Copyright	(c) 2013-2021 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay <brendan.g.hay+amazonka@gmail.com>
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	None

Amazonka.KMS

Contents

Service Configuration
Errors
Waiters
Operations
Types

Description

Derived from API version 2014-11-01 of the AWS service descriptions, licensed under Apache 2.0.

Key Management Service

Key Management Service (KMS) is an encryption and key management web service. This guide describes the KMS operations that you can call programmatically. For general information about KMS, see the Key Management Service Developer Guide .

KMS is replacing the term customer master key (CMK) with KMS key and KMS key. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.

Amazon Web Services provides SDKs that consist of libraries and sample code for various programming languages and platforms (Java, Ruby, .Net, macOS, Android, etc.). The SDKs provide a convenient way to create programmatic access to KMS and other Amazon Web Services services. For example, the SDKs take care of tasks such as signing requests (see below), managing errors, and retrying requests automatically. For more information about the Amazon Web Services SDKs, including how to download and install them, see Tools for Amazon Web Services.

We recommend that you use the Amazon Web Services SDKs to make programmatic API calls to KMS.

Clients must support TLS (Transport Layer Security) 1.0. We recommend TLS 1.2. Clients must also support cipher suites with Perfect Forward Secrecy (PFS) such as Ephemeral Diffie-Hellman (DHE) or Elliptic Curve Ephemeral Diffie-Hellman (ECDHE). Most modern systems such as Java 7 and later support these modes.

Signing Requests

Requests must be signed by using an access key ID and a secret access key. We strongly recommend that you do not use your Amazon Web Services account (root) access key ID and secret key for everyday work with KMS. Instead, use the access key ID and secret access key for an IAM user. You can also use the Amazon Web Services Security Token Service to generate temporary security credentials that you can use to sign requests.

All KMS operations require Signature Version 4.

Logging API Requests

KMS supports CloudTrail, a service that logs Amazon Web Services API calls and related events for your Amazon Web Services account and delivers them to an Amazon S3 bucket that you specify. By using the information collected by CloudTrail, you can determine what requests were made to KMS, who made the request, when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find your log files, see the CloudTrail User Guide.

Additional Resources

For more information about credentials and request signing, see the following:

Amazon Web Services Security Credentials
This topic provides general information about the types of credentials used to access Amazon Web Services.
Temporary Security Credentials
This section of the IAM User Guide describes how to create and use temporary security credentials.
Signature Version 4 Signing Process
This set of topics walks you through the process of signing a request using an access key ID and a secret access key.

Commonly Used API Operations

Of the API operations discussed in this guide, the following will prove the most useful for most applications. You will likely perform operations other than these, such as creating keys and assigning policies, by using the console.

Encrypt
Decrypt
GenerateDataKey
GenerateDataKeyWithoutPlaintext

Synopsis

defaultService :: Service
_InvalidMarkerException :: AsError a => Getting (First ServiceError) a ServiceError
_KMSInvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError
_InvalidKeyUsageException :: AsError a => Getting (First ServiceError) a ServiceError
_MalformedPolicyDocumentException :: AsError a => Getting (First ServiceError) a ServiceError
_CustomKeyStoreNameInUseException :: AsError a => Getting (First ServiceError) a ServiceError
_UnsupportedOperationException :: AsError a => Getting (First ServiceError) a ServiceError
_DisabledException :: AsError a => Getting (First ServiceError) a ServiceError
_KeyUnavailableException :: AsError a => Getting (First ServiceError) a ServiceError
_IncorrectKeyMaterialException :: AsError a => Getting (First ServiceError) a ServiceError
_KMSInternalException :: AsError a => Getting (First ServiceError) a ServiceError
_TagException :: AsError a => Getting (First ServiceError) a ServiceError
_CustomKeyStoreHasCMKsException :: AsError a => Getting (First ServiceError) a ServiceError
_InvalidImportTokenException :: AsError a => Getting (First ServiceError) a ServiceError
_CloudHsmClusterNotRelatedException :: AsError a => Getting (First ServiceError) a ServiceError
_IncorrectTrustAnchorException :: AsError a => Getting (First ServiceError) a ServiceError
_CloudHsmClusterInvalidConfigurationException :: AsError a => Getting (First ServiceError) a ServiceError
_CloudHsmClusterNotActiveException :: AsError a => Getting (First ServiceError) a ServiceError
_CloudHsmClusterNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
_NotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
_KMSInvalidSignatureException :: AsError a => Getting (First ServiceError) a ServiceError
_InvalidAliasNameException :: AsError a => Getting (First ServiceError) a ServiceError
_CustomKeyStoreNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
_CustomKeyStoreInvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError
_InvalidGrantIdException :: AsError a => Getting (First ServiceError) a ServiceError
_InvalidGrantTokenException :: AsError a => Getting (First ServiceError) a ServiceError
_InvalidArnException :: AsError a => Getting (First ServiceError) a ServiceError
_DependencyTimeoutException :: AsError a => Getting (First ServiceError) a ServiceError
_ExpiredImportTokenException :: AsError a => Getting (First ServiceError) a ServiceError
_InvalidCiphertextException :: AsError a => Getting (First ServiceError) a ServiceError
_CloudHsmClusterInUseException :: AsError a => Getting (First ServiceError) a ServiceError
_IncorrectKeyException :: AsError a => Getting (First ServiceError) a ServiceError
_AlreadyExistsException :: AsError a => Getting (First ServiceError) a ServiceError
_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError
data Encrypt = Encrypt' (Maybe (HashMap Text Text)) (Maybe [Text]) (Maybe EncryptionAlgorithmSpec) Text (Sensitive Base64)
newEncrypt :: Text -> ByteString -> Encrypt
data EncryptResponse = EncryptResponse' (Maybe Text) (Maybe EncryptionAlgorithmSpec) (Maybe Base64) Int
newEncryptResponse :: Int -> EncryptResponse
data CreateCustomKeyStore = CreateCustomKeyStore' Text Text Text (Sensitive Text)
newCreateCustomKeyStore :: Text -> Text -> Text -> Text -> CreateCustomKeyStore
data CreateCustomKeyStoreResponse = CreateCustomKeyStoreResponse' (Maybe Text) Int
newCreateCustomKeyStoreResponse :: Int -> CreateCustomKeyStoreResponse
data ListGrants = ListGrants' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Natural) Text
newListGrants :: Text -> ListGrants
data ListGrantsResponse = ListGrantsResponse' (Maybe Bool) (Maybe [GrantListEntry]) (Maybe Text)
newListGrantsResponse :: ListGrantsResponse
data DisableKeyRotation = DisableKeyRotation' Text
newDisableKeyRotation :: Text -> DisableKeyRotation
data DisableKeyRotationResponse = DisableKeyRotationResponse' {
}
newDisableKeyRotationResponse :: DisableKeyRotationResponse
data Verify = Verify' (Maybe MessageType) (Maybe [Text]) Text (Sensitive Base64) Base64 SigningAlgorithmSpec
newVerify :: Text -> ByteString -> ByteString -> SigningAlgorithmSpec -> Verify
data VerifyResponse = VerifyResponse' (Maybe SigningAlgorithmSpec) (Maybe Bool) (Maybe Text) Int
newVerifyResponse :: Int -> VerifyResponse
data GenerateDataKeyWithoutPlaintext = GenerateDataKeyWithoutPlaintext' (Maybe DataKeySpec) (Maybe (HashMap Text Text)) (Maybe Natural) (Maybe [Text]) Text
newGenerateDataKeyWithoutPlaintext :: Text -> GenerateDataKeyWithoutPlaintext
data GenerateDataKeyWithoutPlaintextResponse = GenerateDataKeyWithoutPlaintextResponse' (Maybe Text) (Maybe Base64) Int
newGenerateDataKeyWithoutPlaintextResponse :: Int -> GenerateDataKeyWithoutPlaintextResponse
data UpdateCustomKeyStore = UpdateCustomKeyStore' (Maybe (Sensitive Text)) (Maybe Text) (Maybe Text) Text
newUpdateCustomKeyStore :: Text -> UpdateCustomKeyStore
data UpdateCustomKeyStoreResponse = UpdateCustomKeyStoreResponse' Int
newUpdateCustomKeyStoreResponse :: Int -> UpdateCustomKeyStoreResponse
data GetParametersForImport = GetParametersForImport' Text AlgorithmSpec WrappingKeySpec
newGetParametersForImport :: Text -> AlgorithmSpec -> WrappingKeySpec -> GetParametersForImport
data GetParametersForImportResponse = GetParametersForImportResponse' (Maybe Text) (Maybe (Sensitive Base64)) (Maybe POSIX) (Maybe Base64) Int
newGetParametersForImportResponse :: Int -> GetParametersForImportResponse
data EnableKeyRotation = EnableKeyRotation' Text
newEnableKeyRotation :: Text -> EnableKeyRotation
data EnableKeyRotationResponse = EnableKeyRotationResponse' {
}
newEnableKeyRotationResponse :: EnableKeyRotationResponse
data DeleteCustomKeyStore = DeleteCustomKeyStore' Text
newDeleteCustomKeyStore :: Text -> DeleteCustomKeyStore
data DeleteCustomKeyStoreResponse = DeleteCustomKeyStoreResponse' Int
newDeleteCustomKeyStoreResponse :: Int -> DeleteCustomKeyStoreResponse
data CreateAlias = CreateAlias' Text Text
newCreateAlias :: Text -> Text -> CreateAlias
data CreateAliasResponse = CreateAliasResponse' {
}
newCreateAliasResponse :: CreateAliasResponse
data CreateGrant = CreateGrant' (Maybe Text) (Maybe [Text]) (Maybe GrantConstraints) (Maybe Text) Text Text [GrantOperation]
newCreateGrant :: Text -> Text -> CreateGrant
data CreateGrantResponse = CreateGrantResponse' (Maybe Text) (Maybe Text) Int
newCreateGrantResponse :: Int -> CreateGrantResponse
data ListAliases = ListAliases' (Maybe Text) (Maybe Text) (Maybe Natural)
newListAliases :: ListAliases
data ListAliasesResponse = ListAliasesResponse' (Maybe Bool) (Maybe [AliasListEntry]) (Maybe Text) Int
newListAliasesResponse :: Int -> ListAliasesResponse
data UpdatePrimaryRegion = UpdatePrimaryRegion' Text Text
newUpdatePrimaryRegion :: Text -> Text -> UpdatePrimaryRegion
data UpdatePrimaryRegionResponse = UpdatePrimaryRegionResponse' {
}
newUpdatePrimaryRegionResponse :: UpdatePrimaryRegionResponse
data ConnectCustomKeyStore = ConnectCustomKeyStore' Text
newConnectCustomKeyStore :: Text -> ConnectCustomKeyStore
data ConnectCustomKeyStoreResponse = ConnectCustomKeyStoreResponse' Int
newConnectCustomKeyStoreResponse :: Int -> ConnectCustomKeyStoreResponse
data ListRetirableGrants = ListRetirableGrants' (Maybe Text) (Maybe Natural) Text
newListRetirableGrants :: Text -> ListRetirableGrants
data ListGrantsResponse = ListGrantsResponse' (Maybe Bool) (Maybe [GrantListEntry]) (Maybe Text)
newListGrantsResponse :: ListGrantsResponse
data GetPublicKey = GetPublicKey' (Maybe [Text]) Text
newGetPublicKey :: Text -> GetPublicKey
data GetPublicKeyResponse = GetPublicKeyResponse' (Maybe KeySpec) (Maybe Text) (Maybe CustomerMasterKeySpec) (Maybe [EncryptionAlgorithmSpec]) (Maybe Base64) (Maybe [SigningAlgorithmSpec]) (Maybe KeyUsageType) Int
newGetPublicKeyResponse :: Int -> GetPublicKeyResponse
data GenerateRandom = GenerateRandom' (Maybe Natural) (Maybe Text)
newGenerateRandom :: GenerateRandom
data GenerateRandomResponse = GenerateRandomResponse' (Maybe (Sensitive Base64)) Int
newGenerateRandomResponse :: Int -> GenerateRandomResponse
data CreateKey = CreateKey' (Maybe OriginType) (Maybe KeySpec) (Maybe CustomerMasterKeySpec) (Maybe KeyUsageType) (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [Tag]) (Maybe Bool)
newCreateKey :: CreateKey
data CreateKeyResponse = CreateKeyResponse' (Maybe KeyMetadata) Int
newCreateKeyResponse :: Int -> CreateKeyResponse
data DisableKey = DisableKey' Text
newDisableKey :: Text -> DisableKey
data DisableKeyResponse = DisableKeyResponse' {
}
newDisableKeyResponse :: DisableKeyResponse
data DisconnectCustomKeyStore = DisconnectCustomKeyStore' Text
newDisconnectCustomKeyStore :: Text -> DisconnectCustomKeyStore
data DisconnectCustomKeyStoreResponse = DisconnectCustomKeyStoreResponse' Int
newDisconnectCustomKeyStoreResponse :: Int -> DisconnectCustomKeyStoreResponse
data RetireGrant = RetireGrant' (Maybe Text) (Maybe Text) (Maybe Text)
newRetireGrant :: RetireGrant
data RetireGrantResponse = RetireGrantResponse' {
}
newRetireGrantResponse :: RetireGrantResponse
data ListKeys = ListKeys' (Maybe Text) (Maybe Natural)
newListKeys :: ListKeys
data ListKeysResponse = ListKeysResponse' (Maybe Bool) (Maybe [KeyListEntry]) (Maybe Text) Int
newListKeysResponse :: Int -> ListKeysResponse
data ListResourceTags = ListResourceTags' (Maybe Text) (Maybe Natural) Text
newListResourceTags :: Text -> ListResourceTags
data ListResourceTagsResponse = ListResourceTagsResponse' (Maybe Bool) (Maybe Text) (Maybe [Tag]) Int
newListResourceTagsResponse :: Int -> ListResourceTagsResponse
data GetKeyRotationStatus = GetKeyRotationStatus' Text
newGetKeyRotationStatus :: Text -> GetKeyRotationStatus
data GetKeyRotationStatusResponse = GetKeyRotationStatusResponse' (Maybe Bool) Int
newGetKeyRotationStatusResponse :: Int -> GetKeyRotationStatusResponse
data GenerateDataKey = GenerateDataKey' (Maybe DataKeySpec) (Maybe (HashMap Text Text)) (Maybe Natural) (Maybe [Text]) Text
newGenerateDataKey :: Text -> GenerateDataKey
data GenerateDataKeyResponse = GenerateDataKeyResponse' Int Text (Sensitive Base64) Base64
newGenerateDataKeyResponse :: Int -> Text -> ByteString -> ByteString -> GenerateDataKeyResponse
data DeleteAlias = DeleteAlias' Text
newDeleteAlias :: Text -> DeleteAlias
data DeleteAliasResponse = DeleteAliasResponse' {
}
newDeleteAliasResponse :: DeleteAliasResponse
data UpdateAlias = UpdateAlias' Text Text
newUpdateAlias :: Text -> Text -> UpdateAlias
data UpdateAliasResponse = UpdateAliasResponse' {
}
newUpdateAliasResponse :: UpdateAliasResponse
data DescribeKey = DescribeKey' (Maybe [Text]) Text
newDescribeKey :: Text -> DescribeKey
data DescribeKeyResponse = DescribeKeyResponse' (Maybe KeyMetadata) Int
newDescribeKeyResponse :: Int -> DescribeKeyResponse
data DescribeCustomKeyStores = DescribeCustomKeyStores' (Maybe Text) (Maybe Text) (Maybe Natural) (Maybe Text)
newDescribeCustomKeyStores :: DescribeCustomKeyStores
data DescribeCustomKeyStoresResponse = DescribeCustomKeyStoresResponse' (Maybe Bool) (Maybe Text) (Maybe [CustomKeyStoresListEntry]) Int
newDescribeCustomKeyStoresResponse :: Int -> DescribeCustomKeyStoresResponse
data CancelKeyDeletion = CancelKeyDeletion' Text
newCancelKeyDeletion :: Text -> CancelKeyDeletion
data CancelKeyDeletionResponse = CancelKeyDeletionResponse' (Maybe Text) Int
newCancelKeyDeletionResponse :: Int -> CancelKeyDeletionResponse
data Decrypt = Decrypt' (Maybe Text) (Maybe (HashMap Text Text)) (Maybe [Text]) (Maybe EncryptionAlgorithmSpec) Base64
newDecrypt :: ByteString -> Decrypt
data DecryptResponse = DecryptResponse' (Maybe Text) (Maybe (Sensitive Base64)) (Maybe EncryptionAlgorithmSpec) Int
newDecryptResponse :: Int -> DecryptResponse
data GenerateDataKeyPairWithoutPlaintext = GenerateDataKeyPairWithoutPlaintext' (Maybe (HashMap Text Text)) (Maybe [Text]) Text DataKeyPairSpec
newGenerateDataKeyPairWithoutPlaintext :: Text -> DataKeyPairSpec -> GenerateDataKeyPairWithoutPlaintext
data GenerateDataKeyPairWithoutPlaintextResponse = GenerateDataKeyPairWithoutPlaintextResponse' (Maybe Text) (Maybe Base64) (Maybe DataKeyPairSpec) (Maybe Base64) Int
newGenerateDataKeyPairWithoutPlaintextResponse :: Int -> GenerateDataKeyPairWithoutPlaintextResponse
data UpdateKeyDescription = UpdateKeyDescription' Text Text
newUpdateKeyDescription :: Text -> Text -> UpdateKeyDescription
data UpdateKeyDescriptionResponse = UpdateKeyDescriptionResponse' {
}
newUpdateKeyDescriptionResponse :: UpdateKeyDescriptionResponse
data ReEncrypt = ReEncrypt' (Maybe (HashMap Text Text)) (Maybe Text) (Maybe (HashMap Text Text)) (Maybe [Text]) (Maybe EncryptionAlgorithmSpec) (Maybe EncryptionAlgorithmSpec) Base64 Text
newReEncrypt :: ByteString -> Text -> ReEncrypt
data ReEncryptResponse = ReEncryptResponse' (Maybe Text) (Maybe Text) (Maybe EncryptionAlgorithmSpec) (Maybe EncryptionAlgorithmSpec) (Maybe Base64) Int
newReEncryptResponse :: Int -> ReEncryptResponse
data TagResource = TagResource' Text [Tag]
newTagResource :: Text -> TagResource
data TagResourceResponse = TagResourceResponse' {
}
newTagResourceResponse :: TagResourceResponse
data ListKeyPolicies = ListKeyPolicies' (Maybe Text) (Maybe Natural) Text
newListKeyPolicies :: Text -> ListKeyPolicies
data ListKeyPoliciesResponse = ListKeyPoliciesResponse' (Maybe [Text]) (Maybe Bool) (Maybe Text) Int
newListKeyPoliciesResponse :: Int -> ListKeyPoliciesResponse
data UntagResource = UntagResource' Text [Text]
newUntagResource :: Text -> UntagResource
data UntagResourceResponse = UntagResourceResponse' {
}
newUntagResourceResponse :: UntagResourceResponse
data Sign = Sign' (Maybe MessageType) (Maybe [Text]) Text (Sensitive Base64) SigningAlgorithmSpec
newSign :: Text -> ByteString -> SigningAlgorithmSpec -> Sign
data SignResponse = SignResponse' (Maybe SigningAlgorithmSpec) (Maybe Base64) (Maybe Text) Int
newSignResponse :: Int -> SignResponse
data ScheduleKeyDeletion = ScheduleKeyDeletion' (Maybe Natural) Text
newScheduleKeyDeletion :: Text -> ScheduleKeyDeletion
data ScheduleKeyDeletionResponse = ScheduleKeyDeletionResponse' (Maybe Text) (Maybe KeyState) (Maybe POSIX) (Maybe Natural) Int
newScheduleKeyDeletionResponse :: Int -> ScheduleKeyDeletionResponse
data GenerateDataKeyPair = GenerateDataKeyPair' (Maybe (HashMap Text Text)) (Maybe [Text]) Text DataKeyPairSpec
newGenerateDataKeyPair :: Text -> DataKeyPairSpec -> GenerateDataKeyPair
data GenerateDataKeyPairResponse = GenerateDataKeyPairResponse' (Maybe Text) (Maybe Base64) (Maybe (Sensitive Base64)) (Maybe DataKeyPairSpec) (Maybe Base64) Int
newGenerateDataKeyPairResponse :: Int -> GenerateDataKeyPairResponse
data ReplicateKey = ReplicateKey' (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe [Tag]) Text Text
newReplicateKey :: Text -> Text -> ReplicateKey
data ReplicateKeyResponse = ReplicateKeyResponse' (Maybe KeyMetadata) (Maybe Text) (Maybe [Tag]) Int
newReplicateKeyResponse :: Int -> ReplicateKeyResponse
data PutKeyPolicy = PutKeyPolicy' (Maybe Bool) Text Text Text
newPutKeyPolicy :: Text -> Text -> Text -> PutKeyPolicy
data PutKeyPolicyResponse = PutKeyPolicyResponse' {
}
newPutKeyPolicyResponse :: PutKeyPolicyResponse
data EnableKey = EnableKey' Text
newEnableKey :: Text -> EnableKey
data EnableKeyResponse = EnableKeyResponse' {
}
newEnableKeyResponse :: EnableKeyResponse
data RevokeGrant = RevokeGrant' Text Text
newRevokeGrant :: Text -> Text -> RevokeGrant
data RevokeGrantResponse = RevokeGrantResponse' {
}
newRevokeGrantResponse :: RevokeGrantResponse
data GetKeyPolicy = GetKeyPolicy' Text Text
newGetKeyPolicy :: Text -> Text -> GetKeyPolicy
data GetKeyPolicyResponse = GetKeyPolicyResponse' (Maybe Text) Int
newGetKeyPolicyResponse :: Int -> GetKeyPolicyResponse
data ImportKeyMaterial = ImportKeyMaterial' (Maybe ExpirationModelType) (Maybe POSIX) Text Base64 Base64
newImportKeyMaterial :: Text -> ByteString -> ByteString -> ImportKeyMaterial
data ImportKeyMaterialResponse = ImportKeyMaterialResponse' Int
newImportKeyMaterialResponse :: Int -> ImportKeyMaterialResponse
data DeleteImportedKeyMaterial = DeleteImportedKeyMaterial' Text
newDeleteImportedKeyMaterial :: Text -> DeleteImportedKeyMaterial
data DeleteImportedKeyMaterialResponse = DeleteImportedKeyMaterialResponse' {
}
newDeleteImportedKeyMaterialResponse :: DeleteImportedKeyMaterialResponse
newtype AlgorithmSpec where
- AlgorithmSpec' {
  - fromAlgorithmSpec :: Text
  }
- pattern AlgorithmSpec_RSAES_OAEP_SHA_1 :: AlgorithmSpec
- pattern AlgorithmSpec_RSAES_OAEP_SHA_256 :: AlgorithmSpec
- pattern AlgorithmSpec_RSAES_PKCS1_V1_5 :: AlgorithmSpec
newtype ConnectionErrorCodeType where
- ConnectionErrorCodeType' {
  - fromConnectionErrorCodeType :: Text
  }
- pattern ConnectionErrorCodeType_CLUSTER_NOT_FOUND :: ConnectionErrorCodeType
- pattern ConnectionErrorCodeType_INSUFFICIENT_CLOUDHSM_HSMS :: ConnectionErrorCodeType
- pattern ConnectionErrorCodeType_INTERNAL_ERROR :: ConnectionErrorCodeType
- pattern ConnectionErrorCodeType_INVALID_CREDENTIALS :: ConnectionErrorCodeType
- pattern ConnectionErrorCodeType_NETWORK_ERRORS :: ConnectionErrorCodeType
- pattern ConnectionErrorCodeType_SUBNET_NOT_FOUND :: ConnectionErrorCodeType
- pattern ConnectionErrorCodeType_USER_LOCKED_OUT :: ConnectionErrorCodeType
- pattern ConnectionErrorCodeType_USER_LOGGED_IN :: ConnectionErrorCodeType
- pattern ConnectionErrorCodeType_USER_NOT_FOUND :: ConnectionErrorCodeType
newtype ConnectionStateType where
- ConnectionStateType' {
  - fromConnectionStateType :: Text
  }
- pattern ConnectionStateType_CONNECTED :: ConnectionStateType
- pattern ConnectionStateType_CONNECTING :: ConnectionStateType
- pattern ConnectionStateType_DISCONNECTED :: ConnectionStateType
- pattern ConnectionStateType_DISCONNECTING :: ConnectionStateType
- pattern ConnectionStateType_FAILED :: ConnectionStateType
newtype CustomerMasterKeySpec where
- CustomerMasterKeySpec' {
  - fromCustomerMasterKeySpec :: Text
  }
- pattern CustomerMasterKeySpec_ECC_NIST_P256 :: CustomerMasterKeySpec
- pattern CustomerMasterKeySpec_ECC_NIST_P384 :: CustomerMasterKeySpec
- pattern CustomerMasterKeySpec_ECC_NIST_P521 :: CustomerMasterKeySpec
- pattern CustomerMasterKeySpec_ECC_SECG_P256K1 :: CustomerMasterKeySpec
- pattern CustomerMasterKeySpec_RSA_2048 :: CustomerMasterKeySpec
- pattern CustomerMasterKeySpec_RSA_3072 :: CustomerMasterKeySpec
- pattern CustomerMasterKeySpec_RSA_4096 :: CustomerMasterKeySpec
- pattern CustomerMasterKeySpec_SYMMETRIC_DEFAULT :: CustomerMasterKeySpec
newtype DataKeyPairSpec where
- DataKeyPairSpec' {
  - fromDataKeyPairSpec :: Text
  }
- pattern DataKeyPairSpec_ECC_NIST_P256 :: DataKeyPairSpec
- pattern DataKeyPairSpec_ECC_NIST_P384 :: DataKeyPairSpec
- pattern DataKeyPairSpec_ECC_NIST_P521 :: DataKeyPairSpec
- pattern DataKeyPairSpec_ECC_SECG_P256K1 :: DataKeyPairSpec
- pattern DataKeyPairSpec_RSA_2048 :: DataKeyPairSpec
- pattern DataKeyPairSpec_RSA_3072 :: DataKeyPairSpec
- pattern DataKeyPairSpec_RSA_4096 :: DataKeyPairSpec
newtype DataKeySpec where
- DataKeySpec' {
  - fromDataKeySpec :: Text
  }
- pattern DataKeySpec_AES_128 :: DataKeySpec
- pattern DataKeySpec_AES_256 :: DataKeySpec
newtype EncryptionAlgorithmSpec where
- EncryptionAlgorithmSpec' {
  - fromEncryptionAlgorithmSpec :: Text
  }
- pattern EncryptionAlgorithmSpec_RSAES_OAEP_SHA_1 :: EncryptionAlgorithmSpec
- pattern EncryptionAlgorithmSpec_RSAES_OAEP_SHA_256 :: EncryptionAlgorithmSpec
- pattern EncryptionAlgorithmSpec_SYMMETRIC_DEFAULT :: EncryptionAlgorithmSpec
newtype ExpirationModelType where
- ExpirationModelType' {
  - fromExpirationModelType :: Text
  }
- pattern ExpirationModelType_KEY_MATERIAL_DOES_NOT_EXPIRE :: ExpirationModelType
- pattern ExpirationModelType_KEY_MATERIAL_EXPIRES :: ExpirationModelType
newtype GrantOperation where
- GrantOperation' {
  - fromGrantOperation :: Text
  }
- pattern GrantOperation_CreateGrant :: GrantOperation
- pattern GrantOperation_Decrypt :: GrantOperation
- pattern GrantOperation_DescribeKey :: GrantOperation
- pattern GrantOperation_Encrypt :: GrantOperation
- pattern GrantOperation_GenerateDataKey :: GrantOperation
- pattern GrantOperation_GenerateDataKeyPair :: GrantOperation
- pattern GrantOperation_GenerateDataKeyPairWithoutPlaintext :: GrantOperation
- pattern GrantOperation_GenerateDataKeyWithoutPlaintext :: GrantOperation
- pattern GrantOperation_GetPublicKey :: GrantOperation
- pattern GrantOperation_ReEncryptFrom :: GrantOperation
- pattern GrantOperation_ReEncryptTo :: GrantOperation
- pattern GrantOperation_RetireGrant :: GrantOperation
- pattern GrantOperation_Sign :: GrantOperation
- pattern GrantOperation_Verify :: GrantOperation
newtype KeyManagerType where
- KeyManagerType' {
  - fromKeyManagerType :: Text
  }
- pattern KeyManagerType_AWS :: KeyManagerType
- pattern KeyManagerType_CUSTOMER :: KeyManagerType
newtype KeySpec where
- KeySpec' {
  - fromKeySpec :: Text
  }
- pattern KeySpec_ECC_NIST_P256 :: KeySpec
- pattern KeySpec_ECC_NIST_P384 :: KeySpec
- pattern KeySpec_ECC_NIST_P521 :: KeySpec
- pattern KeySpec_ECC_SECG_P256K1 :: KeySpec
- pattern KeySpec_RSA_2048 :: KeySpec
- pattern KeySpec_RSA_3072 :: KeySpec
- pattern KeySpec_RSA_4096 :: KeySpec
- pattern KeySpec_SYMMETRIC_DEFAULT :: KeySpec
newtype KeyState where
- KeyState' {
  - fromKeyState :: Text
  }
- pattern KeyState_Creating :: KeyState
- pattern KeyState_Disabled :: KeyState
- pattern KeyState_Enabled :: KeyState
- pattern KeyState_PendingDeletion :: KeyState
- pattern KeyState_PendingImport :: KeyState
- pattern KeyState_PendingReplicaDeletion :: KeyState
- pattern KeyState_Unavailable :: KeyState
- pattern KeyState_Updating :: KeyState
newtype KeyUsageType where
- KeyUsageType' {
  - fromKeyUsageType :: Text
  }
- pattern KeyUsageType_ENCRYPT_DECRYPT :: KeyUsageType
- pattern KeyUsageType_SIGN_VERIFY :: KeyUsageType
newtype MessageType where
- MessageType' {
  - fromMessageType :: Text
  }
- pattern MessageType_DIGEST :: MessageType
- pattern MessageType_RAW :: MessageType
newtype MultiRegionKeyType where
- MultiRegionKeyType' {
  - fromMultiRegionKeyType :: Text
  }
- pattern MultiRegionKeyType_PRIMARY :: MultiRegionKeyType
- pattern MultiRegionKeyType_REPLICA :: MultiRegionKeyType
newtype OriginType where
- OriginType' {
  - fromOriginType :: Text
  }
- pattern OriginType_AWS_CLOUDHSM :: OriginType
- pattern OriginType_AWS_KMS :: OriginType
- pattern OriginType_EXTERNAL :: OriginType
newtype SigningAlgorithmSpec where
- SigningAlgorithmSpec' {
  - fromSigningAlgorithmSpec :: Text
  }
- pattern SigningAlgorithmSpec_ECDSA_SHA_256 :: SigningAlgorithmSpec
- pattern SigningAlgorithmSpec_ECDSA_SHA_384 :: SigningAlgorithmSpec
- pattern SigningAlgorithmSpec_ECDSA_SHA_512 :: SigningAlgorithmSpec
- pattern SigningAlgorithmSpec_RSASSA_PKCS1_V1_5_SHA_256 :: SigningAlgorithmSpec
- pattern SigningAlgorithmSpec_RSASSA_PKCS1_V1_5_SHA_384 :: SigningAlgorithmSpec
- pattern SigningAlgorithmSpec_RSASSA_PKCS1_V1_5_SHA_512 :: SigningAlgorithmSpec
- pattern SigningAlgorithmSpec_RSASSA_PSS_SHA_256 :: SigningAlgorithmSpec
- pattern SigningAlgorithmSpec_RSASSA_PSS_SHA_384 :: SigningAlgorithmSpec
- pattern SigningAlgorithmSpec_RSASSA_PSS_SHA_512 :: SigningAlgorithmSpec
newtype WrappingKeySpec where
- WrappingKeySpec' {
  - fromWrappingKeySpec :: Text
  }
- pattern WrappingKeySpec_RSA_2048 :: WrappingKeySpec
data AliasListEntry = AliasListEntry' (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe POSIX) (Maybe Text)
newAliasListEntry :: AliasListEntry
data CustomKeyStoresListEntry = CustomKeyStoresListEntry' (Maybe Text) (Maybe Text) (Maybe ConnectionErrorCodeType) (Maybe POSIX) (Maybe Text) (Maybe Text) (Maybe ConnectionStateType)
newCustomKeyStoresListEntry :: CustomKeyStoresListEntry
data GrantConstraints = GrantConstraints' (Maybe (HashMap Text Text)) (Maybe (HashMap Text Text))
newGrantConstraints :: GrantConstraints
data GrantListEntry = GrantListEntry' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe GrantConstraints) (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe [GrantOperation])
newGrantListEntry :: GrantListEntry
data KeyListEntry = KeyListEntry' (Maybe Text) (Maybe Text)
newKeyListEntry :: KeyListEntry
data KeyMetadata = KeyMetadata' (Maybe OriginType) (Maybe ExpirationModelType) (Maybe KeyManagerType) (Maybe KeySpec) (Maybe CustomerMasterKeySpec) (Maybe Bool) (Maybe POSIX) (Maybe Text) (Maybe KeyState) (Maybe [EncryptionAlgorithmSpec]) (Maybe Text) (Maybe [SigningAlgorithmSpec]) (Maybe Natural) (Maybe KeyUsageType) (Maybe POSIX) (Maybe POSIX) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Bool) (Maybe MultiRegionConfiguration) Text
newKeyMetadata :: Text -> KeyMetadata
data ListGrantsResponse = ListGrantsResponse' (Maybe Bool) (Maybe [GrantListEntry]) (Maybe Text)
newListGrantsResponse :: ListGrantsResponse
data MultiRegionConfiguration = MultiRegionConfiguration' (Maybe MultiRegionKey) (Maybe [MultiRegionKey]) (Maybe MultiRegionKeyType)
newMultiRegionConfiguration :: MultiRegionConfiguration
data MultiRegionKey = MultiRegionKey' (Maybe Text) (Maybe Text)
newMultiRegionKey :: MultiRegionKey
data Tag = Tag' Text Text
newTag :: Text -> Text -> Tag

Service Configuration

defaultService :: Service Source #

API version 2014-11-01 of the Amazon Key Management Service SDK configuration.

Errors

Error matchers are designed for use with the functions provided by Control.Exception.Lens. This allows catching (and rethrowing) service specific errors returned by KMS.

InvalidMarkerException

_InvalidMarkerException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the marker that specifies where pagination should next begin is not valid.

KMSInvalidStateException

_KMSInvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the state of the specified resource is not valid for this request.

For more information about how key state affects the use of a KMS key, see Key state: Effect on your KMS key in the /Key Management Service Developer Guide/ .

InvalidKeyUsageException

_InvalidKeyUsageException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected for one of the following reasons:

The KeyUsage value of the KMS key is incompatible with the API operation.
The encryption algorithm or signing algorithm specified for the operation is incompatible with the type of key material in the KMS key (KeySpec).

For encrypting, decrypting, re-encrypting, and generating data keys, the KeyUsage must be ENCRYPT_DECRYPT. For signing and verifying, the KeyUsage must be SIGN_VERIFY. To find the KeyUsage of a KMS key, use the DescribeKey operation.

To find the encryption or signing algorithms supported for a particular KMS key, use the DescribeKey operation.

MalformedPolicyDocumentException

_MalformedPolicyDocumentException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified policy is not syntactically or semantically correct.

CustomKeyStoreNameInUseException

_CustomKeyStoreNameInUseException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified custom key store name is already assigned to another custom key store in the account. Try again with a custom key store name that is unique in the account.

UnsupportedOperationException

_UnsupportedOperationException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because a specified parameter is not supported or a specified resource is not valid for this operation.

DisabledException

_DisabledException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified KMS key is not enabled.

KeyUnavailableException

_KeyUnavailableException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified KMS key was not available. You can retry the request.

IncorrectKeyMaterialException

_IncorrectKeyMaterialException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the key material in the request is, expired, invalid, or is not the same key material that was previously imported into this KMS key.

KMSInternalException

_KMSInternalException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because an internal exception occurred. The request can be retried.

TagException

_TagException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because one or more tags are not valid.

CustomKeyStoreHasCMKsException

_CustomKeyStoreHasCMKsException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the custom key store contains KMS keys. After verifying that you do not need to use the KMS keys, use the ScheduleKeyDeletion operation to delete the KMS keys. After they are deleted, you can delete the custom key store.

InvalidImportTokenException

_InvalidImportTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the provided import token is invalid or is associated with a different KMS key.

CloudHsmClusterNotRelatedException

_CloudHsmClusterNotRelatedException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified CloudHSM cluster has a different cluster certificate than the original cluster. You cannot use the operation to specify an unrelated cluster.

Specify a cluster that shares a backup history with the original cluster. This includes clusters that were created from a backup of the current cluster, and clusters that were created from the same backup that produced the current cluster.

Clusters that share a backup history have the same cluster certificate. To view the cluster certificate of a cluster, use the DescribeClusters operation.

IncorrectTrustAnchorException

_IncorrectTrustAnchorException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the trust anchor certificate in the request is not the trust anchor certificate for the specified CloudHSM cluster.

When you initialize the cluster, you create the trust anchor certificate and save it in the customerCA.crt file.

CloudHsmClusterInvalidConfigurationException

_CloudHsmClusterInvalidConfigurationException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the associated CloudHSM cluster did not meet the configuration requirements for a custom key store.

The cluster must be configured with private subnets in at least two different Availability Zones in the Region.
The security group for the cluster (cloudhsm-cluster-<cluster-id>-sg) must include inbound rules and outbound rules that allow TCP traffic on ports 2223-2225. The Source in the inbound rules and the Destination in the outbound rules must match the security group ID. These rules are set by default when you create the cluster. Do not delete or change them. To get information about a particular security group, use the DescribeSecurityGroups operation.
The cluster must contain at least as many HSMs as the operation requires. To add HSMs, use the CloudHSM CreateHsm operation.
For the CreateCustomKeyStore, UpdateCustomKeyStore, and CreateKey operations, the CloudHSM cluster must have at least two active HSMs, each in a different Availability Zone. For the ConnectCustomKeyStore operation, the CloudHSM must contain at least one active HSM.

For information about the requirements for an CloudHSM cluster that is associated with a custom key store, see Assemble the Prerequisites in the Key Management Service Developer Guide. For information about creating a private subnet for an CloudHSM cluster, see Create a Private Subnet in the CloudHSM User Guide. For information about cluster security groups, see Configure a Default Security Group in the /CloudHSM User Guide/ .

CloudHsmClusterNotActiveException

_CloudHsmClusterNotActiveException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the CloudHSM cluster that is associated with the custom key store is not active. Initialize and activate the cluster and try the command again. For detailed instructions, see Getting Started in the CloudHSM User Guide.

CloudHsmClusterNotFoundException

_CloudHsmClusterNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because KMS cannot find the CloudHSM cluster with the specified cluster ID. Retry the request with a different cluster ID.

NotFoundException

_NotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified entity or resource could not be found.

KMSInvalidSignatureException

_KMSInvalidSignatureException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the signature verification failed. Signature verification fails when it cannot confirm that signature was produced by signing the specified message with the specified KMS key and signing algorithm.

InvalidAliasNameException

_InvalidAliasNameException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified alias name is not valid.

CustomKeyStoreNotFoundException

_CustomKeyStoreNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because KMS cannot find a custom key store with the specified key store name or ID.

CustomKeyStoreInvalidStateException

_CustomKeyStoreInvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because of the ConnectionState of the custom key store. To get the ConnectionState of a custom key store, use the DescribeCustomKeyStores operation.

This exception is thrown under the following conditions:

You requested the CreateKey or GenerateRandom operation in a custom key store that is not connected. These operations are valid only when the custom key store ConnectionState is CONNECTED.
You requested the UpdateCustomKeyStore or DeleteCustomKeyStore operation on a custom key store that is not disconnected. This operation is valid only when the custom key store ConnectionState is DISCONNECTED.
You requested the ConnectCustomKeyStore operation on a custom key store with a ConnectionState of DISCONNECTING or FAILED. This operation is valid for all other ConnectionState values.

InvalidGrantIdException

_InvalidGrantIdException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified GrantId is not valid.

InvalidGrantTokenException

_InvalidGrantTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified grant token is not valid.

InvalidArnException

_InvalidArnException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because a specified ARN, or an ARN in a key policy, is not valid.

DependencyTimeoutException

_DependencyTimeoutException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The system timed out while trying to fulfill the request. The request can be retried.

ExpiredImportTokenException

_ExpiredImportTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified import token is expired. Use GetParametersForImport to get a new import token and public key, use the new public key to encrypt the key material, and then try the request again.

InvalidCiphertextException

_InvalidCiphertextException :: AsError a => Getting (First ServiceError) a ServiceError Source #

From the Decrypt or ReEncrypt operation, the request was rejected because the specified ciphertext, or additional authenticated data incorporated into the ciphertext, such as the encryption context, is corrupted, missing, or otherwise invalid.

From the ImportKeyMaterial operation, the request was rejected because KMS could not decrypt the encrypted (wrapped) key material.

CloudHsmClusterInUseException

_CloudHsmClusterInUseException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified CloudHSM cluster is already associated with a custom key store or it shares a backup history with a cluster that is associated with a custom key store. Each custom key store must be associated with a different CloudHSM cluster.

Clusters that share a backup history have the same cluster certificate. To view the cluster certificate of a cluster, use the DescribeClusters operation.

IncorrectKeyException

_IncorrectKeyException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because the specified KMS key cannot decrypt the data. The KeyId in a Decrypt request and the SourceKeyId in a ReEncrypt request must identify the same KMS key that was used to encrypt the ciphertext.

AlreadyExistsException

_AlreadyExistsException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because it attempted to create a resource that already exists.

LimitExceededException

_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request was rejected because a quota was exceeded. For more information, see Quotas in the Key Management Service Developer Guide.

Waiters

Waiters poll by repeatedly sending a request until some remote success condition configured by the Wait specification is fulfilled. The Wait specification determines how many attempts should be made, in addition to delay and retry strategies.

Operations

Some AWS operations return results that are incomplete and require subsequent requests in order to obtain the entire result set. The process of sending subsequent requests to continue where a previous request left off is called pagination. For example, the ListObjects operation of Amazon S3 returns up to 1000 objects at a time, and you must send subsequent requests with the appropriate Marker in order to retrieve the next page of results.

Operations that have an AWSPager instance can transparently perform subsequent requests, correctly setting Markers and other request facets to iterate through the entire result set of a truncated API operation. Operations which support this have an additional note in the documentation.

Many operations have the ability to filter results on the server side. See the individual operation parameters for details.

Encrypt

data Encrypt Source #

See: newEncrypt smart constructor.

Constructors

Encrypt' (Maybe (HashMap Text Text)) (Maybe [Text]) (Maybe EncryptionAlgorithmSpec) Text (Sensitive Base64)

Instances

Instances details

Eq Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods (==) :: Encrypt -> Encrypt -> Bool # (/=) :: Encrypt -> Encrypt -> Bool #
Show Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods showsPrec :: Int -> Encrypt -> ShowS # show :: Encrypt -> String # showList :: [Encrypt] -> ShowS #
Generic Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Associated Types type Rep Encrypt :: Type -> Type # Methods from :: Encrypt -> Rep Encrypt x # to :: Rep Encrypt x -> Encrypt #
NFData Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods rnf :: Encrypt -> () #
Hashable Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods hashWithSalt :: Int -> Encrypt -> Int # hash :: Encrypt -> Int #
ToJSON Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods toJSON :: Encrypt -> Value # toEncoding :: Encrypt -> Encoding # toJSONList :: [Encrypt] -> Value # toEncodingList :: [Encrypt] -> Encoding #
AWSRequest Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Associated Types type AWSResponse Encrypt # Methods request :: Encrypt -> Request Encrypt # response :: MonadResource m => Logger -> Service -> Proxy Encrypt -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse Encrypt))) #
ToHeaders Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods toHeaders :: Encrypt -> [Header] #
ToPath Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods toPath :: Encrypt -> ByteString #
ToQuery Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods toQuery :: Encrypt -> QueryString #
type Rep Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt type Rep Encrypt = D1 ('MetaData "Encrypt" "Amazonka.KMS.Encrypt" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "Encrypt'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "encryptionContext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text))) :: S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text]))) :: (S1 ('MetaSel ('Just "encryptionAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EncryptionAlgorithmSpec)) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: S1 ('MetaSel ('Just "plaintext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Sensitive Base64))))))
type AWSResponse Encrypt Source #
Instance details Defined in Amazonka.KMS.Encrypt type AWSResponse Encrypt = EncryptResponse

newEncrypt Source #

Arguments

:: Text	`$sel:keyId:Encrypt'`
-> ByteString	`$sel:plaintext:Encrypt'`
-> Encrypt

Create a value of Encrypt with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:encryptionContext:Encrypt', encrypt_encryptionContext - Specifies the encryption context that will be used to encrypt the data. An encryption context is valid only for cryptographic operations with a symmetric KMS key. The standard asymmetric encryption algorithms that KMS uses do not support an encryption context.

An encryption context is a collection of non-secret key-value pairs that represents additional authenticated data. When you use an encryption context to encrypt data, you must specify the same (an exact case-sensitive match) encryption context to decrypt the data. An encryption context is optional when encrypting with a symmetric KMS key, but it is highly recommended.

For more information, see Encryption Context in the Key Management Service Developer Guide.

$sel:grantTokens:Encrypt', encrypt_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:encryptionAlgorithm:Encrypt', encrypt_encryptionAlgorithm - Specifies the encryption algorithm that KMS will use to encrypt the plaintext message. The algorithm must be compatible with the KMS key that you specify.

This parameter is required only for asymmetric KMS keys. The default value, SYMMETRIC_DEFAULT, is the algorithm used for symmetric KMS keys. If you are using an asymmetric KMS key, we recommend RSAES_OAEP_SHA_256.

$sel:keyId:Encrypt', encrypt_keyId - Identifies the KMS key to use in the encryption operation.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

$sel:plaintext:Encrypt', encrypt_plaintext - Data to be encrypted.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

data EncryptResponse Source #

See: newEncryptResponse smart constructor.

Constructors

EncryptResponse' (Maybe Text) (Maybe EncryptionAlgorithmSpec) (Maybe Base64) Int

Instances

Instances details

Eq EncryptResponse Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods (==) :: EncryptResponse -> EncryptResponse -> Bool # (/=) :: EncryptResponse -> EncryptResponse -> Bool #
Read EncryptResponse Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods readsPrec :: Int -> ReadS EncryptResponse # readList :: ReadS [EncryptResponse] # readPrec :: ReadPrec EncryptResponse # readListPrec :: ReadPrec [EncryptResponse] #
Show EncryptResponse Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods showsPrec :: Int -> EncryptResponse -> ShowS # show :: EncryptResponse -> String # showList :: [EncryptResponse] -> ShowS #
Generic EncryptResponse Source #
Instance details Defined in Amazonka.KMS.Encrypt Associated Types type Rep EncryptResponse :: Type -> Type # Methods from :: EncryptResponse -> Rep EncryptResponse x # to :: Rep EncryptResponse x -> EncryptResponse #
NFData EncryptResponse Source #
Instance details Defined in Amazonka.KMS.Encrypt Methods rnf :: EncryptResponse -> () #
type Rep EncryptResponse Source #
Instance details Defined in Amazonka.KMS.Encrypt type Rep EncryptResponse = D1 ('MetaData "EncryptResponse" "Amazonka.KMS.Encrypt" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "EncryptResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "encryptionAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EncryptionAlgorithmSpec))) :: (S1 ('MetaSel ('Just "ciphertextBlob") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newEncryptResponse Source #

Arguments

:: Int	`$sel:httpStatus:EncryptResponse'`
-> EncryptResponse

Create a value of EncryptResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:Encrypt', encryptResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key that was used to encrypt the plaintext.

$sel:encryptionAlgorithm:Encrypt', encryptResponse_encryptionAlgorithm - The encryption algorithm that was used to encrypt the plaintext.

$sel:ciphertextBlob:EncryptResponse', encryptResponse_ciphertextBlob - The encrypted plaintext. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:httpStatus:EncryptResponse', encryptResponse_httpStatus - The response's http status code.

CreateCustomKeyStore

data CreateCustomKeyStore Source #

See: newCreateCustomKeyStore smart constructor.

Constructors

CreateCustomKeyStore' Text Text Text (Sensitive Text)

Instances

Instances details

Eq CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods (==) :: CreateCustomKeyStore -> CreateCustomKeyStore -> Bool # (/=) :: CreateCustomKeyStore -> CreateCustomKeyStore -> Bool #
Show CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods showsPrec :: Int -> CreateCustomKeyStore -> ShowS # show :: CreateCustomKeyStore -> String # showList :: [CreateCustomKeyStore] -> ShowS #
Generic CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Associated Types type Rep CreateCustomKeyStore :: Type -> Type # Methods from :: CreateCustomKeyStore -> Rep CreateCustomKeyStore x # to :: Rep CreateCustomKeyStore x -> CreateCustomKeyStore #
NFData CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods rnf :: CreateCustomKeyStore -> () #
Hashable CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods hashWithSalt :: Int -> CreateCustomKeyStore -> Int # hash :: CreateCustomKeyStore -> Int #
ToJSON CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods toJSON :: CreateCustomKeyStore -> Value # toEncoding :: CreateCustomKeyStore -> Encoding # toJSONList :: [CreateCustomKeyStore] -> Value # toEncodingList :: [CreateCustomKeyStore] -> Encoding #
AWSRequest CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Associated Types type AWSResponse CreateCustomKeyStore # Methods request :: CreateCustomKeyStore -> Request CreateCustomKeyStore # response :: MonadResource m => Logger -> Service -> Proxy CreateCustomKeyStore -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse CreateCustomKeyStore))) #
ToHeaders CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods toHeaders :: CreateCustomKeyStore -> [Header] #
ToPath CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods toPath :: CreateCustomKeyStore -> ByteString #
ToQuery CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods toQuery :: CreateCustomKeyStore -> QueryString #
type Rep CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore type Rep CreateCustomKeyStore = D1 ('MetaData "CreateCustomKeyStore" "Amazonka.KMS.CreateCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CreateCustomKeyStore'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "customKeyStoreName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: S1 ('MetaSel ('Just "cloudHsmClusterId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)) :: (S1 ('MetaSel ('Just "trustAnchorCertificate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "keyStorePassword") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Sensitive Text)))))
type AWSResponse CreateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore type AWSResponse CreateCustomKeyStore = CreateCustomKeyStoreResponse

newCreateCustomKeyStore Source #

Arguments

:: Text	`$sel:customKeyStoreName:CreateCustomKeyStore'`
-> Text	`$sel:cloudHsmClusterId:CreateCustomKeyStore'`
-> Text	`$sel:trustAnchorCertificate:CreateCustomKeyStore'`
-> Text	`$sel:keyStorePassword:CreateCustomKeyStore'`
-> CreateCustomKeyStore

Create a value of CreateCustomKeyStore with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:customKeyStoreName:CreateCustomKeyStore', createCustomKeyStore_customKeyStoreName - Specifies a friendly name for the custom key store. The name must be unique in your Amazon Web Services account.

$sel:cloudHsmClusterId:CreateCustomKeyStore', createCustomKeyStore_cloudHsmClusterId - Identifies the CloudHSM cluster for the custom key store. Enter the cluster ID of any active CloudHSM cluster that is not already associated with a custom key store. To find the cluster ID, use the DescribeClusters operation.

$sel:trustAnchorCertificate:CreateCustomKeyStore', createCustomKeyStore_trustAnchorCertificate - Enter the content of the trust anchor certificate for the cluster. This is the content of the customerCA.crt file that you created when you initialized the cluster.

$sel:keyStorePassword:CreateCustomKeyStore', createCustomKeyStore_keyStorePassword - Enter the password of the kmsuser crypto user (CU) account in the specified CloudHSM cluster. KMS logs into the cluster as this user to manage key material on your behalf.

The password must be a string of 7 to 32 characters. Its value is case sensitive.

This parameter tells KMS the kmsuser account password; it does not change the password in the CloudHSM cluster.

data CreateCustomKeyStoreResponse Source #

See: newCreateCustomKeyStoreResponse smart constructor.

