Copyright	(c) 2013-2021 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay <brendan.g.hay+amazonka@gmail.com>
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	None

Amazonka.IAM.PutRolePermissionsBoundary

Contents

Creating a Request
Request Lenses
Destructuring the Response

Description

Adds or updates the policy that is specified as the IAM role's permissions boundary. You can use an Amazon Web Services managed policy or a customer managed policy to set the boundary for a role. Use the boundary to control the maximum permissions that the role can have. Setting a permissions boundary is an advanced feature that can affect the permissions for the role.

You cannot set the boundary for a service-linked role.

Policies used as permissions boundaries do not provide permissions. You must also attach a permissions policy to the role. To learn how the effective permissions for a role are evaluated, see IAM JSON policy evaluation logic in the IAM User Guide.

Creating a Request

data PutRolePermissionsBoundary Source #

See: newPutRolePermissionsBoundary smart constructor.

Constructors

PutRolePermissionsBoundary'
Fields roleName :: Text The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary. permissionsBoundary :: Text The ARN of the policy that is used to set the permissions boundary for the role.

Instances

Instances details

Eq PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods (==) :: PutRolePermissionsBoundary -> PutRolePermissionsBoundary -> Bool # (/=) :: PutRolePermissionsBoundary -> PutRolePermissionsBoundary -> Bool #
Read PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods readsPrec :: Int -> ReadS PutRolePermissionsBoundary # readList :: ReadS [PutRolePermissionsBoundary] # readPrec :: ReadPrec PutRolePermissionsBoundary # readListPrec :: ReadPrec [PutRolePermissionsBoundary] #
Show PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods showsPrec :: Int -> PutRolePermissionsBoundary -> ShowS # show :: PutRolePermissionsBoundary -> String # showList :: [PutRolePermissionsBoundary] -> ShowS #
Generic PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Associated Types type Rep PutRolePermissionsBoundary :: Type -> Type # Methods from :: PutRolePermissionsBoundary -> Rep PutRolePermissionsBoundary x # to :: Rep PutRolePermissionsBoundary x -> PutRolePermissionsBoundary #
NFData PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods rnf :: PutRolePermissionsBoundary -> () #
Hashable PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods hashWithSalt :: Int -> PutRolePermissionsBoundary -> Int # hash :: PutRolePermissionsBoundary -> Int #
AWSRequest PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Associated Types type AWSResponse PutRolePermissionsBoundary # Methods request :: PutRolePermissionsBoundary -> Request PutRolePermissionsBoundary # response :: MonadResource m => Logger -> Service -> Proxy PutRolePermissionsBoundary -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse PutRolePermissionsBoundary))) #
ToHeaders PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods toHeaders :: PutRolePermissionsBoundary -> [Header] #
ToPath PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods toPath :: PutRolePermissionsBoundary -> ByteString #
ToQuery PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods toQuery :: PutRolePermissionsBoundary -> QueryString #
type Rep PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary type Rep PutRolePermissionsBoundary = D1 ('MetaData "PutRolePermissionsBoundary" "Amazonka.IAM.PutRolePermissionsBoundary" "libZSservicesZSamazonka-iamZSamazonka-iam" 'False) (C1 ('MetaCons "PutRolePermissionsBoundary'" 'PrefixI 'True) (S1 ('MetaSel ('Just "roleName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "permissionsBoundary") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary type AWSResponse PutRolePermissionsBoundary = PutRolePermissionsBoundaryResponse

newPutRolePermissionsBoundary Source #

Arguments

:: Text	`$sel:roleName:PutRolePermissionsBoundary'`
-> Text	`$sel:permissionsBoundary:PutRolePermissionsBoundary'`
-> PutRolePermissionsBoundary

Create a value of PutRolePermissionsBoundary with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:roleName:PutRolePermissionsBoundary', putRolePermissionsBoundary_roleName - The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary.

$sel:permissionsBoundary:PutRolePermissionsBoundary', putRolePermissionsBoundary_permissionsBoundary - The ARN of the policy that is used to set the permissions boundary for the role.

Request Lenses

putRolePermissionsBoundary_roleName :: Lens' PutRolePermissionsBoundary Text Source #

The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary.

putRolePermissionsBoundary_permissionsBoundary :: Lens' PutRolePermissionsBoundary Text Source #

The ARN of the policy that is used to set the permissions boundary for the role.

Destructuring the Response

data PutRolePermissionsBoundaryResponse Source #

See: newPutRolePermissionsBoundaryResponse smart constructor.

Constructors

PutRolePermissionsBoundaryResponse'

Instances

Instances details

Eq PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods (==) :: PutRolePermissionsBoundaryResponse -> PutRolePermissionsBoundaryResponse -> Bool # (/=) :: PutRolePermissionsBoundaryResponse -> PutRolePermissionsBoundaryResponse -> Bool #
Read PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods readsPrec :: Int -> ReadS PutRolePermissionsBoundaryResponse # readList :: ReadS [PutRolePermissionsBoundaryResponse] # readPrec :: ReadPrec PutRolePermissionsBoundaryResponse # readListPrec :: ReadPrec [PutRolePermissionsBoundaryResponse] #
Show PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods showsPrec :: Int -> PutRolePermissionsBoundaryResponse -> ShowS # show :: PutRolePermissionsBoundaryResponse -> String # showList :: [PutRolePermissionsBoundaryResponse] -> ShowS #
Generic PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Associated Types type Rep PutRolePermissionsBoundaryResponse :: Type -> Type # Methods from :: PutRolePermissionsBoundaryResponse -> Rep PutRolePermissionsBoundaryResponse x # to :: Rep PutRolePermissionsBoundaryResponse x -> PutRolePermissionsBoundaryResponse #
NFData PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods rnf :: PutRolePermissionsBoundaryResponse -> () #
type Rep PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary type Rep PutRolePermissionsBoundaryResponse = D1 ('MetaData "PutRolePermissionsBoundaryResponse" "Amazonka.IAM.PutRolePermissionsBoundary" "libZSservicesZSamazonka-iamZSamazonka-iam" 'False) (C1 ('MetaCons "PutRolePermissionsBoundaryResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newPutRolePermissionsBoundaryResponse :: PutRolePermissionsBoundaryResponse Source #

Create a value of PutRolePermissionsBoundaryResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.