Copyright	(c) 2013-2021 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay <brendan.g.hay+amazonka@gmail.com>
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	None

Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration

Description

Documentation

data KmsKeyConfiguration Source #

Proposed access control configuration for a KMS key. You can propose a configuration for a new KMS key or an existing KMS key that you own by specifying the key policy and KMS grant configuration. If the configuration is for an existing key and you do not specify the key policy, the access preview uses the existing policy for the key. If the access preview is for a new resource and you do not specify the key policy, then the access preview uses the default key policy. The proposed key policy cannot be an empty string. For more information, see Default key policy. For more information about key policy limits, see Resource quotas.

See: newKmsKeyConfiguration smart constructor.

Constructors

KmsKeyConfiguration'

Fields

grants :: Maybe [KmsGrantConfiguration]
A list of proposed grant configurations for the KMS key. If the proposed grant configuration is for an existing key, the access preview uses the proposed list of grant configurations in place of the existing grants. Otherwise, the access preview uses the existing grants for the key.
keyPolicies :: Maybe (HashMap Text Text)
Resource policy configuration for the KMS key. The only valid value for the name of the key policy is default. For more information, see Default key policy.

Instances

Instances details

Eq KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration Methods (==) :: KmsKeyConfiguration -> KmsKeyConfiguration -> Bool # (/=) :: KmsKeyConfiguration -> KmsKeyConfiguration -> Bool #
Read KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration Methods readsPrec :: Int -> ReadS KmsKeyConfiguration # readList :: ReadS [KmsKeyConfiguration] # readPrec :: ReadPrec KmsKeyConfiguration # readListPrec :: ReadPrec [KmsKeyConfiguration] #
Show KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration Methods showsPrec :: Int -> KmsKeyConfiguration -> ShowS # show :: KmsKeyConfiguration -> String # showList :: [KmsKeyConfiguration] -> ShowS #
Generic KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration Associated Types type Rep KmsKeyConfiguration :: Type -> Type # Methods from :: KmsKeyConfiguration -> Rep KmsKeyConfiguration x # to :: Rep KmsKeyConfiguration x -> KmsKeyConfiguration #
NFData KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration Methods rnf :: KmsKeyConfiguration -> () #
Hashable KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration Methods hashWithSalt :: Int -> KmsKeyConfiguration -> Int # hash :: KmsKeyConfiguration -> Int #
ToJSON KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration Methods toJSON :: KmsKeyConfiguration -> Value # toEncoding :: KmsKeyConfiguration -> Encoding # toJSONList :: [KmsKeyConfiguration] -> Value # toEncodingList :: [KmsKeyConfiguration] -> Encoding #
FromJSON KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration Methods parseJSON :: Value -> Parser KmsKeyConfiguration # parseJSONList :: Value -> Parser [KmsKeyConfiguration] #
type Rep KmsKeyConfiguration Source #
Instance details Defined in Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration type Rep KmsKeyConfiguration = D1 ('MetaData "KmsKeyConfiguration" "Amazonka.AccessAnalyzer.Types.KmsKeyConfiguration" "libZSservicesZSamazonka-accessanalyzerZSamazonka-accessanalyzer" 'False) (C1 ('MetaCons "KmsKeyConfiguration'" 'PrefixI 'True) (S1 ('MetaSel ('Just "grants") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [KmsGrantConfiguration])) :*: S1 ('MetaSel ('Just "keyPolicies") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text)))))

newKmsKeyConfiguration :: KmsKeyConfiguration Source #

Create a value of KmsKeyConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:grants:KmsKeyConfiguration', kmsKeyConfiguration_grants - A list of proposed grant configurations for the KMS key. If the proposed grant configuration is for an existing key, the access preview uses the proposed list of grant configurations in place of the existing grants. Otherwise, the access preview uses the existing grants for the key.

$sel:keyPolicies:KmsKeyConfiguration', kmsKeyConfiguration_keyPolicies - Resource policy configuration for the KMS key. The only valid value for the name of the key policy is default. For more information, see Default key policy.

kmsKeyConfiguration_grants :: Lens' KmsKeyConfiguration (Maybe [KmsGrantConfiguration]) Source #

A list of proposed grant configurations for the KMS key. If the proposed grant configuration is for an existing key, the access preview uses the proposed list of grant configurations in place of the existing grants. Otherwise, the access preview uses the existing grants for the key.

kmsKeyConfiguration_keyPolicies :: Lens' KmsKeyConfiguration (Maybe (HashMap Text Text)) Source #

Resource policy configuration for the KMS key. The only valid value for the name of the key policy is default. For more information, see Default key policy.