libZSservicesZSamazonka-kmsZSamazonka-kms
Copyright(c) 2013-2021 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay+amazonka@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone

Amazonka.KMS.Types

Description

 
Synopsis

Service Configuration

defaultService :: Service Source #

API version 2014-11-01 of the Amazon Key Management Service SDK configuration.

Errors

_InvalidMarkerException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the marker that specifies where pagination should next begin is not valid.

_KMSInvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the state of the specified resource is not valid for this request.

For more information about how key state affects the use of a KMS key, see Key state: Effect on your KMS key in the /Key Management Service Developer Guide/ .

_InvalidKeyUsageException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected for one of the following reasons:

  • The KeyUsage value of the KMS key is incompatible with the API operation.
  • The encryption algorithm or signing algorithm specified for the operation is incompatible with the type of key material in the KMS key (KeySpec).

For encrypting, decrypting, re-encrypting, and generating data keys, the KeyUsage must be ENCRYPT_DECRYPT. For signing and verifying, the KeyUsage must be SIGN_VERIFY. To find the KeyUsage of a KMS key, use the DescribeKey operation.

To find the encryption or signing algorithms supported for a particular KMS key, use the DescribeKey operation.

_MalformedPolicyDocumentException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified policy is not syntactically or semantically correct.

_CustomKeyStoreNameInUseException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified custom key store name is already assigned to another custom key store in the account. Try again with a custom key store name that is unique in the account.

_UnsupportedOperationException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because a specified parameter is not supported or a specified resource is not valid for this operation.

_DisabledException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified KMS key is not enabled.

_KeyUnavailableException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified KMS key was not available. You can retry the request.

_IncorrectKeyMaterialException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the key material in the request is, expired, invalid, or is not the same key material that was previously imported into this KMS key.

_KMSInternalException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because an internal exception occurred. The request can be retried.

_TagException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because one or more tags are not valid.

_CustomKeyStoreHasCMKsException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the custom key store contains KMS keys. After verifying that you do not need to use the KMS keys, use the ScheduleKeyDeletion operation to delete the KMS keys. After they are deleted, you can delete the custom key store.

_InvalidImportTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the provided import token is invalid or is associated with a different KMS key.

_CloudHsmClusterNotRelatedException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified CloudHSM cluster has a different cluster certificate than the original cluster. You cannot use the operation to specify an unrelated cluster.

Specify a cluster that shares a backup history with the original cluster. This includes clusters that were created from a backup of the current cluster, and clusters that were created from the same backup that produced the current cluster.

Clusters that share a backup history have the same cluster certificate. To view the cluster certificate of a cluster, use the DescribeClusters operation.

_IncorrectTrustAnchorException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the trust anchor certificate in the request is not the trust anchor certificate for the specified CloudHSM cluster.

When you initialize the cluster, you create the trust anchor certificate and save it in the customerCA.crt file.

_CloudHsmClusterInvalidConfigurationException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the associated CloudHSM cluster did not meet the configuration requirements for a custom key store.

  • The cluster must be configured with private subnets in at least two different Availability Zones in the Region.
  • The security group for the cluster (cloudhsm-cluster-<cluster-id>-sg) must include inbound rules and outbound rules that allow TCP traffic on ports 2223-2225. The Source in the inbound rules and the Destination in the outbound rules must match the security group ID. These rules are set by default when you create the cluster. Do not delete or change them. To get information about a particular security group, use the DescribeSecurityGroups operation.
  • The cluster must contain at least as many HSMs as the operation requires. To add HSMs, use the CloudHSM CreateHsm operation.

    For the CreateCustomKeyStore, UpdateCustomKeyStore, and CreateKey operations, the CloudHSM cluster must have at least two active HSMs, each in a different Availability Zone. For the ConnectCustomKeyStore operation, the CloudHSM must contain at least one active HSM.

For information about the requirements for an CloudHSM cluster that is associated with a custom key store, see Assemble the Prerequisites in the Key Management Service Developer Guide. For information about creating a private subnet for an CloudHSM cluster, see Create a Private Subnet in the CloudHSM User Guide. For information about cluster security groups, see Configure a Default Security Group in the /CloudHSM User Guide/ .

_CloudHsmClusterNotActiveException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the CloudHSM cluster that is associated with the custom key store is not active. Initialize and activate the cluster and try the command again. For detailed instructions, see Getting Started in the CloudHSM User Guide.

_CloudHsmClusterNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because KMS cannot find the CloudHSM cluster with the specified cluster ID. Retry the request with a different cluster ID.

_NotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified entity or resource could not be found.

_KMSInvalidSignatureException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the signature verification failed. Signature verification fails when it cannot confirm that signature was produced by signing the specified message with the specified KMS key and signing algorithm.

_InvalidAliasNameException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified alias name is not valid.

_CustomKeyStoreNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because KMS cannot find a custom key store with the specified key store name or ID.

_CustomKeyStoreInvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because of the ConnectionState of the custom key store. To get the ConnectionState of a custom key store, use the DescribeCustomKeyStores operation.

This exception is thrown under the following conditions:

  • You requested the CreateKey or GenerateRandom operation in a custom key store that is not connected. These operations are valid only when the custom key store ConnectionState is CONNECTED.
  • You requested the UpdateCustomKeyStore or DeleteCustomKeyStore operation on a custom key store that is not disconnected. This operation is valid only when the custom key store ConnectionState is DISCONNECTED.
  • You requested the ConnectCustomKeyStore operation on a custom key store with a ConnectionState of DISCONNECTING or FAILED. This operation is valid for all other ConnectionState values.

_InvalidGrantIdException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified GrantId is not valid.

_InvalidGrantTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified grant token is not valid.

_InvalidArnException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because a specified ARN, or an ARN in a key policy, is not valid.

_DependencyTimeoutException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The system timed out while trying to fulfill the request. The request can be retried.

_ExpiredImportTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified import token is expired. Use GetParametersForImport to get a new import token and public key, use the new public key to encrypt the key material, and then try the request again.

_InvalidCiphertextException :: AsError a => Getting (First ServiceError) a ServiceError Source #

From the Decrypt or ReEncrypt operation, the request was rejected because the specified ciphertext, or additional authenticated data incorporated into the ciphertext, such as the encryption context, is corrupted, missing, or otherwise invalid.

From the ImportKeyMaterial operation, the request was rejected because KMS could not decrypt the encrypted (wrapped) key material.

_CloudHsmClusterInUseException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified CloudHSM cluster is already associated with a custom key store or it shares a backup history with a cluster that is associated with a custom key store. Each custom key store must be associated with a different CloudHSM cluster.

Clusters that share a backup history have the same cluster certificate. To view the cluster certificate of a cluster, use the DescribeClusters operation.

_IncorrectKeyException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified KMS key cannot decrypt the data. The KeyId in a Decrypt request and the SourceKeyId in a ReEncrypt request must identify the same KMS key that was used to encrypt the ciphertext.

_AlreadyExistsException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because it attempted to create a resource that already exists.

_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because a quota was exceeded. For more information, see Quotas in the Key Management Service Developer Guide.

AlgorithmSpec

newtype AlgorithmSpec Source #

Constructors

AlgorithmSpec' 

Instances

Instances details
Eq AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

Ord AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

Read AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

Show AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

Generic AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

Associated Types

type Rep AlgorithmSpec :: Type -> Type #

NFData AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

Methods

rnf :: AlgorithmSpec -> () #

Hashable AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

ToJSON AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

ToJSONKey AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

FromJSON AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

FromJSONKey AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

ToLog AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

ToHeader AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

ToQuery AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

FromXML AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

ToXML AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

Methods

toXML :: AlgorithmSpec -> XML #

ToByteString AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

FromText AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

ToText AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

Methods

toText :: AlgorithmSpec -> Text #

type Rep AlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.AlgorithmSpec

type Rep AlgorithmSpec = D1 ('MetaData "AlgorithmSpec" "Amazonka.KMS.Types.AlgorithmSpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "AlgorithmSpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromAlgorithmSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

ConnectionErrorCodeType

newtype ConnectionErrorCodeType Source #

Instances

Instances details
Eq ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

Ord ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

Read ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

Show ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

Generic ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

Associated Types

type Rep ConnectionErrorCodeType :: Type -> Type #

NFData ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

Methods

rnf :: ConnectionErrorCodeType -> () #

Hashable ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

ToJSON ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

ToJSONKey ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

FromJSON ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

FromJSONKey ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

ToLog ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

ToHeader ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

ToQuery ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

FromXML ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

ToXML ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

ToByteString ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

FromText ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

ToText ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

type Rep ConnectionErrorCodeType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionErrorCodeType

type Rep ConnectionErrorCodeType = D1 ('MetaData "ConnectionErrorCodeType" "Amazonka.KMS.Types.ConnectionErrorCodeType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "ConnectionErrorCodeType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromConnectionErrorCodeType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

ConnectionStateType

newtype ConnectionStateType Source #

Instances

Instances details
Eq ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

Ord ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

Read ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

Show ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

Generic ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

Associated Types

type Rep ConnectionStateType :: Type -> Type #

NFData ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

Methods

rnf :: ConnectionStateType -> () #

Hashable ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

ToJSON ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

ToJSONKey ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

FromJSON ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

FromJSONKey ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

ToLog ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

ToHeader ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

ToQuery ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

FromXML ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

ToXML ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

ToByteString ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

FromText ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

ToText ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

type Rep ConnectionStateType Source # 
Instance details

Defined in Amazonka.KMS.Types.ConnectionStateType

type Rep ConnectionStateType = D1 ('MetaData "ConnectionStateType" "Amazonka.KMS.Types.ConnectionStateType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "ConnectionStateType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromConnectionStateType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

