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. newTrail :: Text -> Trail -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. trail_allRegions :: Lens' Trail (Maybe Bool) -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. trail_regions :: Lens' Trail (Maybe [Text]) -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. trail_cloudTrailArn :: Lens' Trail Text -- | Contains details about the CloudTrail trail being analyzed to generate -- a policy. -- -- See: newTrailProperties smart constructor. data TrailProperties TrailProperties' :: Maybe Bool -> Maybe [Text] -> Text -> TrailProperties -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. [$sel:allRegions:TrailProperties'] :: TrailProperties -> Maybe Bool -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. [$sel:regions:TrailProperties'] :: TrailProperties -> Maybe [Text] -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. [$sel:cloudTrailArn:TrailProperties'] :: TrailProperties -> Text -- | Create a value of TrailProperties with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:allRegions:TrailProperties', -- trailProperties_allRegions - Possible values are true -- or false. If set to true, IAM Access Analyzer -- retrieves CloudTrail data from all regions to analyze and generate a -- policy. -- -- $sel:regions:TrailProperties', trailProperties_regions - -- A list of regions to get CloudTrail data from and analyze to generate -- a policy. -- -- $sel:cloudTrailArn:TrailProperties', -- trailProperties_cloudTrailArn - Specifies the ARN of the trail. -- The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. newTrailProperties :: Text -> TrailProperties -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. trailProperties_allRegions :: Lens' TrailProperties (Maybe Bool) -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. trailProperties_regions :: Lens' TrailProperties (Maybe [Text]) -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. trailProperties_cloudTrailArn :: Lens' TrailProperties Text -- | A finding in a policy. Each finding is an actionable recommendation -- that can be used to improve the policy. -- -- See: newValidatePolicyFinding smart constructor. data ValidatePolicyFinding ValidatePolicyFinding' :: Text -> ValidatePolicyFindingType -> Text -> Text -> [Location] -> ValidatePolicyFinding -- | A localized message that explains the finding and provides guidance on -- how to address it. [$sel:findingDetails:ValidatePolicyFinding'] :: ValidatePolicyFinding -> Text -- | The impact of the finding. -- -- Security warnings report when the policy allows access that we -- consider overly permissive. -- -- Errors report when a part of the policy is not functional. -- -- Warnings report non-security issues when a policy does not conform to -- policy writing best practices. -- -- Suggestions recommend stylistic improvements in the policy that do not -- impact access. [$sel:findingType:ValidatePolicyFinding'] :: ValidatePolicyFinding -> ValidatePolicyFindingType -- | The issue code provides an identifier of the issue associated with -- this finding. [$sel:issueCode:ValidatePolicyFinding'] :: ValidatePolicyFinding -> Text -- | A link to additional documentation about the type of finding. [$sel:learnMoreLink:ValidatePolicyFinding'] :: ValidatePolicyFinding -> Text -- | The list of locations in the policy document that are related to the -- finding. The issue code provides a summary of an issue identified by -- the finding. [$sel:locations:ValidatePolicyFinding'] :: ValidatePolicyFinding -> [Location] -- | Create a value of ValidatePolicyFinding with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:findingDetails:ValidatePolicyFinding', -- validatePolicyFinding_findingDetails - A localized message that -- explains the finding and provides guidance on how to address it. -- -- $sel:findingType:ValidatePolicyFinding', -- validatePolicyFinding_findingType - The impact of the finding. -- -- Security warnings report when the policy allows access that we -- consider overly permissive. -- -- Errors report when a part of the policy is not functional. -- -- Warnings report non-security issues when a policy does not conform to -- policy writing best practices. -- -- Suggestions recommend stylistic improvements in the policy that do not -- impact access. -- -- $sel:issueCode:ValidatePolicyFinding', -- validatePolicyFinding_issueCode - The issue code provides an -- identifier of the issue associated with this finding. -- -- $sel:learnMoreLink:ValidatePolicyFinding', -- validatePolicyFinding_learnMoreLink - A link to additional -- documentation about the type of finding. -- -- $sel:locations:ValidatePolicyFinding', -- validatePolicyFinding_locations - The list of locations in the -- policy document that are related to the finding. The issue code -- provides a summary of an issue identified by the finding. newValidatePolicyFinding :: Text -> ValidatePolicyFindingType -> Text -> Text -> ValidatePolicyFinding -- | A localized message that explains the finding and provides guidance on -- how to address it. validatePolicyFinding_findingDetails :: Lens' ValidatePolicyFinding Text -- | The impact of the finding. -- -- Security warnings report when the policy allows access that we -- consider overly permissive. -- -- Errors report when a part of the policy is not functional. -- -- Warnings report non-security issues when a policy does not conform to -- policy writing best practices. -- -- Suggestions recommend stylistic improvements in the policy that do not -- impact access. validatePolicyFinding_findingType :: Lens' ValidatePolicyFinding ValidatePolicyFindingType -- | The issue code provides an identifier of the issue associated with -- this finding. validatePolicyFinding_issueCode :: Lens' ValidatePolicyFinding Text -- | A link to additional documentation about the type of finding. validatePolicyFinding_learnMoreLink :: Lens' ValidatePolicyFinding Text -- | The list of locations in the policy document that are related to the -- finding. The issue code provides a summary of an issue identified by -- the finding. validatePolicyFinding_locations :: Lens' ValidatePolicyFinding [Location] -- | The proposed virtual private cloud (VPC) configuration for the Amazon -- S3 access point. VPC configuration does not apply to multi-region -- access points. For more information, see VpcConfiguration. -- -- See: newVpcConfiguration smart constructor. data VpcConfiguration VpcConfiguration' :: Text -> VpcConfiguration -- | If this field is specified, this access point will only allow -- connections from the specified VPC ID. [$sel:vpcId:VpcConfiguration'] :: VpcConfiguration -> Text -- | Create a value of VpcConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:vpcId:VpcConfiguration', vpcConfiguration_vpcId - -- If this field is specified, this access point will only allow -- connections from the specified VPC ID. newVpcConfiguration :: Text -> VpcConfiguration -- | If this field is specified, this access point will only allow -- connections from the specified VPC ID. vpcConfiguration_vpcId :: Lens' VpcConfiguration Text -- | Adds a tag to the specified resource. module Amazonka.AccessAnalyzer.TagResource -- | Adds a tag to the specified resource. -- -- See: newTagResource smart constructor. data TagResource TagResource' :: Text -> HashMap Text Text -> TagResource -- | The ARN of the resource to add the tag to. [$sel:resourceArn:TagResource'] :: TagResource -> Text -- | The tags to add to the resource. [$sel:tags:TagResource'] :: TagResource -> HashMap Text Text -- | Create a value of TagResource with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- TagResource, tagResource_resourceArn - The ARN of the -- resource to add the tag to. -- -- TagResource, tagResource_tags - The tags to add to the -- resource. newTagResource :: Text -> TagResource -- | The ARN of the resource to add the tag to. tagResource_resourceArn :: Lens' TagResource Text -- | The tags to add to the resource. tagResource_tags :: Lens' TagResource (HashMap Text Text) -- | The response to the request. -- -- See: newTagResourceResponse smart constructor. data TagResourceResponse TagResourceResponse' :: Int -> TagResourceResponse -- | The response's http status code. [$sel:httpStatus:TagResourceResponse'] :: TagResourceResponse -> Int -- | Create a value of TagResourceResponse with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:TagResourceResponse', -- tagResourceResponse_httpStatus - The response's http status -- code. newTagResourceResponse :: Int -> TagResourceResponse -- | The response's http status code. tagResourceResponse_httpStatus :: Lens' TagResourceResponse Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.TagResource.TagResource instance GHC.Show.Show Amazonka.AccessAnalyzer.TagResource.TagResource instance GHC.Read.Read Amazonka.AccessAnalyzer.TagResource.TagResource instance GHC.Classes.Eq Amazonka.AccessAnalyzer.TagResource.TagResource instance GHC.Generics.Generic Amazonka.AccessAnalyzer.TagResource.TagResourceResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.TagResource.TagResourceResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.TagResource.TagResourceResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.TagResource.TagResourceResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.TagResource.TagResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.TagResource.TagResourceResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.TagResource.TagResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.TagResource.TagResource instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.TagResource.TagResource instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.TagResource.TagResource instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.TagResource.TagResource instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.TagResource.TagResource -- | Immediately starts a scan of the policies applied to the specified -- resource. module Amazonka.AccessAnalyzer.StartResourceScan -- | Starts a scan of the policies applied to the specified resource. -- -- See: newStartResourceScan smart constructor. data StartResourceScan StartResourceScan' :: Maybe Text -> Text -> Text -> StartResourceScan -- | The Amazon Web Services account ID that owns the resource. For most -- Amazon Web Services resources, the owning account is the account in -- which the resource was created. [$sel:resourceOwnerAccount:StartResourceScan'] :: StartResourceScan -> Maybe Text -- | The ARN of the analyzer to use to scan the policies applied to -- the specified resource. [$sel:analyzerArn:StartResourceScan'] :: StartResourceScan -> Text -- | The ARN of the resource to scan. [$sel:resourceArn:StartResourceScan'] :: StartResourceScan -> Text -- | Create a value of StartResourceScan with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- StartResourceScan, -- startResourceScan_resourceOwnerAccount - The Amazon Web -- Services account ID that owns the resource. For most Amazon Web -- Services resources, the owning account is the account in which the -- resource was created. -- -- StartResourceScan, startResourceScan_analyzerArn - The -- ARN of the analyzer to use to scan the policies applied to the -- specified resource. -- -- StartResourceScan, startResourceScan_resourceArn - The -- ARN of the resource to scan. newStartResourceScan :: Text -> Text -> StartResourceScan -- | The Amazon Web Services account ID that owns the resource. For most -- Amazon Web Services resources, the owning account is the account in -- which the resource was created. startResourceScan_resourceOwnerAccount :: Lens' StartResourceScan (Maybe Text) -- | The ARN of the analyzer to use to scan the policies applied to -- the specified resource. startResourceScan_analyzerArn :: Lens' StartResourceScan Text -- | The ARN of the resource to scan. startResourceScan_resourceArn :: Lens' StartResourceScan Text -- | See: newStartResourceScanResponse smart constructor. data StartResourceScanResponse StartResourceScanResponse' :: StartResourceScanResponse -- | Create a value of StartResourceScanResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newStartResourceScanResponse :: StartResourceScanResponse instance GHC.Generics.Generic Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance GHC.Show.Show Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance GHC.Read.Read Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance GHC.Classes.Eq Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance GHC.Generics.Generic Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScanResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScanResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScanResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScanResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScanResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.StartResourceScan.StartResourceScan -- | Starts the policy generation request. module Amazonka.AccessAnalyzer.StartPolicyGeneration -- | See: newStartPolicyGeneration smart constructor. data StartPolicyGeneration StartPolicyGeneration' :: Maybe Text -> Maybe CloudTrailDetails -> PolicyGenerationDetails -> StartPolicyGeneration -- | A unique, case-sensitive identifier that you provide to ensure the -- idempotency of the request. Idempotency ensures that an API request -- completes only once. With an idempotent request, if the original -- request completes successfully, the subsequent retries with the same -- client token return the result from the original successful request -- and they have no additional effect. -- -- If you do not specify a client token, one is automatically generated -- by the Amazon Web Services SDK. [$sel:clientToken:StartPolicyGeneration'] :: StartPolicyGeneration -> Maybe Text -- | A CloudTrailDetails object that contains details about a -- Trail that you want to analyze to generate policies. [$sel:cloudTrailDetails:StartPolicyGeneration'] :: StartPolicyGeneration -> Maybe CloudTrailDetails -- | Contains the ARN of the IAM entity (user or role) for which you are -- generating a policy. [$sel:policyGenerationDetails:StartPolicyGeneration'] :: StartPolicyGeneration -> PolicyGenerationDetails -- | Create a value of StartPolicyGeneration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:StartPolicyGeneration', -- startPolicyGeneration_clientToken - A unique, case-sensitive -- identifier that you provide to ensure the idempotency of the request. -- Idempotency ensures that an API request completes only once. With an -- idempotent request, if the original request completes successfully, -- the subsequent retries with the same client token return the result -- from the original successful request and they have no additional -- effect. -- -- If you do not specify a client token, one is automatically generated -- by the Amazon Web Services SDK. -- -- $sel:cloudTrailDetails:StartPolicyGeneration', -- startPolicyGeneration_cloudTrailDetails - A -- CloudTrailDetails object that contains details about a -- Trail that you want to analyze to generate policies. -- -- $sel:policyGenerationDetails:StartPolicyGeneration', -- startPolicyGeneration_policyGenerationDetails - Contains the -- ARN of the IAM entity (user or role) for which you are generating a -- policy. newStartPolicyGeneration :: PolicyGenerationDetails -> StartPolicyGeneration -- | A unique, case-sensitive identifier that you provide to ensure the -- idempotency of the request. Idempotency ensures that an API request -- completes only once. With an idempotent request, if the original -- request completes successfully, the subsequent retries with the same -- client token return the result from the original successful request -- and they have no additional effect. -- -- If you do not specify a client token, one is automatically generated -- by the Amazon Web Services SDK. startPolicyGeneration_clientToken :: Lens' StartPolicyGeneration (Maybe Text) -- | A CloudTrailDetails object that contains details about a -- Trail that you want to analyze to generate policies. startPolicyGeneration_cloudTrailDetails :: Lens' StartPolicyGeneration (Maybe CloudTrailDetails) -- | Contains the ARN of the IAM entity (user or role) for which you are -- generating a policy. startPolicyGeneration_policyGenerationDetails :: Lens' StartPolicyGeneration PolicyGenerationDetails -- | See: newStartPolicyGenerationResponse smart constructor. data StartPolicyGenerationResponse StartPolicyGenerationResponse' :: Int -> Text -> StartPolicyGenerationResponse -- | The response's http status code. [$sel:httpStatus:StartPolicyGenerationResponse'] :: StartPolicyGenerationResponse -> Int -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. [$sel:jobId:StartPolicyGenerationResponse'] :: StartPolicyGenerationResponse -> Text -- | Create a value of StartPolicyGenerationResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:StartPolicyGenerationResponse', -- startPolicyGenerationResponse_httpStatus - The response's http -- status code. -- -- StartPolicyGenerationResponse, -- startPolicyGenerationResponse_jobId - The JobId that -- is returned by the StartPolicyGeneration operation. The -- JobId can be used with GetGeneratedPolicy to -- retrieve the generated policies or used with -- CancelPolicyGeneration to cancel the policy generation -- request. newStartPolicyGenerationResponse :: Int -> Text -> StartPolicyGenerationResponse -- | The response's http status code. startPolicyGenerationResponse_httpStatus :: Lens' StartPolicyGenerationResponse Int -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. startPolicyGenerationResponse_jobId :: Lens' StartPolicyGenerationResponse Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance GHC.Show.Show Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance GHC.Read.Read Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance GHC.Generics.Generic Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGenerationResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGenerationResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGenerationResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGenerationResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGenerationResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.StartPolicyGeneration.StartPolicyGeneration -- | Retrieves a list of tags applied to the specified resource. module Amazonka.AccessAnalyzer.ListTagsForResource -- | Retrieves a list of tags applied to the specified resource. -- -- See: newListTagsForResource smart constructor. data ListTagsForResource ListTagsForResource' :: Text -> ListTagsForResource -- | The ARN of the resource to retrieve tags from. [$sel:resourceArn:ListTagsForResource'] :: ListTagsForResource -> Text -- | Create a value of ListTagsForResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListTagsForResource, listTagsForResource_resourceArn - -- The ARN of the resource to retrieve tags from. newListTagsForResource :: Text -> ListTagsForResource -- | The ARN of the resource to retrieve tags from. listTagsForResource_resourceArn :: Lens' ListTagsForResource Text -- | The response to the request. -- -- See: newListTagsForResourceResponse smart constructor. data ListTagsForResourceResponse ListTagsForResourceResponse' :: Maybe (HashMap Text Text) -> Int -> ListTagsForResourceResponse -- | The tags that are applied to the specified resource. [$sel:tags:ListTagsForResourceResponse'] :: ListTagsForResourceResponse -> Maybe (HashMap Text Text) -- | The response's http status code. [$sel:httpStatus:ListTagsForResourceResponse'] :: ListTagsForResourceResponse -> Int -- | Create a value of ListTagsForResourceResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListTagsForResourceResponse, -- listTagsForResourceResponse_tags - The tags that are applied to -- the specified resource. -- -- $sel:httpStatus:ListTagsForResourceResponse', -- listTagsForResourceResponse_httpStatus - The response's http -- status code. newListTagsForResourceResponse :: Int -> ListTagsForResourceResponse -- | The tags that are applied to the specified resource. listTagsForResourceResponse_tags :: Lens' ListTagsForResourceResponse (Maybe (HashMap Text Text)) -- | The response's http status code. listTagsForResourceResponse_httpStatus :: Lens' ListTagsForResourceResponse Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance GHC.Show.Show Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance GHC.Read.Read Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResourceResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResourceResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResourceResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResourceResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResourceResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ListTagsForResource.ListTagsForResource -- | Lists all of the policy generations requested in the last seven days. -- -- This operation returns paginated results. module Amazonka.AccessAnalyzer.ListPolicyGenerations -- | See: newListPolicyGenerations smart constructor. data ListPolicyGenerations ListPolicyGenerations' :: Maybe Natural -> Maybe Text -> Maybe Text -> ListPolicyGenerations -- | The maximum number of results to return in the response. [$sel:maxResults:ListPolicyGenerations'] :: ListPolicyGenerations -> Maybe Natural -- | A token used for pagination of results returned. [$sel:nextToken:ListPolicyGenerations'] :: ListPolicyGenerations -> Maybe Text -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. Use this with ListGeneratedPolicies to filter the -- results to only include results for a specific principal. [$sel:principalArn:ListPolicyGenerations'] :: ListPolicyGenerations -> Maybe Text -- | Create a value of ListPolicyGenerations with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListPolicyGenerations', -- listPolicyGenerations_maxResults - The maximum number of -- results to return in the response. -- -- ListPolicyGenerations, listPolicyGenerations_nextToken - -- A token used for pagination of results returned. -- -- ListPolicyGenerations, -- listPolicyGenerations_principalArn - The ARN of the IAM entity -- (user or role) for which you are generating a policy. Use this with -- ListGeneratedPolicies to filter the results to only include -- results for a specific principal. newListPolicyGenerations :: ListPolicyGenerations -- | The maximum number of results to return in the response. listPolicyGenerations_maxResults :: Lens' ListPolicyGenerations (Maybe Natural) -- | A token used for pagination of results returned. listPolicyGenerations_nextToken :: Lens' ListPolicyGenerations (Maybe Text) -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. Use this with ListGeneratedPolicies to filter the -- results to only include results for a specific principal. listPolicyGenerations_principalArn :: Lens' ListPolicyGenerations (Maybe Text) -- | See: newListPolicyGenerationsResponse smart constructor. data ListPolicyGenerationsResponse ListPolicyGenerationsResponse' :: Maybe Text -> Int -> [PolicyGeneration] -> ListPolicyGenerationsResponse -- | A token used for pagination of results returned. [$sel:nextToken:ListPolicyGenerationsResponse'] :: ListPolicyGenerationsResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:ListPolicyGenerationsResponse'] :: ListPolicyGenerationsResponse -> Int -- | A PolicyGeneration object that contains details about the -- generated policy. [$sel:policyGenerations:ListPolicyGenerationsResponse'] :: ListPolicyGenerationsResponse -> [PolicyGeneration] -- | Create a value of ListPolicyGenerationsResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListPolicyGenerations, -- listPolicyGenerationsResponse_nextToken - A token used for -- pagination of results returned. -- -- $sel:httpStatus:ListPolicyGenerationsResponse', -- listPolicyGenerationsResponse_httpStatus - The response's http -- status code. -- -- $sel:policyGenerations:ListPolicyGenerationsResponse', -- listPolicyGenerationsResponse_policyGenerations - A -- PolicyGeneration object that contains details about the -- generated policy. newListPolicyGenerationsResponse :: Int -> ListPolicyGenerationsResponse -- | A token used for pagination of results returned. listPolicyGenerationsResponse_nextToken :: Lens' ListPolicyGenerationsResponse (Maybe Text) -- | The response's http status code. listPolicyGenerationsResponse_httpStatus :: Lens' ListPolicyGenerationsResponse Int -- | A PolicyGeneration object that contains details about the -- generated policy. listPolicyGenerationsResponse_policyGenerations :: Lens' ListPolicyGenerationsResponse [PolicyGeneration] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance GHC.Show.Show Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance GHC.Read.Read Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerationsResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerationsResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerationsResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerationsResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerationsResponse instance Amazonka.Pager.AWSPager Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ListPolicyGenerations.ListPolicyGenerations -- | Retrieves a list of findings generated by the specified analyzer. -- -- To learn about filter keys that you can use to retrieve a list of -- findings, see IAM Access Analyzer filter keys in the IAM -- User Guide. -- -- This operation returns paginated results. module Amazonka.AccessAnalyzer.ListFindings -- | Retrieves a list of findings generated by the specified analyzer. -- -- See: newListFindings smart constructor. data ListFindings ListFindings' :: Maybe (HashMap Text Criterion) -> Maybe Int -> Maybe Text -> Maybe SortCriteria -> Text -> ListFindings -- | A filter to match for the findings to return. [$sel:filter':ListFindings'] :: ListFindings -> Maybe (HashMap Text Criterion) -- | The maximum number of results to return in the response. [$sel:maxResults:ListFindings'] :: ListFindings -> Maybe Int -- | A token used for pagination of results returned. [$sel:nextToken:ListFindings'] :: ListFindings -> Maybe Text -- | The sort order for the findings returned. [$sel:sort:ListFindings'] :: ListFindings -> Maybe SortCriteria -- | The ARN of the analyzer to retrieve findings from. [$sel:analyzerArn:ListFindings'] :: ListFindings -> Text -- | Create a value of ListFindings with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListFindings, listFindings_filter - A filter to match -- for the findings to return. -- -- $sel:maxResults:ListFindings', listFindings_maxResults - -- The maximum number of results to return in the response. -- -- ListFindings, listFindings_nextToken - A token used for -- pagination of results returned. -- -- $sel:sort:ListFindings', listFindings_sort - The sort -- order for the findings returned. -- -- ListFindings, listFindings_analyzerArn - The ARN of -- the analyzer to retrieve findings from. newListFindings :: Text -> ListFindings -- | A filter to match for the findings to return. listFindings_filter :: Lens' ListFindings (Maybe (HashMap Text Criterion)) -- | The maximum number of results to return in the response. listFindings_maxResults :: Lens' ListFindings (Maybe Int) -- | A token used for pagination of results returned. listFindings_nextToken :: Lens' ListFindings (Maybe Text) -- | The sort order for the findings returned. listFindings_sort :: Lens' ListFindings (Maybe SortCriteria) -- | The ARN of the analyzer to retrieve findings from. listFindings_analyzerArn :: Lens' ListFindings Text -- | The response to the request. -- -- See: newListFindingsResponse smart constructor. data ListFindingsResponse ListFindingsResponse' :: Maybe Text -> Int -> [FindingSummary] -> ListFindingsResponse -- | A token used for pagination of results returned. [$sel:nextToken:ListFindingsResponse'] :: ListFindingsResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:ListFindingsResponse'] :: ListFindingsResponse -> Int -- | A list of findings retrieved from the analyzer that match the filter -- criteria specified, if any. [$sel:findings:ListFindingsResponse'] :: ListFindingsResponse -> [FindingSummary] -- | Create a value of ListFindingsResponse with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListFindings, listFindingsResponse_nextToken - A token -- used for pagination of results returned. -- -- $sel:httpStatus:ListFindingsResponse', -- listFindingsResponse_httpStatus - The response's http status -- code. -- -- $sel:findings:ListFindingsResponse', -- listFindingsResponse_findings - A list of findings retrieved -- from the analyzer that match the filter criteria specified, if any. newListFindingsResponse :: Int -> ListFindingsResponse -- | A token used for pagination of results returned. listFindingsResponse_nextToken :: Lens' ListFindingsResponse (Maybe Text) -- | The response's http status code. listFindingsResponse_httpStatus :: Lens' ListFindingsResponse Int -- | A list of findings retrieved from the analyzer that match the filter -- criteria specified, if any. listFindingsResponse_findings :: Lens' ListFindingsResponse [FindingSummary] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListFindings.ListFindings instance GHC.Show.Show Amazonka.AccessAnalyzer.ListFindings.ListFindings instance GHC.Read.Read Amazonka.AccessAnalyzer.ListFindings.ListFindings instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListFindings.ListFindings instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListFindings.ListFindingsResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ListFindings.ListFindingsResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ListFindings.ListFindingsResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListFindings.ListFindingsResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ListFindings.ListFindings instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListFindings.ListFindingsResponse instance Amazonka.Pager.AWSPager Amazonka.AccessAnalyzer.ListFindings.ListFindings instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ListFindings.ListFindings instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListFindings.ListFindings instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ListFindings.ListFindings instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.ListFindings.ListFindings instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ListFindings.ListFindings instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ListFindings.ListFindings -- | Retrieves a list of archive rules created for the specified analyzer. -- -- This operation returns paginated results. module Amazonka.AccessAnalyzer.ListArchiveRules -- | Retrieves a list of archive rules created for the specified analyzer. -- -- See: newListArchiveRules smart constructor. data ListArchiveRules ListArchiveRules' :: Maybe Int -> Maybe Text -> Text -> ListArchiveRules -- | The maximum number of results to return in the request. [$sel:maxResults:ListArchiveRules'] :: ListArchiveRules -> Maybe Int -- | A token used for pagination of results returned. [$sel:nextToken:ListArchiveRules'] :: ListArchiveRules -> Maybe Text -- | The name of the analyzer to retrieve rules from. [$sel:analyzerName:ListArchiveRules'] :: ListArchiveRules -> Text -- | Create a value of ListArchiveRules with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListArchiveRules', -- listArchiveRules_maxResults - The maximum number of results to -- return in the request. -- -- ListArchiveRules, listArchiveRules_nextToken - A token -- used for pagination of results returned. -- -- $sel:analyzerName:ListArchiveRules', -- listArchiveRules_analyzerName - The name of the analyzer to -- retrieve rules from. newListArchiveRules :: Text -> ListArchiveRules -- | The maximum number of results to return in the request. listArchiveRules_maxResults :: Lens' ListArchiveRules (Maybe Int) -- | A token used for pagination of results returned. listArchiveRules_nextToken :: Lens' ListArchiveRules (Maybe Text) -- | The name of the analyzer to retrieve rules from. listArchiveRules_analyzerName :: Lens' ListArchiveRules Text -- | The response to the request. -- -- See: newListArchiveRulesResponse smart constructor. data ListArchiveRulesResponse ListArchiveRulesResponse' :: Maybe Text -> Int -> [ArchiveRuleSummary] -> ListArchiveRulesResponse -- | A token used for pagination of results returned. [$sel:nextToken:ListArchiveRulesResponse'] :: ListArchiveRulesResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:ListArchiveRulesResponse'] :: ListArchiveRulesResponse -> Int -- | A list of archive rules created for the specified analyzer. [$sel:archiveRules:ListArchiveRulesResponse'] :: ListArchiveRulesResponse -> [ArchiveRuleSummary] -- | Create a value of ListArchiveRulesResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListArchiveRules, listArchiveRulesResponse_nextToken - A -- token used for pagination of results returned. -- -- $sel:httpStatus:ListArchiveRulesResponse', -- listArchiveRulesResponse_httpStatus - The response's http -- status code. -- -- $sel:archiveRules:ListArchiveRulesResponse', -- listArchiveRulesResponse_archiveRules - A list of archive rules -- created for the specified analyzer. newListArchiveRulesResponse :: Int -> ListArchiveRulesResponse -- | A token used for pagination of results returned. listArchiveRulesResponse_nextToken :: Lens' ListArchiveRulesResponse (Maybe Text) -- | The response's http status code. listArchiveRulesResponse_httpStatus :: Lens' ListArchiveRulesResponse Int -- | A list of archive rules created for the specified analyzer. listArchiveRulesResponse_archiveRules :: Lens' ListArchiveRulesResponse [ArchiveRuleSummary] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance GHC.Show.Show Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance GHC.Read.Read Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRulesResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRulesResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRulesResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRulesResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRulesResponse instance Amazonka.Pager.AWSPager Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ListArchiveRules.ListArchiveRules -- | Retrieves a list of analyzers. -- -- This operation returns paginated results. module Amazonka.AccessAnalyzer.ListAnalyzers -- | Retrieves a list of analyzers. -- -- See: newListAnalyzers smart constructor. data ListAnalyzers ListAnalyzers' :: Maybe Int -> Maybe Text -> Maybe Type -> ListAnalyzers -- | The maximum number of results to return in the response. [$sel:maxResults:ListAnalyzers'] :: ListAnalyzers -> Maybe Int -- | A token used for pagination of results returned. [$sel:nextToken:ListAnalyzers'] :: ListAnalyzers -> Maybe Text -- | The type of analyzer. [$sel:type':ListAnalyzers'] :: ListAnalyzers -> Maybe Type -- | Create a value of ListAnalyzers with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListAnalyzers', listAnalyzers_maxResults -- - The maximum number of results to return in the response. -- -- ListAnalyzers, listAnalyzers_nextToken - A token used -- for pagination of results returned. -- -- ListAnalyzers, listAnalyzers_type - The type of -- analyzer. newListAnalyzers :: ListAnalyzers -- | The maximum number of results to return in the response. listAnalyzers_maxResults :: Lens' ListAnalyzers (Maybe Int) -- | A token used for pagination of results returned. listAnalyzers_nextToken :: Lens' ListAnalyzers (Maybe Text) -- | The type of analyzer. listAnalyzers_type :: Lens' ListAnalyzers (Maybe Type) -- | The response to the request. -- -- See: newListAnalyzersResponse smart constructor. data ListAnalyzersResponse ListAnalyzersResponse' :: Maybe Text -> Int -> [AnalyzerSummary] -> ListAnalyzersResponse -- | A token used for pagination of results returned. [$sel:nextToken:ListAnalyzersResponse'] :: ListAnalyzersResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:ListAnalyzersResponse'] :: ListAnalyzersResponse -> Int -- | The analyzers retrieved. [$sel:analyzers:ListAnalyzersResponse'] :: ListAnalyzersResponse -> [AnalyzerSummary] -- | Create a value of ListAnalyzersResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAnalyzers, listAnalyzersResponse_nextToken - A token -- used for pagination of results returned. -- -- $sel:httpStatus:ListAnalyzersResponse', -- listAnalyzersResponse_httpStatus - The response's http status -- code. -- -- $sel:analyzers:ListAnalyzersResponse', -- listAnalyzersResponse_analyzers - The analyzers retrieved. newListAnalyzersResponse :: Int -> ListAnalyzersResponse -- | A token used for pagination of results returned. listAnalyzersResponse_nextToken :: Lens' ListAnalyzersResponse (Maybe Text) -- | The response's http status code. listAnalyzersResponse_httpStatus :: Lens' ListAnalyzersResponse Int -- | The analyzers retrieved. listAnalyzersResponse_analyzers :: Lens' ListAnalyzersResponse [AnalyzerSummary] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance GHC.Show.Show Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance GHC.Read.Read Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzersResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzersResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzersResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzersResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzersResponse instance Amazonka.Pager.AWSPager Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ListAnalyzers.ListAnalyzers -- | Retrieves a list of resources of the specified type that have been -- analyzed by the specified analyzer.. -- -- This operation returns paginated results. module Amazonka.AccessAnalyzer.ListAnalyzedResources -- | Retrieves a list of resources that have been analyzed. -- -- See: newListAnalyzedResources smart constructor. data ListAnalyzedResources ListAnalyzedResources' :: Maybe Int -> Maybe Text -> Maybe ResourceType -> Text -> ListAnalyzedResources -- | The maximum number of results to return in the response. [$sel:maxResults:ListAnalyzedResources'] :: ListAnalyzedResources -> Maybe Int -- | A token used for pagination of results returned. [$sel:nextToken:ListAnalyzedResources'] :: ListAnalyzedResources -> Maybe Text -- | The type of resource. [$sel:resourceType:ListAnalyzedResources'] :: ListAnalyzedResources -> Maybe ResourceType -- | The ARN of the analyzer to retrieve a list of analyzed -- resources from. [$sel:analyzerArn:ListAnalyzedResources'] :: ListAnalyzedResources -> Text -- | Create a value of ListAnalyzedResources with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListAnalyzedResources', -- listAnalyzedResources_maxResults - The maximum number of -- results to return in the response. -- -- ListAnalyzedResources, listAnalyzedResources_nextToken - -- A token used for pagination of results returned. -- -- ListAnalyzedResources, -- listAnalyzedResources_resourceType - The type of resource. -- -- ListAnalyzedResources, listAnalyzedResources_analyzerArn -- - The ARN of the analyzer to retrieve a list of analyzed -- resources from. newListAnalyzedResources :: Text -> ListAnalyzedResources -- | The maximum number of results to return in the response. listAnalyzedResources_maxResults :: Lens' ListAnalyzedResources (Maybe Int) -- | A token used for pagination of results returned. listAnalyzedResources_nextToken :: Lens' ListAnalyzedResources (Maybe Text) -- | The type of resource. listAnalyzedResources_resourceType :: Lens' ListAnalyzedResources (Maybe ResourceType) -- | The ARN of the analyzer to retrieve a list of analyzed -- resources from. listAnalyzedResources_analyzerArn :: Lens' ListAnalyzedResources Text -- | The response to the request. -- -- See: newListAnalyzedResourcesResponse smart constructor. data ListAnalyzedResourcesResponse ListAnalyzedResourcesResponse' :: Maybe Text -> Int -> [AnalyzedResourceSummary] -> ListAnalyzedResourcesResponse -- | A token used for pagination of results returned. [$sel:nextToken:ListAnalyzedResourcesResponse'] :: ListAnalyzedResourcesResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:ListAnalyzedResourcesResponse'] :: ListAnalyzedResourcesResponse -> Int -- | A list of resources that were analyzed. [$sel:analyzedResources:ListAnalyzedResourcesResponse'] :: ListAnalyzedResourcesResponse -> [AnalyzedResourceSummary] -- | Create a value of ListAnalyzedResourcesResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAnalyzedResources, -- listAnalyzedResourcesResponse_nextToken - A token used for -- pagination of results returned. -- -- $sel:httpStatus:ListAnalyzedResourcesResponse', -- listAnalyzedResourcesResponse_httpStatus - The response's http -- status code. -- -- $sel:analyzedResources:ListAnalyzedResourcesResponse', -- listAnalyzedResourcesResponse_analyzedResources - A list of -- resources that were analyzed. newListAnalyzedResourcesResponse :: Int -> ListAnalyzedResourcesResponse -- | A token used for pagination of results returned. listAnalyzedResourcesResponse_nextToken :: Lens' ListAnalyzedResourcesResponse (Maybe Text) -- | The response's http status code. listAnalyzedResourcesResponse_httpStatus :: Lens' ListAnalyzedResourcesResponse Int -- | A list of resources that were analyzed. listAnalyzedResourcesResponse_analyzedResources :: Lens' ListAnalyzedResourcesResponse [AnalyzedResourceSummary] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance GHC.Show.Show Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance GHC.Read.Read Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResourcesResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResourcesResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResourcesResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResourcesResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResourcesResponse instance Amazonka.Pager.AWSPager Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ListAnalyzedResources.ListAnalyzedResources -- | Retrieves a list of access previews for the specified analyzer. -- -- This operation returns paginated results. module Amazonka.AccessAnalyzer.ListAccessPreviews -- | See: newListAccessPreviews smart constructor. data ListAccessPreviews ListAccessPreviews' :: Maybe Int -> Maybe Text -> Text -> ListAccessPreviews -- | The maximum number of results to return in the response. [$sel:maxResults:ListAccessPreviews'] :: ListAccessPreviews -> Maybe Int -- | A token used for pagination of results returned. [$sel:nextToken:ListAccessPreviews'] :: ListAccessPreviews -> Maybe Text -- | The ARN of the analyzer used to generate the access preview. [$sel:analyzerArn:ListAccessPreviews'] :: ListAccessPreviews -> Text -- | Create a value of ListAccessPreviews with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListAccessPreviews', -- listAccessPreviews_maxResults - The maximum number of results -- to return in the response. -- -- ListAccessPreviews, listAccessPreviews_nextToken - A -- token used for pagination of results returned. -- -- ListAccessPreviews, listAccessPreviews_analyzerArn - The -- ARN of the analyzer used to generate the access preview. newListAccessPreviews :: Text -> ListAccessPreviews -- | The maximum number of results to return in the response. listAccessPreviews_maxResults :: Lens' ListAccessPreviews (Maybe Int) -- | A token used for pagination of results returned. listAccessPreviews_nextToken :: Lens' ListAccessPreviews (Maybe Text) -- | The ARN of the analyzer used to generate the access preview. listAccessPreviews_analyzerArn :: Lens' ListAccessPreviews Text -- | See: newListAccessPreviewsResponse smart constructor. data ListAccessPreviewsResponse ListAccessPreviewsResponse' :: Maybe Text -> Int -> [AccessPreviewSummary] -> ListAccessPreviewsResponse -- | A token used for pagination of results returned. [$sel:nextToken:ListAccessPreviewsResponse'] :: ListAccessPreviewsResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:ListAccessPreviewsResponse'] :: ListAccessPreviewsResponse -> Int -- | A list of access previews retrieved for the analyzer. [$sel:accessPreviews:ListAccessPreviewsResponse'] :: ListAccessPreviewsResponse -> [AccessPreviewSummary] -- | Create a value of ListAccessPreviewsResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAccessPreviews, listAccessPreviewsResponse_nextToken -- - A token used for pagination of results returned. -- -- $sel:httpStatus:ListAccessPreviewsResponse', -- listAccessPreviewsResponse_httpStatus - The response's http -- status code. -- -- $sel:accessPreviews:ListAccessPreviewsResponse', -- listAccessPreviewsResponse_accessPreviews - A list of access -- previews retrieved for the analyzer. newListAccessPreviewsResponse :: Int -> ListAccessPreviewsResponse -- | A token used for pagination of results returned. listAccessPreviewsResponse_nextToken :: Lens' ListAccessPreviewsResponse (Maybe Text) -- | The response's http status code. listAccessPreviewsResponse_httpStatus :: Lens' ListAccessPreviewsResponse Int -- | A list of access previews retrieved for the analyzer. listAccessPreviewsResponse_accessPreviews :: Lens' ListAccessPreviewsResponse [AccessPreviewSummary] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance GHC.Show.Show Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance GHC.Read.Read Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviewsResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviewsResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviewsResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviewsResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviewsResponse instance Amazonka.Pager.AWSPager Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ListAccessPreviews.ListAccessPreviews -- | Retrieves a list of access preview findings generated by the specified -- access preview. -- -- This operation returns paginated results. module Amazonka.AccessAnalyzer.ListAccessPreviewFindings -- | See: newListAccessPreviewFindings smart constructor. data ListAccessPreviewFindings ListAccessPreviewFindings' :: Maybe (HashMap Text Criterion) -> Maybe Int -> Maybe Text -> Text -> Text -> ListAccessPreviewFindings -- | Criteria to filter the returned findings. [$sel:filter':ListAccessPreviewFindings'] :: ListAccessPreviewFindings -> Maybe (HashMap Text Criterion) -- | The maximum number of results to return in the response. [$sel:maxResults:ListAccessPreviewFindings'] :: ListAccessPreviewFindings -> Maybe Int -- | A token used for pagination of results returned. [$sel:nextToken:ListAccessPreviewFindings'] :: ListAccessPreviewFindings -> Maybe Text -- | The unique ID for the access preview. [$sel:accessPreviewId:ListAccessPreviewFindings'] :: ListAccessPreviewFindings -> Text -- | The ARN of the analyzer used to generate the access. [$sel:analyzerArn:ListAccessPreviewFindings'] :: ListAccessPreviewFindings -> Text -- | Create a value of ListAccessPreviewFindings with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAccessPreviewFindings, -- listAccessPreviewFindings_filter - Criteria to filter the -- returned findings. -- -- $sel:maxResults:ListAccessPreviewFindings', -- listAccessPreviewFindings_maxResults - The maximum number of -- results to return in the response. -- -- ListAccessPreviewFindings, -- listAccessPreviewFindings_nextToken - A token used for -- pagination of results returned. -- -- $sel:accessPreviewId:ListAccessPreviewFindings', -- listAccessPreviewFindings_accessPreviewId - The unique ID for -- the access preview. -- -- ListAccessPreviewFindings, -- listAccessPreviewFindings_analyzerArn - The ARN of the -- analyzer used to generate the access. newListAccessPreviewFindings :: Text -> Text -> ListAccessPreviewFindings -- | Criteria to filter the returned findings. listAccessPreviewFindings_filter :: Lens' ListAccessPreviewFindings (Maybe (HashMap Text Criterion)) -- | The maximum number of results to return in the response. listAccessPreviewFindings_maxResults :: Lens' ListAccessPreviewFindings (Maybe Int) -- | A token used for pagination of results returned. listAccessPreviewFindings_nextToken :: Lens' ListAccessPreviewFindings (Maybe Text) -- | The unique ID for the access preview. listAccessPreviewFindings_accessPreviewId :: Lens' ListAccessPreviewFindings Text -- | The ARN of the analyzer used to generate the access. listAccessPreviewFindings_analyzerArn :: Lens' ListAccessPreviewFindings Text -- | See: newListAccessPreviewFindingsResponse smart -- constructor. data ListAccessPreviewFindingsResponse ListAccessPreviewFindingsResponse' :: Maybe Text -> Int -> [AccessPreviewFinding] -> ListAccessPreviewFindingsResponse -- | A token used for pagination of results returned. [$sel:nextToken:ListAccessPreviewFindingsResponse'] :: ListAccessPreviewFindingsResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:ListAccessPreviewFindingsResponse'] :: ListAccessPreviewFindingsResponse -> Int -- | A list of access preview findings that match the specified filter -- criteria. [$sel:findings:ListAccessPreviewFindingsResponse'] :: ListAccessPreviewFindingsResponse -> [AccessPreviewFinding] -- | Create a value of ListAccessPreviewFindingsResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAccessPreviewFindings, -- listAccessPreviewFindingsResponse_nextToken - A token used for -- pagination of results returned. -- -- $sel:httpStatus:ListAccessPreviewFindingsResponse', -- listAccessPreviewFindingsResponse_httpStatus - The response's -- http status code. -- -- $sel:findings:ListAccessPreviewFindingsResponse', -- listAccessPreviewFindingsResponse_findings - A list of access -- preview findings that match the specified filter criteria. newListAccessPreviewFindingsResponse :: Int -> ListAccessPreviewFindingsResponse -- | A token used for pagination of results returned. listAccessPreviewFindingsResponse_nextToken :: Lens' ListAccessPreviewFindingsResponse (Maybe Text) -- | The response's http status code. listAccessPreviewFindingsResponse_httpStatus :: Lens' ListAccessPreviewFindingsResponse Int -- | A list of access preview findings that match the specified filter -- criteria. listAccessPreviewFindingsResponse_findings :: Lens' ListAccessPreviewFindingsResponse [AccessPreviewFinding] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance GHC.Show.Show Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance GHC.Read.Read Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindingsResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindingsResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindingsResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindingsResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindingsResponse instance Amazonka.Pager.AWSPager Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ListAccessPreviewFindings.ListAccessPreviewFindings -- | Retrieves the policy that was generated using -- StartPolicyGeneration. module Amazonka.AccessAnalyzer.GetGeneratedPolicy -- | See: newGetGeneratedPolicy smart constructor. data GetGeneratedPolicy GetGeneratedPolicy' :: Maybe Bool -> Maybe Bool -> Text -> GetGeneratedPolicy -- | The level of detail that you want to generate. You can specify whether -- to generate policies with placeholders for resource ARNs for actions -- that support resource level granularity in policies. -- -- For example, in the resource section of a policy, you can receive a -- placeholder such as "Resource":"arn:aws:s3:::${BucketName}" -- instead of "*". [$sel:includeResourcePlaceholders:GetGeneratedPolicy'] :: GetGeneratedPolicy -> Maybe Bool -- | The level of detail that you want to generate. You can specify whether -- to generate service-level policies. -- -- IAM Access Analyzer uses iam:servicelastaccessed to identify -- services that have been used recently to create this service-level -- template. [$sel:includeServiceLevelTemplate:GetGeneratedPolicy'] :: GetGeneratedPolicy -> Maybe Bool -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. [$sel:jobId:GetGeneratedPolicy'] :: GetGeneratedPolicy -> Text -- | Create a value of GetGeneratedPolicy with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:includeResourcePlaceholders:GetGeneratedPolicy', -- getGeneratedPolicy_includeResourcePlaceholders - The level of -- detail that you want to generate. You can specify whether to generate -- policies with placeholders for resource ARNs for actions that support -- resource level granularity in policies. -- -- For example, in the resource section of a policy, you can receive a -- placeholder such as "Resource":"arn:aws:s3:::${BucketName}" -- instead of "*". -- -- $sel:includeServiceLevelTemplate:GetGeneratedPolicy', -- getGeneratedPolicy_includeServiceLevelTemplate - The level of -- detail that you want to generate. You can specify whether to generate -- service-level policies. -- -- IAM Access Analyzer uses iam:servicelastaccessed to identify -- services that have been used recently to create this service-level -- template. -- -- GetGeneratedPolicy, getGeneratedPolicy_jobId - The -- JobId that is returned by the StartPolicyGeneration -- operation. The JobId can be used with -- GetGeneratedPolicy to retrieve the generated policies or used -- with CancelPolicyGeneration to cancel the policy generation -- request. newGetGeneratedPolicy :: Text -> GetGeneratedPolicy -- | The level of detail that you want to generate. You can specify whether -- to generate policies with placeholders for resource ARNs for actions -- that support resource level granularity in policies. -- -- For example, in the resource section of a policy, you can receive a -- placeholder such as "Resource":"arn:aws:s3:::${BucketName}" -- instead of "*". getGeneratedPolicy_includeResourcePlaceholders :: Lens' GetGeneratedPolicy (Maybe Bool) -- | The level of detail that you want to generate. You can specify whether -- to generate service-level policies. -- -- IAM Access Analyzer uses iam:servicelastaccessed to identify -- services that have been used recently to create this service-level -- template. getGeneratedPolicy_includeServiceLevelTemplate :: Lens' GetGeneratedPolicy (Maybe Bool) -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. getGeneratedPolicy_jobId :: Lens' GetGeneratedPolicy Text -- | See: newGetGeneratedPolicyResponse smart constructor. data GetGeneratedPolicyResponse GetGeneratedPolicyResponse' :: Int -> JobDetails -> GeneratedPolicyResult -> GetGeneratedPolicyResponse -- | The response's http status code. [$sel:httpStatus:GetGeneratedPolicyResponse'] :: GetGeneratedPolicyResponse -> Int -- | A GeneratedPolicyDetails object that contains details about -- the generated policy. [$sel:jobDetails:GetGeneratedPolicyResponse'] :: GetGeneratedPolicyResponse -> JobDetails -- | A GeneratedPolicyResult object that contains the generated -- policies and associated details. [$sel:generatedPolicyResult:GetGeneratedPolicyResponse'] :: GetGeneratedPolicyResponse -> GeneratedPolicyResult -- | Create a value of GetGeneratedPolicyResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:GetGeneratedPolicyResponse', -- getGeneratedPolicyResponse_httpStatus - The response's http -- status code. -- -- $sel:jobDetails:GetGeneratedPolicyResponse', -- getGeneratedPolicyResponse_jobDetails - A -- GeneratedPolicyDetails object that contains details about the -- generated policy. -- -- $sel:generatedPolicyResult:GetGeneratedPolicyResponse', -- getGeneratedPolicyResponse_generatedPolicyResult - A -- GeneratedPolicyResult object that contains the generated -- policies and associated details. newGetGeneratedPolicyResponse :: Int -> JobDetails -> GeneratedPolicyResult -> GetGeneratedPolicyResponse -- | The response's http status code. getGeneratedPolicyResponse_httpStatus :: Lens' GetGeneratedPolicyResponse Int -- | A GeneratedPolicyDetails object that contains details about -- the generated policy. getGeneratedPolicyResponse_jobDetails :: Lens' GetGeneratedPolicyResponse JobDetails -- | A GeneratedPolicyResult object that contains the generated -- policies and associated details. getGeneratedPolicyResponse_generatedPolicyResult :: Lens' GetGeneratedPolicyResponse GeneratedPolicyResult instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance GHC.Show.Show Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance GHC.Read.Read Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicyResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicyResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicyResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicyResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicyResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.GetGeneratedPolicy.GetGeneratedPolicy -- | Retrieves information about the specified finding. module Amazonka.AccessAnalyzer.GetFinding -- | Retrieves a finding. -- -- See: newGetFinding smart constructor. data GetFinding GetFinding' :: Text -> Text -> GetFinding -- | The ARN of the analyzer that generated the finding. [$sel:analyzerArn:GetFinding'] :: GetFinding -> Text -- | The ID of the finding to retrieve. [$sel:id:GetFinding'] :: GetFinding -> Text -- | Create a value of GetFinding with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- GetFinding, getFinding_analyzerArn - The ARN of the -- analyzer that generated the finding. -- -- GetFinding, getFinding_id - The ID of the finding to -- retrieve. newGetFinding :: Text -> Text -> GetFinding -- | The ARN of the analyzer that generated the finding. getFinding_analyzerArn :: Lens' GetFinding Text -- | The ID of the finding to retrieve. getFinding_id :: Lens' GetFinding Text -- | The response to the request. -- -- See: newGetFindingResponse smart constructor. data GetFindingResponse GetFindingResponse' :: Maybe Finding -> Int -> GetFindingResponse -- | A finding object that contains finding details. [$sel:finding:GetFindingResponse'] :: GetFindingResponse -> Maybe Finding -- | The response's http status code. [$sel:httpStatus:GetFindingResponse'] :: GetFindingResponse -> Int -- | Create a value of GetFindingResponse with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:finding:GetFindingResponse', -- getFindingResponse_finding - A finding object that -- contains finding details. -- -- $sel:httpStatus:GetFindingResponse', -- getFindingResponse_httpStatus - The response's http status -- code. newGetFindingResponse :: Int -> GetFindingResponse -- | A finding object that contains finding details. getFindingResponse_finding :: Lens' GetFindingResponse (Maybe Finding) -- | The response's http status code. getFindingResponse_httpStatus :: Lens' GetFindingResponse Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetFinding.GetFinding instance GHC.Show.Show Amazonka.AccessAnalyzer.GetFinding.GetFinding instance GHC.Read.Read Amazonka.AccessAnalyzer.GetFinding.GetFinding instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetFinding.GetFinding instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetFinding.GetFindingResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.GetFinding.GetFindingResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.GetFinding.GetFindingResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetFinding.GetFindingResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.GetFinding.GetFinding instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetFinding.GetFindingResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.GetFinding.GetFinding instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetFinding.GetFinding instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.GetFinding.GetFinding instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.GetFinding.GetFinding instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.GetFinding.GetFinding -- | Retrieves information about an archive rule. -- -- To learn about filter keys that you can use to create an archive rule, -- see IAM Access Analyzer filter keys in the IAM User -- Guide. module Amazonka.AccessAnalyzer.GetArchiveRule -- | Retrieves an archive rule. -- -- See: newGetArchiveRule smart constructor. data GetArchiveRule GetArchiveRule' :: Text -> Text -> GetArchiveRule -- | The name of the analyzer to retrieve rules from. [$sel:analyzerName:GetArchiveRule'] :: GetArchiveRule -> Text -- | The name of the rule to retrieve. [$sel:ruleName:GetArchiveRule'] :: GetArchiveRule -> Text -- | Create a value of GetArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:analyzerName:GetArchiveRule', -- getArchiveRule_analyzerName - The name of the analyzer to -- retrieve rules from. -- -- GetArchiveRule, getArchiveRule_ruleName - The name of -- the rule to retrieve. newGetArchiveRule :: Text -> Text -> GetArchiveRule -- | The name of the analyzer to retrieve rules from. getArchiveRule_analyzerName :: Lens' GetArchiveRule Text -- | The name of the rule to retrieve. getArchiveRule_ruleName :: Lens' GetArchiveRule Text -- | The response to the request. -- -- See: newGetArchiveRuleResponse smart constructor. data GetArchiveRuleResponse GetArchiveRuleResponse' :: Int -> ArchiveRuleSummary -> GetArchiveRuleResponse -- | The response's http status code. [$sel:httpStatus:GetArchiveRuleResponse'] :: GetArchiveRuleResponse -> Int [$sel:archiveRule:GetArchiveRuleResponse'] :: GetArchiveRuleResponse -> ArchiveRuleSummary -- | Create a value of GetArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:GetArchiveRuleResponse', -- getArchiveRuleResponse_httpStatus - The response's http status -- code. -- -- $sel:archiveRule:GetArchiveRuleResponse', -- getArchiveRuleResponse_archiveRule - Undocumented member. newGetArchiveRuleResponse :: Int -> ArchiveRuleSummary -> GetArchiveRuleResponse -- | The response's http status code. getArchiveRuleResponse_httpStatus :: Lens' GetArchiveRuleResponse Int -- | Undocumented member. getArchiveRuleResponse_archiveRule :: Lens' GetArchiveRuleResponse ArchiveRuleSummary instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance GHC.Show.Show Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance GHC.Read.Read Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRuleResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRuleResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRuleResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRuleResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRuleResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.GetArchiveRule.GetArchiveRule -- | Retrieves information about the specified analyzer. module Amazonka.AccessAnalyzer.GetAnalyzer -- | Retrieves an analyzer. -- -- See: newGetAnalyzer smart constructor. data GetAnalyzer GetAnalyzer' :: Text -> GetAnalyzer -- | The name of the analyzer retrieved. [$sel:analyzerName:GetAnalyzer'] :: GetAnalyzer -> Text -- | Create a value of GetAnalyzer with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:analyzerName:GetAnalyzer', getAnalyzer_analyzerName -- - The name of the analyzer retrieved. newGetAnalyzer :: Text -> GetAnalyzer -- | The name of the analyzer retrieved. getAnalyzer_analyzerName :: Lens' GetAnalyzer Text -- | The response to the request. -- -- See: newGetAnalyzerResponse smart constructor. data GetAnalyzerResponse GetAnalyzerResponse' :: Int -> AnalyzerSummary -> GetAnalyzerResponse -- | The response's http status code. [$sel:httpStatus:GetAnalyzerResponse'] :: GetAnalyzerResponse -> Int -- | An AnalyzerSummary object that contains information about the -- analyzer. [$sel:analyzer:GetAnalyzerResponse'] :: GetAnalyzerResponse -> AnalyzerSummary -- | Create a value of GetAnalyzerResponse with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:GetAnalyzerResponse', -- getAnalyzerResponse_httpStatus - The response's http status -- code. -- -- $sel:analyzer:GetAnalyzerResponse', -- getAnalyzerResponse_analyzer - An AnalyzerSummary -- object that contains information about the analyzer. newGetAnalyzerResponse :: Int -> AnalyzerSummary -> GetAnalyzerResponse -- | The response's http status code. getAnalyzerResponse_httpStatus :: Lens' GetAnalyzerResponse Int -- | An AnalyzerSummary object that contains information about the -- analyzer. getAnalyzerResponse_analyzer :: Lens' GetAnalyzerResponse AnalyzerSummary instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance GHC.Show.Show Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance GHC.Read.Read Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzerResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzerResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzerResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzerResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzerResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.GetAnalyzer.GetAnalyzer -- | Retrieves information about a resource that was analyzed. module Amazonka.AccessAnalyzer.GetAnalyzedResource -- | Retrieves an analyzed resource. -- -- See: newGetAnalyzedResource smart constructor. data GetAnalyzedResource GetAnalyzedResource' :: Text -> Text -> GetAnalyzedResource -- | The ARN of the analyzer to retrieve information from. [$sel:analyzerArn:GetAnalyzedResource'] :: GetAnalyzedResource -> Text -- | The ARN of the resource to retrieve information about. [$sel:resourceArn:GetAnalyzedResource'] :: GetAnalyzedResource -> Text -- | Create a value of GetAnalyzedResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- GetAnalyzedResource, getAnalyzedResource_analyzerArn - -- The ARN of the analyzer to retrieve information from. -- -- GetAnalyzedResource, getAnalyzedResource_resourceArn - -- The ARN of the resource to retrieve information about. newGetAnalyzedResource :: Text -> Text -> GetAnalyzedResource -- | The ARN of the analyzer to retrieve information from. getAnalyzedResource_analyzerArn :: Lens' GetAnalyzedResource Text -- | The ARN of the resource to retrieve information about. getAnalyzedResource_resourceArn :: Lens' GetAnalyzedResource Text -- | The response to the request. -- -- See: newGetAnalyzedResourceResponse smart constructor. data GetAnalyzedResourceResponse GetAnalyzedResourceResponse' :: Maybe AnalyzedResource -> Int -> GetAnalyzedResourceResponse -- | An AnalyzedResource object that contains information that IAM -- Access Analyzer found when it analyzed the resource. [$sel:resource:GetAnalyzedResourceResponse'] :: GetAnalyzedResourceResponse -> Maybe AnalyzedResource -- | The response's http status code. [$sel:httpStatus:GetAnalyzedResourceResponse'] :: GetAnalyzedResourceResponse -> Int -- | Create a value of GetAnalyzedResourceResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- GetAnalyzedResourceResponse, -- getAnalyzedResourceResponse_resource - An -- AnalyzedResource object that contains information that IAM -- Access Analyzer found when it analyzed the resource. -- -- $sel:httpStatus:GetAnalyzedResourceResponse', -- getAnalyzedResourceResponse_httpStatus - The response's http -- status code. newGetAnalyzedResourceResponse :: Int -> GetAnalyzedResourceResponse -- | An AnalyzedResource object that contains information that IAM -- Access Analyzer found when it analyzed the resource. getAnalyzedResourceResponse_resource :: Lens' GetAnalyzedResourceResponse (Maybe AnalyzedResource) -- | The response's http status code. getAnalyzedResourceResponse_httpStatus :: Lens' GetAnalyzedResourceResponse Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance GHC.Show.Show Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance GHC.Read.Read Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResourceResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResourceResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResourceResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResourceResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResourceResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.GetAnalyzedResource.GetAnalyzedResource -- | Retrieves information about an access preview for the specified -- analyzer. module Amazonka.AccessAnalyzer.GetAccessPreview -- | See: newGetAccessPreview smart constructor. data GetAccessPreview GetAccessPreview' :: Text -> Text -> GetAccessPreview -- | The unique ID for the access preview. [$sel:accessPreviewId:GetAccessPreview'] :: GetAccessPreview -> Text -- | The ARN of the analyzer used to generate the access preview. [$sel:analyzerArn:GetAccessPreview'] :: GetAccessPreview -> Text -- | Create a value of GetAccessPreview with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPreviewId:GetAccessPreview', -- getAccessPreview_accessPreviewId - The unique ID for the access -- preview. -- -- GetAccessPreview, getAccessPreview_analyzerArn - The -- ARN of the analyzer used to generate the access