Constructors

CreateCustomKeyStoreResponse' (Maybe Text) Int

Instances

Instances details

Eq CreateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods (==) :: CreateCustomKeyStoreResponse -> CreateCustomKeyStoreResponse -> Bool # (/=) :: CreateCustomKeyStoreResponse -> CreateCustomKeyStoreResponse -> Bool #
Read CreateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods readsPrec :: Int -> ReadS CreateCustomKeyStoreResponse # readList :: ReadS [CreateCustomKeyStoreResponse] # readPrec :: ReadPrec CreateCustomKeyStoreResponse # readListPrec :: ReadPrec [CreateCustomKeyStoreResponse] #
Show CreateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods showsPrec :: Int -> CreateCustomKeyStoreResponse -> ShowS # show :: CreateCustomKeyStoreResponse -> String # showList :: [CreateCustomKeyStoreResponse] -> ShowS #
Generic CreateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Associated Types type Rep CreateCustomKeyStoreResponse :: Type -> Type # Methods from :: CreateCustomKeyStoreResponse -> Rep CreateCustomKeyStoreResponse x # to :: Rep CreateCustomKeyStoreResponse x -> CreateCustomKeyStoreResponse #
NFData CreateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore Methods rnf :: CreateCustomKeyStoreResponse -> () #
type Rep CreateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.CreateCustomKeyStore type Rep CreateCustomKeyStoreResponse = D1 ('MetaData "CreateCustomKeyStoreResponse" "Amazonka.KMS.CreateCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CreateCustomKeyStoreResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newCreateCustomKeyStoreResponse Source #

Arguments

:: Int	`$sel:httpStatus:CreateCustomKeyStoreResponse'`
-> CreateCustomKeyStoreResponse

Create a value of CreateCustomKeyStoreResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:customKeyStoreId:CreateCustomKeyStoreResponse', createCustomKeyStoreResponse_customKeyStoreId - A unique identifier for the new custom key store.

$sel:httpStatus:CreateCustomKeyStoreResponse', createCustomKeyStoreResponse_httpStatus - The response's http status code.

ListGrants (Paginated)

data ListGrants Source #

See: newListGrants smart constructor.

Constructors

ListGrants' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Natural) Text

Instances

Instances details

Eq ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods (==) :: ListGrants -> ListGrants -> Bool # (/=) :: ListGrants -> ListGrants -> Bool #
Read ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods readsPrec :: Int -> ReadS ListGrants # readList :: ReadS [ListGrants] # readPrec :: ReadPrec ListGrants # readListPrec :: ReadPrec [ListGrants] #
Show ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods showsPrec :: Int -> ListGrants -> ShowS # show :: ListGrants -> String # showList :: [ListGrants] -> ShowS #
Generic ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Associated Types type Rep ListGrants :: Type -> Type # Methods from :: ListGrants -> Rep ListGrants x # to :: Rep ListGrants x -> ListGrants #
NFData ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods rnf :: ListGrants -> () #
Hashable ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods hashWithSalt :: Int -> ListGrants -> Int # hash :: ListGrants -> Int #
ToJSON ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods toJSON :: ListGrants -> Value # toEncoding :: ListGrants -> Encoding # toJSONList :: [ListGrants] -> Value # toEncodingList :: [ListGrants] -> Encoding #
AWSPager ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods page :: ListGrants -> AWSResponse ListGrants -> Maybe ListGrants #
AWSRequest ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Associated Types type AWSResponse ListGrants # Methods request :: ListGrants -> Request ListGrants # response :: MonadResource m => Logger -> Service -> Proxy ListGrants -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ListGrants))) #
ToHeaders ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods toHeaders :: ListGrants -> [Header] #
ToPath ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods toPath :: ListGrants -> ByteString #
ToQuery ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants Methods toQuery :: ListGrants -> QueryString #
type Rep ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants type Rep ListGrants = D1 ('MetaData "ListGrants" "Amazonka.KMS.ListGrants" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListGrants'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "grantId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "granteePrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "marker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "limit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))
type AWSResponse ListGrants Source #
Instance details Defined in Amazonka.KMS.ListGrants type AWSResponse ListGrants = ListGrantsResponse

newListGrants Source #

Arguments

:: Text	`$sel:keyId:ListGrants'`
-> ListGrants

Create a value of ListGrants with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:grantId:ListGrants', listGrants_grantId - Returns only the grant with the specified grant ID. The grant ID uniquely identifies the grant.

$sel:granteePrincipal:ListGrants', listGrants_granteePrincipal - Returns only grants where the specified principal is the grantee principal for the grant.

$sel:marker:ListGrants', listGrants_marker - Use this parameter in a subsequent request after you receive a response with truncated results. Set it to the value of NextMarker from the truncated response you just received.

$sel:limit:ListGrants', listGrants_limit - Use this parameter to specify the maximum number of items to return. When this value is present, KMS does not return more than the specified number of items, but it might return fewer.

This value is optional. If you include a value, it must be between 1 and 100, inclusive. If you do not include a value, it defaults to 50.

$sel:keyId:ListGrants', listGrants_keyId - Returns only grants for the specified KMS key. This parameter is required.

Specify the key ID or key ARN of the KMS key. To specify a KMS key in a different Amazon Web Services account, you must use the key ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data ListGrantsResponse Source #

See: newListGrantsResponse smart constructor.

Constructors

ListGrantsResponse' (Maybe Bool) (Maybe [GrantListEntry]) (Maybe Text)

Instances

Instances details

Eq ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods (==) :: ListGrantsResponse -> ListGrantsResponse -> Bool # (/=) :: ListGrantsResponse -> ListGrantsResponse -> Bool #
Read ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods readsPrec :: Int -> ReadS ListGrantsResponse # readList :: ReadS [ListGrantsResponse] # readPrec :: ReadPrec ListGrantsResponse # readListPrec :: ReadPrec [ListGrantsResponse] #
Show ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods showsPrec :: Int -> ListGrantsResponse -> ShowS # show :: ListGrantsResponse -> String # showList :: [ListGrantsResponse] -> ShowS #
Generic ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Associated Types type Rep ListGrantsResponse :: Type -> Type # Methods from :: ListGrantsResponse -> Rep ListGrantsResponse x # to :: Rep ListGrantsResponse x -> ListGrantsResponse #
NFData ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods rnf :: ListGrantsResponse -> () #
Hashable ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods hashWithSalt :: Int -> ListGrantsResponse -> Int # hash :: ListGrantsResponse -> Int #
FromJSON ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods parseJSON :: Value -> Parser ListGrantsResponse # parseJSONList :: Value -> Parser [ListGrantsResponse] #
type Rep ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse type Rep ListGrantsResponse = D1 ('MetaData "ListGrantsResponse" "Amazonka.KMS.Types.ListGrantsResponse" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListGrantsResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: (S1 ('MetaSel ('Just "grants") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [GrantListEntry])) :: S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))

newListGrantsResponse :: ListGrantsResponse Source #

Create a value of ListGrantsResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:truncated:ListGrantsResponse', listGrantsResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:grants:ListGrantsResponse', listGrantsResponse_grants - A list of grants.

$sel:nextMarker:ListGrantsResponse', listGrantsResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

DisableKeyRotation

data DisableKeyRotation Source #

See: newDisableKeyRotation smart constructor.

Constructors

DisableKeyRotation' Text

Instances

Instances details

Eq DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods (==) :: DisableKeyRotation -> DisableKeyRotation -> Bool # (/=) :: DisableKeyRotation -> DisableKeyRotation -> Bool #
Read DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods readsPrec :: Int -> ReadS DisableKeyRotation # readList :: ReadS [DisableKeyRotation] # readPrec :: ReadPrec DisableKeyRotation # readListPrec :: ReadPrec [DisableKeyRotation] #
Show DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods showsPrec :: Int -> DisableKeyRotation -> ShowS # show :: DisableKeyRotation -> String # showList :: [DisableKeyRotation] -> ShowS #
Generic DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Associated Types type Rep DisableKeyRotation :: Type -> Type # Methods from :: DisableKeyRotation -> Rep DisableKeyRotation x # to :: Rep DisableKeyRotation x -> DisableKeyRotation #
NFData DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods rnf :: DisableKeyRotation -> () #
Hashable DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods hashWithSalt :: Int -> DisableKeyRotation -> Int # hash :: DisableKeyRotation -> Int #
ToJSON DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods toJSON :: DisableKeyRotation -> Value # toEncoding :: DisableKeyRotation -> Encoding # toJSONList :: [DisableKeyRotation] -> Value # toEncodingList :: [DisableKeyRotation] -> Encoding #
AWSRequest DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Associated Types type AWSResponse DisableKeyRotation # Methods request :: DisableKeyRotation -> Request DisableKeyRotation # response :: MonadResource m => Logger -> Service -> Proxy DisableKeyRotation -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DisableKeyRotation))) #
ToHeaders DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods toHeaders :: DisableKeyRotation -> [Header] #
ToPath DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods toPath :: DisableKeyRotation -> ByteString #
ToQuery DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods toQuery :: DisableKeyRotation -> QueryString #
type Rep DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation type Rep DisableKeyRotation = D1 ('MetaData "DisableKeyRotation" "Amazonka.KMS.DisableKeyRotation" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DisableKeyRotation'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse DisableKeyRotation Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation type AWSResponse DisableKeyRotation = DisableKeyRotationResponse

newDisableKeyRotation Source #

Arguments

:: Text	`$sel:keyId:DisableKeyRotation'`
-> DisableKeyRotation

Create a value of DisableKeyRotation with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:DisableKeyRotation', disableKeyRotation_keyId - Identifies a symmetric KMS key. You cannot enable or disable automatic rotation of asymmetric KMS keys, KMS keys with imported key material, or KMS keys in a custom key store.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data DisableKeyRotationResponse Source #

See: newDisableKeyRotationResponse smart constructor.

Constructors

DisableKeyRotationResponse'

Instances

Instances details

Eq DisableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods (==) :: DisableKeyRotationResponse -> DisableKeyRotationResponse -> Bool # (/=) :: DisableKeyRotationResponse -> DisableKeyRotationResponse -> Bool #
Read DisableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods readsPrec :: Int -> ReadS DisableKeyRotationResponse # readList :: ReadS [DisableKeyRotationResponse] # readPrec :: ReadPrec DisableKeyRotationResponse # readListPrec :: ReadPrec [DisableKeyRotationResponse] #
Show DisableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods showsPrec :: Int -> DisableKeyRotationResponse -> ShowS # show :: DisableKeyRotationResponse -> String # showList :: [DisableKeyRotationResponse] -> ShowS #
Generic DisableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Associated Types type Rep DisableKeyRotationResponse :: Type -> Type # Methods from :: DisableKeyRotationResponse -> Rep DisableKeyRotationResponse x # to :: Rep DisableKeyRotationResponse x -> DisableKeyRotationResponse #
NFData DisableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation Methods rnf :: DisableKeyRotationResponse -> () #
type Rep DisableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.DisableKeyRotation type Rep DisableKeyRotationResponse = D1 ('MetaData "DisableKeyRotationResponse" "Amazonka.KMS.DisableKeyRotation" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DisableKeyRotationResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newDisableKeyRotationResponse :: DisableKeyRotationResponse Source #

Create a value of DisableKeyRotationResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

Verify

data Verify Source #

See: newVerify smart constructor.

Constructors

Verify' (Maybe MessageType) (Maybe [Text]) Text (Sensitive Base64) Base64 SigningAlgorithmSpec

Instances

Instances details

Eq Verify Source #
Instance details Defined in Amazonka.KMS.Verify Methods (==) :: Verify -> Verify -> Bool # (/=) :: Verify -> Verify -> Bool #
Show Verify Source #
Instance details Defined in Amazonka.KMS.Verify Methods showsPrec :: Int -> Verify -> ShowS # show :: Verify -> String # showList :: [Verify] -> ShowS #
Generic Verify Source #
Instance details Defined in Amazonka.KMS.Verify Associated Types type Rep Verify :: Type -> Type # Methods from :: Verify -> Rep Verify x # to :: Rep Verify x -> Verify #
NFData Verify Source #
Instance details Defined in Amazonka.KMS.Verify Methods rnf :: Verify -> () #
Hashable Verify Source #
Instance details Defined in Amazonka.KMS.Verify Methods hashWithSalt :: Int -> Verify -> Int # hash :: Verify -> Int #
ToJSON Verify Source #
Instance details Defined in Amazonka.KMS.Verify Methods toJSON :: Verify -> Value # toEncoding :: Verify -> Encoding # toJSONList :: [Verify] -> Value # toEncodingList :: [Verify] -> Encoding #
AWSRequest Verify Source #
Instance details Defined in Amazonka.KMS.Verify Associated Types type AWSResponse Verify # Methods request :: Verify -> Request Verify # response :: MonadResource m => Logger -> Service -> Proxy Verify -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse Verify))) #
ToHeaders Verify Source #
Instance details Defined in Amazonka.KMS.Verify Methods toHeaders :: Verify -> [Header] #
ToPath Verify Source #
Instance details Defined in Amazonka.KMS.Verify Methods toPath :: Verify -> ByteString #
ToQuery Verify Source #
Instance details Defined in Amazonka.KMS.Verify Methods toQuery :: Verify -> QueryString #
type Rep Verify Source #
Instance details Defined in Amazonka.KMS.Verify type Rep Verify = D1 ('MetaData "Verify" "Amazonka.KMS.Verify" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "Verify'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "messageType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe MessageType)) :: (S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))) :: (S1 ('MetaSel ('Just "message") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Sensitive Base64)) :: (S1 ('MetaSel ('Just "signature") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Base64) :*: S1 ('MetaSel ('Just "signingAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 SigningAlgorithmSpec)))))
type AWSResponse Verify Source #
Instance details Defined in Amazonka.KMS.Verify type AWSResponse Verify = VerifyResponse

newVerify Source #

Arguments

:: Text	`$sel:keyId:Verify'`
-> ByteString	`$sel:message:Verify'`
-> ByteString	`$sel:signature:Verify'`
-> SigningAlgorithmSpec	`$sel:signingAlgorithm:Verify'`
-> Verify

Create a value of Verify with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:messageType:Verify', verify_messageType - Tells KMS whether the value of the Message parameter is a message or message digest. The default value, RAW, indicates a message. To indicate a message digest, enter DIGEST.

Use the DIGEST value only when the value of the Message parameter is a message digest. If you use the DIGEST value with a raw message, the security of the verification operation can be compromised.

$sel:grantTokens:Verify', verify_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:keyId:Verify', verify_keyId - Identifies the asymmetric KMS key that will be used to verify the signature. This must be the same KMS key that was used to generate the signature. If you specify a different KMS key, the signature verification fails.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

$sel:message:Verify', verify_message - Specifies the message that was signed. You can submit a raw message of up to 4096 bytes, or a hash digest of the message. If you submit a digest, use the MessageType parameter with a value of DIGEST.

If the message specified here is different from the message that was signed, the signature verification fails. A message and its hash digest are considered to be the same message.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:signature:Verify', verify_signature - The signature that the Sign operation generated.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:signingAlgorithm:Verify', verify_signingAlgorithm - The signing algorithm that was used to sign the message. If you submit a different algorithm, the signature verification fails.

data VerifyResponse Source #

See: newVerifyResponse smart constructor.

Constructors

VerifyResponse' (Maybe SigningAlgorithmSpec) (Maybe Bool) (Maybe Text) Int

Instances

Instances details

Eq VerifyResponse Source #
Instance details Defined in Amazonka.KMS.Verify Methods (==) :: VerifyResponse -> VerifyResponse -> Bool # (/=) :: VerifyResponse -> VerifyResponse -> Bool #
Read VerifyResponse Source #
Instance details Defined in Amazonka.KMS.Verify Methods readsPrec :: Int -> ReadS VerifyResponse # readList :: ReadS [VerifyResponse] # readPrec :: ReadPrec VerifyResponse # readListPrec :: ReadPrec [VerifyResponse] #
Show VerifyResponse Source #
Instance details Defined in Amazonka.KMS.Verify Methods showsPrec :: Int -> VerifyResponse -> ShowS # show :: VerifyResponse -> String # showList :: [VerifyResponse] -> ShowS #
Generic VerifyResponse Source #
Instance details Defined in Amazonka.KMS.Verify Associated Types type Rep VerifyResponse :: Type -> Type # Methods from :: VerifyResponse -> Rep VerifyResponse x # to :: Rep VerifyResponse x -> VerifyResponse #
NFData VerifyResponse Source #
Instance details Defined in Amazonka.KMS.Verify Methods rnf :: VerifyResponse -> () #
type Rep VerifyResponse Source #
Instance details Defined in Amazonka.KMS.Verify type Rep VerifyResponse = D1 ('MetaData "VerifyResponse" "Amazonka.KMS.Verify" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "VerifyResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "signingAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe SigningAlgorithmSpec)) :: S1 ('MetaSel ('Just "signatureValid") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool))) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newVerifyResponse Source #

Arguments

:: Int	`$sel:httpStatus:VerifyResponse'`
-> VerifyResponse

Create a value of VerifyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:signingAlgorithm:Verify', verifyResponse_signingAlgorithm - The signing algorithm that was used to verify the signature.

$sel:signatureValid:VerifyResponse', verifyResponse_signatureValid - A Boolean value that indicates whether the signature was verified. A value of True indicates that the Signature was produced by signing the Message with the specified KeyID and SigningAlgorithm. If the signature is not verified, the Verify operation fails with a KMSInvalidSignatureException exception.

$sel:keyId:Verify', verifyResponse_keyId - The Amazon Resource Name (key ARN) of the asymmetric KMS key that was used to verify the signature.

$sel:httpStatus:VerifyResponse', verifyResponse_httpStatus - The response's http status code.

GenerateDataKeyWithoutPlaintext

data GenerateDataKeyWithoutPlaintext Source #

See: newGenerateDataKeyWithoutPlaintext smart constructor.

Constructors

GenerateDataKeyWithoutPlaintext' (Maybe DataKeySpec) (Maybe (HashMap Text Text)) (Maybe Natural) (Maybe [Text]) Text

Instances

Instances details

Eq GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods (==) :: GenerateDataKeyWithoutPlaintext -> GenerateDataKeyWithoutPlaintext -> Bool # (/=) :: GenerateDataKeyWithoutPlaintext -> GenerateDataKeyWithoutPlaintext -> Bool #
Read GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods readsPrec :: Int -> ReadS GenerateDataKeyWithoutPlaintext # readList :: ReadS [GenerateDataKeyWithoutPlaintext] # readPrec :: ReadPrec GenerateDataKeyWithoutPlaintext # readListPrec :: ReadPrec [GenerateDataKeyWithoutPlaintext] #
Show GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods showsPrec :: Int -> GenerateDataKeyWithoutPlaintext -> ShowS # show :: GenerateDataKeyWithoutPlaintext -> String # showList :: [GenerateDataKeyWithoutPlaintext] -> ShowS #
Generic GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Associated Types type Rep GenerateDataKeyWithoutPlaintext :: Type -> Type # Methods from :: GenerateDataKeyWithoutPlaintext -> Rep GenerateDataKeyWithoutPlaintext x # to :: Rep GenerateDataKeyWithoutPlaintext x -> GenerateDataKeyWithoutPlaintext #
NFData GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods rnf :: GenerateDataKeyWithoutPlaintext -> () #
Hashable GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods hashWithSalt :: Int -> GenerateDataKeyWithoutPlaintext -> Int # hash :: GenerateDataKeyWithoutPlaintext -> Int #
ToJSON GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods toJSON :: GenerateDataKeyWithoutPlaintext -> Value # toEncoding :: GenerateDataKeyWithoutPlaintext -> Encoding # toJSONList :: [GenerateDataKeyWithoutPlaintext] -> Value # toEncodingList :: [GenerateDataKeyWithoutPlaintext] -> Encoding #
AWSRequest GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Associated Types type AWSResponse GenerateDataKeyWithoutPlaintext # Methods request :: GenerateDataKeyWithoutPlaintext -> Request GenerateDataKeyWithoutPlaintext # response :: MonadResource m => Logger -> Service -> Proxy GenerateDataKeyWithoutPlaintext -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GenerateDataKeyWithoutPlaintext))) #
ToHeaders GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods toHeaders :: GenerateDataKeyWithoutPlaintext -> [Header] #
ToPath GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods toPath :: GenerateDataKeyWithoutPlaintext -> ByteString #
ToQuery GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods toQuery :: GenerateDataKeyWithoutPlaintext -> QueryString #
type Rep GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext type Rep GenerateDataKeyWithoutPlaintext = D1 ('MetaData "GenerateDataKeyWithoutPlaintext" "Amazonka.KMS.GenerateDataKeyWithoutPlaintext" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateDataKeyWithoutPlaintext'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe DataKeySpec)) :: S1 ('MetaSel ('Just "encryptionContext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text)))) :: (S1 ('MetaSel ('Just "numberOfBytes") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :: (S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))
type AWSResponse GenerateDataKeyWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext type AWSResponse GenerateDataKeyWithoutPlaintext = GenerateDataKeyWithoutPlaintextResponse

newGenerateDataKeyWithoutPlaintext Source #

Arguments

:: Text	`$sel:keyId:GenerateDataKeyWithoutPlaintext'`
-> GenerateDataKeyWithoutPlaintext

Create a value of GenerateDataKeyWithoutPlaintext with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keySpec:GenerateDataKeyWithoutPlaintext', generateDataKeyWithoutPlaintext_keySpec - The length of the data key. Use AES_128 to generate a 128-bit symmetric key, or AES_256 to generate a 256-bit symmetric key.

$sel:encryptionContext:GenerateDataKeyWithoutPlaintext', generateDataKeyWithoutPlaintext_encryptionContext - Specifies the encryption context that will be used when encrypting the data key.

An encryption context is a collection of non-secret key-value pairs that represents additional authenticated data. When you use an encryption context to encrypt data, you must specify the same (an exact case-sensitive match) encryption context to decrypt the data. An encryption context is optional when encrypting with a symmetric KMS key, but it is highly recommended.

For more information, see Encryption Context in the Key Management Service Developer Guide.

$sel:numberOfBytes:GenerateDataKeyWithoutPlaintext', generateDataKeyWithoutPlaintext_numberOfBytes - The length of the data key in bytes. For example, use the value 64 to generate a 512-bit data key (64 bytes is 512 bits). For common key lengths (128-bit and 256-bit symmetric keys), we recommend that you use the KeySpec field instead of this one.

$sel:grantTokens:GenerateDataKeyWithoutPlaintext', generateDataKeyWithoutPlaintext_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:keyId:GenerateDataKeyWithoutPlaintext', generateDataKeyWithoutPlaintext_keyId - The identifier of the symmetric KMS key that encrypts the data key.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

data GenerateDataKeyWithoutPlaintextResponse Source #

See: newGenerateDataKeyWithoutPlaintextResponse smart constructor.

Constructors

GenerateDataKeyWithoutPlaintextResponse' (Maybe Text) (Maybe Base64) Int

Instances

Instances details

Eq GenerateDataKeyWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods (==) :: GenerateDataKeyWithoutPlaintextResponse -> GenerateDataKeyWithoutPlaintextResponse -> Bool # (/=) :: GenerateDataKeyWithoutPlaintextResponse -> GenerateDataKeyWithoutPlaintextResponse -> Bool #
Read GenerateDataKeyWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods readsPrec :: Int -> ReadS GenerateDataKeyWithoutPlaintextResponse # readList :: ReadS [GenerateDataKeyWithoutPlaintextResponse] # readPrec :: ReadPrec GenerateDataKeyWithoutPlaintextResponse # readListPrec :: ReadPrec [GenerateDataKeyWithoutPlaintextResponse] #
Show GenerateDataKeyWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods showsPrec :: Int -> GenerateDataKeyWithoutPlaintextResponse -> ShowS # show :: GenerateDataKeyWithoutPlaintextResponse -> String # showList :: [GenerateDataKeyWithoutPlaintextResponse] -> ShowS #
Generic GenerateDataKeyWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Associated Types type Rep GenerateDataKeyWithoutPlaintextResponse :: Type -> Type # Methods from :: GenerateDataKeyWithoutPlaintextResponse -> Rep GenerateDataKeyWithoutPlaintextResponse x # to :: Rep GenerateDataKeyWithoutPlaintextResponse x -> GenerateDataKeyWithoutPlaintextResponse #
NFData GenerateDataKeyWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext Methods rnf :: GenerateDataKeyWithoutPlaintextResponse -> () #
type Rep GenerateDataKeyWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyWithoutPlaintext type Rep GenerateDataKeyWithoutPlaintextResponse = D1 ('MetaData "GenerateDataKeyWithoutPlaintextResponse" "Amazonka.KMS.GenerateDataKeyWithoutPlaintext" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateDataKeyWithoutPlaintextResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "ciphertextBlob") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64)) :: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newGenerateDataKeyWithoutPlaintextResponse Source #

Arguments

:: Int	`$sel:httpStatus:GenerateDataKeyWithoutPlaintextResponse'`
-> GenerateDataKeyWithoutPlaintextResponse

Create a value of GenerateDataKeyWithoutPlaintextResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GenerateDataKeyWithoutPlaintext', generateDataKeyWithoutPlaintextResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key that encrypted the data key.

$sel:ciphertextBlob:GenerateDataKeyWithoutPlaintextResponse', generateDataKeyWithoutPlaintextResponse_ciphertextBlob - The encrypted data key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:httpStatus:GenerateDataKeyWithoutPlaintextResponse', generateDataKeyWithoutPlaintextResponse_httpStatus - The response's http status code.

UpdateCustomKeyStore

data UpdateCustomKeyStore Source #

See: newUpdateCustomKeyStore smart constructor.

Constructors

UpdateCustomKeyStore' (Maybe (Sensitive Text)) (Maybe Text) (Maybe Text) Text

Instances

Instances details

Eq UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods (==) :: UpdateCustomKeyStore -> UpdateCustomKeyStore -> Bool # (/=) :: UpdateCustomKeyStore -> UpdateCustomKeyStore -> Bool #
Show UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods showsPrec :: Int -> UpdateCustomKeyStore -> ShowS # show :: UpdateCustomKeyStore -> String # showList :: [UpdateCustomKeyStore] -> ShowS #
Generic UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Associated Types type Rep UpdateCustomKeyStore :: Type -> Type # Methods from :: UpdateCustomKeyStore -> Rep UpdateCustomKeyStore x # to :: Rep UpdateCustomKeyStore x -> UpdateCustomKeyStore #
NFData UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods rnf :: UpdateCustomKeyStore -> () #
Hashable UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods hashWithSalt :: Int -> UpdateCustomKeyStore -> Int # hash :: UpdateCustomKeyStore -> Int #
ToJSON UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods toJSON :: UpdateCustomKeyStore -> Value # toEncoding :: UpdateCustomKeyStore -> Encoding # toJSONList :: [UpdateCustomKeyStore] -> Value # toEncodingList :: [UpdateCustomKeyStore] -> Encoding #
AWSRequest UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Associated Types type AWSResponse UpdateCustomKeyStore # Methods request :: UpdateCustomKeyStore -> Request UpdateCustomKeyStore # response :: MonadResource m => Logger -> Service -> Proxy UpdateCustomKeyStore -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse UpdateCustomKeyStore))) #
ToHeaders UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods toHeaders :: UpdateCustomKeyStore -> [Header] #
ToPath UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods toPath :: UpdateCustomKeyStore -> ByteString #
ToQuery UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods toQuery :: UpdateCustomKeyStore -> QueryString #
type Rep UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore type Rep UpdateCustomKeyStore = D1 ('MetaData "UpdateCustomKeyStore" "Amazonka.KMS.UpdateCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UpdateCustomKeyStore'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keyStorePassword") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (Sensitive Text))) :: S1 ('MetaSel ('Just "cloudHsmClusterId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "newCustomKeyStoreName'") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))))
type AWSResponse UpdateCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore type AWSResponse UpdateCustomKeyStore = UpdateCustomKeyStoreResponse

newUpdateCustomKeyStore Source #

Arguments

:: Text	`$sel:customKeyStoreId:UpdateCustomKeyStore'`
-> UpdateCustomKeyStore

Create a value of UpdateCustomKeyStore with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyStorePassword:UpdateCustomKeyStore', updateCustomKeyStore_keyStorePassword - Enter the current password of the kmsuser crypto user (CU) in the CloudHSM cluster that is associated with the custom key store.

This parameter tells KMS the current password of the kmsuser crypto user (CU). It does not set or change the password of any users in the CloudHSM cluster.

$sel:cloudHsmClusterId:UpdateCustomKeyStore', updateCustomKeyStore_cloudHsmClusterId - Associates the custom key store with a related CloudHSM cluster.

Enter the cluster ID of the cluster that you used to create the custom key store or a cluster that shares a backup history and has the same cluster certificate as the original cluster. You cannot use this parameter to associate a custom key store with an unrelated cluster. In addition, the replacement cluster must fulfill the requirements for a cluster associated with a custom key store. To view the cluster certificate of a cluster, use the DescribeClusters operation.

$sel:newCustomKeyStoreName':UpdateCustomKeyStore', updateCustomKeyStore_newCustomKeyStoreName - Changes the friendly name of the custom key store to the value that you specify. The custom key store name must be unique in the Amazon Web Services account.

$sel:customKeyStoreId:UpdateCustomKeyStore', updateCustomKeyStore_customKeyStoreId - Identifies the custom key store that you want to update. Enter the ID of the custom key store. To find the ID of a custom key store, use the DescribeCustomKeyStores operation.

data UpdateCustomKeyStoreResponse Source #

See: newUpdateCustomKeyStoreResponse smart constructor.

Constructors

UpdateCustomKeyStoreResponse' Int

Instances

Instances details

Eq UpdateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods (==) :: UpdateCustomKeyStoreResponse -> UpdateCustomKeyStoreResponse -> Bool # (/=) :: UpdateCustomKeyStoreResponse -> UpdateCustomKeyStoreResponse -> Bool #
Read UpdateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods readsPrec :: Int -> ReadS UpdateCustomKeyStoreResponse # readList :: ReadS [UpdateCustomKeyStoreResponse] # readPrec :: ReadPrec UpdateCustomKeyStoreResponse # readListPrec :: ReadPrec [UpdateCustomKeyStoreResponse] #
Show UpdateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods showsPrec :: Int -> UpdateCustomKeyStoreResponse -> ShowS # show :: UpdateCustomKeyStoreResponse -> String # showList :: [UpdateCustomKeyStoreResponse] -> ShowS #
Generic UpdateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Associated Types type Rep UpdateCustomKeyStoreResponse :: Type -> Type # Methods from :: UpdateCustomKeyStoreResponse -> Rep UpdateCustomKeyStoreResponse x # to :: Rep UpdateCustomKeyStoreResponse x -> UpdateCustomKeyStoreResponse #
NFData UpdateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore Methods rnf :: UpdateCustomKeyStoreResponse -> () #
type Rep UpdateCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.UpdateCustomKeyStore type Rep UpdateCustomKeyStoreResponse = D1 ('MetaData "UpdateCustomKeyStoreResponse" "Amazonka.KMS.UpdateCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UpdateCustomKeyStoreResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newUpdateCustomKeyStoreResponse Source #

Arguments

:: Int	`$sel:httpStatus:UpdateCustomKeyStoreResponse'`
-> UpdateCustomKeyStoreResponse

Create a value of UpdateCustomKeyStoreResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:httpStatus:UpdateCustomKeyStoreResponse', updateCustomKeyStoreResponse_httpStatus - The response's http status code.

GetParametersForImport

data GetParametersForImport Source #

See: newGetParametersForImport smart constructor.

Constructors

GetParametersForImport' Text AlgorithmSpec WrappingKeySpec

Instances

Instances details

Eq GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods (==) :: GetParametersForImport -> GetParametersForImport -> Bool # (/=) :: GetParametersForImport -> GetParametersForImport -> Bool #
Read GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods readsPrec :: Int -> ReadS GetParametersForImport # readList :: ReadS [GetParametersForImport] # readPrec :: ReadPrec GetParametersForImport # readListPrec :: ReadPrec [GetParametersForImport] #
Show GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods showsPrec :: Int -> GetParametersForImport -> ShowS # show :: GetParametersForImport -> String # showList :: [GetParametersForImport] -> ShowS #
Generic GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Associated Types type Rep GetParametersForImport :: Type -> Type # Methods from :: GetParametersForImport -> Rep GetParametersForImport x # to :: Rep GetParametersForImport x -> GetParametersForImport #
NFData GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods rnf :: GetParametersForImport -> () #
Hashable GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods hashWithSalt :: Int -> GetParametersForImport -> Int # hash :: GetParametersForImport -> Int #
ToJSON GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods toJSON :: GetParametersForImport -> Value # toEncoding :: GetParametersForImport -> Encoding # toJSONList :: [GetParametersForImport] -> Value # toEncodingList :: [GetParametersForImport] -> Encoding #
AWSRequest GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Associated Types type AWSResponse GetParametersForImport # Methods request :: GetParametersForImport -> Request GetParametersForImport # response :: MonadResource m => Logger -> Service -> Proxy GetParametersForImport -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GetParametersForImport))) #
ToHeaders GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods toHeaders :: GetParametersForImport -> [Header] #
ToPath GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods toPath :: GetParametersForImport -> ByteString #
ToQuery GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods toQuery :: GetParametersForImport -> QueryString #
type Rep GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport type Rep GetParametersForImport = D1 ('MetaData "GetParametersForImport" "Amazonka.KMS.GetParametersForImport" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GetParametersForImport'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: (S1 ('MetaSel ('Just "wrappingAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 AlgorithmSpec) :: S1 ('MetaSel ('Just "wrappingKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 WrappingKeySpec))))
type AWSResponse GetParametersForImport Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport type AWSResponse GetParametersForImport = GetParametersForImportResponse

newGetParametersForImport Source #

Arguments

:: Text	`$sel:keyId:GetParametersForImport'`
-> AlgorithmSpec	`$sel:wrappingAlgorithm:GetParametersForImport'`
-> WrappingKeySpec	`$sel:wrappingKeySpec:GetParametersForImport'`
-> GetParametersForImport

Create a value of GetParametersForImport with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GetParametersForImport', getParametersForImport_keyId - The identifier of the symmetric KMS key into which you will import key material. The Origin of the KMS key must be EXTERNAL.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:wrappingAlgorithm:GetParametersForImport', getParametersForImport_wrappingAlgorithm - The algorithm you will use to encrypt the key material before importing it with ImportKeyMaterial. For more information, see Encrypt the Key Material in the Key Management Service Developer Guide.

$sel:wrappingKeySpec:GetParametersForImport', getParametersForImport_wrappingKeySpec - The type of wrapping key (public key) to return in the response. Only 2048-bit RSA public keys are supported.

data GetParametersForImportResponse Source #

See: newGetParametersForImportResponse smart constructor.

Constructors

GetParametersForImportResponse' (Maybe Text) (Maybe (Sensitive Base64)) (Maybe POSIX) (Maybe Base64) Int

Instances

Instances details

Eq GetParametersForImportResponse Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods (==) :: GetParametersForImportResponse -> GetParametersForImportResponse -> Bool # (/=) :: GetParametersForImportResponse -> GetParametersForImportResponse -> Bool #
Show GetParametersForImportResponse Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods showsPrec :: Int -> GetParametersForImportResponse -> ShowS # show :: GetParametersForImportResponse -> String # showList :: [GetParametersForImportResponse] -> ShowS #
Generic GetParametersForImportResponse Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Associated Types type Rep GetParametersForImportResponse :: Type -> Type # Methods from :: GetParametersForImportResponse -> Rep GetParametersForImportResponse x # to :: Rep GetParametersForImportResponse x -> GetParametersForImportResponse #
NFData GetParametersForImportResponse Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport Methods rnf :: GetParametersForImportResponse -> () #
type Rep GetParametersForImportResponse Source #
Instance details Defined in Amazonka.KMS.GetParametersForImport type Rep GetParametersForImportResponse = D1 ('MetaData "GetParametersForImportResponse" "Amazonka.KMS.GetParametersForImport" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GetParametersForImportResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "publicKey") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (Sensitive Base64)))) :: (S1 ('MetaSel ('Just "parametersValidTo") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :: (S1 ('MetaSel ('Just "importToken") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64)) :: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))))

newGetParametersForImportResponse Source #

Arguments

:: Int	`$sel:httpStatus:GetParametersForImportResponse'`
-> GetParametersForImportResponse

Create a value of GetParametersForImportResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GetParametersForImport', getParametersForImportResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key to use in a subsequent ImportKeyMaterial request. This is the same KMS key specified in the GetParametersForImport request.

$sel:publicKey:GetParametersForImportResponse', getParametersForImportResponse_publicKey - The public key to use to encrypt the key material before importing it with ImportKeyMaterial.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:parametersValidTo:GetParametersForImportResponse', getParametersForImportResponse_parametersValidTo - The time at which the import token and public key are no longer valid. After this time, you cannot use them to make an ImportKeyMaterial request and you must send another GetParametersForImport request to get new ones.

$sel:importToken:GetParametersForImportResponse', getParametersForImportResponse_importToken - The import token to send in a subsequent ImportKeyMaterial request.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:httpStatus:GetParametersForImportResponse', getParametersForImportResponse_httpStatus - The response's http status code.

EnableKeyRotation

data EnableKeyRotation Source #

See: newEnableKeyRotation smart constructor.

Constructors

EnableKeyRotation' Text

Instances

Instances details

Eq EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods (==) :: EnableKeyRotation -> EnableKeyRotation -> Bool # (/=) :: EnableKeyRotation -> EnableKeyRotation -> Bool #
Read EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods readsPrec :: Int -> ReadS EnableKeyRotation # readList :: ReadS [EnableKeyRotation] # readPrec :: ReadPrec EnableKeyRotation # readListPrec :: ReadPrec [EnableKeyRotation] #
Show EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods showsPrec :: Int -> EnableKeyRotation -> ShowS # show :: EnableKeyRotation -> String # showList :: [EnableKeyRotation] -> ShowS #
Generic EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Associated Types type Rep EnableKeyRotation :: Type -> Type # Methods from :: EnableKeyRotation -> Rep EnableKeyRotation x # to :: Rep EnableKeyRotation x -> EnableKeyRotation #
NFData EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods rnf :: EnableKeyRotation -> () #
Hashable EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods hashWithSalt :: Int -> EnableKeyRotation -> Int # hash :: EnableKeyRotation -> Int #
ToJSON EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods toJSON :: EnableKeyRotation -> Value # toEncoding :: EnableKeyRotation -> Encoding # toJSONList :: [EnableKeyRotation] -> Value # toEncodingList :: [EnableKeyRotation] -> Encoding #
AWSRequest EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Associated Types type AWSResponse EnableKeyRotation # Methods request :: EnableKeyRotation -> Request EnableKeyRotation # response :: MonadResource m => Logger -> Service -> Proxy EnableKeyRotation -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse EnableKeyRotation))) #
ToHeaders EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods toHeaders :: EnableKeyRotation -> [Header] #
ToPath EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods toPath :: EnableKeyRotation -> ByteString #
ToQuery EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods toQuery :: EnableKeyRotation -> QueryString #
type Rep EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation type Rep EnableKeyRotation = D1 ('MetaData "EnableKeyRotation" "Amazonka.KMS.EnableKeyRotation" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "EnableKeyRotation'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse EnableKeyRotation Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation type AWSResponse EnableKeyRotation = EnableKeyRotationResponse

newEnableKeyRotation Source #

Arguments

:: Text	`$sel:keyId:EnableKeyRotation'`
-> EnableKeyRotation

Create a value of EnableKeyRotation with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:EnableKeyRotation', enableKeyRotation_keyId - Identifies a symmetric KMS key. You cannot enable automatic rotation of asymmetric KMS keys, KMS keys with imported key material, or KMS keys in a custom key store. To enable or disable automatic rotation of a set of related multi-Region keys, set the property on the primary key.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data EnableKeyRotationResponse Source #

See: newEnableKeyRotationResponse smart constructor.

Constructors

EnableKeyRotationResponse'

Instances

Instances details

Eq EnableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods (==) :: EnableKeyRotationResponse -> EnableKeyRotationResponse -> Bool # (/=) :: EnableKeyRotationResponse -> EnableKeyRotationResponse -> Bool #
Read EnableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods readsPrec :: Int -> ReadS EnableKeyRotationResponse # readList :: ReadS [EnableKeyRotationResponse] # readPrec :: ReadPrec EnableKeyRotationResponse # readListPrec :: ReadPrec [EnableKeyRotationResponse] #
Show EnableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods showsPrec :: Int -> EnableKeyRotationResponse -> ShowS # show :: EnableKeyRotationResponse -> String # showList :: [EnableKeyRotationResponse] -> ShowS #
Generic EnableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Associated Types type Rep EnableKeyRotationResponse :: Type -> Type # Methods from :: EnableKeyRotationResponse -> Rep EnableKeyRotationResponse x # to :: Rep EnableKeyRotationResponse x -> EnableKeyRotationResponse #
NFData EnableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation Methods rnf :: EnableKeyRotationResponse -> () #
type Rep EnableKeyRotationResponse Source #
Instance details Defined in Amazonka.KMS.EnableKeyRotation type Rep EnableKeyRotationResponse = D1 ('MetaData "EnableKeyRotationResponse" "Amazonka.KMS.EnableKeyRotation" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "EnableKeyRotationResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newEnableKeyRotationResponse :: EnableKeyRotationResponse Source #

Create a value of EnableKeyRotationResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

DeleteCustomKeyStore

data DeleteCustomKeyStore Source #

See: newDeleteCustomKeyStore smart constructor.

Constructors

DeleteCustomKeyStore' Text

Instances

Instances details

Eq DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods (==) :: DeleteCustomKeyStore -> DeleteCustomKeyStore -> Bool # (/=) :: DeleteCustomKeyStore -> DeleteCustomKeyStore -> Bool #
Read DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods readsPrec :: Int -> ReadS DeleteCustomKeyStore # readList :: ReadS [DeleteCustomKeyStore] # readPrec :: ReadPrec DeleteCustomKeyStore # readListPrec :: ReadPrec [DeleteCustomKeyStore] #
Show DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods showsPrec :: Int -> DeleteCustomKeyStore -> ShowS # show :: DeleteCustomKeyStore -> String # showList :: [DeleteCustomKeyStore] -> ShowS #
Generic DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Associated Types type Rep DeleteCustomKeyStore :: Type -> Type # Methods from :: DeleteCustomKeyStore -> Rep DeleteCustomKeyStore x # to :: Rep DeleteCustomKeyStore x -> DeleteCustomKeyStore #
NFData DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods rnf :: DeleteCustomKeyStore -> () #
Hashable DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods hashWithSalt :: Int -> DeleteCustomKeyStore -> Int # hash :: DeleteCustomKeyStore -> Int #
ToJSON DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods toJSON :: DeleteCustomKeyStore -> Value # toEncoding :: DeleteCustomKeyStore -> Encoding # toJSONList :: [DeleteCustomKeyStore] -> Value # toEncodingList :: [DeleteCustomKeyStore] -> Encoding #
AWSRequest DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Associated Types type AWSResponse DeleteCustomKeyStore # Methods request :: DeleteCustomKeyStore -> Request DeleteCustomKeyStore # response :: MonadResource m => Logger -> Service -> Proxy DeleteCustomKeyStore -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DeleteCustomKeyStore))) #
ToHeaders DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods toHeaders :: DeleteCustomKeyStore -> [Header] #
ToPath DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods toPath :: DeleteCustomKeyStore -> ByteString #
ToQuery DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods toQuery :: DeleteCustomKeyStore -> QueryString #
type Rep DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore type Rep DeleteCustomKeyStore = D1 ('MetaData "DeleteCustomKeyStore" "Amazonka.KMS.DeleteCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DeleteCustomKeyStore'" 'PrefixI 'True) (S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse DeleteCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore type AWSResponse DeleteCustomKeyStore = DeleteCustomKeyStoreResponse

newDeleteCustomKeyStore Source #

Arguments

:: Text	`$sel:customKeyStoreId:DeleteCustomKeyStore'`
-> DeleteCustomKeyStore

Create a value of DeleteCustomKeyStore with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:customKeyStoreId:DeleteCustomKeyStore', deleteCustomKeyStore_customKeyStoreId - Enter the ID of the custom key store you want to delete. To find the ID of a custom key store, use the DescribeCustomKeyStores operation.

data DeleteCustomKeyStoreResponse Source #

See: newDeleteCustomKeyStoreResponse smart constructor.

Constructors

DeleteCustomKeyStoreResponse' Int

Instances

Instances details

Eq DeleteCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods (==) :: DeleteCustomKeyStoreResponse -> DeleteCustomKeyStoreResponse -> Bool # (/=) :: DeleteCustomKeyStoreResponse -> DeleteCustomKeyStoreResponse -> Bool #
Read DeleteCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods readsPrec :: Int -> ReadS DeleteCustomKeyStoreResponse # readList :: ReadS [DeleteCustomKeyStoreResponse] # readPrec :: ReadPrec DeleteCustomKeyStoreResponse # readListPrec :: ReadPrec [DeleteCustomKeyStoreResponse] #
Show DeleteCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods showsPrec :: Int -> DeleteCustomKeyStoreResponse -> ShowS # show :: DeleteCustomKeyStoreResponse -> String # showList :: [DeleteCustomKeyStoreResponse] -> ShowS #
Generic DeleteCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Associated Types type Rep DeleteCustomKeyStoreResponse :: Type -> Type # Methods from :: DeleteCustomKeyStoreResponse -> Rep DeleteCustomKeyStoreResponse x # to :: Rep DeleteCustomKeyStoreResponse x -> DeleteCustomKeyStoreResponse #
NFData DeleteCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore Methods rnf :: DeleteCustomKeyStoreResponse -> () #
type Rep DeleteCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DeleteCustomKeyStore type Rep DeleteCustomKeyStoreResponse = D1 ('MetaData "DeleteCustomKeyStoreResponse" "Amazonka.KMS.DeleteCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DeleteCustomKeyStoreResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newDeleteCustomKeyStoreResponse Source #

Arguments

:: Int	`$sel:httpStatus:DeleteCustomKeyStoreResponse'`
-> DeleteCustomKeyStoreResponse

Create a value of DeleteCustomKeyStoreResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:httpStatus:DeleteCustomKeyStoreResponse', deleteCustomKeyStoreResponse_httpStatus - The response's http status code.

CreateAlias

data CreateAlias Source #

See: newCreateAlias smart constructor.

Constructors

CreateAlias' Text Text

Instances

Instances details

Eq CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods (==) :: CreateAlias -> CreateAlias -> Bool # (/=) :: CreateAlias -> CreateAlias -> Bool #
Read CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods readsPrec :: Int -> ReadS CreateAlias # readList :: ReadS [CreateAlias] # readPrec :: ReadPrec CreateAlias # readListPrec :: ReadPrec [CreateAlias] #
Show CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods showsPrec :: Int -> CreateAlias -> ShowS # show :: CreateAlias -> String # showList :: [CreateAlias] -> ShowS #
Generic CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Associated Types type Rep CreateAlias :: Type -> Type # Methods from :: CreateAlias -> Rep CreateAlias x # to :: Rep CreateAlias x -> CreateAlias #
NFData CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods rnf :: CreateAlias -> () #
Hashable CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods hashWithSalt :: Int -> CreateAlias -> Int # hash :: CreateAlias -> Int #
ToJSON CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods toJSON :: CreateAlias -> Value # toEncoding :: CreateAlias -> Encoding # toJSONList :: [CreateAlias] -> Value # toEncodingList :: [CreateAlias] -> Encoding #
AWSRequest CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Associated Types type AWSResponse CreateAlias # Methods request :: CreateAlias -> Request CreateAlias # response :: MonadResource m => Logger -> Service -> Proxy CreateAlias -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse CreateAlias))) #
ToHeaders CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods toHeaders :: CreateAlias -> [Header] #
ToPath CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods toPath :: CreateAlias -> ByteString #
ToQuery CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods toQuery :: CreateAlias -> QueryString #
type Rep CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias type Rep CreateAlias = D1 ('MetaData "CreateAlias" "Amazonka.KMS.CreateAlias" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CreateAlias'" 'PrefixI 'True) (S1 ('MetaSel ('Just "aliasName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "targetKeyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse CreateAlias Source #
Instance details Defined in Amazonka.KMS.CreateAlias type AWSResponse CreateAlias = CreateAliasResponse

newCreateAlias Source #

Arguments

:: Text	`$sel:aliasName:CreateAlias'`
-> Text	`$sel:targetKeyId:CreateAlias'`
-> CreateAlias

Create a value of CreateAlias with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:aliasName:CreateAlias', createAlias_aliasName - Specifies the alias name. This value must begin with alias/ followed by a name, such as alias/ExampleAlias.

The AliasName value must be string of 1-256 characters. It can contain only alphanumeric characters, forward slashes (/), underscores (_), and dashes (-). The alias name cannot begin with alias/aws/. The alias/aws/ prefix is reserved for Amazon Web Services managed keys.

$sel:targetKeyId:CreateAlias', createAlias_targetKeyId - Associates the alias with the specified customer managed key. The KMS key must be in the same Amazon Web Services Region.

A valid key ID is required. If you supply a null or empty string value, this operation returns an error.

For help finding the key ID and ARN, see Finding the Key ID and ARN in the /Key Management Service Developer Guide/ .

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data CreateAliasResponse Source #

See: newCreateAliasResponse smart constructor.

Constructors

CreateAliasResponse'

Instances

Instances details

Eq CreateAliasResponse Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods (==) :: CreateAliasResponse -> CreateAliasResponse -> Bool # (/=) :: CreateAliasResponse -> CreateAliasResponse -> Bool #
Read CreateAliasResponse Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods readsPrec :: Int -> ReadS CreateAliasResponse # readList :: ReadS [CreateAliasResponse] # readPrec :: ReadPrec CreateAliasResponse # readListPrec :: ReadPrec [CreateAliasResponse] #
Show CreateAliasResponse Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods showsPrec :: Int -> CreateAliasResponse -> ShowS # show :: CreateAliasResponse -> String # showList :: [CreateAliasResponse] -> ShowS #
Generic CreateAliasResponse Source #
Instance details Defined in Amazonka.KMS.CreateAlias Associated Types type Rep CreateAliasResponse :: Type -> Type # Methods from :: CreateAliasResponse -> Rep CreateAliasResponse x # to :: Rep CreateAliasResponse x -> CreateAliasResponse #
NFData CreateAliasResponse Source #
Instance details Defined in Amazonka.KMS.CreateAlias Methods rnf :: CreateAliasResponse -> () #
type Rep CreateAliasResponse Source #
Instance details Defined in Amazonka.KMS.CreateAlias type Rep CreateAliasResponse = D1 ('MetaData "CreateAliasResponse" "Amazonka.KMS.CreateAlias" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CreateAliasResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newCreateAliasResponse :: CreateAliasResponse Source #

Create a value of CreateAliasResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

CreateGrant

data CreateGrant Source #

See: newCreateGrant smart constructor.

Constructors

CreateGrant' (Maybe Text) (Maybe [Text]) (Maybe GrantConstraints) (Maybe Text) Text Text [GrantOperation]

Instances

Instances details

Eq CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods (==) :: CreateGrant -> CreateGrant -> Bool # (/=) :: CreateGrant -> CreateGrant -> Bool #
Read CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods readsPrec :: Int -> ReadS CreateGrant # readList :: ReadS [CreateGrant] # readPrec :: ReadPrec CreateGrant # readListPrec :: ReadPrec [CreateGrant] #
Show CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods showsPrec :: Int -> CreateGrant -> ShowS # show :: CreateGrant -> String # showList :: [CreateGrant] -> ShowS #
Generic CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Associated Types type Rep CreateGrant :: Type -> Type # Methods from :: CreateGrant -> Rep CreateGrant x # to :: Rep CreateGrant x -> CreateGrant #
NFData CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods rnf :: CreateGrant -> () #
Hashable CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods hashWithSalt :: Int -> CreateGrant -> Int # hash :: CreateGrant -> Int #
ToJSON CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods toJSON :: CreateGrant -> Value # toEncoding :: CreateGrant -> Encoding # toJSONList :: [CreateGrant] -> Value # toEncodingList :: [CreateGrant] -> Encoding #
AWSRequest CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Associated Types type AWSResponse CreateGrant # Methods request :: CreateGrant -> Request CreateGrant # response :: MonadResource m => Logger -> Service -> Proxy CreateGrant -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse CreateGrant))) #
ToHeaders CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods toHeaders :: CreateGrant -> [Header] #
ToPath CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods toPath :: CreateGrant -> ByteString #
ToQuery CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods toQuery :: CreateGrant -> QueryString #
type Rep CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant type Rep CreateGrant = D1 ('MetaData "CreateGrant" "Amazonka.KMS.CreateGrant" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CreateGrant'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "retiringPrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :: S1 ('MetaSel ('Just "constraints") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe GrantConstraints)))) :: ((S1 ('MetaSel ('Just "name") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)) :: (S1 ('MetaSel ('Just "granteePrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: S1 ('MetaSel ('Just "operations") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 [GrantOperation])))))
type AWSResponse CreateGrant Source #
Instance details Defined in Amazonka.KMS.CreateGrant type AWSResponse CreateGrant = CreateGrantResponse

newCreateGrant Source #

Arguments

:: Text	`$sel:keyId:CreateGrant'`
-> Text	`$sel:granteePrincipal:CreateGrant'`
-> CreateGrant

Create a value of CreateGrant with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:retiringPrincipal:CreateGrant', createGrant_retiringPrincipal - The principal that has permission to use the RetireGrant operation to retire the grant.