CustomerMasterKeySpec

newtype CustomerMasterKeySpec Source #

Instances

Instances details
Eq CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

Ord CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

Read CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

Show CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

Generic CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

Associated Types

type Rep CustomerMasterKeySpec :: Type -> Type #

NFData CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

Methods

rnf :: CustomerMasterKeySpec -> () #

Hashable CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

ToJSON CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

ToJSONKey CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

FromJSON CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

FromJSONKey CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

ToLog CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

ToHeader CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

ToQuery CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

FromXML CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

ToXML CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

ToByteString CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

FromText CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

ToText CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

type Rep CustomerMasterKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomerMasterKeySpec

type Rep CustomerMasterKeySpec = D1 ('MetaData "CustomerMasterKeySpec" "Amazonka.KMS.Types.CustomerMasterKeySpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "CustomerMasterKeySpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromCustomerMasterKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

DataKeyPairSpec

newtype DataKeyPairSpec Source #

Constructors

DataKeyPairSpec' 

Instances

Instances details
Eq DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

Ord DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

Read DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

Show DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

Generic DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

Associated Types

type Rep DataKeyPairSpec :: Type -> Type #

NFData DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

Methods

rnf :: DataKeyPairSpec -> () #

Hashable DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

ToJSON DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

ToJSONKey DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

FromJSON DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

FromJSONKey DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

ToLog DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

ToHeader DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

ToQuery DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

FromXML DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

ToXML DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

Methods

toXML :: DataKeyPairSpec -> XML #

ToByteString DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

FromText DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

ToText DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

type Rep DataKeyPairSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeyPairSpec

type Rep DataKeyPairSpec = D1 ('MetaData "DataKeyPairSpec" "Amazonka.KMS.Types.DataKeyPairSpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "DataKeyPairSpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromDataKeyPairSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

DataKeySpec

newtype DataKeySpec Source #

Constructors

DataKeySpec' 

Bundled Patterns

pattern DataKeySpec_AES_128 :: DataKeySpec 
pattern DataKeySpec_AES_256 :: DataKeySpec 

Instances

Instances details
Eq DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

Ord DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

Read DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

Show DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

Generic DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

Associated Types

type Rep DataKeySpec :: Type -> Type #

NFData DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

Methods

rnf :: DataKeySpec -> () #

Hashable DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

ToJSON DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

ToJSONKey DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

FromJSON DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

FromJSONKey DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

ToLog DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

ToHeader DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

ToQuery DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

FromXML DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

ToXML DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

Methods

toXML :: DataKeySpec -> XML #

ToByteString DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

FromText DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

ToText DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

Methods

toText :: DataKeySpec -> Text #

type Rep DataKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.DataKeySpec

type Rep DataKeySpec = D1 ('MetaData "DataKeySpec" "Amazonka.KMS.Types.DataKeySpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "DataKeySpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromDataKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

EncryptionAlgorithmSpec

newtype EncryptionAlgorithmSpec Source #

Instances

Instances details
Eq EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

Ord EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

Read EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

Show EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

Generic EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

Associated Types

type Rep EncryptionAlgorithmSpec :: Type -> Type #

NFData EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

Methods

rnf :: EncryptionAlgorithmSpec -> () #

Hashable EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

ToJSON EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

ToJSONKey EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

FromJSON EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

FromJSONKey EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

ToLog EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

ToHeader EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

ToQuery EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

FromXML EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

ToXML EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

ToByteString EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

FromText EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

ToText EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

type Rep EncryptionAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec

type Rep EncryptionAlgorithmSpec = D1 ('MetaData "EncryptionAlgorithmSpec" "Amazonka.KMS.Types.EncryptionAlgorithmSpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "EncryptionAlgorithmSpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromEncryptionAlgorithmSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

ExpirationModelType

newtype ExpirationModelType Source #

Instances

Instances details
Eq ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

Ord ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

Read ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

Show ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

Generic ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

Associated Types

type Rep ExpirationModelType :: Type -> Type #

NFData ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

Methods

rnf :: ExpirationModelType -> () #

Hashable ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

ToJSON ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

ToJSONKey ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

FromJSON ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

FromJSONKey ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

ToLog ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

ToHeader ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

ToQuery ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

FromXML ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

ToXML ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

ToByteString ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

FromText ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

ToText ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

type Rep ExpirationModelType Source # 
Instance details

Defined in Amazonka.KMS.Types.ExpirationModelType

type Rep ExpirationModelType = D1 ('MetaData "ExpirationModelType" "Amazonka.KMS.Types.ExpirationModelType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "ExpirationModelType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromExpirationModelType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

GrantOperation

newtype GrantOperation Source #

Constructors

GrantOperation' 

Instances

Instances details
Eq GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

Ord GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

Read GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

Show GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

Generic GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

Associated Types

type Rep GrantOperation :: Type -> Type #

NFData GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

Methods

rnf :: GrantOperation -> () #

Hashable GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

ToJSON GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

ToJSONKey GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

FromJSON GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

FromJSONKey GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

ToLog GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

ToHeader GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

ToQuery GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

FromXML GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

ToXML GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

Methods

toXML :: GrantOperation -> XML #

ToByteString GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

FromText GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

ToText GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

type Rep GrantOperation Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantOperation

type Rep GrantOperation = D1 ('MetaData "GrantOperation" "Amazonka.KMS.Types.GrantOperation" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "GrantOperation'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromGrantOperation") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

KeyManagerType

newtype KeyManagerType Source #

Constructors

KeyManagerType' 

Instances

Instances details
Eq KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

Ord KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

Read KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

Show KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

Generic KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

Associated Types

type Rep KeyManagerType :: Type -> Type #

NFData KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

Methods

rnf :: KeyManagerType -> () #

Hashable KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

ToJSON KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

ToJSONKey KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

FromJSON KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

FromJSONKey KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

ToLog KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

ToHeader KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

ToQuery KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

FromXML KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

ToXML KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

Methods

toXML :: KeyManagerType -> XML #

ToByteString KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

FromText KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

ToText KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

type Rep KeyManagerType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyManagerType

type Rep KeyManagerType = D1 ('MetaData "KeyManagerType" "Amazonka.KMS.Types.KeyManagerType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "KeyManagerType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromKeyManagerType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

KeySpec

newtype KeySpec Source #

Constructors

KeySpec' 

Fields

Instances

Instances details
Eq KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Methods

(==) :: KeySpec -> KeySpec -> Bool #

(/=) :: KeySpec -> KeySpec -> Bool #

Ord KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Read KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Show KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Generic KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Associated Types

type Rep KeySpec :: Type -> Type #

Methods

from :: KeySpec -> Rep KeySpec x #

to :: Rep KeySpec x -> KeySpec #

NFData KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Methods

rnf :: KeySpec -> () #

Hashable KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Methods

hashWithSalt :: Int -> KeySpec -> Int #

hash :: KeySpec -> Int #

ToJSON KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

ToJSONKey KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

FromJSON KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

FromJSONKey KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

ToLog KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

ToHeader KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Methods

toHeader :: HeaderName -> KeySpec -> [Header] #

ToQuery KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

FromXML KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

ToXML KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Methods

toXML :: KeySpec -> XML #

ToByteString KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Methods

toBS :: KeySpec -> ByteString #

FromText KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

ToText KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

Methods

toText :: KeySpec -> Text #

type Rep KeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.KeySpec

type Rep KeySpec = D1 ('MetaData "KeySpec" "Amazonka.KMS.Types.KeySpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "KeySpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

KeyState

newtype KeyState Source #

Constructors

KeyState' 

Fields

Instances

Instances details
Eq KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Ord KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Read KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Show KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Generic KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Associated Types

type Rep KeyState :: Type -> Type #

Methods

from :: KeyState -> Rep KeyState x #

to :: Rep KeyState x -> KeyState #

NFData KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Methods

rnf :: KeyState -> () #

Hashable KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Methods

hashWithSalt :: Int -> KeyState -> Int #

hash :: KeyState -> Int #

ToJSON KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

ToJSONKey KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

FromJSON KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

FromJSONKey KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

ToLog KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

ToHeader KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Methods

toHeader :: HeaderName -> KeyState -> [Header] #

ToQuery KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

FromXML KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

ToXML KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Methods

toXML :: KeyState -> XML #

ToByteString KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Methods

toBS :: KeyState -> ByteString #

FromText KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

ToText KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

Methods

toText :: KeyState -> Text #

type Rep KeyState Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyState

type Rep KeyState = D1 ('MetaData "KeyState" "Amazonka.KMS.Types.KeyState" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "KeyState'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromKeyState") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

KeyUsageType

newtype KeyUsageType Source #

Constructors

KeyUsageType' 

Instances

Instances details
Eq KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

Ord KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

Read KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

Show KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

Generic KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

Associated Types

type Rep KeyUsageType :: Type -> Type #

NFData KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

Methods

rnf :: KeyUsageType -> () #

Hashable KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

ToJSON KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

ToJSONKey KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

FromJSON KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

FromJSONKey KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

ToLog KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

ToHeader KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

ToQuery KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

FromXML KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

ToXML KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

Methods

toXML :: KeyUsageType -> XML #

ToByteString KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

FromText KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

ToText KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

Methods

toText :: KeyUsageType -> Text #

type Rep KeyUsageType Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyUsageType

type Rep KeyUsageType = D1 ('MetaData "KeyUsageType" "Amazonka.KMS.Types.KeyUsageType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "KeyUsageType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromKeyUsageType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

MessageType

newtype MessageType Source #

Constructors

MessageType' 

Bundled Patterns

pattern MessageType_DIGEST :: MessageType 
pattern MessageType_RAW :: MessageType 