preview. newGetAccessPreview :: Text -> Text -> GetAccessPreview -- | The unique ID for the access preview. getAccessPreview_accessPreviewId :: Lens' GetAccessPreview Text -- | The ARN of the analyzer used to generate the access preview. getAccessPreview_analyzerArn :: Lens' GetAccessPreview Text -- | See: newGetAccessPreviewResponse smart constructor. data GetAccessPreviewResponse GetAccessPreviewResponse' :: Int -> AccessPreview -> GetAccessPreviewResponse -- | The response's http status code. [$sel:httpStatus:GetAccessPreviewResponse'] :: GetAccessPreviewResponse -> Int -- | An object that contains information about the access preview. [$sel:accessPreview:GetAccessPreviewResponse'] :: GetAccessPreviewResponse -> AccessPreview -- | Create a value of GetAccessPreviewResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:GetAccessPreviewResponse', -- getAccessPreviewResponse_httpStatus - The response's http -- status code. -- -- $sel:accessPreview:GetAccessPreviewResponse', -- getAccessPreviewResponse_accessPreview - An object that -- contains information about the access preview. newGetAccessPreviewResponse :: Int -> AccessPreview -> GetAccessPreviewResponse -- | The response's http status code. getAccessPreviewResponse_httpStatus :: Lens' GetAccessPreviewResponse Int -- | An object that contains information about the access preview. getAccessPreviewResponse_accessPreview :: Lens' GetAccessPreviewResponse AccessPreview instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance GHC.Show.Show Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance GHC.Read.Read Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance GHC.Generics.Generic Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreviewResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreviewResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreviewResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreviewResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreviewResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.GetAccessPreview.GetAccessPreview -- | Deletes the specified archive rule. module Amazonka.AccessAnalyzer.DeleteArchiveRule -- | Deletes an archive rule. -- -- See: newDeleteArchiveRule smart constructor. data DeleteArchiveRule DeleteArchiveRule' :: Maybe Text -> Text -> Text -> DeleteArchiveRule -- | A client token. [$sel:clientToken:DeleteArchiveRule'] :: DeleteArchiveRule -> Maybe Text -- | The name of the analyzer that associated with the archive rule to -- delete. [$sel:analyzerName:DeleteArchiveRule'] :: DeleteArchiveRule -> Text -- | The name of the rule to delete. [$sel:ruleName:DeleteArchiveRule'] :: DeleteArchiveRule -> Text -- | Create a value of DeleteArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:DeleteArchiveRule', -- deleteArchiveRule_clientToken - A client token. -- -- $sel:analyzerName:DeleteArchiveRule', -- deleteArchiveRule_analyzerName - The name of the analyzer that -- associated with the archive rule to delete. -- -- DeleteArchiveRule, deleteArchiveRule_ruleName - The name -- of the rule to delete. newDeleteArchiveRule :: Text -> Text -> DeleteArchiveRule -- | A client token. deleteArchiveRule_clientToken :: Lens' DeleteArchiveRule (Maybe Text) -- | The name of the analyzer that associated with the archive rule to -- delete. deleteArchiveRule_analyzerName :: Lens' DeleteArchiveRule Text -- | The name of the rule to delete. deleteArchiveRule_ruleName :: Lens' DeleteArchiveRule Text -- | See: newDeleteArchiveRuleResponse smart constructor. data DeleteArchiveRuleResponse DeleteArchiveRuleResponse' :: DeleteArchiveRuleResponse -- | Create a value of DeleteArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newDeleteArchiveRuleResponse :: DeleteArchiveRuleResponse instance GHC.Generics.Generic Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance GHC.Show.Show Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance GHC.Read.Read Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance GHC.Classes.Eq Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance GHC.Generics.Generic Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRuleResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRuleResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRuleResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRuleResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRuleResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.DeleteArchiveRule.DeleteArchiveRule -- | Deletes the specified analyzer. When you delete an analyzer, IAM -- Access Analyzer is disabled for the account or organization in the -- current or specific Region. All findings that were generated by the -- analyzer are deleted. You cannot undo this action. module Amazonka.AccessAnalyzer.DeleteAnalyzer -- | Deletes an analyzer. -- -- See: newDeleteAnalyzer smart constructor. data DeleteAnalyzer DeleteAnalyzer' :: Maybe Text -> Text -> DeleteAnalyzer -- | A client token. [$sel:clientToken:DeleteAnalyzer'] :: DeleteAnalyzer -> Maybe Text -- | The name of the analyzer to delete. [$sel:analyzerName:DeleteAnalyzer'] :: DeleteAnalyzer -> Text -- | Create a value of DeleteAnalyzer with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:DeleteAnalyzer', -- deleteAnalyzer_clientToken - A client token. -- -- $sel:analyzerName:DeleteAnalyzer', -- deleteAnalyzer_analyzerName - The name of the analyzer to -- delete. newDeleteAnalyzer :: Text -> DeleteAnalyzer -- | A client token. deleteAnalyzer_clientToken :: Lens' DeleteAnalyzer (Maybe Text) -- | The name of the analyzer to delete. deleteAnalyzer_analyzerName :: Lens' DeleteAnalyzer Text -- | See: newDeleteAnalyzerResponse smart constructor. data DeleteAnalyzerResponse DeleteAnalyzerResponse' :: DeleteAnalyzerResponse -- | Create a value of DeleteAnalyzerResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newDeleteAnalyzerResponse :: DeleteAnalyzerResponse instance GHC.Generics.Generic Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance GHC.Show.Show Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance GHC.Read.Read Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance GHC.Classes.Eq Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance GHC.Generics.Generic Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzerResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzerResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzerResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzerResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzerResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.DeleteAnalyzer.DeleteAnalyzer -- | Creates an archive rule for the specified analyzer. Archive rules -- automatically archive new findings that meet the criteria you define -- when you create the rule. -- -- To learn about filter keys that you can use to create an archive rule, -- see IAM Access Analyzer filter keys in the IAM User -- Guide. module Amazonka.AccessAnalyzer.CreateArchiveRule -- | Creates an archive rule. -- -- See: newCreateArchiveRule smart constructor. data CreateArchiveRule CreateArchiveRule' :: Maybe Text -> Text -> Text -> HashMap Text Criterion -> CreateArchiveRule -- | A client token. [$sel:clientToken:CreateArchiveRule'] :: CreateArchiveRule -> Maybe Text -- | The name of the created analyzer. [$sel:analyzerName:CreateArchiveRule'] :: CreateArchiveRule -> Text -- | The name of the rule to create. [$sel:ruleName:CreateArchiveRule'] :: CreateArchiveRule -> Text -- | The criteria for the rule. [$sel:filter':CreateArchiveRule'] :: CreateArchiveRule -> HashMap Text Criterion -- | Create a value of CreateArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:CreateArchiveRule', -- createArchiveRule_clientToken - A client token. -- -- $sel:analyzerName:CreateArchiveRule', -- createArchiveRule_analyzerName - The name of the created -- analyzer. -- -- CreateArchiveRule, createArchiveRule_ruleName - The name -- of the rule to create. -- -- CreateArchiveRule, createArchiveRule_filter - The -- criteria for the rule. newCreateArchiveRule :: Text -> Text -> CreateArchiveRule -- | A client token. createArchiveRule_clientToken :: Lens' CreateArchiveRule (Maybe Text) -- | The name of the created analyzer. createArchiveRule_analyzerName :: Lens' CreateArchiveRule Text -- | The name of the rule to create. createArchiveRule_ruleName :: Lens' CreateArchiveRule Text -- | The criteria for the rule. createArchiveRule_filter :: Lens' CreateArchiveRule (HashMap Text Criterion) -- | See: newCreateArchiveRuleResponse smart constructor. data CreateArchiveRuleResponse CreateArchiveRuleResponse' :: CreateArchiveRuleResponse -- | Create a value of CreateArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newCreateArchiveRuleResponse :: CreateArchiveRuleResponse instance GHC.Generics.Generic Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance GHC.Show.Show Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance GHC.Read.Read Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance GHC.Classes.Eq Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance GHC.Generics.Generic Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRuleResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRuleResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRuleResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRuleResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRuleResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.CreateArchiveRule.CreateArchiveRule -- | Creates an analyzer for your account. module Amazonka.AccessAnalyzer.CreateAnalyzer -- | Creates an analyzer. -- -- See: newCreateAnalyzer smart constructor. data CreateAnalyzer CreateAnalyzer' :: Maybe [InlineArchiveRule] -> Maybe Text -> Maybe (HashMap Text Text) -> Text -> Type -> CreateAnalyzer -- | Specifies the archive rules to add for the analyzer. Archive rules -- automatically archive findings that meet the criteria you define for -- the rule. [$sel:archiveRules:CreateAnalyzer'] :: CreateAnalyzer -> Maybe [InlineArchiveRule] -- | A client token. [$sel:clientToken:CreateAnalyzer'] :: CreateAnalyzer -> Maybe Text -- | The tags to apply to the analyzer. [$sel:tags:CreateAnalyzer'] :: CreateAnalyzer -> Maybe (HashMap Text Text) -- | The name of the analyzer to create. [$sel:analyzerName:CreateAnalyzer'] :: CreateAnalyzer -> Text -- | The type of analyzer to create. Only ACCOUNT and ORGANIZATION -- analyzers are supported. You can create only one analyzer per account -- per Region. You can create up to 5 analyzers per organization per -- Region. [$sel:type':CreateAnalyzer'] :: CreateAnalyzer -> Type -- | Create a value of CreateAnalyzer with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:archiveRules:CreateAnalyzer', -- createAnalyzer_archiveRules - Specifies the archive rules to -- add for the analyzer. Archive rules automatically archive findings -- that meet the criteria you define for the rule. -- -- $sel:clientToken:CreateAnalyzer', -- createAnalyzer_clientToken - A client token. -- -- CreateAnalyzer, createAnalyzer_tags - The tags to apply -- to the analyzer. -- -- $sel:analyzerName:CreateAnalyzer', -- createAnalyzer_analyzerName - The name of the analyzer to -- create. -- -- CreateAnalyzer, createAnalyzer_type - The type of -- analyzer to create. Only ACCOUNT and ORGANIZATION analyzers are -- supported. You can create only one analyzer per account per Region. -- You can create up to 5 analyzers per organization per Region. newCreateAnalyzer :: Text -> Type -> CreateAnalyzer -- | Specifies the archive rules to add for the analyzer. Archive rules -- automatically archive findings that meet the criteria you define for -- the rule. createAnalyzer_archiveRules :: Lens' CreateAnalyzer (Maybe [InlineArchiveRule]) -- | A client token. createAnalyzer_clientToken :: Lens' CreateAnalyzer (Maybe Text) -- | The tags to apply to the analyzer. createAnalyzer_tags :: Lens' CreateAnalyzer (Maybe (HashMap Text Text)) -- | The name of the analyzer to create. createAnalyzer_analyzerName :: Lens' CreateAnalyzer Text -- | The type of analyzer to create. Only ACCOUNT and ORGANIZATION -- analyzers are supported. You can create only one analyzer per account -- per Region. You can create up to 5 analyzers per organization per -- Region. createAnalyzer_type :: Lens' CreateAnalyzer Type -- | The response to the request to create an analyzer. -- -- See: newCreateAnalyzerResponse smart constructor. data CreateAnalyzerResponse CreateAnalyzerResponse' :: Maybe Text -> Int -> CreateAnalyzerResponse -- | The ARN of the analyzer that was created by the request. [$sel:arn:CreateAnalyzerResponse'] :: CreateAnalyzerResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:CreateAnalyzerResponse'] :: CreateAnalyzerResponse -> Int -- | Create a value of CreateAnalyzerResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- CreateAnalyzerResponse, createAnalyzerResponse_arn - The -- ARN of the analyzer that was created by the request. -- -- $sel:httpStatus:CreateAnalyzerResponse', -- createAnalyzerResponse_httpStatus - The response's http status -- code. newCreateAnalyzerResponse :: Int -> CreateAnalyzerResponse -- | The ARN of the analyzer that was created by the request. createAnalyzerResponse_arn :: Lens' CreateAnalyzerResponse (Maybe Text) -- | The response's http status code. createAnalyzerResponse_httpStatus :: Lens' CreateAnalyzerResponse Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance GHC.Show.Show Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance GHC.Read.Read Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance GHC.Classes.Eq Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance GHC.Generics.Generic Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzerResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzerResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzerResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzerResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzerResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.CreateAnalyzer.CreateAnalyzer -- | Creates an access preview that allows you to preview IAM Access -- Analyzer findings for your resource before deploying resource -- permissions. module Amazonka.AccessAnalyzer.CreateAccessPreview -- | See: newCreateAccessPreview smart constructor. data CreateAccessPreview CreateAccessPreview' :: Maybe Text -> Text -> HashMap Text Configuration -> CreateAccessPreview -- | A client token. [$sel:clientToken:CreateAccessPreview'] :: CreateAccessPreview -> Maybe Text -- | The ARN of the account analyzer used to generate the access -- preview. You can only create an access preview for analyzers with an -- Account type and Active status. [$sel:analyzerArn:CreateAccessPreview'] :: CreateAccessPreview -> Text -- | Access control configuration for your resource that is used to -- generate the access preview. The access preview includes findings for -- external access allowed to the resource with the proposed access -- control configuration. The configuration must contain exactly one -- element. [$sel:configurations:CreateAccessPreview'] :: CreateAccessPreview -> HashMap Text Configuration -- | Create a value of CreateAccessPreview with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:CreateAccessPreview', -- createAccessPreview_clientToken - A client token. -- -- CreateAccessPreview, createAccessPreview_analyzerArn - -- The ARN of the account analyzer used to generate the access -- preview. You can only create an access preview for analyzers with an -- Account type and Active status. -- -- CreateAccessPreview, createAccessPreview_configurations -- - Access control configuration for your resource that is used to -- generate the access preview. The access preview includes findings for -- external access allowed to the resource with the proposed access -- control configuration. The configuration must contain exactly one -- element. newCreateAccessPreview :: Text -> CreateAccessPreview -- | A client token. createAccessPreview_clientToken :: Lens' CreateAccessPreview (Maybe Text) -- | The ARN of the account analyzer used to generate the access -- preview. You can only create an access preview for analyzers with an -- Account type and Active status. createAccessPreview_analyzerArn :: Lens' CreateAccessPreview Text -- | Access control configuration for your resource that is used to -- generate the access preview. The access preview includes findings for -- external access allowed to the resource with the proposed access -- control configuration. The configuration must contain exactly one -- element. createAccessPreview_configurations :: Lens' CreateAccessPreview (HashMap Text Configuration) -- | See: newCreateAccessPreviewResponse smart constructor. data CreateAccessPreviewResponse CreateAccessPreviewResponse' :: Int -> Text -> CreateAccessPreviewResponse -- | The response's http status code. [$sel:httpStatus:CreateAccessPreviewResponse'] :: CreateAccessPreviewResponse -> Int -- | The unique ID for the access preview. [$sel:id:CreateAccessPreviewResponse'] :: CreateAccessPreviewResponse -> Text -- | Create a value of CreateAccessPreviewResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:CreateAccessPreviewResponse', -- createAccessPreviewResponse_httpStatus - The response's http -- status code. -- -- CreateAccessPreviewResponse, -- createAccessPreviewResponse_id - The unique ID for the access -- preview. newCreateAccessPreviewResponse :: Int -> Text -> CreateAccessPreviewResponse -- | The response's http status code. createAccessPreviewResponse_httpStatus :: Lens' CreateAccessPreviewResponse Int -- | The unique ID for the access preview. createAccessPreviewResponse_id :: Lens' CreateAccessPreviewResponse Text instance GHC.Generics.Generic Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance GHC.Show.Show Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance GHC.Read.Read Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance GHC.Classes.Eq Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance GHC.Generics.Generic Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreviewResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreviewResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreviewResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreviewResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreviewResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.CreateAccessPreview.CreateAccessPreview -- | Cancels the requested policy generation. module Amazonka.AccessAnalyzer.CancelPolicyGeneration -- | See: newCancelPolicyGeneration smart constructor. data CancelPolicyGeneration CancelPolicyGeneration' :: Text -> CancelPolicyGeneration -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. [$sel:jobId:CancelPolicyGeneration'] :: CancelPolicyGeneration -> Text -- | Create a value of CancelPolicyGeneration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- CancelPolicyGeneration, cancelPolicyGeneration_jobId - -- The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. newCancelPolicyGeneration :: Text -> CancelPolicyGeneration -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. cancelPolicyGeneration_jobId :: Lens' CancelPolicyGeneration Text -- | See: newCancelPolicyGenerationResponse smart -- constructor. data CancelPolicyGenerationResponse CancelPolicyGenerationResponse' :: Int -> CancelPolicyGenerationResponse -- | The response's http status code. [$sel:httpStatus:CancelPolicyGenerationResponse'] :: CancelPolicyGenerationResponse -> Int -- | Create a value of CancelPolicyGenerationResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:CancelPolicyGenerationResponse', -- cancelPolicyGenerationResponse_httpStatus - The response's http -- status code. newCancelPolicyGenerationResponse :: Int -> CancelPolicyGenerationResponse -- | The response's http status code. cancelPolicyGenerationResponse_httpStatus :: Lens' CancelPolicyGenerationResponse Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance GHC.Show.Show Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance GHC.Read.Read Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance GHC.Classes.Eq Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance GHC.Generics.Generic Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGenerationResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGenerationResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGenerationResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGenerationResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGenerationResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.CancelPolicyGeneration.CancelPolicyGeneration -- | Retroactively applies the archive rule to existing findings that meet -- the archive rule criteria. module Amazonka.AccessAnalyzer.ApplyArchiveRule -- | Retroactively applies an archive rule. -- -- See: newApplyArchiveRule smart constructor. data ApplyArchiveRule ApplyArchiveRule' :: Maybe Text -> Text -> Text -> ApplyArchiveRule -- | A client token. [$sel:clientToken:ApplyArchiveRule'] :: ApplyArchiveRule -> Maybe Text -- | The Amazon resource name (ARN) of the analyzer. [$sel:analyzerArn:ApplyArchiveRule'] :: ApplyArchiveRule -> Text -- | The name of the rule to apply. [$sel:ruleName:ApplyArchiveRule'] :: ApplyArchiveRule -> Text -- | Create a value of ApplyArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:ApplyArchiveRule', -- applyArchiveRule_clientToken - A client token. -- -- ApplyArchiveRule, applyArchiveRule_analyzerArn - The -- Amazon resource name (ARN) of the analyzer. -- -- ApplyArchiveRule, applyArchiveRule_ruleName - The name -- of the rule to apply. newApplyArchiveRule :: Text -> Text -> ApplyArchiveRule -- | A client token. applyArchiveRule_clientToken :: Lens' ApplyArchiveRule (Maybe Text) -- | The Amazon resource name (ARN) of the analyzer. applyArchiveRule_analyzerArn :: Lens' ApplyArchiveRule Text -- | The name of the rule to apply. applyArchiveRule_ruleName :: Lens' ApplyArchiveRule Text -- | See: newApplyArchiveRuleResponse smart constructor. data ApplyArchiveRuleResponse ApplyArchiveRuleResponse' :: ApplyArchiveRuleResponse -- | Create a value of ApplyArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newApplyArchiveRuleResponse :: ApplyArchiveRuleResponse instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance GHC.Show.Show Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance GHC.Read.Read Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRuleResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRuleResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRuleResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRuleResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRuleResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ApplyArchiveRule.ApplyArchiveRule -- | Removes a tag from the specified resource. module Amazonka.AccessAnalyzer.UntagResource -- | Removes a tag from the specified resource. -- -- See: newUntagResource smart constructor. data UntagResource UntagResource' :: Text -> [Text] -> UntagResource -- | The ARN of the resource to remove the tag from. [$sel:resourceArn:UntagResource'] :: UntagResource -> Text -- | The key for the tag to add. [$sel:tagKeys:UntagResource'] :: UntagResource -> [Text] -- | Create a value of UntagResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- UntagResource, untagResource_resourceArn - The ARN of -- the resource to remove the tag from. -- -- $sel:tagKeys:UntagResource', untagResource_tagKeys - The -- key for the tag to add. newUntagResource :: Text -> UntagResource -- | The ARN of the resource to remove the tag from. untagResource_resourceArn :: Lens' UntagResource Text -- | The key for the tag to add. untagResource_tagKeys :: Lens' UntagResource [Text] -- | The response to the request. -- -- See: newUntagResourceResponse smart constructor. data UntagResourceResponse UntagResourceResponse' :: Int -> UntagResourceResponse -- | The response's http status code. [$sel:httpStatus:UntagResourceResponse'] :: UntagResourceResponse -> Int -- | Create a value of UntagResourceResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:UntagResourceResponse', -- untagResourceResponse_httpStatus - The response's http status -- code. newUntagResourceResponse :: Int -> UntagResourceResponse -- | The response's http status code. untagResourceResponse_httpStatus :: Lens' UntagResourceResponse Int instance GHC.Generics.Generic Amazonka.AccessAnalyzer.UntagResource.UntagResource instance GHC.Show.Show Amazonka.AccessAnalyzer.UntagResource.UntagResource instance GHC.Read.Read Amazonka.AccessAnalyzer.UntagResource.UntagResource instance GHC.Classes.Eq Amazonka.AccessAnalyzer.UntagResource.UntagResource instance GHC.Generics.Generic Amazonka.AccessAnalyzer.UntagResource.UntagResourceResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.UntagResource.UntagResourceResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.UntagResource.UntagResourceResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.UntagResource.UntagResourceResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.UntagResource.UntagResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.UntagResource.UntagResourceResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.UntagResource.UntagResource instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.UntagResource.UntagResource instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.UntagResource.UntagResource instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.UntagResource.UntagResource instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.UntagResource.UntagResource -- | Updates the criteria and values for the specified archive rule. module Amazonka.AccessAnalyzer.UpdateArchiveRule -- | Updates the specified archive rule. -- -- See: newUpdateArchiveRule smart constructor. data UpdateArchiveRule UpdateArchiveRule' :: Maybe Text -> Text -> Text -> HashMap Text Criterion -> UpdateArchiveRule -- | A client token. [$sel:clientToken:UpdateArchiveRule'] :: UpdateArchiveRule -> Maybe Text -- | The name of the analyzer to update the archive rules for. [$sel:analyzerName:UpdateArchiveRule'] :: UpdateArchiveRule -> Text -- | The name of the rule to update. [$sel:ruleName:UpdateArchiveRule'] :: UpdateArchiveRule -> Text -- | A filter to match for the rules to update. Only rules that match the -- filter are updated. [$sel:filter':UpdateArchiveRule'] :: UpdateArchiveRule -> HashMap Text Criterion -- | Create a value of UpdateArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:UpdateArchiveRule', -- updateArchiveRule_clientToken - A client token. -- -- $sel:analyzerName:UpdateArchiveRule', -- updateArchiveRule_analyzerName - The name of the analyzer to -- update the archive rules for. -- -- UpdateArchiveRule, updateArchiveRule_ruleName - The name -- of the rule to update. -- -- UpdateArchiveRule, updateArchiveRule_filter - A filter -- to match for the rules to update. Only rules that match the filter are -- updated. newUpdateArchiveRule :: Text -> Text -> UpdateArchiveRule -- | A client token. updateArchiveRule_clientToken :: Lens' UpdateArchiveRule (Maybe Text) -- | The name of the analyzer to update the archive rules for. updateArchiveRule_analyzerName :: Lens' UpdateArchiveRule Text -- | The name of the rule to update. updateArchiveRule_ruleName :: Lens' UpdateArchiveRule Text -- | A filter to match for the rules to update. Only rules that match the -- filter are updated. updateArchiveRule_filter :: Lens' UpdateArchiveRule (HashMap Text Criterion) -- | See: newUpdateArchiveRuleResponse smart constructor. data UpdateArchiveRuleResponse UpdateArchiveRuleResponse' :: UpdateArchiveRuleResponse -- | Create a value of UpdateArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newUpdateArchiveRuleResponse :: UpdateArchiveRuleResponse instance GHC.Generics.Generic Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance GHC.Show.Show Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance GHC.Read.Read Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance GHC.Classes.Eq Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance GHC.Generics.Generic Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRuleResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRuleResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRuleResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRuleResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRuleResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.UpdateArchiveRule.UpdateArchiveRule -- | Updates the status for the specified findings. module Amazonka.AccessAnalyzer.UpdateFindings -- | Updates findings with the new values provided in the request. -- -- See: newUpdateFindings smart constructor. data UpdateFindings UpdateFindings' :: Maybe Text -> Maybe [Text] -> Maybe Text -> Text -> FindingStatusUpdate -> UpdateFindings -- | A client token. [$sel:clientToken:UpdateFindings'] :: UpdateFindings -> Maybe Text -- | The IDs of the findings to update. [$sel:ids:UpdateFindings'] :: UpdateFindings -> Maybe [Text] -- | The ARN of the resource identified in the finding. [$sel:resourceArn:UpdateFindings'] :: UpdateFindings -> Maybe Text -- | The ARN of the analyzer that generated the findings to update. [$sel:analyzerArn:UpdateFindings'] :: UpdateFindings -> Text -- | The state represents the action to take to update the finding Status. -- Use ARCHIVE to change an Active finding to an Archived -- finding. Use ACTIVE to change an Archived finding to an -- Active finding. [$sel:status:UpdateFindings'] :: UpdateFindings -> FindingStatusUpdate -- | Create a value of UpdateFindings with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:UpdateFindings', -- updateFindings_clientToken - A client token. -- -- $sel:ids:UpdateFindings', updateFindings_ids - The IDs -- of the findings to update. -- -- UpdateFindings, updateFindings_resourceArn - The ARN of -- the resource identified in the finding. -- -- UpdateFindings, updateFindings_analyzerArn - The ARN -- of the analyzer that generated the findings to update. -- -- UpdateFindings, updateFindings_status - The state -- represents the action to take to update the finding Status. Use -- ARCHIVE to change an Active finding to an Archived finding. -- Use ACTIVE to change an Archived finding to an Active -- finding. newUpdateFindings :: Text -> FindingStatusUpdate -> UpdateFindings -- | A client token. updateFindings_clientToken :: Lens' UpdateFindings (Maybe Text) -- | The IDs of the findings to update. updateFindings_ids :: Lens' UpdateFindings (Maybe [Text]) -- | The ARN of the resource identified in the finding. updateFindings_resourceArn :: Lens' UpdateFindings (Maybe Text) -- | The ARN of the analyzer that generated the findings to update. updateFindings_analyzerArn :: Lens' UpdateFindings Text -- | The state represents the action to take to update the finding Status. -- Use ARCHIVE to change an Active finding to an Archived -- finding. Use ACTIVE to change an Archived finding to an -- Active finding. updateFindings_status :: Lens' UpdateFindings FindingStatusUpdate -- | See: newUpdateFindingsResponse smart constructor. data UpdateFindingsResponse UpdateFindingsResponse' :: UpdateFindingsResponse -- | Create a value of UpdateFindingsResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newUpdateFindingsResponse :: UpdateFindingsResponse instance GHC.Generics.Generic Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance GHC.Show.Show Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance GHC.Read.Read Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance GHC.Classes.Eq Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance GHC.Generics.Generic Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindingsResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindingsResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindingsResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindingsResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindingsResponse instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.UpdateFindings.UpdateFindings -- | Requests the validation of a policy and returns a list of findings. -- The findings help you identify issues and provide actionable -- recommendations to resolve the issue and enable you to author -- functional policies that meet security best practices. -- -- This operation returns paginated results. module Amazonka.AccessAnalyzer.ValidatePolicy -- | See: newValidatePolicy smart constructor. data ValidatePolicy ValidatePolicy' :: Maybe Locale -> Maybe Int -> Maybe Text -> Maybe ValidatePolicyResourceType -> Text -> PolicyType -> ValidatePolicy -- | The locale to use for localizing the findings. [$sel:locale:ValidatePolicy'] :: ValidatePolicy -> Maybe Locale -- | The maximum number of results to return in the response. [$sel:maxResults:ValidatePolicy'] :: ValidatePolicy -> Maybe Int -- | A token used for pagination of results returned. [$sel:nextToken:ValidatePolicy'] :: ValidatePolicy -> Maybe Text -- | The type of resource to attach to your resource policy. Specify a -- value for the policy validation resource type only if the policy type -- is RESOURCE_POLICY. For example, to validate a resource -- policy to attach to an Amazon S3 bucket, you can choose -- AWS::S3::Bucket for the policy validation resource type. -- -- For resource types not supported as valid values, IAM Access Analyzer -- runs policy checks that apply to all resource policies. For example, -- to validate a resource policy to attach to a KMS key, do not specify a -- value for the policy validation resource type and IAM Access Analyzer -- will run policy checks that apply to all resource policies. [$sel:validatePolicyResourceType:ValidatePolicy'] :: ValidatePolicy -> Maybe ValidatePolicyResourceType -- | The JSON policy document to use as the content for the policy. [$sel:policyDocument:ValidatePolicy'] :: ValidatePolicy -> Text -- | The type of policy to validate. Identity policies grant permissions to -- IAM principals. Identity policies include managed and inline policies -- for IAM roles, users, and groups. They also include service-control -- policies (SCPs) that are attached to an Amazon Web Services -- organization, organizational unit (OU), or an account. -- -- Resource policies grant permissions on Amazon Web Services resources. -- Resource