To specify the principal, use the Amazon Resource Name (ARN) of an Amazon Web Services principal. Valid Amazon Web Services principals include Amazon Web Services accounts (root), IAM users, federated users, and assumed role users. For examples of the ARN syntax to use for specifying a principal, see Amazon Web Services Identity and Access Management (IAM) in the Example ARNs section of the /Amazon Web Services General Reference/.

The grant determines the retiring principal. Other principals might have permission to retire the grant or revoke the grant. For details, see RevokeGrant and Retiring and revoking grants in the Key Management Service Developer Guide.

$sel:grantTokens:CreateGrant', createGrant_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:constraints:CreateGrant', createGrant_constraints - Specifies a grant constraint.

KMS supports the EncryptionContextEquals and EncryptionContextSubset grant constraints. Each constraint value can include up to 8 encryption context pairs. The encryption context value in each constraint cannot exceed 384 characters.

These grant constraints allow the permissions in the grant only when the encryption context in the request matches (EncryptionContextEquals) or includes (EncryptionContextSubset) the encryption context specified in this structure. For information about grant constraints, see Using grant constraints in the Key Management Service Developer Guide. For more information about encryption context, see Encryption Context in the /Key Management Service Developer Guide/ .

The encryption context grant constraints are supported only on operations that include an encryption context. You cannot use an encryption context grant constraint for cryptographic operations with asymmetric KMS keys or for management operations, such as DescribeKey or RetireGrant.

$sel:name:CreateGrant', createGrant_name - A friendly name for the grant. Use this value to prevent the unintended creation of duplicate grants when retrying this request.

When this value is absent, all CreateGrant requests result in a new grant with a unique GrantId even if all the supplied parameters are identical. This can result in unintended duplicates when you retry the CreateGrant request.

When this value is present, you can retry a CreateGrant request with identical parameters; if the grant already exists, the original GrantId is returned without creating a new grant. Note that the returned grant token is unique with every CreateGrant request, even when a duplicate GrantId is returned. All grant tokens for the same grant ID can be used interchangeably.

$sel:keyId:CreateGrant', createGrant_keyId - Identifies the KMS key for the grant. The grant gives principals permission to use this KMS key.

Specify the key ID or key ARN of the KMS key. To specify a KMS key in a different Amazon Web Services account, you must use the key ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:granteePrincipal:CreateGrant', createGrant_granteePrincipal - The identity that gets the permissions specified in the grant.

To specify the principal, use the Amazon Resource Name (ARN) of an Amazon Web Services principal. Valid Amazon Web Services principals include Amazon Web Services accounts (root), IAM users, IAM roles, federated users, and assumed role users. For examples of the ARN syntax to use for specifying a principal, see Amazon Web Services Identity and Access Management (IAM) in the Example ARNs section of the /Amazon Web Services General Reference/.

$sel:operations:CreateGrant', createGrant_operations - A list of operations that the grant permits.

The operation must be supported on the KMS key. For example, you cannot create a grant for a symmetric KMS key that allows the Sign operation, or a grant for an asymmetric KMS key that allows the GenerateDataKey operation. If you try, KMS returns a ValidationError exception. For details, see Grant operations in the Key Management Service Developer Guide.

data CreateGrantResponse Source #

See: newCreateGrantResponse smart constructor.

Constructors

CreateGrantResponse' (Maybe Text) (Maybe Text) Int

Instances

Instances details

Eq CreateGrantResponse Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods (==) :: CreateGrantResponse -> CreateGrantResponse -> Bool # (/=) :: CreateGrantResponse -> CreateGrantResponse -> Bool #
Read CreateGrantResponse Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods readsPrec :: Int -> ReadS CreateGrantResponse # readList :: ReadS [CreateGrantResponse] # readPrec :: ReadPrec CreateGrantResponse # readListPrec :: ReadPrec [CreateGrantResponse] #
Show CreateGrantResponse Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods showsPrec :: Int -> CreateGrantResponse -> ShowS # show :: CreateGrantResponse -> String # showList :: [CreateGrantResponse] -> ShowS #
Generic CreateGrantResponse Source #
Instance details Defined in Amazonka.KMS.CreateGrant Associated Types type Rep CreateGrantResponse :: Type -> Type # Methods from :: CreateGrantResponse -> Rep CreateGrantResponse x # to :: Rep CreateGrantResponse x -> CreateGrantResponse #
NFData CreateGrantResponse Source #
Instance details Defined in Amazonka.KMS.CreateGrant Methods rnf :: CreateGrantResponse -> () #
type Rep CreateGrantResponse Source #
Instance details Defined in Amazonka.KMS.CreateGrant type Rep CreateGrantResponse = D1 ('MetaData "CreateGrantResponse" "Amazonka.KMS.CreateGrant" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CreateGrantResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "grantId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "grantToken") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newCreateGrantResponse Source #

Arguments

:: Int	`$sel:httpStatus:CreateGrantResponse'`
-> CreateGrantResponse

Create a value of CreateGrantResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:grantId:CreateGrantResponse', createGrantResponse_grantId - The unique identifier for the grant.

You can use the GrantId in a ListGrants, RetireGrant, or RevokeGrant operation.

$sel:grantToken:CreateGrantResponse', createGrantResponse_grantToken - The grant token.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:httpStatus:CreateGrantResponse', createGrantResponse_httpStatus - The response's http status code.

ListAliases (Paginated)

data ListAliases Source #

See: newListAliases smart constructor.

Constructors

ListAliases' (Maybe Text) (Maybe Text) (Maybe Natural)

Instances

Instances details

Eq ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods (==) :: ListAliases -> ListAliases -> Bool # (/=) :: ListAliases -> ListAliases -> Bool #
Read ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods readsPrec :: Int -> ReadS ListAliases # readList :: ReadS [ListAliases] # readPrec :: ReadPrec ListAliases # readListPrec :: ReadPrec [ListAliases] #
Show ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods showsPrec :: Int -> ListAliases -> ShowS # show :: ListAliases -> String # showList :: [ListAliases] -> ShowS #
Generic ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Associated Types type Rep ListAliases :: Type -> Type # Methods from :: ListAliases -> Rep ListAliases x # to :: Rep ListAliases x -> ListAliases #
NFData ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods rnf :: ListAliases -> () #
Hashable ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods hashWithSalt :: Int -> ListAliases -> Int # hash :: ListAliases -> Int #
ToJSON ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods toJSON :: ListAliases -> Value # toEncoding :: ListAliases -> Encoding # toJSONList :: [ListAliases] -> Value # toEncodingList :: [ListAliases] -> Encoding #
AWSPager ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods page :: ListAliases -> AWSResponse ListAliases -> Maybe ListAliases #
AWSRequest ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Associated Types type AWSResponse ListAliases # Methods request :: ListAliases -> Request ListAliases # response :: MonadResource m => Logger -> Service -> Proxy ListAliases -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ListAliases))) #
ToHeaders ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods toHeaders :: ListAliases -> [Header] #
ToPath ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods toPath :: ListAliases -> ByteString #
ToQuery ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods toQuery :: ListAliases -> QueryString #
type Rep ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases type Rep ListAliases = D1 ('MetaData "ListAliases" "Amazonka.KMS.ListAliases" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListAliases'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "marker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "limit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)))))
type AWSResponse ListAliases Source #
Instance details Defined in Amazonka.KMS.ListAliases type AWSResponse ListAliases = ListAliasesResponse

newListAliases :: ListAliases Source #

Create a value of ListAliases with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:ListAliases', listAliases_keyId - Lists only aliases that are associated with the specified KMS key. Enter a KMS key in your Amazon Web Services account.

This parameter is optional. If you omit it, ListAliases returns all aliases in the account and Region.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:marker:ListAliases', listAliases_marker - Use this parameter in a subsequent request after you receive a response with truncated results. Set it to the value of NextMarker from the truncated response you just received.

$sel:limit:ListAliases', listAliases_limit - Use this parameter to specify the maximum number of items to return. When this value is present, KMS does not return more than the specified number of items, but it might return fewer.

This value is optional. If you include a value, it must be between 1 and 100, inclusive. If you do not include a value, it defaults to 50.

data ListAliasesResponse Source #

See: newListAliasesResponse smart constructor.

Constructors

ListAliasesResponse' (Maybe Bool) (Maybe [AliasListEntry]) (Maybe Text) Int

Instances

Instances details

Eq ListAliasesResponse Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods (==) :: ListAliasesResponse -> ListAliasesResponse -> Bool # (/=) :: ListAliasesResponse -> ListAliasesResponse -> Bool #
Read ListAliasesResponse Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods readsPrec :: Int -> ReadS ListAliasesResponse # readList :: ReadS [ListAliasesResponse] # readPrec :: ReadPrec ListAliasesResponse # readListPrec :: ReadPrec [ListAliasesResponse] #
Show ListAliasesResponse Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods showsPrec :: Int -> ListAliasesResponse -> ShowS # show :: ListAliasesResponse -> String # showList :: [ListAliasesResponse] -> ShowS #
Generic ListAliasesResponse Source #
Instance details Defined in Amazonka.KMS.ListAliases Associated Types type Rep ListAliasesResponse :: Type -> Type # Methods from :: ListAliasesResponse -> Rep ListAliasesResponse x # to :: Rep ListAliasesResponse x -> ListAliasesResponse #
NFData ListAliasesResponse Source #
Instance details Defined in Amazonka.KMS.ListAliases Methods rnf :: ListAliasesResponse -> () #
type Rep ListAliasesResponse Source #
Instance details Defined in Amazonka.KMS.ListAliases type Rep ListAliasesResponse = D1 ('MetaData "ListAliasesResponse" "Amazonka.KMS.ListAliases" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListAliasesResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: S1 ('MetaSel ('Just "aliases") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [AliasListEntry]))) :: (S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newListAliasesResponse Source #

Arguments

:: Int	`$sel:httpStatus:ListAliasesResponse'`
-> ListAliasesResponse

Create a value of ListAliasesResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:truncated:ListAliasesResponse', listAliasesResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:aliases:ListAliasesResponse', listAliasesResponse_aliases - A list of aliases.

$sel:nextMarker:ListAliasesResponse', listAliasesResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

$sel:httpStatus:ListAliasesResponse', listAliasesResponse_httpStatus - The response's http status code.

UpdatePrimaryRegion

data UpdatePrimaryRegion Source #

See: newUpdatePrimaryRegion smart constructor.

Constructors

UpdatePrimaryRegion' Text Text

Instances

Instances details

Eq UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods (==) :: UpdatePrimaryRegion -> UpdatePrimaryRegion -> Bool # (/=) :: UpdatePrimaryRegion -> UpdatePrimaryRegion -> Bool #
Read UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods readsPrec :: Int -> ReadS UpdatePrimaryRegion # readList :: ReadS [UpdatePrimaryRegion] # readPrec :: ReadPrec UpdatePrimaryRegion # readListPrec :: ReadPrec [UpdatePrimaryRegion] #
Show UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods showsPrec :: Int -> UpdatePrimaryRegion -> ShowS # show :: UpdatePrimaryRegion -> String # showList :: [UpdatePrimaryRegion] -> ShowS #
Generic UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Associated Types type Rep UpdatePrimaryRegion :: Type -> Type # Methods from :: UpdatePrimaryRegion -> Rep UpdatePrimaryRegion x # to :: Rep UpdatePrimaryRegion x -> UpdatePrimaryRegion #
NFData UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods rnf :: UpdatePrimaryRegion -> () #
Hashable UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods hashWithSalt :: Int -> UpdatePrimaryRegion -> Int # hash :: UpdatePrimaryRegion -> Int #
ToJSON UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods toJSON :: UpdatePrimaryRegion -> Value # toEncoding :: UpdatePrimaryRegion -> Encoding # toJSONList :: [UpdatePrimaryRegion] -> Value # toEncodingList :: [UpdatePrimaryRegion] -> Encoding #
AWSRequest UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Associated Types type AWSResponse UpdatePrimaryRegion # Methods request :: UpdatePrimaryRegion -> Request UpdatePrimaryRegion # response :: MonadResource m => Logger -> Service -> Proxy UpdatePrimaryRegion -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse UpdatePrimaryRegion))) #
ToHeaders UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods toHeaders :: UpdatePrimaryRegion -> [Header] #
ToPath UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods toPath :: UpdatePrimaryRegion -> ByteString #
ToQuery UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods toQuery :: UpdatePrimaryRegion -> QueryString #
type Rep UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion type Rep UpdatePrimaryRegion = D1 ('MetaData "UpdatePrimaryRegion" "Amazonka.KMS.UpdatePrimaryRegion" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UpdatePrimaryRegion'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "primaryRegion") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse UpdatePrimaryRegion Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion type AWSResponse UpdatePrimaryRegion = UpdatePrimaryRegionResponse

newUpdatePrimaryRegion Source #

Arguments

:: Text	`$sel:keyId:UpdatePrimaryRegion'`
-> Text	`$sel:primaryRegion:UpdatePrimaryRegion'`
-> UpdatePrimaryRegion

Create a value of UpdatePrimaryRegion with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:UpdatePrimaryRegion', updatePrimaryRegion_keyId - Identifies the current primary key. When the operation completes, this KMS key will be a replica key.

Specify the key ID or key ARN of a multi-Region primary key.

For example:

Key ID: mrk-1234abcd12ab34cd56ef1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/mrk-1234abcd12ab34cd56ef1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:primaryRegion:UpdatePrimaryRegion', updatePrimaryRegion_primaryRegion - The Amazon Web Services Region of the new primary key. Enter the Region ID, such as us-east-1 or ap-southeast-2. There must be an existing replica key in this Region.

When the operation completes, the multi-Region key in this Region will be the primary key.

data UpdatePrimaryRegionResponse Source #

See: newUpdatePrimaryRegionResponse smart constructor.

Constructors

UpdatePrimaryRegionResponse'

Instances

Instances details

Eq UpdatePrimaryRegionResponse Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods (==) :: UpdatePrimaryRegionResponse -> UpdatePrimaryRegionResponse -> Bool # (/=) :: UpdatePrimaryRegionResponse -> UpdatePrimaryRegionResponse -> Bool #
Read UpdatePrimaryRegionResponse Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods readsPrec :: Int -> ReadS UpdatePrimaryRegionResponse # readList :: ReadS [UpdatePrimaryRegionResponse] # readPrec :: ReadPrec UpdatePrimaryRegionResponse # readListPrec :: ReadPrec [UpdatePrimaryRegionResponse] #
Show UpdatePrimaryRegionResponse Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods showsPrec :: Int -> UpdatePrimaryRegionResponse -> ShowS # show :: UpdatePrimaryRegionResponse -> String # showList :: [UpdatePrimaryRegionResponse] -> ShowS #
Generic UpdatePrimaryRegionResponse Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Associated Types type Rep UpdatePrimaryRegionResponse :: Type -> Type # Methods from :: UpdatePrimaryRegionResponse -> Rep UpdatePrimaryRegionResponse x # to :: Rep UpdatePrimaryRegionResponse x -> UpdatePrimaryRegionResponse #
NFData UpdatePrimaryRegionResponse Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion Methods rnf :: UpdatePrimaryRegionResponse -> () #
type Rep UpdatePrimaryRegionResponse Source #
Instance details Defined in Amazonka.KMS.UpdatePrimaryRegion type Rep UpdatePrimaryRegionResponse = D1 ('MetaData "UpdatePrimaryRegionResponse" "Amazonka.KMS.UpdatePrimaryRegion" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UpdatePrimaryRegionResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newUpdatePrimaryRegionResponse :: UpdatePrimaryRegionResponse Source #

Create a value of UpdatePrimaryRegionResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

ConnectCustomKeyStore

data ConnectCustomKeyStore Source #

See: newConnectCustomKeyStore smart constructor.

Constructors

ConnectCustomKeyStore' Text

Instances

Instances details

Eq ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods (==) :: ConnectCustomKeyStore -> ConnectCustomKeyStore -> Bool # (/=) :: ConnectCustomKeyStore -> ConnectCustomKeyStore -> Bool #
Read ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods readsPrec :: Int -> ReadS ConnectCustomKeyStore # readList :: ReadS [ConnectCustomKeyStore] # readPrec :: ReadPrec ConnectCustomKeyStore # readListPrec :: ReadPrec [ConnectCustomKeyStore] #
Show ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods showsPrec :: Int -> ConnectCustomKeyStore -> ShowS # show :: ConnectCustomKeyStore -> String # showList :: [ConnectCustomKeyStore] -> ShowS #
Generic ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Associated Types type Rep ConnectCustomKeyStore :: Type -> Type # Methods from :: ConnectCustomKeyStore -> Rep ConnectCustomKeyStore x # to :: Rep ConnectCustomKeyStore x -> ConnectCustomKeyStore #
NFData ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods rnf :: ConnectCustomKeyStore -> () #
Hashable ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods hashWithSalt :: Int -> ConnectCustomKeyStore -> Int # hash :: ConnectCustomKeyStore -> Int #
ToJSON ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods toJSON :: ConnectCustomKeyStore -> Value # toEncoding :: ConnectCustomKeyStore -> Encoding # toJSONList :: [ConnectCustomKeyStore] -> Value # toEncodingList :: [ConnectCustomKeyStore] -> Encoding #
AWSRequest ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Associated Types type AWSResponse ConnectCustomKeyStore # Methods request :: ConnectCustomKeyStore -> Request ConnectCustomKeyStore # response :: MonadResource m => Logger -> Service -> Proxy ConnectCustomKeyStore -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ConnectCustomKeyStore))) #
ToHeaders ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods toHeaders :: ConnectCustomKeyStore -> [Header] #
ToPath ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods toPath :: ConnectCustomKeyStore -> ByteString #
ToQuery ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods toQuery :: ConnectCustomKeyStore -> QueryString #
type Rep ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore type Rep ConnectCustomKeyStore = D1 ('MetaData "ConnectCustomKeyStore" "Amazonka.KMS.ConnectCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ConnectCustomKeyStore'" 'PrefixI 'True) (S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse ConnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore type AWSResponse ConnectCustomKeyStore = ConnectCustomKeyStoreResponse

newConnectCustomKeyStore Source #

Arguments

:: Text	`$sel:customKeyStoreId:ConnectCustomKeyStore'`
-> ConnectCustomKeyStore

Create a value of ConnectCustomKeyStore with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:customKeyStoreId:ConnectCustomKeyStore', connectCustomKeyStore_customKeyStoreId - Enter the key store ID of the custom key store that you want to connect. To find the ID of a custom key store, use the DescribeCustomKeyStores operation.

data ConnectCustomKeyStoreResponse Source #

See: newConnectCustomKeyStoreResponse smart constructor.

Constructors

ConnectCustomKeyStoreResponse' Int

Instances

Instances details

Eq ConnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods (==) :: ConnectCustomKeyStoreResponse -> ConnectCustomKeyStoreResponse -> Bool # (/=) :: ConnectCustomKeyStoreResponse -> ConnectCustomKeyStoreResponse -> Bool #
Read ConnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods readsPrec :: Int -> ReadS ConnectCustomKeyStoreResponse # readList :: ReadS [ConnectCustomKeyStoreResponse] # readPrec :: ReadPrec ConnectCustomKeyStoreResponse # readListPrec :: ReadPrec [ConnectCustomKeyStoreResponse] #
Show ConnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods showsPrec :: Int -> ConnectCustomKeyStoreResponse -> ShowS # show :: ConnectCustomKeyStoreResponse -> String # showList :: [ConnectCustomKeyStoreResponse] -> ShowS #
Generic ConnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Associated Types type Rep ConnectCustomKeyStoreResponse :: Type -> Type # Methods from :: ConnectCustomKeyStoreResponse -> Rep ConnectCustomKeyStoreResponse x # to :: Rep ConnectCustomKeyStoreResponse x -> ConnectCustomKeyStoreResponse #
NFData ConnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore Methods rnf :: ConnectCustomKeyStoreResponse -> () #
type Rep ConnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.ConnectCustomKeyStore type Rep ConnectCustomKeyStoreResponse = D1 ('MetaData "ConnectCustomKeyStoreResponse" "Amazonka.KMS.ConnectCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ConnectCustomKeyStoreResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newConnectCustomKeyStoreResponse Source #

Arguments

:: Int	`$sel:httpStatus:ConnectCustomKeyStoreResponse'`
-> ConnectCustomKeyStoreResponse

Create a value of ConnectCustomKeyStoreResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:httpStatus:ConnectCustomKeyStoreResponse', connectCustomKeyStoreResponse_httpStatus - The response's http status code.

ListRetirableGrants

data ListRetirableGrants Source #

See: newListRetirableGrants smart constructor.

Constructors

ListRetirableGrants' (Maybe Text) (Maybe Natural) Text

Instances

Instances details

Eq ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods (==) :: ListRetirableGrants -> ListRetirableGrants -> Bool # (/=) :: ListRetirableGrants -> ListRetirableGrants -> Bool #
Read ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods readsPrec :: Int -> ReadS ListRetirableGrants # readList :: ReadS [ListRetirableGrants] # readPrec :: ReadPrec ListRetirableGrants # readListPrec :: ReadPrec [ListRetirableGrants] #
Show ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods showsPrec :: Int -> ListRetirableGrants -> ShowS # show :: ListRetirableGrants -> String # showList :: [ListRetirableGrants] -> ShowS #
Generic ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Associated Types type Rep ListRetirableGrants :: Type -> Type # Methods from :: ListRetirableGrants -> Rep ListRetirableGrants x # to :: Rep ListRetirableGrants x -> ListRetirableGrants #
NFData ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods rnf :: ListRetirableGrants -> () #
Hashable ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods hashWithSalt :: Int -> ListRetirableGrants -> Int # hash :: ListRetirableGrants -> Int #
ToJSON ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods toJSON :: ListRetirableGrants -> Value # toEncoding :: ListRetirableGrants -> Encoding # toJSONList :: [ListRetirableGrants] -> Value # toEncodingList :: [ListRetirableGrants] -> Encoding #
AWSRequest ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Associated Types type AWSResponse ListRetirableGrants # Methods request :: ListRetirableGrants -> Request ListRetirableGrants # response :: MonadResource m => Logger -> Service -> Proxy ListRetirableGrants -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ListRetirableGrants))) #
ToHeaders ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods toHeaders :: ListRetirableGrants -> [Header] #
ToPath ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods toPath :: ListRetirableGrants -> ByteString #
ToQuery ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants Methods toQuery :: ListRetirableGrants -> QueryString #
type Rep ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants type Rep ListRetirableGrants = D1 ('MetaData "ListRetirableGrants" "Amazonka.KMS.ListRetirableGrants" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListRetirableGrants'" 'PrefixI 'True) (S1 ('MetaSel ('Just "marker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "limit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :: S1 ('MetaSel ('Just "retiringPrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))))
type AWSResponse ListRetirableGrants Source #
Instance details Defined in Amazonka.KMS.ListRetirableGrants type AWSResponse ListRetirableGrants = ListGrantsResponse

newListRetirableGrants Source #

Arguments

:: Text	`$sel:retiringPrincipal:ListRetirableGrants'`
-> ListRetirableGrants

Create a value of ListRetirableGrants with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:marker:ListRetirableGrants', listRetirableGrants_marker - Use this parameter in a subsequent request after you receive a response with truncated results. Set it to the value of NextMarker from the truncated response you just received.

$sel:limit:ListRetirableGrants', listRetirableGrants_limit - Use this parameter to specify the maximum number of items to return. When this value is present, KMS does not return more than the specified number of items, but it might return fewer.

This value is optional. If you include a value, it must be between 1 and 100, inclusive. If you do not include a value, it defaults to 50.

$sel:retiringPrincipal:ListRetirableGrants', listRetirableGrants_retiringPrincipal - The retiring principal for which to list grants. Enter a principal in your Amazon Web Services account.

To specify the retiring principal, use the Amazon Resource Name (ARN) of an Amazon Web Services principal. Valid Amazon Web Services principals include Amazon Web Services accounts (root), IAM users, federated users, and assumed role users. For examples of the ARN syntax for specifying a principal, see Amazon Web Services Identity and Access Management (IAM) in the Example ARNs section of the /Amazon Web Services General Reference/.

data ListGrantsResponse Source #

See: newListGrantsResponse smart constructor.

Constructors

ListGrantsResponse' (Maybe Bool) (Maybe [GrantListEntry]) (Maybe Text)

Instances

Instances details

Eq ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods (==) :: ListGrantsResponse -> ListGrantsResponse -> Bool # (/=) :: ListGrantsResponse -> ListGrantsResponse -> Bool #
Read ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods readsPrec :: Int -> ReadS ListGrantsResponse # readList :: ReadS [ListGrantsResponse] # readPrec :: ReadPrec ListGrantsResponse # readListPrec :: ReadPrec [ListGrantsResponse] #
Show ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods showsPrec :: Int -> ListGrantsResponse -> ShowS # show :: ListGrantsResponse -> String # showList :: [ListGrantsResponse] -> ShowS #
Generic ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Associated Types type Rep ListGrantsResponse :: Type -> Type # Methods from :: ListGrantsResponse -> Rep ListGrantsResponse x # to :: Rep ListGrantsResponse x -> ListGrantsResponse #
NFData ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods rnf :: ListGrantsResponse -> () #
Hashable ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods hashWithSalt :: Int -> ListGrantsResponse -> Int # hash :: ListGrantsResponse -> Int #
FromJSON ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods parseJSON :: Value -> Parser ListGrantsResponse # parseJSONList :: Value -> Parser [ListGrantsResponse] #
type Rep ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse type Rep ListGrantsResponse = D1 ('MetaData "ListGrantsResponse" "Amazonka.KMS.Types.ListGrantsResponse" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListGrantsResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: (S1 ('MetaSel ('Just "grants") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [GrantListEntry])) :: S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))

newListGrantsResponse :: ListGrantsResponse Source #

Create a value of ListGrantsResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:truncated:ListGrantsResponse', listGrantsResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:grants:ListGrantsResponse', listGrantsResponse_grants - A list of grants.

$sel:nextMarker:ListGrantsResponse', listGrantsResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

GetPublicKey

data GetPublicKey Source #

See: newGetPublicKey smart constructor.

Constructors

GetPublicKey' (Maybe [Text]) Text

Instances

Instances details

Eq GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods (==) :: GetPublicKey -> GetPublicKey -> Bool # (/=) :: GetPublicKey -> GetPublicKey -> Bool #
Read GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods readsPrec :: Int -> ReadS GetPublicKey # readList :: ReadS [GetPublicKey] # readPrec :: ReadPrec GetPublicKey # readListPrec :: ReadPrec [GetPublicKey] #
Show GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods showsPrec :: Int -> GetPublicKey -> ShowS # show :: GetPublicKey -> String # showList :: [GetPublicKey] -> ShowS #
Generic GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Associated Types type Rep GetPublicKey :: Type -> Type # Methods from :: GetPublicKey -> Rep GetPublicKey x # to :: Rep GetPublicKey x -> GetPublicKey #
NFData GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods rnf :: GetPublicKey -> () #
Hashable GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods hashWithSalt :: Int -> GetPublicKey -> Int # hash :: GetPublicKey -> Int #
ToJSON GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods toJSON :: GetPublicKey -> Value # toEncoding :: GetPublicKey -> Encoding # toJSONList :: [GetPublicKey] -> Value # toEncodingList :: [GetPublicKey] -> Encoding #
AWSRequest GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Associated Types type AWSResponse GetPublicKey # Methods request :: GetPublicKey -> Request GetPublicKey # response :: MonadResource m => Logger -> Service -> Proxy GetPublicKey -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GetPublicKey))) #
ToHeaders GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods toHeaders :: GetPublicKey -> [Header] #
ToPath GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods toPath :: GetPublicKey -> ByteString #
ToQuery GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods toQuery :: GetPublicKey -> QueryString #
type Rep GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey type Rep GetPublicKey = D1 ('MetaData "GetPublicKey" "Amazonka.KMS.GetPublicKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GetPublicKey'" 'PrefixI 'True) (S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :*: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse GetPublicKey Source #
Instance details Defined in Amazonka.KMS.GetPublicKey type AWSResponse GetPublicKey = GetPublicKeyResponse

newGetPublicKey Source #

Arguments

:: Text	`$sel:keyId:GetPublicKey'`
-> GetPublicKey

Create a value of GetPublicKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:grantTokens:GetPublicKey', getPublicKey_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:keyId:GetPublicKey', getPublicKey_keyId - Identifies the asymmetric KMS key that includes the public key.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

data GetPublicKeyResponse Source #

See: newGetPublicKeyResponse smart constructor.

Constructors

GetPublicKeyResponse' (Maybe KeySpec) (Maybe Text) (Maybe CustomerMasterKeySpec) (Maybe [EncryptionAlgorithmSpec]) (Maybe Base64) (Maybe [SigningAlgorithmSpec]) (Maybe KeyUsageType) Int

Instances

Instances details

Eq GetPublicKeyResponse Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods (==) :: GetPublicKeyResponse -> GetPublicKeyResponse -> Bool # (/=) :: GetPublicKeyResponse -> GetPublicKeyResponse -> Bool #
Read GetPublicKeyResponse Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods readsPrec :: Int -> ReadS GetPublicKeyResponse # readList :: ReadS [GetPublicKeyResponse] # readPrec :: ReadPrec GetPublicKeyResponse # readListPrec :: ReadPrec [GetPublicKeyResponse] #
Show GetPublicKeyResponse Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods showsPrec :: Int -> GetPublicKeyResponse -> ShowS # show :: GetPublicKeyResponse -> String # showList :: [GetPublicKeyResponse] -> ShowS #
Generic GetPublicKeyResponse Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Associated Types type Rep GetPublicKeyResponse :: Type -> Type # Methods from :: GetPublicKeyResponse -> Rep GetPublicKeyResponse x # to :: Rep GetPublicKeyResponse x -> GetPublicKeyResponse #
NFData GetPublicKeyResponse Source #
Instance details Defined in Amazonka.KMS.GetPublicKey Methods rnf :: GetPublicKeyResponse -> () #
type Rep GetPublicKeyResponse Source #
Instance details Defined in Amazonka.KMS.GetPublicKey type Rep GetPublicKeyResponse = D1 ('MetaData "GetPublicKeyResponse" "Amazonka.KMS.GetPublicKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GetPublicKeyResponse'" 'PrefixI 'True) (((S1 ('MetaSel ('Just "keySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeySpec)) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "customerMasterKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe CustomerMasterKeySpec)) :: S1 ('MetaSel ('Just "encryptionAlgorithms") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [EncryptionAlgorithmSpec])))) :: ((S1 ('MetaSel ('Just "publicKey") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64)) :: S1 ('MetaSel ('Just "signingAlgorithms") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [SigningAlgorithmSpec]))) :: (S1 ('MetaSel ('Just "keyUsage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyUsageType)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))))

newGetPublicKeyResponse Source #

Arguments

:: Int	`$sel:httpStatus:GetPublicKeyResponse'`
-> GetPublicKeyResponse

Create a value of GetPublicKeyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keySpec:GetPublicKeyResponse', getPublicKeyResponse_keySpec - The type of the of the public key that was downloaded.

$sel:keyId:GetPublicKey', getPublicKeyResponse_keyId - The Amazon Resource Name (key ARN) of the asymmetric KMS key from which the public key was downloaded.

$sel:customerMasterKeySpec:GetPublicKeyResponse', getPublicKeyResponse_customerMasterKeySpec - Instead, use the KeySpec field in the GetPublicKey response.

The KeySpec and CustomerMasterKeySpec fields have the same value. We recommend that you use the KeySpec field in your code. However, to avoid breaking changes, KMS will support both fields.

$sel:encryptionAlgorithms:GetPublicKeyResponse', getPublicKeyResponse_encryptionAlgorithms - The encryption algorithms that KMS supports for this key.

This information is critical. If a public key encrypts data outside of KMS by using an unsupported encryption algorithm, the ciphertext cannot be decrypted.

This field appears in the response only when the KeyUsage of the public key is ENCRYPT_DECRYPT.

$sel:publicKey:GetPublicKeyResponse', getPublicKeyResponse_publicKey - The exported public key.

The value is a DER-encoded X.509 public key, also known as SubjectPublicKeyInfo (SPKI), as defined in RFC 5280. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:signingAlgorithms:GetPublicKeyResponse', getPublicKeyResponse_signingAlgorithms - The signing algorithms that KMS supports for this key.

This field appears in the response only when the KeyUsage of the public key is SIGN_VERIFY.

$sel:keyUsage:GetPublicKeyResponse', getPublicKeyResponse_keyUsage - The permitted use of the public key. Valid values are ENCRYPT_DECRYPT or SIGN_VERIFY.

This information is critical. If a public key with SIGN_VERIFY key usage encrypts data outside of KMS, the ciphertext cannot be decrypted.

$sel:httpStatus:GetPublicKeyResponse', getPublicKeyResponse_httpStatus - The response's http status code.

GenerateRandom

data GenerateRandom Source #

See: newGenerateRandom smart constructor.

Constructors

GenerateRandom' (Maybe Natural) (Maybe Text)

Instances

Instances details

Eq GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods (==) :: GenerateRandom -> GenerateRandom -> Bool # (/=) :: GenerateRandom -> GenerateRandom -> Bool #
Read GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods readsPrec :: Int -> ReadS GenerateRandom # readList :: ReadS [GenerateRandom] # readPrec :: ReadPrec GenerateRandom # readListPrec :: ReadPrec [GenerateRandom] #
Show GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods showsPrec :: Int -> GenerateRandom -> ShowS # show :: GenerateRandom -> String # showList :: [GenerateRandom] -> ShowS #
Generic GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Associated Types type Rep GenerateRandom :: Type -> Type # Methods from :: GenerateRandom -> Rep GenerateRandom x # to :: Rep GenerateRandom x -> GenerateRandom #
NFData GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods rnf :: GenerateRandom -> () #
Hashable GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods hashWithSalt :: Int -> GenerateRandom -> Int # hash :: GenerateRandom -> Int #
ToJSON GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods toJSON :: GenerateRandom -> Value # toEncoding :: GenerateRandom -> Encoding # toJSONList :: [GenerateRandom] -> Value # toEncodingList :: [GenerateRandom] -> Encoding #
AWSRequest GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Associated Types type AWSResponse GenerateRandom # Methods request :: GenerateRandom -> Request GenerateRandom # response :: MonadResource m => Logger -> Service -> Proxy GenerateRandom -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GenerateRandom))) #
ToHeaders GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods toHeaders :: GenerateRandom -> [Header] #
ToPath GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods toPath :: GenerateRandom -> ByteString #
ToQuery GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods toQuery :: GenerateRandom -> QueryString #
type Rep GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom type Rep GenerateRandom = D1 ('MetaData "GenerateRandom" "Amazonka.KMS.GenerateRandom" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateRandom'" 'PrefixI 'True) (S1 ('MetaSel ('Just "numberOfBytes") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :*: S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))
type AWSResponse GenerateRandom Source #
Instance details Defined in Amazonka.KMS.GenerateRandom type AWSResponse GenerateRandom = GenerateRandomResponse

newGenerateRandom :: GenerateRandom Source #

Create a value of GenerateRandom with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:numberOfBytes:GenerateRandom', generateRandom_numberOfBytes - The length of the byte string.

$sel:customKeyStoreId:GenerateRandom', generateRandom_customKeyStoreId - Generates the random byte string in the CloudHSM cluster that is associated with the specified custom key store. To find the ID of a custom key store, use the DescribeCustomKeyStores operation.

data GenerateRandomResponse Source #

See: newGenerateRandomResponse smart constructor.

Constructors

GenerateRandomResponse' (Maybe (Sensitive Base64)) Int

Instances

Instances details

Eq GenerateRandomResponse Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods (==) :: GenerateRandomResponse -> GenerateRandomResponse -> Bool # (/=) :: GenerateRandomResponse -> GenerateRandomResponse -> Bool #
Show GenerateRandomResponse Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods showsPrec :: Int -> GenerateRandomResponse -> ShowS # show :: GenerateRandomResponse -> String # showList :: [GenerateRandomResponse] -> ShowS #
Generic GenerateRandomResponse Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Associated Types type Rep GenerateRandomResponse :: Type -> Type # Methods from :: GenerateRandomResponse -> Rep GenerateRandomResponse x # to :: Rep GenerateRandomResponse x -> GenerateRandomResponse #
NFData GenerateRandomResponse Source #
Instance details Defined in Amazonka.KMS.GenerateRandom Methods rnf :: GenerateRandomResponse -> () #
type Rep GenerateRandomResponse Source #
Instance details Defined in Amazonka.KMS.GenerateRandom type Rep GenerateRandomResponse = D1 ('MetaData "GenerateRandomResponse" "Amazonka.KMS.GenerateRandom" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateRandomResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "plaintext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (Sensitive Base64))) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newGenerateRandomResponse Source #

Arguments

:: Int	`$sel:httpStatus:GenerateRandomResponse'`
-> GenerateRandomResponse

Create a value of GenerateRandomResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:plaintext:GenerateRandomResponse', generateRandomResponse_plaintext - The random byte string. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:httpStatus:GenerateRandomResponse', generateRandomResponse_httpStatus - The response's http status code.

CreateKey

data CreateKey Source #

See: newCreateKey smart constructor.

Constructors

CreateKey' (Maybe OriginType) (Maybe KeySpec) (Maybe CustomerMasterKeySpec) (Maybe KeyUsageType) (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [Tag]) (Maybe Bool)

Instances

Instances details

Eq CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods (==) :: CreateKey -> CreateKey -> Bool # (/=) :: CreateKey -> CreateKey -> Bool #
Read CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods readsPrec :: Int -> ReadS CreateKey # readList :: ReadS [CreateKey] # readPrec :: ReadPrec CreateKey # readListPrec :: ReadPrec [CreateKey] #
Show CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods showsPrec :: Int -> CreateKey -> ShowS # show :: CreateKey -> String # showList :: [CreateKey] -> ShowS #
Generic CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Associated Types type Rep CreateKey :: Type -> Type # Methods from :: CreateKey -> Rep CreateKey x # to :: Rep CreateKey x -> CreateKey #
NFData CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods rnf :: CreateKey -> () #
Hashable CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods hashWithSalt :: Int -> CreateKey -> Int # hash :: CreateKey -> Int #
ToJSON CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods toJSON :: CreateKey -> Value # toEncoding :: CreateKey -> Encoding # toJSONList :: [CreateKey] -> Value # toEncodingList :: [CreateKey] -> Encoding #
AWSRequest CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Associated Types type AWSResponse CreateKey # Methods request :: CreateKey -> Request CreateKey # response :: MonadResource m => Logger -> Service -> Proxy CreateKey -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse CreateKey))) #
ToHeaders CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods toHeaders :: CreateKey -> [Header] #
ToPath CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods toPath :: CreateKey -> ByteString #
ToQuery CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods toQuery :: CreateKey -> QueryString #
type Rep CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey type Rep CreateKey = D1 ('MetaData "CreateKey" "Amazonka.KMS.CreateKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CreateKey'" 'PrefixI 'True) (((S1 ('MetaSel ('Just "origin") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe OriginType)) :: S1 ('MetaSel ('Just "keySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeySpec))) :: (S1 ('MetaSel ('Just "customerMasterKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe CustomerMasterKeySpec)) :: (S1 ('MetaSel ('Just "keyUsage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyUsageType)) :: S1 ('MetaSel ('Just "bypassPolicyLockoutSafetyCheck") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool))))) :: ((S1 ('MetaSel ('Just "policy") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "description") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "tags") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Tag])) :*: S1 ('MetaSel ('Just "multiRegion") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)))))))
type AWSResponse CreateKey Source #
Instance details Defined in Amazonka.KMS.CreateKey type AWSResponse CreateKey = CreateKeyResponse

newCreateKey :: CreateKey Source #

Create a value of CreateKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:origin:CreateKey', createKey_origin - The source of the key material for the KMS key. You cannot change the origin after you create the KMS key. The default is AWS_KMS, which means that KMS creates the key material.

To create a KMS key with no key material (for imported key material), set the value to EXTERNAL. For more information about importing key material into KMS, see Importing Key Material in the Key Management Service Developer Guide. This value is valid only for symmetric KMS keys.

To create a KMS key in an KMS custom key store and create its key material in the associated CloudHSM cluster, set this value to AWS_CLOUDHSM. You must also use the CustomKeyStoreId parameter to identify the custom key store. This value is valid only for symmetric KMS keys.

$sel:keySpec:CreateKey', createKey_keySpec - Specifies the type of KMS key to create. The default value, SYMMETRIC_DEFAULT, creates a KMS key with a 256-bit symmetric key for encryption and decryption. For help choosing a key spec for your KMS key, see How to Choose Your KMS key Configuration in the /Key Management Service Developer Guide/ .

The KeySpec determines whether the KMS key contains a symmetric key or an asymmetric key pair. It also determines the encryption algorithms or signing algorithms that the KMS key supports. You can't change the KeySpec after the KMS key is created. To further restrict the algorithms that can be used with the KMS key, use a condition key in its key policy or IAM policy. For more information, see kms:EncryptionAlgorithm or kms:Signing Algorithm in the /Key Management Service Developer Guide/ .

Amazon Web Services services that are integrated with KMS use symmetric KMS keys to protect your data. These services do not support asymmetric KMS keys. For help determining whether a KMS key is symmetric or asymmetric, see Identifying Symmetric and Asymmetric KMS keys in the Key Management Service Developer Guide.

KMS supports the following key specs for KMS keys:

Symmetric key (default)
- SYMMETRIC_DEFAULT (AES-256-GCM)
Asymmetric RSA key pairs
- ```
RSA_2048
```
- ```
RSA_3072
```
- ```
RSA_4096
```
Asymmetric NIST-recommended elliptic curve key pairs
- ECC_NIST_P256 (secp256r1)
- ECC_NIST_P384 (secp384r1)
- ECC_NIST_P521 (secp521r1)
Other asymmetric elliptic curve key pairs
- ECC_SECG_P256K1 (secp256k1), commonly used for cryptocurrencies.

$sel:customerMasterKeySpec:CreateKey', createKey_customerMasterKeySpec - Instead, use the KeySpec parameter.

The KeySpec and CustomerMasterKeySpec parameters work the same way. Only the names differ. We recommend that you use KeySpec parameter in your code. However, to avoid breaking changes, KMS will support both parameters.

$sel:keyUsage:CreateKey', createKey_keyUsage - Determines the cryptographic operations for which you can use the KMS key. The default value is ENCRYPT_DECRYPT. This parameter is required only for asymmetric KMS keys. You can't change the KeyUsage value after the KMS key is created.

Select only one valid value.

For symmetric KMS keys, omit the parameter or specify ENCRYPT_DECRYPT.
For asymmetric KMS keys with RSA key material, specify ENCRYPT_DECRYPT or SIGN_VERIFY.
For asymmetric KMS keys with ECC key material, specify SIGN_VERIFY.

$sel:bypassPolicyLockoutSafetyCheck:CreateKey', createKey_bypassPolicyLockoutSafetyCheck - A flag to indicate whether to bypass the key policy lockout safety check.

Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately.

For more information, refer to the scenario in the Default Key Policy section in the /Key Management Service Developer Guide/ .

Use this parameter only when you include a policy in the request and you intend to prevent the principal that is making the request from making a subsequent PutKeyPolicy request on the KMS key.

The default value is false.

$sel:policy:CreateKey', createKey_policy - The key policy to attach to the KMS key.

If you provide a key policy, it must meet the following criteria:

If you don't set BypassPolicyLockoutSafetyCheck to true, the key policy must allow the principal that is making the CreateKey request to make a subsequent PutKeyPolicy request on the KMS key. This reduces the risk that the KMS key becomes unmanageable. For more information, refer to the scenario in the Default Key Policy section of the /Key Management Service Developer Guide/ .
Each statement in the key policy must contain one or more principals. The principals in the key policy must exist and be visible to KMS. When you create a new Amazon Web Services principal (for example, an IAM user or role), you might need to enforce a delay before including the new principal in a key policy because the new principal might not be immediately visible to KMS. For more information, see Changes that I make are not always immediately visible in the /Amazon Web Services Identity and Access Management User Guide/.

If you do not provide a key policy, KMS attaches a default key policy to the KMS key. For more information, see Default Key Policy in the Key Management Service Developer Guide.

The key policy size quota is 32 kilobytes (32768 bytes).

For help writing and formatting a JSON policy document, see the IAM JSON Policy Reference in the /Identity and Access Management User Guide/ .

$sel:description:CreateKey', createKey_description - A description of the KMS key.

Use a description that helps you decide whether the KMS key is appropriate for a task. The default value is an empty string (no description).

To set or change the description after the key is created, use UpdateKeyDescription.

$sel:customKeyStoreId:CreateKey', createKey_customKeyStoreId - Creates the KMS key in the specified custom key store and the key material in its associated CloudHSM cluster. To create a KMS key in a custom key store, you must also specify the Origin parameter with a value of AWS_CLOUDHSM. The CloudHSM cluster that is associated with the custom key store must have at least two active HSMs, each in a different Availability Zone in the Region.

This parameter is valid only for symmetric KMS keys and regional KMS keys. You cannot create an asymmetric KMS key or a multi-Region key in a custom key store.

To find the ID of a custom key store, use the DescribeCustomKeyStores operation.

The response includes the custom key store ID and the ID of the CloudHSM cluster.

This operation is part of the Custom Key Store feature feature in KMS, which combines the convenience and extensive integration of KMS with the isolation and control of a single-tenant key store.

$sel:tags:CreateKey', createKey_tags - Assigns one or more tags to the KMS key. Use this parameter to tag the KMS key when it is created. To tag an existing KMS key, use the TagResource operation.

Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see Using ABAC in KMS in the Key Management Service Developer Guide.

To use this parameter, you must have kms:TagResource permission in an IAM policy.

Each tag consists of a tag key and a tag value. Both the tag key and the tag value are required, but the tag value can be an empty (null) string. You cannot have more than one tag on a KMS key with the same tag key. If you specify an existing tag key with a different tag value, KMS replaces the current tag value with the specified one.

When you add tags to an Amazon Web Services resource, Amazon Web Services generates a cost allocation report with usage and costs aggregated by tags. Tags can also be used to control access to a KMS key. For details, see Tagging Keys.

$sel:multiRegion:CreateKey', createKey_multiRegion - Creates a multi-Region primary key that you can replicate into other Amazon Web Services Regions. You cannot change this value after you create the KMS key.

For a multi-Region key, set this parameter to True. For a single-Region KMS key, omit this parameter or set it to False. The default value is False.

This operation supports multi-Region keys, an KMS feature that lets you create multiple interoperable KMS keys in different Amazon Web Services Regions. Because these KMS keys have the same key ID, key material, and other metadata, you can use them interchangeably to encrypt data in one Amazon Web Services Region and decrypt it in a different Amazon Web Services Region without re-encrypting the data or making a cross-Region call. For more information about multi-Region keys, see Using multi-Region keys in the Key Management Service Developer Guide.

This value creates a primary key, not a replica. To create a /replica key/, use the ReplicateKey operation.

You can create a symmetric or asymmetric multi-Region key, and you can create a multi-Region key with imported key material. However, you cannot create a multi-Region key in a custom key store.

data CreateKeyResponse Source #

See: newCreateKeyResponse smart constructor.

Constructors

CreateKeyResponse' (Maybe KeyMetadata) Int

Instances

Instances details

Eq CreateKeyResponse Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods (==) :: CreateKeyResponse -> CreateKeyResponse -> Bool # (/=) :: CreateKeyResponse -> CreateKeyResponse -> Bool #
Read CreateKeyResponse Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods readsPrec :: Int -> ReadS CreateKeyResponse # readList :: ReadS [CreateKeyResponse] # readPrec :: ReadPrec CreateKeyResponse # readListPrec :: ReadPrec [CreateKeyResponse] #
Show CreateKeyResponse Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods showsPrec :: Int -> CreateKeyResponse -> ShowS # show :: CreateKeyResponse -> String # showList :: [CreateKeyResponse] -> ShowS #
Generic CreateKeyResponse Source #
Instance details Defined in Amazonka.KMS.CreateKey Associated Types type Rep CreateKeyResponse :: Type -> Type # Methods from :: CreateKeyResponse -> Rep CreateKeyResponse x # to :: Rep CreateKeyResponse x -> CreateKeyResponse #
NFData CreateKeyResponse Source #
Instance details Defined in Amazonka.KMS.CreateKey Methods rnf :: CreateKeyResponse -> () #
type Rep CreateKeyResponse Source #
Instance details Defined in Amazonka.KMS.CreateKey type Rep CreateKeyResponse = D1 ('MetaData "CreateKeyResponse" "Amazonka.KMS.CreateKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CreateKeyResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyMetadata") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyMetadata)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newCreateKeyResponse Source #

Arguments

:: Int	`$sel:httpStatus:CreateKeyResponse'`
-> CreateKeyResponse

Create a value of CreateKeyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyMetadata:CreateKeyResponse', createKeyResponse_keyMetadata - Metadata associated with the KMS key.

$sel:httpStatus:CreateKeyResponse', createKeyResponse_httpStatus - The response's http status code.

DisableKey

data DisableKey Source #

See: newDisableKey smart constructor.

Constructors

DisableKey' Text

Instances

Instances details

Eq DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods (==) :: DisableKey -> DisableKey -> Bool # (/=) :: DisableKey -> DisableKey -> Bool #
Read DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods readsPrec :: Int -> ReadS DisableKey # readList :: ReadS [DisableKey] # readPrec :: ReadPrec DisableKey # readListPrec :: ReadPrec [DisableKey] #
Show DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods showsPrec :: Int -> DisableKey -> ShowS # show :: DisableKey -> String # showList :: [DisableKey] -> ShowS #
Generic DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Associated Types type Rep DisableKey :: Type -> Type # Methods from :: DisableKey -> Rep DisableKey x # to :: Rep DisableKey x -> DisableKey #
NFData DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods rnf :: DisableKey -> () #
Hashable DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods hashWithSalt :: Int -> DisableKey -> Int # hash :: DisableKey -> Int #
ToJSON DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods toJSON :: DisableKey -> Value # toEncoding :: DisableKey -> Encoding # toJSONList :: [DisableKey] -> Value # toEncodingList :: [DisableKey] -> Encoding #
AWSRequest DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Associated Types type AWSResponse DisableKey # Methods request :: DisableKey -> Request DisableKey # response :: MonadResource m => Logger -> Service -> Proxy DisableKey -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DisableKey))) #
ToHeaders DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods toHeaders :: DisableKey -> [Header] #
ToPath DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods toPath :: DisableKey -> ByteString #
ToQuery DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods toQuery :: DisableKey -> QueryString #
type Rep DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey type Rep DisableKey = D1 ('MetaData "DisableKey" "Amazonka.KMS.DisableKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DisableKey'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse DisableKey Source #
Instance details Defined in Amazonka.KMS.DisableKey type AWSResponse DisableKey = DisableKeyResponse

newDisableKey Source #

Arguments

:: Text	`$sel:keyId:DisableKey'`
-> DisableKey

Create a value of DisableKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:DisableKey', disableKey_keyId - Identifies the KMS key to disable.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data DisableKeyResponse Source #

See: newDisableKeyResponse smart constructor.