Instances

Instances details
Eq MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

Ord MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

Read MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

Show MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

Generic MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

Associated Types

type Rep MessageType :: Type -> Type #

NFData MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

Methods

rnf :: MessageType -> () #

Hashable MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

ToJSON MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

ToJSONKey MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

FromJSON MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

FromJSONKey MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

ToLog MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

ToHeader MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

ToQuery MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

FromXML MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

ToXML MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

Methods

toXML :: MessageType -> XML #

ToByteString MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

FromText MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

ToText MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

Methods

toText :: MessageType -> Text #

type Rep MessageType Source # 
Instance details

Defined in Amazonka.KMS.Types.MessageType

type Rep MessageType = D1 ('MetaData "MessageType" "Amazonka.KMS.Types.MessageType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "MessageType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromMessageType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

MultiRegionKeyType

newtype MultiRegionKeyType Source #

Instances

Instances details
Eq MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

Ord MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

Read MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

Show MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

Generic MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

Associated Types

type Rep MultiRegionKeyType :: Type -> Type #

NFData MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

Methods

rnf :: MultiRegionKeyType -> () #

Hashable MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

ToJSON MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

ToJSONKey MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

FromJSON MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

FromJSONKey MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

ToLog MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

ToHeader MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

ToQuery MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

FromXML MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

ToXML MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

ToByteString MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

FromText MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

ToText MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

type Rep MultiRegionKeyType Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKeyType

type Rep MultiRegionKeyType = D1 ('MetaData "MultiRegionKeyType" "Amazonka.KMS.Types.MultiRegionKeyType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "MultiRegionKeyType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromMultiRegionKeyType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

OriginType

newtype OriginType Source #

Constructors

OriginType' 

Fields

Instances

Instances details
Eq OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

Ord OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

Read OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

Show OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

Generic OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

Associated Types

type Rep OriginType :: Type -> Type #

NFData OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

Methods

rnf :: OriginType -> () #

Hashable OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

ToJSON OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

ToJSONKey OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

FromJSON OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

FromJSONKey OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

ToLog OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

ToHeader OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

ToQuery OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

FromXML OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

ToXML OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

Methods

toXML :: OriginType -> XML #

ToByteString OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

FromText OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

ToText OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

Methods

toText :: OriginType -> Text #

type Rep OriginType Source # 
Instance details

Defined in Amazonka.KMS.Types.OriginType

type Rep OriginType = D1 ('MetaData "OriginType" "Amazonka.KMS.Types.OriginType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "OriginType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromOriginType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

SigningAlgorithmSpec

newtype SigningAlgorithmSpec Source #

Instances

Instances details
Eq SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

Ord SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

Read SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

Show SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

Generic SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

Associated Types

type Rep SigningAlgorithmSpec :: Type -> Type #

NFData SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

Methods

rnf :: SigningAlgorithmSpec -> () #

Hashable SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

ToJSON SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

ToJSONKey SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

FromJSON SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

FromJSONKey SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

ToLog SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

ToHeader SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

ToQuery SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

FromXML SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

ToXML SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

ToByteString SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

FromText SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

ToText SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

type Rep SigningAlgorithmSpec Source # 
Instance details

Defined in Amazonka.KMS.Types.SigningAlgorithmSpec

type Rep SigningAlgorithmSpec = D1 ('MetaData "SigningAlgorithmSpec" "Amazonka.KMS.Types.SigningAlgorithmSpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "SigningAlgorithmSpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromSigningAlgorithmSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

WrappingKeySpec

newtype WrappingKeySpec Source #

Constructors

WrappingKeySpec' 

Bundled Patterns

pattern WrappingKeySpec_RSA_2048 :: WrappingKeySpec 

Instances

Instances details
Eq WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

Ord WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

Read WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

Show WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

Generic WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

Associated Types

type Rep WrappingKeySpec :: Type -> Type #

NFData WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

Methods

rnf :: WrappingKeySpec -> () #

Hashable WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

ToJSON WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

ToJSONKey WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

FromJSON WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

FromJSONKey WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

ToLog WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

ToHeader WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

ToQuery WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

FromXML WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

ToXML WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

Methods

toXML :: WrappingKeySpec -> XML #

ToByteString WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

FromText WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

ToText WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

type Rep WrappingKeySpec Source # 
Instance details

Defined in Amazonka.KMS.Types.WrappingKeySpec

type Rep WrappingKeySpec = D1 ('MetaData "WrappingKeySpec" "Amazonka.KMS.Types.WrappingKeySpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "WrappingKeySpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromWrappingKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

AliasListEntry

data AliasListEntry Source #

Contains information about an alias.

See: newAliasListEntry smart constructor.

Constructors

AliasListEntry' 

Fields

  • targetKeyId :: Maybe Text

    String that contains the key identifier of the KMS key associated with the alias.

  • aliasName :: Maybe Text

    String that contains the alias. This value begins with alias/.

  • creationDate :: Maybe POSIX

    Date and time that the alias was most recently created in the account and Region. Formatted as Unix time.

  • lastUpdatedDate :: Maybe POSIX

    Date and time that the alias was most recently associated with a KMS key in the account and Region. Formatted as Unix time.

  • aliasArn :: Maybe Text

    String that contains the key ARN.

Instances

Instances details
Eq AliasListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.AliasListEntry

Read AliasListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.AliasListEntry

Show AliasListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.AliasListEntry

Generic AliasListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.AliasListEntry

Associated Types

type Rep AliasListEntry :: Type -> Type #

NFData AliasListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.AliasListEntry

Methods

rnf :: AliasListEntry -> () #

Hashable AliasListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.AliasListEntry

FromJSON AliasListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.AliasListEntry

type Rep AliasListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.AliasListEntry

type Rep AliasListEntry = D1 ('MetaData "AliasListEntry" "Amazonka.KMS.Types.AliasListEntry" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "AliasListEntry'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "targetKeyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "aliasName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "creationDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :*: (S1 ('MetaSel ('Just "lastUpdatedDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :*: S1 ('MetaSel ('Just "aliasArn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))))

newAliasListEntry :: AliasListEntry Source #

Create a value of AliasListEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:targetKeyId:AliasListEntry', aliasListEntry_targetKeyId - String that contains the key identifier of the KMS key associated with the alias.

$sel:aliasName:AliasListEntry', aliasListEntry_aliasName - String that contains the alias. This value begins with alias/.

$sel:creationDate:AliasListEntry', aliasListEntry_creationDate - Date and time that the alias was most recently created in the account and Region. Formatted as Unix time.

$sel:lastUpdatedDate:AliasListEntry', aliasListEntry_lastUpdatedDate - Date and time that the alias was most recently associated with a KMS key in the account and Region. Formatted as Unix time.

$sel:aliasArn:AliasListEntry', aliasListEntry_aliasArn - String that contains the key ARN.

aliasListEntry_targetKeyId :: Lens' AliasListEntry (Maybe Text) Source #

String that contains the key identifier of the KMS key associated with the alias.

aliasListEntry_aliasName :: Lens' AliasListEntry (Maybe Text) Source #

String that contains the alias. This value begins with alias/.

aliasListEntry_creationDate :: Lens' AliasListEntry (Maybe UTCTime) Source #

Date and time that the alias was most recently created in the account and Region. Formatted as Unix time.

aliasListEntry_lastUpdatedDate :: Lens' AliasListEntry (Maybe UTCTime) Source #

Date and time that the alias was most recently associated with a KMS key in the account and Region. Formatted as Unix time.

aliasListEntry_aliasArn :: Lens' AliasListEntry (Maybe Text) Source #

String that contains the key ARN.

CustomKeyStoresListEntry

data CustomKeyStoresListEntry Source #

Contains information about each custom key store in the custom key store list.

See: newCustomKeyStoresListEntry smart constructor.

Constructors

CustomKeyStoresListEntry' 

Fields

  • customKeyStoreName :: Maybe Text

    The user-specified friendly name for the custom key store.

  • trustAnchorCertificate :: Maybe Text

    The trust anchor certificate of the associated CloudHSM cluster. When you initialize the cluster, you create this certificate and save it in the customerCA.crt file.

  • connectionErrorCode :: Maybe ConnectionErrorCodeType

    Describes the connection error. This field appears in the response only when the ConnectionState is FAILED. For help resolving these errors, see How to Fix a Connection Failure in Key Management Service Developer Guide.

    Valid values are:

    • CLUSTER_NOT_FOUND - KMS cannot find the CloudHSM cluster with the specified cluster ID.
    • INSUFFICIENT_CLOUDHSM_HSMS - The associated CloudHSM cluster does not contain any active HSMs. To connect a custom key store to its CloudHSM cluster, the cluster must contain at least one active HSM.
    • INTERNAL_ERROR - KMS could not complete the request due to an internal error. Retry the request. For ConnectCustomKeyStore requests, disconnect the custom key store before trying to connect again.
    • INVALID_CREDENTIALS - KMS does not have the correct password for the kmsuser crypto user in the CloudHSM cluster. Before you can connect your custom key store to its CloudHSM cluster, you must change the kmsuser account password and update the key store password value for the custom key store.
    • NETWORK_ERRORS - Network errors are preventing KMS from connecting to the custom key store.
    • SUBNET_NOT_FOUND - A subnet in the CloudHSM cluster configuration was deleted. If KMS cannot find all of the subnets in the cluster configuration, attempts to connect the custom key store to the CloudHSM cluster fail. To fix this error, create a cluster from a recent backup and associate it with your custom key store. (This process creates a new cluster configuration with a VPC and private subnets.) For details, see How to Fix a Connection Failure in the Key Management Service Developer Guide.
    • USER_LOCKED_OUT - The kmsuser CU account is locked out of the associated CloudHSM cluster due to too many failed password attempts. Before you can connect your custom key store to its CloudHSM cluster, you must change the kmsuser account password and update the key store password value for the custom key store.
    • USER_LOGGED_IN - The kmsuser CU account is logged into the the associated CloudHSM cluster. This prevents KMS from rotating the kmsuser account password and logging into the cluster. Before you can connect your custom key store to its CloudHSM cluster, you must log the kmsuser CU out of the cluster. If you changed the kmsuser password to log into the cluster, you must also and update the key store password value for the custom key store. For help, see How to Log Out and Reconnect in the Key Management Service Developer Guide.
    • USER_NOT_FOUND - KMS cannot find a kmsuser CU account in the associated CloudHSM cluster. Before you can connect your custom key store to its CloudHSM cluster, you must create a kmsuser CU account in the cluster, and then update the key store password value for the custom key store.
  • creationDate :: Maybe POSIX

    The date and time when the custom key store was created.