policies include trust policies for IAM roles and bucket -- policies for Amazon S3 buckets. You can provide a generic input such -- as identity policy or resource policy or a specific input such as -- managed policy or Amazon S3 bucket policy. [$sel:policyType:ValidatePolicy'] :: ValidatePolicy -> PolicyType -- | Create a value of ValidatePolicy with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:locale:ValidatePolicy', validatePolicy_locale - The -- locale to use for localizing the findings. -- -- $sel:maxResults:ValidatePolicy', -- validatePolicy_maxResults - The maximum number of results to -- return in the response. -- -- ValidatePolicy, validatePolicy_nextToken - A token used -- for pagination of results returned. -- -- $sel:validatePolicyResourceType:ValidatePolicy', -- validatePolicy_validatePolicyResourceType - The type of -- resource to attach to your resource policy. Specify a value for the -- policy validation resource type only if the policy type is -- RESOURCE_POLICY. For example, to validate a resource policy -- to attach to an Amazon S3 bucket, you can choose -- AWS::S3::Bucket for the policy validation resource type. -- -- For resource types not supported as valid values, IAM Access Analyzer -- runs policy checks that apply to all resource policies. For example, -- to validate a resource policy to attach to a KMS key, do not specify a -- value for the policy validation resource type and IAM Access Analyzer -- will run policy checks that apply to all resource policies. -- -- $sel:policyDocument:ValidatePolicy', -- validatePolicy_policyDocument - The JSON policy document to use -- as the content for the policy. -- -- $sel:policyType:ValidatePolicy', -- validatePolicy_policyType - The type of policy to validate. -- Identity policies grant permissions to IAM principals. Identity -- policies include managed and inline policies for IAM roles, users, and -- groups. They also include service-control policies (SCPs) that are -- attached to an Amazon Web Services organization, organizational unit -- (OU), or an account. -- -- Resource policies grant permissions on Amazon Web Services resources. -- Resource policies include trust policies for IAM roles and bucket -- policies for Amazon S3 buckets. You can provide a generic input such -- as identity policy or resource policy or a specific input such as -- managed policy or Amazon S3 bucket policy. newValidatePolicy :: Text -> PolicyType -> ValidatePolicy -- | The locale to use for localizing the findings. validatePolicy_locale :: Lens' ValidatePolicy (Maybe Locale) -- | The maximum number of results to return in the response. validatePolicy_maxResults :: Lens' ValidatePolicy (Maybe Int) -- | A token used for pagination of results returned. validatePolicy_nextToken :: Lens' ValidatePolicy (Maybe Text) -- | The type of resource to attach to your resource policy. Specify a -- value for the policy validation resource type only if the policy type -- is RESOURCE_POLICY. For example, to validate a resource -- policy to attach to an Amazon S3 bucket, you can choose -- AWS::S3::Bucket for the policy validation resource type. -- -- For resource types not supported as valid values, IAM Access Analyzer -- runs policy checks that apply to all resource policies. For example, -- to validate a resource policy to attach to a KMS key, do not specify a -- value for the policy validation resource type and IAM Access Analyzer -- will run policy checks that apply to all resource policies. validatePolicy_validatePolicyResourceType :: Lens' ValidatePolicy (Maybe ValidatePolicyResourceType) -- | The JSON policy document to use as the content for the policy. validatePolicy_policyDocument :: Lens' ValidatePolicy Text -- | The type of policy to validate. Identity policies grant permissions to -- IAM principals. Identity policies include managed and inline policies -- for IAM roles, users, and groups. They also include service-control -- policies (SCPs) that are attached to an Amazon Web Services -- organization, organizational unit (OU), or an account. -- -- Resource policies grant permissions on Amazon Web Services resources. -- Resource policies include trust policies for IAM roles and bucket -- policies for Amazon S3 buckets. You can provide a generic input such -- as identity policy or resource policy or a specific input such as -- managed policy or Amazon S3 bucket policy. validatePolicy_policyType :: Lens' ValidatePolicy PolicyType -- | See: newValidatePolicyResponse smart constructor. data ValidatePolicyResponse ValidatePolicyResponse' :: Maybe Text -> Int -> [ValidatePolicyFinding] -> ValidatePolicyResponse -- | A token used for pagination of results returned. [$sel:nextToken:ValidatePolicyResponse'] :: ValidatePolicyResponse -> Maybe Text -- | The response's http status code. [$sel:httpStatus:ValidatePolicyResponse'] :: ValidatePolicyResponse -> Int -- | The list of findings in a policy returned by IAM Access Analyzer based -- on its suite of policy checks. [$sel:findings:ValidatePolicyResponse'] :: ValidatePolicyResponse -> [ValidatePolicyFinding] -- | Create a value of ValidatePolicyResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ValidatePolicy, validatePolicyResponse_nextToken - A -- token used for pagination of results returned. -- -- $sel:httpStatus:ValidatePolicyResponse', -- validatePolicyResponse_httpStatus - The response's http status -- code. -- -- $sel:findings:ValidatePolicyResponse', -- validatePolicyResponse_findings - The list of findings in a -- policy returned by IAM Access Analyzer based on its suite of policy -- checks. newValidatePolicyResponse :: Int -> ValidatePolicyResponse -- | A token used for pagination of results returned. validatePolicyResponse_nextToken :: Lens' ValidatePolicyResponse (Maybe Text) -- | The response's http status code. validatePolicyResponse_httpStatus :: Lens' ValidatePolicyResponse Int -- | The list of findings in a policy returned by IAM Access Analyzer based -- on its suite of policy checks. validatePolicyResponse_findings :: Lens' ValidatePolicyResponse [ValidatePolicyFinding] instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance GHC.Show.Show Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance GHC.Read.Read Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance GHC.Generics.Generic Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicyResponse instance GHC.Show.Show Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicyResponse instance GHC.Read.Read Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicyResponse instance GHC.Classes.Eq Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicyResponse instance Amazonka.Types.AWSRequest Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicyResponse instance Amazonka.Pager.AWSPager Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance Data.Hashable.Class.Hashable Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance Control.DeepSeq.NFData Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance Amazonka.Data.Headers.ToHeaders Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance Data.Aeson.Types.ToJSON.ToJSON Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance Amazonka.Data.Path.ToPath Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy instance Amazonka.Data.Query.ToQuery Amazonka.AccessAnalyzer.ValidatePolicy.ValidatePolicy module Amazonka.AccessAnalyzer.Lens -- | A client token. applyArchiveRule_clientToken :: Lens' ApplyArchiveRule (Maybe Text) -- | The Amazon resource name (ARN) of the analyzer. applyArchiveRule_analyzerArn :: Lens' ApplyArchiveRule Text -- | The name of the rule to apply. applyArchiveRule_ruleName :: Lens' ApplyArchiveRule Text -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. cancelPolicyGeneration_jobId :: Lens' CancelPolicyGeneration Text -- | The response's http status code. cancelPolicyGenerationResponse_httpStatus :: Lens' CancelPolicyGenerationResponse Int -- | A client token. createAccessPreview_clientToken :: Lens' CreateAccessPreview (Maybe Text) -- | The ARN of the account analyzer used to generate the access -- preview. You can only create an access preview for analyzers with an -- Account type and Active status. createAccessPreview_analyzerArn :: Lens' CreateAccessPreview Text -- | Access control configuration for your resource that is used to -- generate the access preview. The access preview includes findings for -- external access allowed to the resource with the proposed access -- control configuration. The configuration must contain exactly one -- element. createAccessPreview_configurations :: Lens' CreateAccessPreview (HashMap Text Configuration) -- | The response's http status code. createAccessPreviewResponse_httpStatus :: Lens' CreateAccessPreviewResponse Int -- | The unique ID for the access preview. createAccessPreviewResponse_id :: Lens' CreateAccessPreviewResponse Text -- | Specifies the archive rules to add for the analyzer. Archive rules -- automatically archive findings that meet the criteria you define for -- the rule. createAnalyzer_archiveRules :: Lens' CreateAnalyzer (Maybe [InlineArchiveRule]) -- | A client token. createAnalyzer_clientToken :: Lens' CreateAnalyzer (Maybe Text) -- | The tags to apply to the analyzer. createAnalyzer_tags :: Lens' CreateAnalyzer (Maybe (HashMap Text Text)) -- | The name of the analyzer to create. createAnalyzer_analyzerName :: Lens' CreateAnalyzer Text -- | The type of analyzer to create. Only ACCOUNT and ORGANIZATION -- analyzers are supported. You can create only one analyzer per account -- per Region. You can create up to 5 analyzers per organization per -- Region. createAnalyzer_type :: Lens' CreateAnalyzer Type -- | The ARN of the analyzer that was created by the request. createAnalyzerResponse_arn :: Lens' CreateAnalyzerResponse (Maybe Text) -- | The response's http status code. createAnalyzerResponse_httpStatus :: Lens' CreateAnalyzerResponse Int -- | A client token. createArchiveRule_clientToken :: Lens' CreateArchiveRule (Maybe Text) -- | The name of the created analyzer. createArchiveRule_analyzerName :: Lens' CreateArchiveRule Text -- | The name of the rule to create. createArchiveRule_ruleName :: Lens' CreateArchiveRule Text -- | The criteria for the rule. createArchiveRule_filter :: Lens' CreateArchiveRule (HashMap Text Criterion) -- | A client token. deleteAnalyzer_clientToken :: Lens' DeleteAnalyzer (Maybe Text) -- | The name of the analyzer to delete. deleteAnalyzer_analyzerName :: Lens' DeleteAnalyzer Text -- | A client token. deleteArchiveRule_clientToken :: Lens' DeleteArchiveRule (Maybe Text) -- | The name of the analyzer that associated with the archive rule to -- delete. deleteArchiveRule_analyzerName :: Lens' DeleteArchiveRule Text -- | The name of the rule to delete. deleteArchiveRule_ruleName :: Lens' DeleteArchiveRule Text -- | The unique ID for the access preview. getAccessPreview_accessPreviewId :: Lens' GetAccessPreview Text -- | The ARN of the analyzer used to generate the access preview. getAccessPreview_analyzerArn :: Lens' GetAccessPreview Text -- | The response's http status code. getAccessPreviewResponse_httpStatus :: Lens' GetAccessPreviewResponse Int -- | An object that contains information about the access preview. getAccessPreviewResponse_accessPreview :: Lens' GetAccessPreviewResponse AccessPreview -- | The ARN of the analyzer to retrieve information from. getAnalyzedResource_analyzerArn :: Lens' GetAnalyzedResource Text -- | The ARN of the resource to retrieve information about. getAnalyzedResource_resourceArn :: Lens' GetAnalyzedResource Text -- | An AnalyzedResource object that contains information that IAM -- Access Analyzer found when it analyzed the resource. getAnalyzedResourceResponse_resource :: Lens' GetAnalyzedResourceResponse (Maybe AnalyzedResource) -- | The response's http status code. getAnalyzedResourceResponse_httpStatus :: Lens' GetAnalyzedResourceResponse Int -- | The name of the analyzer retrieved. getAnalyzer_analyzerName :: Lens' GetAnalyzer Text -- | The response's http status code. getAnalyzerResponse_httpStatus :: Lens' GetAnalyzerResponse Int -- | An AnalyzerSummary object that contains information about the -- analyzer. getAnalyzerResponse_analyzer :: Lens' GetAnalyzerResponse AnalyzerSummary -- | The name of the analyzer to retrieve rules from. getArchiveRule_analyzerName :: Lens' GetArchiveRule Text -- | The name of the rule to retrieve. getArchiveRule_ruleName :: Lens' GetArchiveRule Text -- | The response's http status code. getArchiveRuleResponse_httpStatus :: Lens' GetArchiveRuleResponse Int -- | Undocumented member. getArchiveRuleResponse_archiveRule :: Lens' GetArchiveRuleResponse ArchiveRuleSummary -- | The ARN of the analyzer that generated the finding. getFinding_analyzerArn :: Lens' GetFinding Text -- | The ID of the finding to retrieve. getFinding_id :: Lens' GetFinding Text -- | A finding object that contains finding details. getFindingResponse_finding :: Lens' GetFindingResponse (Maybe Finding) -- | The response's http status code. getFindingResponse_httpStatus :: Lens' GetFindingResponse Int -- | The level of detail that you want to generate. You can specify whether -- to generate policies with placeholders for resource ARNs for actions -- that support resource level granularity in policies. -- -- For example, in the resource section of a policy, you can receive a -- placeholder such as "Resource":"arn:aws:s3:::${BucketName}" -- instead of "*". getGeneratedPolicy_includeResourcePlaceholders :: Lens' GetGeneratedPolicy (Maybe Bool) -- | The level of detail that you want to generate. You can specify whether -- to generate service-level policies. -- -- IAM Access Analyzer uses iam:servicelastaccessed to identify -- services that have been used recently to create this service-level -- template. getGeneratedPolicy_includeServiceLevelTemplate :: Lens' GetGeneratedPolicy (Maybe Bool) -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. getGeneratedPolicy_jobId :: Lens' GetGeneratedPolicy Text -- | The response's http status code. getGeneratedPolicyResponse_httpStatus :: Lens' GetGeneratedPolicyResponse Int -- | A GeneratedPolicyDetails object that contains details about -- the generated policy. getGeneratedPolicyResponse_jobDetails :: Lens' GetGeneratedPolicyResponse JobDetails -- | A GeneratedPolicyResult object that contains the generated -- policies and associated details. getGeneratedPolicyResponse_generatedPolicyResult :: Lens' GetGeneratedPolicyResponse GeneratedPolicyResult -- | Criteria to filter the returned findings. listAccessPreviewFindings_filter :: Lens' ListAccessPreviewFindings (Maybe (HashMap Text Criterion)) -- | The maximum number of results to return in the response. listAccessPreviewFindings_maxResults :: Lens' ListAccessPreviewFindings (Maybe Int) -- | A token used for pagination of results returned. listAccessPreviewFindings_nextToken :: Lens' ListAccessPreviewFindings (Maybe Text) -- | The unique ID for the access preview. listAccessPreviewFindings_accessPreviewId :: Lens' ListAccessPreviewFindings Text -- | The ARN of the analyzer used to generate the access. listAccessPreviewFindings_analyzerArn :: Lens' ListAccessPreviewFindings Text -- | A token used for pagination of results returned. listAccessPreviewFindingsResponse_nextToken :: Lens' ListAccessPreviewFindingsResponse (Maybe Text) -- | The response's http status code. listAccessPreviewFindingsResponse_httpStatus :: Lens' ListAccessPreviewFindingsResponse Int -- | A list of access preview findings that match the specified filter -- criteria. listAccessPreviewFindingsResponse_findings :: Lens' ListAccessPreviewFindingsResponse [AccessPreviewFinding] -- | The maximum number of results to return in the response. listAccessPreviews_maxResults :: Lens' ListAccessPreviews (Maybe Int) -- | A token used for pagination of results returned. listAccessPreviews_nextToken :: Lens' ListAccessPreviews (Maybe Text) -- | The ARN of the analyzer used to generate the access preview. listAccessPreviews_analyzerArn :: Lens' ListAccessPreviews Text -- | A token used for pagination of results returned. listAccessPreviewsResponse_nextToken :: Lens' ListAccessPreviewsResponse (Maybe Text) -- | The response's http status code. listAccessPreviewsResponse_httpStatus :: Lens' ListAccessPreviewsResponse Int -- | A list of access previews retrieved for the analyzer. listAccessPreviewsResponse_accessPreviews :: Lens' ListAccessPreviewsResponse [AccessPreviewSummary] -- | The maximum number of results to return in the response. listAnalyzedResources_maxResults :: Lens' ListAnalyzedResources (Maybe Int) -- | A token used for pagination of results returned. listAnalyzedResources_nextToken :: Lens' ListAnalyzedResources (Maybe Text) -- | The type of resource. listAnalyzedResources_resourceType :: Lens' ListAnalyzedResources (Maybe ResourceType) -- | The ARN of the analyzer to retrieve a list of analyzed -- resources from. listAnalyzedResources_analyzerArn :: Lens' ListAnalyzedResources Text -- | A token used for pagination of results returned. listAnalyzedResourcesResponse_nextToken :: Lens' ListAnalyzedResourcesResponse (Maybe Text) -- | The response's http status code. listAnalyzedResourcesResponse_httpStatus :: Lens' ListAnalyzedResourcesResponse Int -- | A list of resources that were analyzed. listAnalyzedResourcesResponse_analyzedResources :: Lens' ListAnalyzedResourcesResponse [AnalyzedResourceSummary] -- | The maximum number of results to return in the response. listAnalyzers_maxResults :: Lens' ListAnalyzers (Maybe Int) -- | A token used for pagination of results returned. listAnalyzers_nextToken :: Lens' ListAnalyzers (Maybe Text) -- | The type of analyzer. listAnalyzers_type :: Lens' ListAnalyzers (Maybe Type) -- | A token used for pagination of results returned. listAnalyzersResponse_nextToken :: Lens' ListAnalyzersResponse (Maybe Text) -- | The response's http status code. listAnalyzersResponse_httpStatus :: Lens' ListAnalyzersResponse Int -- | The analyzers retrieved. listAnalyzersResponse_analyzers :: Lens' ListAnalyzersResponse [AnalyzerSummary] -- | The maximum number of results to return in the request. listArchiveRules_maxResults :: Lens' ListArchiveRules (Maybe Int) -- | A token used for pagination of results returned. listArchiveRules_nextToken :: Lens' ListArchiveRules (Maybe Text) -- | The name of the analyzer to retrieve rules from. listArchiveRules_analyzerName :: Lens' ListArchiveRules Text -- | A token used for pagination of results returned. listArchiveRulesResponse_nextToken :: Lens' ListArchiveRulesResponse (Maybe Text) -- | The response's http status code. listArchiveRulesResponse_httpStatus :: Lens' ListArchiveRulesResponse Int -- | A list of archive rules created for the specified analyzer. listArchiveRulesResponse_archiveRules :: Lens' ListArchiveRulesResponse [ArchiveRuleSummary] -- | A filter to match for the findings to return. listFindings_filter :: Lens' ListFindings (Maybe (HashMap Text Criterion)) -- | The maximum number of results to return in the response. listFindings_maxResults :: Lens' ListFindings (Maybe Int) -- | A token used for pagination of results returned. listFindings_nextToken :: Lens' ListFindings (Maybe Text) -- | The sort order for the findings returned. listFindings_sort :: Lens' ListFindings (Maybe SortCriteria) -- | The ARN of the analyzer to retrieve findings from. listFindings_analyzerArn :: Lens' ListFindings Text -- | A token used for pagination of results returned. listFindingsResponse_nextToken :: Lens' ListFindingsResponse (Maybe Text) -- | The response's http status code. listFindingsResponse_httpStatus :: Lens' ListFindingsResponse Int -- | A list of findings retrieved from the analyzer that match the filter -- criteria specified, if any. listFindingsResponse_findings :: Lens' ListFindingsResponse [FindingSummary] -- | The maximum number of results to return in the response. listPolicyGenerations_maxResults :: Lens' ListPolicyGenerations (Maybe Natural) -- | A token used for pagination of results returned. listPolicyGenerations_nextToken :: Lens' ListPolicyGenerations (Maybe Text) -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. Use this with ListGeneratedPolicies to filter the -- results to only include results for a specific principal. listPolicyGenerations_principalArn :: Lens' ListPolicyGenerations (Maybe Text) -- | A token used for pagination of results returned. listPolicyGenerationsResponse_nextToken :: Lens' ListPolicyGenerationsResponse (Maybe Text) -- | The response's http status code. listPolicyGenerationsResponse_httpStatus :: Lens' ListPolicyGenerationsResponse Int -- | A PolicyGeneration object that contains details about the -- generated policy. listPolicyGenerationsResponse_policyGenerations :: Lens' ListPolicyGenerationsResponse [PolicyGeneration] -- | The ARN of the resource to retrieve tags from. listTagsForResource_resourceArn :: Lens' ListTagsForResource Text -- | The tags that are applied to the specified resource. listTagsForResourceResponse_tags :: Lens' ListTagsForResourceResponse (Maybe (HashMap Text Text)) -- | The response's http status code. listTagsForResourceResponse_httpStatus :: Lens' ListTagsForResourceResponse Int -- | A unique, case-sensitive identifier that you provide to ensure the -- idempotency of the request. Idempotency ensures that an API request -- completes only once. With an idempotent request, if the original -- request completes successfully, the subsequent retries with the same -- client token return the result from the original successful request -- and they have no additional effect. -- -- If you do not specify a client token, one is automatically generated -- by the Amazon Web Services SDK. startPolicyGeneration_clientToken :: Lens' StartPolicyGeneration (Maybe Text) -- | A CloudTrailDetails object that contains details about a -- Trail that you want to analyze to generate policies. startPolicyGeneration_cloudTrailDetails :: Lens' StartPolicyGeneration (Maybe CloudTrailDetails) -- | Contains the ARN of the IAM entity (user or role) for which you are -- generating a policy. startPolicyGeneration_policyGenerationDetails :: Lens' StartPolicyGeneration PolicyGenerationDetails -- | The response's http status code. startPolicyGenerationResponse_httpStatus :: Lens' StartPolicyGenerationResponse Int -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. startPolicyGenerationResponse_jobId :: Lens' StartPolicyGenerationResponse Text -- | The Amazon Web Services account ID that owns the resource. For most -- Amazon Web Services resources, the owning account is the account in -- which the resource was created. startResourceScan_resourceOwnerAccount :: Lens' StartResourceScan (Maybe Text) -- | The ARN of the analyzer to use to scan the policies applied to -- the specified resource. startResourceScan_analyzerArn :: Lens' StartResourceScan Text -- | The ARN of the resource to scan. startResourceScan_resourceArn :: Lens' StartResourceScan Text -- | The ARN of the resource to add the tag to. tagResource_resourceArn :: Lens' TagResource Text -- | The tags to add to the resource. tagResource_tags :: Lens' TagResource (HashMap Text Text) -- | The response's http status code. tagResourceResponse_httpStatus :: Lens' TagResourceResponse Int -- | The ARN of the resource to remove the tag from. untagResource_resourceArn :: Lens' UntagResource Text -- | The key for the tag to add. untagResource_tagKeys :: Lens' UntagResource [Text] -- | The response's http status code. untagResourceResponse_httpStatus :: Lens' UntagResourceResponse Int -- | A client token. updateArchiveRule_clientToken :: Lens' UpdateArchiveRule (Maybe Text) -- | The name of the analyzer to update the archive rules for. updateArchiveRule_analyzerName :: Lens' UpdateArchiveRule Text -- | The name of the rule to update. updateArchiveRule_ruleName :: Lens' UpdateArchiveRule Text -- | A filter to match for the rules to update. Only rules that match the -- filter are updated. updateArchiveRule_filter :: Lens' UpdateArchiveRule (HashMap Text Criterion) -- | A client token. updateFindings_clientToken :: Lens' UpdateFindings (Maybe Text) -- | The IDs of the findings to update. updateFindings_ids :: Lens' UpdateFindings (Maybe [Text]) -- | The ARN of the resource identified in the finding. updateFindings_resourceArn :: Lens' UpdateFindings (Maybe Text) -- | The ARN of the analyzer that generated the findings to update. updateFindings_analyzerArn :: Lens' UpdateFindings Text -- | The state represents the action to take to update the finding Status. -- Use ARCHIVE to change an Active finding to an Archived -- finding. Use ACTIVE to change an Archived finding to an -- Active finding. updateFindings_status :: Lens' UpdateFindings FindingStatusUpdate -- | The locale to use for localizing the findings. validatePolicy_locale :: Lens' ValidatePolicy (Maybe Locale) -- | The maximum number of results to return in the response. validatePolicy_maxResults :: Lens' ValidatePolicy (Maybe Int) -- | A token used for pagination of results returned. validatePolicy_nextToken :: Lens' ValidatePolicy (Maybe Text) -- | The type of resource to attach to your resource policy. Specify a -- value for the policy validation resource type only if the policy type -- is RESOURCE_POLICY. For example, to validate a resource -- policy to attach to an Amazon S3 bucket, you can choose -- AWS::S3::Bucket for the policy validation resource type. -- -- For resource types not supported as valid values, IAM Access Analyzer -- runs policy checks that apply to all resource policies. For example, -- to validate a resource policy to attach to a KMS key, do not specify a -- value for the policy validation resource type and IAM Access Analyzer -- will run policy checks that apply to all resource policies. validatePolicy_validatePolicyResourceType :: Lens' ValidatePolicy (Maybe ValidatePolicyResourceType) -- | The JSON policy document to use as the content for the policy. validatePolicy_policyDocument :: Lens' ValidatePolicy Text -- | The type of policy to validate. Identity policies grant permissions to -- IAM principals. Identity policies include managed and inline policies -- for IAM roles, users, and groups. They also include service-control -- policies (SCPs) that are attached to an Amazon Web Services -- organization, organizational unit (OU), or an account. -- -- Resource policies grant permissions on Amazon Web Services resources. -- Resource policies include trust policies for IAM roles and bucket -- policies for Amazon S3 buckets. You can provide a generic input such -- as identity policy or resource policy or a specific input such as -- managed policy or Amazon S3 bucket policy. validatePolicy_policyType :: Lens' ValidatePolicy PolicyType -- | A token used for pagination of results returned. validatePolicyResponse_nextToken :: Lens' ValidatePolicyResponse (Maybe Text) -- | The response's http status code. validatePolicyResponse_httpStatus :: Lens' ValidatePolicyResponse Int -- | The list of findings in a policy returned by IAM Access Analyzer based -- on its suite of policy checks. validatePolicyResponse_findings :: Lens' ValidatePolicyResponse [ValidatePolicyFinding] -- | Provides more details about the current status of the access preview. -- -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid resource -- configuration. accessPreview_statusReason :: Lens' AccessPreview (Maybe AccessPreviewStatusReason) -- | The unique ID for the access preview. accessPreview_id :: Lens' AccessPreview Text -- | The ARN of the analyzer used to generate the access preview. accessPreview_analyzerArn :: Lens' AccessPreview Text -- | A map of resource ARNs for the proposed resource configuration. accessPreview_configurations :: Lens' AccessPreview (HashMap Text Configuration) -- | The time at which the access preview was created. accessPreview_createdAt :: Lens' AccessPreview UTCTime -- | The status of the access preview. -- -- accessPreview_status :: Lens' AccessPreview AccessPreviewStatus -- | The action in the analyzed policy statement that an external principal -- has permission to perform. accessPreviewFinding_action :: Lens' AccessPreviewFinding (Maybe [Text]) -- | The condition in the analyzed policy statement that resulted in a -- finding. accessPreviewFinding_condition :: Lens' AccessPreviewFinding (Maybe (HashMap Text Text)) -- | An error. accessPreviewFinding_error :: Lens' AccessPreviewFinding (Maybe Text) -- | The existing ID of the finding in IAM Access Analyzer, provided only -- for existing findings. accessPreviewFinding_existingFindingId :: Lens' AccessPreviewFinding (Maybe Text) -- | The existing status of the finding, provided only for existing -- findings. accessPreviewFinding_existingFindingStatus :: Lens' AccessPreviewFinding (Maybe FindingStatus) -- | Indicates whether the policy that generated the finding allows public -- access to the resource. accessPreviewFinding_isPublic :: Lens' AccessPreviewFinding (Maybe Bool) -- | The external principal that has access to a resource within the zone -- of trust. accessPreviewFinding_principal :: Lens' AccessPreviewFinding (Maybe (HashMap Text Text)) -- | The resource that an external principal has access to. This is the -- resource associated with the access preview. accessPreviewFinding_resource :: Lens' AccessPreviewFinding (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. accessPreviewFinding_sources :: Lens' AccessPreviewFinding (Maybe [FindingSource]) -- | The ID of the access preview finding. This ID uniquely identifies the -- element in the list of access preview findings and is not related to -- the finding ID in Access Analyzer. accessPreviewFinding_id :: Lens' AccessPreviewFinding Text -- | The type of the resource that can be accessed in the finding. accessPreviewFinding_resourceType :: Lens' AccessPreviewFinding ResourceType -- | The time at which the access preview finding was created. accessPreviewFinding_createdAt :: Lens' AccessPreviewFinding UTCTime -- | Provides context on how the access preview finding compares to -- existing access identified in IAM Access Analyzer. -- -- -- -- For example, a Changed finding with preview status -- Resolved and existing status Active indicates the -- existing Active finding would become Resolved as a -- result of the proposed permissions change. accessPreviewFinding_changeType :: Lens' AccessPreviewFinding FindingChangeType -- | The preview status of the finding. This is what the status of the -- finding would be after permissions deployment. For example, a -- Changed finding with preview status Resolved and -- existing status Active indicates the existing Active -- finding would become Resolved as a result of the proposed -- permissions change. accessPreviewFinding_status :: Lens' AccessPreviewFinding FindingStatus -- | The Amazon Web Services account ID that owns the resource. For most -- Amazon Web Services resources, the owning account is the account in -- which the resource was created. accessPreviewFinding_resourceOwnerAccount :: Lens' AccessPreviewFinding Text -- | The reason code for the current status of the access preview. accessPreviewStatusReason_code :: Lens' AccessPreviewStatusReason AccessPreviewStatusReasonCode -- | Undocumented member. accessPreviewSummary_statusReason :: Lens' AccessPreviewSummary (Maybe AccessPreviewStatusReason) -- | The unique ID for the access preview. accessPreviewSummary_id :: Lens' AccessPreviewSummary Text -- | The ARN of the analyzer used to generate the access preview. accessPreviewSummary_analyzerArn :: Lens' AccessPreviewSummary Text -- | The time at which the access preview was created. accessPreviewSummary_createdAt :: Lens' AccessPreviewSummary UTCTime -- | The status of the access preview. -- -- accessPreviewSummary_status :: Lens' AccessPreviewSummary AccessPreviewStatus -- | The value specified is the canonical user ID of an Amazon Web Services -- account. aclGrantee_id :: Lens' AclGrantee (Maybe Text) -- | Used for granting permissions to a predefined group. aclGrantee_uri :: Lens' AclGrantee (Maybe Text) -- | The actions that an external principal is granted permission to use by -- the policy that generated the finding. analyzedResource_actions :: Lens' AnalyzedResource (Maybe [Text]) -- | An error message. analyzedResource_error :: Lens' AnalyzedResource (Maybe Text) -- | Indicates how the access that generated the finding is granted. This -- is populated for Amazon S3 bucket findings. analyzedResource_sharedVia :: Lens' AnalyzedResource (Maybe [Text]) -- | The current status of the finding generated from the analyzed -- resource. analyzedResource_status :: Lens' AnalyzedResource (Maybe FindingStatus) -- | The ARN of the resource that was analyzed. analyzedResource_resourceArn :: Lens' AnalyzedResource Text -- | The type of the resource that was analyzed. analyzedResource_resourceType :: Lens' AnalyzedResource ResourceType -- | The time at which the finding was created. analyzedResource_createdAt :: Lens' AnalyzedResource UTCTime -- | The time at which the resource was analyzed. analyzedResource_analyzedAt :: Lens' AnalyzedResource UTCTime -- | The time at which the finding was updated. analyzedResource_updatedAt :: Lens' AnalyzedResource UTCTime -- | Indicates whether the policy that generated the finding grants public -- access to the resource. analyzedResource_isPublic :: Lens' AnalyzedResource Bool -- | The Amazon Web Services account ID that owns the resource. analyzedResource_resourceOwnerAccount :: Lens' AnalyzedResource Text -- | The ARN of the analyzed resource. analyzedResourceSummary_resourceArn :: Lens' AnalyzedResourceSummary Text -- | The Amazon Web Services account ID that owns the resource. analyzedResourceSummary_resourceOwnerAccount :: Lens' AnalyzedResourceSummary Text -- | The type of resource that was analyzed. analyzedResourceSummary_resourceType :: Lens' AnalyzedResourceSummary ResourceType -- | The resource that was most recently analyzed by the analyzer. analyzerSummary_lastResourceAnalyzed :: Lens' AnalyzerSummary (Maybe Text) -- | The time at which the most recently analyzed resource was analyzed. analyzerSummary_lastResourceAnalyzedAt :: Lens' AnalyzerSummary (Maybe UTCTime) -- | The statusReason provides more details about the current -- status of the analyzer. For example, if the creation for