Constructors

DisableKeyResponse'

Instances

Instances details

Eq DisableKeyResponse Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods (==) :: DisableKeyResponse -> DisableKeyResponse -> Bool # (/=) :: DisableKeyResponse -> DisableKeyResponse -> Bool #
Read DisableKeyResponse Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods readsPrec :: Int -> ReadS DisableKeyResponse # readList :: ReadS [DisableKeyResponse] # readPrec :: ReadPrec DisableKeyResponse # readListPrec :: ReadPrec [DisableKeyResponse] #
Show DisableKeyResponse Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods showsPrec :: Int -> DisableKeyResponse -> ShowS # show :: DisableKeyResponse -> String # showList :: [DisableKeyResponse] -> ShowS #
Generic DisableKeyResponse Source #
Instance details Defined in Amazonka.KMS.DisableKey Associated Types type Rep DisableKeyResponse :: Type -> Type # Methods from :: DisableKeyResponse -> Rep DisableKeyResponse x # to :: Rep DisableKeyResponse x -> DisableKeyResponse #
NFData DisableKeyResponse Source #
Instance details Defined in Amazonka.KMS.DisableKey Methods rnf :: DisableKeyResponse -> () #
type Rep DisableKeyResponse Source #
Instance details Defined in Amazonka.KMS.DisableKey type Rep DisableKeyResponse = D1 ('MetaData "DisableKeyResponse" "Amazonka.KMS.DisableKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DisableKeyResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newDisableKeyResponse :: DisableKeyResponse Source #

Create a value of DisableKeyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

DisconnectCustomKeyStore

data DisconnectCustomKeyStore Source #

See: newDisconnectCustomKeyStore smart constructor.

Constructors

DisconnectCustomKeyStore' Text

Instances

Instances details

Eq DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods (==) :: DisconnectCustomKeyStore -> DisconnectCustomKeyStore -> Bool # (/=) :: DisconnectCustomKeyStore -> DisconnectCustomKeyStore -> Bool #
Read DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods readsPrec :: Int -> ReadS DisconnectCustomKeyStore # readList :: ReadS [DisconnectCustomKeyStore] # readPrec :: ReadPrec DisconnectCustomKeyStore # readListPrec :: ReadPrec [DisconnectCustomKeyStore] #
Show DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods showsPrec :: Int -> DisconnectCustomKeyStore -> ShowS # show :: DisconnectCustomKeyStore -> String # showList :: [DisconnectCustomKeyStore] -> ShowS #
Generic DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Associated Types type Rep DisconnectCustomKeyStore :: Type -> Type # Methods from :: DisconnectCustomKeyStore -> Rep DisconnectCustomKeyStore x # to :: Rep DisconnectCustomKeyStore x -> DisconnectCustomKeyStore #
NFData DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods rnf :: DisconnectCustomKeyStore -> () #
Hashable DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods hashWithSalt :: Int -> DisconnectCustomKeyStore -> Int # hash :: DisconnectCustomKeyStore -> Int #
ToJSON DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods toJSON :: DisconnectCustomKeyStore -> Value # toEncoding :: DisconnectCustomKeyStore -> Encoding # toJSONList :: [DisconnectCustomKeyStore] -> Value # toEncodingList :: [DisconnectCustomKeyStore] -> Encoding #
AWSRequest DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Associated Types type AWSResponse DisconnectCustomKeyStore # Methods request :: DisconnectCustomKeyStore -> Request DisconnectCustomKeyStore # response :: MonadResource m => Logger -> Service -> Proxy DisconnectCustomKeyStore -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DisconnectCustomKeyStore))) #
ToHeaders DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods toHeaders :: DisconnectCustomKeyStore -> [Header] #
ToPath DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods toPath :: DisconnectCustomKeyStore -> ByteString #
ToQuery DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods toQuery :: DisconnectCustomKeyStore -> QueryString #
type Rep DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore type Rep DisconnectCustomKeyStore = D1 ('MetaData "DisconnectCustomKeyStore" "Amazonka.KMS.DisconnectCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DisconnectCustomKeyStore'" 'PrefixI 'True) (S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse DisconnectCustomKeyStore Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore type AWSResponse DisconnectCustomKeyStore = DisconnectCustomKeyStoreResponse

newDisconnectCustomKeyStore Source #

Arguments

:: Text	`$sel:customKeyStoreId:DisconnectCustomKeyStore'`
-> DisconnectCustomKeyStore

Create a value of DisconnectCustomKeyStore with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:customKeyStoreId:DisconnectCustomKeyStore', disconnectCustomKeyStore_customKeyStoreId - Enter the ID of the custom key store you want to disconnect. To find the ID of a custom key store, use the DescribeCustomKeyStores operation.

data DisconnectCustomKeyStoreResponse Source #

See: newDisconnectCustomKeyStoreResponse smart constructor.

Constructors

DisconnectCustomKeyStoreResponse' Int

Instances

Instances details

Eq DisconnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods (==) :: DisconnectCustomKeyStoreResponse -> DisconnectCustomKeyStoreResponse -> Bool # (/=) :: DisconnectCustomKeyStoreResponse -> DisconnectCustomKeyStoreResponse -> Bool #
Read DisconnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods readsPrec :: Int -> ReadS DisconnectCustomKeyStoreResponse # readList :: ReadS [DisconnectCustomKeyStoreResponse] # readPrec :: ReadPrec DisconnectCustomKeyStoreResponse # readListPrec :: ReadPrec [DisconnectCustomKeyStoreResponse] #
Show DisconnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods showsPrec :: Int -> DisconnectCustomKeyStoreResponse -> ShowS # show :: DisconnectCustomKeyStoreResponse -> String # showList :: [DisconnectCustomKeyStoreResponse] -> ShowS #
Generic DisconnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Associated Types type Rep DisconnectCustomKeyStoreResponse :: Type -> Type # Methods from :: DisconnectCustomKeyStoreResponse -> Rep DisconnectCustomKeyStoreResponse x # to :: Rep DisconnectCustomKeyStoreResponse x -> DisconnectCustomKeyStoreResponse #
NFData DisconnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore Methods rnf :: DisconnectCustomKeyStoreResponse -> () #
type Rep DisconnectCustomKeyStoreResponse Source #
Instance details Defined in Amazonka.KMS.DisconnectCustomKeyStore type Rep DisconnectCustomKeyStoreResponse = D1 ('MetaData "DisconnectCustomKeyStoreResponse" "Amazonka.KMS.DisconnectCustomKeyStore" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DisconnectCustomKeyStoreResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newDisconnectCustomKeyStoreResponse Source #

Arguments

:: Int	`$sel:httpStatus:DisconnectCustomKeyStoreResponse'`
-> DisconnectCustomKeyStoreResponse

Create a value of DisconnectCustomKeyStoreResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:httpStatus:DisconnectCustomKeyStoreResponse', disconnectCustomKeyStoreResponse_httpStatus - The response's http status code.

RetireGrant

data RetireGrant Source #

See: newRetireGrant smart constructor.

Constructors

RetireGrant' (Maybe Text) (Maybe Text) (Maybe Text)

Instances

Instances details

Eq RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods (==) :: RetireGrant -> RetireGrant -> Bool # (/=) :: RetireGrant -> RetireGrant -> Bool #
Read RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods readsPrec :: Int -> ReadS RetireGrant # readList :: ReadS [RetireGrant] # readPrec :: ReadPrec RetireGrant # readListPrec :: ReadPrec [RetireGrant] #
Show RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods showsPrec :: Int -> RetireGrant -> ShowS # show :: RetireGrant -> String # showList :: [RetireGrant] -> ShowS #
Generic RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Associated Types type Rep RetireGrant :: Type -> Type # Methods from :: RetireGrant -> Rep RetireGrant x # to :: Rep RetireGrant x -> RetireGrant #
NFData RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods rnf :: RetireGrant -> () #
Hashable RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods hashWithSalt :: Int -> RetireGrant -> Int # hash :: RetireGrant -> Int #
ToJSON RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods toJSON :: RetireGrant -> Value # toEncoding :: RetireGrant -> Encoding # toJSONList :: [RetireGrant] -> Value # toEncodingList :: [RetireGrant] -> Encoding #
AWSRequest RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Associated Types type AWSResponse RetireGrant # Methods request :: RetireGrant -> Request RetireGrant # response :: MonadResource m => Logger -> Service -> Proxy RetireGrant -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse RetireGrant))) #
ToHeaders RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods toHeaders :: RetireGrant -> [Header] #
ToPath RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods toPath :: RetireGrant -> ByteString #
ToQuery RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods toQuery :: RetireGrant -> QueryString #
type Rep RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant type Rep RetireGrant = D1 ('MetaData "RetireGrant" "Amazonka.KMS.RetireGrant" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "RetireGrant'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "grantId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "grantToken") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))
type AWSResponse RetireGrant Source #
Instance details Defined in Amazonka.KMS.RetireGrant type AWSResponse RetireGrant = RetireGrantResponse

newRetireGrant :: RetireGrant Source #

Create a value of RetireGrant with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:RetireGrant', retireGrant_keyId - The key ARN KMS key associated with the grant. To find the key ARN, use the ListKeys operation.

For example: arn:aws:kms:us-east-2:444455556666:key/1234abcd-12ab-34cd-56ef-1234567890ab

$sel:grantId:RetireGrant', retireGrant_grantId - Identifies the grant to retire. To get the grant ID, use CreateGrant, ListGrants, or ListRetirableGrants.

Grant ID Example - 0123456789012345678901234567890123456789012345678901234567890123

$sel:grantToken:RetireGrant', retireGrant_grantToken - Identifies the grant to be retired. You can use a grant token to identify a new grant even before it has achieved eventual consistency.

Only the CreateGrant operation returns a grant token. For details, see Grant token and Eventual consistency in the Key Management Service Developer Guide.

data RetireGrantResponse Source #

See: newRetireGrantResponse smart constructor.

Constructors

RetireGrantResponse'

Instances

Instances details

Eq RetireGrantResponse Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods (==) :: RetireGrantResponse -> RetireGrantResponse -> Bool # (/=) :: RetireGrantResponse -> RetireGrantResponse -> Bool #
Read RetireGrantResponse Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods readsPrec :: Int -> ReadS RetireGrantResponse # readList :: ReadS [RetireGrantResponse] # readPrec :: ReadPrec RetireGrantResponse # readListPrec :: ReadPrec [RetireGrantResponse] #
Show RetireGrantResponse Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods showsPrec :: Int -> RetireGrantResponse -> ShowS # show :: RetireGrantResponse -> String # showList :: [RetireGrantResponse] -> ShowS #
Generic RetireGrantResponse Source #
Instance details Defined in Amazonka.KMS.RetireGrant Associated Types type Rep RetireGrantResponse :: Type -> Type # Methods from :: RetireGrantResponse -> Rep RetireGrantResponse x # to :: Rep RetireGrantResponse x -> RetireGrantResponse #
NFData RetireGrantResponse Source #
Instance details Defined in Amazonka.KMS.RetireGrant Methods rnf :: RetireGrantResponse -> () #
type Rep RetireGrantResponse Source #
Instance details Defined in Amazonka.KMS.RetireGrant type Rep RetireGrantResponse = D1 ('MetaData "RetireGrantResponse" "Amazonka.KMS.RetireGrant" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "RetireGrantResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newRetireGrantResponse :: RetireGrantResponse Source #

Create a value of RetireGrantResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

ListKeys (Paginated)

data ListKeys Source #

See: newListKeys smart constructor.

Constructors

ListKeys' (Maybe Text) (Maybe Natural)

Instances

Instances details

Eq ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods (==) :: ListKeys -> ListKeys -> Bool # (/=) :: ListKeys -> ListKeys -> Bool #
Read ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods readsPrec :: Int -> ReadS ListKeys # readList :: ReadS [ListKeys] # readPrec :: ReadPrec ListKeys # readListPrec :: ReadPrec [ListKeys] #
Show ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods showsPrec :: Int -> ListKeys -> ShowS # show :: ListKeys -> String # showList :: [ListKeys] -> ShowS #
Generic ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Associated Types type Rep ListKeys :: Type -> Type # Methods from :: ListKeys -> Rep ListKeys x # to :: Rep ListKeys x -> ListKeys #
NFData ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods rnf :: ListKeys -> () #
Hashable ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods hashWithSalt :: Int -> ListKeys -> Int # hash :: ListKeys -> Int #
ToJSON ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods toJSON :: ListKeys -> Value # toEncoding :: ListKeys -> Encoding # toJSONList :: [ListKeys] -> Value # toEncodingList :: [ListKeys] -> Encoding #
AWSPager ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods page :: ListKeys -> AWSResponse ListKeys -> Maybe ListKeys #
AWSRequest ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Associated Types type AWSResponse ListKeys # Methods request :: ListKeys -> Request ListKeys # response :: MonadResource m => Logger -> Service -> Proxy ListKeys -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ListKeys))) #
ToHeaders ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods toHeaders :: ListKeys -> [Header] #
ToPath ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods toPath :: ListKeys -> ByteString #
ToQuery ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods toQuery :: ListKeys -> QueryString #
type Rep ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys type Rep ListKeys = D1 ('MetaData "ListKeys" "Amazonka.KMS.ListKeys" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListKeys'" 'PrefixI 'True) (S1 ('MetaSel ('Just "marker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "limit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural))))
type AWSResponse ListKeys Source #
Instance details Defined in Amazonka.KMS.ListKeys type AWSResponse ListKeys = ListKeysResponse

newListKeys :: ListKeys Source #

Create a value of ListKeys with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:marker:ListKeys', listKeys_marker - Use this parameter in a subsequent request after you receive a response with truncated results. Set it to the value of NextMarker from the truncated response you just received.

$sel:limit:ListKeys', listKeys_limit - Use this parameter to specify the maximum number of items to return. When this value is present, KMS does not return more than the specified number of items, but it might return fewer.

This value is optional. If you include a value, it must be between 1 and 1000, inclusive. If you do not include a value, it defaults to 100.

data ListKeysResponse Source #

See: newListKeysResponse smart constructor.

Constructors

ListKeysResponse' (Maybe Bool) (Maybe [KeyListEntry]) (Maybe Text) Int

Instances

Instances details

Eq ListKeysResponse Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods (==) :: ListKeysResponse -> ListKeysResponse -> Bool # (/=) :: ListKeysResponse -> ListKeysResponse -> Bool #
Read ListKeysResponse Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods readsPrec :: Int -> ReadS ListKeysResponse # readList :: ReadS [ListKeysResponse] # readPrec :: ReadPrec ListKeysResponse # readListPrec :: ReadPrec [ListKeysResponse] #
Show ListKeysResponse Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods showsPrec :: Int -> ListKeysResponse -> ShowS # show :: ListKeysResponse -> String # showList :: [ListKeysResponse] -> ShowS #
Generic ListKeysResponse Source #
Instance details Defined in Amazonka.KMS.ListKeys Associated Types type Rep ListKeysResponse :: Type -> Type # Methods from :: ListKeysResponse -> Rep ListKeysResponse x # to :: Rep ListKeysResponse x -> ListKeysResponse #
NFData ListKeysResponse Source #
Instance details Defined in Amazonka.KMS.ListKeys Methods rnf :: ListKeysResponse -> () #
type Rep ListKeysResponse Source #
Instance details Defined in Amazonka.KMS.ListKeys type Rep ListKeysResponse = D1 ('MetaData "ListKeysResponse" "Amazonka.KMS.ListKeys" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListKeysResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: S1 ('MetaSel ('Just "keys") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [KeyListEntry]))) :: (S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newListKeysResponse Source #

Arguments

:: Int	`$sel:httpStatus:ListKeysResponse'`
-> ListKeysResponse

Create a value of ListKeysResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:truncated:ListKeysResponse', listKeysResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:keys:ListKeysResponse', listKeysResponse_keys - A list of KMS keys.

$sel:nextMarker:ListKeysResponse', listKeysResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

$sel:httpStatus:ListKeysResponse', listKeysResponse_httpStatus - The response's http status code.

ListResourceTags

data ListResourceTags Source #

See: newListResourceTags smart constructor.

Constructors

ListResourceTags' (Maybe Text) (Maybe Natural) Text

Instances

Instances details

Eq ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods (==) :: ListResourceTags -> ListResourceTags -> Bool # (/=) :: ListResourceTags -> ListResourceTags -> Bool #
Read ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods readsPrec :: Int -> ReadS ListResourceTags # readList :: ReadS [ListResourceTags] # readPrec :: ReadPrec ListResourceTags # readListPrec :: ReadPrec [ListResourceTags] #
Show ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods showsPrec :: Int -> ListResourceTags -> ShowS # show :: ListResourceTags -> String # showList :: [ListResourceTags] -> ShowS #
Generic ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Associated Types type Rep ListResourceTags :: Type -> Type # Methods from :: ListResourceTags -> Rep ListResourceTags x # to :: Rep ListResourceTags x -> ListResourceTags #
NFData ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods rnf :: ListResourceTags -> () #
Hashable ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods hashWithSalt :: Int -> ListResourceTags -> Int # hash :: ListResourceTags -> Int #
ToJSON ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods toJSON :: ListResourceTags -> Value # toEncoding :: ListResourceTags -> Encoding # toJSONList :: [ListResourceTags] -> Value # toEncodingList :: [ListResourceTags] -> Encoding #
AWSRequest ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Associated Types type AWSResponse ListResourceTags # Methods request :: ListResourceTags -> Request ListResourceTags # response :: MonadResource m => Logger -> Service -> Proxy ListResourceTags -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ListResourceTags))) #
ToHeaders ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods toHeaders :: ListResourceTags -> [Header] #
ToPath ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods toPath :: ListResourceTags -> ByteString #
ToQuery ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods toQuery :: ListResourceTags -> QueryString #
type Rep ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags type Rep ListResourceTags = D1 ('MetaData "ListResourceTags" "Amazonka.KMS.ListResourceTags" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListResourceTags'" 'PrefixI 'True) (S1 ('MetaSel ('Just "marker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "limit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))))
type AWSResponse ListResourceTags Source #
Instance details Defined in Amazonka.KMS.ListResourceTags type AWSResponse ListResourceTags = ListResourceTagsResponse

newListResourceTags Source #

Arguments

:: Text	`$sel:keyId:ListResourceTags'`
-> ListResourceTags

Create a value of ListResourceTags with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:marker:ListResourceTags', listResourceTags_marker - Use this parameter in a subsequent request after you receive a response with truncated results. Set it to the value of NextMarker from the truncated response you just received.

Do not attempt to construct this value. Use only the value of NextMarker from the truncated response you just received.

$sel:limit:ListResourceTags', listResourceTags_limit - Use this parameter to specify the maximum number of items to return. When this value is present, KMS does not return more than the specified number of items, but it might return fewer.

This value is optional. If you include a value, it must be between 1 and 50, inclusive. If you do not include a value, it defaults to 50.

$sel:keyId:ListResourceTags', listResourceTags_keyId - Gets tags on the specified KMS key.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data ListResourceTagsResponse Source #

See: newListResourceTagsResponse smart constructor.

Constructors

ListResourceTagsResponse' (Maybe Bool) (Maybe Text) (Maybe [Tag]) Int

Instances

Instances details

Eq ListResourceTagsResponse Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods (==) :: ListResourceTagsResponse -> ListResourceTagsResponse -> Bool # (/=) :: ListResourceTagsResponse -> ListResourceTagsResponse -> Bool #
Read ListResourceTagsResponse Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods readsPrec :: Int -> ReadS ListResourceTagsResponse # readList :: ReadS [ListResourceTagsResponse] # readPrec :: ReadPrec ListResourceTagsResponse # readListPrec :: ReadPrec [ListResourceTagsResponse] #
Show ListResourceTagsResponse Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods showsPrec :: Int -> ListResourceTagsResponse -> ShowS # show :: ListResourceTagsResponse -> String # showList :: [ListResourceTagsResponse] -> ShowS #
Generic ListResourceTagsResponse Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Associated Types type Rep ListResourceTagsResponse :: Type -> Type # Methods from :: ListResourceTagsResponse -> Rep ListResourceTagsResponse x # to :: Rep ListResourceTagsResponse x -> ListResourceTagsResponse #
NFData ListResourceTagsResponse Source #
Instance details Defined in Amazonka.KMS.ListResourceTags Methods rnf :: ListResourceTagsResponse -> () #
type Rep ListResourceTagsResponse Source #
Instance details Defined in Amazonka.KMS.ListResourceTags type Rep ListResourceTagsResponse = D1 ('MetaData "ListResourceTagsResponse" "Amazonka.KMS.ListResourceTags" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListResourceTagsResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "tags") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Tag])) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newListResourceTagsResponse Source #

Arguments

:: Int	`$sel:httpStatus:ListResourceTagsResponse'`
-> ListResourceTagsResponse

Create a value of ListResourceTagsResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:truncated:ListResourceTagsResponse', listResourceTagsResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:nextMarker:ListResourceTagsResponse', listResourceTagsResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

Do not assume or infer any information from this value.

$sel:tags:ListResourceTagsResponse', listResourceTagsResponse_tags - A list of tags. Each tag consists of a tag key and a tag value.

Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see Using ABAC in KMS in the Key Management Service Developer Guide.

$sel:httpStatus:ListResourceTagsResponse', listResourceTagsResponse_httpStatus - The response's http status code.

GetKeyRotationStatus

data GetKeyRotationStatus Source #

See: newGetKeyRotationStatus smart constructor.

Constructors

GetKeyRotationStatus' Text

Instances

Instances details

Eq GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods (==) :: GetKeyRotationStatus -> GetKeyRotationStatus -> Bool # (/=) :: GetKeyRotationStatus -> GetKeyRotationStatus -> Bool #
Read GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods readsPrec :: Int -> ReadS GetKeyRotationStatus # readList :: ReadS [GetKeyRotationStatus] # readPrec :: ReadPrec GetKeyRotationStatus # readListPrec :: ReadPrec [GetKeyRotationStatus] #
Show GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods showsPrec :: Int -> GetKeyRotationStatus -> ShowS # show :: GetKeyRotationStatus -> String # showList :: [GetKeyRotationStatus] -> ShowS #
Generic GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Associated Types type Rep GetKeyRotationStatus :: Type -> Type # Methods from :: GetKeyRotationStatus -> Rep GetKeyRotationStatus x # to :: Rep GetKeyRotationStatus x -> GetKeyRotationStatus #
NFData GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods rnf :: GetKeyRotationStatus -> () #
Hashable GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods hashWithSalt :: Int -> GetKeyRotationStatus -> Int # hash :: GetKeyRotationStatus -> Int #
ToJSON GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods toJSON :: GetKeyRotationStatus -> Value # toEncoding :: GetKeyRotationStatus -> Encoding # toJSONList :: [GetKeyRotationStatus] -> Value # toEncodingList :: [GetKeyRotationStatus] -> Encoding #
AWSRequest GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Associated Types type AWSResponse GetKeyRotationStatus # Methods request :: GetKeyRotationStatus -> Request GetKeyRotationStatus # response :: MonadResource m => Logger -> Service -> Proxy GetKeyRotationStatus -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GetKeyRotationStatus))) #
ToHeaders GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods toHeaders :: GetKeyRotationStatus -> [Header] #
ToPath GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods toPath :: GetKeyRotationStatus -> ByteString #
ToQuery GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods toQuery :: GetKeyRotationStatus -> QueryString #
type Rep GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus type Rep GetKeyRotationStatus = D1 ('MetaData "GetKeyRotationStatus" "Amazonka.KMS.GetKeyRotationStatus" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GetKeyRotationStatus'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse GetKeyRotationStatus Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus type AWSResponse GetKeyRotationStatus = GetKeyRotationStatusResponse

newGetKeyRotationStatus Source #

Arguments

:: Text	`$sel:keyId:GetKeyRotationStatus'`
-> GetKeyRotationStatus

Create a value of GetKeyRotationStatus with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GetKeyRotationStatus', getKeyRotationStatus_keyId - Gets the rotation status for the specified KMS key.

Specify the key ID or key ARN of the KMS key. To specify a KMS key in a different Amazon Web Services account, you must use the key ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data GetKeyRotationStatusResponse Source #

See: newGetKeyRotationStatusResponse smart constructor.

Constructors

GetKeyRotationStatusResponse' (Maybe Bool) Int

Instances

Instances details

Eq GetKeyRotationStatusResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods (==) :: GetKeyRotationStatusResponse -> GetKeyRotationStatusResponse -> Bool # (/=) :: GetKeyRotationStatusResponse -> GetKeyRotationStatusResponse -> Bool #
Read GetKeyRotationStatusResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods readsPrec :: Int -> ReadS GetKeyRotationStatusResponse # readList :: ReadS [GetKeyRotationStatusResponse] # readPrec :: ReadPrec GetKeyRotationStatusResponse # readListPrec :: ReadPrec [GetKeyRotationStatusResponse] #
Show GetKeyRotationStatusResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods showsPrec :: Int -> GetKeyRotationStatusResponse -> ShowS # show :: GetKeyRotationStatusResponse -> String # showList :: [GetKeyRotationStatusResponse] -> ShowS #
Generic GetKeyRotationStatusResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Associated Types type Rep GetKeyRotationStatusResponse :: Type -> Type # Methods from :: GetKeyRotationStatusResponse -> Rep GetKeyRotationStatusResponse x # to :: Rep GetKeyRotationStatusResponse x -> GetKeyRotationStatusResponse #
NFData GetKeyRotationStatusResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus Methods rnf :: GetKeyRotationStatusResponse -> () #
type Rep GetKeyRotationStatusResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyRotationStatus type Rep GetKeyRotationStatusResponse = D1 ('MetaData "GetKeyRotationStatusResponse" "Amazonka.KMS.GetKeyRotationStatus" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GetKeyRotationStatusResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyRotationEnabled") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newGetKeyRotationStatusResponse Source #

Arguments

:: Int	`$sel:httpStatus:GetKeyRotationStatusResponse'`
-> GetKeyRotationStatusResponse

Create a value of GetKeyRotationStatusResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyRotationEnabled:GetKeyRotationStatusResponse', getKeyRotationStatusResponse_keyRotationEnabled - A Boolean value that specifies whether key rotation is enabled.

$sel:httpStatus:GetKeyRotationStatusResponse', getKeyRotationStatusResponse_httpStatus - The response's http status code.

GenerateDataKey

data GenerateDataKey Source #

See: newGenerateDataKey smart constructor.

Constructors

GenerateDataKey' (Maybe DataKeySpec) (Maybe (HashMap Text Text)) (Maybe Natural) (Maybe [Text]) Text

Instances

Instances details

Eq GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods (==) :: GenerateDataKey -> GenerateDataKey -> Bool # (/=) :: GenerateDataKey -> GenerateDataKey -> Bool #
Read GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods readsPrec :: Int -> ReadS GenerateDataKey # readList :: ReadS [GenerateDataKey] # readPrec :: ReadPrec GenerateDataKey # readListPrec :: ReadPrec [GenerateDataKey] #
Show GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods showsPrec :: Int -> GenerateDataKey -> ShowS # show :: GenerateDataKey -> String # showList :: [GenerateDataKey] -> ShowS #
Generic GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Associated Types type Rep GenerateDataKey :: Type -> Type # Methods from :: GenerateDataKey -> Rep GenerateDataKey x # to :: Rep GenerateDataKey x -> GenerateDataKey #
NFData GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods rnf :: GenerateDataKey -> () #
Hashable GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods hashWithSalt :: Int -> GenerateDataKey -> Int # hash :: GenerateDataKey -> Int #
ToJSON GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods toJSON :: GenerateDataKey -> Value # toEncoding :: GenerateDataKey -> Encoding # toJSONList :: [GenerateDataKey] -> Value # toEncodingList :: [GenerateDataKey] -> Encoding #
AWSRequest GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Associated Types type AWSResponse GenerateDataKey # Methods request :: GenerateDataKey -> Request GenerateDataKey # response :: MonadResource m => Logger -> Service -> Proxy GenerateDataKey -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GenerateDataKey))) #
ToHeaders GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods toHeaders :: GenerateDataKey -> [Header] #
ToPath GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods toPath :: GenerateDataKey -> ByteString #
ToQuery GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods toQuery :: GenerateDataKey -> QueryString #
type Rep GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey type Rep GenerateDataKey = D1 ('MetaData "GenerateDataKey" "Amazonka.KMS.GenerateDataKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateDataKey'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe DataKeySpec)) :: S1 ('MetaSel ('Just "encryptionContext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text)))) :: (S1 ('MetaSel ('Just "numberOfBytes") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :: (S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))
type AWSResponse GenerateDataKey Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey type AWSResponse GenerateDataKey = GenerateDataKeyResponse

newGenerateDataKey Source #

Arguments

:: Text	`$sel:keyId:GenerateDataKey'`
-> GenerateDataKey

Create a value of GenerateDataKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keySpec:GenerateDataKey', generateDataKey_keySpec - Specifies the length of the data key. Use AES_128 to generate a 128-bit symmetric key, or AES_256 to generate a 256-bit symmetric key.

You must specify either the KeySpec or the NumberOfBytes parameter (but not both) in every GenerateDataKey request.

$sel:encryptionContext:GenerateDataKey', generateDataKey_encryptionContext - Specifies the encryption context that will be used when encrypting the data key.

An encryption context is a collection of non-secret key-value pairs that represents additional authenticated data. When you use an encryption context to encrypt data, you must specify the same (an exact case-sensitive match) encryption context to decrypt the data. An encryption context is optional when encrypting with a symmetric KMS key, but it is highly recommended.

For more information, see Encryption Context in the Key Management Service Developer Guide.

$sel:numberOfBytes:GenerateDataKey', generateDataKey_numberOfBytes - Specifies the length of the data key in bytes. For example, use the value 64 to generate a 512-bit data key (64 bytes is 512 bits). For 128-bit (16-byte) and 256-bit (32-byte) data keys, use the KeySpec parameter.

You must specify either the KeySpec or the NumberOfBytes parameter (but not both) in every GenerateDataKey request.

$sel:grantTokens:GenerateDataKey', generateDataKey_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:keyId:GenerateDataKey', generateDataKey_keyId - Identifies the symmetric KMS key that encrypts the data key.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

data GenerateDataKeyResponse Source #

See: newGenerateDataKeyResponse smart constructor.

Constructors

GenerateDataKeyResponse' Int Text (Sensitive Base64) Base64

Instances

Instances details

Eq GenerateDataKeyResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods (==) :: GenerateDataKeyResponse -> GenerateDataKeyResponse -> Bool # (/=) :: GenerateDataKeyResponse -> GenerateDataKeyResponse -> Bool #
Show GenerateDataKeyResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods showsPrec :: Int -> GenerateDataKeyResponse -> ShowS # show :: GenerateDataKeyResponse -> String # showList :: [GenerateDataKeyResponse] -> ShowS #
Generic GenerateDataKeyResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Associated Types type Rep GenerateDataKeyResponse :: Type -> Type # Methods from :: GenerateDataKeyResponse -> Rep GenerateDataKeyResponse x # to :: Rep GenerateDataKeyResponse x -> GenerateDataKeyResponse #
NFData GenerateDataKeyResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey Methods rnf :: GenerateDataKeyResponse -> () #
type Rep GenerateDataKeyResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKey type Rep GenerateDataKeyResponse = D1 ('MetaData "GenerateDataKeyResponse" "Amazonka.KMS.GenerateDataKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateDataKeyResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)) :: (S1 ('MetaSel ('Just "plaintext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Sensitive Base64)) :*: S1 ('MetaSel ('Just "ciphertextBlob") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Base64))))

newGenerateDataKeyResponse Source #

Arguments

:: Int	`$sel:httpStatus:GenerateDataKeyResponse'`
-> Text	`$sel:keyId:GenerateDataKey'`
-> ByteString	`$sel:plaintext:GenerateDataKeyResponse'`
-> ByteString	`$sel:ciphertextBlob:GenerateDataKeyResponse'`
-> GenerateDataKeyResponse

Create a value of GenerateDataKeyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:httpStatus:GenerateDataKeyResponse', generateDataKeyResponse_httpStatus - The response's http status code.

$sel:keyId:GenerateDataKey', generateDataKeyResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key that encrypted the data key.

$sel:plaintext:GenerateDataKeyResponse', generateDataKeyResponse_plaintext - The plaintext data key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded. Use this data key to encrypt your data outside of KMS. Then, remove it from memory as soon as possible.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:ciphertextBlob:GenerateDataKeyResponse', generateDataKeyResponse_ciphertextBlob - The encrypted copy of the data key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

DeleteAlias

data DeleteAlias Source #

See: newDeleteAlias smart constructor.

Constructors

DeleteAlias' Text

Instances

Instances details

Eq DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods (==) :: DeleteAlias -> DeleteAlias -> Bool # (/=) :: DeleteAlias -> DeleteAlias -> Bool #
Read DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods readsPrec :: Int -> ReadS DeleteAlias # readList :: ReadS [DeleteAlias] # readPrec :: ReadPrec DeleteAlias # readListPrec :: ReadPrec [DeleteAlias] #
Show DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods showsPrec :: Int -> DeleteAlias -> ShowS # show :: DeleteAlias -> String # showList :: [DeleteAlias] -> ShowS #
Generic DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Associated Types type Rep DeleteAlias :: Type -> Type # Methods from :: DeleteAlias -> Rep DeleteAlias x # to :: Rep DeleteAlias x -> DeleteAlias #
NFData DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods rnf :: DeleteAlias -> () #
Hashable DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods hashWithSalt :: Int -> DeleteAlias -> Int # hash :: DeleteAlias -> Int #
ToJSON DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods toJSON :: DeleteAlias -> Value # toEncoding :: DeleteAlias -> Encoding # toJSONList :: [DeleteAlias] -> Value # toEncodingList :: [DeleteAlias] -> Encoding #
AWSRequest DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Associated Types type AWSResponse DeleteAlias # Methods request :: DeleteAlias -> Request DeleteAlias # response :: MonadResource m => Logger -> Service -> Proxy DeleteAlias -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DeleteAlias))) #
ToHeaders DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods toHeaders :: DeleteAlias -> [Header] #
ToPath DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods toPath :: DeleteAlias -> ByteString #
ToQuery DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods toQuery :: DeleteAlias -> QueryString #
type Rep DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias type Rep DeleteAlias = D1 ('MetaData "DeleteAlias" "Amazonka.KMS.DeleteAlias" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DeleteAlias'" 'PrefixI 'True) (S1 ('MetaSel ('Just "aliasName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse DeleteAlias Source #
Instance details Defined in Amazonka.KMS.DeleteAlias type AWSResponse DeleteAlias = DeleteAliasResponse

newDeleteAlias Source #

Arguments

:: Text	`$sel:aliasName:DeleteAlias'`
-> DeleteAlias

Create a value of DeleteAlias with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:aliasName:DeleteAlias', deleteAlias_aliasName - The alias to be deleted. The alias name must begin with alias/ followed by the alias name, such as alias/ExampleAlias.

data DeleteAliasResponse Source #

See: newDeleteAliasResponse smart constructor.

Constructors

DeleteAliasResponse'

Instances

Instances details

Eq DeleteAliasResponse Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods (==) :: DeleteAliasResponse -> DeleteAliasResponse -> Bool # (/=) :: DeleteAliasResponse -> DeleteAliasResponse -> Bool #
Read DeleteAliasResponse Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods readsPrec :: Int -> ReadS DeleteAliasResponse # readList :: ReadS [DeleteAliasResponse] # readPrec :: ReadPrec DeleteAliasResponse # readListPrec :: ReadPrec [DeleteAliasResponse] #
Show DeleteAliasResponse Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods showsPrec :: Int -> DeleteAliasResponse -> ShowS # show :: DeleteAliasResponse -> String # showList :: [DeleteAliasResponse] -> ShowS #
Generic DeleteAliasResponse Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Associated Types type Rep DeleteAliasResponse :: Type -> Type # Methods from :: DeleteAliasResponse -> Rep DeleteAliasResponse x # to :: Rep DeleteAliasResponse x -> DeleteAliasResponse #
NFData DeleteAliasResponse Source #
Instance details Defined in Amazonka.KMS.DeleteAlias Methods rnf :: DeleteAliasResponse -> () #
type Rep DeleteAliasResponse Source #
Instance details Defined in Amazonka.KMS.DeleteAlias type Rep DeleteAliasResponse = D1 ('MetaData "DeleteAliasResponse" "Amazonka.KMS.DeleteAlias" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DeleteAliasResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newDeleteAliasResponse :: DeleteAliasResponse Source #

Create a value of DeleteAliasResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

UpdateAlias

data UpdateAlias Source #

See: newUpdateAlias smart constructor.

Constructors

UpdateAlias' Text Text

Instances

Instances details

Eq UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods (==) :: UpdateAlias -> UpdateAlias -> Bool # (/=) :: UpdateAlias -> UpdateAlias -> Bool #
Read UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods readsPrec :: Int -> ReadS UpdateAlias # readList :: ReadS [UpdateAlias] # readPrec :: ReadPrec UpdateAlias # readListPrec :: ReadPrec [UpdateAlias] #
Show UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods showsPrec :: Int -> UpdateAlias -> ShowS # show :: UpdateAlias -> String # showList :: [UpdateAlias] -> ShowS #
Generic UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Associated Types type Rep UpdateAlias :: Type -> Type # Methods from :: UpdateAlias -> Rep UpdateAlias x # to :: Rep UpdateAlias x -> UpdateAlias #
NFData UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods rnf :: UpdateAlias -> () #
Hashable UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods hashWithSalt :: Int -> UpdateAlias -> Int # hash :: UpdateAlias -> Int #
ToJSON UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods toJSON :: UpdateAlias -> Value # toEncoding :: UpdateAlias -> Encoding # toJSONList :: [UpdateAlias] -> Value # toEncodingList :: [UpdateAlias] -> Encoding #
AWSRequest UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Associated Types type AWSResponse UpdateAlias # Methods request :: UpdateAlias -> Request UpdateAlias # response :: MonadResource m => Logger -> Service -> Proxy UpdateAlias -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse UpdateAlias))) #
ToHeaders UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods toHeaders :: UpdateAlias -> [Header] #
ToPath UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods toPath :: UpdateAlias -> ByteString #
ToQuery UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods toQuery :: UpdateAlias -> QueryString #
type Rep UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias type Rep UpdateAlias = D1 ('MetaData "UpdateAlias" "Amazonka.KMS.UpdateAlias" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UpdateAlias'" 'PrefixI 'True) (S1 ('MetaSel ('Just "aliasName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "targetKeyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse UpdateAlias Source #
Instance details Defined in Amazonka.KMS.UpdateAlias type AWSResponse UpdateAlias = UpdateAliasResponse

newUpdateAlias Source #

Arguments

:: Text	`$sel:aliasName:UpdateAlias'`
-> Text	`$sel:targetKeyId:UpdateAlias'`
-> UpdateAlias

Create a value of UpdateAlias with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:aliasName:UpdateAlias', updateAlias_aliasName - Identifies the alias that is changing its KMS key. This value must begin with alias/ followed by the alias name, such as alias/ExampleAlias. You cannot use UpdateAlias to change the alias name.

$sel:targetKeyId:UpdateAlias', updateAlias_targetKeyId - Identifies the customer managed key to associate with the alias. You don't have permission to associate an alias with an Amazon Web Services managed key.

The KMS key must be in the same Amazon Web Services account and Region as the alias. Also, the new target KMS key must be the same type as the current target KMS key (both symmetric or both asymmetric) and they must have the same key usage.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

To verify that the alias is mapped to the correct KMS key, use ListAliases.

data UpdateAliasResponse Source #

See: newUpdateAliasResponse smart constructor.

Constructors

UpdateAliasResponse'

Instances

Instances details

Eq UpdateAliasResponse Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods (==) :: UpdateAliasResponse -> UpdateAliasResponse -> Bool # (/=) :: UpdateAliasResponse -> UpdateAliasResponse -> Bool #
Read UpdateAliasResponse Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods readsPrec :: Int -> ReadS UpdateAliasResponse # readList :: ReadS [UpdateAliasResponse] # readPrec :: ReadPrec UpdateAliasResponse # readListPrec :: ReadPrec [UpdateAliasResponse] #
Show UpdateAliasResponse Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods showsPrec :: Int -> UpdateAliasResponse -> ShowS # show :: UpdateAliasResponse -> String # showList :: [UpdateAliasResponse] -> ShowS #
Generic UpdateAliasResponse Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Associated Types type Rep UpdateAliasResponse :: Type -> Type # Methods from :: UpdateAliasResponse -> Rep UpdateAliasResponse x # to :: Rep UpdateAliasResponse x -> UpdateAliasResponse #
NFData UpdateAliasResponse Source #
Instance details Defined in Amazonka.KMS.UpdateAlias Methods rnf :: UpdateAliasResponse -> () #
type Rep UpdateAliasResponse Source #
Instance details Defined in Amazonka.KMS.UpdateAlias type Rep UpdateAliasResponse = D1 ('MetaData "UpdateAliasResponse" "Amazonka.KMS.UpdateAlias" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UpdateAliasResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newUpdateAliasResponse :: UpdateAliasResponse Source #

Create a value of UpdateAliasResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

DescribeKey

data DescribeKey Source #

See: newDescribeKey smart constructor.

Constructors

DescribeKey' (Maybe [Text]) Text

Instances

Instances details

Eq DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods (==) :: DescribeKey -> DescribeKey -> Bool # (/=) :: DescribeKey -> DescribeKey -> Bool #
Read DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods readsPrec :: Int -> ReadS DescribeKey # readList :: ReadS [DescribeKey] # readPrec :: ReadPrec DescribeKey # readListPrec :: ReadPrec [DescribeKey] #
Show DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods showsPrec :: Int -> DescribeKey -> ShowS # show :: DescribeKey -> String # showList :: [DescribeKey] -> ShowS #
Generic DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Associated Types type Rep DescribeKey :: Type -> Type # Methods from :: DescribeKey -> Rep DescribeKey x # to :: Rep DescribeKey x -> DescribeKey #
NFData DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods rnf :: DescribeKey -> () #
Hashable DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods hashWithSalt :: Int -> DescribeKey -> Int # hash :: DescribeKey -> Int #
ToJSON DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods toJSON :: DescribeKey -> Value # toEncoding :: DescribeKey -> Encoding # toJSONList :: [DescribeKey] -> Value # toEncodingList :: [DescribeKey] -> Encoding #
AWSRequest DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Associated Types type AWSResponse DescribeKey # Methods request :: DescribeKey -> Request DescribeKey # response :: MonadResource m => Logger -> Service -> Proxy DescribeKey -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DescribeKey))) #
ToHeaders DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods toHeaders :: DescribeKey -> [Header] #
ToPath DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods toPath :: DescribeKey -> ByteString #
ToQuery DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods toQuery :: DescribeKey -> QueryString #
type Rep DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey type Rep DescribeKey = D1 ('MetaData "DescribeKey" "Amazonka.KMS.DescribeKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DescribeKey'" 'PrefixI 'True) (S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :*: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse DescribeKey Source #
Instance details Defined in Amazonka.KMS.DescribeKey type AWSResponse DescribeKey = DescribeKeyResponse

newDescribeKey Source #

Arguments

:: Text	`$sel:keyId:DescribeKey'`
-> DescribeKey

Create a value of DescribeKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:grantTokens:DescribeKey', describeKey_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:keyId:DescribeKey', describeKey_keyId - Describes the specified KMS key.

If you specify a predefined Amazon Web Services alias (an Amazon Web Services alias with no key ID), KMS associates the alias with an Amazon Web Services managed key and returns its KeyId and Arn in the response.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

data DescribeKeyResponse Source #

See: newDescribeKeyResponse smart constructor.

Constructors

DescribeKeyResponse' (Maybe KeyMetadata) Int

Instances

Instances details

Eq DescribeKeyResponse Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods (==) :: DescribeKeyResponse -> DescribeKeyResponse -> Bool # (/=) :: DescribeKeyResponse -> DescribeKeyResponse -> Bool #
Read DescribeKeyResponse Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods readsPrec :: Int -> ReadS DescribeKeyResponse # readList :: ReadS [DescribeKeyResponse] # readPrec :: ReadPrec DescribeKeyResponse # readListPrec :: ReadPrec [DescribeKeyResponse] #
Show DescribeKeyResponse Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods showsPrec :: Int -> DescribeKeyResponse -> ShowS # show :: DescribeKeyResponse -> String # showList :: [DescribeKeyResponse] -> ShowS #
Generic DescribeKeyResponse Source #
Instance details Defined in Amazonka.KMS.DescribeKey Associated Types type Rep DescribeKeyResponse :: Type -> Type # Methods from :: DescribeKeyResponse -> Rep DescribeKeyResponse x # to :: Rep DescribeKeyResponse x -> DescribeKeyResponse #
NFData DescribeKeyResponse Source #
Instance details Defined in Amazonka.KMS.DescribeKey Methods rnf :: DescribeKeyResponse -> () #
type Rep DescribeKeyResponse Source #
Instance details Defined in Amazonka.KMS.DescribeKey type Rep DescribeKeyResponse = D1 ('MetaData "DescribeKeyResponse" "Amazonka.KMS.DescribeKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DescribeKeyResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyMetadata") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyMetadata)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newDescribeKeyResponse Source #

Arguments

:: Int	`$sel:httpStatus:DescribeKeyResponse'`
-> DescribeKeyResponse

Create a value of DescribeKeyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyMetadata:DescribeKeyResponse', describeKeyResponse_keyMetadata - Metadata associated with the key.

$sel:httpStatus:DescribeKeyResponse', describeKeyResponse_httpStatus - The response's http status code.

DescribeCustomKeyStores

data DescribeCustomKeyStores Source #

See: newDescribeCustomKeyStores smart constructor.

Constructors

DescribeCustomKeyStores' (Maybe Text) (Maybe Text) (Maybe Natural) (Maybe Text)

Instances

Instances details

Eq DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods (==) :: DescribeCustomKeyStores -> DescribeCustomKeyStores -> Bool # (/=) :: DescribeCustomKeyStores -> DescribeCustomKeyStores -> Bool #
Read DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods readsPrec :: Int -> ReadS DescribeCustomKeyStores # readList :: ReadS [DescribeCustomKeyStores] # readPrec :: ReadPrec DescribeCustomKeyStores # readListPrec :: ReadPrec [DescribeCustomKeyStores] #
Show DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods showsPrec :: Int -> DescribeCustomKeyStores -> ShowS # show :: DescribeCustomKeyStores -> String # showList :: [DescribeCustomKeyStores] -> ShowS #
Generic DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Associated Types type Rep DescribeCustomKeyStores :: Type -> Type # Methods from :: DescribeCustomKeyStores -> Rep DescribeCustomKeyStores x # to :: Rep DescribeCustomKeyStores x -> DescribeCustomKeyStores #
NFData DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods rnf :: DescribeCustomKeyStores -> () #
Hashable DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods hashWithSalt :: Int -> DescribeCustomKeyStores -> Int # hash :: DescribeCustomKeyStores -> Int #
ToJSON DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods toJSON :: DescribeCustomKeyStores -> Value # toEncoding :: DescribeCustomKeyStores -> Encoding # toJSONList :: [DescribeCustomKeyStores] -> Value # toEncodingList :: [DescribeCustomKeyStores] -> Encoding #
AWSRequest DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Associated Types type AWSResponse DescribeCustomKeyStores # Methods request :: DescribeCustomKeyStores -> Request DescribeCustomKeyStores # response :: MonadResource m => Logger -> Service -> Proxy DescribeCustomKeyStores -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DescribeCustomKeyStores))) #
ToHeaders DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods toHeaders :: DescribeCustomKeyStores -> [Header] #
ToPath DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods toPath :: DescribeCustomKeyStores -> ByteString #
ToQuery DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods toQuery :: DescribeCustomKeyStores -> QueryString #
type Rep DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores type Rep DescribeCustomKeyStores = D1 ('MetaData "DescribeCustomKeyStores" "Amazonka.KMS.DescribeCustomKeyStores" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DescribeCustomKeyStores'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "customKeyStoreName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "marker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "limit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :*: S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))
type AWSResponse DescribeCustomKeyStores Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores type AWSResponse DescribeCustomKeyStores = DescribeCustomKeyStoresResponse

newDescribeCustomKeyStores :: DescribeCustomKeyStores Source #

Create a value of DescribeCustomKeyStores with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:customKeyStoreName:DescribeCustomKeyStores', describeCustomKeyStores_customKeyStoreName - Gets only information about the specified custom key store. Enter the friendly name of the custom key store.

By default, this operation gets information about all custom key stores in the account and Region. To limit the output to a particular custom key store, you can use either the CustomKeyStoreId or CustomKeyStoreName parameter, but not both.

$sel:marker:DescribeCustomKeyStores', describeCustomKeyStores_marker - Use this parameter in a subsequent request after you receive a response with truncated results. Set it to the value of NextMarker from the truncated response you just received.

$sel:limit:DescribeCustomKeyStores', describeCustomKeyStores_limit - Use this parameter to specify the maximum number of items to return. When this value is present, KMS does not return more than the specified number of items, but it might return fewer.

$sel:customKeyStoreId:DescribeCustomKeyStores', describeCustomKeyStores_customKeyStoreId - Gets only information about the specified custom key store. Enter the key store ID.

By default, this operation gets information about all custom key stores in the account and Region. To limit the output to a particular custom key store, you can use either the CustomKeyStoreId or CustomKeyStoreName parameter, but not both.

data DescribeCustomKeyStoresResponse Source #

See: newDescribeCustomKeyStoresResponse smart constructor.

Constructors

DescribeCustomKeyStoresResponse' (Maybe Bool) (Maybe Text) (Maybe [CustomKeyStoresListEntry]) Int

Instances

Instances details

Eq DescribeCustomKeyStoresResponse Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods (==) :: DescribeCustomKeyStoresResponse -> DescribeCustomKeyStoresResponse -> Bool # (/=) :: DescribeCustomKeyStoresResponse -> DescribeCustomKeyStoresResponse -> Bool #
Read DescribeCustomKeyStoresResponse Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods readsPrec :: Int -> ReadS DescribeCustomKeyStoresResponse # readList :: ReadS [DescribeCustomKeyStoresResponse] # readPrec :: ReadPrec DescribeCustomKeyStoresResponse # readListPrec :: ReadPrec [DescribeCustomKeyStoresResponse] #
Show DescribeCustomKeyStoresResponse Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods showsPrec :: Int -> DescribeCustomKeyStoresResponse -> ShowS # show :: DescribeCustomKeyStoresResponse -> String # showList :: [DescribeCustomKeyStoresResponse] -> ShowS #
Generic DescribeCustomKeyStoresResponse Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Associated Types type Rep DescribeCustomKeyStoresResponse :: Type -> Type # Methods from :: DescribeCustomKeyStoresResponse -> Rep DescribeCustomKeyStoresResponse x # to :: Rep DescribeCustomKeyStoresResponse x -> DescribeCustomKeyStoresResponse #
NFData DescribeCustomKeyStoresResponse Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores Methods rnf :: DescribeCustomKeyStoresResponse -> () #
type Rep DescribeCustomKeyStoresResponse Source #
Instance details Defined in Amazonka.KMS.DescribeCustomKeyStores type Rep DescribeCustomKeyStoresResponse = D1 ('MetaData "DescribeCustomKeyStoresResponse" "Amazonka.KMS.DescribeCustomKeyStores" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DescribeCustomKeyStoresResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "customKeyStores") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [CustomKeyStoresListEntry])) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newDescribeCustomKeyStoresResponse Source #

Arguments

:: Int	`$sel:httpStatus:DescribeCustomKeyStoresResponse'`
-> DescribeCustomKeyStoresResponse

Create a value of DescribeCustomKeyStoresResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:truncated:DescribeCustomKeyStoresResponse', describeCustomKeyStoresResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:nextMarker:DescribeCustomKeyStoresResponse', describeCustomKeyStoresResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

$sel:customKeyStores:DescribeCustomKeyStoresResponse', describeCustomKeyStoresResponse_customKeyStores - Contains metadata about each custom key store.

