Network.AWS.CloudFront.SignedCookies.Policy

Defining a policy

data Policy

A policy specifies what resource is being granted, for what time period, and to what IP addresses.

For AWS's documentation on what going into a CloudFront policy statement, see Values That You Specify in the Policy Statement for a Custom Policy for Signed Cookies.

Constructors

Policy

Fields

• policyResource :: Resource

  URL that the policy will grant access to, optionally containing asterisks for wildcards

• policyStart :: StartTime

  The time at which credentials begin to take effect

• policyEnd :: EndTime

  The time at which credentials expire

• policyIpAddress :: IpAddress

  The IP address or address range of clients allowed to make requests

simplePolicy

Arguments

:: Resource

URL that the policy will grant access to, optionally containing asterisks for wildcards

-> Lifespan

How long from now the credentials expire

-> IO Policy

This function provides one convenient way to construct a simple Policy.

For the full set of policy options, use the Policy constructor directly.

Components of a policy

newtype Resource

URL that a policy will grant access to, optionally containing asterisks for wildcards.

Examples:

• "https://d123example.cloudfront.net/index.html"
• "https://d123example.cloudfront.net/*.jpeg"

Constructors

Resource Text

data StartTime

The time at which credentials begin to take effect

Constructors

StartImmediately

StartTime POSIXTime

newtype EndTime

The time at which credentials expire

Constructors

EndTime POSIXTime

newtype Lifespan

How long from now the credentials expire

Constructors

Lifespan NominalDiffTime

data IpAddress

The IP address or address range of clients allowed to make requests

Constructors

AnyIp

IpAddress Text

JSON representation

policyJSON :: Policy -> ByteString

Encode a Policy as JSON, with no whitespace, as AWS requires.

Excerpt from Setting Signed Cookies Using a Custom Policy:

• "Remove all whitespace (including tabs and newline characters) from the policy statement."