úÎVöOž      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~€(c) 2015-2016 Brendan HayMozilla Public License, v. 2.0.%Brendan Hay <brendan.g.hay@gmail.com> provisionalnon-portable (GHC extensions)None6DIR[ *The specified master key id doesn't exist.2The computed HMAC doesn't matched the stored HMAC.(Failure occured during local encryption.(Failure occured during local decryption..Storage doesn't exist, or has gone on holiday.SSome storage pre-condition wasn't met. For example: DynamoDB column size exceeded.&Missing field from the storage engine..Unable to parse field from the storage engine.,Secret with the specified name cannot found.4Attempting to insert a revision that already exists.dDenotes idempotency of an action. That is, whether an action resulted in any setup being performed.9The encryption parameters required to perform decryption.,The wrapped (encrypted) data encryption key.The encrypted ciphertext.%HMAC SHA256 digest of the ciphertext.A KMS encryption context.See: KMS  Ihttp://docs.aws.amazon.com/kms/latest/developerguide/encrypt-context.htmlEncryption Context% documentation for more information.")An opaque, non-monotonic revision number.$$A shared/readable name for a secret.&The KMS master key identifier.(!The default KMS master key alias.Value: alias/credentials.  !"#$%&'()*+,-)  !"#$%&'(.&'($%"# !-, + *)   !"#$%&'()*+,-(c) 2015-2016 Brendan HayMozilla Public License, v. 2.0.%Brendan Hay <brendan.g.hay@gmail.com> provisionalnon-portable (GHC extensions)None!"T[JEncrypt a plaintext 8 with the given master key and encryption context. The $$ is used to annotate error messages.^The wrapped data encryption key, ciphertext, and HMAC SHA256 are returned if no error occurs.K˘Decrypt ciphertext using the given encryption context, and wrapped data encryption key. The HMAC SHA256 is recalculated and compared for message integrity. The $$ is used to annotate error messages.$The resulting unencrypted plaintext  is returned if no error occurs.JK‚ƒ„…JKJKJK‚ƒ„…(c) 2013-2015-2016 Brendan HayMozilla Public License, v. 2.0.%Brendan Hay <brendan.g.hay@gmail.com> provisionalnon-portable (GHC extensions)None!"9;ITMEncode an attribute value.NDecode an attribute value.P=Encode an item as a set of attributes including their schema.Q(Decode an item from a set of attributes.R/The DynamoDB field used for optimistic locking.Serialisation of Re handles left-padding to support consistent lexicographic ordering when used as a range in DynamoDB.\Decode an item by throwing a  ) exception when an error is encountered.LMNOPQRSTUVWXYZ[\]^_`abcdefghiLMNOPQRSTUVWXYZ[\]TRSUVWXYZ[OPQ\ihgfe]LMNdcba`_^LMNOPQRSTUVWXYZ[\]^_`abcdefghi(c) 2015-2016 Brendan HayMozilla Public License, v. 2.0.%Brendan Hay <brendan.g.hay@gmail.com> provisionalnon-portable (GHC extensions)None!"9:;DILORT oA DynamoDB table reference.r5The default DynamoDB table used to store credentials.Value:  credentialssEEncrypt and insert a new credential revision with the specified name.(The newly inserted revision is returned.tBSelect an existing credential, optionally specifying the revision.;The decrypted plaintext and selected revision are returned.u(Delete the specific credential revision.vTTruncate all of a credential's revisions, so that only the latest revision remains.wScan the entire credential database, grouping pages of results into unique credential names and their corresponding revisions.x&Create the credentials database table.The returned idempotency flag can be used to notify configuration management tools such as ansible whether about system state.y3Delete the credentials database table and all data.Note:T Unless you have DynamoDB backups running, this is a completely irrevocable action.opqrs The KMS master key ARN or alias.The KMS encryption context.The credential name.The unencrypted plaintext.The DynamoDB table.t:The KMS encryption context that was used during insertion.The credential name.A revision. If †, the latest will be selected.The DynamoDB table.uThe credential name.The revision to delete.The DynamoDB table.vThe credential name.The DynamoDB table.wThe DynamoDB table.xThe DynamoDB table.y‡ˆ‰Š‹ŒŽ opqrstuvwxy opqrstuvwxyopqrstuvwxy‡ˆ‰Š‹ŒŽ(c) 2015-2016 Brendan HayMozilla Public License, v. 2.0.%Brendan Hay <brendan.g.hay@gmail.com> provisionalnon-portable (GHC extensions)None:OT[/  !"#$%&'(opqrstuvwxy/stuvwxy&'(opqr  $%"# !       !"#$$%&&''(()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSSTUVWXYZ[\]^_`abcdefghijklmnoopqrstuvwxyz{|}~€‚ƒ„…†‡ˆ‰Š‹ŒŽ‘’“(credentials-0.0.2-57LbgPEMTYeIdxXABy64GACredentials.TypesCredentials.KMSCredentials.DynamoDB.ItemCredentials.DynamoDB CredentialsAsCredentialError_CredentialError_MasterKeyMissing_IntegrityFailure_EncryptFailure_DecryptFailure_StorageMissing_StorageFailure _FieldMissing _FieldInvalid_SecretMissing_OptimisticLockFailureCredentialErrorMasterKeyMissingIntegrityFailureEncryptFailureDecryptFailureStorageMissingStorageFailure FieldMissing FieldInvalid SecretMissingOptimisticLockFailureSetupCreatedExists Encrypted wrappedKey ciphertextdigestContext fromContextRevisionNameKeyId defaultKeyId $fAsCredentialErrorSomeException"$fAsCredentialErrorCredentialError$fExceptionCredentialError $fToLogSetup $fToTextSetup $fEqKeyId $fOrdKeyId $fShowKeyId$fFromTextKeyId $fToTextKeyId$fToByteStringKeyId $fToLogKeyId$fEqName $fOrdName $fShowName$fFromTextName $fToTextName$fToByteStringName $fToLogName $fEqRevision $fOrdRevision$fShowRevision$fFromTextRevision$fToTextRevision$fToByteStringRevision$fToLogRevision $fEqContext $fShowContext$fMonoidContext $fEqSetup $fShowSetup$fEqCredentialError$fShowCredentialErrorencryptdecrypt AttributetoAttr parseAttrItemtoItem parseItemVersionpaddingequals nameField revisionField versionFieldwrappedKeyFieldciphertextField digestFieldfromItemparse$fAttributeHMAC$fAttributeVersion$fAttributeInteger$fAttributeRevision$fAttributeName$fAttributeByteString$fAttributeText$fItemEncrypted $fItemVersion$fItemRevision $fItemName $fItem(,) $fEqVersion $fOrdVersion $fNumVersion$fFromTextVersion$fToTextVersion DynamoTable tableName defaultTableinsertselectdeletetruncate revisionssetupteardown$fEqDynamoTable$fOrdDynamoTable$fShowDynamoTable$fFromTextDynamoTable$fToTextDynamoTable$fToByteStringDynamoTable$fToLogDynamoTablebytestring-0.10.8.1Data.ByteString.Internal ByteStringsplitKey keyLength cryptoError encodeHexbaseGHC.BaseNothinginsertEncryptedselectEncryptedlatestexists scanTable queryByName genRevisionfindCcatchResourceNotFound