$sel:httpStatus:DescribeCustomKeyStoresResponse', describeCustomKeyStoresResponse_httpStatus - The response's http status code.

CancelKeyDeletion

data CancelKeyDeletion Source #

See: newCancelKeyDeletion smart constructor.

Constructors

CancelKeyDeletion' Text

Instances

Instances details

Eq CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods (==) :: CancelKeyDeletion -> CancelKeyDeletion -> Bool # (/=) :: CancelKeyDeletion -> CancelKeyDeletion -> Bool #
Read CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods readsPrec :: Int -> ReadS CancelKeyDeletion # readList :: ReadS [CancelKeyDeletion] # readPrec :: ReadPrec CancelKeyDeletion # readListPrec :: ReadPrec [CancelKeyDeletion] #
Show CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods showsPrec :: Int -> CancelKeyDeletion -> ShowS # show :: CancelKeyDeletion -> String # showList :: [CancelKeyDeletion] -> ShowS #
Generic CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Associated Types type Rep CancelKeyDeletion :: Type -> Type # Methods from :: CancelKeyDeletion -> Rep CancelKeyDeletion x # to :: Rep CancelKeyDeletion x -> CancelKeyDeletion #
NFData CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods rnf :: CancelKeyDeletion -> () #
Hashable CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods hashWithSalt :: Int -> CancelKeyDeletion -> Int # hash :: CancelKeyDeletion -> Int #
ToJSON CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods toJSON :: CancelKeyDeletion -> Value # toEncoding :: CancelKeyDeletion -> Encoding # toJSONList :: [CancelKeyDeletion] -> Value # toEncodingList :: [CancelKeyDeletion] -> Encoding #
AWSRequest CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Associated Types type AWSResponse CancelKeyDeletion # Methods request :: CancelKeyDeletion -> Request CancelKeyDeletion # response :: MonadResource m => Logger -> Service -> Proxy CancelKeyDeletion -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse CancelKeyDeletion))) #
ToHeaders CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods toHeaders :: CancelKeyDeletion -> [Header] #
ToPath CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods toPath :: CancelKeyDeletion -> ByteString #
ToQuery CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods toQuery :: CancelKeyDeletion -> QueryString #
type Rep CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion type Rep CancelKeyDeletion = D1 ('MetaData "CancelKeyDeletion" "Amazonka.KMS.CancelKeyDeletion" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CancelKeyDeletion'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse CancelKeyDeletion Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion type AWSResponse CancelKeyDeletion = CancelKeyDeletionResponse

newCancelKeyDeletion Source #

Arguments

:: Text	`$sel:keyId:CancelKeyDeletion'`
-> CancelKeyDeletion

Create a value of CancelKeyDeletion with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:CancelKeyDeletion', cancelKeyDeletion_keyId - Identifies the KMS key whose deletion is being canceled.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data CancelKeyDeletionResponse Source #

See: newCancelKeyDeletionResponse smart constructor.

Constructors

CancelKeyDeletionResponse' (Maybe Text) Int

Instances

Instances details

Eq CancelKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods (==) :: CancelKeyDeletionResponse -> CancelKeyDeletionResponse -> Bool # (/=) :: CancelKeyDeletionResponse -> CancelKeyDeletionResponse -> Bool #
Read CancelKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods readsPrec :: Int -> ReadS CancelKeyDeletionResponse # readList :: ReadS [CancelKeyDeletionResponse] # readPrec :: ReadPrec CancelKeyDeletionResponse # readListPrec :: ReadPrec [CancelKeyDeletionResponse] #
Show CancelKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods showsPrec :: Int -> CancelKeyDeletionResponse -> ShowS # show :: CancelKeyDeletionResponse -> String # showList :: [CancelKeyDeletionResponse] -> ShowS #
Generic CancelKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Associated Types type Rep CancelKeyDeletionResponse :: Type -> Type # Methods from :: CancelKeyDeletionResponse -> Rep CancelKeyDeletionResponse x # to :: Rep CancelKeyDeletionResponse x -> CancelKeyDeletionResponse #
NFData CancelKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion Methods rnf :: CancelKeyDeletionResponse -> () #
type Rep CancelKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.CancelKeyDeletion type Rep CancelKeyDeletionResponse = D1 ('MetaData "CancelKeyDeletionResponse" "Amazonka.KMS.CancelKeyDeletion" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CancelKeyDeletionResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newCancelKeyDeletionResponse Source #

Arguments

:: Int	`$sel:httpStatus:CancelKeyDeletionResponse'`
-> CancelKeyDeletionResponse

Create a value of CancelKeyDeletionResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:CancelKeyDeletion', cancelKeyDeletionResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key whose deletion is canceled.

$sel:httpStatus:CancelKeyDeletionResponse', cancelKeyDeletionResponse_httpStatus - The response's http status code.

Decrypt

data Decrypt Source #

See: newDecrypt smart constructor.

Constructors

Decrypt' (Maybe Text) (Maybe (HashMap Text Text)) (Maybe [Text]) (Maybe EncryptionAlgorithmSpec) Base64

Instances

Instances details

Eq Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods (==) :: Decrypt -> Decrypt -> Bool # (/=) :: Decrypt -> Decrypt -> Bool #
Read Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods readsPrec :: Int -> ReadS Decrypt # readList :: ReadS [Decrypt] # readPrec :: ReadPrec Decrypt # readListPrec :: ReadPrec [Decrypt] #
Show Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods showsPrec :: Int -> Decrypt -> ShowS # show :: Decrypt -> String # showList :: [Decrypt] -> ShowS #
Generic Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Associated Types type Rep Decrypt :: Type -> Type # Methods from :: Decrypt -> Rep Decrypt x # to :: Rep Decrypt x -> Decrypt #
NFData Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods rnf :: Decrypt -> () #
Hashable Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods hashWithSalt :: Int -> Decrypt -> Int # hash :: Decrypt -> Int #
ToJSON Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods toJSON :: Decrypt -> Value # toEncoding :: Decrypt -> Encoding # toJSONList :: [Decrypt] -> Value # toEncodingList :: [Decrypt] -> Encoding #
AWSRequest Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Associated Types type AWSResponse Decrypt # Methods request :: Decrypt -> Request Decrypt # response :: MonadResource m => Logger -> Service -> Proxy Decrypt -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse Decrypt))) #
ToHeaders Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods toHeaders :: Decrypt -> [Header] #
ToPath Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods toPath :: Decrypt -> ByteString #
ToQuery Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods toQuery :: Decrypt -> QueryString #
type Rep Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt type Rep Decrypt = D1 ('MetaData "Decrypt" "Amazonka.KMS.Decrypt" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "Decrypt'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "encryptionContext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text)))) :: (S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :: (S1 ('MetaSel ('Just "encryptionAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EncryptionAlgorithmSpec)) :: S1 ('MetaSel ('Just "ciphertextBlob") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Base64)))))
type AWSResponse Decrypt Source #
Instance details Defined in Amazonka.KMS.Decrypt type AWSResponse Decrypt = DecryptResponse

newDecrypt Source #

Arguments

:: ByteString	`$sel:ciphertextBlob:Decrypt'`
-> Decrypt

Create a value of Decrypt with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:Decrypt', decrypt_keyId - Specifies the KMS key that KMS uses to decrypt the ciphertext. Enter a key ID of the KMS key that was used to encrypt the ciphertext.

This parameter is required only when the ciphertext was encrypted under an asymmetric KMS key. If you used a symmetric KMS key, KMS can get the KMS key from metadata that it adds to the symmetric ciphertext blob. However, it is always recommended as a best practice. This practice ensures that you use the KMS key that you intend.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

$sel:encryptionContext:Decrypt', decrypt_encryptionContext - Specifies the encryption context to use when decrypting the data. An encryption context is valid only for cryptographic operations with a symmetric KMS key. The standard asymmetric encryption algorithms that KMS uses do not support an encryption context.

An encryption context is a collection of non-secret key-value pairs that represents additional authenticated data. When you use an encryption context to encrypt data, you must specify the same (an exact case-sensitive match) encryption context to decrypt the data. An encryption context is optional when encrypting with a symmetric KMS key, but it is highly recommended.

For more information, see Encryption Context in the Key Management Service Developer Guide.

$sel:grantTokens:Decrypt', decrypt_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:encryptionAlgorithm:Decrypt', decrypt_encryptionAlgorithm - Specifies the encryption algorithm that will be used to decrypt the ciphertext. Specify the same algorithm that was used to encrypt the data. If you specify a different algorithm, the Decrypt operation fails.

This parameter is required only when the ciphertext was encrypted under an asymmetric KMS key. The default value, SYMMETRIC_DEFAULT, represents the only supported algorithm that is valid for symmetric KMS keys.

$sel:ciphertextBlob:Decrypt', decrypt_ciphertextBlob - Ciphertext to be decrypted. The blob includes metadata.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

data DecryptResponse Source #

See: newDecryptResponse smart constructor.

Constructors

DecryptResponse' (Maybe Text) (Maybe (Sensitive Base64)) (Maybe EncryptionAlgorithmSpec) Int

Instances

Instances details

Eq DecryptResponse Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods (==) :: DecryptResponse -> DecryptResponse -> Bool # (/=) :: DecryptResponse -> DecryptResponse -> Bool #
Show DecryptResponse Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods showsPrec :: Int -> DecryptResponse -> ShowS # show :: DecryptResponse -> String # showList :: [DecryptResponse] -> ShowS #
Generic DecryptResponse Source #
Instance details Defined in Amazonka.KMS.Decrypt Associated Types type Rep DecryptResponse :: Type -> Type # Methods from :: DecryptResponse -> Rep DecryptResponse x # to :: Rep DecryptResponse x -> DecryptResponse #
NFData DecryptResponse Source #
Instance details Defined in Amazonka.KMS.Decrypt Methods rnf :: DecryptResponse -> () #
type Rep DecryptResponse Source #
Instance details Defined in Amazonka.KMS.Decrypt type Rep DecryptResponse = D1 ('MetaData "DecryptResponse" "Amazonka.KMS.Decrypt" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DecryptResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "plaintext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (Sensitive Base64)))) :: (S1 ('MetaSel ('Just "encryptionAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EncryptionAlgorithmSpec)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newDecryptResponse Source #

Arguments

:: Int	`$sel:httpStatus:DecryptResponse'`
-> DecryptResponse

Create a value of DecryptResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:Decrypt', decryptResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key that was used to decrypt the ciphertext.

$sel:plaintext:DecryptResponse', decryptResponse_plaintext - Decrypted plaintext data. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:encryptionAlgorithm:Decrypt', decryptResponse_encryptionAlgorithm - The encryption algorithm that was used to decrypt the ciphertext.

$sel:httpStatus:DecryptResponse', decryptResponse_httpStatus - The response's http status code.

GenerateDataKeyPairWithoutPlaintext

data GenerateDataKeyPairWithoutPlaintext Source #

See: newGenerateDataKeyPairWithoutPlaintext smart constructor.

Constructors

GenerateDataKeyPairWithoutPlaintext' (Maybe (HashMap Text Text)) (Maybe [Text]) Text DataKeyPairSpec

Instances

Instances details

Eq GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods (==) :: GenerateDataKeyPairWithoutPlaintext -> GenerateDataKeyPairWithoutPlaintext -> Bool # (/=) :: GenerateDataKeyPairWithoutPlaintext -> GenerateDataKeyPairWithoutPlaintext -> Bool #
Read GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods readsPrec :: Int -> ReadS GenerateDataKeyPairWithoutPlaintext # readList :: ReadS [GenerateDataKeyPairWithoutPlaintext] # readPrec :: ReadPrec GenerateDataKeyPairWithoutPlaintext # readListPrec :: ReadPrec [GenerateDataKeyPairWithoutPlaintext] #
Show GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods showsPrec :: Int -> GenerateDataKeyPairWithoutPlaintext -> ShowS # show :: GenerateDataKeyPairWithoutPlaintext -> String # showList :: [GenerateDataKeyPairWithoutPlaintext] -> ShowS #
Generic GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Associated Types type Rep GenerateDataKeyPairWithoutPlaintext :: Type -> Type # Methods from :: GenerateDataKeyPairWithoutPlaintext -> Rep GenerateDataKeyPairWithoutPlaintext x # to :: Rep GenerateDataKeyPairWithoutPlaintext x -> GenerateDataKeyPairWithoutPlaintext #
NFData GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods rnf :: GenerateDataKeyPairWithoutPlaintext -> () #
Hashable GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods hashWithSalt :: Int -> GenerateDataKeyPairWithoutPlaintext -> Int # hash :: GenerateDataKeyPairWithoutPlaintext -> Int #
ToJSON GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods toJSON :: GenerateDataKeyPairWithoutPlaintext -> Value # toEncoding :: GenerateDataKeyPairWithoutPlaintext -> Encoding # toJSONList :: [GenerateDataKeyPairWithoutPlaintext] -> Value # toEncodingList :: [GenerateDataKeyPairWithoutPlaintext] -> Encoding #
AWSRequest GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Associated Types type AWSResponse GenerateDataKeyPairWithoutPlaintext # Methods request :: GenerateDataKeyPairWithoutPlaintext -> Request GenerateDataKeyPairWithoutPlaintext # response :: MonadResource m => Logger -> Service -> Proxy GenerateDataKeyPairWithoutPlaintext -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GenerateDataKeyPairWithoutPlaintext))) #
ToHeaders GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods toHeaders :: GenerateDataKeyPairWithoutPlaintext -> [Header] #
ToPath GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods toPath :: GenerateDataKeyPairWithoutPlaintext -> ByteString #
ToQuery GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods toQuery :: GenerateDataKeyPairWithoutPlaintext -> QueryString #
type Rep GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext type Rep GenerateDataKeyPairWithoutPlaintext = D1 ('MetaData "GenerateDataKeyPairWithoutPlaintext" "Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateDataKeyPairWithoutPlaintext'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "encryptionContext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text))) :: S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text]))) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "keyPairSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 DataKeyPairSpec))))
type AWSResponse GenerateDataKeyPairWithoutPlaintext Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext type AWSResponse GenerateDataKeyPairWithoutPlaintext = GenerateDataKeyPairWithoutPlaintextResponse

newGenerateDataKeyPairWithoutPlaintext Source #

Arguments

:: Text	`$sel:keyId:GenerateDataKeyPairWithoutPlaintext'`
-> DataKeyPairSpec	`$sel:keyPairSpec:GenerateDataKeyPairWithoutPlaintext'`
-> GenerateDataKeyPairWithoutPlaintext

Create a value of GenerateDataKeyPairWithoutPlaintext with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:encryptionContext:GenerateDataKeyPairWithoutPlaintext', generateDataKeyPairWithoutPlaintext_encryptionContext - Specifies the encryption context that will be used when encrypting the private key in the data key pair.

An encryption context is a collection of non-secret key-value pairs that represents additional authenticated data. When you use an encryption context to encrypt data, you must specify the same (an exact case-sensitive match) encryption context to decrypt the data. An encryption context is optional when encrypting with a symmetric KMS key, but it is highly recommended.

For more information, see Encryption Context in the Key Management Service Developer Guide.

$sel:grantTokens:GenerateDataKeyPairWithoutPlaintext', generateDataKeyPairWithoutPlaintext_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:keyId:GenerateDataKeyPairWithoutPlaintext', generateDataKeyPairWithoutPlaintext_keyId - Specifies the KMS key that encrypts the private key in the data key pair. You must specify a symmetric KMS key. You cannot use an asymmetric KMS key or a KMS key in a custom key store. To get the type and origin of your KMS key, use the DescribeKey operation.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

$sel:keyPairSpec:GenerateDataKeyPairWithoutPlaintext', generateDataKeyPairWithoutPlaintext_keyPairSpec - Determines the type of data key pair that is generated.

The KMS rule that restricts the use of asymmetric RSA KMS keys to encrypt and decrypt or to sign and verify (but not both), and the rule that permits you to use ECC KMS keys only to sign and verify, are not effective on data key pairs, which are used outside of KMS.

data GenerateDataKeyPairWithoutPlaintextResponse Source #

See: newGenerateDataKeyPairWithoutPlaintextResponse smart constructor.

Constructors

GenerateDataKeyPairWithoutPlaintextResponse' (Maybe Text) (Maybe Base64) (Maybe DataKeyPairSpec) (Maybe Base64) Int

Instances

Instances details

Eq GenerateDataKeyPairWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods (==) :: GenerateDataKeyPairWithoutPlaintextResponse -> GenerateDataKeyPairWithoutPlaintextResponse -> Bool # (/=) :: GenerateDataKeyPairWithoutPlaintextResponse -> GenerateDataKeyPairWithoutPlaintextResponse -> Bool #
Read GenerateDataKeyPairWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods readsPrec :: Int -> ReadS GenerateDataKeyPairWithoutPlaintextResponse # readList :: ReadS [GenerateDataKeyPairWithoutPlaintextResponse] # readPrec :: ReadPrec GenerateDataKeyPairWithoutPlaintextResponse # readListPrec :: ReadPrec [GenerateDataKeyPairWithoutPlaintextResponse] #
Show GenerateDataKeyPairWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods showsPrec :: Int -> GenerateDataKeyPairWithoutPlaintextResponse -> ShowS # show :: GenerateDataKeyPairWithoutPlaintextResponse -> String # showList :: [GenerateDataKeyPairWithoutPlaintextResponse] -> ShowS #
Generic GenerateDataKeyPairWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Associated Types type Rep GenerateDataKeyPairWithoutPlaintextResponse :: Type -> Type # Methods from :: GenerateDataKeyPairWithoutPlaintextResponse -> Rep GenerateDataKeyPairWithoutPlaintextResponse x # to :: Rep GenerateDataKeyPairWithoutPlaintextResponse x -> GenerateDataKeyPairWithoutPlaintextResponse #
NFData GenerateDataKeyPairWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext Methods rnf :: GenerateDataKeyPairWithoutPlaintextResponse -> () #
type Rep GenerateDataKeyPairWithoutPlaintextResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext type Rep GenerateDataKeyPairWithoutPlaintextResponse = D1 ('MetaData "GenerateDataKeyPairWithoutPlaintextResponse" "Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateDataKeyPairWithoutPlaintextResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "publicKey") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64))) :: (S1 ('MetaSel ('Just "keyPairSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe DataKeyPairSpec)) :: (S1 ('MetaSel ('Just "privateKeyCiphertextBlob") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64)) :: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))))

newGenerateDataKeyPairWithoutPlaintextResponse Source #

Arguments

:: Int	`$sel:httpStatus:GenerateDataKeyPairWithoutPlaintextResponse'`
-> GenerateDataKeyPairWithoutPlaintextResponse

Create a value of GenerateDataKeyPairWithoutPlaintextResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GenerateDataKeyPairWithoutPlaintext', generateDataKeyPairWithoutPlaintextResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key that encrypted the private key.

$sel:publicKey:GenerateDataKeyPairWithoutPlaintextResponse', generateDataKeyPairWithoutPlaintextResponse_publicKey - The public key (in plaintext).-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:keyPairSpec:GenerateDataKeyPairWithoutPlaintext', generateDataKeyPairWithoutPlaintextResponse_keyPairSpec - The type of data key pair that was generated.

$sel:privateKeyCiphertextBlob:GenerateDataKeyPairWithoutPlaintextResponse', generateDataKeyPairWithoutPlaintextResponse_privateKeyCiphertextBlob - The encrypted copy of the private key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:httpStatus:GenerateDataKeyPairWithoutPlaintextResponse', generateDataKeyPairWithoutPlaintextResponse_httpStatus - The response's http status code.

UpdateKeyDescription

data UpdateKeyDescription Source #

See: newUpdateKeyDescription smart constructor.

Constructors

UpdateKeyDescription' Text Text

Instances

Instances details

Eq UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods (==) :: UpdateKeyDescription -> UpdateKeyDescription -> Bool # (/=) :: UpdateKeyDescription -> UpdateKeyDescription -> Bool #
Read UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods readsPrec :: Int -> ReadS UpdateKeyDescription # readList :: ReadS [UpdateKeyDescription] # readPrec :: ReadPrec UpdateKeyDescription # readListPrec :: ReadPrec [UpdateKeyDescription] #
Show UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods showsPrec :: Int -> UpdateKeyDescription -> ShowS # show :: UpdateKeyDescription -> String # showList :: [UpdateKeyDescription] -> ShowS #
Generic UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Associated Types type Rep UpdateKeyDescription :: Type -> Type # Methods from :: UpdateKeyDescription -> Rep UpdateKeyDescription x # to :: Rep UpdateKeyDescription x -> UpdateKeyDescription #
NFData UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods rnf :: UpdateKeyDescription -> () #
Hashable UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods hashWithSalt :: Int -> UpdateKeyDescription -> Int # hash :: UpdateKeyDescription -> Int #
ToJSON UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods toJSON :: UpdateKeyDescription -> Value # toEncoding :: UpdateKeyDescription -> Encoding # toJSONList :: [UpdateKeyDescription] -> Value # toEncodingList :: [UpdateKeyDescription] -> Encoding #
AWSRequest UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Associated Types type AWSResponse UpdateKeyDescription # Methods request :: UpdateKeyDescription -> Request UpdateKeyDescription # response :: MonadResource m => Logger -> Service -> Proxy UpdateKeyDescription -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse UpdateKeyDescription))) #
ToHeaders UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods toHeaders :: UpdateKeyDescription -> [Header] #
ToPath UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods toPath :: UpdateKeyDescription -> ByteString #
ToQuery UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods toQuery :: UpdateKeyDescription -> QueryString #
type Rep UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription type Rep UpdateKeyDescription = D1 ('MetaData "UpdateKeyDescription" "Amazonka.KMS.UpdateKeyDescription" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UpdateKeyDescription'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "description") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse UpdateKeyDescription Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription type AWSResponse UpdateKeyDescription = UpdateKeyDescriptionResponse

newUpdateKeyDescription Source #

Arguments

:: Text	`$sel:keyId:UpdateKeyDescription'`
-> Text	`$sel:description:UpdateKeyDescription'`
-> UpdateKeyDescription

Create a value of UpdateKeyDescription with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:UpdateKeyDescription', updateKeyDescription_keyId - Updates the description of the specified KMS key.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:description:UpdateKeyDescription', updateKeyDescription_description - New description for the KMS key.

data UpdateKeyDescriptionResponse Source #

See: newUpdateKeyDescriptionResponse smart constructor.

Constructors

UpdateKeyDescriptionResponse'

Instances

Instances details

Eq UpdateKeyDescriptionResponse Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods (==) :: UpdateKeyDescriptionResponse -> UpdateKeyDescriptionResponse -> Bool # (/=) :: UpdateKeyDescriptionResponse -> UpdateKeyDescriptionResponse -> Bool #
Read UpdateKeyDescriptionResponse Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods readsPrec :: Int -> ReadS UpdateKeyDescriptionResponse # readList :: ReadS [UpdateKeyDescriptionResponse] # readPrec :: ReadPrec UpdateKeyDescriptionResponse # readListPrec :: ReadPrec [UpdateKeyDescriptionResponse] #
Show UpdateKeyDescriptionResponse Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods showsPrec :: Int -> UpdateKeyDescriptionResponse -> ShowS # show :: UpdateKeyDescriptionResponse -> String # showList :: [UpdateKeyDescriptionResponse] -> ShowS #
Generic UpdateKeyDescriptionResponse Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Associated Types type Rep UpdateKeyDescriptionResponse :: Type -> Type # Methods from :: UpdateKeyDescriptionResponse -> Rep UpdateKeyDescriptionResponse x # to :: Rep UpdateKeyDescriptionResponse x -> UpdateKeyDescriptionResponse #
NFData UpdateKeyDescriptionResponse Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription Methods rnf :: UpdateKeyDescriptionResponse -> () #
type Rep UpdateKeyDescriptionResponse Source #
Instance details Defined in Amazonka.KMS.UpdateKeyDescription type Rep UpdateKeyDescriptionResponse = D1 ('MetaData "UpdateKeyDescriptionResponse" "Amazonka.KMS.UpdateKeyDescription" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UpdateKeyDescriptionResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newUpdateKeyDescriptionResponse :: UpdateKeyDescriptionResponse Source #

Create a value of UpdateKeyDescriptionResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

ReEncrypt

data ReEncrypt Source #

See: newReEncrypt smart constructor.

Constructors

ReEncrypt' (Maybe (HashMap Text Text)) (Maybe Text) (Maybe (HashMap Text Text)) (Maybe [Text]) (Maybe EncryptionAlgorithmSpec) (Maybe EncryptionAlgorithmSpec) Base64 Text

Instances

Instances details

Eq ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods (==) :: ReEncrypt -> ReEncrypt -> Bool # (/=) :: ReEncrypt -> ReEncrypt -> Bool #
Read ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods readsPrec :: Int -> ReadS ReEncrypt # readList :: ReadS [ReEncrypt] # readPrec :: ReadPrec ReEncrypt # readListPrec :: ReadPrec [ReEncrypt] #
Show ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods showsPrec :: Int -> ReEncrypt -> ShowS # show :: ReEncrypt -> String # showList :: [ReEncrypt] -> ShowS #
Generic ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Associated Types type Rep ReEncrypt :: Type -> Type # Methods from :: ReEncrypt -> Rep ReEncrypt x # to :: Rep ReEncrypt x -> ReEncrypt #
NFData ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods rnf :: ReEncrypt -> () #
Hashable ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods hashWithSalt :: Int -> ReEncrypt -> Int # hash :: ReEncrypt -> Int #
ToJSON ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods toJSON :: ReEncrypt -> Value # toEncoding :: ReEncrypt -> Encoding # toJSONList :: [ReEncrypt] -> Value # toEncodingList :: [ReEncrypt] -> Encoding #
AWSRequest ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Associated Types type AWSResponse ReEncrypt # Methods request :: ReEncrypt -> Request ReEncrypt # response :: MonadResource m => Logger -> Service -> Proxy ReEncrypt -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ReEncrypt))) #
ToHeaders ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods toHeaders :: ReEncrypt -> [Header] #
ToPath ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods toPath :: ReEncrypt -> ByteString #
ToQuery ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods toQuery :: ReEncrypt -> QueryString #
type Rep ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt type Rep ReEncrypt = D1 ('MetaData "ReEncrypt" "Amazonka.KMS.ReEncrypt" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ReEncrypt'" 'PrefixI 'True) (((S1 ('MetaSel ('Just "destinationEncryptionContext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text))) :: S1 ('MetaSel ('Just "sourceKeyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "sourceEncryptionContext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text))) :: S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])))) :: ((S1 ('MetaSel ('Just "destinationEncryptionAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EncryptionAlgorithmSpec)) :: S1 ('MetaSel ('Just "sourceEncryptionAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EncryptionAlgorithmSpec))) :: (S1 ('MetaSel ('Just "ciphertextBlob") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Base64) :*: S1 ('MetaSel ('Just "destinationKeyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))
type AWSResponse ReEncrypt Source #
Instance details Defined in Amazonka.KMS.ReEncrypt type AWSResponse ReEncrypt = ReEncryptResponse

newReEncrypt Source #

Arguments

:: ByteString	`$sel:ciphertextBlob:ReEncrypt'`
-> Text	`$sel:destinationKeyId:ReEncrypt'`
-> ReEncrypt

Create a value of ReEncrypt with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:destinationEncryptionContext:ReEncrypt', reEncrypt_destinationEncryptionContext - Specifies that encryption context to use when the reencrypting the data.

A destination encryption context is valid only when the destination KMS key is a symmetric KMS key. The standard ciphertext format for asymmetric KMS keys does not include fields for metadata.

An encryption context is a collection of non-secret key-value pairs that represents additional authenticated data. When you use an encryption context to encrypt data, you must specify the same (an exact case-sensitive match) encryption context to decrypt the data. An encryption context is optional when encrypting with a symmetric KMS key, but it is highly recommended.

For more information, see Encryption Context in the Key Management Service Developer Guide.

$sel:sourceKeyId:ReEncrypt', reEncrypt_sourceKeyId - Specifies the KMS key that KMS will use to decrypt the ciphertext before it is re-encrypted. Enter a key ID of the KMS key that was used to encrypt the ciphertext.

This parameter is required only when the ciphertext was encrypted under an asymmetric KMS key. If you used a symmetric KMS key, KMS can get the KMS key from metadata that it adds to the symmetric ciphertext blob. However, it is always recommended as a best practice. This practice ensures that you use the KMS key that you intend.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

$sel:sourceEncryptionContext:ReEncrypt', reEncrypt_sourceEncryptionContext - Specifies the encryption context to use to decrypt the ciphertext. Enter the same encryption context that was used to encrypt the ciphertext.

An encryption context is a collection of non-secret key-value pairs that represents additional authenticated data. When you use an encryption context to encrypt data, you must specify the same (an exact case-sensitive match) encryption context to decrypt the data. An encryption context is optional when encrypting with a symmetric KMS key, but it is highly recommended.

For more information, see Encryption Context in the Key Management Service Developer Guide.

$sel:grantTokens:ReEncrypt', reEncrypt_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:destinationEncryptionAlgorithm:ReEncrypt', reEncrypt_destinationEncryptionAlgorithm - Specifies the encryption algorithm that KMS will use to reecrypt the data after it has decrypted it. The default value, SYMMETRIC_DEFAULT, represents the encryption algorithm used for symmetric KMS keys.

This parameter is required only when the destination KMS key is an asymmetric KMS key.

$sel:sourceEncryptionAlgorithm:ReEncrypt', reEncrypt_sourceEncryptionAlgorithm - Specifies the encryption algorithm that KMS will use to decrypt the ciphertext before it is reencrypted. The default value, SYMMETRIC_DEFAULT, represents the algorithm used for symmetric KMS keys.

Specify the same algorithm that was used to encrypt the ciphertext. If you specify a different algorithm, the decrypt attempt fails.

This parameter is required only when the ciphertext was encrypted under an asymmetric KMS key.

$sel:ciphertextBlob:ReEncrypt', reEncrypt_ciphertextBlob - Ciphertext of the data to reencrypt.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:destinationKeyId:ReEncrypt', reEncrypt_destinationKeyId - A unique identifier for the KMS key that is used to reencrypt the data. Specify a symmetric or asymmetric KMS key with a KeyUsage value of ENCRYPT_DECRYPT. To find the KeyUsage value of a KMS key, use the DescribeKey operation.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

data ReEncryptResponse Source #

See: newReEncryptResponse smart constructor.

Constructors

ReEncryptResponse' (Maybe Text) (Maybe Text) (Maybe EncryptionAlgorithmSpec) (Maybe EncryptionAlgorithmSpec) (Maybe Base64) Int

Instances

Instances details

Eq ReEncryptResponse Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods (==) :: ReEncryptResponse -> ReEncryptResponse -> Bool # (/=) :: ReEncryptResponse -> ReEncryptResponse -> Bool #
Read ReEncryptResponse Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods readsPrec :: Int -> ReadS ReEncryptResponse # readList :: ReadS [ReEncryptResponse] # readPrec :: ReadPrec ReEncryptResponse # readListPrec :: ReadPrec [ReEncryptResponse] #
Show ReEncryptResponse Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods showsPrec :: Int -> ReEncryptResponse -> ShowS # show :: ReEncryptResponse -> String # showList :: [ReEncryptResponse] -> ShowS #
Generic ReEncryptResponse Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Associated Types type Rep ReEncryptResponse :: Type -> Type # Methods from :: ReEncryptResponse -> Rep ReEncryptResponse x # to :: Rep ReEncryptResponse x -> ReEncryptResponse #
NFData ReEncryptResponse Source #
Instance details Defined in Amazonka.KMS.ReEncrypt Methods rnf :: ReEncryptResponse -> () #
type Rep ReEncryptResponse Source #
Instance details Defined in Amazonka.KMS.ReEncrypt type Rep ReEncryptResponse = D1 ('MetaData "ReEncryptResponse" "Amazonka.KMS.ReEncrypt" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ReEncryptResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "sourceKeyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "destinationEncryptionAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EncryptionAlgorithmSpec)))) :: (S1 ('MetaSel ('Just "sourceEncryptionAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EncryptionAlgorithmSpec)) :: (S1 ('MetaSel ('Just "ciphertextBlob") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))))

newReEncryptResponse Source #

Arguments

:: Int	`$sel:httpStatus:ReEncryptResponse'`
-> ReEncryptResponse

Create a value of ReEncryptResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:sourceKeyId:ReEncrypt', reEncryptResponse_sourceKeyId - Unique identifier of the KMS key used to originally encrypt the data.

$sel:keyId:ReEncryptResponse', reEncryptResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key that was used to reencrypt the data.

$sel:destinationEncryptionAlgorithm:ReEncrypt', reEncryptResponse_destinationEncryptionAlgorithm - The encryption algorithm that was used to reencrypt the data.

$sel:sourceEncryptionAlgorithm:ReEncrypt', reEncryptResponse_sourceEncryptionAlgorithm - The encryption algorithm that was used to decrypt the ciphertext before it was reencrypted.

$sel:ciphertextBlob:ReEncrypt', reEncryptResponse_ciphertextBlob - The reencrypted data. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:httpStatus:ReEncryptResponse', reEncryptResponse_httpStatus - The response's http status code.

TagResource

data TagResource Source #

See: newTagResource smart constructor.

Constructors

TagResource' Text [Tag]

Instances

Instances details

Eq TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods (==) :: TagResource -> TagResource -> Bool # (/=) :: TagResource -> TagResource -> Bool #
Read TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods readsPrec :: Int -> ReadS TagResource # readList :: ReadS [TagResource] # readPrec :: ReadPrec TagResource # readListPrec :: ReadPrec [TagResource] #
Show TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods showsPrec :: Int -> TagResource -> ShowS # show :: TagResource -> String # showList :: [TagResource] -> ShowS #
Generic TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Associated Types type Rep TagResource :: Type -> Type # Methods from :: TagResource -> Rep TagResource x # to :: Rep TagResource x -> TagResource #
NFData TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods rnf :: TagResource -> () #
Hashable TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods hashWithSalt :: Int -> TagResource -> Int # hash :: TagResource -> Int #
ToJSON TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods toJSON :: TagResource -> Value # toEncoding :: TagResource -> Encoding # toJSONList :: [TagResource] -> Value # toEncodingList :: [TagResource] -> Encoding #
AWSRequest TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Associated Types type AWSResponse TagResource # Methods request :: TagResource -> Request TagResource # response :: MonadResource m => Logger -> Service -> Proxy TagResource -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse TagResource))) #
ToHeaders TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods toHeaders :: TagResource -> [Header] #
ToPath TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods toPath :: TagResource -> ByteString #
ToQuery TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource Methods toQuery :: TagResource -> QueryString #
type Rep TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource type Rep TagResource = D1 ('MetaData "TagResource" "Amazonka.KMS.TagResource" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "TagResource'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "tags") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 [Tag])))
type AWSResponse TagResource Source #
Instance details Defined in Amazonka.KMS.TagResource type AWSResponse TagResource = TagResourceResponse

newTagResource Source #

Arguments

:: Text	`$sel:keyId:TagResource'`
-> TagResource

Create a value of TagResource with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:TagResource', tagResource_keyId - Identifies a customer managed key in the account and Region.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:tags:TagResource', tagResource_tags - One or more tags.

Each tag consists of a tag key and a tag value. The tag value can be an empty (null) string.

You cannot have more than one tag on a KMS key with the same tag key. If you specify an existing tag key with a different tag value, KMS replaces the current tag value with the specified one.

data TagResourceResponse Source #

See: newTagResourceResponse smart constructor.

Constructors

TagResourceResponse'

Instances

Instances details

Eq TagResourceResponse Source #
Instance details Defined in Amazonka.KMS.TagResource Methods (==) :: TagResourceResponse -> TagResourceResponse -> Bool # (/=) :: TagResourceResponse -> TagResourceResponse -> Bool #
Read TagResourceResponse Source #
Instance details Defined in Amazonka.KMS.TagResource Methods readsPrec :: Int -> ReadS TagResourceResponse # readList :: ReadS [TagResourceResponse] # readPrec :: ReadPrec TagResourceResponse # readListPrec :: ReadPrec [TagResourceResponse] #
Show TagResourceResponse Source #
Instance details Defined in Amazonka.KMS.TagResource Methods showsPrec :: Int -> TagResourceResponse -> ShowS # show :: TagResourceResponse -> String # showList :: [TagResourceResponse] -> ShowS #
Generic TagResourceResponse Source #
Instance details Defined in Amazonka.KMS.TagResource Associated Types type Rep TagResourceResponse :: Type -> Type # Methods from :: TagResourceResponse -> Rep TagResourceResponse x # to :: Rep TagResourceResponse x -> TagResourceResponse #
NFData TagResourceResponse Source #
Instance details Defined in Amazonka.KMS.TagResource Methods rnf :: TagResourceResponse -> () #
type Rep TagResourceResponse Source #
Instance details Defined in Amazonka.KMS.TagResource type Rep TagResourceResponse = D1 ('MetaData "TagResourceResponse" "Amazonka.KMS.TagResource" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "TagResourceResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newTagResourceResponse :: TagResourceResponse Source #

Create a value of TagResourceResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

ListKeyPolicies (Paginated)

data ListKeyPolicies Source #

See: newListKeyPolicies smart constructor.

Constructors

ListKeyPolicies' (Maybe Text) (Maybe Natural) Text

Instances

Instances details

Eq ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods (==) :: ListKeyPolicies -> ListKeyPolicies -> Bool # (/=) :: ListKeyPolicies -> ListKeyPolicies -> Bool #
Read ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods readsPrec :: Int -> ReadS ListKeyPolicies # readList :: ReadS [ListKeyPolicies] # readPrec :: ReadPrec ListKeyPolicies # readListPrec :: ReadPrec [ListKeyPolicies] #
Show ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods showsPrec :: Int -> ListKeyPolicies -> ShowS # show :: ListKeyPolicies -> String # showList :: [ListKeyPolicies] -> ShowS #
Generic ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Associated Types type Rep ListKeyPolicies :: Type -> Type # Methods from :: ListKeyPolicies -> Rep ListKeyPolicies x # to :: Rep ListKeyPolicies x -> ListKeyPolicies #
NFData ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods rnf :: ListKeyPolicies -> () #
Hashable ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods hashWithSalt :: Int -> ListKeyPolicies -> Int # hash :: ListKeyPolicies -> Int #
ToJSON ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods toJSON :: ListKeyPolicies -> Value # toEncoding :: ListKeyPolicies -> Encoding # toJSONList :: [ListKeyPolicies] -> Value # toEncodingList :: [ListKeyPolicies] -> Encoding #
AWSPager ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods page :: ListKeyPolicies -> AWSResponse ListKeyPolicies -> Maybe ListKeyPolicies #
AWSRequest ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Associated Types type AWSResponse ListKeyPolicies # Methods request :: ListKeyPolicies -> Request ListKeyPolicies # response :: MonadResource m => Logger -> Service -> Proxy ListKeyPolicies -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ListKeyPolicies))) #
ToHeaders ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods toHeaders :: ListKeyPolicies -> [Header] #
ToPath ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods toPath :: ListKeyPolicies -> ByteString #
ToQuery ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods toQuery :: ListKeyPolicies -> QueryString #
type Rep ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies type Rep ListKeyPolicies = D1 ('MetaData "ListKeyPolicies" "Amazonka.KMS.ListKeyPolicies" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListKeyPolicies'" 'PrefixI 'True) (S1 ('MetaSel ('Just "marker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "limit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))))
type AWSResponse ListKeyPolicies Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies type AWSResponse ListKeyPolicies = ListKeyPoliciesResponse

newListKeyPolicies Source #

Arguments

:: Text	`$sel:keyId:ListKeyPolicies'`
-> ListKeyPolicies

Create a value of ListKeyPolicies with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:marker:ListKeyPolicies', listKeyPolicies_marker - Use this parameter in a subsequent request after you receive a response with truncated results. Set it to the value of NextMarker from the truncated response you just received.

$sel:limit:ListKeyPolicies', listKeyPolicies_limit - Use this parameter to specify the maximum number of items to return. When this value is present, KMS does not return more than the specified number of items, but it might return fewer.

This value is optional. If you include a value, it must be between 1 and 1000, inclusive. If you do not include a value, it defaults to 100.

Only one policy can be attached to a key.

$sel:keyId:ListKeyPolicies', listKeyPolicies_keyId - Gets the names of key policies for the specified KMS key.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data ListKeyPoliciesResponse Source #

See: newListKeyPoliciesResponse smart constructor.

Constructors

ListKeyPoliciesResponse' (Maybe [Text]) (Maybe Bool) (Maybe Text) Int

Instances

Instances details

Eq ListKeyPoliciesResponse Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods (==) :: ListKeyPoliciesResponse -> ListKeyPoliciesResponse -> Bool # (/=) :: ListKeyPoliciesResponse -> ListKeyPoliciesResponse -> Bool #
Read ListKeyPoliciesResponse Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods readsPrec :: Int -> ReadS ListKeyPoliciesResponse # readList :: ReadS [ListKeyPoliciesResponse] # readPrec :: ReadPrec ListKeyPoliciesResponse # readListPrec :: ReadPrec [ListKeyPoliciesResponse] #
Show ListKeyPoliciesResponse Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods showsPrec :: Int -> ListKeyPoliciesResponse -> ShowS # show :: ListKeyPoliciesResponse -> String # showList :: [ListKeyPoliciesResponse] -> ShowS #
Generic ListKeyPoliciesResponse Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Associated Types type Rep ListKeyPoliciesResponse :: Type -> Type # Methods from :: ListKeyPoliciesResponse -> Rep ListKeyPoliciesResponse x # to :: Rep ListKeyPoliciesResponse x -> ListKeyPoliciesResponse #
NFData ListKeyPoliciesResponse Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies Methods rnf :: ListKeyPoliciesResponse -> () #
type Rep ListKeyPoliciesResponse Source #
Instance details Defined in Amazonka.KMS.ListKeyPolicies type Rep ListKeyPoliciesResponse = D1 ('MetaData "ListKeyPoliciesResponse" "Amazonka.KMS.ListKeyPolicies" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListKeyPoliciesResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "policyNames") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text])) :: S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool))) :: (S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newListKeyPoliciesResponse Source #

Arguments

:: Int	`$sel:httpStatus:ListKeyPoliciesResponse'`
-> ListKeyPoliciesResponse

Create a value of ListKeyPoliciesResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:policyNames:ListKeyPoliciesResponse', listKeyPoliciesResponse_policyNames - A list of key policy names. The only valid value is default.

$sel:truncated:ListKeyPoliciesResponse', listKeyPoliciesResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:nextMarker:ListKeyPoliciesResponse', listKeyPoliciesResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

$sel:httpStatus:ListKeyPoliciesResponse', listKeyPoliciesResponse_httpStatus - The response's http status code.

UntagResource

data UntagResource Source #

See: newUntagResource smart constructor.

Constructors

UntagResource' Text [Text]

Instances

Instances details

Eq UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods (==) :: UntagResource -> UntagResource -> Bool # (/=) :: UntagResource -> UntagResource -> Bool #
Read UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods readsPrec :: Int -> ReadS UntagResource # readList :: ReadS [UntagResource] # readPrec :: ReadPrec UntagResource # readListPrec :: ReadPrec [UntagResource] #
Show UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods showsPrec :: Int -> UntagResource -> ShowS # show :: UntagResource -> String # showList :: [UntagResource] -> ShowS #
Generic UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Associated Types type Rep UntagResource :: Type -> Type # Methods from :: UntagResource -> Rep UntagResource x # to :: Rep UntagResource x -> UntagResource #
NFData UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods rnf :: UntagResource -> () #
Hashable UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods hashWithSalt :: Int -> UntagResource -> Int # hash :: UntagResource -> Int #
ToJSON UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods toJSON :: UntagResource -> Value # toEncoding :: UntagResource -> Encoding # toJSONList :: [UntagResource] -> Value # toEncodingList :: [UntagResource] -> Encoding #
AWSRequest UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Associated Types type AWSResponse UntagResource # Methods request :: UntagResource -> Request UntagResource # response :: MonadResource m => Logger -> Service -> Proxy UntagResource -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse UntagResource))) #
ToHeaders UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods toHeaders :: UntagResource -> [Header] #
ToPath UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods toPath :: UntagResource -> ByteString #
ToQuery UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods toQuery :: UntagResource -> QueryString #
type Rep UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource type Rep UntagResource = D1 ('MetaData "UntagResource" "Amazonka.KMS.UntagResource" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UntagResource'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "tagKeys") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 [Text])))
type AWSResponse UntagResource Source #
Instance details Defined in Amazonka.KMS.UntagResource type AWSResponse UntagResource = UntagResourceResponse

newUntagResource Source #

Arguments

:: Text	`$sel:keyId:UntagResource'`
-> UntagResource

Create a value of UntagResource with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:UntagResource', untagResource_keyId - Identifies the KMS key from which you are removing tags.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:tagKeys:UntagResource', untagResource_tagKeys - One or more tag keys. Specify only the tag keys, not the tag values.

data UntagResourceResponse Source #

See: newUntagResourceResponse smart constructor.

Constructors

UntagResourceResponse'

Instances

Instances details

Eq UntagResourceResponse Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods (==) :: UntagResourceResponse -> UntagResourceResponse -> Bool # (/=) :: UntagResourceResponse -> UntagResourceResponse -> Bool #
Read UntagResourceResponse Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods readsPrec :: Int -> ReadS UntagResourceResponse # readList :: ReadS [UntagResourceResponse] # readPrec :: ReadPrec UntagResourceResponse # readListPrec :: ReadPrec [UntagResourceResponse] #
Show UntagResourceResponse Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods showsPrec :: Int -> UntagResourceResponse -> ShowS # show :: UntagResourceResponse -> String # showList :: [UntagResourceResponse] -> ShowS #
Generic UntagResourceResponse Source #
Instance details Defined in Amazonka.KMS.UntagResource Associated Types type Rep UntagResourceResponse :: Type -> Type # Methods from :: UntagResourceResponse -> Rep UntagResourceResponse x # to :: Rep UntagResourceResponse x -> UntagResourceResponse #
NFData UntagResourceResponse Source #
Instance details Defined in Amazonka.KMS.UntagResource Methods rnf :: UntagResourceResponse -> () #
type Rep UntagResourceResponse Source #
Instance details Defined in Amazonka.KMS.UntagResource type Rep UntagResourceResponse = D1 ('MetaData "UntagResourceResponse" "Amazonka.KMS.UntagResource" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "UntagResourceResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newUntagResourceResponse :: UntagResourceResponse Source #

Create a value of UntagResourceResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

Sign

data Sign Source #

See: newSign smart constructor.

Constructors

Sign' (Maybe MessageType) (Maybe [Text]) Text (Sensitive Base64) SigningAlgorithmSpec

Instances

Instances details

Eq Sign Source #
Instance details Defined in Amazonka.KMS.Sign Methods (==) :: Sign -> Sign -> Bool # (/=) :: Sign -> Sign -> Bool #
Show Sign Source #
Instance details Defined in Amazonka.KMS.Sign Methods showsPrec :: Int -> Sign -> ShowS # show :: Sign -> String # showList :: [Sign] -> ShowS #
Generic Sign Source #
Instance details Defined in Amazonka.KMS.Sign Associated Types type Rep Sign :: Type -> Type # Methods from :: Sign -> Rep Sign x # to :: Rep Sign x -> Sign #
NFData Sign Source #
Instance details Defined in Amazonka.KMS.Sign Methods rnf :: Sign -> () #
Hashable Sign Source #
Instance details Defined in Amazonka.KMS.Sign Methods hashWithSalt :: Int -> Sign -> Int # hash :: Sign -> Int #
ToJSON Sign Source #
Instance details Defined in Amazonka.KMS.Sign Methods toJSON :: Sign -> Value # toEncoding :: Sign -> Encoding # toJSONList :: [Sign] -> Value # toEncodingList :: [Sign] -> Encoding #
AWSRequest Sign Source #
Instance details Defined in Amazonka.KMS.Sign Associated Types type AWSResponse Sign # Methods request :: Sign -> Request Sign # response :: MonadResource m => Logger -> Service -> Proxy Sign -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse Sign))) #
ToHeaders Sign Source #
Instance details Defined in Amazonka.KMS.Sign Methods toHeaders :: Sign -> [Header] #
ToPath Sign Source #
Instance details Defined in Amazonka.KMS.Sign Methods toPath :: Sign -> ByteString #
ToQuery Sign Source #
Instance details Defined in Amazonka.KMS.Sign Methods toQuery :: Sign -> QueryString #
type Rep Sign Source #
Instance details Defined in Amazonka.KMS.Sign type Rep Sign = D1 ('MetaData "Sign" "Amazonka.KMS.Sign" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "Sign'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "messageType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe MessageType)) :: S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text]))) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: (S1 ('MetaSel ('Just "message") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Sensitive Base64)) :: S1 ('MetaSel ('Just "signingAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 SigningAlgorithmSpec)))))
type AWSResponse Sign Source #
Instance details Defined in Amazonka.KMS.Sign type AWSResponse Sign = SignResponse

newSign Source #

Arguments

:: Text	`$sel:keyId:Sign'`
-> ByteString	`$sel:message:Sign'`
-> SigningAlgorithmSpec	`$sel:signingAlgorithm:Sign'`
-> Sign

Create a value of Sign with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:messageType:Sign', sign_messageType - Tells KMS whether the value of the Message parameter is a message or message digest. The default value, RAW, indicates a message. To indicate a message digest, enter DIGEST.

$sel:grantTokens:Sign', sign_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:keyId:Sign', sign_keyId - Identifies an asymmetric KMS key. KMS uses the private key in the asymmetric KMS key to sign the message. The KeyUsage type of the KMS key must be SIGN_VERIFY. To find the KeyUsage of a KMS key, use the DescribeKey operation.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

$sel:message:Sign', sign_message - Specifies the message or message digest to sign. Messages can be 0-4096 bytes. To sign a larger message, provide the message digest.

If you provide a message, KMS generates a hash digest of the message and then signs it.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:signingAlgorithm:Sign', sign_signingAlgorithm - Specifies the signing algorithm to use when signing the message.

Choose an algorithm that is compatible with the type and size of the specified asymmetric KMS key.

data SignResponse Source #

See: newSignResponse smart constructor.

Constructors

SignResponse' (Maybe SigningAlgorithmSpec) (Maybe Base64) (Maybe Text) Int

Instances

Instances details

Eq SignResponse Source #
Instance details Defined in Amazonka.KMS.Sign Methods (==) :: SignResponse -> SignResponse -> Bool # (/=) :: SignResponse -> SignResponse -> Bool #
Read SignResponse Source #
Instance details Defined in Amazonka.KMS.Sign Methods readsPrec :: Int -> ReadS SignResponse # readList :: ReadS [SignResponse] # readPrec :: ReadPrec SignResponse # readListPrec :: ReadPrec [SignResponse] #
Show SignResponse Source #
Instance details Defined in Amazonka.KMS.Sign Methods showsPrec :: Int -> SignResponse -> ShowS # show :: SignResponse -> String # showList :: [SignResponse] -> ShowS #
Generic SignResponse Source #
Instance details Defined in Amazonka.KMS.Sign Associated Types type Rep SignResponse :: Type -> Type # Methods from :: SignResponse -> Rep SignResponse x # to :: Rep SignResponse x -> SignResponse #
NFData SignResponse Source #
Instance details Defined in Amazonka.KMS.Sign Methods rnf :: SignResponse -> () #
type Rep SignResponse Source #
Instance details Defined in Amazonka.KMS.Sign type Rep SignResponse = D1 ('MetaData "SignResponse" "Amazonka.KMS.Sign" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "SignResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "signingAlgorithm") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe SigningAlgorithmSpec)) :: S1 ('MetaSel ('Just "signature") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64))) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newSignResponse Source #

Arguments

:: Int	`$sel:httpStatus:SignResponse'`
-> SignResponse

Create a value of SignResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:signingAlgorithm:Sign', signResponse_signingAlgorithm - The signing algorithm that was used to sign the message.

$sel:signature:SignResponse', signResponse_signature - The cryptographic signature that was generated for the message.

When used with the supported RSA signing algorithms, the encoding of this value is defined by PKCS #1 in RFC 8017.
When used with the ECDSA_SHA_256, ECDSA_SHA_384, or ECDSA_SHA_512 signing algorithms, this value is a DER-encoded object as defined by ANS X9.62–2005 and RFC 3279 Section 2.2.3. This is the most commonly used signature format and is appropriate for most uses.