  • cloudHsmClusterId :: Maybe Text

    A unique identifier for the CloudHSM cluster that is associated with the custom key store.

  • customKeyStoreId :: Maybe Text

    A unique identifier for the custom key store.

  • connectionState :: Maybe ConnectionStateType

    Indicates whether the custom key store is connected to its CloudHSM cluster.

    You can create and use KMS keys in your custom key stores only when its connection state is CONNECTED.

    The value is DISCONNECTED if the key store has never been connected or you use the DisconnectCustomKeyStore operation to disconnect it. If the value is CONNECTED but you are having trouble using the custom key store, make sure that its associated CloudHSM cluster is active and contains at least one active HSM.

    A value of FAILED indicates that an attempt to connect was unsuccessful. The ConnectionErrorCode field in the response indicates the cause of the failure. For help resolving a connection failure, see Troubleshooting a Custom Key Store in the Key Management Service Developer Guide.

Instances

Instances details
Eq CustomKeyStoresListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry

Read CustomKeyStoresListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry

Show CustomKeyStoresListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry

Generic CustomKeyStoresListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry

Associated Types

type Rep CustomKeyStoresListEntry :: Type -> Type #

NFData CustomKeyStoresListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry

Hashable CustomKeyStoresListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry

FromJSON CustomKeyStoresListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry

type Rep CustomKeyStoresListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry

type Rep CustomKeyStoresListEntry = D1 ('MetaData "CustomKeyStoresListEntry" "Amazonka.KMS.Types.CustomKeyStoresListEntry" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CustomKeyStoresListEntry'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "customKeyStoreName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: (S1 ('MetaSel ('Just "trustAnchorCertificate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "connectionErrorCode") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ConnectionErrorCodeType)))) :*: ((S1 ('MetaSel ('Just "creationDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :*: S1 ('MetaSel ('Just "cloudHsmClusterId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "connectionState") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ConnectionStateType))))))

newCustomKeyStoresListEntry :: CustomKeyStoresListEntry Source #

Create a value of CustomKeyStoresListEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:customKeyStoreName:CustomKeyStoresListEntry', customKeyStoresListEntry_customKeyStoreName - The user-specified friendly name for the custom key store.

$sel:trustAnchorCertificate:CustomKeyStoresListEntry', customKeyStoresListEntry_trustAnchorCertificate - The trust anchor certificate of the associated CloudHSM cluster. When you initialize the cluster, you create this certificate and save it in the customerCA.crt file.

$sel:connectionErrorCode:CustomKeyStoresListEntry', customKeyStoresListEntry_connectionErrorCode - Describes the connection error. This field appears in the response only when the ConnectionState is FAILED. For help resolving these errors, see How to Fix a Connection Failure in Key Management Service Developer Guide.

Valid values are:

  • CLUSTER_NOT_FOUND - KMS cannot find the CloudHSM cluster with the specified cluster ID.
  • INSUFFICIENT_CLOUDHSM_HSMS - The associated CloudHSM cluster does not contain any active HSMs. To connect a custom key store to its CloudHSM cluster, the cluster must contain at least one active HSM.
  • INTERNAL_ERROR - KMS could not complete the request due to an internal error. Retry the request. For ConnectCustomKeyStore requests, disconnect the custom key store before trying to connect again.
  • INVALID_CREDENTIALS - KMS does not have the correct password for the kmsuser crypto user in the CloudHSM cluster. Before you can connect your custom key store to its CloudHSM cluster, you must change the kmsuser account password and update the key store password value for the custom key store.
  • NETWORK_ERRORS - Network errors are preventing KMS from connecting to the custom key store.
  • SUBNET_NOT_FOUND - A subnet in the CloudHSM cluster configuration was deleted. If KMS cannot find all of the subnets in the cluster configuration, attempts to connect the custom key store to the CloudHSM cluster fail. To fix this error, create a cluster from a recent backup and associate it with your custom key store. (This process creates a new cluster configuration with a VPC and private subnets.) For details, see How to Fix a Connection Failure in the Key Management Service Developer Guide.
  • USER_LOCKED_OUT - The kmsuser CU account is locked out of the associated CloudHSM cluster due to too many failed password attempts. Before you can connect your custom key store to its CloudHSM cluster, you must change the kmsuser account password and update the key store password value for the custom key store.
  • USER_LOGGED_IN - The kmsuser CU account is logged into the the associated CloudHSM cluster. This prevents KMS from rotating the kmsuser account password and logging into the cluster. Before you can connect your custom key store to its CloudHSM cluster, you must log the kmsuser CU out of the cluster. If you changed the kmsuser password to log into the cluster, you must also and update the key store password value for the custom key store. For help, see How to Log Out and Reconnect in the Key Management Service Developer Guide.
  • USER_NOT_FOUND - KMS cannot find a kmsuser CU account in the associated CloudHSM cluster. Before you can connect your custom key store to its CloudHSM cluster, you must create a kmsuser CU account in the cluster, and then update the key store password value for the custom key store.

$sel:creationDate:CustomKeyStoresListEntry', customKeyStoresListEntry_creationDate - The date and time when the custom key store was created.

$sel:cloudHsmClusterId:CustomKeyStoresListEntry', customKeyStoresListEntry_cloudHsmClusterId - A unique identifier for the CloudHSM cluster that is associated with the custom key store.

$sel:customKeyStoreId:CustomKeyStoresListEntry', customKeyStoresListEntry_customKeyStoreId - A unique identifier for the custom key store.

$sel:connectionState:CustomKeyStoresListEntry', customKeyStoresListEntry_connectionState - Indicates whether the custom key store is connected to its CloudHSM cluster.

You can create and use KMS keys in your custom key stores only when its connection state is CONNECTED.

The value is DISCONNECTED if the key store has never been connected or you use the DisconnectCustomKeyStore operation to disconnect it. If the value is CONNECTED but you are having trouble using the custom key store, make sure that its associated CloudHSM cluster is active and contains at least one active HSM.

A value of FAILED indicates that an attempt to connect was unsuccessful. The ConnectionErrorCode field in the response indicates the cause of the failure. For help resolving a connection failure, see Troubleshooting a Custom Key Store in the Key Management Service Developer Guide.

customKeyStoresListEntry_customKeyStoreName :: Lens' CustomKeyStoresListEntry (Maybe Text) Source #

The user-specified friendly name for the custom key store.

customKeyStoresListEntry_trustAnchorCertificate :: Lens' CustomKeyStoresListEntry (Maybe Text) Source #

The trust anchor certificate of the associated CloudHSM cluster. When you initialize the cluster, you create this certificate and save it in the customerCA.crt file.

customKeyStoresListEntry_connectionErrorCode :: Lens' CustomKeyStoresListEntry (Maybe ConnectionErrorCodeType) Source #

Describes the connection error. This field appears in the response only when the ConnectionState is FAILED. For help resolving these errors, see How to Fix a Connection Failure in Key Management Service Developer Guide.

Valid values are:

  • CLUSTER_NOT_FOUND - KMS cannot find the CloudHSM cluster with the specified cluster ID.
  • INSUFFICIENT_CLOUDHSM_HSMS - The associated CloudHSM cluster does not contain any active HSMs. To connect a custom key store to its CloudHSM cluster, the cluster must contain at least one active HSM.
  • INTERNAL_ERROR - KMS could not complete the request due to an internal error. Retry the request. For ConnectCustomKeyStore requests, disconnect the custom key store before trying to connect again.
  • INVALID_CREDENTIALS - KMS does not have the correct password for the kmsuser crypto user in the CloudHSM cluster. Before you can connect your custom key store to its CloudHSM cluster, you must change the kmsuser account password and update the key store password value for the custom key store.
  • NETWORK_ERRORS - Network errors are preventing KMS from connecting to the custom key store.
  • SUBNET_NOT_FOUND - A subnet in the CloudHSM cluster configuration was deleted. If KMS cannot find all of the subnets in the cluster configuration, attempts to connect the custom key store to the CloudHSM cluster fail. To fix this error, create a cluster from a recent backup and associate it with your custom key store. (This process creates a new cluster configuration with a VPC and private subnets.) For details, see How to Fix a Connection Failure in the Key Management Service Developer Guide.
  • USER_LOCKED_OUT - The kmsuser CU account is locked out of the associated CloudHSM cluster due to too many failed password attempts. Before you can connect your custom key store to its CloudHSM cluster, you must change the kmsuser account password and update the key store password value for the custom key store.
  • USER_LOGGED_IN - The kmsuser CU account is logged into the the associated CloudHSM cluster. This prevents KMS from rotating the kmsuser account password and logging into the cluster. Before you can connect your custom key store to its CloudHSM cluster, you must log the kmsuser CU out of the cluster. If you changed the kmsuser password to log into the cluster, you must also and update the key store password value for the custom key store. For help, see How to Log Out and Reconnect in the Key Management Service Developer Guide.
  • USER_NOT_FOUND - KMS cannot find a kmsuser CU account in the associated CloudHSM cluster. Before you can connect your custom key store to its CloudHSM cluster, you must create a kmsuser CU account in the cluster, and then update the key store password value for the custom key store.

customKeyStoresListEntry_creationDate :: Lens' CustomKeyStoresListEntry (Maybe UTCTime) Source #

The date and time when the custom key store was created.

customKeyStoresListEntry_cloudHsmClusterId :: Lens' CustomKeyStoresListEntry (Maybe Text) Source #

A unique identifier for the CloudHSM cluster that is associated with the custom key store.

customKeyStoresListEntry_connectionState :: Lens' CustomKeyStoresListEntry (Maybe ConnectionStateType) Source #

Indicates whether the custom key store is connected to its CloudHSM cluster.