the analyzer -- fails, a Failed status is returned. For an analyzer with -- organization as the type, this failure can be due to an issue with -- creating the service-linked roles required in the member accounts of -- the Amazon Web Services organization. analyzerSummary_statusReason :: Lens' AnalyzerSummary (Maybe StatusReason) -- | The tags added to the analyzer. analyzerSummary_tags :: Lens' AnalyzerSummary (Maybe (HashMap Text Text)) -- | The ARN of the analyzer. analyzerSummary_arn :: Lens' AnalyzerSummary Text -- | The name of the analyzer. analyzerSummary_name :: Lens' AnalyzerSummary Text -- | The type of analyzer, which corresponds to the zone of trust chosen -- for the analyzer. analyzerSummary_type :: Lens' AnalyzerSummary Type -- | A timestamp for the time at which the analyzer was created. analyzerSummary_createdAt :: Lens' AnalyzerSummary UTCTime -- | The status of the analyzer. An Active analyzer successfully -- monitors supported resources and generates new findings. The analyzer -- is Disabled when a user action, such as removing trusted -- access for Identity and Access Management Access Analyzer from -- Organizations, causes the analyzer to stop generating new findings. -- The status is Creating when the analyzer creation is in -- progress and Failed when the analyzer creation has failed. analyzerSummary_status :: Lens' AnalyzerSummary AnalyzerStatus -- | The name of the archive rule. archiveRuleSummary_ruleName :: Lens' ArchiveRuleSummary Text -- | A filter used to define the archive rule. archiveRuleSummary_filter :: Lens' ArchiveRuleSummary (HashMap Text Criterion) -- | The time at which the archive rule was created. archiveRuleSummary_createdAt :: Lens' ArchiveRuleSummary UTCTime -- | The time at which the archive rule was last updated. archiveRuleSummary_updatedAt :: Lens' ArchiveRuleSummary UTCTime -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. cloudTrailDetails_endTime :: Lens' CloudTrailDetails (Maybe UTCTime) -- | A Trail object that contains settings for a trail. cloudTrailDetails_trails :: Lens' CloudTrailDetails [Trail] -- | The ARN of the service role that IAM Access Analyzer uses to access -- your CloudTrail trail and service last accessed information. cloudTrailDetails_accessRole :: Lens' CloudTrailDetails Text -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. cloudTrailDetails_startTime :: Lens' CloudTrailDetails UTCTime -- | A TrailProperties object that contains settings for trail -- properties. cloudTrailProperties_trailProperties :: Lens' CloudTrailProperties [TrailProperties] -- | The start of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp before this time are not -- considered to generate a policy. cloudTrailProperties_startTime :: Lens' CloudTrailProperties UTCTime -- | The end of the time range for which IAM Access Analyzer reviews your -- CloudTrail events. Events with a timestamp after this time are not -- considered to generate a policy. If this is not included in the -- request, the default value is the current time. cloudTrailProperties_endTime :: Lens' CloudTrailProperties UTCTime -- | The access control configuration is for an Amazon EBS volume snapshot. configuration_ebsSnapshot :: Lens' Configuration (Maybe EbsSnapshotConfiguration) -- | The access control configuration is for an Amazon ECR repository. configuration_ecrRepository :: Lens' Configuration (Maybe EcrRepositoryConfiguration) -- | The access control configuration is for an Amazon EFS file system. configuration_efsFileSystem :: Lens' Configuration (Maybe EfsFileSystemConfiguration) -- | The access control configuration is for an IAM role. configuration_iamRole :: Lens' Configuration (Maybe IamRoleConfiguration) -- | The access control configuration is for a KMS key. configuration_kmsKey :: Lens' Configuration (Maybe KmsKeyConfiguration) -- | The access control configuration is for an Amazon RDS DB cluster -- snapshot. configuration_rdsDbClusterSnapshot :: Lens' Configuration (Maybe RdsDbClusterSnapshotConfiguration) -- | The access control configuration is for an Amazon RDS DB snapshot. configuration_rdsDbSnapshot :: Lens' Configuration (Maybe RdsDbSnapshotConfiguration) -- | The access control configuration is for an Amazon S3 Bucket. configuration_s3Bucket :: Lens' Configuration (Maybe S3BucketConfiguration) -- | The access control configuration is for a Secrets Manager secret. configuration_secretsManagerSecret :: Lens' Configuration (Maybe SecretsManagerSecretConfiguration) -- | The access control configuration is for an Amazon SNS topic configuration_snsTopic :: Lens' Configuration (Maybe SnsTopicConfiguration) -- | The access control configuration is for an Amazon SQS queue. configuration_sqsQueue :: Lens' Configuration (Maybe SqsQueueConfiguration) -- | A "contains" operator to match for the filter used to create the rule. criterion_contains :: Lens' Criterion (Maybe (NonEmpty Text)) -- | An "equals" operator to match for the filter used to create the rule. criterion_eq :: Lens' Criterion (Maybe (NonEmpty Text)) -- | An "exists" operator to match for the filter used to create the rule. criterion_exists :: Lens' Criterion (Maybe Bool) -- | A "not equals" operator to match for the filter used to create the -- rule. criterion_neq :: Lens' Criterion (Maybe (NonEmpty Text)) -- | The groups that have access to the Amazon EBS volume snapshot. If the -- value all is specified, then the Amazon EBS volume snapshot -- is public. -- -- ebsSnapshotConfiguration_groups :: Lens' EbsSnapshotConfiguration (Maybe [Text]) -- | The KMS key identifier for an encrypted Amazon EBS volume snapshot. -- The KMS key identifier is the key ARN, key ID, alias ARN, or alias -- name for the KMS key. -- -- ebsSnapshotConfiguration_kmsKeyId :: Lens' EbsSnapshotConfiguration (Maybe Text) -- | The IDs of the Amazon Web Services accounts that have access to the -- Amazon EBS volume snapshot. -- -- ebsSnapshotConfiguration_userIds :: Lens' EbsSnapshotConfiguration (Maybe [Text]) -- | The JSON repository policy text to apply to the Amazon ECR repository. -- For more information, see Private repository policy examples in -- the Amazon ECR User Guide. ecrRepositoryConfiguration_repositoryPolicy :: Lens' EcrRepositoryConfiguration (Maybe Text) -- | The JSON policy definition to apply to the Amazon EFS file system. For -- more information on the elements that make up a file system policy, -- see Amazon EFS Resource-based policies. efsFileSystemConfiguration_fileSystemPolicy :: Lens' EfsFileSystemConfiguration (Maybe Text) -- | The action in the analyzed policy statement that an external principal -- has permission to use. finding_action :: Lens' Finding (Maybe [Text]) -- | An error. finding_error :: Lens' Finding (Maybe Text) -- | Indicates whether the policy that generated the finding allows public -- access to the resource. finding_isPublic :: Lens' Finding (Maybe Bool) -- | The external principal that access to a resource within the zone of -- trust. finding_principal :: Lens' Finding (Maybe (HashMap Text Text)) -- | The resource that an external principal has access to. finding_resource :: Lens' Finding (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. finding_sources :: Lens' Finding (Maybe [FindingSource]) -- | The ID of the finding. finding_id :: Lens' Finding Text -- | The type of the resource identified in the finding. finding_resourceType :: Lens' Finding ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. finding_condition :: Lens' Finding (HashMap Text Text) -- | The time at which the finding was generated. finding_createdAt :: Lens' Finding UTCTime -- | The time at which the resource was analyzed. finding_analyzedAt :: Lens' Finding UTCTime -- | The time at which the finding was updated. finding_updatedAt :: Lens' Finding UTCTime -- | The current status of the finding. finding_status :: Lens' Finding FindingStatus -- | The Amazon Web Services account ID that owns the resource. finding_resourceOwnerAccount :: Lens' Finding Text -- | Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. findingSource_detail :: Lens' FindingSource (Maybe FindingSourceDetail) -- | Indicates the type of access that generated the finding. findingSource_type :: Lens' FindingSource FindingSourceType -- | The account of the cross-account access point that generated the -- finding. findingSourceDetail_accessPointAccount :: Lens' FindingSourceDetail (Maybe Text) -- | The ARN of the access point that generated the finding. The ARN format -- depends on whether the ARN represents an access point or a -- multi-region access point. findingSourceDetail_accessPointArn :: Lens' FindingSourceDetail (Maybe Text) -- | The action in the analyzed policy statement that an external principal -- has permission to use. findingSummary_action :: Lens' FindingSummary (Maybe [Text]) -- | The error that resulted in an Error finding. findingSummary_error :: Lens' FindingSummary (Maybe Text) -- | Indicates whether the finding reports a resource that has a policy -- that allows public access. findingSummary_isPublic :: Lens' FindingSummary (Maybe Bool) -- | The external principal that has access to a resource within the zone -- of trust. findingSummary_principal :: Lens' FindingSummary (Maybe (HashMap Text Text)) -- | The resource that the external principal has access to. findingSummary_resource :: Lens' FindingSummary (Maybe Text) -- | The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. findingSummary_sources :: Lens' FindingSummary (Maybe [FindingSource]) -- | The ID of the finding. findingSummary_id :: Lens' FindingSummary Text -- | The type of the resource that the external principal has access to. findingSummary_resourceType :: Lens' FindingSummary ResourceType -- | The condition in the analyzed policy statement that resulted in a -- finding. findingSummary_condition :: Lens' FindingSummary (HashMap Text Text) -- | The time at which the finding was created. findingSummary_createdAt :: Lens' FindingSummary UTCTime -- | The time at which the resource-based policy that generated the finding -- was analyzed. findingSummary_analyzedAt :: Lens' FindingSummary UTCTime -- | The time at which the finding was most recently updated. findingSummary_updatedAt :: Lens' FindingSummary UTCTime -- | The status of the finding. findingSummary_status :: Lens' FindingSummary FindingStatus -- | The Amazon Web Services account ID that owns the resource. findingSummary_resourceOwnerAccount :: Lens' FindingSummary Text -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. generatedPolicy_policy :: Lens' GeneratedPolicy Text -- | Lists details about the Trail used to generated policy. generatedPolicyProperties_cloudTrailProperties :: Lens' GeneratedPolicyProperties (Maybe CloudTrailProperties) -- | This value is set to true if the generated policy contains -- all possible actions for a service that IAM Access Analyzer identified -- from the CloudTrail trail that you specified, and false -- otherwise. generatedPolicyProperties_isComplete :: Lens' GeneratedPolicyProperties (Maybe Bool) -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. generatedPolicyProperties_principalArn :: Lens' GeneratedPolicyProperties Text -- | The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. generatedPolicyResult_generatedPolicies :: Lens' GeneratedPolicyResult (Maybe [GeneratedPolicy]) -- | A GeneratedPolicyProperties object that contains properties -- of the generated policy. generatedPolicyResult_properties :: Lens' GeneratedPolicyResult GeneratedPolicyProperties -- | The proposed trust policy for the IAM role. iamRoleConfiguration_trustPolicy :: Lens' IamRoleConfiguration (Maybe Text) -- | The name of the rule. inlineArchiveRule_ruleName :: Lens' InlineArchiveRule Text -- | The condition and values for a criterion. inlineArchiveRule_filter :: Lens' InlineArchiveRule (HashMap Text Criterion) -- | A timestamp of when the job was completed. jobDetails_completedOn :: Lens' JobDetails (Maybe UTCTime) -- | The job error for the policy generation request. jobDetails_jobError :: Lens' JobDetails (Maybe JobError) -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. jobDetails_jobId :: Lens' JobDetails Text -- | The status of the job request. jobDetails_status :: Lens' JobDetails JobStatus -- | A timestamp of when the job was started. jobDetails_startedOn :: Lens' JobDetails UTCTime -- | The job error code. jobError_code :: Lens' JobError JobErrorCode -- | Specific information about the error. For example, which service quota -- was exceeded or which resource was not found. jobError_message :: Lens' JobError Text -- | Use this structure to propose allowing cryptographic operations -- in the grant only when the operation request includes the specified -- encryption context. kmsGrantConfiguration_constraints :: Lens' KmsGrantConfiguration (Maybe KmsGrantConstraints) -- | The principal that is given permission to retire the grant by using -- RetireGrant operation. kmsGrantConfiguration_retiringPrincipal :: Lens' KmsGrantConfiguration (Maybe Text) -- | A list of operations that the grant permits. kmsGrantConfiguration_operations :: Lens' KmsGrantConfiguration [KmsGrantOperation] -- | The principal that is given permission to perform the operations that -- the grant permits. kmsGrantConfiguration_granteePrincipal :: Lens' KmsGrantConfiguration Text -- | The Amazon Web Services account under which the grant was issued. The -- account is used to propose KMS grants issued by accounts other than -- the owner of the key. kmsGrantConfiguration_issuingAccount :: Lens' KmsGrantConfiguration Text -- | A list of key-value pairs that must match the encryption context in -- the cryptographic operation request. The grant allows the -- operation only when the encryption context in the request is the same -- as the encryption context specified in this constraint. kmsGrantConstraints_encryptionContextEquals :: Lens' KmsGrantConstraints (Maybe (HashMap Text Text)) -- | A list of key-value pairs that must be included in the encryption -- context of the cryptographic operation request. The grant -- allows the cryptographic operation only when the encryption context in -- the request includes the key-value pairs specified in this constraint, -- although it can include additional key-value pairs. kmsGrantConstraints_encryptionContextSubset :: Lens' KmsGrantConstraints (Maybe (HashMap Text Text)) -- | A list of proposed grant configurations for the KMS key. If the -- proposed grant configuration is for an existing key, the access -- preview uses the proposed list of grant configurations in place of the -- existing grants. Otherwise, the access preview uses the existing -- grants for the key. kmsKeyConfiguration_grants :: Lens' KmsKeyConfiguration (Maybe [KmsGrantConfiguration]) -- | Resource policy configuration for the KMS key. The only valid value -- for the name of the key policy is default. For more -- information, see Default key policy. kmsKeyConfiguration_keyPolicies :: Lens' KmsKeyConfiguration (Maybe (HashMap Text Text)) -- | A path in a policy, represented as a sequence of path elements. location_path :: Lens' Location [PathElement] -- | A span in a policy. location_span :: Lens' Location Span -- | The configuration for the Amazon S3 access point or multi-region -- access point with an Internet origin. networkOriginConfiguration_internetConfiguration :: Lens' NetworkOriginConfiguration (Maybe InternetConfiguration) -- | Undocumented member. networkOriginConfiguration_vpcConfiguration :: Lens' NetworkOriginConfiguration (Maybe VpcConfiguration) -- | Refers to an index in a JSON array. pathElement_index :: Lens' PathElement (Maybe Int) -- | Refers to a key in a JSON object. pathElement_key :: Lens' PathElement (Maybe Text) -- | Refers to a substring of a literal string in a JSON object. pathElement_substring :: Lens' PathElement (Maybe Substring) -- | Refers to the value associated with a given key in a JSON object. pathElement_value :: Lens' PathElement (Maybe Text) -- | A timestamp of when the policy generation was completed. policyGeneration_completedOn :: Lens' PolicyGeneration (Maybe UTCTime) -- | The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. policyGeneration_jobId :: Lens' PolicyGeneration Text -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. policyGeneration_principalArn :: Lens' PolicyGeneration Text -- | The status of the policy generation request. policyGeneration_status :: Lens' PolicyGeneration JobStatus -- | A timestamp of when the policy generation started. policyGeneration_startedOn :: Lens' PolicyGeneration UTCTime -- | The ARN of the IAM entity (user or role) for which you are generating -- a policy. policyGenerationDetails_principalArn :: Lens' PolicyGenerationDetails Text -- | The line of the position, starting from 1. position_line :: Lens' Position Int -- | The column of the position, starting from 0. position_column :: Lens' Position Int -- | The offset within the policy that corresponds to the position, -- starting from 0. position_offset :: Lens' Position Int -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB cluster snapshot. If the value all is -- specified, then the Amazon RDS DB cluster snapshot is public and can -- be copied or restored by all Amazon Web Services accounts. -- -- rdsDbClusterSnapshotAttributeValue_accountIds :: Lens' RdsDbClusterSnapshotAttributeValue (Maybe [Text]) -- | The names and values of manual DB cluster snapshot attributes. Manual -- DB cluster snapshot attributes are used to authorize other Amazon Web -- Services accounts to restore a manual DB cluster snapshot. The only -- valid value for AttributeName for the attribute map is -- restore rdsDbClusterSnapshotConfiguration_attributes :: Lens' RdsDbClusterSnapshotConfiguration (Maybe (HashMap Text RdsDbClusterSnapshotAttributeValue)) -- | The KMS key identifier for an encrypted Amazon RDS DB cluster -- snapshot. The KMS key identifier is the key ARN, key ID, alias ARN, or -- alias name for the KMS key. -- -- rdsDbClusterSnapshotConfiguration_kmsKeyId :: Lens' RdsDbClusterSnapshotConfiguration (Maybe Text) -- | The Amazon Web Services account IDs that have access to the manual -- Amazon RDS DB snapshot. If the value all is specified, then -- the Amazon RDS DB snapshot is public and can be copied or restored by -- all Amazon Web Services accounts. -- -- rdsDbSnapshotAttributeValue_accountIds :: Lens' RdsDbSnapshotAttributeValue (Maybe [Text]) -- | The names and values of manual DB snapshot attributes. Manual DB -- snapshot attributes are used to authorize other Amazon Web Services -- accounts to restore a manual DB snapshot. The only valid value for -- attributeName for the attribute map is restore. rdsDbSnapshotConfiguration_attributes :: Lens' RdsDbSnapshotConfiguration (Maybe (HashMap Text RdsDbSnapshotAttributeValue)) -- | The KMS key identifier for an encrypted Amazon RDS DB snapshot. The -- KMS key identifier is the key ARN, key ID, alias ARN, or alias name -- for the KMS key. -- -- rdsDbSnapshotConfiguration_kmsKeyId :: Lens' RdsDbSnapshotConfiguration (Maybe Text) -- | The access point or multi-region access point policy. s3AccessPointConfiguration_accessPointPolicy :: Lens' S3AccessPointConfiguration (Maybe Text) -- | The proposed Internet and VpcConfiguration to apply -- to this Amazon S3 access point. VpcConfiguration does not -- apply to multi-region access points. If the access preview is for a -- new resource and neither is specified, the access preview uses -- Internet for the network origin. If the access preview is for -- an existing resource and neither is specified, the access preview uses -- the exiting network origin. s3AccessPointConfiguration_networkOrigin :: Lens' S3AccessPointConfiguration (Maybe NetworkOriginConfiguration) -- | The proposed S3PublicAccessBlock configuration to apply to -- this Amazon S3 access point or multi-region access point. s3AccessPointConfiguration_publicAccessBlock :: Lens' S3AccessPointConfiguration (Maybe S3PublicAccessBlockConfiguration) -- | The permissions being granted. s3BucketAclGrantConfiguration_permission :: Lens' S3BucketAclGrantConfiguration AclPermission -- | The grantee to whom you’re assigning access rights. s3BucketAclGrantConfiguration_grantee :: Lens' S3BucketAclGrantConfiguration AclGrantee -- | The configuration of Amazon S3 access points or multi-region access -- points for the bucket. You can propose up to 10 new access points per -- bucket. s3BucketConfiguration_accessPoints :: Lens' S3BucketConfiguration (Maybe (HashMap Text S3AccessPointConfiguration)) -- | The proposed list of ACL grants for the Amazon S3 bucket. You can -- propose up to 100 ACL grants per bucket. If the proposed grant -- configuration is for an existing bucket, the access preview uses the -- proposed list of grant configurations in place of the existing grants. -- Otherwise, the access preview uses the existing grants for the bucket. s3BucketConfiguration_bucketAclGrants :: Lens' S3BucketConfiguration (Maybe [S3BucketAclGrantConfiguration]) -- | The proposed bucket policy for the Amazon S3 bucket. s3BucketConfiguration_bucketPolicy :: Lens' S3BucketConfiguration (Maybe Text) -- | The proposed block public access configuration for the Amazon S3 -- bucket. s3BucketConfiguration_bucketPublicAccessBlock :: Lens' S3BucketConfiguration (Maybe S3PublicAccessBlockConfiguration) -- | Specifies whether Amazon S3 should ignore public ACLs for this bucket -- and objects in this bucket. s3PublicAccessBlockConfiguration_ignorePublicAcls :: Lens' S3PublicAccessBlockConfiguration Bool -- | Specifies whether Amazon S3 should restrict public bucket policies for -- this bucket. s3PublicAccessBlockConfiguration_restrictPublicBuckets :: Lens' S3PublicAccessBlockConfiguration Bool -- | The proposed ARN, key ID, or alias of the KMS key. secretsManagerSecretConfiguration_kmsKeyId :: Lens' SecretsManagerSecretConfiguration (Maybe Text) -- | The proposed resource policy defining who can access or manage the -- secret. secretsManagerSecretConfiguration_secretPolicy :: Lens' SecretsManagerSecretConfiguration (Maybe Text) -- | The JSON policy text that defines who can access an Amazon SNS topic. -- For more information, see Example cases for Amazon SNS access -- control in the Amazon SNS Developer Guide. snsTopicConfiguration_topicPolicy :: Lens' SnsTopicConfiguration (Maybe Text) -- | The name of the attribute to sort on. sortCriteria_attributeName :: Lens' SortCriteria (Maybe Text) -- | The sort order, ascending or descending. sortCriteria_orderBy :: Lens' SortCriteria (Maybe OrderBy) -- | The start position of the span (inclusive). span_start :: Lens' Span Position -- | The end position of the span (exclusive). span_end :: Lens' Span Position -- | The proposed resource policy for the Amazon SQS queue. sqsQueueConfiguration_queuePolicy :: Lens' SqsQueueConfiguration (Maybe Text) -- | The reason code for the current status of the analyzer. statusReason_code :: Lens' StatusReason ReasonCode -- | The start index of the substring, starting from 0. substring_start :: Lens' Substring Int -- | The length of the substring. substring_length :: Lens' Substring Int -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. trail_allRegions :: Lens' Trail (Maybe Bool) -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. trail_regions :: Lens' Trail (Maybe [Text]) -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. trail_cloudTrailArn :: Lens' Trail Text -- | Possible values are true or false. If set to -- true, IAM Access Analyzer retrieves CloudTrail data from all -- regions to analyze and generate a policy. trailProperties_allRegions :: Lens' TrailProperties (Maybe Bool) -- | A list of regions to get CloudTrail data from and analyze to generate -- a policy. trailProperties_regions :: Lens' TrailProperties (Maybe [Text]) -- | Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. trailProperties_cloudTrailArn :: Lens' TrailProperties Text -- | A localized message that explains the finding and provides guidance on -- how to address it. validatePolicyFinding_findingDetails :: Lens' ValidatePolicyFinding Text -- | The impact of the finding. -- -- Security warnings report when the policy allows access that we -- consider overly permissive. -- -- Errors report when a part of the policy is not functional. -- -- Warnings report non-security issues when a policy does not conform to -- policy writing best practices. -- -- Suggestions recommend stylistic improvements in the policy that do not -- impact access. validatePolicyFinding_findingType :: Lens' ValidatePolicyFinding ValidatePolicyFindingType -- | The issue code provides an identifier of the issue associated with -- this finding. validatePolicyFinding_issueCode :: Lens' ValidatePolicyFinding Text -- | A link to additional documentation about the type of finding. validatePolicyFinding_learnMoreLink :: Lens' ValidatePolicyFinding Text -- | The list of locations in the policy document that are related to the -- finding. The issue code provides a summary of an issue identified by -- the finding. validatePolicyFinding_locations :: Lens' ValidatePolicyFinding [Location] -- | If this field is specified, this access point will only allow -- connections from the specified VPC ID. vpcConfiguration_vpcId :: Lens' VpcConfiguration Text module Amazonka.AccessAnalyzer.Waiters -- | Derived from API version 2019-11-01 of the AWS service -- descriptions, licensed under Apache 2.0. -- -- Identity and Access Management Access Analyzer helps identify -- potential resource-access risks by enabling you to identify any -- policies that grant access to an external principal. It does this by -- using logic-based reasoning to analyze resource-based policies in your -- Amazon Web Services environment. An external principal can be another -- Amazon Web Services account, a root user, an IAM user or role, a -- federated user, an Amazon Web Services service, or an anonymous user. -- You can also use IAM Access Analyzer to preview and validate public -- and cross-account access to your resources before deploying -- permissions changes. This guide describes the Identity and Access -- Management Access Analyzer operations that you can call -- programmatically. For general information about IAM Access Analyzer, -- see Identity and Access Management Access Analyzer in the -- IAM User Guide. -- -- To start using IAM Access Analyzer, you first need to create an -- analyzer. module Amazonka.AccessAnalyzer -- | API version 2019-11-01 of the Amazon Access Analyzer SDK -- configuration. defaultService :: Service -- | You do not have sufficient access to perform this action. _AccessDeniedException :: AsError a => Fold a ServiceError -- | A conflict exception error. _ConflictException :: AsError a => Fold a ServiceError -- | Internal server error. _InternalServerException :: AsError a => Fold a ServiceError -- | The specified resource could not be found. _ResourceNotFoundException :: AsError a => Fold a ServiceError -- | Service quote met error. _ServiceQuotaExceededException :: AsError a => Fold a ServiceError -- | Throttling limit exceeded error. _ThrottlingException :: AsError a => Fold a ServiceError -- | Validation exception error. _ValidationException :: AsError a => Fold a ServiceError -- | Retroactively applies an archive rule. -- -- See: newApplyArchiveRule smart constructor. data ApplyArchiveRule ApplyArchiveRule' :: Maybe Text -> Text -> Text -> ApplyArchiveRule -- | Create a value of ApplyArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:ApplyArchiveRule', -- applyArchiveRule_clientToken - A client token. -- -- ApplyArchiveRule, applyArchiveRule_analyzerArn - The -- Amazon resource name (ARN) of the analyzer. -- -- ApplyArchiveRule, applyArchiveRule_ruleName - The name -- of the rule to apply. newApplyArchiveRule :: Text -> Text -> ApplyArchiveRule -- | See: newApplyArchiveRuleResponse smart constructor. data ApplyArchiveRuleResponse ApplyArchiveRuleResponse' :: ApplyArchiveRuleResponse -- | Create a value of ApplyArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newApplyArchiveRuleResponse :: ApplyArchiveRuleResponse -- | See: newCancelPolicyGeneration smart constructor. data CancelPolicyGeneration CancelPolicyGeneration' :: Text -> CancelPolicyGeneration -- | Create a value of CancelPolicyGeneration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- CancelPolicyGeneration, cancelPolicyGeneration_jobId - -- The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. newCancelPolicyGeneration :: Text -> CancelPolicyGeneration -- | See: newCancelPolicyGenerationResponse smart -- constructor. data CancelPolicyGenerationResponse CancelPolicyGenerationResponse' :: Int -> CancelPolicyGenerationResponse -- | Create a value of CancelPolicyGenerationResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:CancelPolicyGenerationResponse', -- cancelPolicyGenerationResponse_httpStatus - The response's http -- status code. newCancelPolicyGenerationResponse :: Int -> CancelPolicyGenerationResponse -- | See: newCreateAccessPreview smart constructor. data CreateAccessPreview CreateAccessPreview' :: Maybe Text -> Text -> HashMap Text Configuration -> CreateAccessPreview -- | Create a value of CreateAccessPreview with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:CreateAccessPreview', -- createAccessPreview_clientToken - A client token. -- -- CreateAccessPreview, createAccessPreview_analyzerArn - -- The ARN of the account analyzer used to generate the access -- preview. You can only create an access preview for analyzers with an -- Account type and Active status. -- -- CreateAccessPreview, createAccessPreview_configurations -- - Access control configuration for your resource that is used to -- generate the access preview. The access preview includes findings for -- external access allowed to the resource with the proposed access -- control configuration. The configuration must contain exactly one -- element. newCreateAccessPreview :: Text -> CreateAccessPreview -- | See: newCreateAccessPreviewResponse smart constructor. data CreateAccessPreviewResponse CreateAccessPreviewResponse' :: Int -> Text -> CreateAccessPreviewResponse -- | Create a value of CreateAccessPreviewResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:CreateAccessPreviewResponse', -- createAccessPreviewResponse_httpStatus - The response's http -- status code. -- -- CreateAccessPreviewResponse, -- createAccessPreviewResponse_id - The unique ID for the access -- preview. newCreateAccessPreviewResponse :: Int -> Text -> CreateAccessPreviewResponse -- | Creates an analyzer. -- -- See: newCreateAnalyzer smart constructor. data CreateAnalyzer CreateAnalyzer' :: Maybe [InlineArchiveRule] -> Maybe Text -> Maybe (HashMap Text Text) -> Text -> Type -> CreateAnalyzer -- | Create a value of CreateAnalyzer with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:archiveRules:CreateAnalyzer', -- createAnalyzer_archiveRules - Specifies the archive rules to -- add for the analyzer. Archive rules automatically archive findings -- that meet the criteria you define for the rule. -- -- $sel:clientToken:CreateAnalyzer', -- createAnalyzer_clientToken - A client token. -- -- CreateAnalyzer, createAnalyzer_tags - The tags to apply -- to the analyzer. -- -- $sel:analyzerName:CreateAnalyzer', -- createAnalyzer_analyzerName - The name of the analyzer to -- create. -- -- CreateAnalyzer, createAnalyzer_type - The type of -- analyzer to create. Only ACCOUNT and ORGANIZATION analyzers are -- supported. You can create only one analyzer per account per Region. -- You can create up to 5 analyzers per organization per Region. newCreateAnalyzer :: Text -> Type -> CreateAnalyzer -- | The response to the request to create an analyzer. -- -- See: newCreateAnalyzerResponse smart constructor. data CreateAnalyzerResponse CreateAnalyzerResponse' :: Maybe Text -> Int -> CreateAnalyzerResponse -- | Create a value of CreateAnalyzerResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- CreateAnalyzerResponse, createAnalyzerResponse_arn - The -- ARN of the analyzer that was created by the request. -- -- $sel:httpStatus:CreateAnalyzerResponse', -- createAnalyzerResponse_httpStatus - The response's http status -- code. newCreateAnalyzerResponse :: Int -> CreateAnalyzerResponse -- | Creates an archive rule. -- -- See: newCreateArchiveRule smart constructor. data CreateArchiveRule CreateArchiveRule' :: Maybe Text -> Text -> Text -> HashMap Text Criterion -> CreateArchiveRule -- | Create a value of CreateArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:CreateArchiveRule', -- createArchiveRule_clientToken - A client token. -- -- $sel:analyzerName:CreateArchiveRule', -- createArchiveRule_analyzerName - The name of the created -- analyzer. -- -- CreateArchiveRule, createArchiveRule_ruleName - The name -- of the rule to create. -- -- CreateArchiveRule, createArchiveRule_filter - The -- criteria for the rule. newCreateArchiveRule :: Text -> Text -> CreateArchiveRule -- | See: newCreateArchiveRuleResponse smart constructor. data CreateArchiveRuleResponse CreateArchiveRuleResponse' :: CreateArchiveRuleResponse -- | Create a value of CreateArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newCreateArchiveRuleResponse :: CreateArchiveRuleResponse -- | Deletes an analyzer. -- -- See: newDeleteAnalyzer smart constructor. data DeleteAnalyzer DeleteAnalyzer' :: Maybe Text -> Text -> DeleteAnalyzer -- | Create a value of DeleteAnalyzer with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:DeleteAnalyzer', -- deleteAnalyzer_clientToken - A client token. -- -- $sel:analyzerName:DeleteAnalyzer', -- deleteAnalyzer_analyzerName - The name of the analyzer to -- delete. newDeleteAnalyzer :: Text -> DeleteAnalyzer -- | See: newDeleteAnalyzerResponse smart constructor. data DeleteAnalyzerResponse DeleteAnalyzerResponse' :: DeleteAnalyzerResponse -- | Create a value of DeleteAnalyzerResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newDeleteAnalyzerResponse :: DeleteAnalyzerResponse -- | Deletes an archive rule. -- -- See: newDeleteArchiveRule smart constructor. data DeleteArchiveRule DeleteArchiveRule' :: Maybe Text -> Text -> Text -> DeleteArchiveRule -- | Create a value of DeleteArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:DeleteArchiveRule', -- deleteArchiveRule_clientToken - A client