When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:keyId:Sign', signResponse_keyId - The Amazon Resource Name (key ARN) of the asymmetric KMS key that was used to sign the message.

$sel:httpStatus:SignResponse', signResponse_httpStatus - The response's http status code.

ScheduleKeyDeletion

data ScheduleKeyDeletion Source #

See: newScheduleKeyDeletion smart constructor.

Constructors

ScheduleKeyDeletion' (Maybe Natural) Text

Instances

Instances details

Eq ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods (==) :: ScheduleKeyDeletion -> ScheduleKeyDeletion -> Bool # (/=) :: ScheduleKeyDeletion -> ScheduleKeyDeletion -> Bool #
Read ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods readsPrec :: Int -> ReadS ScheduleKeyDeletion # readList :: ReadS [ScheduleKeyDeletion] # readPrec :: ReadPrec ScheduleKeyDeletion # readListPrec :: ReadPrec [ScheduleKeyDeletion] #
Show ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods showsPrec :: Int -> ScheduleKeyDeletion -> ShowS # show :: ScheduleKeyDeletion -> String # showList :: [ScheduleKeyDeletion] -> ShowS #
Generic ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Associated Types type Rep ScheduleKeyDeletion :: Type -> Type # Methods from :: ScheduleKeyDeletion -> Rep ScheduleKeyDeletion x # to :: Rep ScheduleKeyDeletion x -> ScheduleKeyDeletion #
NFData ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods rnf :: ScheduleKeyDeletion -> () #
Hashable ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods hashWithSalt :: Int -> ScheduleKeyDeletion -> Int # hash :: ScheduleKeyDeletion -> Int #
ToJSON ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods toJSON :: ScheduleKeyDeletion -> Value # toEncoding :: ScheduleKeyDeletion -> Encoding # toJSONList :: [ScheduleKeyDeletion] -> Value # toEncodingList :: [ScheduleKeyDeletion] -> Encoding #
AWSRequest ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Associated Types type AWSResponse ScheduleKeyDeletion # Methods request :: ScheduleKeyDeletion -> Request ScheduleKeyDeletion # response :: MonadResource m => Logger -> Service -> Proxy ScheduleKeyDeletion -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ScheduleKeyDeletion))) #
ToHeaders ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods toHeaders :: ScheduleKeyDeletion -> [Header] #
ToPath ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods toPath :: ScheduleKeyDeletion -> ByteString #
ToQuery ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods toQuery :: ScheduleKeyDeletion -> QueryString #
type Rep ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion type Rep ScheduleKeyDeletion = D1 ('MetaData "ScheduleKeyDeletion" "Amazonka.KMS.ScheduleKeyDeletion" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ScheduleKeyDeletion'" 'PrefixI 'True) (S1 ('MetaSel ('Just "pendingWindowInDays") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :*: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse ScheduleKeyDeletion Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion type AWSResponse ScheduleKeyDeletion = ScheduleKeyDeletionResponse

newScheduleKeyDeletion Source #

Arguments

:: Text	`$sel:keyId:ScheduleKeyDeletion'`
-> ScheduleKeyDeletion

Create a value of ScheduleKeyDeletion with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:pendingWindowInDays:ScheduleKeyDeletion', scheduleKeyDeletion_pendingWindowInDays - The waiting period, specified in number of days. After the waiting period ends, KMS deletes the KMS key.

If the KMS key is a multi-Region primary key with replicas, the waiting period begins when the last of its replica keys is deleted. Otherwise, the waiting period begins immediately.

This value is optional. If you include a value, it must be between 7 and 30, inclusive. If you do not include a value, it defaults to 30.

$sel:keyId:ScheduleKeyDeletion', scheduleKeyDeletion_keyId - The unique identifier of the KMS key to delete.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data ScheduleKeyDeletionResponse Source #

See: newScheduleKeyDeletionResponse smart constructor.

Constructors

ScheduleKeyDeletionResponse' (Maybe Text) (Maybe KeyState) (Maybe POSIX) (Maybe Natural) Int

Instances

Instances details

Eq ScheduleKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods (==) :: ScheduleKeyDeletionResponse -> ScheduleKeyDeletionResponse -> Bool # (/=) :: ScheduleKeyDeletionResponse -> ScheduleKeyDeletionResponse -> Bool #
Read ScheduleKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods readsPrec :: Int -> ReadS ScheduleKeyDeletionResponse # readList :: ReadS [ScheduleKeyDeletionResponse] # readPrec :: ReadPrec ScheduleKeyDeletionResponse # readListPrec :: ReadPrec [ScheduleKeyDeletionResponse] #
Show ScheduleKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods showsPrec :: Int -> ScheduleKeyDeletionResponse -> ShowS # show :: ScheduleKeyDeletionResponse -> String # showList :: [ScheduleKeyDeletionResponse] -> ShowS #
Generic ScheduleKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Associated Types type Rep ScheduleKeyDeletionResponse :: Type -> Type # Methods from :: ScheduleKeyDeletionResponse -> Rep ScheduleKeyDeletionResponse x # to :: Rep ScheduleKeyDeletionResponse x -> ScheduleKeyDeletionResponse #
NFData ScheduleKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion Methods rnf :: ScheduleKeyDeletionResponse -> () #
type Rep ScheduleKeyDeletionResponse Source #
Instance details Defined in Amazonka.KMS.ScheduleKeyDeletion type Rep ScheduleKeyDeletionResponse = D1 ('MetaData "ScheduleKeyDeletionResponse" "Amazonka.KMS.ScheduleKeyDeletion" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ScheduleKeyDeletionResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "keyState") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyState))) :: (S1 ('MetaSel ('Just "deletionDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :: (S1 ('MetaSel ('Just "pendingWindowInDays") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural)) :: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))))

newScheduleKeyDeletionResponse Source #

Arguments

:: Int	`$sel:httpStatus:ScheduleKeyDeletionResponse'`
-> ScheduleKeyDeletionResponse

Create a value of ScheduleKeyDeletionResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:ScheduleKeyDeletion', scheduleKeyDeletionResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key whose deletion is scheduled.

$sel:keyState:ScheduleKeyDeletionResponse', scheduleKeyDeletionResponse_keyState - The current status of the KMS key.

For more information about how key state affects the use of a KMS key, see Key state: Effect on your KMS key in the Key Management Service Developer Guide.

$sel:deletionDate:ScheduleKeyDeletionResponse', scheduleKeyDeletionResponse_deletionDate - The date and time after which KMS deletes the KMS key.

If the KMS key is a multi-Region primary key with replica keys, this field does not appear. The deletion date for the primary key isn't known until its last replica key is deleted.

$sel:pendingWindowInDays:ScheduleKeyDeletion', scheduleKeyDeletionResponse_pendingWindowInDays - The waiting period before the KMS key is deleted.

If the KMS key is a multi-Region primary key with replicas, the waiting period begins when the last of its replica keys is deleted. Otherwise, the waiting period begins immediately.

$sel:httpStatus:ScheduleKeyDeletionResponse', scheduleKeyDeletionResponse_httpStatus - The response's http status code.

GenerateDataKeyPair

data GenerateDataKeyPair Source #

See: newGenerateDataKeyPair smart constructor.

Constructors

GenerateDataKeyPair' (Maybe (HashMap Text Text)) (Maybe [Text]) Text DataKeyPairSpec

Instances

Instances details

Eq GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods (==) :: GenerateDataKeyPair -> GenerateDataKeyPair -> Bool # (/=) :: GenerateDataKeyPair -> GenerateDataKeyPair -> Bool #
Read GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods readsPrec :: Int -> ReadS GenerateDataKeyPair # readList :: ReadS [GenerateDataKeyPair] # readPrec :: ReadPrec GenerateDataKeyPair # readListPrec :: ReadPrec [GenerateDataKeyPair] #
Show GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods showsPrec :: Int -> GenerateDataKeyPair -> ShowS # show :: GenerateDataKeyPair -> String # showList :: [GenerateDataKeyPair] -> ShowS #
Generic GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Associated Types type Rep GenerateDataKeyPair :: Type -> Type # Methods from :: GenerateDataKeyPair -> Rep GenerateDataKeyPair x # to :: Rep GenerateDataKeyPair x -> GenerateDataKeyPair #
NFData GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods rnf :: GenerateDataKeyPair -> () #
Hashable GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods hashWithSalt :: Int -> GenerateDataKeyPair -> Int # hash :: GenerateDataKeyPair -> Int #
ToJSON GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods toJSON :: GenerateDataKeyPair -> Value # toEncoding :: GenerateDataKeyPair -> Encoding # toJSONList :: [GenerateDataKeyPair] -> Value # toEncodingList :: [GenerateDataKeyPair] -> Encoding #
AWSRequest GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Associated Types type AWSResponse GenerateDataKeyPair # Methods request :: GenerateDataKeyPair -> Request GenerateDataKeyPair # response :: MonadResource m => Logger -> Service -> Proxy GenerateDataKeyPair -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GenerateDataKeyPair))) #
ToHeaders GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods toHeaders :: GenerateDataKeyPair -> [Header] #
ToPath GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods toPath :: GenerateDataKeyPair -> ByteString #
ToQuery GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods toQuery :: GenerateDataKeyPair -> QueryString #
type Rep GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair type Rep GenerateDataKeyPair = D1 ('MetaData "GenerateDataKeyPair" "Amazonka.KMS.GenerateDataKeyPair" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateDataKeyPair'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "encryptionContext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text))) :: S1 ('MetaSel ('Just "grantTokens") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Text]))) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "keyPairSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 DataKeyPairSpec))))
type AWSResponse GenerateDataKeyPair Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair type AWSResponse GenerateDataKeyPair = GenerateDataKeyPairResponse

newGenerateDataKeyPair Source #

Arguments

:: Text	`$sel:keyId:GenerateDataKeyPair'`
-> DataKeyPairSpec	`$sel:keyPairSpec:GenerateDataKeyPair'`
-> GenerateDataKeyPair

Create a value of GenerateDataKeyPair with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:encryptionContext:GenerateDataKeyPair', generateDataKeyPair_encryptionContext - Specifies the encryption context that will be used when encrypting the private key in the data key pair.

An encryption context is a collection of non-secret key-value pairs that represents additional authenticated data. When you use an encryption context to encrypt data, you must specify the same (an exact case-sensitive match) encryption context to decrypt the data. An encryption context is optional when encrypting with a symmetric KMS key, but it is highly recommended.

For more information, see Encryption Context in the Key Management Service Developer Guide.

$sel:grantTokens:GenerateDataKeyPair', generateDataKeyPair_grantTokens - A list of grant tokens.

Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide.

$sel:keyId:GenerateDataKeyPair', generateDataKeyPair_keyId - Specifies the symmetric KMS key that encrypts the private key in the data key pair. You cannot specify an asymmetric KMS key or a KMS key in a custom key store. To get the type and origin of your KMS key, use the DescribeKey operation.

To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.

$sel:keyPairSpec:GenerateDataKeyPair', generateDataKeyPair_keyPairSpec - Determines the type of data key pair that is generated.

The KMS rule that restricts the use of asymmetric RSA KMS keys to encrypt and decrypt or to sign and verify (but not both), and the rule that permits you to use ECC KMS keys only to sign and verify, are not effective on data key pairs, which are used outside of KMS.

data GenerateDataKeyPairResponse Source #

See: newGenerateDataKeyPairResponse smart constructor.

Constructors

GenerateDataKeyPairResponse' (Maybe Text) (Maybe Base64) (Maybe (Sensitive Base64)) (Maybe DataKeyPairSpec) (Maybe Base64) Int

Instances

Instances details

Eq GenerateDataKeyPairResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods (==) :: GenerateDataKeyPairResponse -> GenerateDataKeyPairResponse -> Bool # (/=) :: GenerateDataKeyPairResponse -> GenerateDataKeyPairResponse -> Bool #
Show GenerateDataKeyPairResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods showsPrec :: Int -> GenerateDataKeyPairResponse -> ShowS # show :: GenerateDataKeyPairResponse -> String # showList :: [GenerateDataKeyPairResponse] -> ShowS #
Generic GenerateDataKeyPairResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Associated Types type Rep GenerateDataKeyPairResponse :: Type -> Type # Methods from :: GenerateDataKeyPairResponse -> Rep GenerateDataKeyPairResponse x # to :: Rep GenerateDataKeyPairResponse x -> GenerateDataKeyPairResponse #
NFData GenerateDataKeyPairResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair Methods rnf :: GenerateDataKeyPairResponse -> () #
type Rep GenerateDataKeyPairResponse Source #
Instance details Defined in Amazonka.KMS.GenerateDataKeyPair type Rep GenerateDataKeyPairResponse = D1 ('MetaData "GenerateDataKeyPairResponse" "Amazonka.KMS.GenerateDataKeyPair" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GenerateDataKeyPairResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "publicKey") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64)) :: S1 ('MetaSel ('Just "privateKeyPlaintext") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (Sensitive Base64))))) :: (S1 ('MetaSel ('Just "keyPairSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe DataKeyPairSpec)) :: (S1 ('MetaSel ('Just "privateKeyCiphertextBlob") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Base64)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))))

newGenerateDataKeyPairResponse Source #

Arguments

:: Int	`$sel:httpStatus:GenerateDataKeyPairResponse'`
-> GenerateDataKeyPairResponse

Create a value of GenerateDataKeyPairResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GenerateDataKeyPair', generateDataKeyPairResponse_keyId - The Amazon Resource Name (key ARN) of the KMS key that encrypted the private key.

$sel:publicKey:GenerateDataKeyPairResponse', generateDataKeyPairResponse_publicKey - The public key (in plaintext).-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:privateKeyPlaintext:GenerateDataKeyPairResponse', generateDataKeyPairResponse_privateKeyPlaintext - The plaintext copy of the private key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:keyPairSpec:GenerateDataKeyPair', generateDataKeyPairResponse_keyPairSpec - The type of data key pair that was generated.

$sel:privateKeyCiphertextBlob:GenerateDataKeyPairResponse', generateDataKeyPairResponse_privateKeyCiphertextBlob - The encrypted copy of the private key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:httpStatus:GenerateDataKeyPairResponse', generateDataKeyPairResponse_httpStatus - The response's http status code.

ReplicateKey

data ReplicateKey Source #

See: newReplicateKey smart constructor.

Constructors

ReplicateKey' (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe [Tag]) Text Text

Instances

Instances details

Eq ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods (==) :: ReplicateKey -> ReplicateKey -> Bool # (/=) :: ReplicateKey -> ReplicateKey -> Bool #
Read ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods readsPrec :: Int -> ReadS ReplicateKey # readList :: ReadS [ReplicateKey] # readPrec :: ReadPrec ReplicateKey # readListPrec :: ReadPrec [ReplicateKey] #
Show ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods showsPrec :: Int -> ReplicateKey -> ShowS # show :: ReplicateKey -> String # showList :: [ReplicateKey] -> ShowS #
Generic ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Associated Types type Rep ReplicateKey :: Type -> Type # Methods from :: ReplicateKey -> Rep ReplicateKey x # to :: Rep ReplicateKey x -> ReplicateKey #
NFData ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods rnf :: ReplicateKey -> () #
Hashable ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods hashWithSalt :: Int -> ReplicateKey -> Int # hash :: ReplicateKey -> Int #
ToJSON ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods toJSON :: ReplicateKey -> Value # toEncoding :: ReplicateKey -> Encoding # toJSONList :: [ReplicateKey] -> Value # toEncodingList :: [ReplicateKey] -> Encoding #
AWSRequest ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Associated Types type AWSResponse ReplicateKey # Methods request :: ReplicateKey -> Request ReplicateKey # response :: MonadResource m => Logger -> Service -> Proxy ReplicateKey -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ReplicateKey))) #
ToHeaders ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods toHeaders :: ReplicateKey -> [Header] #
ToPath ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods toPath :: ReplicateKey -> ByteString #
ToQuery ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods toQuery :: ReplicateKey -> QueryString #
type Rep ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey type Rep ReplicateKey = D1 ('MetaData "ReplicateKey" "Amazonka.KMS.ReplicateKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ReplicateKey'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "bypassPolicyLockoutSafetyCheck") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: (S1 ('MetaSel ('Just "policy") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "description") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) :: (S1 ('MetaSel ('Just "tags") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Tag])) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "replicaRegion") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))
type AWSResponse ReplicateKey Source #
Instance details Defined in Amazonka.KMS.ReplicateKey type AWSResponse ReplicateKey = ReplicateKeyResponse

newReplicateKey Source #

Arguments

:: Text	`$sel:keyId:ReplicateKey'`
-> Text	`$sel:replicaRegion:ReplicateKey'`
-> ReplicateKey

Create a value of ReplicateKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:bypassPolicyLockoutSafetyCheck:ReplicateKey', replicateKey_bypassPolicyLockoutSafetyCheck - A flag to indicate whether to bypass the key policy lockout safety check.

Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately.

For more information, refer to the scenario in the Default Key Policy section in the Key Management Service Developer Guide.

Use this parameter only when you intend to prevent the principal that is making the request from making a subsequent PutKeyPolicy request on the KMS key.

The default value is false.

$sel:policy:ReplicateKey', replicateKey_policy - The key policy to attach to the KMS key. This parameter is optional. If you do not provide a key policy, KMS attaches the default key policy to the KMS key.

The key policy is not a shared property of multi-Region keys. You can specify the same key policy or a different key policy for each key in a set of related multi-Region keys. KMS does not synchronize this property.

If you provide a key policy, it must meet the following criteria:

If you don't set BypassPolicyLockoutSafetyCheck to true, the key policy must give the caller kms:PutKeyPolicy permission on the replica key. This reduces the risk that the KMS key becomes unmanageable. For more information, refer to the scenario in the Default Key Policy section of the /Key Management Service Developer Guide/ .
Each statement in the key policy must contain one or more principals. The principals in the key policy must exist and be visible to KMS. When you create a new Amazon Web Services principal (for example, an IAM user or role), you might need to enforce a delay before including the new principal in a key policy because the new principal might not be immediately visible to KMS. For more information, see Changes that I make are not always immediately visible in the /Identity and Access Management User Guide/ .
The key policy size quota is 32 kilobytes (32768 bytes).

$sel:description:ReplicateKey', replicateKey_description - A description of the KMS key. The default value is an empty string (no description).

The description is not a shared property of multi-Region keys. You can specify the same description or a different description for each key in a set of related multi-Region keys. KMS does not synchronize this property.

$sel:tags:ReplicateKey', replicateKey_tags - Assigns one or more tags to the replica key. Use this parameter to tag the KMS key when it is created. To tag an existing KMS key, use the TagResource operation.

Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see Using ABAC in KMS in the Key Management Service Developer Guide.

To use this parameter, you must have kms:TagResource permission in an IAM policy.

Tags are not a shared property of multi-Region keys. You can specify the same tags or different tags for each key in a set of related multi-Region keys. KMS does not synchronize this property.

Each tag consists of a tag key and a tag value. Both the tag key and the tag value are required, but the tag value can be an empty (null) string. You cannot have more than one tag on a KMS key with the same tag key. If you specify an existing tag key with a different tag value, KMS replaces the current tag value with the specified one.

When you add tags to an Amazon Web Services resource, Amazon Web Services generates a cost allocation report with usage and costs aggregated by tags. Tags can also be used to control access to a KMS key. For details, see Tagging Keys.

$sel:keyId:ReplicateKey', replicateKey_keyId - Identifies the multi-Region primary key that is being replicated. To determine whether a KMS key is a multi-Region primary key, use the DescribeKey operation to check the value of the MultiRegionKeyType property.

Specify the key ID or key ARN of a multi-Region primary key.

For example:

Key ID: mrk-1234abcd12ab34cd56ef1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/mrk-1234abcd12ab34cd56ef1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:replicaRegion:ReplicateKey', replicateKey_replicaRegion - The Region ID of the Amazon Web Services Region for this replica key.

Enter the Region ID, such as us-east-1 or ap-southeast-2. For a list of Amazon Web Services Regions in which KMS is supported, see KMS service endpoints in the Amazon Web Services General Reference.

The replica must be in a different Amazon Web Services Region than its primary key and other replicas of that primary key, but in the same Amazon Web Services partition. KMS must be available in the replica Region. If the Region is not enabled by default, the Amazon Web Services account must be enabled in the Region.

For information about Amazon Web Services partitions, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. For information about enabling and disabling Regions, see Enabling a Region and Disabling a Region in the Amazon Web Services General Reference.

data ReplicateKeyResponse Source #

See: newReplicateKeyResponse smart constructor.

Constructors

ReplicateKeyResponse' (Maybe KeyMetadata) (Maybe Text) (Maybe [Tag]) Int

Instances

Instances details

Eq ReplicateKeyResponse Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods (==) :: ReplicateKeyResponse -> ReplicateKeyResponse -> Bool # (/=) :: ReplicateKeyResponse -> ReplicateKeyResponse -> Bool #
Read ReplicateKeyResponse Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods readsPrec :: Int -> ReadS ReplicateKeyResponse # readList :: ReadS [ReplicateKeyResponse] # readPrec :: ReadPrec ReplicateKeyResponse # readListPrec :: ReadPrec [ReplicateKeyResponse] #
Show ReplicateKeyResponse Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods showsPrec :: Int -> ReplicateKeyResponse -> ShowS # show :: ReplicateKeyResponse -> String # showList :: [ReplicateKeyResponse] -> ShowS #
Generic ReplicateKeyResponse Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Associated Types type Rep ReplicateKeyResponse :: Type -> Type # Methods from :: ReplicateKeyResponse -> Rep ReplicateKeyResponse x # to :: Rep ReplicateKeyResponse x -> ReplicateKeyResponse #
NFData ReplicateKeyResponse Source #
Instance details Defined in Amazonka.KMS.ReplicateKey Methods rnf :: ReplicateKeyResponse -> () #
type Rep ReplicateKeyResponse Source #
Instance details Defined in Amazonka.KMS.ReplicateKey type Rep ReplicateKeyResponse = D1 ('MetaData "ReplicateKeyResponse" "Amazonka.KMS.ReplicateKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ReplicateKeyResponse'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "replicaKeyMetadata") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyMetadata)) :: S1 ('MetaSel ('Just "replicaPolicy") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "replicaTags") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [Tag])) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))

newReplicateKeyResponse Source #

Arguments

:: Int	`$sel:httpStatus:ReplicateKeyResponse'`
-> ReplicateKeyResponse

Create a value of ReplicateKeyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:replicaKeyMetadata:ReplicateKeyResponse', replicateKeyResponse_replicaKeyMetadata - Displays details about the new replica key, including its Amazon Resource Name (key ARN) and key state. It also includes the ARN and Amazon Web Services Region of its primary key and other replica keys.

$sel:replicaPolicy:ReplicateKeyResponse', replicateKeyResponse_replicaPolicy - The key policy of the new replica key. The value is a key policy document in JSON format.

$sel:replicaTags:ReplicateKeyResponse', replicateKeyResponse_replicaTags - The tags on the new replica key. The value is a list of tag key and tag value pairs.

$sel:httpStatus:ReplicateKeyResponse', replicateKeyResponse_httpStatus - The response's http status code.

PutKeyPolicy

data PutKeyPolicy Source #

See: newPutKeyPolicy smart constructor.

Constructors

PutKeyPolicy' (Maybe Bool) Text Text Text

Instances

Instances details

Eq PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods (==) :: PutKeyPolicy -> PutKeyPolicy -> Bool # (/=) :: PutKeyPolicy -> PutKeyPolicy -> Bool #
Read PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods readsPrec :: Int -> ReadS PutKeyPolicy # readList :: ReadS [PutKeyPolicy] # readPrec :: ReadPrec PutKeyPolicy # readListPrec :: ReadPrec [PutKeyPolicy] #
Show PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods showsPrec :: Int -> PutKeyPolicy -> ShowS # show :: PutKeyPolicy -> String # showList :: [PutKeyPolicy] -> ShowS #
Generic PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Associated Types type Rep PutKeyPolicy :: Type -> Type # Methods from :: PutKeyPolicy -> Rep PutKeyPolicy x # to :: Rep PutKeyPolicy x -> PutKeyPolicy #
NFData PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods rnf :: PutKeyPolicy -> () #
Hashable PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods hashWithSalt :: Int -> PutKeyPolicy -> Int # hash :: PutKeyPolicy -> Int #
ToJSON PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods toJSON :: PutKeyPolicy -> Value # toEncoding :: PutKeyPolicy -> Encoding # toJSONList :: [PutKeyPolicy] -> Value # toEncodingList :: [PutKeyPolicy] -> Encoding #
AWSRequest PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Associated Types type AWSResponse PutKeyPolicy # Methods request :: PutKeyPolicy -> Request PutKeyPolicy # response :: MonadResource m => Logger -> Service -> Proxy PutKeyPolicy -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse PutKeyPolicy))) #
ToHeaders PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods toHeaders :: PutKeyPolicy -> [Header] #
ToPath PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods toPath :: PutKeyPolicy -> ByteString #
ToQuery PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods toQuery :: PutKeyPolicy -> QueryString #
type Rep PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy type Rep PutKeyPolicy = D1 ('MetaData "PutKeyPolicy" "Amazonka.KMS.PutKeyPolicy" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "PutKeyPolicy'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "bypassPolicyLockoutSafetyCheck") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)) :: (S1 ('MetaSel ('Just "policyName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "policy") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))))
type AWSResponse PutKeyPolicy Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy type AWSResponse PutKeyPolicy = PutKeyPolicyResponse

newPutKeyPolicy Source #

Arguments

:: Text	`$sel:keyId:PutKeyPolicy'`
-> Text	`$sel:policyName:PutKeyPolicy'`
-> Text	`$sel:policy:PutKeyPolicy'`
-> PutKeyPolicy

Create a value of PutKeyPolicy with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:bypassPolicyLockoutSafetyCheck:PutKeyPolicy', putKeyPolicy_bypassPolicyLockoutSafetyCheck - A flag to indicate whether to bypass the key policy lockout safety check.

Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately.

For more information, refer to the scenario in the Default Key Policy section in the Key Management Service Developer Guide.

Use this parameter only when you intend to prevent the principal that is making the request from making a subsequent PutKeyPolicy request on the KMS key.

The default value is false.

$sel:keyId:PutKeyPolicy', putKeyPolicy_keyId - Sets the key policy on the specified KMS key.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:policyName:PutKeyPolicy', putKeyPolicy_policyName - The name of the key policy. The only valid value is default.

$sel:policy:PutKeyPolicy', putKeyPolicy_policy - The key policy to attach to the KMS key.

The key policy must meet the following criteria:

If you don't set BypassPolicyLockoutSafetyCheck to true, the key policy must allow the principal that is making the PutKeyPolicy request to make a subsequent PutKeyPolicy request on the KMS key. This reduces the risk that the KMS key becomes unmanageable. For more information, refer to the scenario in the Default Key Policy section of the Key Management Service Developer Guide.
Each statement in the key policy must contain one or more principals. The principals in the key policy must exist and be visible to KMS. When you create a new Amazon Web Services principal (for example, an IAM user or role), you might need to enforce a delay before including the new principal in a key policy because the new principal might not be immediately visible to KMS. For more information, see Changes that I make are not always immediately visible in the /Amazon Web Services Identity and Access Management User Guide/.

The key policy cannot exceed 32 kilobytes (32768 bytes). For more information, see Resource Quotas in the Key Management Service Developer Guide.

data PutKeyPolicyResponse Source #

See: newPutKeyPolicyResponse smart constructor.

Constructors

PutKeyPolicyResponse'

Instances

Instances details

Eq PutKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods (==) :: PutKeyPolicyResponse -> PutKeyPolicyResponse -> Bool # (/=) :: PutKeyPolicyResponse -> PutKeyPolicyResponse -> Bool #
Read PutKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods readsPrec :: Int -> ReadS PutKeyPolicyResponse # readList :: ReadS [PutKeyPolicyResponse] # readPrec :: ReadPrec PutKeyPolicyResponse # readListPrec :: ReadPrec [PutKeyPolicyResponse] #
Show PutKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods showsPrec :: Int -> PutKeyPolicyResponse -> ShowS # show :: PutKeyPolicyResponse -> String # showList :: [PutKeyPolicyResponse] -> ShowS #
Generic PutKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Associated Types type Rep PutKeyPolicyResponse :: Type -> Type # Methods from :: PutKeyPolicyResponse -> Rep PutKeyPolicyResponse x # to :: Rep PutKeyPolicyResponse x -> PutKeyPolicyResponse #
NFData PutKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy Methods rnf :: PutKeyPolicyResponse -> () #
type Rep PutKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.PutKeyPolicy type Rep PutKeyPolicyResponse = D1 ('MetaData "PutKeyPolicyResponse" "Amazonka.KMS.PutKeyPolicy" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "PutKeyPolicyResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newPutKeyPolicyResponse :: PutKeyPolicyResponse Source #

Create a value of PutKeyPolicyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

EnableKey

data EnableKey Source #

See: newEnableKey smart constructor.

Constructors

EnableKey' Text

Instances

Instances details

Eq EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods (==) :: EnableKey -> EnableKey -> Bool # (/=) :: EnableKey -> EnableKey -> Bool #
Read EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods readsPrec :: Int -> ReadS EnableKey # readList :: ReadS [EnableKey] # readPrec :: ReadPrec EnableKey # readListPrec :: ReadPrec [EnableKey] #
Show EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods showsPrec :: Int -> EnableKey -> ShowS # show :: EnableKey -> String # showList :: [EnableKey] -> ShowS #
Generic EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Associated Types type Rep EnableKey :: Type -> Type # Methods from :: EnableKey -> Rep EnableKey x # to :: Rep EnableKey x -> EnableKey #
NFData EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods rnf :: EnableKey -> () #
Hashable EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods hashWithSalt :: Int -> EnableKey -> Int # hash :: EnableKey -> Int #
ToJSON EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods toJSON :: EnableKey -> Value # toEncoding :: EnableKey -> Encoding # toJSONList :: [EnableKey] -> Value # toEncodingList :: [EnableKey] -> Encoding #
AWSRequest EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Associated Types type AWSResponse EnableKey # Methods request :: EnableKey -> Request EnableKey # response :: MonadResource m => Logger -> Service -> Proxy EnableKey -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse EnableKey))) #
ToHeaders EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods toHeaders :: EnableKey -> [Header] #
ToPath EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods toPath :: EnableKey -> ByteString #
ToQuery EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods toQuery :: EnableKey -> QueryString #
type Rep EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey type Rep EnableKey = D1 ('MetaData "EnableKey" "Amazonka.KMS.EnableKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "EnableKey'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse EnableKey Source #
Instance details Defined in Amazonka.KMS.EnableKey type AWSResponse EnableKey = EnableKeyResponse

newEnableKey Source #

Arguments

:: Text	`$sel:keyId:EnableKey'`
-> EnableKey

Create a value of EnableKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:EnableKey', enableKey_keyId - Identifies the KMS key to enable.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data EnableKeyResponse Source #

See: newEnableKeyResponse smart constructor.

Constructors

EnableKeyResponse'

Instances

Instances details

Eq EnableKeyResponse Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods (==) :: EnableKeyResponse -> EnableKeyResponse -> Bool # (/=) :: EnableKeyResponse -> EnableKeyResponse -> Bool #
Read EnableKeyResponse Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods readsPrec :: Int -> ReadS EnableKeyResponse # readList :: ReadS [EnableKeyResponse] # readPrec :: ReadPrec EnableKeyResponse # readListPrec :: ReadPrec [EnableKeyResponse] #
Show EnableKeyResponse Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods showsPrec :: Int -> EnableKeyResponse -> ShowS # show :: EnableKeyResponse -> String # showList :: [EnableKeyResponse] -> ShowS #
Generic EnableKeyResponse Source #
Instance details Defined in Amazonka.KMS.EnableKey Associated Types type Rep EnableKeyResponse :: Type -> Type # Methods from :: EnableKeyResponse -> Rep EnableKeyResponse x # to :: Rep EnableKeyResponse x -> EnableKeyResponse #
NFData EnableKeyResponse Source #
Instance details Defined in Amazonka.KMS.EnableKey Methods rnf :: EnableKeyResponse -> () #
type Rep EnableKeyResponse Source #
Instance details Defined in Amazonka.KMS.EnableKey type Rep EnableKeyResponse = D1 ('MetaData "EnableKeyResponse" "Amazonka.KMS.EnableKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "EnableKeyResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newEnableKeyResponse :: EnableKeyResponse Source #

Create a value of EnableKeyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

RevokeGrant

data RevokeGrant Source #

See: newRevokeGrant smart constructor.

Constructors

RevokeGrant' Text Text

Instances

Instances details

Eq RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods (==) :: RevokeGrant -> RevokeGrant -> Bool # (/=) :: RevokeGrant -> RevokeGrant -> Bool #
Read RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods readsPrec :: Int -> ReadS RevokeGrant # readList :: ReadS [RevokeGrant] # readPrec :: ReadPrec RevokeGrant # readListPrec :: ReadPrec [RevokeGrant] #
Show RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods showsPrec :: Int -> RevokeGrant -> ShowS # show :: RevokeGrant -> String # showList :: [RevokeGrant] -> ShowS #
Generic RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Associated Types type Rep RevokeGrant :: Type -> Type # Methods from :: RevokeGrant -> Rep RevokeGrant x # to :: Rep RevokeGrant x -> RevokeGrant #
NFData RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods rnf :: RevokeGrant -> () #
Hashable RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods hashWithSalt :: Int -> RevokeGrant -> Int # hash :: RevokeGrant -> Int #
ToJSON RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods toJSON :: RevokeGrant -> Value # toEncoding :: RevokeGrant -> Encoding # toJSONList :: [RevokeGrant] -> Value # toEncodingList :: [RevokeGrant] -> Encoding #
AWSRequest RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Associated Types type AWSResponse RevokeGrant # Methods request :: RevokeGrant -> Request RevokeGrant # response :: MonadResource m => Logger -> Service -> Proxy RevokeGrant -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse RevokeGrant))) #
ToHeaders RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods toHeaders :: RevokeGrant -> [Header] #
ToPath RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods toPath :: RevokeGrant -> ByteString #
ToQuery RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods toQuery :: RevokeGrant -> QueryString #
type Rep RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant type Rep RevokeGrant = D1 ('MetaData "RevokeGrant" "Amazonka.KMS.RevokeGrant" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "RevokeGrant'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "grantId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse RevokeGrant Source #
Instance details Defined in Amazonka.KMS.RevokeGrant type AWSResponse RevokeGrant = RevokeGrantResponse

newRevokeGrant Source #

Arguments

:: Text	`$sel:keyId:RevokeGrant'`
-> Text	`$sel:grantId:RevokeGrant'`
-> RevokeGrant

Create a value of RevokeGrant with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:RevokeGrant', revokeGrant_keyId - A unique identifier for the KMS key associated with the grant. To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

Specify the key ID or key ARN of the KMS key. To specify a KMS key in a different Amazon Web Services account, you must use the key ARN.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:grantId:RevokeGrant', revokeGrant_grantId - Identifies the grant to revoke. To get the grant ID, use CreateGrant, ListGrants, or ListRetirableGrants.

data RevokeGrantResponse Source #

See: newRevokeGrantResponse smart constructor.

Constructors

RevokeGrantResponse'

Instances

Instances details

Eq RevokeGrantResponse Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods (==) :: RevokeGrantResponse -> RevokeGrantResponse -> Bool # (/=) :: RevokeGrantResponse -> RevokeGrantResponse -> Bool #
Read RevokeGrantResponse Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods readsPrec :: Int -> ReadS RevokeGrantResponse # readList :: ReadS [RevokeGrantResponse] # readPrec :: ReadPrec RevokeGrantResponse # readListPrec :: ReadPrec [RevokeGrantResponse] #
Show RevokeGrantResponse Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods showsPrec :: Int -> RevokeGrantResponse -> ShowS # show :: RevokeGrantResponse -> String # showList :: [RevokeGrantResponse] -> ShowS #
Generic RevokeGrantResponse Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Associated Types type Rep RevokeGrantResponse :: Type -> Type # Methods from :: RevokeGrantResponse -> Rep RevokeGrantResponse x # to :: Rep RevokeGrantResponse x -> RevokeGrantResponse #
NFData RevokeGrantResponse Source #
Instance details Defined in Amazonka.KMS.RevokeGrant Methods rnf :: RevokeGrantResponse -> () #
type Rep RevokeGrantResponse Source #
Instance details Defined in Amazonka.KMS.RevokeGrant type Rep RevokeGrantResponse = D1 ('MetaData "RevokeGrantResponse" "Amazonka.KMS.RevokeGrant" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "RevokeGrantResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newRevokeGrantResponse :: RevokeGrantResponse Source #

Create a value of RevokeGrantResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

GetKeyPolicy

data GetKeyPolicy Source #

See: newGetKeyPolicy smart constructor.

Constructors

GetKeyPolicy' Text Text

Instances

Instances details

Eq GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods (==) :: GetKeyPolicy -> GetKeyPolicy -> Bool # (/=) :: GetKeyPolicy -> GetKeyPolicy -> Bool #
Read GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods readsPrec :: Int -> ReadS GetKeyPolicy # readList :: ReadS [GetKeyPolicy] # readPrec :: ReadPrec GetKeyPolicy # readListPrec :: ReadPrec [GetKeyPolicy] #
Show GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods showsPrec :: Int -> GetKeyPolicy -> ShowS # show :: GetKeyPolicy -> String # showList :: [GetKeyPolicy] -> ShowS #
Generic GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Associated Types type Rep GetKeyPolicy :: Type -> Type # Methods from :: GetKeyPolicy -> Rep GetKeyPolicy x # to :: Rep GetKeyPolicy x -> GetKeyPolicy #
NFData GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods rnf :: GetKeyPolicy -> () #
Hashable GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods hashWithSalt :: Int -> GetKeyPolicy -> Int # hash :: GetKeyPolicy -> Int #
ToJSON GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods toJSON :: GetKeyPolicy -> Value # toEncoding :: GetKeyPolicy -> Encoding # toJSONList :: [GetKeyPolicy] -> Value # toEncodingList :: [GetKeyPolicy] -> Encoding #
AWSRequest GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Associated Types type AWSResponse GetKeyPolicy # Methods request :: GetKeyPolicy -> Request GetKeyPolicy # response :: MonadResource m => Logger -> Service -> Proxy GetKeyPolicy -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse GetKeyPolicy))) #
ToHeaders GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods toHeaders :: GetKeyPolicy -> [Header] #
ToPath GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods toPath :: GetKeyPolicy -> ByteString #
ToQuery GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods toQuery :: GetKeyPolicy -> QueryString #
type Rep GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy type Rep GetKeyPolicy = D1 ('MetaData "GetKeyPolicy" "Amazonka.KMS.GetKeyPolicy" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GetKeyPolicy'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "policyName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse GetKeyPolicy Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy type AWSResponse GetKeyPolicy = GetKeyPolicyResponse

newGetKeyPolicy Source #

Arguments

:: Text	`$sel:keyId:GetKeyPolicy'`
-> Text	`$sel:policyName:GetKeyPolicy'`
-> GetKeyPolicy

Create a value of GetKeyPolicy with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GetKeyPolicy', getKeyPolicy_keyId - Gets the key policy for the specified KMS key.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:policyName:GetKeyPolicy', getKeyPolicy_policyName - Specifies the name of the key policy. The only valid name is default. To get the names of key policies, use ListKeyPolicies.

data GetKeyPolicyResponse Source #

See: newGetKeyPolicyResponse smart constructor.

Constructors

GetKeyPolicyResponse' (Maybe Text) Int

Instances

Instances details

Eq GetKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods (==) :: GetKeyPolicyResponse -> GetKeyPolicyResponse -> Bool # (/=) :: GetKeyPolicyResponse -> GetKeyPolicyResponse -> Bool #
Read GetKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods readsPrec :: Int -> ReadS GetKeyPolicyResponse # readList :: ReadS [GetKeyPolicyResponse] # readPrec :: ReadPrec GetKeyPolicyResponse # readListPrec :: ReadPrec [GetKeyPolicyResponse] #
Show GetKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods showsPrec :: Int -> GetKeyPolicyResponse -> ShowS # show :: GetKeyPolicyResponse -> String # showList :: [GetKeyPolicyResponse] -> ShowS #
Generic GetKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Associated Types type Rep GetKeyPolicyResponse :: Type -> Type # Methods from :: GetKeyPolicyResponse -> Rep GetKeyPolicyResponse x # to :: Rep GetKeyPolicyResponse x -> GetKeyPolicyResponse #
NFData GetKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy Methods rnf :: GetKeyPolicyResponse -> () #
type Rep GetKeyPolicyResponse Source #
Instance details Defined in Amazonka.KMS.GetKeyPolicy type Rep GetKeyPolicyResponse = D1 ('MetaData "GetKeyPolicyResponse" "Amazonka.KMS.GetKeyPolicy" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GetKeyPolicyResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "policy") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newGetKeyPolicyResponse Source #

Arguments

:: Int	`$sel:httpStatus:GetKeyPolicyResponse'`
-> GetKeyPolicyResponse

Create a value of GetKeyPolicyResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:policy:GetKeyPolicyResponse', getKeyPolicyResponse_policy - A key policy document in JSON format.

$sel:httpStatus:GetKeyPolicyResponse', getKeyPolicyResponse_httpStatus - The response's http status code.

ImportKeyMaterial

data ImportKeyMaterial Source #

See: newImportKeyMaterial smart constructor.

Constructors

ImportKeyMaterial' (Maybe ExpirationModelType) (Maybe POSIX) Text Base64 Base64

Instances

Instances details

Eq ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods (==) :: ImportKeyMaterial -> ImportKeyMaterial -> Bool # (/=) :: ImportKeyMaterial -> ImportKeyMaterial -> Bool #
Read ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods readsPrec :: Int -> ReadS ImportKeyMaterial # readList :: ReadS [ImportKeyMaterial] # readPrec :: ReadPrec ImportKeyMaterial # readListPrec :: ReadPrec [ImportKeyMaterial] #
Show ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods showsPrec :: Int -> ImportKeyMaterial -> ShowS # show :: ImportKeyMaterial -> String # showList :: [ImportKeyMaterial] -> ShowS #
Generic ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Associated Types type Rep ImportKeyMaterial :: Type -> Type # Methods from :: ImportKeyMaterial -> Rep ImportKeyMaterial x # to :: Rep ImportKeyMaterial x -> ImportKeyMaterial #
NFData ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods rnf :: ImportKeyMaterial -> () #
Hashable ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods hashWithSalt :: Int -> ImportKeyMaterial -> Int # hash :: ImportKeyMaterial -> Int #
ToJSON ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods toJSON :: ImportKeyMaterial -> Value # toEncoding :: ImportKeyMaterial -> Encoding # toJSONList :: [ImportKeyMaterial] -> Value # toEncodingList :: [ImportKeyMaterial] -> Encoding #
AWSRequest ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Associated Types type AWSResponse ImportKeyMaterial # Methods request :: ImportKeyMaterial -> Request ImportKeyMaterial # response :: MonadResource m => Logger -> Service -> Proxy ImportKeyMaterial -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ImportKeyMaterial))) #
ToHeaders ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods toHeaders :: ImportKeyMaterial -> [Header] #
ToPath ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods toPath :: ImportKeyMaterial -> ByteString #
ToQuery ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods toQuery :: ImportKeyMaterial -> QueryString #
type Rep ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial type Rep ImportKeyMaterial = D1 ('MetaData "ImportKeyMaterial" "Amazonka.KMS.ImportKeyMaterial" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ImportKeyMaterial'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "expirationModel") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ExpirationModelType)) :: S1 ('MetaSel ('Just "validTo") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX))) :: (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: (S1 ('MetaSel ('Just "importToken") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Base64) :: S1 ('MetaSel ('Just "encryptedKeyMaterial") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Base64)))))
type AWSResponse ImportKeyMaterial Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial type AWSResponse ImportKeyMaterial = ImportKeyMaterialResponse

newImportKeyMaterial Source #

Arguments

:: Text	`$sel:keyId:ImportKeyMaterial'`
-> ByteString	`$sel:importToken:ImportKeyMaterial'`
-> ByteString	`$sel:encryptedKeyMaterial:ImportKeyMaterial'`
-> ImportKeyMaterial

Create a value of ImportKeyMaterial with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:expirationModel:ImportKeyMaterial', importKeyMaterial_expirationModel - Specifies whether the key material expires. The default is KEY_MATERIAL_EXPIRES, in which case you must include the ValidTo parameter. When this parameter is set to KEY_MATERIAL_DOES_NOT_EXPIRE, you must omit the ValidTo parameter.

$sel:validTo:ImportKeyMaterial', importKeyMaterial_validTo - The time at which the imported key material expires. When the key material expires, KMS deletes the key material and the KMS key becomes unusable. You must omit this parameter when the ExpirationModel parameter is set to KEY_MATERIAL_DOES_NOT_EXPIRE. Otherwise it is required.

$sel:keyId:ImportKeyMaterial', importKeyMaterial_keyId - The identifier of the symmetric KMS key that receives the imported key material. The KMS key's Origin must be EXTERNAL. This must be the same KMS key specified in the KeyID parameter of the corresponding GetParametersForImport request.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

$sel:importToken:ImportKeyMaterial', importKeyMaterial_importToken - The import token that you received in the response to a previous GetParametersForImport request. It must be from the same response that contained the public key that you used to encrypt the key material.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

$sel:encryptedKeyMaterial:ImportKeyMaterial', importKeyMaterial_encryptedKeyMaterial - The encrypted key material to import. The key material must be encrypted with the public wrapping key that GetParametersForImport returned, using the wrapping algorithm that you specified in the same GetParametersForImport request.-- -- Note: This Lens automatically encodes and decodes Base64 data. -- The underlying isomorphism will encode to Base64 representation during -- serialisation, and decode from Base64 representation during deserialisation. -- This Lens accepts and returns only raw unencoded data.

data ImportKeyMaterialResponse Source #

See: newImportKeyMaterialResponse smart constructor.

Constructors

ImportKeyMaterialResponse' Int

Instances

Instances details

Eq ImportKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods (==) :: ImportKeyMaterialResponse -> ImportKeyMaterialResponse -> Bool # (/=) :: ImportKeyMaterialResponse -> ImportKeyMaterialResponse -> Bool #
Read ImportKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods readsPrec :: Int -> ReadS ImportKeyMaterialResponse # readList :: ReadS [ImportKeyMaterialResponse] # readPrec :: ReadPrec ImportKeyMaterialResponse # readListPrec :: ReadPrec [ImportKeyMaterialResponse] #
Show ImportKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods showsPrec :: Int -> ImportKeyMaterialResponse -> ShowS # show :: ImportKeyMaterialResponse -> String # showList :: [ImportKeyMaterialResponse] -> ShowS #
Generic ImportKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Associated Types type Rep ImportKeyMaterialResponse :: Type -> Type # Methods from :: ImportKeyMaterialResponse -> Rep ImportKeyMaterialResponse x # to :: Rep ImportKeyMaterialResponse x -> ImportKeyMaterialResponse #
NFData ImportKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial Methods rnf :: ImportKeyMaterialResponse -> () #
type Rep ImportKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.ImportKeyMaterial type Rep ImportKeyMaterialResponse = D1 ('MetaData "ImportKeyMaterialResponse" "Amazonka.KMS.ImportKeyMaterial" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ImportKeyMaterialResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newImportKeyMaterialResponse Source #

Arguments

:: Int	`$sel:httpStatus:ImportKeyMaterialResponse'`
-> ImportKeyMaterialResponse

Create a value of ImportKeyMaterialResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:httpStatus:ImportKeyMaterialResponse', importKeyMaterialResponse_httpStatus - The response's http status code.

DeleteImportedKeyMaterial

data DeleteImportedKeyMaterial Source #

See: newDeleteImportedKeyMaterial smart constructor.

Constructors

DeleteImportedKeyMaterial' Text

Instances

Instances details

Eq DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods (==) :: DeleteImportedKeyMaterial -> DeleteImportedKeyMaterial -> Bool # (/=) :: DeleteImportedKeyMaterial -> DeleteImportedKeyMaterial -> Bool #
Read DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods readsPrec :: Int -> ReadS DeleteImportedKeyMaterial # readList :: ReadS [DeleteImportedKeyMaterial] # readPrec :: ReadPrec DeleteImportedKeyMaterial # readListPrec :: ReadPrec [DeleteImportedKeyMaterial] #
Show DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods showsPrec :: Int -> DeleteImportedKeyMaterial -> ShowS # show :: DeleteImportedKeyMaterial -> String # showList :: [DeleteImportedKeyMaterial] -> ShowS #
Generic DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Associated Types type Rep DeleteImportedKeyMaterial :: Type -> Type # Methods from :: DeleteImportedKeyMaterial -> Rep DeleteImportedKeyMaterial x # to :: Rep DeleteImportedKeyMaterial x -> DeleteImportedKeyMaterial #
NFData DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods rnf :: DeleteImportedKeyMaterial -> () #
Hashable DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods hashWithSalt :: Int -> DeleteImportedKeyMaterial -> Int # hash :: DeleteImportedKeyMaterial -> Int #
ToJSON DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods toJSON :: DeleteImportedKeyMaterial -> Value # toEncoding :: DeleteImportedKeyMaterial -> Encoding # toJSONList :: [DeleteImportedKeyMaterial] -> Value # toEncodingList :: [DeleteImportedKeyMaterial] -> Encoding #
AWSRequest DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Associated Types type AWSResponse DeleteImportedKeyMaterial # Methods request :: DeleteImportedKeyMaterial -> Request DeleteImportedKeyMaterial # response :: MonadResource m => Logger -> Service -> Proxy DeleteImportedKeyMaterial -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DeleteImportedKeyMaterial))) #
ToHeaders DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods toHeaders :: DeleteImportedKeyMaterial -> [Header] #
ToPath DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods toPath :: DeleteImportedKeyMaterial -> ByteString #
ToQuery DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods toQuery :: DeleteImportedKeyMaterial -> QueryString #
type Rep DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial type Rep DeleteImportedKeyMaterial = D1 ('MetaData "DeleteImportedKeyMaterial" "Amazonka.KMS.DeleteImportedKeyMaterial" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DeleteImportedKeyMaterial'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse DeleteImportedKeyMaterial Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial type AWSResponse DeleteImportedKeyMaterial = DeleteImportedKeyMaterialResponse

newDeleteImportedKeyMaterial Source #

Arguments

:: Text	`$sel:keyId:DeleteImportedKeyMaterial'`
-> DeleteImportedKeyMaterial

Create a value of DeleteImportedKeyMaterial with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:DeleteImportedKeyMaterial', deleteImportedKeyMaterial_keyId - Identifies the KMS key from which you are deleting imported key material. The Origin of the KMS key must be EXTERNAL.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.

data DeleteImportedKeyMaterialResponse Source #

See: newDeleteImportedKeyMaterialResponse smart constructor.