You can create and use KMS keys in your custom key stores only when its connection state is CONNECTED.

The value is DISCONNECTED if the key store has never been connected or you use the DisconnectCustomKeyStore operation to disconnect it. If the value is CONNECTED but you are having trouble using the custom key store, make sure that its associated CloudHSM cluster is active and contains at least one active HSM.

A value of FAILED indicates that an attempt to connect was unsuccessful. The ConnectionErrorCode field in the response indicates the cause of the failure. For help resolving a connection failure, see Troubleshooting a Custom Key Store in the Key Management Service Developer Guide.

GrantConstraints

data GrantConstraints Source #

Use this structure to allow cryptographic operations in the grant only when the operation request includes the specified encryption context.

KMS applies the grant constraints only to cryptographic operations that support an encryption context, that is, all cryptographic operations with a symmetric KMS key. Grant constraints are not applied to operations that do not support an encryption context, such as cryptographic operations with asymmetric KMS keys and management operations, such as DescribeKey or RetireGrant.

In a cryptographic operation, the encryption context in the decryption operation must be an exact, case-sensitive match for the keys and values in the encryption context of the encryption operation. Only the order of the pairs can vary.

However, in a grant constraint, the key in each key-value pair is not case sensitive, but the value is case sensitive.

To avoid confusion, do not use multiple encryption context pairs that differ only by case. To require a fully case-sensitive encryption context, use the kms:EncryptionContext: and kms:EncryptionContextKeys conditions in an IAM or key policy. For details, see kms:EncryptionContext: in the /Key Management Service Developer Guide/ .

See: newGrantConstraints smart constructor.

Constructors

GrantConstraints' 

Fields

  • encryptionContextEquals :: Maybe (HashMap Text Text)

    A list of key-value pairs that must match the encryption context in the cryptographic operation request. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint.

  • encryptionContextSubset :: Maybe (HashMap Text Text)

    A list of key-value pairs that must be included in the encryption context of the cryptographic operation request. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs.

Instances

Instances details
Eq GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

Read GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

Show GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

Generic GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

Associated Types

type Rep GrantConstraints :: Type -> Type #

NFData GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

Methods

rnf :: GrantConstraints -> () #

Hashable GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

ToJSON GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

FromJSON GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

type Rep GrantConstraints Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantConstraints

type Rep GrantConstraints = D1 ('MetaData "GrantConstraints" "Amazonka.KMS.Types.GrantConstraints" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GrantConstraints'" 'PrefixI 'True) (S1 ('MetaSel ('Just "encryptionContextEquals") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text))) :*: S1 ('MetaSel ('Just "encryptionContextSubset") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text)))))

newGrantConstraints :: GrantConstraints Source #

Create a value of GrantConstraints with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:encryptionContextEquals:GrantConstraints', grantConstraints_encryptionContextEquals - A list of key-value pairs that must match the encryption context in the cryptographic operation request. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint.

$sel:encryptionContextSubset:GrantConstraints', grantConstraints_encryptionContextSubset - A list of key-value pairs that must be included in the encryption context of the cryptographic operation request. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs.

grantConstraints_encryptionContextEquals :: Lens' GrantConstraints (Maybe (HashMap Text Text)) Source #

A list of key-value pairs that must match the encryption context in the cryptographic operation request. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint.

grantConstraints_encryptionContextSubset :: Lens' GrantConstraints (Maybe (HashMap Text Text)) Source #

A list of key-value pairs that must be included in the encryption context of the cryptographic operation request. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs.

GrantListEntry

data GrantListEntry Source #

Contains information about a grant.

See: newGrantListEntry smart constructor.

Constructors

GrantListEntry' 

Fields

  • keyId :: Maybe Text

    The unique identifier for the KMS key to which the grant applies.

  • retiringPrincipal :: Maybe Text

    The principal that can retire the grant.

  • issuingAccount :: Maybe Text

    The Amazon Web Services account under which the grant was issued.

  • grantId :: Maybe Text

    The unique identifier for the grant.

  • constraints :: Maybe GrantConstraints

    A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows.

  • granteePrincipal :: Maybe Text

    The identity that gets the permissions in the grant.

    The GranteePrincipal field in the ListGrants response usually contains the user or role designated as the grantee principal in the grant. However, when the grantee principal in the grant is an Amazon Web Services service, the GranteePrincipal field contains the service principal, which might represent several different grantee principals.

  • name :: Maybe Text

    The friendly name that identifies the grant. If a name was provided in the CreateGrant request, that name is returned. Otherwise this value is null.

  • creationDate :: Maybe POSIX

    The date and time when the grant was created.

  • operations :: Maybe [GrantOperation]

    The list of operations permitted by the grant.

Instances

Instances details
Eq GrantListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantListEntry

Read GrantListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantListEntry

Show GrantListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantListEntry

Generic GrantListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantListEntry

Associated Types

type Rep GrantListEntry :: Type -> Type #

NFData GrantListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantListEntry

Methods

rnf :: GrantListEntry -> () #

Hashable GrantListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantListEntry

FromJSON GrantListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantListEntry

type Rep GrantListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.GrantListEntry

newGrantListEntry :: GrantListEntry Source #

Create a value of GrantListEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GrantListEntry', grantListEntry_keyId - The unique identifier for the KMS key to which the grant applies.

$sel:retiringPrincipal:GrantListEntry', grantListEntry_retiringPrincipal - The principal that can retire the grant.

$sel:issuingAccount:GrantListEntry', grantListEntry_issuingAccount - The Amazon Web Services account under which the grant was issued.

$sel:grantId:GrantListEntry', grantListEntry_grantId - The unique identifier for the grant.

$sel:constraints:GrantListEntry', grantListEntry_constraints - A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows.

$sel:granteePrincipal:GrantListEntry', grantListEntry_granteePrincipal - The identity that gets the permissions in the grant.

The GranteePrincipal field in the ListGrants response usually contains the user or role designated as the grantee principal in the grant. However, when the grantee principal in the grant is an Amazon Web Services service, the GranteePrincipal field contains the service principal, which might represent several different grantee principals.

$sel:name:GrantListEntry', grantListEntry_name - The friendly name that identifies the grant. If a name was provided in the CreateGrant request, that name is returned. Otherwise this value is null.

$sel:creationDate:GrantListEntry', grantListEntry_creationDate - The date and time when the grant was created.

$sel:operations:GrantListEntry', grantListEntry_operations - The list of operations permitted by the grant.

grantListEntry_keyId :: Lens' GrantListEntry (Maybe Text) Source #

The unique identifier for the KMS key to which the grant applies.

grantListEntry_retiringPrincipal :: Lens' GrantListEntry (Maybe Text) Source #

The principal that can retire the grant.

grantListEntry_issuingAccount :: Lens' GrantListEntry (Maybe Text) Source #

The Amazon Web Services account under which the grant was issued.

grantListEntry_grantId :: Lens' GrantListEntry (Maybe Text) Source #

The unique identifier for the grant.

grantListEntry_constraints :: Lens' GrantListEntry (Maybe GrantConstraints) Source #

A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows.

grantListEntry_granteePrincipal :: Lens' GrantListEntry (Maybe Text) Source #

The identity that gets the permissions in the grant.

The GranteePrincipal field in the ListGrants response usually contains the user or role designated as the grantee principal in the grant. However, when the grantee principal in the grant is an Amazon Web Services service, the GranteePrincipal field contains the service principal, which might represent several different grantee principals.

grantListEntry_name :: Lens' GrantListEntry (Maybe Text) Source #

The friendly name that identifies the grant. If a name was provided in the CreateGrant request, that name is returned. Otherwise this value is null.

grantListEntry_creationDate :: Lens' GrantListEntry (Maybe UTCTime) Source #

The date and time when the grant was created.

grantListEntry_operations :: Lens' GrantListEntry (Maybe [GrantOperation]) Source #

The list of operations permitted by the grant.

KeyListEntry

data KeyListEntry Source #

Contains information about each entry in the key list.

See: newKeyListEntry smart constructor.

Constructors

KeyListEntry' 

Fields

Instances

Instances details
Eq KeyListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyListEntry

Read KeyListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyListEntry

Show KeyListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyListEntry

Generic KeyListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyListEntry

Associated Types

type Rep KeyListEntry :: Type -> Type #

NFData KeyListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyListEntry

Methods

rnf :: KeyListEntry -> () #

Hashable KeyListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyListEntry

FromJSON KeyListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyListEntry

type Rep KeyListEntry Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyListEntry

type Rep KeyListEntry = D1 ('MetaData "KeyListEntry" "Amazonka.KMS.Types.KeyListEntry" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "KeyListEntry'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "keyArn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))

newKeyListEntry :: KeyListEntry Source #

Create a value of KeyListEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:KeyListEntry', keyListEntry_keyId - Unique identifier of the key.