token. -- -- $sel:analyzerName:DeleteArchiveRule', -- deleteArchiveRule_analyzerName - The name of the analyzer that -- associated with the archive rule to delete. -- -- DeleteArchiveRule, deleteArchiveRule_ruleName - The name -- of the rule to delete. newDeleteArchiveRule :: Text -> Text -> DeleteArchiveRule -- | See: newDeleteArchiveRuleResponse smart constructor. data DeleteArchiveRuleResponse DeleteArchiveRuleResponse' :: DeleteArchiveRuleResponse -- | Create a value of DeleteArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newDeleteArchiveRuleResponse :: DeleteArchiveRuleResponse -- | See: newGetAccessPreview smart constructor. data GetAccessPreview GetAccessPreview' :: Text -> Text -> GetAccessPreview -- | Create a value of GetAccessPreview with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPreviewId:GetAccessPreview', -- getAccessPreview_accessPreviewId - The unique ID for the access -- preview. -- -- GetAccessPreview, getAccessPreview_analyzerArn - The -- ARN of the analyzer used to generate the access preview. newGetAccessPreview :: Text -> Text -> GetAccessPreview -- | See: newGetAccessPreviewResponse smart constructor. data GetAccessPreviewResponse GetAccessPreviewResponse' :: Int -> AccessPreview -> GetAccessPreviewResponse -- | Create a value of GetAccessPreviewResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:GetAccessPreviewResponse', -- getAccessPreviewResponse_httpStatus - The response's http -- status code. -- -- $sel:accessPreview:GetAccessPreviewResponse', -- getAccessPreviewResponse_accessPreview - An object that -- contains information about the access preview. newGetAccessPreviewResponse :: Int -> AccessPreview -> GetAccessPreviewResponse -- | Retrieves an analyzed resource. -- -- See: newGetAnalyzedResource smart constructor. data GetAnalyzedResource GetAnalyzedResource' :: Text -> Text -> GetAnalyzedResource -- | Create a value of GetAnalyzedResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- GetAnalyzedResource, getAnalyzedResource_analyzerArn - -- The ARN of the analyzer to retrieve information from. -- -- GetAnalyzedResource, getAnalyzedResource_resourceArn - -- The ARN of the resource to retrieve information about. newGetAnalyzedResource :: Text -> Text -> GetAnalyzedResource -- | The response to the request. -- -- See: newGetAnalyzedResourceResponse smart constructor. data GetAnalyzedResourceResponse GetAnalyzedResourceResponse' :: Maybe AnalyzedResource -> Int -> GetAnalyzedResourceResponse -- | Create a value of GetAnalyzedResourceResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- GetAnalyzedResourceResponse, -- getAnalyzedResourceResponse_resource - An -- AnalyzedResource object that contains information that IAM -- Access Analyzer found when it analyzed the resource. -- -- $sel:httpStatus:GetAnalyzedResourceResponse', -- getAnalyzedResourceResponse_httpStatus - The response's http -- status code. newGetAnalyzedResourceResponse :: Int -> GetAnalyzedResourceResponse -- | Retrieves an analyzer. -- -- See: newGetAnalyzer smart constructor. data GetAnalyzer GetAnalyzer' :: Text -> GetAnalyzer -- | Create a value of GetAnalyzer with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:analyzerName:GetAnalyzer', getAnalyzer_analyzerName -- - The name of the analyzer retrieved. newGetAnalyzer :: Text -> GetAnalyzer -- | The response to the request. -- -- See: newGetAnalyzerResponse smart constructor. data GetAnalyzerResponse GetAnalyzerResponse' :: Int -> AnalyzerSummary -> GetAnalyzerResponse -- | Create a value of GetAnalyzerResponse with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:GetAnalyzerResponse', -- getAnalyzerResponse_httpStatus - The response's http status -- code. -- -- $sel:analyzer:GetAnalyzerResponse', -- getAnalyzerResponse_analyzer - An AnalyzerSummary -- object that contains information about the analyzer. newGetAnalyzerResponse :: Int -> AnalyzerSummary -> GetAnalyzerResponse -- | Retrieves an archive rule. -- -- See: newGetArchiveRule smart constructor. data GetArchiveRule GetArchiveRule' :: Text -> Text -> GetArchiveRule -- | Create a value of GetArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:analyzerName:GetArchiveRule', -- getArchiveRule_analyzerName - The name of the analyzer to -- retrieve rules from. -- -- GetArchiveRule, getArchiveRule_ruleName - The name of -- the rule to retrieve. newGetArchiveRule :: Text -> Text -> GetArchiveRule -- | The response to the request. -- -- See: newGetArchiveRuleResponse smart constructor. data GetArchiveRuleResponse GetArchiveRuleResponse' :: Int -> ArchiveRuleSummary -> GetArchiveRuleResponse -- | Create a value of GetArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:GetArchiveRuleResponse', -- getArchiveRuleResponse_httpStatus - The response's http status -- code. -- -- $sel:archiveRule:GetArchiveRuleResponse', -- getArchiveRuleResponse_archiveRule - Undocumented member. newGetArchiveRuleResponse :: Int -> ArchiveRuleSummary -> GetArchiveRuleResponse -- | Retrieves a finding. -- -- See: newGetFinding smart constructor. data GetFinding GetFinding' :: Text -> Text -> GetFinding -- | Create a value of GetFinding with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- GetFinding, getFinding_analyzerArn - The ARN of the -- analyzer that generated the finding. -- -- GetFinding, getFinding_id - The ID of the finding to -- retrieve. newGetFinding :: Text -> Text -> GetFinding -- | The response to the request. -- -- See: newGetFindingResponse smart constructor. data GetFindingResponse GetFindingResponse' :: Maybe Finding -> Int -> GetFindingResponse -- | Create a value of GetFindingResponse with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:finding:GetFindingResponse', -- getFindingResponse_finding - A finding object that -- contains finding details. -- -- $sel:httpStatus:GetFindingResponse', -- getFindingResponse_httpStatus - The response's http status -- code. newGetFindingResponse :: Int -> GetFindingResponse -- | See: newGetGeneratedPolicy smart constructor. data GetGeneratedPolicy GetGeneratedPolicy' :: Maybe Bool -> Maybe Bool -> Text -> GetGeneratedPolicy -- | Create a value of GetGeneratedPolicy with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:includeResourcePlaceholders:GetGeneratedPolicy', -- getGeneratedPolicy_includeResourcePlaceholders - The level of -- detail that you want to generate. You can specify whether to generate -- policies with placeholders for resource ARNs for actions that support -- resource level granularity in policies. -- -- For example, in the resource section of a policy, you can receive a -- placeholder such as "Resource":"arn:aws:s3:::${BucketName}" -- instead of "*". -- -- $sel:includeServiceLevelTemplate:GetGeneratedPolicy', -- getGeneratedPolicy_includeServiceLevelTemplate - The level of -- detail that you want to generate. You can specify whether to generate -- service-level policies. -- -- IAM Access Analyzer uses iam:servicelastaccessed to identify -- services that have been used recently to create this service-level -- template. -- -- GetGeneratedPolicy, getGeneratedPolicy_jobId - The -- JobId that is returned by the StartPolicyGeneration -- operation. The JobId can be used with -- GetGeneratedPolicy to retrieve the generated policies or used -- with CancelPolicyGeneration to cancel the policy generation -- request. newGetGeneratedPolicy :: Text -> GetGeneratedPolicy -- | See: newGetGeneratedPolicyResponse smart constructor. data GetGeneratedPolicyResponse GetGeneratedPolicyResponse' :: Int -> JobDetails -> GeneratedPolicyResult -> GetGeneratedPolicyResponse -- | Create a value of GetGeneratedPolicyResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:GetGeneratedPolicyResponse', -- getGeneratedPolicyResponse_httpStatus - The response's http -- status code. -- -- $sel:jobDetails:GetGeneratedPolicyResponse', -- getGeneratedPolicyResponse_jobDetails - A -- GeneratedPolicyDetails object that contains details about the -- generated policy. -- -- $sel:generatedPolicyResult:GetGeneratedPolicyResponse', -- getGeneratedPolicyResponse_generatedPolicyResult - A -- GeneratedPolicyResult object that contains the generated -- policies and associated details. newGetGeneratedPolicyResponse :: Int -> JobDetails -> GeneratedPolicyResult -> GetGeneratedPolicyResponse -- | See: newListAccessPreviewFindings smart constructor. data ListAccessPreviewFindings ListAccessPreviewFindings' :: Maybe (HashMap Text Criterion) -> Maybe Int -> Maybe Text -> Text -> Text -> ListAccessPreviewFindings -- | Create a value of ListAccessPreviewFindings with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAccessPreviewFindings, -- listAccessPreviewFindings_filter - Criteria to filter the -- returned findings. -- -- $sel:maxResults:ListAccessPreviewFindings', -- listAccessPreviewFindings_maxResults - The maximum number of -- results to return in the response. -- -- ListAccessPreviewFindings, -- listAccessPreviewFindings_nextToken - A token used for -- pagination of results returned. -- -- $sel:accessPreviewId:ListAccessPreviewFindings', -- listAccessPreviewFindings_accessPreviewId - The unique ID for -- the access preview. -- -- ListAccessPreviewFindings, -- listAccessPreviewFindings_analyzerArn - The ARN of the -- analyzer used to generate the access. newListAccessPreviewFindings :: Text -> Text -> ListAccessPreviewFindings -- | See: newListAccessPreviewFindingsResponse smart -- constructor. data ListAccessPreviewFindingsResponse ListAccessPreviewFindingsResponse' :: Maybe Text -> Int -> [AccessPreviewFinding] -> ListAccessPreviewFindingsResponse -- | Create a value of ListAccessPreviewFindingsResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAccessPreviewFindings, -- listAccessPreviewFindingsResponse_nextToken - A token used for -- pagination of results returned. -- -- $sel:httpStatus:ListAccessPreviewFindingsResponse', -- listAccessPreviewFindingsResponse_httpStatus - The response's -- http status code. -- -- $sel:findings:ListAccessPreviewFindingsResponse', -- listAccessPreviewFindingsResponse_findings - A list of access -- preview findings that match the specified filter criteria. newListAccessPreviewFindingsResponse :: Int -> ListAccessPreviewFindingsResponse -- | See: newListAccessPreviews smart constructor. data ListAccessPreviews ListAccessPreviews' :: Maybe Int -> Maybe Text -> Text -> ListAccessPreviews -- | Create a value of ListAccessPreviews with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListAccessPreviews', -- listAccessPreviews_maxResults - The maximum number of results -- to return in the response. -- -- ListAccessPreviews, listAccessPreviews_nextToken - A -- token used for pagination of results returned. -- -- ListAccessPreviews, listAccessPreviews_analyzerArn - The -- ARN of the analyzer used to generate the access preview. newListAccessPreviews :: Text -> ListAccessPreviews -- | See: newListAccessPreviewsResponse smart constructor. data ListAccessPreviewsResponse ListAccessPreviewsResponse' :: Maybe Text -> Int -> [AccessPreviewSummary] -> ListAccessPreviewsResponse -- | Create a value of ListAccessPreviewsResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAccessPreviews, listAccessPreviewsResponse_nextToken -- - A token used for pagination of results returned. -- -- $sel:httpStatus:ListAccessPreviewsResponse', -- listAccessPreviewsResponse_httpStatus - The response's http -- status code. -- -- $sel:accessPreviews:ListAccessPreviewsResponse', -- listAccessPreviewsResponse_accessPreviews - A list of access -- previews retrieved for the analyzer. newListAccessPreviewsResponse :: Int -> ListAccessPreviewsResponse -- | Retrieves a list of resources that have been analyzed. -- -- See: newListAnalyzedResources smart constructor. data ListAnalyzedResources ListAnalyzedResources' :: Maybe Int -> Maybe Text -> Maybe ResourceType -> Text -> ListAnalyzedResources -- | Create a value of ListAnalyzedResources with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListAnalyzedResources', -- listAnalyzedResources_maxResults - The maximum number of -- results to return in the response. -- -- ListAnalyzedResources, listAnalyzedResources_nextToken - -- A token used for pagination of results returned. -- -- ListAnalyzedResources, -- listAnalyzedResources_resourceType - The type of resource. -- -- ListAnalyzedResources, listAnalyzedResources_analyzerArn -- - The ARN of the analyzer to retrieve a list of analyzed -- resources from. newListAnalyzedResources :: Text -> ListAnalyzedResources -- | The response to the request. -- -- See: newListAnalyzedResourcesResponse smart constructor. data ListAnalyzedResourcesResponse ListAnalyzedResourcesResponse' :: Maybe Text -> Int -> [AnalyzedResourceSummary] -> ListAnalyzedResourcesResponse -- | Create a value of ListAnalyzedResourcesResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAnalyzedResources, -- listAnalyzedResourcesResponse_nextToken - A token used for -- pagination of results returned. -- -- $sel:httpStatus:ListAnalyzedResourcesResponse', -- listAnalyzedResourcesResponse_httpStatus - The response's http -- status code. -- -- $sel:analyzedResources:ListAnalyzedResourcesResponse', -- listAnalyzedResourcesResponse_analyzedResources - A list of -- resources that were analyzed. newListAnalyzedResourcesResponse :: Int -> ListAnalyzedResourcesResponse -- | Retrieves a list of analyzers. -- -- See: newListAnalyzers smart constructor. data ListAnalyzers ListAnalyzers' :: Maybe Int -> Maybe Text -> Maybe Type -> ListAnalyzers -- | Create a value of ListAnalyzers with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListAnalyzers', listAnalyzers_maxResults -- - The maximum number of results to return in the response. -- -- ListAnalyzers, listAnalyzers_nextToken - A token used -- for pagination of results returned. -- -- ListAnalyzers, listAnalyzers_type - The type of -- analyzer. newListAnalyzers :: ListAnalyzers -- | The response to the request. -- -- See: newListAnalyzersResponse smart constructor. data ListAnalyzersResponse ListAnalyzersResponse' :: Maybe Text -> Int -> [AnalyzerSummary] -> ListAnalyzersResponse -- | Create a value of ListAnalyzersResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListAnalyzers, listAnalyzersResponse_nextToken - A token -- used for pagination of results returned. -- -- $sel:httpStatus:ListAnalyzersResponse', -- listAnalyzersResponse_httpStatus - The response's http status -- code. -- -- $sel:analyzers:ListAnalyzersResponse', -- listAnalyzersResponse_analyzers - The analyzers retrieved. newListAnalyzersResponse :: Int -> ListAnalyzersResponse -- | Retrieves a list of archive rules created for the specified analyzer. -- -- See: newListArchiveRules smart constructor. data ListArchiveRules ListArchiveRules' :: Maybe Int -> Maybe Text -> Text -> ListArchiveRules -- | Create a value of ListArchiveRules with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListArchiveRules', -- listArchiveRules_maxResults - The maximum number of results to -- return in the request. -- -- ListArchiveRules, listArchiveRules_nextToken - A token -- used for pagination of results returned. -- -- $sel:analyzerName:ListArchiveRules', -- listArchiveRules_analyzerName - The name of the analyzer to -- retrieve rules from. newListArchiveRules :: Text -> ListArchiveRules -- | The response to the request. -- -- See: newListArchiveRulesResponse smart constructor. data ListArchiveRulesResponse ListArchiveRulesResponse' :: Maybe Text -> Int -> [ArchiveRuleSummary] -> ListArchiveRulesResponse -- | Create a value of ListArchiveRulesResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListArchiveRules, listArchiveRulesResponse_nextToken - A -- token used for pagination of results returned. -- -- $sel:httpStatus:ListArchiveRulesResponse', -- listArchiveRulesResponse_httpStatus - The response's http -- status code. -- -- $sel:archiveRules:ListArchiveRulesResponse', -- listArchiveRulesResponse_archiveRules - A list of archive rules -- created for the specified analyzer. newListArchiveRulesResponse :: Int -> ListArchiveRulesResponse -- | Retrieves a list of findings generated by the specified analyzer. -- -- See: newListFindings smart constructor. data ListFindings ListFindings' :: Maybe (HashMap Text Criterion) -> Maybe Int -> Maybe Text -> Maybe SortCriteria -> Text -> ListFindings -- | Create a value of ListFindings with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListFindings, listFindings_filter - A filter to match -- for the findings to return. -- -- $sel:maxResults:ListFindings', listFindings_maxResults - -- The maximum number of results to return in the response. -- -- ListFindings, listFindings_nextToken - A token used for -- pagination of results returned. -- -- $sel:sort:ListFindings', listFindings_sort - The sort -- order for the findings returned. -- -- ListFindings, listFindings_analyzerArn - The ARN of -- the analyzer to retrieve findings from. newListFindings :: Text -> ListFindings -- | The response to the request. -- -- See: newListFindingsResponse smart constructor. data ListFindingsResponse ListFindingsResponse' :: Maybe Text -> Int -> [FindingSummary] -> ListFindingsResponse -- | Create a value of ListFindingsResponse with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListFindings, listFindingsResponse_nextToken - A token -- used for pagination of results returned. -- -- $sel:httpStatus:ListFindingsResponse', -- listFindingsResponse_httpStatus - The response's http status -- code. -- -- $sel:findings:ListFindingsResponse', -- listFindingsResponse_findings - A list of findings retrieved -- from the analyzer that match the filter criteria specified, if any. newListFindingsResponse :: Int -> ListFindingsResponse -- | See: newListPolicyGenerations smart constructor. data ListPolicyGenerations ListPolicyGenerations' :: Maybe Natural -> Maybe Text -> Maybe Text -> ListPolicyGenerations -- | Create a value of ListPolicyGenerations with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:maxResults:ListPolicyGenerations', -- listPolicyGenerations_maxResults - The maximum number of -- results to return in the response. -- -- ListPolicyGenerations, listPolicyGenerations_nextToken - -- A token used for pagination of results returned. -- -- ListPolicyGenerations, -- listPolicyGenerations_principalArn - The ARN of the IAM entity -- (user or role) for which you are generating a policy. Use this with -- ListGeneratedPolicies to filter the results to only include -- results for a specific principal. newListPolicyGenerations :: ListPolicyGenerations -- | See: newListPolicyGenerationsResponse smart constructor. data ListPolicyGenerationsResponse ListPolicyGenerationsResponse' :: Maybe Text -> Int -> [PolicyGeneration] -> ListPolicyGenerationsResponse -- | Create a value of ListPolicyGenerationsResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListPolicyGenerations, -- listPolicyGenerationsResponse_nextToken - A token used for -- pagination of results returned. -- -- $sel:httpStatus:ListPolicyGenerationsResponse', -- listPolicyGenerationsResponse_httpStatus - The response's http -- status code. -- -- $sel:policyGenerations:ListPolicyGenerationsResponse', -- listPolicyGenerationsResponse_policyGenerations - A -- PolicyGeneration object that contains details about the -- generated policy. newListPolicyGenerationsResponse :: Int -> ListPolicyGenerationsResponse -- | Retrieves a list of tags applied to the specified resource. -- -- See: newListTagsForResource smart constructor. data ListTagsForResource ListTagsForResource' :: Text -> ListTagsForResource -- | Create a value of ListTagsForResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListTagsForResource, listTagsForResource_resourceArn - -- The ARN of the resource to retrieve tags from. newListTagsForResource :: Text -> ListTagsForResource -- | The response to the request. -- -- See: newListTagsForResourceResponse smart constructor. data ListTagsForResourceResponse ListTagsForResourceResponse' :: Maybe (HashMap Text Text) -> Int -> ListTagsForResourceResponse -- | Create a value of ListTagsForResourceResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ListTagsForResourceResponse, -- listTagsForResourceResponse_tags - The tags that are applied to -- the specified resource. -- -- $sel:httpStatus:ListTagsForResourceResponse', -- listTagsForResourceResponse_httpStatus - The response's http -- status code. newListTagsForResourceResponse :: Int -> ListTagsForResourceResponse -- | See: newStartPolicyGeneration smart constructor. data StartPolicyGeneration StartPolicyGeneration' :: Maybe Text -> Maybe CloudTrailDetails -> PolicyGenerationDetails -> StartPolicyGeneration -- | Create a value of StartPolicyGeneration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:StartPolicyGeneration', -- startPolicyGeneration_clientToken - A unique, case-sensitive -- identifier that you provide to ensure the idempotency of the request. -- Idempotency ensures that an API request completes only once. With an -- idempotent request, if the original request completes successfully, -- the subsequent retries with the same client token return the result -- from the original successful request and they have no additional -- effect. -- -- If you do not specify a client token, one is automatically generated -- by the Amazon Web Services SDK. -- -- $sel:cloudTrailDetails:StartPolicyGeneration', -- startPolicyGeneration_cloudTrailDetails - A -- CloudTrailDetails object that contains details about a -- Trail that you want to analyze to generate policies. -- -- $sel:policyGenerationDetails:StartPolicyGeneration', -- startPolicyGeneration_policyGenerationDetails - Contains the -- ARN of the IAM entity (user or role) for which you are generating a -- policy. newStartPolicyGeneration :: PolicyGenerationDetails -> StartPolicyGeneration -- | See: newStartPolicyGenerationResponse smart constructor. data StartPolicyGenerationResponse StartPolicyGenerationResponse' :: Int -> Text -> StartPolicyGenerationResponse -- | Create a value of StartPolicyGenerationResponse with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:StartPolicyGenerationResponse', -- startPolicyGenerationResponse_httpStatus - The response's http -- status code. -- -- StartPolicyGenerationResponse, -- startPolicyGenerationResponse_jobId - The JobId that -- is returned by the StartPolicyGeneration operation. The -- JobId can be used with GetGeneratedPolicy to -- retrieve the generated policies or used with -- CancelPolicyGeneration to cancel the policy generation -- request. newStartPolicyGenerationResponse :: Int -> Text -> StartPolicyGenerationResponse -- | Starts a scan of the policies applied to the specified resource. -- -- See: newStartResourceScan smart constructor. data StartResourceScan StartResourceScan' :: Maybe Text -> Text -> Text -> StartResourceScan -- | Create a value of StartResourceScan with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- StartResourceScan, -- startResourceScan_resourceOwnerAccount - The Amazon Web -- Services account ID that owns the resource. For most Amazon Web -- Services resources, the owning account is the account in which the -- resource was created. -- -- StartResourceScan, startResourceScan_analyzerArn - The -- ARN of the analyzer to use to scan the policies applied to the -- specified resource. -- -- StartResourceScan, startResourceScan_resourceArn - The -- ARN of the resource to scan. newStartResourceScan :: Text -> Text -> StartResourceScan -- | See: newStartResourceScanResponse smart constructor. data StartResourceScanResponse StartResourceScanResponse' :: StartResourceScanResponse -- | Create a value of StartResourceScanResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newStartResourceScanResponse :: StartResourceScanResponse -- | Adds a tag to the specified resource. -- -- See: newTagResource smart constructor. data TagResource TagResource' :: Text -> HashMap Text Text -> TagResource -- | Create a value of TagResource with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- TagResource, tagResource_resourceArn - The ARN of the -- resource to add the tag to. -- -- TagResource, tagResource_tags - The tags to add to the -- resource. newTagResource :: Text -> TagResource -- | The response to the request. -- -- See: newTagResourceResponse smart constructor. data TagResourceResponse TagResourceResponse' :: Int -> TagResourceResponse -- | Create a value of TagResourceResponse with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:TagResourceResponse', -- tagResourceResponse_httpStatus - The response's http status -- code. newTagResourceResponse :: Int -> TagResourceResponse -- | Removes a tag from the specified resource. -- -- See: newUntagResource smart constructor. data UntagResource UntagResource' :: Text -> [Text] -> UntagResource -- | Create a value of UntagResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- UntagResource, untagResource_resourceArn - The ARN of -- the resource to remove the tag from. -- -- $sel:tagKeys:UntagResource', untagResource_tagKeys - The -- key for the tag to add. newUntagResource :: Text -> UntagResource -- | The response to the request. -- -- See: newUntagResourceResponse smart constructor. data UntagResourceResponse UntagResourceResponse' :: Int -> UntagResourceResponse -- | Create a value of UntagResourceResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:httpStatus:UntagResourceResponse', -- untagResourceResponse_httpStatus - The response's http status -- code. newUntagResourceResponse :: Int -> UntagResourceResponse -- | Updates the specified archive rule. -- -- See: newUpdateArchiveRule smart constructor. data UpdateArchiveRule UpdateArchiveRule' :: Maybe Text -> Text -> Text -> HashMap Text Criterion -> UpdateArchiveRule -- | Create a value of UpdateArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:UpdateArchiveRule', -- updateArchiveRule_clientToken - A client token. -- -- $sel:analyzerName:UpdateArchiveRule', -- updateArchiveRule_analyzerName - The name of the analyzer to -- update the archive rules for. -- -- UpdateArchiveRule, updateArchiveRule_ruleName - The name -- of the rule to update. -- -- UpdateArchiveRule, updateArchiveRule_filter - A filter -- to match for the rules to update. Only rules that match the filter are -- updated. newUpdateArchiveRule :: Text -> Text -> UpdateArchiveRule -- | See: newUpdateArchiveRuleResponse smart constructor. data UpdateArchiveRuleResponse UpdateArchiveRuleResponse' :: UpdateArchiveRuleResponse -- | Create a value of UpdateArchiveRuleResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newUpdateArchiveRuleResponse :: UpdateArchiveRuleResponse -- | Updates findings with the new values provided in the request. -- -- See: newUpdateFindings smart constructor. data UpdateFindings UpdateFindings' :: Maybe Text -> Maybe [Text] -> Maybe Text -> Text -> FindingStatusUpdate -> UpdateFindings -- | Create a value of UpdateFindings with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:clientToken:UpdateFindings', -- updateFindings_clientToken - A client token. -- -- $sel:ids:UpdateFindings', updateFindings_ids - The IDs -- of the findings to update. -- -- UpdateFindings, updateFindings_resourceArn - The ARN of -- the resource identified in the finding. -- -- UpdateFindings, updateFindings_analyzerArn - The ARN -- of the analyzer that generated the findings to update. -- -- UpdateFindings, updateFindings_status - The state -- represents the action to take to update the finding Status. Use -- ARCHIVE to change an Active finding to an Archived finding. -- Use ACTIVE to change an Archived finding to an Active -- finding. newUpdateFindings :: Text -> FindingStatusUpdate -> UpdateFindings -- | See: newUpdateFindingsResponse smart constructor. data UpdateFindingsResponse UpdateFindingsResponse' :: UpdateFindingsResponse -- | Create a value of UpdateFindingsResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newUpdateFindingsResponse :: UpdateFindingsResponse -- | See: newValidatePolicy smart constructor. data ValidatePolicy ValidatePolicy' :: Maybe Locale -> Maybe Int -> Maybe Text -> Maybe ValidatePolicyResourceType -> Text -> PolicyType -> ValidatePolicy -- | Create a value of ValidatePolicy with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:locale:ValidatePolicy', validatePolicy_locale - The -- locale to use for localizing the findings. -- -- $sel:maxResults:ValidatePolicy', -- validatePolicy_maxResults - The maximum number of results to -- return in the response. -- -- ValidatePolicy, validatePolicy_nextToken - A token used -- for pagination of results returned. -- -- $sel:validatePolicyResourceType:ValidatePolicy', -- validatePolicy_validatePolicyResourceType - The type of -- resource to attach to your resource policy. Specify a value for the -- policy validation resource type only if the policy type is -- RESOURCE_POLICY. For example, to validate a resource policy -- to attach to an Amazon S3 bucket, you can choose -- AWS::S3::Bucket for the policy validation resource type. -- -- For resource types not supported as valid values, IAM Access Analyzer -- runs policy checks that apply to all resource policies. For example, -- to validate a resource policy to attach to a KMS key, do not specify a -- value for the policy validation resource type and IAM Access Analyzer -- will run policy checks that apply to all resource policies. -- -- $sel:policyDocument:ValidatePolicy', -- validatePolicy_policyDocument - The JSON policy document to use -- as the content for the policy. -- -- $sel:policyType:ValidatePolicy', -- validatePolicy_policyType - The type of policy to validate. -- Identity policies grant permissions to IAM principals. Identity -- policies include managed and inline policies for IAM roles, users, and -- groups. They also include service-control policies (SCPs) that are -- attached to an Amazon Web Services organization, organizational unit -- (OU), or an account. -- -- Resource policies grant permissions on Amazon Web Services resources. -- Resource policies include trust policies for IAM roles and bucket -- policies for Amazon S3 buckets. You can provide a generic input such -- as identity policy or resource policy or a specific input such as -- managed policy or Amazon S3 bucket policy. newValidatePolicy :: Text -> PolicyType -> ValidatePolicy -- | See: newValidatePolicyResponse smart constructor. data ValidatePolicyResponse ValidatePolicyResponse' :: Maybe Text -> Int -> [ValidatePolicyFinding] -> ValidatePolicyResponse -- | Create a value of ValidatePolicyResponse with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- ValidatePolicy, validatePolicyResponse_nextToken - A -- token used for pagination of results returned. -- -- $sel:httpStatus:ValidatePolicyResponse', -- validatePolicyResponse_httpStatus - The response's http status -- code. -- -- $sel:findings:ValidatePolicyResponse', -- validatePolicyResponse_findings - The list of findings in a -- policy returned by IAM Access Analyzer based on its suite of policy -- checks. newValidatePolicyResponse :: Int -> ValidatePolicyResponse newtype AccessPreviewStatus AccessPreviewStatus' :: Text -> AccessPreviewStatus [fromAccessPreviewStatus] :: AccessPreviewStatus -> Text pattern AccessPreviewStatus_COMPLETED :: AccessPreviewStatus pattern AccessPreviewStatus_CREATING :: AccessPreviewStatus pattern AccessPreviewStatus_FAILED :: AccessPreviewStatus newtype AccessPreviewStatusReasonCode AccessPreviewStatusReasonCode' :: Text -> AccessPreviewStatusReasonCode [fromAccessPreviewStatusReasonCode] :: AccessPreviewStatusReasonCode -> Text pattern AccessPreviewStatusReasonCode_INTERNAL_ERROR :: AccessPreviewStatusReasonCode pattern AccessPreviewStatusReasonCode_INVALID_CONFIGURATION :: AccessPreviewStatusReasonCode newtype AclPermission AclPermission' :: Text -> AclPermission [fromAclPermission] :: AclPermission -> Text pattern AclPermission_FULL_CONTROL :: AclPermission pattern AclPermission_READ :: AclPermission pattern AclPermission_READ_ACP :: AclPermission pattern AclPermission_WRITE :: AclPermission pattern AclPermission_WRITE_ACP :: AclPermission newtype AnalyzerStatus AnalyzerStatus' :: Text -> AnalyzerStatus [fromAnalyzerStatus] :: AnalyzerStatus -> Text pattern AnalyzerStatus_ACTIVE :: AnalyzerStatus pattern AnalyzerStatus_CREATING :: AnalyzerStatus pattern AnalyzerStatus_DISABLED :: AnalyzerStatus pattern AnalyzerStatus_FAILED :: AnalyzerStatus newtype FindingChangeType FindingChangeType' :: Text -> FindingChangeType [fromFindingChangeType] :: FindingChangeType -> Text pattern FindingChangeType_CHANGED :: FindingChangeType pattern FindingChangeType_NEW :: FindingChangeType pattern FindingChangeType_UNCHANGED :: FindingChangeType newtype FindingSourceType FindingSourceType' :: Text -> FindingSourceType [fromFindingSourceType] :: FindingSourceType -> Text pattern FindingSourceType_BUCKET_ACL :: FindingSourceType pattern FindingSourceType_POLICY :: FindingSourceType pattern FindingSourceType_S3_ACCESS_POINT :: FindingSourceType pattern FindingSourceType_S3_ACCESS_POINT_ACCOUNT :: FindingSourceType newtype FindingStatus FindingStatus' :: Text -> FindingStatus [fromFindingStatus] :: FindingStatus -> Text pattern FindingStatus_ACTIVE :: FindingStatus pattern FindingStatus_ARCHIVED :: FindingStatus pattern FindingStatus_RESOLVED :: FindingStatus newtype FindingStatusUpdate FindingStatusUpdate' :: Text -> FindingStatusUpdate [fromFindingStatusUpdate] :: FindingStatusUpdate -> Text pattern FindingStatusUpdate_ACTIVE :: FindingStatusUpdate pattern FindingStatusUpdate_ARCHIVED :: FindingStatusUpdate newtype JobErrorCode JobErrorCode' :: Text -> JobErrorCode [fromJobErrorCode] :: JobErrorCode -> Text pattern JobErrorCode_AUTHORIZATION_ERROR :: JobErrorCode pattern JobErrorCode_RESOURCE_NOT_FOUND_ERROR :: JobErrorCode pattern JobErrorCode_SERVICE_ERROR :: JobErrorCode pattern JobErrorCode_SERVICE_QUOTA_EXCEEDED_ERROR :: JobErrorCode newtype JobStatus JobStatus' :: Text -> JobStatus [fromJobStatus] :: JobStatus -> Text pattern JobStatus_CANCELED :: JobStatus pattern JobStatus_FAILED :: JobStatus pattern JobStatus_IN_PROGRESS :: JobStatus pattern JobStatus_SUCCEEDED :: JobStatus newtype KmsGrantOperation KmsGrantOperation' :: Text -> KmsGrantOperation [fromKmsGrantOperation] :: KmsGrantOperation -> Text pattern KmsGrantOperation_CreateGrant :: KmsGrantOperation