Constructors

DeleteImportedKeyMaterialResponse'

Instances

Instances details

Eq DeleteImportedKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods (==) :: DeleteImportedKeyMaterialResponse -> DeleteImportedKeyMaterialResponse -> Bool # (/=) :: DeleteImportedKeyMaterialResponse -> DeleteImportedKeyMaterialResponse -> Bool #
Read DeleteImportedKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods readsPrec :: Int -> ReadS DeleteImportedKeyMaterialResponse # readList :: ReadS [DeleteImportedKeyMaterialResponse] # readPrec :: ReadPrec DeleteImportedKeyMaterialResponse # readListPrec :: ReadPrec [DeleteImportedKeyMaterialResponse] #
Show DeleteImportedKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods showsPrec :: Int -> DeleteImportedKeyMaterialResponse -> ShowS # show :: DeleteImportedKeyMaterialResponse -> String # showList :: [DeleteImportedKeyMaterialResponse] -> ShowS #
Generic DeleteImportedKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Associated Types type Rep DeleteImportedKeyMaterialResponse :: Type -> Type # Methods from :: DeleteImportedKeyMaterialResponse -> Rep DeleteImportedKeyMaterialResponse x # to :: Rep DeleteImportedKeyMaterialResponse x -> DeleteImportedKeyMaterialResponse #
NFData DeleteImportedKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial Methods rnf :: DeleteImportedKeyMaterialResponse -> () #
type Rep DeleteImportedKeyMaterialResponse Source #
Instance details Defined in Amazonka.KMS.DeleteImportedKeyMaterial type Rep DeleteImportedKeyMaterialResponse = D1 ('MetaData "DeleteImportedKeyMaterialResponse" "Amazonka.KMS.DeleteImportedKeyMaterial" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "DeleteImportedKeyMaterialResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newDeleteImportedKeyMaterialResponse :: DeleteImportedKeyMaterialResponse Source #

Create a value of DeleteImportedKeyMaterialResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

Types

AlgorithmSpec

newtype AlgorithmSpec Source #

Constructors

AlgorithmSpec'
Fields fromAlgorithmSpec :: Text

Bundled Patterns

pattern AlgorithmSpec_RSAES_OAEP_SHA_1 :: AlgorithmSpec
pattern AlgorithmSpec_RSAES_OAEP_SHA_256 :: AlgorithmSpec
pattern AlgorithmSpec_RSAES_PKCS1_V1_5 :: AlgorithmSpec

Instances

Instances details

Eq AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods (==) :: AlgorithmSpec -> AlgorithmSpec -> Bool # (/=) :: AlgorithmSpec -> AlgorithmSpec -> Bool #
Ord AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods compare :: AlgorithmSpec -> AlgorithmSpec -> Ordering # (<) :: AlgorithmSpec -> AlgorithmSpec -> Bool # (<=) :: AlgorithmSpec -> AlgorithmSpec -> Bool # (>) :: AlgorithmSpec -> AlgorithmSpec -> Bool # (>=) :: AlgorithmSpec -> AlgorithmSpec -> Bool # max :: AlgorithmSpec -> AlgorithmSpec -> AlgorithmSpec # min :: AlgorithmSpec -> AlgorithmSpec -> AlgorithmSpec #
Read AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods readsPrec :: Int -> ReadS AlgorithmSpec # readList :: ReadS [AlgorithmSpec] # readPrec :: ReadPrec AlgorithmSpec # readListPrec :: ReadPrec [AlgorithmSpec] #
Show AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods showsPrec :: Int -> AlgorithmSpec -> ShowS # show :: AlgorithmSpec -> String # showList :: [AlgorithmSpec] -> ShowS #
Generic AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Associated Types type Rep AlgorithmSpec :: Type -> Type # Methods from :: AlgorithmSpec -> Rep AlgorithmSpec x # to :: Rep AlgorithmSpec x -> AlgorithmSpec #
NFData AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods rnf :: AlgorithmSpec -> () #
Hashable AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods hashWithSalt :: Int -> AlgorithmSpec -> Int # hash :: AlgorithmSpec -> Int #
ToJSON AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods toJSON :: AlgorithmSpec -> Value # toEncoding :: AlgorithmSpec -> Encoding # toJSONList :: [AlgorithmSpec] -> Value # toEncodingList :: [AlgorithmSpec] -> Encoding #
ToJSONKey AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods toJSONKey :: ToJSONKeyFunction AlgorithmSpec # toJSONKeyList :: ToJSONKeyFunction [AlgorithmSpec] #
FromJSON AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods parseJSON :: Value -> Parser AlgorithmSpec # parseJSONList :: Value -> Parser [AlgorithmSpec] #
FromJSONKey AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods fromJSONKey :: FromJSONKeyFunction AlgorithmSpec # fromJSONKeyList :: FromJSONKeyFunction [AlgorithmSpec] #
ToLog AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods build :: AlgorithmSpec -> ByteStringBuilder #
ToHeader AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods toHeader :: HeaderName -> AlgorithmSpec -> [Header] #
ToQuery AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods toQuery :: AlgorithmSpec -> QueryString #
FromXML AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods parseXML :: [Node] -> Either String AlgorithmSpec #
ToXML AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods toXML :: AlgorithmSpec -> XML #
ToByteString AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods toBS :: AlgorithmSpec -> ByteString #
FromText AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods fromText :: Text -> Either String AlgorithmSpec #
ToText AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec Methods toText :: AlgorithmSpec -> Text #
type Rep AlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.AlgorithmSpec type Rep AlgorithmSpec = D1 ('MetaData "AlgorithmSpec" "Amazonka.KMS.Types.AlgorithmSpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "AlgorithmSpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromAlgorithmSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

ConnectionErrorCodeType

newtype ConnectionErrorCodeType Source #

Constructors

ConnectionErrorCodeType'
Fields fromConnectionErrorCodeType :: Text

Bundled Patterns

pattern ConnectionErrorCodeType_CLUSTER_NOT_FOUND :: ConnectionErrorCodeType
pattern ConnectionErrorCodeType_INSUFFICIENT_CLOUDHSM_HSMS :: ConnectionErrorCodeType
pattern ConnectionErrorCodeType_INTERNAL_ERROR :: ConnectionErrorCodeType
pattern ConnectionErrorCodeType_INVALID_CREDENTIALS :: ConnectionErrorCodeType
pattern ConnectionErrorCodeType_NETWORK_ERRORS :: ConnectionErrorCodeType
pattern ConnectionErrorCodeType_SUBNET_NOT_FOUND :: ConnectionErrorCodeType
pattern ConnectionErrorCodeType_USER_LOCKED_OUT :: ConnectionErrorCodeType
pattern ConnectionErrorCodeType_USER_LOGGED_IN :: ConnectionErrorCodeType
pattern ConnectionErrorCodeType_USER_NOT_FOUND :: ConnectionErrorCodeType

Instances

Instances details

Eq ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods (==) :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> Bool # (/=) :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> Bool #
Ord ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods compare :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> Ordering # (<) :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> Bool # (<=) :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> Bool # (>) :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> Bool # (>=) :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> Bool # max :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> ConnectionErrorCodeType # min :: ConnectionErrorCodeType -> ConnectionErrorCodeType -> ConnectionErrorCodeType #
Read ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods readsPrec :: Int -> ReadS ConnectionErrorCodeType # readList :: ReadS [ConnectionErrorCodeType] # readPrec :: ReadPrec ConnectionErrorCodeType # readListPrec :: ReadPrec [ConnectionErrorCodeType] #
Show ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods showsPrec :: Int -> ConnectionErrorCodeType -> ShowS # show :: ConnectionErrorCodeType -> String # showList :: [ConnectionErrorCodeType] -> ShowS #
Generic ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Associated Types type Rep ConnectionErrorCodeType :: Type -> Type # Methods from :: ConnectionErrorCodeType -> Rep ConnectionErrorCodeType x # to :: Rep ConnectionErrorCodeType x -> ConnectionErrorCodeType #
NFData ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods rnf :: ConnectionErrorCodeType -> () #
Hashable ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods hashWithSalt :: Int -> ConnectionErrorCodeType -> Int # hash :: ConnectionErrorCodeType -> Int #
ToJSON ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods toJSON :: ConnectionErrorCodeType -> Value # toEncoding :: ConnectionErrorCodeType -> Encoding # toJSONList :: [ConnectionErrorCodeType] -> Value # toEncodingList :: [ConnectionErrorCodeType] -> Encoding #
ToJSONKey ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods toJSONKey :: ToJSONKeyFunction ConnectionErrorCodeType # toJSONKeyList :: ToJSONKeyFunction [ConnectionErrorCodeType] #
FromJSON ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods parseJSON :: Value -> Parser ConnectionErrorCodeType # parseJSONList :: Value -> Parser [ConnectionErrorCodeType] #
FromJSONKey ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods fromJSONKey :: FromJSONKeyFunction ConnectionErrorCodeType # fromJSONKeyList :: FromJSONKeyFunction [ConnectionErrorCodeType] #
ToLog ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods build :: ConnectionErrorCodeType -> ByteStringBuilder #
ToHeader ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods toHeader :: HeaderName -> ConnectionErrorCodeType -> [Header] #
ToQuery ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods toQuery :: ConnectionErrorCodeType -> QueryString #
FromXML ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods parseXML :: [Node] -> Either String ConnectionErrorCodeType #
ToXML ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods toXML :: ConnectionErrorCodeType -> XML #
ToByteString ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods toBS :: ConnectionErrorCodeType -> ByteString #
FromText ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods fromText :: Text -> Either String ConnectionErrorCodeType #
ToText ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType Methods toText :: ConnectionErrorCodeType -> Text #
type Rep ConnectionErrorCodeType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionErrorCodeType type Rep ConnectionErrorCodeType = D1 ('MetaData "ConnectionErrorCodeType" "Amazonka.KMS.Types.ConnectionErrorCodeType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "ConnectionErrorCodeType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromConnectionErrorCodeType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

ConnectionStateType

newtype ConnectionStateType Source #

Constructors

ConnectionStateType'
Fields fromConnectionStateType :: Text

Bundled Patterns

pattern ConnectionStateType_CONNECTED :: ConnectionStateType
pattern ConnectionStateType_CONNECTING :: ConnectionStateType
pattern ConnectionStateType_DISCONNECTED :: ConnectionStateType
pattern ConnectionStateType_DISCONNECTING :: ConnectionStateType
pattern ConnectionStateType_FAILED :: ConnectionStateType

Instances

Instances details

Eq ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods (==) :: ConnectionStateType -> ConnectionStateType -> Bool # (/=) :: ConnectionStateType -> ConnectionStateType -> Bool #
Ord ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods compare :: ConnectionStateType -> ConnectionStateType -> Ordering # (<) :: ConnectionStateType -> ConnectionStateType -> Bool # (<=) :: ConnectionStateType -> ConnectionStateType -> Bool # (>) :: ConnectionStateType -> ConnectionStateType -> Bool # (>=) :: ConnectionStateType -> ConnectionStateType -> Bool # max :: ConnectionStateType -> ConnectionStateType -> ConnectionStateType # min :: ConnectionStateType -> ConnectionStateType -> ConnectionStateType #
Read ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods readsPrec :: Int -> ReadS ConnectionStateType # readList :: ReadS [ConnectionStateType] # readPrec :: ReadPrec ConnectionStateType # readListPrec :: ReadPrec [ConnectionStateType] #
Show ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods showsPrec :: Int -> ConnectionStateType -> ShowS # show :: ConnectionStateType -> String # showList :: [ConnectionStateType] -> ShowS #
Generic ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Associated Types type Rep ConnectionStateType :: Type -> Type # Methods from :: ConnectionStateType -> Rep ConnectionStateType x # to :: Rep ConnectionStateType x -> ConnectionStateType #
NFData ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods rnf :: ConnectionStateType -> () #
Hashable ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods hashWithSalt :: Int -> ConnectionStateType -> Int # hash :: ConnectionStateType -> Int #
ToJSON ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods toJSON :: ConnectionStateType -> Value # toEncoding :: ConnectionStateType -> Encoding # toJSONList :: [ConnectionStateType] -> Value # toEncodingList :: [ConnectionStateType] -> Encoding #
ToJSONKey ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods toJSONKey :: ToJSONKeyFunction ConnectionStateType # toJSONKeyList :: ToJSONKeyFunction [ConnectionStateType] #
FromJSON ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods parseJSON :: Value -> Parser ConnectionStateType # parseJSONList :: Value -> Parser [ConnectionStateType] #
FromJSONKey ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods fromJSONKey :: FromJSONKeyFunction ConnectionStateType # fromJSONKeyList :: FromJSONKeyFunction [ConnectionStateType] #
ToLog ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods build :: ConnectionStateType -> ByteStringBuilder #
ToHeader ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods toHeader :: HeaderName -> ConnectionStateType -> [Header] #
ToQuery ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods toQuery :: ConnectionStateType -> QueryString #
FromXML ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods parseXML :: [Node] -> Either String ConnectionStateType #
ToXML ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods toXML :: ConnectionStateType -> XML #
ToByteString ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods toBS :: ConnectionStateType -> ByteString #
FromText ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods fromText :: Text -> Either String ConnectionStateType #
ToText ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType Methods toText :: ConnectionStateType -> Text #
type Rep ConnectionStateType Source #
Instance details Defined in Amazonka.KMS.Types.ConnectionStateType type Rep ConnectionStateType = D1 ('MetaData "ConnectionStateType" "Amazonka.KMS.Types.ConnectionStateType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "ConnectionStateType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromConnectionStateType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

CustomerMasterKeySpec

newtype CustomerMasterKeySpec Source #

Constructors

CustomerMasterKeySpec'
Fields fromCustomerMasterKeySpec :: Text

Bundled Patterns

pattern CustomerMasterKeySpec_ECC_NIST_P256 :: CustomerMasterKeySpec
pattern CustomerMasterKeySpec_ECC_NIST_P384 :: CustomerMasterKeySpec
pattern CustomerMasterKeySpec_ECC_NIST_P521 :: CustomerMasterKeySpec
pattern CustomerMasterKeySpec_ECC_SECG_P256K1 :: CustomerMasterKeySpec
pattern CustomerMasterKeySpec_RSA_2048 :: CustomerMasterKeySpec
pattern CustomerMasterKeySpec_RSA_3072 :: CustomerMasterKeySpec
pattern CustomerMasterKeySpec_RSA_4096 :: CustomerMasterKeySpec
pattern CustomerMasterKeySpec_SYMMETRIC_DEFAULT :: CustomerMasterKeySpec

Instances

Instances details

Eq CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods (==) :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> Bool # (/=) :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> Bool #
Ord CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods compare :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> Ordering # (<) :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> Bool # (<=) :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> Bool # (>) :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> Bool # (>=) :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> Bool # max :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> CustomerMasterKeySpec # min :: CustomerMasterKeySpec -> CustomerMasterKeySpec -> CustomerMasterKeySpec #
Read CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods readsPrec :: Int -> ReadS CustomerMasterKeySpec # readList :: ReadS [CustomerMasterKeySpec] # readPrec :: ReadPrec CustomerMasterKeySpec # readListPrec :: ReadPrec [CustomerMasterKeySpec] #
Show CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods showsPrec :: Int -> CustomerMasterKeySpec -> ShowS # show :: CustomerMasterKeySpec -> String # showList :: [CustomerMasterKeySpec] -> ShowS #
Generic CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Associated Types type Rep CustomerMasterKeySpec :: Type -> Type # Methods from :: CustomerMasterKeySpec -> Rep CustomerMasterKeySpec x # to :: Rep CustomerMasterKeySpec x -> CustomerMasterKeySpec #
NFData CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods rnf :: CustomerMasterKeySpec -> () #
Hashable CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods hashWithSalt :: Int -> CustomerMasterKeySpec -> Int # hash :: CustomerMasterKeySpec -> Int #
ToJSON CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods toJSON :: CustomerMasterKeySpec -> Value # toEncoding :: CustomerMasterKeySpec -> Encoding # toJSONList :: [CustomerMasterKeySpec] -> Value # toEncodingList :: [CustomerMasterKeySpec] -> Encoding #
ToJSONKey CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods toJSONKey :: ToJSONKeyFunction CustomerMasterKeySpec # toJSONKeyList :: ToJSONKeyFunction [CustomerMasterKeySpec] #
FromJSON CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods parseJSON :: Value -> Parser CustomerMasterKeySpec # parseJSONList :: Value -> Parser [CustomerMasterKeySpec] #
FromJSONKey CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods fromJSONKey :: FromJSONKeyFunction CustomerMasterKeySpec # fromJSONKeyList :: FromJSONKeyFunction [CustomerMasterKeySpec] #
ToLog CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods build :: CustomerMasterKeySpec -> ByteStringBuilder #
ToHeader CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods toHeader :: HeaderName -> CustomerMasterKeySpec -> [Header] #
ToQuery CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods toQuery :: CustomerMasterKeySpec -> QueryString #
FromXML CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods parseXML :: [Node] -> Either String CustomerMasterKeySpec #
ToXML CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods toXML :: CustomerMasterKeySpec -> XML #
ToByteString CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods toBS :: CustomerMasterKeySpec -> ByteString #
FromText CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods fromText :: Text -> Either String CustomerMasterKeySpec #
ToText CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec Methods toText :: CustomerMasterKeySpec -> Text #
type Rep CustomerMasterKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.CustomerMasterKeySpec type Rep CustomerMasterKeySpec = D1 ('MetaData "CustomerMasterKeySpec" "Amazonka.KMS.Types.CustomerMasterKeySpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "CustomerMasterKeySpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromCustomerMasterKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

DataKeyPairSpec

newtype DataKeyPairSpec Source #

Constructors

DataKeyPairSpec'
Fields fromDataKeyPairSpec :: Text

Bundled Patterns

pattern DataKeyPairSpec_ECC_NIST_P256 :: DataKeyPairSpec
pattern DataKeyPairSpec_ECC_NIST_P384 :: DataKeyPairSpec
pattern DataKeyPairSpec_ECC_NIST_P521 :: DataKeyPairSpec
pattern DataKeyPairSpec_ECC_SECG_P256K1 :: DataKeyPairSpec
pattern DataKeyPairSpec_RSA_2048 :: DataKeyPairSpec
pattern DataKeyPairSpec_RSA_3072 :: DataKeyPairSpec
pattern DataKeyPairSpec_RSA_4096 :: DataKeyPairSpec

Instances

Instances details

Eq DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods (==) :: DataKeyPairSpec -> DataKeyPairSpec -> Bool # (/=) :: DataKeyPairSpec -> DataKeyPairSpec -> Bool #
Ord DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods compare :: DataKeyPairSpec -> DataKeyPairSpec -> Ordering # (<) :: DataKeyPairSpec -> DataKeyPairSpec -> Bool # (<=) :: DataKeyPairSpec -> DataKeyPairSpec -> Bool # (>) :: DataKeyPairSpec -> DataKeyPairSpec -> Bool # (>=) :: DataKeyPairSpec -> DataKeyPairSpec -> Bool # max :: DataKeyPairSpec -> DataKeyPairSpec -> DataKeyPairSpec # min :: DataKeyPairSpec -> DataKeyPairSpec -> DataKeyPairSpec #
Read DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods readsPrec :: Int -> ReadS DataKeyPairSpec # readList :: ReadS [DataKeyPairSpec] # readPrec :: ReadPrec DataKeyPairSpec # readListPrec :: ReadPrec [DataKeyPairSpec] #
Show DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods showsPrec :: Int -> DataKeyPairSpec -> ShowS # show :: DataKeyPairSpec -> String # showList :: [DataKeyPairSpec] -> ShowS #
Generic DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Associated Types type Rep DataKeyPairSpec :: Type -> Type # Methods from :: DataKeyPairSpec -> Rep DataKeyPairSpec x # to :: Rep DataKeyPairSpec x -> DataKeyPairSpec #
NFData DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods rnf :: DataKeyPairSpec -> () #
Hashable DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods hashWithSalt :: Int -> DataKeyPairSpec -> Int # hash :: DataKeyPairSpec -> Int #
ToJSON DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods toJSON :: DataKeyPairSpec -> Value # toEncoding :: DataKeyPairSpec -> Encoding # toJSONList :: [DataKeyPairSpec] -> Value # toEncodingList :: [DataKeyPairSpec] -> Encoding #
ToJSONKey DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods toJSONKey :: ToJSONKeyFunction DataKeyPairSpec # toJSONKeyList :: ToJSONKeyFunction [DataKeyPairSpec] #
FromJSON DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods parseJSON :: Value -> Parser DataKeyPairSpec # parseJSONList :: Value -> Parser [DataKeyPairSpec] #
FromJSONKey DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods fromJSONKey :: FromJSONKeyFunction DataKeyPairSpec # fromJSONKeyList :: FromJSONKeyFunction [DataKeyPairSpec] #
ToLog DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods build :: DataKeyPairSpec -> ByteStringBuilder #
ToHeader DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods toHeader :: HeaderName -> DataKeyPairSpec -> [Header] #
ToQuery DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods toQuery :: DataKeyPairSpec -> QueryString #
FromXML DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods parseXML :: [Node] -> Either String DataKeyPairSpec #
ToXML DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods toXML :: DataKeyPairSpec -> XML #
ToByteString DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods toBS :: DataKeyPairSpec -> ByteString #
FromText DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods fromText :: Text -> Either String DataKeyPairSpec #
ToText DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec Methods toText :: DataKeyPairSpec -> Text #
type Rep DataKeyPairSpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeyPairSpec type Rep DataKeyPairSpec = D1 ('MetaData "DataKeyPairSpec" "Amazonka.KMS.Types.DataKeyPairSpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "DataKeyPairSpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromDataKeyPairSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

DataKeySpec

newtype DataKeySpec Source #

Constructors

DataKeySpec'
Fields fromDataKeySpec :: Text

Bundled Patterns

pattern DataKeySpec_AES_128 :: DataKeySpec
pattern DataKeySpec_AES_256 :: DataKeySpec

Instances

Instances details

Eq DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods (==) :: DataKeySpec -> DataKeySpec -> Bool # (/=) :: DataKeySpec -> DataKeySpec -> Bool #
Ord DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods compare :: DataKeySpec -> DataKeySpec -> Ordering # (<) :: DataKeySpec -> DataKeySpec -> Bool # (<=) :: DataKeySpec -> DataKeySpec -> Bool # (>) :: DataKeySpec -> DataKeySpec -> Bool # (>=) :: DataKeySpec -> DataKeySpec -> Bool # max :: DataKeySpec -> DataKeySpec -> DataKeySpec # min :: DataKeySpec -> DataKeySpec -> DataKeySpec #
Read DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods readsPrec :: Int -> ReadS DataKeySpec # readList :: ReadS [DataKeySpec] # readPrec :: ReadPrec DataKeySpec # readListPrec :: ReadPrec [DataKeySpec] #
Show DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods showsPrec :: Int -> DataKeySpec -> ShowS # show :: DataKeySpec -> String # showList :: [DataKeySpec] -> ShowS #
Generic DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Associated Types type Rep DataKeySpec :: Type -> Type # Methods from :: DataKeySpec -> Rep DataKeySpec x # to :: Rep DataKeySpec x -> DataKeySpec #
NFData DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods rnf :: DataKeySpec -> () #
Hashable DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods hashWithSalt :: Int -> DataKeySpec -> Int # hash :: DataKeySpec -> Int #
ToJSON DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods toJSON :: DataKeySpec -> Value # toEncoding :: DataKeySpec -> Encoding # toJSONList :: [DataKeySpec] -> Value # toEncodingList :: [DataKeySpec] -> Encoding #
ToJSONKey DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods toJSONKey :: ToJSONKeyFunction DataKeySpec # toJSONKeyList :: ToJSONKeyFunction [DataKeySpec] #
FromJSON DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods parseJSON :: Value -> Parser DataKeySpec # parseJSONList :: Value -> Parser [DataKeySpec] #
FromJSONKey DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods fromJSONKey :: FromJSONKeyFunction DataKeySpec # fromJSONKeyList :: FromJSONKeyFunction [DataKeySpec] #
ToLog DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods build :: DataKeySpec -> ByteStringBuilder #
ToHeader DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods toHeader :: HeaderName -> DataKeySpec -> [Header] #
ToQuery DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods toQuery :: DataKeySpec -> QueryString #
FromXML DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods parseXML :: [Node] -> Either String DataKeySpec #
ToXML DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods toXML :: DataKeySpec -> XML #
ToByteString DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods toBS :: DataKeySpec -> ByteString #
FromText DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods fromText :: Text -> Either String DataKeySpec #
ToText DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec Methods toText :: DataKeySpec -> Text #
type Rep DataKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.DataKeySpec type Rep DataKeySpec = D1 ('MetaData "DataKeySpec" "Amazonka.KMS.Types.DataKeySpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "DataKeySpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromDataKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

EncryptionAlgorithmSpec

newtype EncryptionAlgorithmSpec Source #

Constructors

EncryptionAlgorithmSpec'
Fields fromEncryptionAlgorithmSpec :: Text

Bundled Patterns

pattern EncryptionAlgorithmSpec_RSAES_OAEP_SHA_1 :: EncryptionAlgorithmSpec
pattern EncryptionAlgorithmSpec_RSAES_OAEP_SHA_256 :: EncryptionAlgorithmSpec
pattern EncryptionAlgorithmSpec_SYMMETRIC_DEFAULT :: EncryptionAlgorithmSpec

Instances

Instances details

Eq EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods (==) :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> Bool # (/=) :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> Bool #
Ord EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods compare :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> Ordering # (<) :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> Bool # (<=) :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> Bool # (>) :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> Bool # (>=) :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> Bool # max :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec # min :: EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec -> EncryptionAlgorithmSpec #
Read EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods readsPrec :: Int -> ReadS EncryptionAlgorithmSpec # readList :: ReadS [EncryptionAlgorithmSpec] # readPrec :: ReadPrec EncryptionAlgorithmSpec # readListPrec :: ReadPrec [EncryptionAlgorithmSpec] #
Show EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods showsPrec :: Int -> EncryptionAlgorithmSpec -> ShowS # show :: EncryptionAlgorithmSpec -> String # showList :: [EncryptionAlgorithmSpec] -> ShowS #
Generic EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Associated Types type Rep EncryptionAlgorithmSpec :: Type -> Type # Methods from :: EncryptionAlgorithmSpec -> Rep EncryptionAlgorithmSpec x # to :: Rep EncryptionAlgorithmSpec x -> EncryptionAlgorithmSpec #
NFData EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods rnf :: EncryptionAlgorithmSpec -> () #
Hashable EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods hashWithSalt :: Int -> EncryptionAlgorithmSpec -> Int # hash :: EncryptionAlgorithmSpec -> Int #
ToJSON EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods toJSON :: EncryptionAlgorithmSpec -> Value # toEncoding :: EncryptionAlgorithmSpec -> Encoding # toJSONList :: [EncryptionAlgorithmSpec] -> Value # toEncodingList :: [EncryptionAlgorithmSpec] -> Encoding #
ToJSONKey EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods toJSONKey :: ToJSONKeyFunction EncryptionAlgorithmSpec # toJSONKeyList :: ToJSONKeyFunction [EncryptionAlgorithmSpec] #
FromJSON EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods parseJSON :: Value -> Parser EncryptionAlgorithmSpec # parseJSONList :: Value -> Parser [EncryptionAlgorithmSpec] #
FromJSONKey EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods fromJSONKey :: FromJSONKeyFunction EncryptionAlgorithmSpec # fromJSONKeyList :: FromJSONKeyFunction [EncryptionAlgorithmSpec] #
ToLog EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods build :: EncryptionAlgorithmSpec -> ByteStringBuilder #
ToHeader EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods toHeader :: HeaderName -> EncryptionAlgorithmSpec -> [Header] #
ToQuery EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods toQuery :: EncryptionAlgorithmSpec -> QueryString #
FromXML EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods parseXML :: [Node] -> Either String EncryptionAlgorithmSpec #
ToXML EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods toXML :: EncryptionAlgorithmSpec -> XML #
ToByteString EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods toBS :: EncryptionAlgorithmSpec -> ByteString #
FromText EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods fromText :: Text -> Either String EncryptionAlgorithmSpec #
ToText EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec Methods toText :: EncryptionAlgorithmSpec -> Text #
type Rep EncryptionAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.EncryptionAlgorithmSpec type Rep EncryptionAlgorithmSpec = D1 ('MetaData "EncryptionAlgorithmSpec" "Amazonka.KMS.Types.EncryptionAlgorithmSpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "EncryptionAlgorithmSpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromEncryptionAlgorithmSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

ExpirationModelType

newtype ExpirationModelType Source #

Constructors

ExpirationModelType'
Fields fromExpirationModelType :: Text

Bundled Patterns

pattern ExpirationModelType_KEY_MATERIAL_DOES_NOT_EXPIRE :: ExpirationModelType
pattern ExpirationModelType_KEY_MATERIAL_EXPIRES :: ExpirationModelType

Instances

Instances details

Eq ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods (==) :: ExpirationModelType -> ExpirationModelType -> Bool # (/=) :: ExpirationModelType -> ExpirationModelType -> Bool #
Ord ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods compare :: ExpirationModelType -> ExpirationModelType -> Ordering # (<) :: ExpirationModelType -> ExpirationModelType -> Bool # (<=) :: ExpirationModelType -> ExpirationModelType -> Bool # (>) :: ExpirationModelType -> ExpirationModelType -> Bool # (>=) :: ExpirationModelType -> ExpirationModelType -> Bool # max :: ExpirationModelType -> ExpirationModelType -> ExpirationModelType # min :: ExpirationModelType -> ExpirationModelType -> ExpirationModelType #
Read ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods readsPrec :: Int -> ReadS ExpirationModelType # readList :: ReadS [ExpirationModelType] # readPrec :: ReadPrec ExpirationModelType # readListPrec :: ReadPrec [ExpirationModelType] #
Show ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods showsPrec :: Int -> ExpirationModelType -> ShowS # show :: ExpirationModelType -> String # showList :: [ExpirationModelType] -> ShowS #
Generic ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Associated Types type Rep ExpirationModelType :: Type -> Type # Methods from :: ExpirationModelType -> Rep ExpirationModelType x # to :: Rep ExpirationModelType x -> ExpirationModelType #
NFData ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods rnf :: ExpirationModelType -> () #
Hashable ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods hashWithSalt :: Int -> ExpirationModelType -> Int # hash :: ExpirationModelType -> Int #
ToJSON ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods toJSON :: ExpirationModelType -> Value # toEncoding :: ExpirationModelType -> Encoding # toJSONList :: [ExpirationModelType] -> Value # toEncodingList :: [ExpirationModelType] -> Encoding #
ToJSONKey ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods toJSONKey :: ToJSONKeyFunction ExpirationModelType # toJSONKeyList :: ToJSONKeyFunction [ExpirationModelType] #
FromJSON ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods parseJSON :: Value -> Parser ExpirationModelType # parseJSONList :: Value -> Parser [ExpirationModelType] #
FromJSONKey ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods fromJSONKey :: FromJSONKeyFunction ExpirationModelType # fromJSONKeyList :: FromJSONKeyFunction [ExpirationModelType] #
ToLog ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods build :: ExpirationModelType -> ByteStringBuilder #
ToHeader ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods toHeader :: HeaderName -> ExpirationModelType -> [Header] #
ToQuery ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods toQuery :: ExpirationModelType -> QueryString #
FromXML ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods parseXML :: [Node] -> Either String ExpirationModelType #
ToXML ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods toXML :: ExpirationModelType -> XML #
ToByteString ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods toBS :: ExpirationModelType -> ByteString #
FromText ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods fromText :: Text -> Either String ExpirationModelType #
ToText ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType Methods toText :: ExpirationModelType -> Text #
type Rep ExpirationModelType Source #
Instance details Defined in Amazonka.KMS.Types.ExpirationModelType type Rep ExpirationModelType = D1 ('MetaData "ExpirationModelType" "Amazonka.KMS.Types.ExpirationModelType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "ExpirationModelType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromExpirationModelType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

GrantOperation

newtype GrantOperation Source #

Constructors

GrantOperation'
Fields fromGrantOperation :: Text

Bundled Patterns

pattern GrantOperation_CreateGrant :: GrantOperation
pattern GrantOperation_Decrypt :: GrantOperation
pattern GrantOperation_DescribeKey :: GrantOperation
pattern GrantOperation_Encrypt :: GrantOperation
pattern GrantOperation_GenerateDataKey :: GrantOperation
pattern GrantOperation_GenerateDataKeyPair :: GrantOperation
pattern GrantOperation_GenerateDataKeyPairWithoutPlaintext :: GrantOperation
pattern GrantOperation_GenerateDataKeyWithoutPlaintext :: GrantOperation
pattern GrantOperation_GetPublicKey :: GrantOperation
pattern GrantOperation_ReEncryptFrom :: GrantOperation
pattern GrantOperation_ReEncryptTo :: GrantOperation
pattern GrantOperation_RetireGrant :: GrantOperation
pattern GrantOperation_Sign :: GrantOperation
pattern GrantOperation_Verify :: GrantOperation

Instances

Instances details

Eq GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods (==) :: GrantOperation -> GrantOperation -> Bool # (/=) :: GrantOperation -> GrantOperation -> Bool #
Ord GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods compare :: GrantOperation -> GrantOperation -> Ordering # (<) :: GrantOperation -> GrantOperation -> Bool # (<=) :: GrantOperation -> GrantOperation -> Bool # (>) :: GrantOperation -> GrantOperation -> Bool # (>=) :: GrantOperation -> GrantOperation -> Bool # max :: GrantOperation -> GrantOperation -> GrantOperation # min :: GrantOperation -> GrantOperation -> GrantOperation #
Read GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods readsPrec :: Int -> ReadS GrantOperation # readList :: ReadS [GrantOperation] # readPrec :: ReadPrec GrantOperation # readListPrec :: ReadPrec [GrantOperation] #
Show GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods showsPrec :: Int -> GrantOperation -> ShowS # show :: GrantOperation -> String # showList :: [GrantOperation] -> ShowS #
Generic GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Associated Types type Rep GrantOperation :: Type -> Type # Methods from :: GrantOperation -> Rep GrantOperation x # to :: Rep GrantOperation x -> GrantOperation #
NFData GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods rnf :: GrantOperation -> () #
Hashable GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods hashWithSalt :: Int -> GrantOperation -> Int # hash :: GrantOperation -> Int #
ToJSON GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods toJSON :: GrantOperation -> Value # toEncoding :: GrantOperation -> Encoding # toJSONList :: [GrantOperation] -> Value # toEncodingList :: [GrantOperation] -> Encoding #
ToJSONKey GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods toJSONKey :: ToJSONKeyFunction GrantOperation # toJSONKeyList :: ToJSONKeyFunction [GrantOperation] #
FromJSON GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods parseJSON :: Value -> Parser GrantOperation # parseJSONList :: Value -> Parser [GrantOperation] #
FromJSONKey GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods fromJSONKey :: FromJSONKeyFunction GrantOperation # fromJSONKeyList :: FromJSONKeyFunction [GrantOperation] #
ToLog GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods build :: GrantOperation -> ByteStringBuilder #
ToHeader GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods toHeader :: HeaderName -> GrantOperation -> [Header] #
ToQuery GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods toQuery :: GrantOperation -> QueryString #
FromXML GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods parseXML :: [Node] -> Either String GrantOperation #
ToXML GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods toXML :: GrantOperation -> XML #
ToByteString GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods toBS :: GrantOperation -> ByteString #
FromText GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods fromText :: Text -> Either String GrantOperation #
ToText GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation Methods toText :: GrantOperation -> Text #
type Rep GrantOperation Source #
Instance details Defined in Amazonka.KMS.Types.GrantOperation type Rep GrantOperation = D1 ('MetaData "GrantOperation" "Amazonka.KMS.Types.GrantOperation" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "GrantOperation'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromGrantOperation") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

KeyManagerType

newtype KeyManagerType Source #

Constructors

KeyManagerType'
Fields fromKeyManagerType :: Text

Bundled Patterns

pattern KeyManagerType_AWS :: KeyManagerType
pattern KeyManagerType_CUSTOMER :: KeyManagerType

Instances

Instances details

Eq KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods (==) :: KeyManagerType -> KeyManagerType -> Bool # (/=) :: KeyManagerType -> KeyManagerType -> Bool #
Ord KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods compare :: KeyManagerType -> KeyManagerType -> Ordering # (<) :: KeyManagerType -> KeyManagerType -> Bool # (<=) :: KeyManagerType -> KeyManagerType -> Bool # (>) :: KeyManagerType -> KeyManagerType -> Bool # (>=) :: KeyManagerType -> KeyManagerType -> Bool # max :: KeyManagerType -> KeyManagerType -> KeyManagerType # min :: KeyManagerType -> KeyManagerType -> KeyManagerType #
Read KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods readsPrec :: Int -> ReadS KeyManagerType # readList :: ReadS [KeyManagerType] # readPrec :: ReadPrec KeyManagerType # readListPrec :: ReadPrec [KeyManagerType] #
Show KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods showsPrec :: Int -> KeyManagerType -> ShowS # show :: KeyManagerType -> String # showList :: [KeyManagerType] -> ShowS #
Generic KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Associated Types type Rep KeyManagerType :: Type -> Type # Methods from :: KeyManagerType -> Rep KeyManagerType x # to :: Rep KeyManagerType x -> KeyManagerType #
NFData KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods rnf :: KeyManagerType -> () #
Hashable KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods hashWithSalt :: Int -> KeyManagerType -> Int # hash :: KeyManagerType -> Int #
ToJSON KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods toJSON :: KeyManagerType -> Value # toEncoding :: KeyManagerType -> Encoding # toJSONList :: [KeyManagerType] -> Value # toEncodingList :: [KeyManagerType] -> Encoding #
ToJSONKey KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods toJSONKey :: ToJSONKeyFunction KeyManagerType # toJSONKeyList :: ToJSONKeyFunction [KeyManagerType] #
FromJSON KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods parseJSON :: Value -> Parser KeyManagerType # parseJSONList :: Value -> Parser [KeyManagerType] #
FromJSONKey KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods fromJSONKey :: FromJSONKeyFunction KeyManagerType # fromJSONKeyList :: FromJSONKeyFunction [KeyManagerType] #
ToLog KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods build :: KeyManagerType -> ByteStringBuilder #
ToHeader KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods toHeader :: HeaderName -> KeyManagerType -> [Header] #
ToQuery KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods toQuery :: KeyManagerType -> QueryString #
FromXML KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods parseXML :: [Node] -> Either String KeyManagerType #
ToXML KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods toXML :: KeyManagerType -> XML #
ToByteString KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods toBS :: KeyManagerType -> ByteString #
FromText KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods fromText :: Text -> Either String KeyManagerType #
ToText KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType Methods toText :: KeyManagerType -> Text #
type Rep KeyManagerType Source #
Instance details Defined in Amazonka.KMS.Types.KeyManagerType type Rep KeyManagerType = D1 ('MetaData "KeyManagerType" "Amazonka.KMS.Types.KeyManagerType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "KeyManagerType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromKeyManagerType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

KeySpec

newtype KeySpec Source #

Constructors

KeySpec'
Fields fromKeySpec :: Text

Bundled Patterns

pattern KeySpec_ECC_NIST_P256 :: KeySpec
pattern KeySpec_ECC_NIST_P384 :: KeySpec
pattern KeySpec_ECC_NIST_P521 :: KeySpec
pattern KeySpec_ECC_SECG_P256K1 :: KeySpec
pattern KeySpec_RSA_2048 :: KeySpec
pattern KeySpec_RSA_3072 :: KeySpec
pattern KeySpec_RSA_4096 :: KeySpec
pattern KeySpec_SYMMETRIC_DEFAULT :: KeySpec

Instances

Instances details

Eq KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods (==) :: KeySpec -> KeySpec -> Bool # (/=) :: KeySpec -> KeySpec -> Bool #
Ord KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods compare :: KeySpec -> KeySpec -> Ordering # (<) :: KeySpec -> KeySpec -> Bool # (<=) :: KeySpec -> KeySpec -> Bool # (>) :: KeySpec -> KeySpec -> Bool # (>=) :: KeySpec -> KeySpec -> Bool # max :: KeySpec -> KeySpec -> KeySpec # min :: KeySpec -> KeySpec -> KeySpec #
Read KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods readsPrec :: Int -> ReadS KeySpec # readList :: ReadS [KeySpec] # readPrec :: ReadPrec KeySpec # readListPrec :: ReadPrec [KeySpec] #
Show KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods showsPrec :: Int -> KeySpec -> ShowS # show :: KeySpec -> String # showList :: [KeySpec] -> ShowS #
Generic KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Associated Types type Rep KeySpec :: Type -> Type # Methods from :: KeySpec -> Rep KeySpec x # to :: Rep KeySpec x -> KeySpec #
NFData KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods rnf :: KeySpec -> () #
Hashable KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods hashWithSalt :: Int -> KeySpec -> Int # hash :: KeySpec -> Int #
ToJSON KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods toJSON :: KeySpec -> Value # toEncoding :: KeySpec -> Encoding # toJSONList :: [KeySpec] -> Value # toEncodingList :: [KeySpec] -> Encoding #
ToJSONKey KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods toJSONKey :: ToJSONKeyFunction KeySpec # toJSONKeyList :: ToJSONKeyFunction [KeySpec] #
FromJSON KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods parseJSON :: Value -> Parser KeySpec # parseJSONList :: Value -> Parser [KeySpec] #
FromJSONKey KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods fromJSONKey :: FromJSONKeyFunction KeySpec # fromJSONKeyList :: FromJSONKeyFunction [KeySpec] #
ToLog KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods build :: KeySpec -> ByteStringBuilder #
ToHeader KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods toHeader :: HeaderName -> KeySpec -> [Header] #
ToQuery KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods toQuery :: KeySpec -> QueryString #
FromXML KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods parseXML :: [Node] -> Either String KeySpec #
ToXML KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods toXML :: KeySpec -> XML #
ToByteString KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods toBS :: KeySpec -> ByteString #
FromText KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods fromText :: Text -> Either String KeySpec #
ToText KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec Methods toText :: KeySpec -> Text #
type Rep KeySpec Source #
Instance details Defined in Amazonka.KMS.Types.KeySpec type Rep KeySpec = D1 ('MetaData "KeySpec" "Amazonka.KMS.Types.KeySpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "KeySpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

KeyState

newtype KeyState Source #

Constructors

KeyState'
Fields fromKeyState :: Text

Bundled Patterns

pattern KeyState_Creating :: KeyState
pattern KeyState_Disabled :: KeyState
pattern KeyState_Enabled :: KeyState
pattern KeyState_PendingDeletion :: KeyState
pattern KeyState_PendingImport :: KeyState
pattern KeyState_PendingReplicaDeletion :: KeyState
pattern KeyState_Unavailable :: KeyState
pattern KeyState_Updating :: KeyState

Instances

Instances details

Eq KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods (==) :: KeyState -> KeyState -> Bool # (/=) :: KeyState -> KeyState -> Bool #
Ord KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods compare :: KeyState -> KeyState -> Ordering # (<) :: KeyState -> KeyState -> Bool # (<=) :: KeyState -> KeyState -> Bool # (>) :: KeyState -> KeyState -> Bool # (>=) :: KeyState -> KeyState -> Bool # max :: KeyState -> KeyState -> KeyState # min :: KeyState -> KeyState -> KeyState #
Read KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods readsPrec :: Int -> ReadS KeyState # readList :: ReadS [KeyState] # readPrec :: ReadPrec KeyState # readListPrec :: ReadPrec [KeyState] #
Show KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods showsPrec :: Int -> KeyState -> ShowS # show :: KeyState -> String # showList :: [KeyState] -> ShowS #
Generic KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Associated Types type Rep KeyState :: Type -> Type # Methods from :: KeyState -> Rep KeyState x # to :: Rep KeyState x -> KeyState #
NFData KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods rnf :: KeyState -> () #
Hashable KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods hashWithSalt :: Int -> KeyState -> Int # hash :: KeyState -> Int #
ToJSON KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods toJSON :: KeyState -> Value # toEncoding :: KeyState -> Encoding # toJSONList :: [KeyState] -> Value # toEncodingList :: [KeyState] -> Encoding #
ToJSONKey KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods toJSONKey :: ToJSONKeyFunction KeyState # toJSONKeyList :: ToJSONKeyFunction [KeyState] #
FromJSON KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods parseJSON :: Value -> Parser KeyState # parseJSONList :: Value -> Parser [KeyState] #
FromJSONKey KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods fromJSONKey :: FromJSONKeyFunction KeyState # fromJSONKeyList :: FromJSONKeyFunction [KeyState] #
ToLog KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods build :: KeyState -> ByteStringBuilder #
ToHeader KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods toHeader :: HeaderName -> KeyState -> [Header] #
ToQuery KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods toQuery :: KeyState -> QueryString #
FromXML KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods parseXML :: [Node] -> Either String KeyState #
ToXML KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods toXML :: KeyState -> XML #
ToByteString KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods toBS :: KeyState -> ByteString #
FromText KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods fromText :: Text -> Either String KeyState #
ToText KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState Methods toText :: KeyState -> Text #
type Rep KeyState Source #
Instance details Defined in Amazonka.KMS.Types.KeyState type Rep KeyState = D1 ('MetaData "KeyState" "Amazonka.KMS.Types.KeyState" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "KeyState'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromKeyState") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

KeyUsageType

newtype KeyUsageType Source #

Constructors

KeyUsageType'
Fields fromKeyUsageType :: Text

Bundled Patterns

pattern KeyUsageType_ENCRYPT_DECRYPT :: KeyUsageType
pattern KeyUsageType_SIGN_VERIFY :: KeyUsageType

Instances

Instances details

Eq KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods (==) :: KeyUsageType -> KeyUsageType -> Bool # (/=) :: KeyUsageType -> KeyUsageType -> Bool #
Ord KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods compare :: KeyUsageType -> KeyUsageType -> Ordering # (<) :: KeyUsageType -> KeyUsageType -> Bool # (<=) :: KeyUsageType -> KeyUsageType -> Bool # (>) :: KeyUsageType -> KeyUsageType -> Bool # (>=) :: KeyUsageType -> KeyUsageType -> Bool # max :: KeyUsageType -> KeyUsageType -> KeyUsageType # min :: KeyUsageType -> KeyUsageType -> KeyUsageType #
Read KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods readsPrec :: Int -> ReadS KeyUsageType # readList :: ReadS [KeyUsageType] # readPrec :: ReadPrec KeyUsageType # readListPrec :: ReadPrec [KeyUsageType] #
Show KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods showsPrec :: Int -> KeyUsageType -> ShowS # show :: KeyUsageType -> String # showList :: [KeyUsageType] -> ShowS #
Generic KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Associated Types type Rep KeyUsageType :: Type -> Type # Methods from :: KeyUsageType -> Rep KeyUsageType x # to :: Rep KeyUsageType x -> KeyUsageType #
NFData KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods rnf :: KeyUsageType -> () #
Hashable KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods hashWithSalt :: Int -> KeyUsageType -> Int # hash :: KeyUsageType -> Int #
ToJSON KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods toJSON :: KeyUsageType -> Value # toEncoding :: KeyUsageType -> Encoding # toJSONList :: [KeyUsageType] -> Value # toEncodingList :: [KeyUsageType] -> Encoding #
ToJSONKey KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods toJSONKey :: ToJSONKeyFunction KeyUsageType # toJSONKeyList :: ToJSONKeyFunction [KeyUsageType] #
FromJSON KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods parseJSON :: Value -> Parser KeyUsageType # parseJSONList :: Value -> Parser [KeyUsageType] #
FromJSONKey KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods fromJSONKey :: FromJSONKeyFunction KeyUsageType # fromJSONKeyList :: FromJSONKeyFunction [KeyUsageType] #
ToLog KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods build :: KeyUsageType -> ByteStringBuilder #
ToHeader KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods toHeader :: HeaderName -> KeyUsageType -> [Header] #
ToQuery KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods toQuery :: KeyUsageType -> QueryString #
FromXML KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods parseXML :: [Node] -> Either String KeyUsageType #
ToXML KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods toXML :: KeyUsageType -> XML #
ToByteString KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods toBS :: KeyUsageType -> ByteString #
FromText KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods fromText :: Text -> Either String KeyUsageType #
ToText KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType Methods toText :: KeyUsageType -> Text #
type Rep KeyUsageType Source #
Instance details Defined in Amazonka.KMS.Types.KeyUsageType type Rep KeyUsageType = D1 ('MetaData "KeyUsageType" "Amazonka.KMS.Types.KeyUsageType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "KeyUsageType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromKeyUsageType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

MessageType

newtype MessageType Source #

Constructors

MessageType'
Fields fromMessageType :: Text

Bundled Patterns

pattern MessageType_DIGEST :: MessageType
pattern MessageType_RAW :: MessageType

Instances

Instances details

Eq MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods (==) :: MessageType -> MessageType -> Bool # (/=) :: MessageType -> MessageType -> Bool #
Ord MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods compare :: MessageType -> MessageType -> Ordering # (<) :: MessageType -> MessageType -> Bool # (<=) :: MessageType -> MessageType -> Bool # (>) :: MessageType -> MessageType -> Bool # (>=) :: MessageType -> MessageType -> Bool # max :: MessageType -> MessageType -> MessageType # min :: MessageType -> MessageType -> MessageType #
Read MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods readsPrec :: Int -> ReadS MessageType # readList :: ReadS [MessageType] # readPrec :: ReadPrec MessageType # readListPrec :: ReadPrec [MessageType] #
Show MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods showsPrec :: Int -> MessageType -> ShowS # show :: MessageType -> String # showList :: [MessageType] -> ShowS #
Generic MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Associated Types type Rep MessageType :: Type -> Type # Methods from :: MessageType -> Rep MessageType x # to :: Rep MessageType x -> MessageType #
NFData MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods rnf :: MessageType -> () #
Hashable MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods hashWithSalt :: Int -> MessageType -> Int # hash :: MessageType -> Int #
ToJSON MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods toJSON :: MessageType -> Value # toEncoding :: MessageType -> Encoding # toJSONList :: [MessageType] -> Value # toEncodingList :: [MessageType] -> Encoding #
ToJSONKey MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods toJSONKey :: ToJSONKeyFunction MessageType # toJSONKeyList :: ToJSONKeyFunction [MessageType] #
FromJSON MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods parseJSON :: Value -> Parser MessageType # parseJSONList :: Value -> Parser [MessageType] #
FromJSONKey MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods fromJSONKey :: FromJSONKeyFunction MessageType # fromJSONKeyList :: FromJSONKeyFunction [MessageType] #
ToLog MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods build :: MessageType -> ByteStringBuilder #
ToHeader MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods toHeader :: HeaderName -> MessageType -> [Header] #
ToQuery MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods toQuery :: MessageType -> QueryString #
FromXML MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods parseXML :: [Node] -> Either String MessageType #
ToXML MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods toXML :: MessageType -> XML #
ToByteString MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods toBS :: MessageType -> ByteString #
FromText MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods fromText :: Text -> Either String MessageType #
ToText MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType Methods toText :: MessageType -> Text #
type Rep MessageType Source #
Instance details Defined in Amazonka.KMS.Types.MessageType type Rep MessageType = D1 ('MetaData "MessageType" "Amazonka.KMS.Types.MessageType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "MessageType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromMessageType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

MultiRegionKeyType

newtype MultiRegionKeyType Source #

Constructors

MultiRegionKeyType'
Fields fromMultiRegionKeyType :: Text

Bundled Patterns

pattern MultiRegionKeyType_PRIMARY :: MultiRegionKeyType
pattern MultiRegionKeyType_REPLICA :: MultiRegionKeyType

