Amazonka.IAM.PutRolePermissionsBoundary

Adds or updates the policy that is specified as the IAM role's permissions boundary. You can use an Amazon Web Services managed policy or a customer managed policy to set the boundary for a role. Use the boundary to control the maximum permissions that the role can have. Setting a permissions boundary is an advanced feature that can affect the permissions for the role.

You cannot set the boundary for a service-linked role.

Policies used as permissions boundaries do not provide permissions. You must also attach a permissions policy to the role. To learn how the effective permissions for a role are evaluated, see IAM JSON policy evaluation logic in the IAM User Guide.

Creating a Request

data PutRolePermissionsBoundary

See: newPutRolePermissionsBoundary smart constructor.

Constructors

PutRolePermissionsBoundary'

Fields

• roleName :: Text

  The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary.

• permissionsBoundary :: Text

  The ARN of the policy that is used to set the permissions boundary for the role.

Instances

ToHeaders PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

toHeaders :: PutRolePermissionsBoundary -> [Header]

ToPath PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

toPath :: PutRolePermissionsBoundary -> ByteString

ToQuery PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

toQuery :: PutRolePermissionsBoundary -> QueryString

AWSRequest PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Associated Types

type AWSResponse PutRolePermissionsBoundary

Methods

request :: (Service -> Service) -> PutRolePermissionsBoundary -> Request PutRolePermissionsBoundary

response :: MonadResource m => (ByteStringLazy -> IO ByteStringLazy) -> Service -> Proxy PutRolePermissionsBoundary -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse PutRolePermissionsBoundary)))

Generic PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Associated Types

type Rep PutRolePermissionsBoundary :: Type -> Type

Methods

from :: PutRolePermissionsBoundary -> Rep PutRolePermissionsBoundary x

to :: Rep PutRolePermissionsBoundary x -> PutRolePermissionsBoundary

Read PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

readsPrec :: Int -> ReadS PutRolePermissionsBoundary

readList :: ReadS [PutRolePermissionsBoundary]

readPrec :: ReadPrec PutRolePermissionsBoundary

readListPrec :: ReadPrec [PutRolePermissionsBoundary]

Show PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

showsPrec :: Int -> PutRolePermissionsBoundary -> ShowS

show :: PutRolePermissionsBoundary -> String

showList :: [PutRolePermissionsBoundary] -> ShowS

NFData PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

rnf :: PutRolePermissionsBoundary -> ()

Eq PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

(==) :: PutRolePermissionsBoundary -> PutRolePermissionsBoundary -> Bool

(/=) :: PutRolePermissionsBoundary -> PutRolePermissionsBoundary -> Bool

Hashable PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

hashWithSalt :: Int -> PutRolePermissionsBoundary -> Int

hash :: PutRolePermissionsBoundary -> Int

type AWSResponse PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

type AWSResponse PutRolePermissionsBoundary = PutRolePermissionsBoundaryResponse

type Rep PutRolePermissionsBoundary

Defined in Amazonka.IAM.PutRolePermissionsBoundary

type Rep PutRolePermissionsBoundary = D1 ('MetaData "PutRolePermissionsBoundary" "Amazonka.IAM.PutRolePermissionsBoundary" "amazonka-iam-2.0-5DxkArXx9sD3CCYYGFyGET" 'False) (C1 ('MetaCons "PutRolePermissionsBoundary'" 'PrefixI 'True) (S1 ('MetaSel ('Just "roleName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "permissionsBoundary") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))

newPutRolePermissionsBoundary

Arguments

:: Text

PutRolePermissionsBoundary

-> Text

PutRolePermissionsBoundary

-> PutRolePermissionsBoundary

Create a value of PutRolePermissionsBoundary with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

PutRolePermissionsBoundary, putRolePermissionsBoundary_roleName - The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary.

PutRolePermissionsBoundary, putRolePermissionsBoundary_permissionsBoundary - The ARN of the policy that is used to set the permissions boundary for the role.

Request Lenses

putRolePermissionsBoundary_roleName :: Lens' PutRolePermissionsBoundary Text

The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary.

putRolePermissionsBoundary_permissionsBoundary :: Lens' PutRolePermissionsBoundary Text

The ARN of the policy that is used to set the permissions boundary for the role.

Destructuring the Response

data PutRolePermissionsBoundaryResponse

See: newPutRolePermissionsBoundaryResponse smart constructor.

Constructors

PutRolePermissionsBoundaryResponse'

Instances

Generic PutRolePermissionsBoundaryResponse

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Associated Types

type Rep PutRolePermissionsBoundaryResponse :: Type -> Type

Methods

from :: PutRolePermissionsBoundaryResponse -> Rep PutRolePermissionsBoundaryResponse x

to :: Rep PutRolePermissionsBoundaryResponse x -> PutRolePermissionsBoundaryResponse

Read PutRolePermissionsBoundaryResponse

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

readsPrec :: Int -> ReadS PutRolePermissionsBoundaryResponse

readList :: ReadS [PutRolePermissionsBoundaryResponse]

readPrec :: ReadPrec PutRolePermissionsBoundaryResponse

readListPrec :: ReadPrec [PutRolePermissionsBoundaryResponse]

Show PutRolePermissionsBoundaryResponse

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

showsPrec :: Int -> PutRolePermissionsBoundaryResponse -> ShowS

show :: PutRolePermissionsBoundaryResponse -> String

showList :: [PutRolePermissionsBoundaryResponse] -> ShowS

NFData PutRolePermissionsBoundaryResponse

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

rnf :: PutRolePermissionsBoundaryResponse -> ()

Eq PutRolePermissionsBoundaryResponse

Defined in Amazonka.IAM.PutRolePermissionsBoundary

Methods

(==) :: PutRolePermissionsBoundaryResponse -> PutRolePermissionsBoundaryResponse -> Bool

(/=) :: PutRolePermissionsBoundaryResponse -> PutRolePermissionsBoundaryResponse -> Bool

type Rep PutRolePermissionsBoundaryResponse

Defined in Amazonka.IAM.PutRolePermissionsBoundary

type Rep PutRolePermissionsBoundaryResponse = D1 ('MetaData "PutRolePermissionsBoundaryResponse" "Amazonka.IAM.PutRolePermissionsBoundary" "amazonka-iam-2.0-5DxkArXx9sD3CCYYGFyGET" 'False) (C1 ('MetaCons "PutRolePermissionsBoundaryResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newPutRolePermissionsBoundaryResponse :: PutRolePermissionsBoundaryResponse

Create a value of PutRolePermissionsBoundaryResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.