pattern KmsGrantOperation_Decrypt :: KmsGrantOperation pattern KmsGrantOperation_DescribeKey :: KmsGrantOperation pattern KmsGrantOperation_Encrypt :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKey :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyPair :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyPairWithoutPlaintext :: KmsGrantOperation pattern KmsGrantOperation_GenerateDataKeyWithoutPlaintext :: KmsGrantOperation pattern KmsGrantOperation_GetPublicKey :: KmsGrantOperation pattern KmsGrantOperation_ReEncryptFrom :: KmsGrantOperation pattern KmsGrantOperation_ReEncryptTo :: KmsGrantOperation pattern KmsGrantOperation_RetireGrant :: KmsGrantOperation pattern KmsGrantOperation_Sign :: KmsGrantOperation pattern KmsGrantOperation_Verify :: KmsGrantOperation newtype Locale Locale' :: Text -> Locale [fromLocale] :: Locale -> Text pattern Locale_DE :: Locale pattern Locale_EN :: Locale pattern Locale_ES :: Locale pattern Locale_FR :: Locale pattern Locale_IT :: Locale pattern Locale_JA :: Locale pattern Locale_KO :: Locale pattern Locale_PT_BR :: Locale pattern Locale_ZH_CN :: Locale pattern Locale_ZH_TW :: Locale newtype OrderBy OrderBy' :: Text -> OrderBy [fromOrderBy] :: OrderBy -> Text pattern OrderBy_ASC :: OrderBy pattern OrderBy_DESC :: OrderBy newtype PolicyType PolicyType' :: Text -> PolicyType [fromPolicyType] :: PolicyType -> Text pattern PolicyType_IDENTITY_POLICY :: PolicyType pattern PolicyType_RESOURCE_POLICY :: PolicyType pattern PolicyType_SERVICE_CONTROL_POLICY :: PolicyType newtype ReasonCode ReasonCode' :: Text -> ReasonCode [fromReasonCode] :: ReasonCode -> Text pattern ReasonCode_AWS_SERVICE_ACCESS_DISABLED :: ReasonCode pattern ReasonCode_DELEGATED_ADMINISTRATOR_DEREGISTERED :: ReasonCode pattern ReasonCode_ORGANIZATION_DELETED :: ReasonCode pattern ReasonCode_SERVICE_LINKED_ROLE_CREATION_FAILED :: ReasonCode newtype ResourceType ResourceType' :: Text -> ResourceType [fromResourceType] :: ResourceType -> Text pattern ResourceType_AWS__EC2__Snapshot :: ResourceType pattern ResourceType_AWS__ECR__Repository :: ResourceType pattern ResourceType_AWS__EFS__FileSystem :: ResourceType pattern ResourceType_AWS__IAM__Role :: ResourceType pattern ResourceType_AWS__KMS__Key :: ResourceType pattern ResourceType_AWS__Lambda__Function :: ResourceType pattern ResourceType_AWS__Lambda__LayerVersion :: ResourceType pattern ResourceType_AWS__RDS__DBClusterSnapshot :: ResourceType pattern ResourceType_AWS__RDS__DBSnapshot :: ResourceType pattern ResourceType_AWS__S3__Bucket :: ResourceType pattern ResourceType_AWS__SNS__Topic :: ResourceType pattern ResourceType_AWS__SQS__Queue :: ResourceType pattern ResourceType_AWS__SecretsManager__Secret :: ResourceType newtype Type Type' :: Text -> Type [fromType] :: Type -> Text pattern Type_ACCOUNT :: Type pattern Type_ORGANIZATION :: Type newtype ValidatePolicyFindingType ValidatePolicyFindingType' :: Text -> ValidatePolicyFindingType [fromValidatePolicyFindingType] :: ValidatePolicyFindingType -> Text pattern ValidatePolicyFindingType_ERROR :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_SECURITY_WARNING :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_SUGGESTION :: ValidatePolicyFindingType pattern ValidatePolicyFindingType_WARNING :: ValidatePolicyFindingType newtype ValidatePolicyResourceType ValidatePolicyResourceType' :: Text -> ValidatePolicyResourceType [fromValidatePolicyResourceType] :: ValidatePolicyResourceType -> Text pattern ValidatePolicyResourceType_AWS__IAM__AssumeRolePolicyDocument :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3ObjectLambda__AccessPoint :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__AccessPoint :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__Bucket :: ValidatePolicyResourceType pattern ValidatePolicyResourceType_AWS__S3__MultiRegionAccessPoint :: ValidatePolicyResourceType -- | Contains information about an access preview. -- -- See: newAccessPreview smart constructor. data AccessPreview AccessPreview' :: Maybe AccessPreviewStatusReason -> Text -> Text -> HashMap Text Configuration -> ISO8601 -> AccessPreviewStatus -> AccessPreview -- | Create a value of AccessPreview with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:statusReason:AccessPreview', -- accessPreview_statusReason - Provides more details about the -- current status of the access preview. -- -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid resource -- configuration. -- -- $sel:id:AccessPreview', accessPreview_id - The unique ID -- for the access preview. -- -- $sel:analyzerArn:AccessPreview', -- accessPreview_analyzerArn - The ARN of the analyzer used to -- generate the access preview. -- -- $sel:configurations:AccessPreview', -- accessPreview_configurations - A map of resource ARNs for the -- proposed resource configuration. -- -- $sel:createdAt:AccessPreview', accessPreview_createdAt - -- The time at which the access preview was created. -- -- $sel:status:AccessPreview', accessPreview_status - The -- status of the access preview. -- -- newAccessPreview :: Text -> Text -> UTCTime -> AccessPreviewStatus -> AccessPreview -- | An access preview finding generated by the access preview. -- -- See: newAccessPreviewFinding smart constructor. data AccessPreviewFinding AccessPreviewFinding' :: Maybe [Text] -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe Text -> Maybe FindingStatus -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> ISO8601 -> FindingChangeType -> FindingStatus -> Text -> AccessPreviewFinding -- | Create a value of AccessPreviewFinding with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:AccessPreviewFinding', -- accessPreviewFinding_action - The action in the analyzed policy -- statement that an external principal has permission to perform. -- -- $sel:condition:AccessPreviewFinding', -- accessPreviewFinding_condition - The condition in the analyzed -- policy statement that resulted in a finding. -- -- $sel:error:AccessPreviewFinding', -- accessPreviewFinding_error - An error. -- -- $sel:existingFindingId:AccessPreviewFinding', -- accessPreviewFinding_existingFindingId - The existing ID of the -- finding in IAM Access Analyzer, provided only for existing findings. -- -- $sel:existingFindingStatus:AccessPreviewFinding', -- accessPreviewFinding_existingFindingStatus - The existing -- status of the finding, provided only for existing findings. -- -- $sel:isPublic:AccessPreviewFinding', -- accessPreviewFinding_isPublic - Indicates whether the policy -- that generated the finding allows public access to the resource. -- -- $sel:principal:AccessPreviewFinding', -- accessPreviewFinding_principal - The external principal that -- has access to a resource within the zone of trust. -- -- $sel:resource:AccessPreviewFinding', -- accessPreviewFinding_resource - The resource that an external -- principal has access to. This is the resource associated with the -- access preview. -- -- $sel:sources:AccessPreviewFinding', -- accessPreviewFinding_sources - The sources of the finding. This -- indicates how the access that generated the finding is granted. It is -- populated for Amazon S3 bucket findings. -- -- $sel:id:AccessPreviewFinding', accessPreviewFinding_id - -- The ID of the access preview finding. This ID uniquely identifies the -- element in the list of access preview findings and is not related to -- the finding ID in Access Analyzer. -- -- $sel:resourceType:AccessPreviewFinding', -- accessPreviewFinding_resourceType - The type of the resource -- that can be accessed in the finding. -- -- $sel:createdAt:AccessPreviewFinding', -- accessPreviewFinding_createdAt - The time at which the access -- preview finding was created. -- -- $sel:changeType:AccessPreviewFinding', -- accessPreviewFinding_changeType - Provides context on how the -- access preview finding compares to existing access identified in IAM -- Access Analyzer. -- -- -- -- For example, a Changed finding with preview status -- Resolved and existing status Active indicates the -- existing Active finding would become Resolved as a -- result of the proposed permissions change. -- -- $sel:status:AccessPreviewFinding', -- accessPreviewFinding_status - The preview status of the -- finding. This is what the status of the finding would be after -- permissions deployment. For example, a Changed finding with -- preview status Resolved and existing status Active -- indicates the existing Active finding would become -- Resolved as a result of the proposed permissions change. -- -- $sel:resourceOwnerAccount:AccessPreviewFinding', -- accessPreviewFinding_resourceOwnerAccount - The Amazon Web -- Services account ID that owns the resource. For most Amazon Web -- Services resources, the owning account is the account in which the -- resource was created. newAccessPreviewFinding :: Text -> ResourceType -> UTCTime -> FindingChangeType -> FindingStatus -> Text -> AccessPreviewFinding -- | Provides more details about the current status of the access preview. -- For example, if the creation of the access preview fails, a -- Failed status is returned. This failure can be due to an -- internal issue with the analysis or due to an invalid proposed -- resource configuration. -- -- See: newAccessPreviewStatusReason smart constructor. data AccessPreviewStatusReason AccessPreviewStatusReason' :: AccessPreviewStatusReasonCode -> AccessPreviewStatusReason -- | Create a value of AccessPreviewStatusReason with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:AccessPreviewStatusReason', -- accessPreviewStatusReason_code - The reason code for the -- current status of the access preview. newAccessPreviewStatusReason :: AccessPreviewStatusReasonCode -> AccessPreviewStatusReason -- | Contains a summary of information about an access preview. -- -- See: newAccessPreviewSummary smart constructor. data AccessPreviewSummary AccessPreviewSummary' :: Maybe AccessPreviewStatusReason -> Text -> Text -> ISO8601 -> AccessPreviewStatus -> AccessPreviewSummary -- | Create a value of AccessPreviewSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:statusReason:AccessPreviewSummary', -- accessPreviewSummary_statusReason - Undocumented member. -- -- $sel:id:AccessPreviewSummary', accessPreviewSummary_id - -- The unique ID for the access preview. -- -- $sel:analyzerArn:AccessPreviewSummary', -- accessPreviewSummary_analyzerArn - The ARN of the analyzer used -- to generate the access preview. -- -- $sel:createdAt:AccessPreviewSummary', -- accessPreviewSummary_createdAt - The time at which the access -- preview was created. -- -- $sel:status:AccessPreviewSummary', -- accessPreviewSummary_status - The status of the access preview. -- -- newAccessPreviewSummary :: Text -> Text -> UTCTime -> AccessPreviewStatus -> AccessPreviewSummary -- | You specify each grantee as a type-value pair using one of these -- types. You can specify only one type of grantee. For more information, -- see PutBucketAcl. -- -- See: newAclGrantee smart constructor. data AclGrantee AclGrantee' :: Maybe Text -> Maybe Text -> AclGrantee -- | Create a value of AclGrantee with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:id:AclGrantee', aclGrantee_id - The value specified -- is the canonical user ID of an Amazon Web Services account. -- -- $sel:uri:AclGrantee', aclGrantee_uri - Used for granting -- permissions to a predefined group. newAclGrantee :: AclGrantee -- | Contains details about the analyzed resource. -- -- See: newAnalyzedResource smart constructor. data AnalyzedResource AnalyzedResource' :: Maybe [Text] -> Maybe Text -> Maybe [Text] -> Maybe FindingStatus -> Text -> ResourceType -> ISO8601 -> ISO8601 -> ISO8601 -> Bool -> Text -> AnalyzedResource -- | Create a value of AnalyzedResource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:actions:AnalyzedResource', analyzedResource_actions -- - The actions that an external principal is granted permission to use -- by the policy that generated the finding. -- -- $sel:error:AnalyzedResource', analyzedResource_error - -- An error message. -- -- $sel:sharedVia:AnalyzedResource', -- analyzedResource_sharedVia - Indicates how the access that -- generated the finding is granted. This is populated for Amazon S3 -- bucket findings. -- -- $sel:status:AnalyzedResource', analyzedResource_status - -- The current status of the finding generated from the analyzed -- resource. -- -- $sel:resourceArn:AnalyzedResource', -- analyzedResource_resourceArn - The ARN of the resource that was -- analyzed. -- -- $sel:resourceType:AnalyzedResource', -- analyzedResource_resourceType - The type of the resource that -- was analyzed. -- -- $sel:createdAt:AnalyzedResource', -- analyzedResource_createdAt - The time at which the finding was -- created. -- -- $sel:analyzedAt:AnalyzedResource', -- analyzedResource_analyzedAt - The time at which the resource -- was analyzed. -- -- $sel:updatedAt:AnalyzedResource', -- analyzedResource_updatedAt - The time at which the finding was -- updated. -- -- $sel:isPublic:AnalyzedResource', -- analyzedResource_isPublic - Indicates whether the policy that -- generated the finding grants public access to the resource. -- -- $sel:resourceOwnerAccount:AnalyzedResource', -- analyzedResource_resourceOwnerAccount - The Amazon Web Services -- account ID that owns the resource. newAnalyzedResource :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> Bool -> Text -> AnalyzedResource -- | Contains the ARN of the analyzed resource. -- -- See: newAnalyzedResourceSummary smart constructor. data AnalyzedResourceSummary AnalyzedResourceSummary' :: Text -> Text -> ResourceType -> AnalyzedResourceSummary -- | Create a value of AnalyzedResourceSummary with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:resourceArn:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceArn - The ARN of the analyzed -- resource. -- -- $sel:resourceOwnerAccount:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceOwnerAccount - The Amazon Web -- Services account ID that owns the resource. -- -- $sel:resourceType:AnalyzedResourceSummary', -- analyzedResourceSummary_resourceType - The type of resource -- that was analyzed. newAnalyzedResourceSummary :: Text -> Text -> ResourceType -> AnalyzedResourceSummary -- | Contains information about the analyzer. -- -- See: newAnalyzerSummary smart constructor. data AnalyzerSummary AnalyzerSummary' :: Maybe Text -> Maybe ISO8601 -> Maybe StatusReason -> Maybe (HashMap Text Text) -> Text -> Text -> Type -> ISO8601 -> AnalyzerStatus -> AnalyzerSummary -- | Create a value of AnalyzerSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:lastResourceAnalyzed:AnalyzerSummary', -- analyzerSummary_lastResourceAnalyzed - The resource that was -- most recently analyzed by the analyzer. -- -- $sel:lastResourceAnalyzedAt:AnalyzerSummary', -- analyzerSummary_lastResourceAnalyzedAt - The time at which the -- most recently analyzed resource was analyzed. -- -- $sel:statusReason:AnalyzerSummary', -- analyzerSummary_statusReason - The statusReason -- provides more details about the current status of the analyzer. For -- example, if the creation for the analyzer fails, a Failed -- status is returned. For an analyzer with organization as the type, -- this failure can be due to an issue with creating the service-linked -- roles required in the member accounts of the Amazon Web Services -- organization. -- -- $sel:tags:AnalyzerSummary', analyzerSummary_tags - The -- tags added to the analyzer. -- -- $sel:arn:AnalyzerSummary', analyzerSummary_arn - The ARN -- of the analyzer. -- -- $sel:name:AnalyzerSummary', analyzerSummary_name - The -- name of the analyzer. -- -- $sel:type':AnalyzerSummary', analyzerSummary_type - The -- type of analyzer, which corresponds to the zone of trust chosen for -- the analyzer. -- -- $sel:createdAt:AnalyzerSummary', -- analyzerSummary_createdAt - A timestamp for the time at which -- the analyzer was created. -- -- $sel:status:AnalyzerSummary', analyzerSummary_status - -- The status of the analyzer. An Active analyzer successfully -- monitors supported resources and generates new findings. The analyzer -- is Disabled when a user action, such as removing trusted -- access for Identity and Access Management Access Analyzer from -- Organizations, causes the analyzer to stop generating new findings. -- The status is Creating when the analyzer creation is in -- progress and Failed when the analyzer creation has failed. newAnalyzerSummary :: Text -> Text -> Type -> UTCTime -> AnalyzerStatus -> AnalyzerSummary -- | Contains information about an archive rule. -- -- See: newArchiveRuleSummary smart constructor. data ArchiveRuleSummary ArchiveRuleSummary' :: Text -> HashMap Text Criterion -> ISO8601 -> ISO8601 -> ArchiveRuleSummary -- | Create a value of ArchiveRuleSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ruleName:ArchiveRuleSummary', -- archiveRuleSummary_ruleName - The name of the archive rule. -- -- $sel:filter':ArchiveRuleSummary', -- archiveRuleSummary_filter - A filter used to define the archive -- rule. -- -- $sel:createdAt:ArchiveRuleSummary', -- archiveRuleSummary_createdAt - The time at which the archive -- rule was created. -- -- $sel:updatedAt:ArchiveRuleSummary', -- archiveRuleSummary_updatedAt - The time at which the archive -- rule was last updated. newArchiveRuleSummary :: Text -> UTCTime -> UTCTime -> ArchiveRuleSummary -- | Contains information about CloudTrail access. -- -- See: newCloudTrailDetails smart constructor. data CloudTrailDetails CloudTrailDetails' :: Maybe ISO8601 -> [Trail] -> Text -> ISO8601 -> CloudTrailDetails -- | Create a value of CloudTrailDetails with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:endTime:CloudTrailDetails', -- cloudTrailDetails_endTime - The end of the time range for which -- IAM Access Analyzer reviews your CloudTrail events. Events with a -- timestamp after this time are not considered to generate a policy. If -- this is not included in the request, the default value is the current -- time. -- -- $sel:trails:CloudTrailDetails', cloudTrailDetails_trails -- - A Trail object that contains settings for a trail. -- -- $sel:accessRole:CloudTrailDetails', -- cloudTrailDetails_accessRole - The ARN of the service role that -- IAM Access Analyzer uses to access your CloudTrail trail and service -- last accessed information. -- -- $sel:startTime:CloudTrailDetails', -- cloudTrailDetails_startTime - The start of the time range for -- which IAM Access Analyzer reviews your CloudTrail events. Events with -- a timestamp before this time are not considered to generate a policy. newCloudTrailDetails :: Text -> UTCTime -> CloudTrailDetails -- | Contains information about CloudTrail access. -- -- See: newCloudTrailProperties smart constructor. data CloudTrailProperties CloudTrailProperties' :: [TrailProperties] -> ISO8601 -> ISO8601 -> CloudTrailProperties -- | Create a value of CloudTrailProperties with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:trailProperties:CloudTrailProperties', -- cloudTrailProperties_trailProperties - A -- TrailProperties object that contains settings for trail -- properties. -- -- $sel:startTime:CloudTrailProperties', -- cloudTrailProperties_startTime - The start of the time range -- for which IAM Access Analyzer reviews your CloudTrail events. Events -- with a timestamp before this time are not considered to generate a -- policy. -- -- $sel:endTime:CloudTrailProperties', -- cloudTrailProperties_endTime - The end of the time range for -- which IAM Access Analyzer reviews your CloudTrail events. Events with -- a timestamp after this time are not considered to generate a policy. -- If this is not included in the request, the default value is the -- current time. newCloudTrailProperties :: UTCTime -> UTCTime -> CloudTrailProperties -- | Access control configuration structures for your resource. You specify -- the configuration as a type-value pair. You can specify only one type -- of access control configuration. -- -- See: newConfiguration smart constructor. data Configuration Configuration' :: Maybe EbsSnapshotConfiguration -> Maybe EcrRepositoryConfiguration -> Maybe EfsFileSystemConfiguration -> Maybe IamRoleConfiguration -> Maybe KmsKeyConfiguration -> Maybe RdsDbClusterSnapshotConfiguration -> Maybe RdsDbSnapshotConfiguration -> Maybe S3BucketConfiguration -> Maybe SecretsManagerSecretConfiguration -> Maybe SnsTopicConfiguration -> Maybe SqsQueueConfiguration -> Configuration -- | Create a value of Configuration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ebsSnapshot:Configuration', -- configuration_ebsSnapshot - The access control configuration is -- for an Amazon EBS volume snapshot. -- -- $sel:ecrRepository:Configuration', -- configuration_ecrRepository - The access control configuration -- is for an Amazon ECR repository. -- -- $sel:efsFileSystem:Configuration', -- configuration_efsFileSystem - The access control configuration -- is for an Amazon EFS file system. -- -- $sel:iamRole:Configuration', configuration_iamRole - The -- access control configuration is for an IAM role. -- -- $sel:kmsKey:Configuration', configuration_kmsKey - The -- access control configuration is for a KMS key. -- -- $sel:rdsDbClusterSnapshot:Configuration', -- configuration_rdsDbClusterSnapshot - The access control -- configuration is for an Amazon RDS DB cluster snapshot. -- -- $sel:rdsDbSnapshot:Configuration', -- configuration_rdsDbSnapshot - The access control configuration -- is for an Amazon RDS DB snapshot. -- -- $sel:s3Bucket:Configuration', configuration_s3Bucket - -- The access control configuration is for an Amazon S3 Bucket. -- -- $sel:secretsManagerSecret:Configuration', -- configuration_secretsManagerSecret - The access control -- configuration is for a Secrets Manager secret. -- -- $sel:snsTopic:Configuration', configuration_snsTopic - -- The access control configuration is for an Amazon SNS topic -- -- $sel:sqsQueue:Configuration', configuration_sqsQueue - -- The access control configuration is for an Amazon SQS queue. newConfiguration :: Configuration -- | The criteria to use in the filter that defines the archive rule. For -- more information on available filter keys, see IAM Access Analyzer -- filter keys. -- -- See: newCriterion smart constructor. data Criterion Criterion' :: Maybe (NonEmpty Text) -> Maybe (NonEmpty Text) -> Maybe Bool -> Maybe (NonEmpty Text) -> Criterion -- | Create a value of Criterion with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:contains:Criterion', criterion_contains - A -- "contains" operator to match for the filter used to create the rule. -- -- $sel:eq:Criterion', criterion_eq - An "equals" operator -- to match for the filter used to create the rule. -- -- $sel:exists:Criterion', criterion_exists - An "exists" -- operator to match for the filter used to create the rule. -- -- $sel:neq:Criterion', criterion_neq - A "not equals" -- operator to match for the filter used to create the rule. newCriterion :: Criterion -- | The proposed access control configuration for an Amazon EBS volume -- snapshot. You can propose a configuration for a new Amazon EBS volume -- snapshot or an Amazon EBS volume snapshot that you own by specifying -- the user IDs, groups, and optional KMS encryption key. For more -- information, see ModifySnapshotAttribute. -- -- See: newEbsSnapshotConfiguration smart constructor. data EbsSnapshotConfiguration EbsSnapshotConfiguration' :: Maybe [Text] -> Maybe Text -> Maybe [Text] -> EbsSnapshotConfiguration -- | Create a value of EbsSnapshotConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:groups:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_groups - The groups that have access -- to the Amazon EBS volume snapshot. If the value all is -- specified, then the Amazon EBS volume snapshot is public. -- -- -- -- $sel:kmsKeyId:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_kmsKeyId - The KMS key identifier for -- an encrypted Amazon EBS volume snapshot. The KMS key identifier is the -- key ARN, key ID, alias ARN, or alias name for the KMS key. -- -- -- -- $sel:userIds:EbsSnapshotConfiguration', -- ebsSnapshotConfiguration_userIds - The IDs of the Amazon Web -- Services accounts that have access to the Amazon EBS volume snapshot. -- -- newEbsSnapshotConfiguration :: EbsSnapshotConfiguration -- | The proposed access control configuration for an Amazon ECR -- repository. You can propose a configuration for a new Amazon ECR -- repository or an existing Amazon ECR repository that you own by -- specifying the Amazon ECR policy. For more information, see -- Repository. -- -- -- -- See: newEcrRepositoryConfiguration smart constructor. data EcrRepositoryConfiguration EcrRepositoryConfiguration' :: Maybe Text -> EcrRepositoryConfiguration -- | Create a value of EcrRepositoryConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:repositoryPolicy:EcrRepositoryConfiguration', -- ecrRepositoryConfiguration_repositoryPolicy - The JSON -- repository policy text to apply to the Amazon ECR repository. For more -- information, see Private repository policy examples in the -- Amazon ECR User Guide. newEcrRepositoryConfiguration :: EcrRepositoryConfiguration -- | The proposed access control configuration for an Amazon EFS file -- system. You can propose a configuration for a new Amazon EFS file -- system or an existing Amazon EFS file system that you own by -- specifying the Amazon EFS policy. For more information, see Using -- file systems in Amazon EFS. -- -- -- -- See: newEfsFileSystemConfiguration smart constructor. data EfsFileSystemConfiguration EfsFileSystemConfiguration' :: Maybe Text -> EfsFileSystemConfiguration -- | Create a value of EfsFileSystemConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:fileSystemPolicy:EfsFileSystemConfiguration', -- efsFileSystemConfiguration_fileSystemPolicy - The JSON policy -- definition to apply to the Amazon EFS file system. For more -- information on the elements that make up a file system policy, see -- Amazon EFS Resource-based policies. newEfsFileSystemConfiguration :: EfsFileSystemConfiguration -- | Contains information about a finding. -- -- See: newFinding smart constructor. data Finding Finding' :: Maybe [Text] -> Maybe Text -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> HashMap Text Text -> ISO8601 -> ISO8601 -> ISO8601 -> FindingStatus -> Text -> Finding -- | Create a value of Finding with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:Finding', finding_action - The action in the -- analyzed policy statement that an external principal has permission to -- use. -- -- $sel:error:Finding', finding_error - An error. -- -- $sel:isPublic:Finding', finding_isPublic - Indicates -- whether the policy that generated the finding allows public access to -- the resource. -- -- $sel:principal:Finding', finding_principal - The -- external principal that access to a resource within the zone of trust. -- -- $sel:resource:Finding', finding_resource - The resource -- that an external principal has access to. -- -- $sel:sources:Finding', finding_sources - The sources of -- the finding. This indicates how the access that generated the finding -- is granted. It is populated for Amazon S3 bucket findings. -- -- $sel:id:Finding', finding_id - The ID of the finding. -- -- $sel:resourceType:Finding', finding_resourceType - The -- type of the resource identified in the finding. -- -- $sel:condition:Finding', finding_condition - The -- condition in the analyzed policy statement that resulted in a finding. -- -- $sel:createdAt:Finding', finding_createdAt - The time at -- which the finding was generated. -- -- $sel:analyzedAt:Finding', finding_analyzedAt - The time -- at which the resource was analyzed. -- -- $sel:updatedAt:Finding', finding_updatedAt - The time at -- which the finding was updated. -- -- $sel:status:Finding', finding_status - The current -- status of the finding. -- -- $sel:resourceOwnerAccount:Finding', -- finding_resourceOwnerAccount - The Amazon Web Services account -- ID that owns the resource. newFinding :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> FindingStatus -> Text -> Finding -- | The source of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. -- -- See: newFindingSource smart constructor. data FindingSource FindingSource' :: Maybe FindingSourceDetail -> FindingSourceType -> FindingSource -- | Create a value of FindingSource with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:detail:FindingSource', findingSource_detail - -- Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. -- -- $sel:type':FindingSource', findingSource_type - -- Indicates the type of access that generated the finding. newFindingSource :: FindingSourceType -> FindingSource -- | Includes details about how the access that generated the finding is -- granted. This is populated for Amazon S3 bucket findings. -- -- See: newFindingSourceDetail smart constructor. data FindingSourceDetail FindingSourceDetail' :: Maybe Text -> Maybe Text -> FindingSourceDetail -- | Create a value of FindingSourceDetail with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPointAccount:FindingSourceDetail', -- findingSourceDetail_accessPointAccount - The account of the -- cross-account access point that generated the finding. -- -- $sel:accessPointArn:FindingSourceDetail', -- findingSourceDetail_accessPointArn - The ARN of the access -- point that generated the finding. The ARN format depends on whether -- the ARN represents an access point or a multi-region access point. newFindingSourceDetail :: FindingSourceDetail -- | Contains information about a finding. -- -- See: newFindingSummary smart constructor. data FindingSummary FindingSummary' :: Maybe [Text] -> Maybe Text -> Maybe Bool -> Maybe (HashMap Text Text) -> Maybe Text -> Maybe [FindingSource] -> Text -> ResourceType -> HashMap Text Text -> ISO8601 -> ISO8601 -> ISO8601 -> FindingStatus -> Text -> FindingSummary -- | Create a value of FindingSummary with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:action:FindingSummary', findingSummary_action - The -- action in the analyzed policy statement that an external principal has -- permission to use. -- -- $sel:error:FindingSummary', findingSummary_error - The -- error that resulted in an Error finding. -- -- $sel:isPublic:FindingSummary', findingSummary_isPublic - -- Indicates whether the finding reports a resource that has a policy -- that allows public access. -- -- $sel:principal:FindingSummary', findingSummary_principal -- - The external principal that has access to a resource within the zone -- of trust. -- -- $sel:resource:FindingSummary', findingSummary_resource - -- The resource that the external principal has access to. -- -- $sel:sources:FindingSummary', findingSummary_sources - -- The sources of the finding. This indicates how the access that -- generated the finding is granted. It is populated for Amazon S3 bucket -- findings. -- -- $sel:id:FindingSummary', findingSummary_id - The ID of -- the finding. -- -- $sel:resourceType:FindingSummary', -- findingSummary_resourceType - The type of the resource that the -- external principal has access to. -- -- $sel:condition:FindingSummary', findingSummary_condition -- - The condition in the analyzed policy statement that resulted in a -- finding. -- -- $sel:createdAt:FindingSummary', findingSummary_createdAt -- - The time at which the finding was created. -- -- $sel:analyzedAt:FindingSummary', -- findingSummary_analyzedAt - The time at which the -- resource-based policy that generated the finding was analyzed. -- -- $sel:updatedAt:FindingSummary', findingSummary_updatedAt -- - The time at which the finding was most recently updated. -- -- $sel:status:FindingSummary', findingSummary_status - The -- status of the finding. -- -- $sel:resourceOwnerAccount:FindingSummary', -- findingSummary_resourceOwnerAccount - The Amazon Web Services -- account ID that owns the resource. newFindingSummary :: Text -> ResourceType -> UTCTime -> UTCTime -> UTCTime -> FindingStatus -> Text -> FindingSummary -- | Contains the text for the generated policy. -- -- See: newGeneratedPolicy smart constructor. data GeneratedPolicy GeneratedPolicy' :: Text -> GeneratedPolicy -- | Create a value of GeneratedPolicy with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:policy:GeneratedPolicy', generatedPolicy_policy - -- The text to use as the content for the new policy. The policy is -- created using the CreatePolicy action. newGeneratedPolicy :: Text -> GeneratedPolicy -- | Contains the generated policy details. -- -- See: newGeneratedPolicyProperties smart constructor. data GeneratedPolicyProperties GeneratedPolicyProperties' :: Maybe CloudTrailProperties -> Maybe Bool -> Text -> GeneratedPolicyProperties -- | Create a value of GeneratedPolicyProperties with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:cloudTrailProperties:GeneratedPolicyProperties', -- generatedPolicyProperties_cloudTrailProperties - Lists details -- about the Trail used to generated policy. -- -- $sel:isComplete:GeneratedPolicyProperties', -- generatedPolicyProperties_isComplete - This value is set to -- true if the generated policy contains all possible actions -- for a service that IAM Access Analyzer identified from the CloudTrail -- trail that you specified, and false otherwise. -- -- $sel:principalArn:GeneratedPolicyProperties', -- generatedPolicyProperties_principalArn - The ARN of the IAM -- entity (user or role) for which you are generating a policy. newGeneratedPolicyProperties :: Text -> GeneratedPolicyProperties -- | Contains the text for the generated policy and its details. -- -- See: newGeneratedPolicyResult smart constructor. data GeneratedPolicyResult GeneratedPolicyResult' :: Maybe [GeneratedPolicy] -> GeneratedPolicyProperties -> GeneratedPolicyResult -- | Create a value of GeneratedPolicyResult with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:generatedPolicies:GeneratedPolicyResult', -- generatedPolicyResult_generatedPolicies - The text to use as -- the content for the new policy. The policy is created using the -- CreatePolicy action. -- -- $sel:properties:GeneratedPolicyResult', -- generatedPolicyResult_properties - A -- GeneratedPolicyProperties object that contains properties of -- the generated policy. newGeneratedPolicyResult :: GeneratedPolicyProperties -> GeneratedPolicyResult -- | The