Instances

Instances details

Eq MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods (==) :: MultiRegionKeyType -> MultiRegionKeyType -> Bool # (/=) :: MultiRegionKeyType -> MultiRegionKeyType -> Bool #
Ord MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods compare :: MultiRegionKeyType -> MultiRegionKeyType -> Ordering # (<) :: MultiRegionKeyType -> MultiRegionKeyType -> Bool # (<=) :: MultiRegionKeyType -> MultiRegionKeyType -> Bool # (>) :: MultiRegionKeyType -> MultiRegionKeyType -> Bool # (>=) :: MultiRegionKeyType -> MultiRegionKeyType -> Bool # max :: MultiRegionKeyType -> MultiRegionKeyType -> MultiRegionKeyType # min :: MultiRegionKeyType -> MultiRegionKeyType -> MultiRegionKeyType #
Read MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods readsPrec :: Int -> ReadS MultiRegionKeyType # readList :: ReadS [MultiRegionKeyType] # readPrec :: ReadPrec MultiRegionKeyType # readListPrec :: ReadPrec [MultiRegionKeyType] #
Show MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods showsPrec :: Int -> MultiRegionKeyType -> ShowS # show :: MultiRegionKeyType -> String # showList :: [MultiRegionKeyType] -> ShowS #
Generic MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Associated Types type Rep MultiRegionKeyType :: Type -> Type # Methods from :: MultiRegionKeyType -> Rep MultiRegionKeyType x # to :: Rep MultiRegionKeyType x -> MultiRegionKeyType #
NFData MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods rnf :: MultiRegionKeyType -> () #
Hashable MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods hashWithSalt :: Int -> MultiRegionKeyType -> Int # hash :: MultiRegionKeyType -> Int #
ToJSON MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods toJSON :: MultiRegionKeyType -> Value # toEncoding :: MultiRegionKeyType -> Encoding # toJSONList :: [MultiRegionKeyType] -> Value # toEncodingList :: [MultiRegionKeyType] -> Encoding #
ToJSONKey MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods toJSONKey :: ToJSONKeyFunction MultiRegionKeyType # toJSONKeyList :: ToJSONKeyFunction [MultiRegionKeyType] #
FromJSON MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods parseJSON :: Value -> Parser MultiRegionKeyType # parseJSONList :: Value -> Parser [MultiRegionKeyType] #
FromJSONKey MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods fromJSONKey :: FromJSONKeyFunction MultiRegionKeyType # fromJSONKeyList :: FromJSONKeyFunction [MultiRegionKeyType] #
ToLog MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods build :: MultiRegionKeyType -> ByteStringBuilder #
ToHeader MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods toHeader :: HeaderName -> MultiRegionKeyType -> [Header] #
ToQuery MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods toQuery :: MultiRegionKeyType -> QueryString #
FromXML MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods parseXML :: [Node] -> Either String MultiRegionKeyType #
ToXML MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods toXML :: MultiRegionKeyType -> XML #
ToByteString MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods toBS :: MultiRegionKeyType -> ByteString #
FromText MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods fromText :: Text -> Either String MultiRegionKeyType #
ToText MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType Methods toText :: MultiRegionKeyType -> Text #
type Rep MultiRegionKeyType Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKeyType type Rep MultiRegionKeyType = D1 ('MetaData "MultiRegionKeyType" "Amazonka.KMS.Types.MultiRegionKeyType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "MultiRegionKeyType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromMultiRegionKeyType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

OriginType

newtype OriginType Source #

Constructors

OriginType'
Fields fromOriginType :: Text

Bundled Patterns

pattern OriginType_AWS_CLOUDHSM :: OriginType
pattern OriginType_AWS_KMS :: OriginType
pattern OriginType_EXTERNAL :: OriginType

Instances

Instances details

Eq OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods (==) :: OriginType -> OriginType -> Bool # (/=) :: OriginType -> OriginType -> Bool #
Ord OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods compare :: OriginType -> OriginType -> Ordering # (<) :: OriginType -> OriginType -> Bool # (<=) :: OriginType -> OriginType -> Bool # (>) :: OriginType -> OriginType -> Bool # (>=) :: OriginType -> OriginType -> Bool # max :: OriginType -> OriginType -> OriginType # min :: OriginType -> OriginType -> OriginType #
Read OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods readsPrec :: Int -> ReadS OriginType # readList :: ReadS [OriginType] # readPrec :: ReadPrec OriginType # readListPrec :: ReadPrec [OriginType] #
Show OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods showsPrec :: Int -> OriginType -> ShowS # show :: OriginType -> String # showList :: [OriginType] -> ShowS #
Generic OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Associated Types type Rep OriginType :: Type -> Type # Methods from :: OriginType -> Rep OriginType x # to :: Rep OriginType x -> OriginType #
NFData OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods rnf :: OriginType -> () #
Hashable OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods hashWithSalt :: Int -> OriginType -> Int # hash :: OriginType -> Int #
ToJSON OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods toJSON :: OriginType -> Value # toEncoding :: OriginType -> Encoding # toJSONList :: [OriginType] -> Value # toEncodingList :: [OriginType] -> Encoding #
ToJSONKey OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods toJSONKey :: ToJSONKeyFunction OriginType # toJSONKeyList :: ToJSONKeyFunction [OriginType] #
FromJSON OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods parseJSON :: Value -> Parser OriginType # parseJSONList :: Value -> Parser [OriginType] #
FromJSONKey OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods fromJSONKey :: FromJSONKeyFunction OriginType # fromJSONKeyList :: FromJSONKeyFunction [OriginType] #
ToLog OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods build :: OriginType -> ByteStringBuilder #
ToHeader OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods toHeader :: HeaderName -> OriginType -> [Header] #
ToQuery OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods toQuery :: OriginType -> QueryString #
FromXML OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods parseXML :: [Node] -> Either String OriginType #
ToXML OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods toXML :: OriginType -> XML #
ToByteString OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods toBS :: OriginType -> ByteString #
FromText OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods fromText :: Text -> Either String OriginType #
ToText OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType Methods toText :: OriginType -> Text #
type Rep OriginType Source #
Instance details Defined in Amazonka.KMS.Types.OriginType type Rep OriginType = D1 ('MetaData "OriginType" "Amazonka.KMS.Types.OriginType" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "OriginType'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromOriginType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

SigningAlgorithmSpec

newtype SigningAlgorithmSpec Source #

Constructors

SigningAlgorithmSpec'
Fields fromSigningAlgorithmSpec :: Text

Bundled Patterns

pattern SigningAlgorithmSpec_ECDSA_SHA_256 :: SigningAlgorithmSpec
pattern SigningAlgorithmSpec_ECDSA_SHA_384 :: SigningAlgorithmSpec
pattern SigningAlgorithmSpec_ECDSA_SHA_512 :: SigningAlgorithmSpec
pattern SigningAlgorithmSpec_RSASSA_PKCS1_V1_5_SHA_256 :: SigningAlgorithmSpec
pattern SigningAlgorithmSpec_RSASSA_PKCS1_V1_5_SHA_384 :: SigningAlgorithmSpec
pattern SigningAlgorithmSpec_RSASSA_PKCS1_V1_5_SHA_512 :: SigningAlgorithmSpec
pattern SigningAlgorithmSpec_RSASSA_PSS_SHA_256 :: SigningAlgorithmSpec
pattern SigningAlgorithmSpec_RSASSA_PSS_SHA_384 :: SigningAlgorithmSpec
pattern SigningAlgorithmSpec_RSASSA_PSS_SHA_512 :: SigningAlgorithmSpec

Instances

Instances details

Eq SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods (==) :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> Bool # (/=) :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> Bool #
Ord SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods compare :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> Ordering # (<) :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> Bool # (<=) :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> Bool # (>) :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> Bool # (>=) :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> Bool # max :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> SigningAlgorithmSpec # min :: SigningAlgorithmSpec -> SigningAlgorithmSpec -> SigningAlgorithmSpec #
Read SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods readsPrec :: Int -> ReadS SigningAlgorithmSpec # readList :: ReadS [SigningAlgorithmSpec] # readPrec :: ReadPrec SigningAlgorithmSpec # readListPrec :: ReadPrec [SigningAlgorithmSpec] #
Show SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods showsPrec :: Int -> SigningAlgorithmSpec -> ShowS # show :: SigningAlgorithmSpec -> String # showList :: [SigningAlgorithmSpec] -> ShowS #
Generic SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Associated Types type Rep SigningAlgorithmSpec :: Type -> Type # Methods from :: SigningAlgorithmSpec -> Rep SigningAlgorithmSpec x # to :: Rep SigningAlgorithmSpec x -> SigningAlgorithmSpec #
NFData SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods rnf :: SigningAlgorithmSpec -> () #
Hashable SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods hashWithSalt :: Int -> SigningAlgorithmSpec -> Int # hash :: SigningAlgorithmSpec -> Int #
ToJSON SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods toJSON :: SigningAlgorithmSpec -> Value # toEncoding :: SigningAlgorithmSpec -> Encoding # toJSONList :: [SigningAlgorithmSpec] -> Value # toEncodingList :: [SigningAlgorithmSpec] -> Encoding #
ToJSONKey SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods toJSONKey :: ToJSONKeyFunction SigningAlgorithmSpec # toJSONKeyList :: ToJSONKeyFunction [SigningAlgorithmSpec] #
FromJSON SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods parseJSON :: Value -> Parser SigningAlgorithmSpec # parseJSONList :: Value -> Parser [SigningAlgorithmSpec] #
FromJSONKey SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods fromJSONKey :: FromJSONKeyFunction SigningAlgorithmSpec # fromJSONKeyList :: FromJSONKeyFunction [SigningAlgorithmSpec] #
ToLog SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods build :: SigningAlgorithmSpec -> ByteStringBuilder #
ToHeader SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods toHeader :: HeaderName -> SigningAlgorithmSpec -> [Header] #
ToQuery SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods toQuery :: SigningAlgorithmSpec -> QueryString #
FromXML SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods parseXML :: [Node] -> Either String SigningAlgorithmSpec #
ToXML SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods toXML :: SigningAlgorithmSpec -> XML #
ToByteString SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods toBS :: SigningAlgorithmSpec -> ByteString #
FromText SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods fromText :: Text -> Either String SigningAlgorithmSpec #
ToText SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec Methods toText :: SigningAlgorithmSpec -> Text #
type Rep SigningAlgorithmSpec Source #
Instance details Defined in Amazonka.KMS.Types.SigningAlgorithmSpec type Rep SigningAlgorithmSpec = D1 ('MetaData "SigningAlgorithmSpec" "Amazonka.KMS.Types.SigningAlgorithmSpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "SigningAlgorithmSpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromSigningAlgorithmSpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

WrappingKeySpec

newtype WrappingKeySpec Source #

Constructors

WrappingKeySpec'
Fields fromWrappingKeySpec :: Text

Bundled Patterns

pattern WrappingKeySpec_RSA_2048 :: WrappingKeySpec

Instances

Instances details

Eq WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods (==) :: WrappingKeySpec -> WrappingKeySpec -> Bool # (/=) :: WrappingKeySpec -> WrappingKeySpec -> Bool #
Ord WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods compare :: WrappingKeySpec -> WrappingKeySpec -> Ordering # (<) :: WrappingKeySpec -> WrappingKeySpec -> Bool # (<=) :: WrappingKeySpec -> WrappingKeySpec -> Bool # (>) :: WrappingKeySpec -> WrappingKeySpec -> Bool # (>=) :: WrappingKeySpec -> WrappingKeySpec -> Bool # max :: WrappingKeySpec -> WrappingKeySpec -> WrappingKeySpec # min :: WrappingKeySpec -> WrappingKeySpec -> WrappingKeySpec #
Read WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods readsPrec :: Int -> ReadS WrappingKeySpec # readList :: ReadS [WrappingKeySpec] # readPrec :: ReadPrec WrappingKeySpec # readListPrec :: ReadPrec [WrappingKeySpec] #
Show WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods showsPrec :: Int -> WrappingKeySpec -> ShowS # show :: WrappingKeySpec -> String # showList :: [WrappingKeySpec] -> ShowS #
Generic WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Associated Types type Rep WrappingKeySpec :: Type -> Type # Methods from :: WrappingKeySpec -> Rep WrappingKeySpec x # to :: Rep WrappingKeySpec x -> WrappingKeySpec #
NFData WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods rnf :: WrappingKeySpec -> () #
Hashable WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods hashWithSalt :: Int -> WrappingKeySpec -> Int # hash :: WrappingKeySpec -> Int #
ToJSON WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods toJSON :: WrappingKeySpec -> Value # toEncoding :: WrappingKeySpec -> Encoding # toJSONList :: [WrappingKeySpec] -> Value # toEncodingList :: [WrappingKeySpec] -> Encoding #
ToJSONKey WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods toJSONKey :: ToJSONKeyFunction WrappingKeySpec # toJSONKeyList :: ToJSONKeyFunction [WrappingKeySpec] #
FromJSON WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods parseJSON :: Value -> Parser WrappingKeySpec # parseJSONList :: Value -> Parser [WrappingKeySpec] #
FromJSONKey WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods fromJSONKey :: FromJSONKeyFunction WrappingKeySpec # fromJSONKeyList :: FromJSONKeyFunction [WrappingKeySpec] #
ToLog WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods build :: WrappingKeySpec -> ByteStringBuilder #
ToHeader WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods toHeader :: HeaderName -> WrappingKeySpec -> [Header] #
ToQuery WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods toQuery :: WrappingKeySpec -> QueryString #
FromXML WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods parseXML :: [Node] -> Either String WrappingKeySpec #
ToXML WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods toXML :: WrappingKeySpec -> XML #
ToByteString WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods toBS :: WrappingKeySpec -> ByteString #
FromText WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods fromText :: Text -> Either String WrappingKeySpec #
ToText WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec Methods toText :: WrappingKeySpec -> Text #
type Rep WrappingKeySpec Source #
Instance details Defined in Amazonka.KMS.Types.WrappingKeySpec type Rep WrappingKeySpec = D1 ('MetaData "WrappingKeySpec" "Amazonka.KMS.Types.WrappingKeySpec" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'True) (C1 ('MetaCons "WrappingKeySpec'" 'PrefixI 'True) (S1 ('MetaSel ('Just "fromWrappingKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 Text)))

AliasListEntry

data AliasListEntry Source #

Contains information about an alias.

See: newAliasListEntry smart constructor.

Constructors

AliasListEntry' (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe POSIX) (Maybe Text)

Instances

Instances details

Eq AliasListEntry Source #
Instance details Defined in Amazonka.KMS.Types.AliasListEntry Methods (==) :: AliasListEntry -> AliasListEntry -> Bool # (/=) :: AliasListEntry -> AliasListEntry -> Bool #
Read AliasListEntry Source #
Instance details Defined in Amazonka.KMS.Types.AliasListEntry Methods readsPrec :: Int -> ReadS AliasListEntry # readList :: ReadS [AliasListEntry] # readPrec :: ReadPrec AliasListEntry # readListPrec :: ReadPrec [AliasListEntry] #
Show AliasListEntry Source #
Instance details Defined in Amazonka.KMS.Types.AliasListEntry Methods showsPrec :: Int -> AliasListEntry -> ShowS # show :: AliasListEntry -> String # showList :: [AliasListEntry] -> ShowS #
Generic AliasListEntry Source #
Instance details Defined in Amazonka.KMS.Types.AliasListEntry Associated Types type Rep AliasListEntry :: Type -> Type # Methods from :: AliasListEntry -> Rep AliasListEntry x # to :: Rep AliasListEntry x -> AliasListEntry #
NFData AliasListEntry Source #
Instance details Defined in Amazonka.KMS.Types.AliasListEntry Methods rnf :: AliasListEntry -> () #
Hashable AliasListEntry Source #
Instance details Defined in Amazonka.KMS.Types.AliasListEntry Methods hashWithSalt :: Int -> AliasListEntry -> Int # hash :: AliasListEntry -> Int #
FromJSON AliasListEntry Source #
Instance details Defined in Amazonka.KMS.Types.AliasListEntry Methods parseJSON :: Value -> Parser AliasListEntry # parseJSONList :: Value -> Parser [AliasListEntry] #
type Rep AliasListEntry Source #
Instance details Defined in Amazonka.KMS.Types.AliasListEntry type Rep AliasListEntry = D1 ('MetaData "AliasListEntry" "Amazonka.KMS.Types.AliasListEntry" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "AliasListEntry'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "targetKeyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "aliasName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "creationDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :: (S1 ('MetaSel ('Just "lastUpdatedDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :: S1 ('MetaSel ('Just "aliasArn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))))

newAliasListEntry :: AliasListEntry Source #

Create a value of AliasListEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:targetKeyId:AliasListEntry', aliasListEntry_targetKeyId - String that contains the key identifier of the KMS key associated with the alias.

$sel:aliasName:AliasListEntry', aliasListEntry_aliasName - String that contains the alias. This value begins with alias/.

$sel:creationDate:AliasListEntry', aliasListEntry_creationDate - Date and time that the alias was most recently created in the account and Region. Formatted as Unix time.

$sel:lastUpdatedDate:AliasListEntry', aliasListEntry_lastUpdatedDate - Date and time that the alias was most recently associated with a KMS key in the account and Region. Formatted as Unix time.

$sel:aliasArn:AliasListEntry', aliasListEntry_aliasArn - String that contains the key ARN.

CustomKeyStoresListEntry

data CustomKeyStoresListEntry Source #

Contains information about each custom key store in the custom key store list.

See: newCustomKeyStoresListEntry smart constructor.

Constructors

CustomKeyStoresListEntry' (Maybe Text) (Maybe Text) (Maybe ConnectionErrorCodeType) (Maybe POSIX) (Maybe Text) (Maybe Text) (Maybe ConnectionStateType)

Instances

Instances details

Eq CustomKeyStoresListEntry Source #
Instance details Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry Methods (==) :: CustomKeyStoresListEntry -> CustomKeyStoresListEntry -> Bool # (/=) :: CustomKeyStoresListEntry -> CustomKeyStoresListEntry -> Bool #
Read CustomKeyStoresListEntry Source #
Instance details Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry Methods readsPrec :: Int -> ReadS CustomKeyStoresListEntry # readList :: ReadS [CustomKeyStoresListEntry] # readPrec :: ReadPrec CustomKeyStoresListEntry # readListPrec :: ReadPrec [CustomKeyStoresListEntry] #
Show CustomKeyStoresListEntry Source #
Instance details Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry Methods showsPrec :: Int -> CustomKeyStoresListEntry -> ShowS # show :: CustomKeyStoresListEntry -> String # showList :: [CustomKeyStoresListEntry] -> ShowS #
Generic CustomKeyStoresListEntry Source #
Instance details Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry Associated Types type Rep CustomKeyStoresListEntry :: Type -> Type # Methods from :: CustomKeyStoresListEntry -> Rep CustomKeyStoresListEntry x # to :: Rep CustomKeyStoresListEntry x -> CustomKeyStoresListEntry #
NFData CustomKeyStoresListEntry Source #
Instance details Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry Methods rnf :: CustomKeyStoresListEntry -> () #
Hashable CustomKeyStoresListEntry Source #
Instance details Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry Methods hashWithSalt :: Int -> CustomKeyStoresListEntry -> Int # hash :: CustomKeyStoresListEntry -> Int #
FromJSON CustomKeyStoresListEntry Source #
Instance details Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry Methods parseJSON :: Value -> Parser CustomKeyStoresListEntry # parseJSONList :: Value -> Parser [CustomKeyStoresListEntry] #
type Rep CustomKeyStoresListEntry Source #
Instance details Defined in Amazonka.KMS.Types.CustomKeyStoresListEntry type Rep CustomKeyStoresListEntry = D1 ('MetaData "CustomKeyStoresListEntry" "Amazonka.KMS.Types.CustomKeyStoresListEntry" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "CustomKeyStoresListEntry'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "customKeyStoreName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "trustAnchorCertificate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "connectionErrorCode") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ConnectionErrorCodeType)))) :: ((S1 ('MetaSel ('Just "creationDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :: S1 ('MetaSel ('Just "cloudHsmClusterId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "connectionState") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ConnectionStateType))))))

newCustomKeyStoresListEntry :: CustomKeyStoresListEntry Source #

Create a value of CustomKeyStoresListEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:customKeyStoreName:CustomKeyStoresListEntry', customKeyStoresListEntry_customKeyStoreName - The user-specified friendly name for the custom key store.

$sel:trustAnchorCertificate:CustomKeyStoresListEntry', customKeyStoresListEntry_trustAnchorCertificate - The trust anchor certificate of the associated CloudHSM cluster. When you initialize the cluster, you create this certificate and save it in the customerCA.crt file.

$sel:connectionErrorCode:CustomKeyStoresListEntry', customKeyStoresListEntry_connectionErrorCode - Describes the connection error. This field appears in the response only when the ConnectionState is FAILED. For help resolving these errors, see How to Fix a Connection Failure in Key Management Service Developer Guide.

Valid values are:

CLUSTER_NOT_FOUND - KMS cannot find the CloudHSM cluster with the specified cluster ID.
INSUFFICIENT_CLOUDHSM_HSMS - The associated CloudHSM cluster does not contain any active HSMs. To connect a custom key store to its CloudHSM cluster, the cluster must contain at least one active HSM.
INTERNAL_ERROR - KMS could not complete the request due to an internal error. Retry the request. For ConnectCustomKeyStore requests, disconnect the custom key store before trying to connect again.
INVALID_CREDENTIALS - KMS does not have the correct password for the kmsuser crypto user in the CloudHSM cluster. Before you can connect your custom key store to its CloudHSM cluster, you must change the kmsuser account password and update the key store password value for the custom key store.
NETWORK_ERRORS - Network errors are preventing KMS from connecting to the custom key store.
SUBNET_NOT_FOUND - A subnet in the CloudHSM cluster configuration was deleted. If KMS cannot find all of the subnets in the cluster configuration, attempts to connect the custom key store to the CloudHSM cluster fail. To fix this error, create a cluster from a recent backup and associate it with your custom key store. (This process creates a new cluster configuration with a VPC and private subnets.) For details, see How to Fix a Connection Failure in the Key Management Service Developer Guide.
USER_LOCKED_OUT - The kmsuser CU account is locked out of the associated CloudHSM cluster due to too many failed password attempts. Before you can connect your custom key store to its CloudHSM cluster, you must change the kmsuser account password and update the key store password value for the custom key store.
USER_LOGGED_IN - The kmsuser CU account is logged into the the associated CloudHSM cluster. This prevents KMS from rotating the kmsuser account password and logging into the cluster. Before you can connect your custom key store to its CloudHSM cluster, you must log the kmsuser CU out of the cluster. If you changed the kmsuser password to log into the cluster, you must also and update the key store password value for the custom key store. For help, see How to Log Out and Reconnect in the Key Management Service Developer Guide.
USER_NOT_FOUND - KMS cannot find a kmsuser CU account in the associated CloudHSM cluster. Before you can connect your custom key store to its CloudHSM cluster, you must create a kmsuser CU account in the cluster, and then update the key store password value for the custom key store.

$sel:creationDate:CustomKeyStoresListEntry', customKeyStoresListEntry_creationDate - The date and time when the custom key store was created.

$sel:cloudHsmClusterId:CustomKeyStoresListEntry', customKeyStoresListEntry_cloudHsmClusterId - A unique identifier for the CloudHSM cluster that is associated with the custom key store.

$sel:customKeyStoreId:CustomKeyStoresListEntry', customKeyStoresListEntry_customKeyStoreId - A unique identifier for the custom key store.

$sel:connectionState:CustomKeyStoresListEntry', customKeyStoresListEntry_connectionState - Indicates whether the custom key store is connected to its CloudHSM cluster.

You can create and use KMS keys in your custom key stores only when its connection state is CONNECTED.

The value is DISCONNECTED if the key store has never been connected or you use the DisconnectCustomKeyStore operation to disconnect it. If the value is CONNECTED but you are having trouble using the custom key store, make sure that its associated CloudHSM cluster is active and contains at least one active HSM.

A value of FAILED indicates that an attempt to connect was unsuccessful. The ConnectionErrorCode field in the response indicates the cause of the failure. For help resolving a connection failure, see Troubleshooting a Custom Key Store in the Key Management Service Developer Guide.

GrantConstraints

data GrantConstraints Source #

Use this structure to allow cryptographic operations in the grant only when the operation request includes the specified encryption context.

KMS applies the grant constraints only to cryptographic operations that support an encryption context, that is, all cryptographic operations with a symmetric KMS key. Grant constraints are not applied to operations that do not support an encryption context, such as cryptographic operations with asymmetric KMS keys and management operations, such as DescribeKey or RetireGrant.

In a cryptographic operation, the encryption context in the decryption operation must be an exact, case-sensitive match for the keys and values in the encryption context of the encryption operation. Only the order of the pairs can vary.

However, in a grant constraint, the key in each key-value pair is not case sensitive, but the value is case sensitive.

To avoid confusion, do not use multiple encryption context pairs that differ only by case. To require a fully case-sensitive encryption context, use the kms:EncryptionContext: and kms:EncryptionContextKeys conditions in an IAM or key policy. For details, see kms:EncryptionContext: in the /Key Management Service Developer Guide/ .

See: newGrantConstraints smart constructor.

Constructors

GrantConstraints' (Maybe (HashMap Text Text)) (Maybe (HashMap Text Text))

Instances

Instances details

Eq GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints Methods (==) :: GrantConstraints -> GrantConstraints -> Bool # (/=) :: GrantConstraints -> GrantConstraints -> Bool #
Read GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints Methods readsPrec :: Int -> ReadS GrantConstraints # readList :: ReadS [GrantConstraints] # readPrec :: ReadPrec GrantConstraints # readListPrec :: ReadPrec [GrantConstraints] #
Show GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints Methods showsPrec :: Int -> GrantConstraints -> ShowS # show :: GrantConstraints -> String # showList :: [GrantConstraints] -> ShowS #
Generic GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints Associated Types type Rep GrantConstraints :: Type -> Type # Methods from :: GrantConstraints -> Rep GrantConstraints x # to :: Rep GrantConstraints x -> GrantConstraints #
NFData GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints Methods rnf :: GrantConstraints -> () #
Hashable GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints Methods hashWithSalt :: Int -> GrantConstraints -> Int # hash :: GrantConstraints -> Int #
ToJSON GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints Methods toJSON :: GrantConstraints -> Value # toEncoding :: GrantConstraints -> Encoding # toJSONList :: [GrantConstraints] -> Value # toEncodingList :: [GrantConstraints] -> Encoding #
FromJSON GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints Methods parseJSON :: Value -> Parser GrantConstraints # parseJSONList :: Value -> Parser [GrantConstraints] #
type Rep GrantConstraints Source #
Instance details Defined in Amazonka.KMS.Types.GrantConstraints type Rep GrantConstraints = D1 ('MetaData "GrantConstraints" "Amazonka.KMS.Types.GrantConstraints" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GrantConstraints'" 'PrefixI 'True) (S1 ('MetaSel ('Just "encryptionContextEquals") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text))) :*: S1 ('MetaSel ('Just "encryptionContextSubset") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text)))))

newGrantConstraints :: GrantConstraints Source #

Create a value of GrantConstraints with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:encryptionContextEquals:GrantConstraints', grantConstraints_encryptionContextEquals - A list of key-value pairs that must match the encryption context in the cryptographic operation request. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint.

$sel:encryptionContextSubset:GrantConstraints', grantConstraints_encryptionContextSubset - A list of key-value pairs that must be included in the encryption context of the cryptographic operation request. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs.

GrantListEntry

data GrantListEntry Source #

Contains information about a grant.

See: newGrantListEntry smart constructor.

Constructors

GrantListEntry' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe GrantConstraints) (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe [GrantOperation])

Instances

Instances details

Eq GrantListEntry Source #
Instance details Defined in Amazonka.KMS.Types.GrantListEntry Methods (==) :: GrantListEntry -> GrantListEntry -> Bool # (/=) :: GrantListEntry -> GrantListEntry -> Bool #
Read GrantListEntry Source #
Instance details Defined in Amazonka.KMS.Types.GrantListEntry Methods readsPrec :: Int -> ReadS GrantListEntry # readList :: ReadS [GrantListEntry] # readPrec :: ReadPrec GrantListEntry # readListPrec :: ReadPrec [GrantListEntry] #
Show GrantListEntry Source #
Instance details Defined in Amazonka.KMS.Types.GrantListEntry Methods showsPrec :: Int -> GrantListEntry -> ShowS # show :: GrantListEntry -> String # showList :: [GrantListEntry] -> ShowS #
Generic GrantListEntry Source #
Instance details Defined in Amazonka.KMS.Types.GrantListEntry Associated Types type Rep GrantListEntry :: Type -> Type # Methods from :: GrantListEntry -> Rep GrantListEntry x # to :: Rep GrantListEntry x -> GrantListEntry #
NFData GrantListEntry Source #
Instance details Defined in Amazonka.KMS.Types.GrantListEntry Methods rnf :: GrantListEntry -> () #
Hashable GrantListEntry Source #
Instance details Defined in Amazonka.KMS.Types.GrantListEntry Methods hashWithSalt :: Int -> GrantListEntry -> Int # hash :: GrantListEntry -> Int #
FromJSON GrantListEntry Source #
Instance details Defined in Amazonka.KMS.Types.GrantListEntry Methods parseJSON :: Value -> Parser GrantListEntry # parseJSONList :: Value -> Parser [GrantListEntry] #
type Rep GrantListEntry Source #
Instance details Defined in Amazonka.KMS.Types.GrantListEntry type Rep GrantListEntry = D1 ('MetaData "GrantListEntry" "Amazonka.KMS.Types.GrantListEntry" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "GrantListEntry'" 'PrefixI 'True) (((S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "retiringPrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "issuingAccount") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "grantId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) :: ((S1 ('MetaSel ('Just "constraints") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe GrantConstraints)) :: S1 ('MetaSel ('Just "granteePrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :: (S1 ('MetaSel ('Just "name") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "creationDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :: S1 ('MetaSel ('Just "operations") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [GrantOperation])))))))

newGrantListEntry :: GrantListEntry Source #

Create a value of GrantListEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:GrantListEntry', grantListEntry_keyId - The unique identifier for the KMS key to which the grant applies.

$sel:retiringPrincipal:GrantListEntry', grantListEntry_retiringPrincipal - The principal that can retire the grant.

$sel:issuingAccount:GrantListEntry', grantListEntry_issuingAccount - The Amazon Web Services account under which the grant was issued.

$sel:grantId:GrantListEntry', grantListEntry_grantId - The unique identifier for the grant.

$sel:constraints:GrantListEntry', grantListEntry_constraints - A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows.

$sel:granteePrincipal:GrantListEntry', grantListEntry_granteePrincipal - The identity that gets the permissions in the grant.

The GranteePrincipal field in the ListGrants response usually contains the user or role designated as the grantee principal in the grant. However, when the grantee principal in the grant is an Amazon Web Services service, the GranteePrincipal field contains the service principal, which might represent several different grantee principals.

$sel:name:GrantListEntry', grantListEntry_name - The friendly name that identifies the grant. If a name was provided in the CreateGrant request, that name is returned. Otherwise this value is null.

$sel:creationDate:GrantListEntry', grantListEntry_creationDate - The date and time when the grant was created.

$sel:operations:GrantListEntry', grantListEntry_operations - The list of operations permitted by the grant.

KeyListEntry

data KeyListEntry Source #

Contains information about each entry in the key list.

See: newKeyListEntry smart constructor.

Constructors

KeyListEntry' (Maybe Text) (Maybe Text)

Instances

Instances details

Eq KeyListEntry Source #
Instance details Defined in Amazonka.KMS.Types.KeyListEntry Methods (==) :: KeyListEntry -> KeyListEntry -> Bool # (/=) :: KeyListEntry -> KeyListEntry -> Bool #
Read KeyListEntry Source #
Instance details Defined in Amazonka.KMS.Types.KeyListEntry Methods readsPrec :: Int -> ReadS KeyListEntry # readList :: ReadS [KeyListEntry] # readPrec :: ReadPrec KeyListEntry # readListPrec :: ReadPrec [KeyListEntry] #
Show KeyListEntry Source #
Instance details Defined in Amazonka.KMS.Types.KeyListEntry Methods showsPrec :: Int -> KeyListEntry -> ShowS # show :: KeyListEntry -> String # showList :: [KeyListEntry] -> ShowS #
Generic KeyListEntry Source #
Instance details Defined in Amazonka.KMS.Types.KeyListEntry Associated Types type Rep KeyListEntry :: Type -> Type # Methods from :: KeyListEntry -> Rep KeyListEntry x # to :: Rep KeyListEntry x -> KeyListEntry #
NFData KeyListEntry Source #
Instance details Defined in Amazonka.KMS.Types.KeyListEntry Methods rnf :: KeyListEntry -> () #
Hashable KeyListEntry Source #
Instance details Defined in Amazonka.KMS.Types.KeyListEntry Methods hashWithSalt :: Int -> KeyListEntry -> Int # hash :: KeyListEntry -> Int #
FromJSON KeyListEntry Source #
Instance details Defined in Amazonka.KMS.Types.KeyListEntry Methods parseJSON :: Value -> Parser KeyListEntry # parseJSONList :: Value -> Parser [KeyListEntry] #
type Rep KeyListEntry Source #
Instance details Defined in Amazonka.KMS.Types.KeyListEntry type Rep KeyListEntry = D1 ('MetaData "KeyListEntry" "Amazonka.KMS.Types.KeyListEntry" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "KeyListEntry'" 'PrefixI 'True) (S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "keyArn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))

newKeyListEntry :: KeyListEntry Source #

Create a value of KeyListEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:keyId:KeyListEntry', keyListEntry_keyId - Unique identifier of the key.

$sel:keyArn:KeyListEntry', keyListEntry_keyArn - ARN of the key.

KeyMetadata

data KeyMetadata Source #

Contains metadata about a KMS key.

This data type is used as a response element for the CreateKey and DescribeKey operations.

See: newKeyMetadata smart constructor.

Constructors

KeyMetadata' (Maybe OriginType) (Maybe ExpirationModelType) (Maybe KeyManagerType) (Maybe KeySpec) (Maybe CustomerMasterKeySpec) (Maybe Bool) (Maybe POSIX) (Maybe Text) (Maybe KeyState) (Maybe [EncryptionAlgorithmSpec]) (Maybe Text) (Maybe [SigningAlgorithmSpec]) (Maybe Natural) (Maybe KeyUsageType) (Maybe POSIX) (Maybe POSIX) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Bool) (Maybe MultiRegionConfiguration) Text

Instances

Instances details

Eq KeyMetadata Source #
Instance details Defined in Amazonka.KMS.Types.KeyMetadata Methods (==) :: KeyMetadata -> KeyMetadata -> Bool # (/=) :: KeyMetadata -> KeyMetadata -> Bool #
Read KeyMetadata Source #
Instance details Defined in Amazonka.KMS.Types.KeyMetadata Methods readsPrec :: Int -> ReadS KeyMetadata # readList :: ReadS [KeyMetadata] # readPrec :: ReadPrec KeyMetadata # readListPrec :: ReadPrec [KeyMetadata] #
Show KeyMetadata Source #
Instance details Defined in Amazonka.KMS.Types.KeyMetadata Methods showsPrec :: Int -> KeyMetadata -> ShowS # show :: KeyMetadata -> String # showList :: [KeyMetadata] -> ShowS #
Generic KeyMetadata Source #
Instance details Defined in Amazonka.KMS.Types.KeyMetadata Associated Types type Rep KeyMetadata :: Type -> Type # Methods from :: KeyMetadata -> Rep KeyMetadata x # to :: Rep KeyMetadata x -> KeyMetadata #
NFData KeyMetadata Source #
Instance details Defined in Amazonka.KMS.Types.KeyMetadata Methods rnf :: KeyMetadata -> () #
Hashable KeyMetadata Source #
Instance details Defined in Amazonka.KMS.Types.KeyMetadata Methods hashWithSalt :: Int -> KeyMetadata -> Int # hash :: KeyMetadata -> Int #
FromJSON KeyMetadata Source #
Instance details Defined in Amazonka.KMS.Types.KeyMetadata Methods parseJSON :: Value -> Parser KeyMetadata # parseJSONList :: Value -> Parser [KeyMetadata] #
type Rep KeyMetadata Source #
Instance details Defined in Amazonka.KMS.Types.KeyMetadata type Rep KeyMetadata = D1 ('MetaData "KeyMetadata" "Amazonka.KMS.Types.KeyMetadata" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "KeyMetadata'" 'PrefixI 'True) ((((S1 ('MetaSel ('Just "origin") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe OriginType)) :: S1 ('MetaSel ('Just "expirationModel") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe ExpirationModelType))) :: (S1 ('MetaSel ('Just "keyManager") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyManagerType)) :: (S1 ('MetaSel ('Just "keySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeySpec)) :: S1 ('MetaSel ('Just "customerMasterKeySpec") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe CustomerMasterKeySpec))))) :: ((S1 ('MetaSel ('Just "enabled") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: (S1 ('MetaSel ('Just "validTo") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :: S1 ('MetaSel ('Just "arn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) :: (S1 ('MetaSel ('Just "keyState") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyState)) :: (S1 ('MetaSel ('Just "encryptionAlgorithms") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [EncryptionAlgorithmSpec])) :: S1 ('MetaSel ('Just "aWSAccountId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))) :: (((S1 ('MetaSel ('Just "signingAlgorithms") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [SigningAlgorithmSpec])) :: S1 ('MetaSel ('Just "pendingDeletionWindowInDays") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Natural))) :: (S1 ('MetaSel ('Just "keyUsage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe KeyUsageType)) :: (S1 ('MetaSel ('Just "creationDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX)) :: S1 ('MetaSel ('Just "deletionDate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe POSIX))))) :: ((S1 ('MetaSel ('Just "cloudHsmClusterId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: (S1 ('MetaSel ('Just "description") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "customKeyStoreId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) :: (S1 ('MetaSel ('Just "multiRegion") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: (S1 ('MetaSel ('Just "multiRegionConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe MultiRegionConfiguration)) :*: S1 ('MetaSel ('Just "keyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))))

newKeyMetadata Source #

Arguments

:: Text	`$sel:keyId:KeyMetadata'`
-> KeyMetadata

Create a value of KeyMetadata with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:origin:KeyMetadata', keyMetadata_origin - The source of the key material for the KMS key. When this value is AWS_KMS, KMS created the key material. When this value is EXTERNAL, the key material was imported or the KMS key doesn't have any key material. When this value is AWS_CLOUDHSM, the key material was created in the CloudHSM cluster associated with a custom key store.

$sel:expirationModel:KeyMetadata', keyMetadata_expirationModel - Specifies whether the KMS key's key material expires. This value is present only when Origin is EXTERNAL, otherwise this value is omitted.

$sel:keyManager:KeyMetadata', keyMetadata_keyManager - The manager of the KMS key. KMS keys in your Amazon Web Services account are either customer managed or Amazon Web Services managed. For more information about the difference, see KMS keys in the Key Management Service Developer Guide.

$sel:keySpec:KeyMetadata', keyMetadata_keySpec - Describes the type of key material in the KMS key.

$sel:customerMasterKeySpec:KeyMetadata', keyMetadata_customerMasterKeySpec - Instead, use the KeySpec field.

The KeySpec and CustomerMasterKeySpec fields have the same value. We recommend that you use the KeySpec field in your code. However, to avoid breaking changes, KMS will support both fields.

$sel:enabled:KeyMetadata', keyMetadata_enabled - Specifies whether the KMS key is enabled. When KeyState is Enabled this value is true, otherwise it is false.

$sel:validTo:KeyMetadata', keyMetadata_validTo - The time at which the imported key material expires. When the key material expires, KMS deletes the key material and the KMS key becomes unusable. This value is present only for KMS keys whose Origin is EXTERNAL and whose ExpirationModel is KEY_MATERIAL_EXPIRES, otherwise this value is omitted.

$sel:arn:KeyMetadata', keyMetadata_arn - The Amazon Resource Name (ARN) of the KMS key. For examples, see Key Management Service (KMS) in the Example ARNs section of the /Amazon Web Services General Reference/.

$sel:keyState:KeyMetadata', keyMetadata_keyState - The current status of the KMS key.

For more information about how key state affects the use of a KMS key, see Key state: Effect on your KMS key in the Key Management Service Developer Guide.

$sel:encryptionAlgorithms:KeyMetadata', keyMetadata_encryptionAlgorithms - The encryption algorithms that the KMS key supports. You cannot use the KMS key with other encryption algorithms within KMS.

This value is present only when the KeyUsage of the KMS key is ENCRYPT_DECRYPT.

$sel:aWSAccountId:KeyMetadata', keyMetadata_aWSAccountId - The twelve-digit account ID of the Amazon Web Services account that owns the KMS key.

$sel:signingAlgorithms:KeyMetadata', keyMetadata_signingAlgorithms - The signing algorithms that the KMS key supports. You cannot use the KMS key with other signing algorithms within KMS.

This field appears only when the KeyUsage of the KMS key is SIGN_VERIFY.

$sel:pendingDeletionWindowInDays:KeyMetadata', keyMetadata_pendingDeletionWindowInDays - The waiting period before the primary key in a multi-Region key is deleted. This waiting period begins when the last of its replica keys is deleted. This value is present only when the KeyState of the KMS key is PendingReplicaDeletion. That indicates that the KMS key is the primary key in a multi-Region key, it is scheduled for deletion, and it still has existing replica keys.

When a single-Region KMS key or a multi-Region replica key is scheduled for deletion, its deletion date is displayed in the DeletionDate field. However, when the primary key in a multi-Region key is scheduled for deletion, its waiting period doesn't begin until all of its replica keys are deleted. This value displays that waiting period. When the last replica key in the multi-Region key is deleted, the KeyState of the scheduled primary key changes from PendingReplicaDeletion to PendingDeletion and the deletion date appears in the DeletionDate field.

$sel:keyUsage:KeyMetadata', keyMetadata_keyUsage - The cryptographic operations for which you can use the KMS key.

$sel:creationDate:KeyMetadata', keyMetadata_creationDate - The date and time when the KMS key was created.

$sel:deletionDate:KeyMetadata', keyMetadata_deletionDate - The date and time after which KMS deletes this KMS key. This value is present only when the KMS key is scheduled for deletion, that is, when its KeyState is PendingDeletion.

When the primary key in a multi-Region key is scheduled for deletion but still has replica keys, its key state is PendingReplicaDeletion and the length of its waiting period is displayed in the PendingDeletionWindowInDays field.

$sel:cloudHsmClusterId:KeyMetadata', keyMetadata_cloudHsmClusterId - The cluster ID of the CloudHSM cluster that contains the key material for the KMS key. When you create a KMS key in a custom key store, KMS creates the key material for the KMS key in the associated CloudHSM cluster. This value is present only when the KMS key is created in a custom key store.

$sel:description:KeyMetadata', keyMetadata_description - The description of the KMS key.

$sel:customKeyStoreId:KeyMetadata', keyMetadata_customKeyStoreId - A unique identifier for the custom key store that contains the KMS key. This value is present only when the KMS key is created in a custom key store.

$sel:multiRegion:KeyMetadata', keyMetadata_multiRegion - Indicates whether the KMS key is a multi-Region (True) or regional (False) key. This value is True for multi-Region primary and replica keys and False for regional KMS keys.

For more information about multi-Region keys, see Using multi-Region keys in the Key Management Service Developer Guide.

$sel:multiRegionConfiguration:KeyMetadata', keyMetadata_multiRegionConfiguration - Lists the primary and replica keys in same multi-Region key. This field is present only when the value of the MultiRegion field is True.

For more information about any listed KMS key, use the DescribeKey operation.

MultiRegionKeyType indicates whether the KMS key is a PRIMARY or REPLICA key.
PrimaryKey displays the key ARN and Region of the primary key. This field displays the current KMS key if it is the primary key.
ReplicaKeys displays the key ARNs and Regions of all replica keys. This field includes the current KMS key if it is a replica key.

$sel:keyId:KeyMetadata', keyMetadata_keyId - The globally unique identifier for the KMS key.

ListGrantsResponse

data ListGrantsResponse Source #

See: newListGrantsResponse smart constructor.

Constructors

ListGrantsResponse' (Maybe Bool) (Maybe [GrantListEntry]) (Maybe Text)

Instances

Instances details

Eq ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods (==) :: ListGrantsResponse -> ListGrantsResponse -> Bool # (/=) :: ListGrantsResponse -> ListGrantsResponse -> Bool #
Read ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods readsPrec :: Int -> ReadS ListGrantsResponse # readList :: ReadS [ListGrantsResponse] # readPrec :: ReadPrec ListGrantsResponse # readListPrec :: ReadPrec [ListGrantsResponse] #
Show ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods showsPrec :: Int -> ListGrantsResponse -> ShowS # show :: ListGrantsResponse -> String # showList :: [ListGrantsResponse] -> ShowS #
Generic ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Associated Types type Rep ListGrantsResponse :: Type -> Type # Methods from :: ListGrantsResponse -> Rep ListGrantsResponse x # to :: Rep ListGrantsResponse x -> ListGrantsResponse #
NFData ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods rnf :: ListGrantsResponse -> () #
Hashable ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods hashWithSalt :: Int -> ListGrantsResponse -> Int # hash :: ListGrantsResponse -> Int #
FromJSON ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse Methods parseJSON :: Value -> Parser ListGrantsResponse # parseJSONList :: Value -> Parser [ListGrantsResponse] #
type Rep ListGrantsResponse Source #
Instance details Defined in Amazonka.KMS.Types.ListGrantsResponse type Rep ListGrantsResponse = D1 ('MetaData "ListGrantsResponse" "Amazonka.KMS.Types.ListGrantsResponse" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "ListGrantsResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "truncated") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool)) :: (S1 ('MetaSel ('Just "grants") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [GrantListEntry])) :: S1 ('MetaSel ('Just "nextMarker") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))))

newListGrantsResponse :: ListGrantsResponse Source #

Create a value of ListGrantsResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:truncated:ListGrantsResponse', listGrantsResponse_truncated - A flag that indicates whether there are more items in the list. When this value is true, the list in this response is truncated. To get more items, pass the value of the NextMarker element in thisresponse to the Marker parameter in a subsequent request.

$sel:grants:ListGrantsResponse', listGrantsResponse_grants - A list of grants.

$sel:nextMarker:ListGrantsResponse', listGrantsResponse_nextMarker - When Truncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent request.

MultiRegionConfiguration

data MultiRegionConfiguration Source #

Describes the configuration of this multi-Region key. This field appears only when the KMS key is a primary or replica of a multi-Region key.

For more information about any listed KMS key, use the DescribeKey operation.

See: newMultiRegionConfiguration smart constructor.

Constructors

MultiRegionConfiguration' (Maybe MultiRegionKey) (Maybe [MultiRegionKey]) (Maybe MultiRegionKeyType)

Instances

Instances details

Eq MultiRegionConfiguration Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionConfiguration Methods (==) :: MultiRegionConfiguration -> MultiRegionConfiguration -> Bool # (/=) :: MultiRegionConfiguration -> MultiRegionConfiguration -> Bool #
Read MultiRegionConfiguration Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionConfiguration Methods readsPrec :: Int -> ReadS MultiRegionConfiguration # readList :: ReadS [MultiRegionConfiguration] # readPrec :: ReadPrec MultiRegionConfiguration # readListPrec :: ReadPrec [MultiRegionConfiguration] #
Show MultiRegionConfiguration Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionConfiguration Methods showsPrec :: Int -> MultiRegionConfiguration -> ShowS # show :: MultiRegionConfiguration -> String # showList :: [MultiRegionConfiguration] -> ShowS #
Generic MultiRegionConfiguration Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionConfiguration Associated Types type Rep MultiRegionConfiguration :: Type -> Type # Methods from :: MultiRegionConfiguration -> Rep MultiRegionConfiguration x # to :: Rep MultiRegionConfiguration x -> MultiRegionConfiguration #
NFData MultiRegionConfiguration Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionConfiguration Methods rnf :: MultiRegionConfiguration -> () #
Hashable MultiRegionConfiguration Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionConfiguration Methods hashWithSalt :: Int -> MultiRegionConfiguration -> Int # hash :: MultiRegionConfiguration -> Int #
FromJSON MultiRegionConfiguration Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionConfiguration Methods parseJSON :: Value -> Parser MultiRegionConfiguration # parseJSONList :: Value -> Parser [MultiRegionConfiguration] #
type Rep MultiRegionConfiguration Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionConfiguration type Rep MultiRegionConfiguration = D1 ('MetaData "MultiRegionConfiguration" "Amazonka.KMS.Types.MultiRegionConfiguration" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "MultiRegionConfiguration'" 'PrefixI 'True) (S1 ('MetaSel ('Just "primaryKey") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe MultiRegionKey)) :: (S1 ('MetaSel ('Just "replicaKeys") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [MultiRegionKey])) :: S1 ('MetaSel ('Just "multiRegionKeyType") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe MultiRegionKeyType)))))

newMultiRegionConfiguration :: MultiRegionConfiguration Source #

Create a value of MultiRegionConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:primaryKey:MultiRegionConfiguration', multiRegionConfiguration_primaryKey - Displays the key ARN and Region of the primary key. This field includes the current KMS key if it is the primary key.

$sel:replicaKeys:MultiRegionConfiguration', multiRegionConfiguration_replicaKeys - displays the key ARNs and Regions of all replica keys. This field includes the current KMS key if it is a replica key.

$sel:multiRegionKeyType:MultiRegionConfiguration', multiRegionConfiguration_multiRegionKeyType - Indicates whether the KMS key is a PRIMARY or REPLICA key.

MultiRegionKey

data MultiRegionKey Source #

Describes the primary or replica key in a multi-Region key.

See: newMultiRegionKey smart constructor.

Constructors

MultiRegionKey' (Maybe Text) (Maybe Text)

Instances

Instances details

Eq MultiRegionKey Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKey Methods (==) :: MultiRegionKey -> MultiRegionKey -> Bool # (/=) :: MultiRegionKey -> MultiRegionKey -> Bool #
Read MultiRegionKey Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKey Methods readsPrec :: Int -> ReadS MultiRegionKey # readList :: ReadS [MultiRegionKey] # readPrec :: ReadPrec MultiRegionKey # readListPrec :: ReadPrec [MultiRegionKey] #
Show MultiRegionKey Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKey Methods showsPrec :: Int -> MultiRegionKey -> ShowS # show :: MultiRegionKey -> String # showList :: [MultiRegionKey] -> ShowS #
Generic MultiRegionKey Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKey Associated Types type Rep MultiRegionKey :: Type -> Type # Methods from :: MultiRegionKey -> Rep MultiRegionKey x # to :: Rep MultiRegionKey x -> MultiRegionKey #
NFData MultiRegionKey Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKey Methods rnf :: MultiRegionKey -> () #
Hashable MultiRegionKey Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKey Methods hashWithSalt :: Int -> MultiRegionKey -> Int # hash :: MultiRegionKey -> Int #
FromJSON MultiRegionKey Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKey Methods parseJSON :: Value -> Parser MultiRegionKey # parseJSONList :: Value -> Parser [MultiRegionKey] #
type Rep MultiRegionKey Source #
Instance details Defined in Amazonka.KMS.Types.MultiRegionKey type Rep MultiRegionKey = D1 ('MetaData "MultiRegionKey" "Amazonka.KMS.Types.MultiRegionKey" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "MultiRegionKey'" 'PrefixI 'True) (S1 ('MetaSel ('Just "arn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "region") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))

newMultiRegionKey :: MultiRegionKey Source #

Create a value of MultiRegionKey with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:arn:MultiRegionKey', multiRegionKey_arn - Displays the key ARN of a primary or replica key of a multi-Region key.

$sel:region:MultiRegionKey', multiRegionKey_region - Displays the Amazon Web Services Region of a primary or replica key in a multi-Region key.

Tag

data Tag Source #

A key-value pair. A tag consists of a tag key and a tag value. Tag keys and tag values are both required, but tag values can be empty (null) strings.

For information about the rules that apply to tag keys and tag values, see User-Defined Tag Restrictions in the Amazon Web Services Billing and Cost Management User Guide.

See: newTag smart constructor.

Constructors

Tag' Text Text

Instances

Instances details

Eq Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag Methods (==) :: Tag -> Tag -> Bool # (/=) :: Tag -> Tag -> Bool #
Read Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag Methods readsPrec :: Int -> ReadS Tag # readList :: ReadS [Tag] # readPrec :: ReadPrec Tag # readListPrec :: ReadPrec [Tag] #
Show Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag Methods showsPrec :: Int -> Tag -> ShowS # show :: Tag -> String # showList :: [Tag] -> ShowS #
Generic Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag Associated Types type Rep Tag :: Type -> Type # Methods from :: Tag -> Rep Tag x # to :: Rep Tag x -> Tag #
NFData Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag Methods rnf :: Tag -> () #
Hashable Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag Methods hashWithSalt :: Int -> Tag -> Int # hash :: Tag -> Int #
ToJSON Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag Methods toJSON :: Tag -> Value # toEncoding :: Tag -> Encoding # toJSONList :: [Tag] -> Value # toEncodingList :: [Tag] -> Encoding #
FromJSON Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag Methods parseJSON :: Value -> Parser Tag # parseJSONList :: Value -> Parser [Tag] #
type Rep Tag Source #
Instance details Defined in Amazonka.KMS.Types.Tag type Rep Tag = D1 ('MetaData "Tag" "Amazonka.KMS.Types.Tag" "libZSservicesZSamazonka-kmsZSamazonka-kms" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "tagKey") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "tagValue") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))

newTag Source #

Arguments

:: Text	`$sel:tagKey:Tag'`
-> Text	`$sel:tagValue:Tag'`
-> Tag

Create a value of Tag with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:tagKey:Tag', tag_tagKey - The key of the tag.

$sel:tagValue:Tag', tag_tagValue - The value of the tag.