Network.AWS.KMS.Types

Service

data KMS

Version 2014-11-01 of the Amazon Key Management Service service.

Instances

AWSService KMS

type Er KMS = JSONError

type Sg KMS = V4

Error

data JSONError :: *

Instances

Eq JSONError

Show JSONError

Generic JSONError

FromJSON JSONError

type Rep JSONError = D1 D1JSONError (C1 C1_0JSONError ((:*:) (S1 S1_0_0JSONError (Rec0 (Maybe Text))) (S1 S1_0_1JSONError (Rec0 Text))))

KeyUsageType

data KeyUsageType

Constructors

EncryptDecrypt

ENCRYPT_DECRYPT

Instances

Enum KeyUsageType

Eq KeyUsageType

Ord KeyUsageType

Show KeyUsageType

Generic KeyUsageType

ToJSON KeyUsageType

FromJSON KeyUsageType

Hashable KeyUsageType

ToQuery KeyUsageType

ToHeader KeyUsageType

ToByteString KeyUsageType

FromText KeyUsageType

ToText KeyUsageType

type Rep KeyUsageType

KeyMetadata

data KeyMetadata

Instances

Eq KeyMetadata

Show KeyMetadata

ToJSON KeyMetadata

FromJSON KeyMetadata

keyMetadata

Arguments

:: Text

kmKeyId

-> KeyMetadata

KeyMetadata constructor.

The fields accessible through corresponding lenses are:

• kmAWSAccountId :: Maybe Text
• kmArn :: Maybe Text
• kmCreationDate :: Maybe UTCTime
• kmDescription :: Maybe Text
• kmEnabled :: Maybe Bool
• kmKeyId :: Text
• kmKeyUsage :: Maybe KeyUsageType

kmAWSAccountId :: Lens' KeyMetadata (Maybe Text)

Account ID number.

kmArn :: Lens' KeyMetadata (Maybe Text)

Key ARN (Amazon Resource Name).

kmCreationDate :: Lens' KeyMetadata (Maybe UTCTime)

Date the key was created.

kmDescription :: Lens' KeyMetadata (Maybe Text)

The description of the key.

kmEnabled :: Lens' KeyMetadata (Maybe Bool)

Value that specifies whether the key is enabled.

kmKeyId :: Lens' KeyMetadata Text

Unique identifier for the key.

kmKeyUsage :: Lens' KeyMetadata (Maybe KeyUsageType)

A value that specifies what operation(s) the key can perform.

DataKeySpec

data DataKeySpec

Constructors

AES128

AES_128

AES256

AES_256

Instances

Enum DataKeySpec

Eq DataKeySpec

Ord DataKeySpec

Show DataKeySpec

Generic DataKeySpec

ToJSON DataKeySpec

FromJSON DataKeySpec

Hashable DataKeySpec

ToQuery DataKeySpec

ToHeader DataKeySpec

ToByteString DataKeySpec

FromText DataKeySpec

ToText DataKeySpec

type Rep DataKeySpec

GrantConstraints

data GrantConstraints

Instances

Eq GrantConstraints

Show GrantConstraints

ToJSON GrantConstraints

FromJSON GrantConstraints

grantConstraints :: GrantConstraints

GrantConstraints constructor.

The fields accessible through corresponding lenses are:

• gcEncryptionContextEquals :: HashMap Text Text
• gcEncryptionContextSubset :: HashMap Text Text

gcEncryptionContextEquals :: Lens' GrantConstraints (HashMap Text Text)

The constraint contains additional key/value pairs that serve to further limit the grant.

gcEncryptionContextSubset :: Lens' GrantConstraints (HashMap Text Text)

The constraint equals the full encryption context.

AliasListEntry

data AliasListEntry

Instances

Eq AliasListEntry

Ord AliasListEntry

Show AliasListEntry

ToJSON AliasListEntry

FromJSON AliasListEntry

aliasListEntry :: AliasListEntry

AliasListEntry constructor.

The fields accessible through corresponding lenses are:

• aleAliasArn :: Maybe Text
• aleAliasName :: Maybe Text
• aleTargetKeyId :: Maybe Text

aleAliasArn :: Lens' AliasListEntry (Maybe Text)

String that contains the key ARN.

aleAliasName :: Lens' AliasListEntry (Maybe Text)

String that contains the alias.

aleTargetKeyId :: Lens' AliasListEntry (Maybe Text)

String that contains the key identifier pointed to by the alias.

GrantListEntry

data GrantListEntry

Instances

Eq GrantListEntry

Show GrantListEntry

ToJSON GrantListEntry

FromJSON GrantListEntry

grantListEntry :: GrantListEntry

GrantListEntry constructor.

The fields accessible through corresponding lenses are:

• gleConstraints :: Maybe GrantConstraints
• gleGrantId :: Maybe Text
• gleGranteePrincipal :: Maybe Text
• gleIssuingAccount :: Maybe Text
• gleOperations :: [GrantOperation]
• gleRetiringPrincipal :: Maybe Text

gleConstraints :: Lens' GrantListEntry (Maybe GrantConstraints)

Specifies the conditions under which the actions specified by the Operations parameter are allowed.

gleGrantId :: Lens' GrantListEntry (Maybe Text)

Unique grant identifier.

gleGranteePrincipal :: Lens' GrantListEntry (Maybe Text)

The principal that receives the grant permission.

gleIssuingAccount :: Lens' GrantListEntry (Maybe Text)

The account under which the grant was issued.

gleOperations :: Lens' GrantListEntry [GrantOperation]

List of operations permitted by the grant. This can be any combination of one or more of the following values: Decrypt Encrypt GenerateDataKey GenerateDataKeyWithoutPlaintext ReEncryptFrom ReEncryptTo CreateGrant

gleRetiringPrincipal :: Lens' GrantListEntry (Maybe Text)

The principal that can retire the account.

GrantOperation

data GrantOperation

Constructors

GOCreateGrant

CreateGrant

GODecrypt

Decrypt

GOEncrypt

Encrypt

GOGenerateDataKey

GenerateDataKey

GOGenerateDataKeyWithoutPlaintext

GenerateDataKeyWithoutPlaintext

GOReEncryptFrom

ReEncryptFrom

GOReEncryptTo

ReEncryptTo

GORetireGrant

RetireGrant

Instances

Enum GrantOperation

Eq GrantOperation

Ord GrantOperation

Show GrantOperation

Generic GrantOperation

ToJSON GrantOperation

FromJSON GrantOperation

Hashable GrantOperation

ToQuery GrantOperation

ToHeader GrantOperation

ToByteString GrantOperation

FromText GrantOperation

ToText GrantOperation

type Rep GrantOperation

KeyListEntry

data KeyListEntry

Instances

Eq KeyListEntry

Ord KeyListEntry

Show KeyListEntry

ToJSON KeyListEntry

FromJSON KeyListEntry

keyListEntry :: KeyListEntry

KeyListEntry constructor.

The fields accessible through corresponding lenses are:

• kleKeyArn :: Maybe Text
• kleKeyId :: Maybe Text

kleKeyArn :: Lens' KeyListEntry (Maybe Text)

ARN of the key.

kleKeyId :: Lens' KeyListEntry (Maybe Text)

Unique identifier of the key.