Amazonka.MacieV2.Types.S3Bucket

Documentation

data S3Bucket

Provides information about the S3 bucket that a finding applies to.

See: newS3Bucket smart constructor.

Constructors

S3Bucket'

Fields

• allowsUnencryptedObjectUploads :: Maybe AllowsUnencryptedObjectUploads

  Specifies whether the bucket policy for the bucket requires server-side encryption of objects when objects are uploaded to the bucket. Possible values are:

  • FALSE - The bucket policy requires server-side encryption of new objects. PutObject requests must include a valid server-side encryption header.
  • TRUE - The bucket doesn't have a bucket policy or it has a bucket policy that doesn't require server-side encryption of new objects. If a bucket policy exists, it doesn't require PutObject requests to include a valid server-side encryption header.
  • UNKNOWN - Amazon Macie can't determine whether the bucket policy requires server-side encryption of new objects.

  Valid server-side encryption headers are: x-amz-server-side-encryption with a value of AES256 or aws:kms, and x-amz-server-side-encryption-customer-algorithm with a value of AES256.

• arn :: Maybe Text

  The Amazon Resource Name (ARN) of the bucket.

• createdAt :: Maybe ISO8601

  The date and time, in UTC and extended ISO 8601 format, when the bucket was created.

• defaultServerSideEncryption :: Maybe ServerSideEncryption

  The type of server-side encryption that's used by default to encrypt objects in the bucket.

• name :: Maybe Text

  The name of the bucket.

• owner :: Maybe S3BucketOwner

  The display name and canonical user ID for the Amazon Web Services account that owns the bucket.

• publicAccess :: Maybe BucketPublicAccess

  The permissions settings that determine whether the bucket is publicly accessible.

• tags :: Maybe [KeyValuePair]

  The tags that are associated with the bucket.

Instances

FromJSON S3Bucket

Defined in Amazonka.MacieV2.Types.S3Bucket

Methods

parseJSON :: Value -> Parser S3Bucket

parseJSONList :: Value -> Parser [S3Bucket]

Generic S3Bucket

Defined in Amazonka.MacieV2.Types.S3Bucket

Associated Types

type Rep S3Bucket :: Type -> Type

Methods

from :: S3Bucket -> Rep S3Bucket x

to :: Rep S3Bucket x -> S3Bucket

Read S3Bucket

Defined in Amazonka.MacieV2.Types.S3Bucket

Methods

readsPrec :: Int -> ReadS S3Bucket

readList :: ReadS [S3Bucket]

readPrec :: ReadPrec S3Bucket

readListPrec :: ReadPrec [S3Bucket]

Show S3Bucket

Defined in Amazonka.MacieV2.Types.S3Bucket

Methods

showsPrec :: Int -> S3Bucket -> ShowS

show :: S3Bucket -> String

showList :: [S3Bucket] -> ShowS

NFData S3Bucket

Defined in Amazonka.MacieV2.Types.S3Bucket

Methods

rnf :: S3Bucket -> ()

Eq S3Bucket

Defined in Amazonka.MacieV2.Types.S3Bucket

Methods

(==) :: S3Bucket -> S3Bucket -> Bool

(/=) :: S3Bucket -> S3Bucket -> Bool

Hashable S3Bucket

Defined in Amazonka.MacieV2.Types.S3Bucket

Methods

hashWithSalt :: Int -> S3Bucket -> Int

hash :: S3Bucket -> Int

type Rep S3Bucket

Defined in Amazonka.MacieV2.Types.S3Bucket

type Rep S3Bucket = D1 ('MetaData "S3Bucket" "Amazonka.MacieV2.Types.S3Bucket" "amazonka-maciev2-2.0-5WBPWSHaxt7LOrO1LzXg18" 'False) (C1 ('MetaCons "S3Bucket'" 'PrefixI 'True) (((S1 ('MetaSel ('Just "allowsUnencryptedObjectUploads") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe AllowsUnencryptedObjectUploads)) :*: S1 ('MetaSel ('Just "arn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "createdAt") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ISO8601)) :*: S1 ('MetaSel ('Just "defaultServerSideEncryption") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ServerSideEncryption)))) :*: ((S1 ('MetaSel ('Just "name") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "owner") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe S3BucketOwner))) :*: (S1 ('MetaSel ('Just "publicAccess") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe BucketPublicAccess)) :*: S1 ('MetaSel ('Just "tags") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [KeyValuePair]))))))