$sel:keyArn:KeyListEntry', keyListEntry_keyArn - ARN of the key.

keyListEntry_keyId :: Lens' KeyListEntry (Maybe Text) Source #

Unique identifier of the key.

KeyMetadata

data KeyMetadata Source #

Contains metadata about a KMS key.

This data type is used as a response element for the CreateKey and DescribeKey operations.

See: newKeyMetadata smart constructor.

Constructors

KeyMetadata' 

Fields

  • origin :: Maybe OriginType

    The source of the key material for the KMS key. When this value is AWS_KMS, KMS created the key material. When this value is EXTERNAL, the key material was imported or the KMS key doesn't have any key material. When this value is AWS_CLOUDHSM, the key material was created in the CloudHSM cluster associated with a custom key store.

  • expirationModel :: Maybe ExpirationModelType

    Specifies whether the KMS key's key material expires. This value is present only when Origin is EXTERNAL, otherwise this value is omitted.

  • keyManager :: Maybe KeyManagerType

    The manager of the KMS key. KMS keys in your Amazon Web Services account are either customer managed or Amazon Web Services managed. For more information about the difference, see KMS keys in the Key Management Service Developer Guide.

  • keySpec :: Maybe KeySpec

    Describes the type of key material in the KMS key.

  • customerMasterKeySpec :: Maybe CustomerMasterKeySpec

    Instead, use the KeySpec field.

    The KeySpec and CustomerMasterKeySpec fields have the same value. We recommend that you use the KeySpec field in your code. However, to avoid breaking changes, KMS will support both fields.

  • enabled :: Maybe Bool

    Specifies whether the KMS key is enabled. When KeyState is Enabled this value is true, otherwise it is false.

  • validTo :: Maybe POSIX

    The time at which the imported key material expires. When the key material expires, KMS deletes the key material and the KMS key becomes unusable. This value is present only for KMS keys whose Origin is EXTERNAL and whose ExpirationModel is KEY_MATERIAL_EXPIRES, otherwise this value is omitted.

  • arn :: Maybe Text

    The Amazon Resource Name (ARN) of the KMS key. For examples, see Key Management Service (KMS) in the Example ARNs section of the /Amazon Web Services General Reference/.

  • keyState :: Maybe KeyState

    The current status of the KMS key.

    For more information about how key state affects the use of a KMS key, see Key state: Effect on your KMS key in the Key Management Service Developer Guide.

  • encryptionAlgorithms :: Maybe [EncryptionAlgorithmSpec]

    The encryption algorithms that the KMS key supports. You cannot use the KMS key with other encryption algorithms within KMS.

    This value is present only when the KeyUsage of the KMS key is ENCRYPT_DECRYPT.

  • aWSAccountId :: Maybe Text

    The twelve-digit account ID of the Amazon Web Services account that owns the KMS key.

  • signingAlgorithms :: Maybe [SigningAlgorithmSpec]

    The signing algorithms that the KMS key supports. You cannot use the KMS key with other signing algorithms within KMS.

    This field appears only when the KeyUsage of the KMS key is SIGN_VERIFY.

  • pendingDeletionWindowInDays :: Maybe Natural

    The waiting period before the primary key in a multi-Region key is deleted. This waiting period begins when the last of its replica keys is deleted. This value is present only when the KeyState of the KMS key is PendingReplicaDeletion. That indicates that the KMS key is the primary key in a multi-Region key, it is scheduled for deletion, and it still has existing replica keys.

    When a single-Region KMS key or a multi-Region replica key is scheduled for deletion, its deletion date is displayed in the DeletionDate field. However, when the primary key in a multi-Region key is scheduled for deletion, its waiting period doesn't begin until all of its replica keys are deleted. This value displays that waiting period. When the last replica key in the multi-Region key is deleted, the KeyState of the scheduled primary key changes from PendingReplicaDeletion to PendingDeletion and the deletion date appears in the DeletionDate field.

  • keyUsage :: Maybe KeyUsageType

    The cryptographic operations for which you can use the KMS key.

  • creationDate :: Maybe POSIX

    The date and time when the KMS key was created.

  • deletionDate :: Maybe POSIX

    The date and time after which KMS deletes this KMS key. This value is present only when the KMS key is scheduled for deletion, that is, when its KeyState is PendingDeletion.

    When the primary key in a multi-Region key is scheduled for deletion but still has replica keys, its key state is PendingReplicaDeletion and the length of its waiting period is displayed in the PendingDeletionWindowInDays field.

  • cloudHsmClusterId :: Maybe Text

    The cluster ID of the CloudHSM cluster that contains the key material for the KMS key. When you create a KMS key in a custom key store, KMS creates the key material for the KMS key in the associated CloudHSM cluster. This value is present only when the KMS key is created in a custom key store.

  • description :: Maybe Text

    The description of the KMS key.

  • customKeyStoreId :: Maybe Text

    A unique identifier for the custom key store that contains the KMS key. This value is present only when the KMS key is created in a custom key store.

  • multiRegion :: Maybe Bool

    Indicates whether the KMS key is a multi-Region (True) or regional (False) key. This value is True for multi-Region primary and replica keys and False for regional KMS keys.

    For more information about multi-Region keys, see Using multi-Region keys in the Key Management Service Developer Guide.

  • multiRegionConfiguration :: Maybe MultiRegionConfiguration

    Lists the primary and replica keys in same multi-Region key. This field is present only when the value of the MultiRegion field is True.

    For more information about any listed KMS key, use the DescribeKey operation.

    • MultiRegionKeyType indicates whether the KMS key is a PRIMARY or REPLICA key.
    • PrimaryKey displays the key ARN and Region of the primary key. This field displays the current KMS key if it is the primary key.
    • ReplicaKeys displays the key ARNs and Regions of all replica keys. This field includes the current KMS key if it is a replica key.
  • keyId :: Text

    The globally unique identifier for the KMS key.

Instances

Instances details
Eq KeyMetadata Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyMetadata

Read KeyMetadata Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyMetadata

Show KeyMetadata Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyMetadata

Generic KeyMetadata Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyMetadata

Associated Types

type Rep KeyMetadata :: Type -> Type #

NFData KeyMetadata Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyMetadata

Methods

rnf :: KeyMetadata -> () #

Hashable KeyMetadata Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyMetadata

FromJSON KeyMetadata Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyMetadata

type Rep KeyMetadata Source # 
Instance details

Defined in Amazonka.KMS.Types.KeyMetadata

type Rep KeyMetadata = D1 ('MetaData "KeyMetadata" "Amazonka.KMS.Types.KeyMetadata" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "KeyMetadata'" 'PrefixI 'True) ((((S1 ('MetaSel ('Just "origin") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe OriginType)) :*: S1 ('MetaSel ('Just "expirationModel") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ExpirationModelType))) :*: (S1 ('MetaSel ('Just "keyManager") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyManagerType)) :*: (S1 ('MetaSel ('Just "keySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeySpec)) :*: S1 ('MetaSel ('Just "customerMasterKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe CustomerMasterKeySpec))))) :*: ((S1 ('MetaSel ('Just "enabled") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :*: (S1 ('MetaSel ('Just "validTo") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :*: S1 ('MetaSel ('Just "arn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) :*: (S1 ('MetaSel ('Just "keyState") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyState)) :*: (S1 ('MetaSel ('Just "encryptionAlgorithms") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [EncryptionAlgorithmSpec])) :*: S1 ('MetaSel ('Just "aWSAccountId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))) :*: (((S1 ('MetaSel ('Just "signingAlgorithms") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [SigningAlgorithmSpec])) :*: S1 ('MetaSel ('Just "pendingDeletionWindowInDays") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural))) :*: (S1 ('MetaSel ('Just "keyUsage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyUsageType)) :*: (S1 ('MetaSel ('Just "creationDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :*: S1 ('MetaSel ('Just "deletionDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX))))) :*: ((S1 ('MetaSel ('Just "cloudHsmClusterId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: (S1 ('MetaSel ('Just "description") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) :*: (S1 ('MetaSel ('Just "multiRegion") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :*: (S1 ('MetaSel ('Just "multiRegionConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe MultiRegionConfiguration)) :*: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))))

newKeyMetadata Source #

Create a value of KeyMetadata with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:origin:KeyMetadata', keyMetadata_origin - The source of the key material for the KMS key. When this value is AWS_KMS, KMS created the key material. When this value is EXTERNAL, the key material was imported or the KMS key doesn't have any key material. When this value is AWS_CLOUDHSM, the key material was created in the CloudHSM cluster associated with a custom key store.

$sel:expirationModel:KeyMetadata', keyMetadata_expirationModel - Specifies whether the KMS key's key material expires. This value is present only when Origin is EXTERNAL, otherwise this value is omitted.

$sel:keyManager:KeyMetadata', keyMetadata_keyManager - The manager of the KMS key. KMS keys in your Amazon Web Services account are either customer managed or Amazon Web Services managed. For more information about the difference, see KMS keys in the Key Management Service Developer Guide.

$sel:keySpec:KeyMetadata', keyMetadata_keySpec - Describes the type of key material in the KMS key.

$sel:customerMasterKeySpec:KeyMetadata', keyMetadata_customerMasterKeySpec - Instead, use the KeySpec field.

The KeySpec and CustomerMasterKeySpec fields have the same value. We recommend that you use the KeySpec field in your code. However, to avoid breaking changes, KMS will support both fields.

$sel:enabled:KeyMetadata', keyMetadata_enabled - Specifies whether the KMS key is enabled. When KeyState is Enabled this value is true, otherwise it is false.

