| Copyright | (c) 2013-2018 Brendan Hay |
|---|---|
| License | Mozilla Public License, v. 2.0. |
| Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
| Stability | auto-generated |
| Portability | non-portable (GHC extensions) |
| Safe Haskell | None |
| Language | Haskell2010 |
Network.AWS.KMS.RevokeGrant
Description
Revokes the specified grant for the specified customer master key (CMK). You can revoke a grant to actively deny operations that depend on it.
To perform this operation on a CMK in a different AWS account, specify the key ARN in the value of the KeyId parameter.
- revokeGrant :: Text -> Text -> RevokeGrant
- data RevokeGrant
- rKeyId :: Lens' RevokeGrant Text
- rGrantId :: Lens' RevokeGrant Text
- revokeGrantResponse :: RevokeGrantResponse
- data RevokeGrantResponse
Creating a Request
Arguments
| :: Text | |
| -> Text | |
| -> RevokeGrant |
Creates a value of RevokeGrant with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rKeyId- A unique identifier for the customer master key associated with the grant. Specify the key ID or the Amazon Resource Name (ARN) of the CMK. To specify a CMK in a different AWS account, you must use the key ARN. For example: * Key ID:1234abcd-12ab-34cd-56ef-1234567890ab* Key ARN:arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890abTo get the key ID and key ARN for a CMK, useListKeysorDescribeKey.rGrantId- Identifier of the grant to be revoked.
data RevokeGrant Source #
See: revokeGrant smart constructor.
Instances
Request Lenses
rKeyId :: Lens' RevokeGrant Text Source #
A unique identifier for the customer master key associated with the grant. Specify the key ID or the Amazon Resource Name (ARN) of the CMK. To specify a CMK in a different AWS account, you must use the key ARN. For example: * Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab * Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab To get the key ID and key ARN for a CMK, use ListKeys or DescribeKey .
Destructuring the Response
revokeGrantResponse :: RevokeGrantResponse Source #
Creates a value of RevokeGrantResponse with the minimum fields required to make a request.
data RevokeGrantResponse Source #
See: revokeGrantResponse smart constructor.