Copyright	(c) 2013-2021 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay <brendan.g.hay+amazonka@gmail.com>
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	None

Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration

Description

Documentation

data KmsGrantConfiguration Source #

A proposed grant configuration for a KMS key. For more information, see CreateGrant.

See: newKmsGrantConfiguration smart constructor.

Constructors

KmsGrantConfiguration'

Fields

retiringPrincipal :: Maybe Text
The principal that is given permission to retire the grant by using RetireGrant operation.
constraints :: Maybe KmsGrantConstraints
Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.
granteePrincipal :: Text
The principal that is given permission to perform the operations that the grant permits.
issuingAccount :: Text
The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.
operations :: [KmsGrantOperation]
A list of operations that the grant permits.

Instances

Instances details

Eq KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration Methods (==) :: KmsGrantConfiguration -> KmsGrantConfiguration -> Bool # (/=) :: KmsGrantConfiguration -> KmsGrantConfiguration -> Bool #
Read KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration Methods readsPrec :: Int -> ReadS KmsGrantConfiguration # readList :: ReadS [KmsGrantConfiguration] # readPrec :: ReadPrec KmsGrantConfiguration # readListPrec :: ReadPrec [KmsGrantConfiguration] #
Show KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration Methods showsPrec :: Int -> KmsGrantConfiguration -> ShowS # show :: KmsGrantConfiguration -> String # showList :: [KmsGrantConfiguration] -> ShowS #
Generic KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration Associated Types type Rep KmsGrantConfiguration :: Type -> Type # Methods from :: KmsGrantConfiguration -> Rep KmsGrantConfiguration x # to :: Rep KmsGrantConfiguration x -> KmsGrantConfiguration #
NFData KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration Methods rnf :: KmsGrantConfiguration -> () #
Hashable KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration Methods hashWithSalt :: Int -> KmsGrantConfiguration -> Int # hash :: KmsGrantConfiguration -> Int #
ToJSON KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration Methods toJSON :: KmsGrantConfiguration -> Value # toEncoding :: KmsGrantConfiguration -> Encoding # toJSONList :: [KmsGrantConfiguration] -> Value # toEncodingList :: [KmsGrantConfiguration] -> Encoding #
FromJSON KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration Methods parseJSON :: Value -> Parser KmsGrantConfiguration # parseJSONList :: Value -> Parser [KmsGrantConfiguration] #
type Rep KmsGrantConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration type Rep KmsGrantConfiguration = D1 ('MetaData "KmsGrantConfiguration" "Amazonka.AccessAnalyzer.Types.KmsGrantConfiguration" "libZSservicesZSamazonka-accessanalyzerZSamazonka-accessanalyzer" 'False) (C1 ('MetaCons "KmsGrantConfiguration'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "retiringPrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "constraints") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KmsGrantConstraints))) :: (S1 ('MetaSel ('Just "granteePrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: (S1 ('MetaSel ('Just "issuingAccount") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: S1 ('MetaSel ('Just "operations") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 [KmsGrantOperation])))))

newKmsGrantConfiguration Source #

Arguments

:: Text	`$sel:granteePrincipal:KmsGrantConfiguration'`
-> Text	`$sel:issuingAccount:KmsGrantConfiguration'`
-> KmsGrantConfiguration

Create a value of KmsGrantConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:retiringPrincipal:KmsGrantConfiguration', kmsGrantConfiguration_retiringPrincipal - The principal that is given permission to retire the grant by using RetireGrant operation.

$sel:constraints:KmsGrantConfiguration', kmsGrantConfiguration_constraints - Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.

$sel:granteePrincipal:KmsGrantConfiguration', kmsGrantConfiguration_granteePrincipal - The principal that is given permission to perform the operations that the grant permits.

$sel:issuingAccount:KmsGrantConfiguration', kmsGrantConfiguration_issuingAccount - The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.

$sel:operations:KmsGrantConfiguration', kmsGrantConfiguration_operations - A list of operations that the grant permits.

kmsGrantConfiguration_retiringPrincipal :: Lens' KmsGrantConfiguration (Maybe Text) Source #

The principal that is given permission to retire the grant by using RetireGrant operation.

kmsGrantConfiguration_constraints :: Lens' KmsGrantConfiguration (Maybe KmsGrantConstraints) Source #

Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.

kmsGrantConfiguration_granteePrincipal :: Lens' KmsGrantConfiguration Text Source #

The principal that is given permission to perform the operations that the grant permits.

kmsGrantConfiguration_issuingAccount :: Lens' KmsGrantConfiguration Text Source #

The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.

kmsGrantConfiguration_operations :: Lens' KmsGrantConfiguration [KmsGrantOperation] Source #

A list of operations that the grant permits.