Copyright | (c) 2013-2023 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | Safe-Inferred |
Language | Haskell2010 |
Creates or updates an access policy associated with an existing destination. An access policy is an IAM policy document that is used to authorize claims to register a subscription filter against a given destination.
Synopsis
- data PutDestinationPolicy = PutDestinationPolicy' {}
- newPutDestinationPolicy :: Text -> Text -> PutDestinationPolicy
- putDestinationPolicy_forceUpdate :: Lens' PutDestinationPolicy (Maybe Bool)
- putDestinationPolicy_destinationName :: Lens' PutDestinationPolicy Text
- putDestinationPolicy_accessPolicy :: Lens' PutDestinationPolicy Text
- data PutDestinationPolicyResponse = PutDestinationPolicyResponse' {
- newPutDestinationPolicyResponse :: PutDestinationPolicyResponse
Creating a Request
data PutDestinationPolicy Source #
See: newPutDestinationPolicy
smart constructor.
PutDestinationPolicy' | |
|
Instances
newPutDestinationPolicy Source #
Create a value of PutDestinationPolicy
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:forceUpdate:PutDestinationPolicy'
, putDestinationPolicy_forceUpdate
- Specify true if you are updating an existing destination policy to grant
permission to an organization ID instead of granting permission to
individual AWS accounts. Before you update a destination policy this
way, you must first update the subscription filters in the accounts that
send logs to this destination. If you do not, the subscription filters
might stop working. By specifying true
for forceUpdate
, you are
affirming that you have already updated the subscription filters. For
more information, see
Updating an existing cross-account subscription
If you omit this parameter, the default of false
is used.
PutDestinationPolicy
, putDestinationPolicy_destinationName
- A name for an existing destination.
PutDestinationPolicy
, putDestinationPolicy_accessPolicy
- An IAM policy document that authorizes cross-account users to deliver
their log events to the associated destination. This can be up to 5120
bytes.
Request Lenses
putDestinationPolicy_forceUpdate :: Lens' PutDestinationPolicy (Maybe Bool) Source #
Specify true if you are updating an existing destination policy to grant
permission to an organization ID instead of granting permission to
individual AWS accounts. Before you update a destination policy this
way, you must first update the subscription filters in the accounts that
send logs to this destination. If you do not, the subscription filters
might stop working. By specifying true
for forceUpdate
, you are
affirming that you have already updated the subscription filters. For
more information, see
Updating an existing cross-account subscription
If you omit this parameter, the default of false
is used.
putDestinationPolicy_destinationName :: Lens' PutDestinationPolicy Text Source #
A name for an existing destination.
putDestinationPolicy_accessPolicy :: Lens' PutDestinationPolicy Text Source #
An IAM policy document that authorizes cross-account users to deliver their log events to the associated destination. This can be up to 5120 bytes.
Destructuring the Response
data PutDestinationPolicyResponse Source #
See: newPutDestinationPolicyResponse
smart constructor.
Instances
newPutDestinationPolicyResponse :: PutDestinationPolicyResponse Source #
Create a value of PutDestinationPolicyResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.