$sel:validTo:KeyMetadata', keyMetadata_validTo - The time at which the imported key material expires. When the key material expires, KMS deletes the key material and the KMS key becomes unusable. This value is present only for KMS keys whose Origin is EXTERNAL and whose ExpirationModel is KEY_MATERIAL_EXPIRES, otherwise this value is omitted.

$sel:arn:KeyMetadata', keyMetadata_arn - The Amazon Resource Name (ARN) of the KMS key. For examples, see Key Management Service (KMS) in the Example ARNs section of the /Amazon Web Services General Reference/.

$sel:keyState:KeyMetadata', keyMetadata_keyState - The current status of the KMS key.

For more information about how key state affects the use of a KMS key, see Key state: Effect on your KMS key in the Key Management Service Developer Guide.

$sel:encryptionAlgorithms:KeyMetadata', keyMetadata_encryptionAlgorithms - The encryption algorithms that the KMS key supports. You cannot use the KMS key with other encryption algorithms within KMS.

This value is present only when the KeyUsage of the KMS key is ENCRYPT_DECRYPT.

$sel:aWSAccountId:KeyMetadata', keyMetadata_aWSAccountId - The twelve-digit account ID of the Amazon Web Services account that owns the KMS key.

$sel:signingAlgorithms:KeyMetadata', keyMetadata_signingAlgorithms - The signing algorithms that the KMS key supports. You cannot use the KMS key with other signing algorithms within KMS.

This field appears only when the KeyUsage of the KMS key is SIGN_VERIFY.

$sel:pendingDeletionWindowInDays:KeyMetadata', keyMetadata_pendingDeletionWindowInDays - The waiting period before the primary key in a multi-Region key is deleted. This waiting period begins when the last of its replica keys is deleted. This value is present only when the KeyState of the KMS key is PendingReplicaDeletion. That indicates that the KMS key is the primary key in a multi-Region key, it is scheduled for deletion, and it still has existing replica keys.

When a single-Region KMS key or a multi-Region replica key is scheduled for deletion, its deletion date is displayed in the DeletionDate field. However, when the primary key in a multi-Region key is scheduled for deletion, its waiting period doesn't begin until all of its replica keys are deleted. This value displays that waiting period. When the last replica key in the multi-Region key is deleted, the KeyState of the scheduled primary key changes from PendingReplicaDeletion to PendingDeletion and the deletion date appears in the DeletionDate field.

$sel:keyUsage:KeyMetadata', keyMetadata_keyUsage - The cryptographic operations for which you can use the KMS key.

$sel:creationDate:KeyMetadata', keyMetadata_creationDate - The date and time when the KMS key was created.

$sel:deletionDate:KeyMetadata', keyMetadata_deletionDate - The date and time after which KMS deletes this KMS key. This value is present only when the KMS key is scheduled for deletion, that is, when its KeyState is PendingDeletion.

When the primary key in a multi-Region key is scheduled for deletion but still has replica keys, its key state is PendingReplicaDeletion and the length of its waiting period is displayed in the PendingDeletionWindowInDays field.

$sel:cloudHsmClusterId:KeyMetadata', keyMetadata_cloudHsmClusterId - The cluster ID of the CloudHSM cluster that contains the key material for the KMS key. When you create a KMS key in a custom key store, KMS creates the key material for the KMS key in the associated CloudHSM cluster. This value is present only when the KMS key is created in a custom key store.

$sel:description:KeyMetadata', keyMetadata_description - The description of the KMS key.

$sel:customKeyStoreId:KeyMetadata', keyMetadata_customKeyStoreId - A unique identifier for the custom key store that contains the KMS key. This value is present only when the KMS key is created in a custom key store.

$sel:multiRegion:KeyMetadata', keyMetadata_multiRegion - Indicates whether the KMS key is a multi-Region (True) or regional (False) key. This value is True for multi-Region primary and replica keys and False for regional KMS keys.

For more information about multi-Region keys, see Using multi-Region keys in the Key Management Service Developer Guide.

$sel:multiRegionConfiguration:KeyMetadata', keyMetadata_multiRegionConfiguration - Lists the primary and replica keys in same multi-Region key. This field is present only when the value of the MultiRegion field is True.

For more information about any listed KMS key, use the DescribeKey operation.

  • MultiRegionKeyType indicates whether the KMS key is a PRIMARY or REPLICA key.
  • PrimaryKey displays the key ARN and Region of the primary key. This field displays the current KMS key if it is the primary key.
  • ReplicaKeys displays the key ARNs and Regions of all replica keys. This field includes the current KMS key if it is a replica key.

$sel:keyId:KeyMetadata', keyMetadata_keyId - The globally unique identifier for the KMS key.

keyMetadata_origin :: Lens' KeyMetadata (Maybe OriginType) Source #

The source of the key material for the KMS key. When this value is AWS_KMS, KMS created the key material. When this value is EXTERNAL, the key material was imported or the KMS key doesn't have any key material. When this value is AWS_CLOUDHSM, the key material was created in the CloudHSM cluster associated with a custom key store.

keyMetadata_expirationModel :: Lens' KeyMetadata (Maybe ExpirationModelType) Source #

Specifies whether the KMS key's key material expires. This value is present only when Origin is EXTERNAL, otherwise this value is omitted.

keyMetadata_keyManager :: Lens' KeyMetadata (Maybe KeyManagerType) Source #

The manager of the KMS key. KMS keys in your Amazon Web Services account are either customer managed or Amazon Web Services managed. For more information about the difference, see KMS keys in the Key Management Service Developer Guide.

keyMetadata_keySpec :: Lens' KeyMetadata (Maybe KeySpec) Source #

Describes the type of key material in the KMS key.

keyMetadata_customerMasterKeySpec :: Lens' KeyMetadata (Maybe CustomerMasterKeySpec) Source #

Instead, use the KeySpec field.

The KeySpec and CustomerMasterKeySpec fields have the same value. We recommend that you use the KeySpec field in your code. However, to avoid breaking changes, KMS will support both fields.

keyMetadata_enabled :: Lens' KeyMetadata (Maybe Bool) Source #

Specifies whether the KMS key is enabled. When KeyState is Enabled this value is true, otherwise it is false.

keyMetadata_validTo :: Lens' KeyMetadata (Maybe UTCTime) Source #

The time at which the imported key material expires. When the key material expires, KMS deletes the key material and the KMS key becomes unusable. This value is present only for KMS keys whose Origin is EXTERNAL and whose ExpirationModel is KEY_MATERIAL_EXPIRES, otherwise this value is omitted.

keyMetadata_arn :: Lens' KeyMetadata (Maybe Text) Source #

The Amazon Resource Name (ARN) of the KMS key. For examples, see Key Management Service (KMS) in the Example ARNs section of the /Amazon Web Services General Reference/.

keyMetadata_keyState :: Lens' KeyMetadata (Maybe KeyState) Source #

The current status of the KMS key.

For more information about how key state affects the use of a KMS key, see Key state: Effect on your KMS key in the Key Management Service Developer Guide.

keyMetadata_encryptionAlgorithms :: Lens' KeyMetadata (Maybe [EncryptionAlgorithmSpec]) Source #

The encryption algorithms that the KMS key supports. You cannot use the KMS key with other encryption algorithms within KMS.

This value is present only when the KeyUsage of the KMS key is ENCRYPT_DECRYPT.

keyMetadata_aWSAccountId :: Lens' KeyMetadata (Maybe Text) Source #

The twelve-digit account ID of the Amazon Web Services account that owns the KMS key.

keyMetadata_signingAlgorithms :: Lens' KeyMetadata (Maybe [SigningAlgorithmSpec]) Source #

The signing algorithms that the KMS key supports. You cannot use the KMS key with other signing algorithms within KMS.

This field appears only when the KeyUsage of the KMS key is SIGN_VERIFY.

keyMetadata_pendingDeletionWindowInDays :: Lens' KeyMetadata (Maybe Natural) Source #

The waiting period before the primary key in a multi-Region key is deleted. This waiting period begins when the last of its replica keys is deleted. This value is present only when the KeyState of the KMS key is PendingReplicaDeletion. That indicates that the KMS key is the primary key in a multi-Region key, it is scheduled for deletion, and it still has existing replica keys.

When a single-Region KMS key or a multi-Region replica key is scheduled for deletion, its deletion date is displayed in the DeletionDate field. However, when the primary key in a multi-Region key is scheduled for deletion, its waiting period doesn't begin until all of its replica keys are deleted. This value displays that waiting period. When the last replica key in the multi-Region key is deleted, the KeyState of the scheduled primary key changes from PendingReplicaDeletion to PendingDeletion and the deletion date appears in the DeletionDate field.

keyMetadata_creationDate :: Lens' KeyMetadata (Maybe UTCTime) Source #

The date and time when the KMS key was created.

keyMetadata_deletionDate :: Lens' KeyMetadata (Maybe UTCTime) Source #

The date and time after which KMS deletes this KMS key. This value is present only when the KMS key is scheduled for deletion, that is, when its KeyState is PendingDeletion.

When the primary key in a multi-Region key is scheduled for deletion but still has replica keys, its key state is PendingReplicaDeletion and the length of its waiting period is displayed in the PendingDeletionWindowInDays field.

keyMetadata_cloudHsmClusterId :: Lens' KeyMetadata (Maybe Text) Source #

The cluster ID of the CloudHSM cluster that contains the key material for the KMS key. When you create a KMS key in a custom key store, KMS creates the key material for the KMS key in the associated CloudHSM cluster. This value is present only when the KMS key is created in a custom key store.

keyMetadata_description :: Lens' KeyMetadata (Maybe Text) Source #

The description of the KMS key.

keyMetadata_customKeyStoreId :: Lens' KeyMetadata (Maybe Text) Source #

A unique identifier for the custom key store that contains the KMS key. This value is present only when the KMS key is created in a custom key store.

keyMetadata_multiRegion :: Lens' KeyMetadata (Maybe Bool) Source #

Indicates whether the KMS key is a multi-Region (True) or regional (False) key. This value is True for multi-Region primary and replica keys and False for regional KMS keys.