proposed access control configuration for an IAM role. You can -- propose a configuration for a new IAM role or an existing IAM role -- that you own by specifying the trust policy. If the configuration is -- for a new IAM role, you must specify the trust policy. If the -- configuration is for an existing IAM role that you own and you do not -- propose the trust policy, the access preview uses the existing trust -- policy for the role. The proposed trust policy cannot be an empty -- string. For more information about role trust policy limits, see -- IAM and STS quotas. -- -- See: newIamRoleConfiguration smart constructor. data IamRoleConfiguration IamRoleConfiguration' :: Maybe Text -> IamRoleConfiguration -- | Create a value of IamRoleConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:trustPolicy:IamRoleConfiguration', -- iamRoleConfiguration_trustPolicy - The proposed trust policy -- for the IAM role. newIamRoleConfiguration :: IamRoleConfiguration -- | An criterion statement in an archive rule. Each archive rule may have -- multiple criteria. -- -- See: newInlineArchiveRule smart constructor. data InlineArchiveRule InlineArchiveRule' :: Text -> HashMap Text Criterion -> InlineArchiveRule -- | Create a value of InlineArchiveRule with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ruleName:InlineArchiveRule', -- inlineArchiveRule_ruleName - The name of the rule. -- -- $sel:filter':InlineArchiveRule', -- inlineArchiveRule_filter - The condition and values for a -- criterion. newInlineArchiveRule :: Text -> InlineArchiveRule -- | This configuration sets the network origin for the Amazon S3 access -- point or multi-region access point to Internet. -- -- See: newInternetConfiguration smart constructor. data InternetConfiguration InternetConfiguration' :: InternetConfiguration -- | Create a value of InternetConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. newInternetConfiguration :: InternetConfiguration -- | Contains details about the policy generation request. -- -- See: newJobDetails smart constructor. data JobDetails JobDetails' :: Maybe ISO8601 -> Maybe JobError -> Text -> JobStatus -> ISO8601 -> JobDetails -- | Create a value of JobDetails with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:completedOn:JobDetails', jobDetails_completedOn - A -- timestamp of when the job was completed. -- -- $sel:jobError:JobDetails', jobDetails_jobError - The job -- error for the policy generation request. -- -- $sel:jobId:JobDetails', jobDetails_jobId - The -- JobId that is returned by the StartPolicyGeneration -- operation. The JobId can be used with -- GetGeneratedPolicy to retrieve the generated policies or used -- with CancelPolicyGeneration to cancel the policy generation -- request. -- -- $sel:status:JobDetails', jobDetails_status - The status -- of the job request. -- -- $sel:startedOn:JobDetails', jobDetails_startedOn - A -- timestamp of when the job was started. newJobDetails :: Text -> JobStatus -> UTCTime -> JobDetails -- | Contains the details about the policy generation error. -- -- See: newJobError smart constructor. data JobError JobError' :: JobErrorCode -> Text -> JobError -- | Create a value of JobError with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:JobError', jobError_code - The job error code. -- -- $sel:message:JobError', jobError_message - Specific -- information about the error. For example, which service quota was -- exceeded or which resource was not found. newJobError :: JobErrorCode -> Text -> JobError -- | A proposed grant configuration for a KMS key. For more information, -- see CreateGrant. -- -- See: newKmsGrantConfiguration smart constructor. data KmsGrantConfiguration KmsGrantConfiguration' :: Maybe KmsGrantConstraints -> Maybe Text -> [KmsGrantOperation] -> Text -> Text -> KmsGrantConfiguration -- | Create a value of KmsGrantConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:constraints:KmsGrantConfiguration', -- kmsGrantConfiguration_constraints - Use this structure to -- propose allowing cryptographic operations in the grant only -- when the operation request includes the specified encryption -- context. -- -- $sel:retiringPrincipal:KmsGrantConfiguration', -- kmsGrantConfiguration_retiringPrincipal - The principal that is -- given permission to retire the grant by using RetireGrant -- operation. -- -- $sel:operations:KmsGrantConfiguration', -- kmsGrantConfiguration_operations - A list of operations that -- the grant permits. -- -- $sel:granteePrincipal:KmsGrantConfiguration', -- kmsGrantConfiguration_granteePrincipal - The principal that is -- given permission to perform the operations that the grant permits. -- -- $sel:issuingAccount:KmsGrantConfiguration', -- kmsGrantConfiguration_issuingAccount - The Amazon Web Services -- account under which the grant was issued. The account is used to -- propose KMS grants issued by accounts other than the owner of the key. newKmsGrantConfiguration :: Text -> Text -> KmsGrantConfiguration -- | Use this structure to propose allowing cryptographic operations -- in the grant only when the operation request includes the specified -- encryption context. You can specify only one type of encryption -- context. An empty map is treated as not specified. For more -- information, see GrantConstraints. -- -- See: newKmsGrantConstraints smart constructor. data KmsGrantConstraints KmsGrantConstraints' :: Maybe (HashMap Text Text) -> Maybe (HashMap Text Text) -> KmsGrantConstraints -- | Create a value of KmsGrantConstraints with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:encryptionContextEquals:KmsGrantConstraints', -- kmsGrantConstraints_encryptionContextEquals - A list of -- key-value pairs that must match the encryption context in the -- cryptographic operation request. The grant allows the operation -- only when the encryption context in the request is the same as the -- encryption context specified in this constraint. -- -- $sel:encryptionContextSubset:KmsGrantConstraints', -- kmsGrantConstraints_encryptionContextSubset - A list of -- key-value pairs that must be included in the encryption context of the -- cryptographic operation request. The grant allows the -- cryptographic operation only when the encryption context in the -- request includes the key-value pairs specified in this constraint, -- although it can include additional key-value pairs. newKmsGrantConstraints :: KmsGrantConstraints -- | Proposed access control configuration for a KMS key. You can propose a -- configuration for a new KMS key or an existing KMS key that you own by -- specifying the key policy and KMS grant configuration. If the -- configuration is for an existing key and you do not specify the key -- policy, the access preview uses the existing policy for the key. If -- the access preview is for a new resource and you do not specify the -- key policy, then the access preview uses the default key policy. The -- proposed key policy cannot be an empty string. For more information, -- see Default key policy. For more information about key policy -- limits, see Resource quotas. -- -- See: newKmsKeyConfiguration smart constructor. data KmsKeyConfiguration KmsKeyConfiguration' :: Maybe [KmsGrantConfiguration] -> Maybe (HashMap Text Text) -> KmsKeyConfiguration -- | Create a value of KmsKeyConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:grants:KmsKeyConfiguration', -- kmsKeyConfiguration_grants - A list of proposed grant -- configurations for the KMS key. If the proposed grant configuration is -- for an existing key, the access preview uses the proposed list of -- grant configurations in place of the existing grants. Otherwise, the -- access preview uses the existing grants for the key. -- -- $sel:keyPolicies:KmsKeyConfiguration', -- kmsKeyConfiguration_keyPolicies - Resource policy configuration -- for the KMS key. The only valid value for the name of the key policy -- is default. For more information, see Default key -- policy. newKmsKeyConfiguration :: KmsKeyConfiguration -- | A location in a policy that is represented as a path through the JSON -- representation and a corresponding span. -- -- See: newLocation smart constructor. data Location Location' :: [PathElement] -> Span -> Location -- | Create a value of Location with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:path:Location', location_path - A path in a policy, -- represented as a sequence of path elements. -- -- $sel:span:Location', location_span - A span in a policy. newLocation :: Span -> Location -- | The proposed InternetConfiguration or -- VpcConfiguration to apply to the Amazon S3 access point. -- VpcConfiguration does not apply to multi-region access -- points. You can make the access point accessible from the internet, or -- you can specify that all requests made through that access point must -- originate from a specific virtual private cloud (VPC). You can specify -- only one type of network configuration. For more information, see -- Creating access points. -- -- See: newNetworkOriginConfiguration smart constructor. data NetworkOriginConfiguration NetworkOriginConfiguration' :: Maybe InternetConfiguration -> Maybe VpcConfiguration -> NetworkOriginConfiguration -- | Create a value of NetworkOriginConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:internetConfiguration:NetworkOriginConfiguration', -- networkOriginConfiguration_internetConfiguration - The -- configuration for the Amazon S3 access point or multi-region access -- point with an Internet origin. -- -- $sel:vpcConfiguration:NetworkOriginConfiguration', -- networkOriginConfiguration_vpcConfiguration - Undocumented -- member. newNetworkOriginConfiguration :: NetworkOriginConfiguration -- | A single element in a path through the JSON representation of a -- policy. -- -- See: newPathElement smart constructor. data PathElement PathElement' :: Maybe Int -> Maybe Text -> Maybe Substring -> Maybe Text -> PathElement -- | Create a value of PathElement with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:index:PathElement', pathElement_index - Refers to -- an index in a JSON array. -- -- $sel:key:PathElement', pathElement_key - Refers to a key -- in a JSON object. -- -- $sel:substring:PathElement', pathElement_substring - -- Refers to a substring of a literal string in a JSON object. -- -- $sel:value:PathElement', pathElement_value - Refers to -- the value associated with a given key in a JSON object. newPathElement :: PathElement -- | Contains details about the policy generation status and properties. -- -- See: newPolicyGeneration smart constructor. data PolicyGeneration PolicyGeneration' :: Maybe ISO8601 -> Text -> Text -> JobStatus -> ISO8601 -> PolicyGeneration -- | Create a value of PolicyGeneration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:completedOn:PolicyGeneration', -- policyGeneration_completedOn - A timestamp of when the policy -- generation was completed. -- -- $sel:jobId:PolicyGeneration', policyGeneration_jobId - -- The JobId that is returned by the -- StartPolicyGeneration operation. The JobId can be -- used with GetGeneratedPolicy to retrieve the generated -- policies or used with CancelPolicyGeneration to cancel the -- policy generation request. -- -- $sel:principalArn:PolicyGeneration', -- policyGeneration_principalArn - The ARN of the IAM entity (user -- or role) for which you are generating a policy. -- -- $sel:status:PolicyGeneration', policyGeneration_status - -- The status of the policy generation request. -- -- $sel:startedOn:PolicyGeneration', -- policyGeneration_startedOn - A timestamp of when the policy -- generation started. newPolicyGeneration :: Text -> Text -> JobStatus -> UTCTime -> PolicyGeneration -- | Contains the ARN details about the IAM entity for which the policy is -- generated. -- -- See: newPolicyGenerationDetails smart constructor. data PolicyGenerationDetails PolicyGenerationDetails' :: Text -> PolicyGenerationDetails -- | Create a value of PolicyGenerationDetails with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:principalArn:PolicyGenerationDetails', -- policyGenerationDetails_principalArn - The ARN of the IAM -- entity (user or role) for which you are generating a policy. newPolicyGenerationDetails :: Text -> PolicyGenerationDetails -- | A position in a policy. -- -- See: newPosition smart constructor. data Position Position' :: Int -> Int -> Int -> Position -- | Create a value of Position with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:line:Position', position_line - The line of the -- position, starting from 1. -- -- $sel:column:Position', position_column - The column of -- the position, starting from 0. -- -- $sel:offset:Position', position_offset - The offset -- within the policy that corresponds to the position, starting from 0. newPosition :: Int -> Int -> Int -> Position -- | The values for a manual Amazon RDS DB cluster snapshot attribute. -- -- See: newRdsDbClusterSnapshotAttributeValue smart -- constructor. data RdsDbClusterSnapshotAttributeValue RdsDbClusterSnapshotAttributeValue' :: Maybe [Text] -> RdsDbClusterSnapshotAttributeValue -- | Create a value of RdsDbClusterSnapshotAttributeValue with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accountIds:RdsDbClusterSnapshotAttributeValue', -- rdsDbClusterSnapshotAttributeValue_accountIds - The Amazon Web -- Services account IDs that have access to the manual Amazon RDS DB -- cluster snapshot. If the value all is specified, then the -- Amazon RDS DB cluster snapshot is public and can be copied or restored -- by all Amazon Web Services accounts. -- -- newRdsDbClusterSnapshotAttributeValue :: RdsDbClusterSnapshotAttributeValue -- | The proposed access control configuration for an Amazon RDS DB cluster -- snapshot. You can propose a configuration for a new Amazon RDS DB -- cluster snapshot or an Amazon RDS DB cluster snapshot that you own by -- specifying the RdsDbClusterSnapshotAttributeValue and -- optional KMS encryption key. For more information, see -- ModifyDBClusterSnapshotAttribute. -- -- See: newRdsDbClusterSnapshotConfiguration smart -- constructor. data RdsDbClusterSnapshotConfiguration RdsDbClusterSnapshotConfiguration' :: Maybe (HashMap Text RdsDbClusterSnapshotAttributeValue) -> Maybe Text -> RdsDbClusterSnapshotConfiguration -- | Create a value of RdsDbClusterSnapshotConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributes:RdsDbClusterSnapshotConfiguration', -- rdsDbClusterSnapshotConfiguration_attributes - The names and -- values of manual DB cluster snapshot attributes. Manual DB cluster -- snapshot attributes are used to authorize other Amazon Web Services -- accounts to restore a manual DB cluster snapshot. The only valid value -- for AttributeName for the attribute map is restore -- -- $sel:kmsKeyId:RdsDbClusterSnapshotConfiguration', -- rdsDbClusterSnapshotConfiguration_kmsKeyId - The KMS key -- identifier for an encrypted Amazon RDS DB cluster snapshot. The KMS -- key identifier is the key ARN, key ID, alias ARN, or alias name for -- the KMS key. -- -- newRdsDbClusterSnapshotConfiguration :: RdsDbClusterSnapshotConfiguration -- | The name and values of a manual Amazon RDS DB snapshot attribute. -- Manual DB snapshot attributes are used to authorize other Amazon Web -- Services accounts to restore a manual DB snapshot. -- -- See: newRdsDbSnapshotAttributeValue smart constructor. data RdsDbSnapshotAttributeValue RdsDbSnapshotAttributeValue' :: Maybe [Text] -> RdsDbSnapshotAttributeValue -- | Create a value of RdsDbSnapshotAttributeValue with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accountIds:RdsDbSnapshotAttributeValue', -- rdsDbSnapshotAttributeValue_accountIds - The Amazon Web -- Services account IDs that have access to the manual Amazon RDS DB -- snapshot. If the value all is specified, then the Amazon RDS -- DB snapshot is public and can be copied or restored by all Amazon Web -- Services accounts. -- -- newRdsDbSnapshotAttributeValue :: RdsDbSnapshotAttributeValue -- | The proposed access control configuration for an Amazon RDS DB -- snapshot. You can propose a configuration for a new Amazon RDS DB -- snapshot or an Amazon RDS DB snapshot that you own by specifying the -- RdsDbSnapshotAttributeValue and optional KMS encryption key. -- For more information, see ModifyDBSnapshotAttribute. -- -- See: newRdsDbSnapshotConfiguration smart constructor. data RdsDbSnapshotConfiguration RdsDbSnapshotConfiguration' :: Maybe (HashMap Text RdsDbSnapshotAttributeValue) -> Maybe Text -> RdsDbSnapshotConfiguration -- | Create a value of RdsDbSnapshotConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributes:RdsDbSnapshotConfiguration', -- rdsDbSnapshotConfiguration_attributes - The names and values of -- manual DB snapshot attributes. Manual DB snapshot attributes are used -- to authorize other Amazon Web Services accounts to restore a manual DB -- snapshot. The only valid value for attributeName for the -- attribute map is restore. -- -- $sel:kmsKeyId:RdsDbSnapshotConfiguration', -- rdsDbSnapshotConfiguration_kmsKeyId - The KMS key identifier -- for an encrypted Amazon RDS DB snapshot. The KMS key identifier is the -- key ARN, key ID, alias ARN, or alias name for the KMS key. -- -- newRdsDbSnapshotConfiguration :: RdsDbSnapshotConfiguration -- | The configuration for an Amazon S3 access point or multi-region access -- point for the bucket. You can propose up to 10 access points or -- multi-region access points per bucket. If the proposed Amazon S3 -- access point configuration is for an existing bucket, the access -- preview uses the proposed access point configuration in place of the -- existing access points. To propose an access point without a policy, -- you can provide an empty string as the access point policy. For more -- information, see Creating access points. For more information -- about access point policy limits, see Access points restrictions -- and limitations. -- -- See: newS3AccessPointConfiguration smart constructor. data S3AccessPointConfiguration S3AccessPointConfiguration' :: Maybe Text -> Maybe NetworkOriginConfiguration -> Maybe S3PublicAccessBlockConfiguration -> S3AccessPointConfiguration -- | Create a value of S3AccessPointConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPointPolicy:S3AccessPointConfiguration', -- s3AccessPointConfiguration_accessPointPolicy - The access point -- or multi-region access point policy. -- -- $sel:networkOrigin:S3AccessPointConfiguration', -- s3AccessPointConfiguration_networkOrigin - The proposed -- Internet and VpcConfiguration to apply to this -- Amazon S3 access point. VpcConfiguration does not apply to -- multi-region access points. If the access preview is for a new -- resource and neither is specified, the access preview uses -- Internet for the network origin. If the access preview is for -- an existing resource and neither is specified, the access preview uses -- the exiting network origin. -- -- $sel:publicAccessBlock:S3AccessPointConfiguration', -- s3AccessPointConfiguration_publicAccessBlock - The proposed -- S3PublicAccessBlock configuration to apply to this Amazon S3 -- access point or multi-region access point. newS3AccessPointConfiguration :: S3AccessPointConfiguration -- | A proposed access control list grant configuration for an Amazon S3 -- bucket. For more information, see How to Specify an ACL. -- -- See: newS3BucketAclGrantConfiguration smart constructor. data S3BucketAclGrantConfiguration S3BucketAclGrantConfiguration' :: AclPermission -> AclGrantee -> S3BucketAclGrantConfiguration -- | Create a value of S3BucketAclGrantConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:permission:S3BucketAclGrantConfiguration', -- s3BucketAclGrantConfiguration_permission - The permissions -- being granted. -- -- $sel:grantee:S3BucketAclGrantConfiguration', -- s3BucketAclGrantConfiguration_grantee - The grantee to whom -- you’re assigning access rights. newS3BucketAclGrantConfiguration :: AclPermission -> AclGrantee -> S3BucketAclGrantConfiguration -- | Proposed access control configuration for an Amazon S3 bucket. You can -- propose a configuration for a new Amazon S3 bucket or an existing -- Amazon S3 bucket that you own by specifying the Amazon S3 bucket -- policy, bucket ACLs, bucket BPA settings, Amazon S3 access points, and -- multi-region access points attached to the bucket. If the -- configuration is for an existing Amazon S3 bucket and you do not -- specify the Amazon S3 bucket policy, the access preview uses the -- existing policy attached to the bucket. If the access preview is for a -- new resource and you do not specify the Amazon S3 bucket policy, the -- access preview assumes a bucket without a policy. To propose deletion -- of an existing bucket policy, you can specify an empty string. For -- more information about bucket policy limits, see Bucket Policy -- Examples. -- -- See: newS3BucketConfiguration smart constructor. data S3BucketConfiguration S3BucketConfiguration' :: Maybe (HashMap Text S3AccessPointConfiguration) -> Maybe [S3BucketAclGrantConfiguration] -> Maybe Text -> Maybe S3PublicAccessBlockConfiguration -> S3BucketConfiguration -- | Create a value of S3BucketConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:accessPoints:S3BucketConfiguration', -- s3BucketConfiguration_accessPoints - The configuration of -- Amazon S3 access points or multi-region access points for the bucket. -- You can propose up to 10 new access points per bucket. -- -- $sel:bucketAclGrants:S3BucketConfiguration', -- s3BucketConfiguration_bucketAclGrants - The proposed list of -- ACL grants for the Amazon S3 bucket. You can propose up to 100 ACL -- grants per bucket. If the proposed grant configuration is for an -- existing bucket, the access preview uses the proposed list of grant -- configurations in place of the existing grants. Otherwise, the access -- preview uses the existing grants for the bucket. -- -- $sel:bucketPolicy:S3BucketConfiguration', -- s3BucketConfiguration_bucketPolicy - The proposed bucket policy -- for the Amazon S3 bucket. -- -- $sel:bucketPublicAccessBlock:S3BucketConfiguration', -- s3BucketConfiguration_bucketPublicAccessBlock - The proposed -- block public access configuration for the Amazon S3 bucket. newS3BucketConfiguration :: S3BucketConfiguration -- | The PublicAccessBlock configuration to apply to this Amazon -- S3 bucket. If the proposed configuration is for an existing Amazon S3 -- bucket and the configuration is not specified, the access preview uses -- the existing setting. If the proposed configuration is for a new -- bucket and the configuration is not specified, the access preview uses -- false. If the proposed configuration is for a new access -- point or multi-region access point and the access point BPA -- configuration is not specified, the access preview uses true. -- For more information, see PublicAccessBlockConfiguration. -- -- See: newS3PublicAccessBlockConfiguration smart -- constructor. data S3PublicAccessBlockConfiguration S3PublicAccessBlockConfiguration' :: Bool -> Bool -> S3PublicAccessBlockConfiguration -- | Create a value of S3PublicAccessBlockConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:ignorePublicAcls:S3PublicAccessBlockConfiguration', -- s3PublicAccessBlockConfiguration_ignorePublicAcls - Specifies -- whether Amazon S3 should ignore public ACLs for this bucket and -- objects in this bucket. -- -- $sel:restrictPublicBuckets:S3PublicAccessBlockConfiguration', -- s3PublicAccessBlockConfiguration_restrictPublicBuckets - -- Specifies whether Amazon S3 should restrict public bucket policies for -- this bucket. newS3PublicAccessBlockConfiguration :: Bool -> Bool -> S3PublicAccessBlockConfiguration -- | The configuration for a Secrets Manager secret. For more information, -- see CreateSecret. -- -- You can propose a configuration for a new secret or an existing secret -- that you own by specifying the secret policy and optional KMS -- encryption key. If the configuration is for an existing secret and you -- do not specify the secret policy, the access preview uses the existing -- policy for the secret. If the access preview is for a new resource and -- you do not specify the policy, the access preview assumes a secret -- without a policy. To propose deletion of an existing policy, you can -- specify an empty string. If the proposed configuration is for a new -- secret and you do not specify the KMS key ID, the access preview uses -- the Amazon Web Services managed key aws/secretsmanager. If -- you specify an empty string for the KMS key ID, the access preview -- uses the Amazon Web Services managed key of the Amazon Web Services -- account. For more information about secret policy limits, see -- Quotas for Secrets Manager.. -- -- See: newSecretsManagerSecretConfiguration smart -- constructor. data SecretsManagerSecretConfiguration SecretsManagerSecretConfiguration' :: Maybe Text -> Maybe Text -> SecretsManagerSecretConfiguration -- | Create a value of SecretsManagerSecretConfiguration with all -- optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:kmsKeyId:SecretsManagerSecretConfiguration', -- secretsManagerSecretConfiguration_kmsKeyId - The proposed ARN, -- key ID, or alias of the KMS key. -- -- $sel:secretPolicy:SecretsManagerSecretConfiguration', -- secretsManagerSecretConfiguration_secretPolicy - The proposed -- resource policy defining who can access or manage the secret. newSecretsManagerSecretConfiguration :: SecretsManagerSecretConfiguration -- | The proposed access control configuration for an Amazon SNS topic. You -- can propose a configuration for a new Amazon SNS topic or an existing -- Amazon SNS topic that you own by specifying the policy. If the -- configuration is for an existing Amazon SNS topic and you do not -- specify the Amazon SNS policy, then the access preview uses the -- existing Amazon SNS policy for the topic. If the access preview is for -- a new resource and you do not specify the policy, then the access -- preview assumes an Amazon SNS topic without a policy. To propose -- deletion of an existing Amazon SNS topic policy, you can specify an -- empty string for the Amazon SNS policy. For more information, see -- Topic. -- -- See: newSnsTopicConfiguration smart constructor. data SnsTopicConfiguration SnsTopicConfiguration' :: Maybe Text -> SnsTopicConfiguration -- | Create a value of SnsTopicConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:topicPolicy:SnsTopicConfiguration', -- snsTopicConfiguration_topicPolicy - The JSON policy text that -- defines who can access an Amazon SNS topic. For more information, see -- Example cases for Amazon SNS access control in the Amazon -- SNS Developer Guide. newSnsTopicConfiguration :: SnsTopicConfiguration -- | The criteria used to sort. -- -- See: newSortCriteria smart constructor. data SortCriteria SortCriteria' :: Maybe Text -> Maybe OrderBy -> SortCriteria -- | Create a value of SortCriteria with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:attributeName:SortCriteria', -- sortCriteria_attributeName - The name of the attribute to sort -- on. -- -- $sel:orderBy:SortCriteria', sortCriteria_orderBy - The -- sort order, ascending or descending. newSortCriteria :: SortCriteria -- | A span in a policy. The span consists of a start position (inclusive) -- and end position (exclusive). -- -- See: newSpan smart constructor. data Span Span' :: Position -> Position -> Span -- | Create a value of Span with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:start:Span', span_start - The start position of the -- span (inclusive). -- -- $sel:end:Span', span_end - The end position of the span -- (exclusive). newSpan :: Position -> Position -> Span -- | The proposed access control configuration for an Amazon SQS queue. You -- can propose a configuration for a new Amazon SQS queue or an existing -- Amazon SQS queue that you own by specifying the Amazon SQS policy. If -- the configuration is for an existing Amazon SQS queue and you do not -- specify the Amazon SQS policy, the access preview uses the existing -- Amazon SQS policy for the queue. If the access preview is for a new -- resource and you do not specify the policy, the access preview assumes -- an Amazon SQS queue without a policy. To propose deletion of an -- existing Amazon SQS queue policy, you can specify an empty string for -- the Amazon SQS policy. For more information about Amazon SQS policy -- limits, see Quotas related to policies. -- -- See: newSqsQueueConfiguration smart constructor. data SqsQueueConfiguration SqsQueueConfiguration' :: Maybe Text -> SqsQueueConfiguration -- | Create a value of SqsQueueConfiguration with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:queuePolicy:SqsQueueConfiguration', -- sqsQueueConfiguration_queuePolicy - The proposed resource -- policy for the Amazon SQS queue. newSqsQueueConfiguration :: SqsQueueConfiguration -- | Provides more details about the current status of the analyzer. For -- example, if the creation for the analyzer fails, a Failed -- status is returned. For an analyzer with organization as the type, -- this failure can be due to an issue with creating the service-linked -- roles required in the member accounts of the Amazon Web Services -- organization. -- -- See: newStatusReason smart constructor. data StatusReason StatusReason' :: ReasonCode -> StatusReason -- | Create a value of StatusReason with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:code:StatusReason', statusReason_code - The reason -- code for the current status of the analyzer. newStatusReason :: ReasonCode -> StatusReason -- | A reference to a substring of a literal string in a JSON document. -- -- See: newSubstring smart constructor. data Substring Substring' :: Int -> Int -> Substring -- | Create a value of Substring with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:start:Substring', substring_start - The start index -- of the substring, starting from 0. -- -- $sel:length:Substring', substring_length - The length of -- the substring. newSubstring :: Int -> Int -> Substring -- | Contains details about the CloudTrail trail being analyzed to generate -- a policy. -- -- See: newTrail smart constructor. data Trail Trail' :: Maybe Bool -> Maybe [Text] -> Text -> Trail -- | Create a value of Trail with all optional fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:allRegions:Trail', trail_allRegions - Possible -- values are true or false. If set to true, -- IAM Access Analyzer retrieves CloudTrail data from all regions to -- analyze and generate a policy. -- -- $sel:regions:Trail', trail_regions - A list of regions -- to get CloudTrail data from and analyze to generate a policy. -- -- $sel:cloudTrailArn:Trail', trail_cloudTrailArn - -- Specifies the ARN of the trail. The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. newTrail :: Text -> Trail -- | Contains details about the CloudTrail trail being analyzed to generate -- a policy. -- -- See: newTrailProperties smart constructor. data TrailProperties TrailProperties' :: Maybe Bool -> Maybe [Text] -> Text -> TrailProperties -- | Create a value of TrailProperties with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:allRegions:TrailProperties', -- trailProperties_allRegions - Possible values are true -- or false. If set to true, IAM Access Analyzer -- retrieves CloudTrail data from all regions to analyze and generate a -- policy. -- -- $sel:regions:TrailProperties', trailProperties_regions - -- A list of regions to get CloudTrail data from and analyze to generate -- a policy. -- -- $sel:cloudTrailArn:TrailProperties', -- trailProperties_cloudTrailArn - Specifies the ARN of the trail. -- The format of a trail ARN is -- arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail. newTrailProperties :: Text -> TrailProperties -- | A finding in a policy. Each finding is an actionable recommendation -- that can be used to improve the policy. -- -- See: newValidatePolicyFinding smart constructor. data ValidatePolicyFinding ValidatePolicyFinding' :: Text -> ValidatePolicyFindingType -> Text -> Text -> [Location] -> ValidatePolicyFinding -- | Create a value of ValidatePolicyFinding with all optional -- fields omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:findingDetails:ValidatePolicyFinding', -- validatePolicyFinding_findingDetails - A localized message that -- explains the finding and provides guidance on how to address it. -- -- $sel:findingType:ValidatePolicyFinding', -- validatePolicyFinding_findingType - The impact of the finding. -- -- Security warnings report when the policy allows access that we -- consider overly permissive. -- -- Errors report when a part of the policy is not functional. -- -- Warnings report non-security issues when a policy does not conform to -- policy writing best practices. -- -- Suggestions recommend stylistic improvements in the policy that do not -- impact access. -- -- $sel:issueCode:ValidatePolicyFinding', -- validatePolicyFinding_issueCode - The issue code provides an -- identifier of the issue associated with this finding. -- -- $sel:learnMoreLink:ValidatePolicyFinding', -- validatePolicyFinding_learnMoreLink - A link to additional -- documentation about the type of finding. -- -- $sel:locations:ValidatePolicyFinding', -- validatePolicyFinding_locations - The list of locations in the -- policy document that are related to the finding. The issue code -- provides a summary of an issue identified by the finding. newValidatePolicyFinding :: Text -> ValidatePolicyFindingType -> Text -> Text -> ValidatePolicyFinding -- | The proposed virtual private cloud (VPC) configuration for the Amazon -- S3 access point. VPC configuration does not apply to multi-region -- access points. For more information, see VpcConfiguration. -- -- See: newVpcConfiguration smart constructor. data VpcConfiguration VpcConfiguration' :: Text -> VpcConfiguration -- | Create a value of VpcConfiguration with all optional fields -- omitted. -- -- Use generic-lens or optics to modify other optional -- fields. -- -- The following record fields are available, with the corresponding -- lenses provided for backwards compatibility: -- -- $sel:vpcId:VpcConfiguration', vpcConfiguration_vpcId - -- If this field is specified, this access point will only allow -- connections from the specified VPC ID. newVpcConfiguration :: Text -> VpcConfiguration