newS3Bucket :: S3Bucket

Create a value of S3Bucket with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:allowsUnencryptedObjectUploads:S3Bucket', s3Bucket_allowsUnencryptedObjectUploads - Specifies whether the bucket policy for the bucket requires server-side encryption of objects when objects are uploaded to the bucket. Possible values are:

• FALSE - The bucket policy requires server-side encryption of new objects. PutObject requests must include a valid server-side encryption header.
• TRUE - The bucket doesn't have a bucket policy or it has a bucket policy that doesn't require server-side encryption of new objects. If a bucket policy exists, it doesn't require PutObject requests to include a valid server-side encryption header.
• UNKNOWN - Amazon Macie can't determine whether the bucket policy requires server-side encryption of new objects.

Valid server-side encryption headers are: x-amz-server-side-encryption with a value of AES256 or aws:kms, and x-amz-server-side-encryption-customer-algorithm with a value of AES256.

$sel:arn:S3Bucket', s3Bucket_arn - The Amazon Resource Name (ARN) of the bucket.

$sel:createdAt:S3Bucket', s3Bucket_createdAt - The date and time, in UTC and extended ISO 8601 format, when the bucket was created.

$sel:defaultServerSideEncryption:S3Bucket', s3Bucket_defaultServerSideEncryption - The type of server-side encryption that's used by default to encrypt objects in the bucket.

$sel:name:S3Bucket', s3Bucket_name - The name of the bucket.

$sel:owner:S3Bucket', s3Bucket_owner - The display name and canonical user ID for the Amazon Web Services account that owns the bucket.

$sel:publicAccess:S3Bucket', s3Bucket_publicAccess - The permissions settings that determine whether the bucket is publicly accessible.

$sel:tags:S3Bucket', s3Bucket_tags - The tags that are associated with the bucket.

s3Bucket_allowsUnencryptedObjectUploads :: Lens' S3Bucket (Maybe AllowsUnencryptedObjectUploads)

Specifies whether the bucket policy for the bucket requires server-side encryption of objects when objects are uploaded to the bucket. Possible values are:

• FALSE - The bucket policy requires server-side encryption of new objects. PutObject requests must include a valid server-side encryption header.
• TRUE - The bucket doesn't have a bucket policy or it has a bucket policy that doesn't require server-side encryption of new objects. If a bucket policy exists, it doesn't require PutObject requests to include a valid server-side encryption header.
• UNKNOWN - Amazon Macie can't determine whether the bucket policy requires server-side encryption of new objects.

Valid server-side encryption headers are: x-amz-server-side-encryption with a value of AES256 or aws:kms, and x-amz-server-side-encryption-customer-algorithm with a value of AES256.

s3Bucket_arn :: Lens' S3Bucket (Maybe Text)

The Amazon Resource Name (ARN) of the bucket.

s3Bucket_createdAt :: Lens' S3Bucket (Maybe UTCTime)

The date and time, in UTC and extended ISO 8601 format, when the bucket was created.

s3Bucket_defaultServerSideEncryption :: Lens' S3Bucket (Maybe ServerSideEncryption)

The type of server-side encryption that's used by default to encrypt objects in the bucket.

s3Bucket_name :: Lens' S3Bucket (Maybe Text)

The name of the bucket.

s3Bucket_owner :: Lens' S3Bucket (Maybe S3BucketOwner)

The display name and canonical user ID for the Amazon Web Services account that owns the bucket.

s3Bucket_publicAccess :: Lens' S3Bucket (Maybe BucketPublicAccess)

The permissions settings that determine whether the bucket is publicly accessible.

s3Bucket_tags :: Lens' S3Bucket (Maybe [KeyValuePair])

The tags that are associated with the bucket.