For more information about multi-Region keys, see Using multi-Region keys in the Key Management Service Developer Guide.

keyMetadata_multiRegionConfiguration :: Lens' KeyMetadata (Maybe MultiRegionConfiguration) Source #

Lists the primary and replica keys in same multi-Region key. This field is present only when the value of the MultiRegion field is True.

For more information about any listed KMS key, use the DescribeKey operation.

  • MultiRegionKeyType indicates whether the KMS key is a PRIMARY or REPLICA key.
  • PrimaryKey displays the key ARN and Region of the primary key. This field displays the current KMS key if it is the primary key.
  • ReplicaKeys displays the key ARNs and Regions of all replica keys. This field includes the current KMS key if it is a replica key.

keyMetadata_keyId :: Lens' KeyMetadata Text Source #

The globally unique identifier for the KMS key.

ListGrantsResponse

data ListGrantsResponse Source #

See: newListGrantsResponse smart constructor.

Constructors

ListGrantsResponse' 

Fields

  • truncated :: Maybe Bool

    A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

  • grants :: Maybe [GrantListEntry]

    A list of grants.

  • nextMarker :: Maybe Text

    When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

Instances

Instances details
Eq ListGrantsResponse Source # 
Instance details

Defined in Amazonka.KMS.Types.ListGrantsResponse

Read ListGrantsResponse Source # 
Instance details

Defined in Amazonka.KMS.Types.ListGrantsResponse

Show ListGrantsResponse Source # 
Instance details

Defined in Amazonka.KMS.Types.ListGrantsResponse

Generic ListGrantsResponse Source # 
Instance details

Defined in Amazonka.KMS.Types.ListGrantsResponse

Associated Types

type Rep ListGrantsResponse :: Type -> Type #

NFData ListGrantsResponse Source # 
Instance details

Defined in Amazonka.KMS.Types.ListGrantsResponse

Methods

rnf :: ListGrantsResponse -> () #

Hashable ListGrantsResponse Source # 
Instance details

Defined in Amazonka.KMS.Types.ListGrantsResponse

FromJSON ListGrantsResponse Source # 
Instance details

Defined in Amazonka.KMS.Types.ListGrantsResponse

type Rep ListGrantsResponse Source # 
Instance details

Defined in Amazonka.KMS.Types.ListGrantsResponse

type Rep ListGrantsResponse = D1 ('MetaData "ListGrantsResponse" "Amazonka.KMS.Types.ListGrantsResponse" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListGrantsResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :*: (S1 ('MetaSel ('Just "grants") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [GrantListEntry])) :*: S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))

newListGrantsResponse :: ListGrantsResponse Source #

Create a value of ListGrantsResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:truncated:ListGrantsResponse', listGrantsResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:grants:ListGrantsResponse', listGrantsResponse_grants - A list of grants.

$sel:nextMarker:ListGrantsResponse', listGrantsResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

listGrantsResponse_truncated :: Lens' ListGrantsResponse (Maybe Bool) Source #

A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

listGrantsResponse_nextMarker :: Lens' ListGrantsResponse (Maybe Text) Source #

When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

MultiRegionConfiguration

data MultiRegionConfiguration Source #

Describes the configuration of this multi-Region key. This field appears only when the KMS key is a primary or replica of a multi-Region key.

For more information about any listed KMS key, use the DescribeKey operation.

See: newMultiRegionConfiguration smart constructor.

Constructors

MultiRegionConfiguration' 

Fields

Instances

Instances details
Eq MultiRegionConfiguration Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionConfiguration

Read MultiRegionConfiguration Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionConfiguration

Show MultiRegionConfiguration Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionConfiguration

Generic MultiRegionConfiguration Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionConfiguration

Associated Types

type Rep MultiRegionConfiguration :: Type -> Type #

NFData MultiRegionConfiguration Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionConfiguration

Hashable MultiRegionConfiguration Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionConfiguration

FromJSON MultiRegionConfiguration Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionConfiguration

type Rep MultiRegionConfiguration Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionConfiguration

type Rep MultiRegionConfiguration = D1 ('MetaData "MultiRegionConfiguration" "Amazonka.KMS.Types.MultiRegionConfiguration" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "MultiRegionConfiguration'" 'PrefixI 'True) (S1 ('MetaSel ('Just "primaryKey") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe MultiRegionKey)) :*: (S1 ('MetaSel ('Just "replicaKeys") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [MultiRegionKey])) :*: S1 ('MetaSel ('Just "multiRegionKeyType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe MultiRegionKeyType)))))

newMultiRegionConfiguration :: MultiRegionConfiguration Source #

Create a value of MultiRegionConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:primaryKey:MultiRegionConfiguration', multiRegionConfiguration_primaryKey - Displays the key ARN and Region of the primary key. This field includes the current KMS key if it is the primary key.

$sel:replicaKeys:MultiRegionConfiguration', multiRegionConfiguration_replicaKeys - displays the key ARNs and Regions of all replica keys. This field includes the current KMS key if it is a replica key.

$sel:multiRegionKeyType:MultiRegionConfiguration', multiRegionConfiguration_multiRegionKeyType - Indicates whether the KMS key is a PRIMARY or REPLICA key.

multiRegionConfiguration_primaryKey :: Lens' MultiRegionConfiguration (Maybe MultiRegionKey) Source #

Displays the key ARN and Region of the primary key. This field includes the current KMS key if it is the primary key.

multiRegionConfiguration_replicaKeys :: Lens' MultiRegionConfiguration (Maybe [MultiRegionKey]) Source #

displays the key ARNs and Regions of all replica keys. This field includes the current KMS key if it is a replica key.

multiRegionConfiguration_multiRegionKeyType :: Lens' MultiRegionConfiguration (Maybe MultiRegionKeyType) Source #

Indicates whether the KMS key is a PRIMARY or REPLICA key.

MultiRegionKey

data MultiRegionKey Source #

Describes the primary or replica key in a multi-Region key.

See: newMultiRegionKey smart constructor.

Constructors

MultiRegionKey' 

Fields

  • arn :: Maybe Text

    Displays the key ARN of a primary or replica key of a multi-Region key.

  • region :: Maybe Text

    Displays the Amazon Web Services Region of a primary or replica key in a multi-Region key.

Instances

Instances details
Eq MultiRegionKey Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKey

Read MultiRegionKey Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKey

Show MultiRegionKey Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKey

Generic MultiRegionKey Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKey

Associated Types

type Rep MultiRegionKey :: Type -> Type #

NFData MultiRegionKey Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKey

Methods

rnf :: MultiRegionKey -> () #

Hashable MultiRegionKey Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKey

FromJSON MultiRegionKey Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKey

type Rep MultiRegionKey Source # 
Instance details

Defined in Amazonka.KMS.Types.MultiRegionKey

type Rep MultiRegionKey = D1 ('MetaData "MultiRegionKey" "Amazonka.KMS.Types.MultiRegionKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "MultiRegionKey'" 'PrefixI 'True) (S1 ('MetaSel ('Just "arn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "region") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))

newMultiRegionKey :: MultiRegionKey Source #

Create a value of MultiRegionKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:arn:MultiRegionKey', multiRegionKey_arn - Displays the key ARN of a primary or replica key of a multi-Region key.

$sel:region:MultiRegionKey', multiRegionKey_region - Displays the Amazon Web Services Region of a primary or replica key in a multi-Region key.

multiRegionKey_arn :: Lens' MultiRegionKey (Maybe Text) Source #

Displays the key ARN of a primary or replica key of a multi-Region key.

multiRegionKey_region :: Lens' MultiRegionKey (Maybe Text) Source #

Displays the Amazon Web Services Region of a primary or replica key in a multi-Region key.

Tag

data Tag Source #

A key-value pair. A tag consists of a tag key and a tag value. Tag keys and tag values are both required, but tag values can be empty (null) strings.

For information about the rules that apply to tag keys and tag values, see User-Defined Tag Restrictions in the Amazon Web Services Billing and Cost Management User Guide.

See: newTag smart constructor.

Constructors

Tag' 

Fields

Instances

Instances details
Eq Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

Methods

(==) :: Tag -> Tag -> Bool #

(/=) :: Tag -> Tag -> Bool #

Read Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

Show Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

Methods

showsPrec :: Int -> Tag -> ShowS #

show :: Tag -> String #

showList :: [Tag] -> ShowS #

Generic Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

Associated Types

type Rep Tag :: Type -> Type #

Methods

from :: Tag -> Rep Tag x #

to :: Rep Tag x -> Tag #

NFData Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

Methods

rnf :: Tag -> () #

Hashable Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

Methods

hashWithSalt :: Int -> Tag -> Int #

hash :: Tag -> Int #

ToJSON Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

FromJSON Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

type Rep Tag Source # 
Instance details

Defined in Amazonka.KMS.Types.Tag

type Rep Tag = D1 ('MetaData "Tag" "Amazonka.KMS.Types.Tag" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "tagKey") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "tagValue") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))

newTag Source #

Create a value of Tag with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:tagKey:Tag', tag_tagKey - The key of the tag.

$sel:tagValue:Tag', tag_tagValue - The value of the tag.

tag_tagKey :: Lens' Tag Text Source #

The key of the tag.

tag_tagValue :: Lens' Tag Text Source #

The value of the tag.