{-# LANGUAGE DeriveGeneric #-}
{-# LANGUAGE DuplicateRecordFields #-}
{-# LANGUAGE NamedFieldPuns #-}
{-# LANGUAGE OverloadedStrings #-}
{-# LANGUAGE RecordWildCards #-}
{-# LANGUAGE StrictData #-}
{-# LANGUAGE TypeFamilies #-}
{-# LANGUAGE NoImplicitPrelude #-}
{-# OPTIONS_GHC -fno-warn-unused-binds #-}
{-# OPTIONS_GHC -fno-warn-unused-imports #-}
{-# OPTIONS_GHC -fno-warn-unused-matches #-}

-- Derived from AWS service descriptions, licensed under Apache 2.0.

-- |
-- Module      : Amazonka.SecretsManager.UpdateSecret
-- Copyright   : (c) 2013-2021 Brendan Hay
-- License     : Mozilla Public License, v. 2.0.
-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>
-- Stability   : auto-generated
-- Portability : non-portable (GHC extensions)
--
-- Modifies many of the details of the specified secret.
--
-- To change the secret value, you can also use PutSecretValue.
--
-- To change the rotation configuration of a secret, use RotateSecret
-- instead.
--
-- We recommend you avoid calling @UpdateSecret@ at a sustained rate of
-- more than once every 10 minutes. When you call @UpdateSecret@ to update
-- the secret value, Secrets Manager creates a new version of the secret.
-- Secrets Manager removes outdated versions when there are more than 100,
-- but it does not remove versions created less than 24 hours ago. If you
-- update the secret value more than once every 10 minutes, you create more
-- versions than Secrets Manager removes, and you will reach the quota for
-- secret versions.
--
-- The Secrets Manager console uses only the @SecretString@ parameter and
-- therefore limits you to encrypting and storing only a text string. To
-- encrypt and store binary data as part of the version of a secret, you
-- must use either the Amazon Web Services CLI or one of the Amazon Web
-- Services SDKs.
--
-- -   If a version with a @VersionId@ with the same value as the
--     @ClientRequestToken@ parameter already exists, the operation results
--     in an error. You cannot modify an existing version, you can only
--     create a new version.
--
-- -   If you include @SecretString@ or @SecretBinary@ to create a new
--     secret version, Secrets Manager automatically attaches the staging
--     label @AWSCURRENT@ to the new version.
--
-- -   If you call an operation to encrypt or decrypt the @SecretString@ or
--     @SecretBinary@ for a secret in the same account as the calling user
--     and that secret doesn\'t specify a Amazon Web Services KMS
--     encryption key, Secrets Manager uses the account\'s default Amazon
--     Web Services managed customer master key (CMK) with the alias
--     @aws\/secretsmanager@. If this key doesn\'t already exist in your
--     account then Secrets Manager creates it for you automatically. All
--     users and roles in the same Amazon Web Services account
--     automatically have access to use the default CMK. Note that if an
--     Secrets Manager API call results in Amazon Web Services creating the
--     account\'s Amazon Web Services-managed CMK, it can result in a
--     one-time significant delay in returning the result.
--
-- -   If the secret resides in a different Amazon Web Services account
--     from the credentials calling an API that requires encryption or
--     decryption of the secret value then you must create and use a custom
--     Amazon Web Services KMS CMK because you can\'t access the default
--     CMK for the account using credentials from a different Amazon Web
--     Services account. Store the ARN of the CMK in the secret when you
--     create the secret or when you update it by including it in the
--     @KMSKeyId@. If you call an API that must encrypt or decrypt
--     @SecretString@ or @SecretBinary@ using credentials from a different
--     account then the Amazon Web Services KMS key policy must grant
--     cross-account access to that other account\'s user or role for both
--     the kms:GenerateDataKey and kms:Decrypt operations.
--
-- __Minimum permissions__
--
-- To run this command, you must have the following permissions:
--
-- -   secretsmanager:UpdateSecret
--
-- -   kms:GenerateDataKey - needed only if you use a custom Amazon Web
--     Services KMS key to encrypt the secret. You do not need this
--     permission to use the account\'s Amazon Web Services managed CMK for
--     Secrets Manager.
--
-- -   kms:Decrypt - needed only if you use a custom Amazon Web Services
--     KMS key to encrypt the secret. You do not need this permission to
--     use the account\'s Amazon Web Services managed CMK for Secrets
--     Manager.
--
-- __Related operations__
--
-- -   To create a new secret, use CreateSecret.
--
-- -   To add only a new version to an existing secret, use PutSecretValue.
--
-- -   To get the details for a secret, use DescribeSecret.
--
-- -   To list the versions contained in a secret, use
--     ListSecretVersionIds.
module Amazonka.SecretsManager.UpdateSecret
  ( -- * Creating a Request
    UpdateSecret (..),
    newUpdateSecret,

    -- * Request Lenses
    updateSecret_secretBinary,
    updateSecret_kmsKeyId,
    updateSecret_secretString,
    updateSecret_clientRequestToken,
    updateSecret_description,
    updateSecret_secretId,

    -- * Destructuring the Response
    UpdateSecretResponse (..),
    newUpdateSecretResponse,

    -- * Response Lenses
    updateSecretResponse_versionId,
    updateSecretResponse_arn,
    updateSecretResponse_name,
    updateSecretResponse_httpStatus,
  )
where

import qualified Amazonka.Core as Core
import qualified Amazonka.Lens as Lens
import qualified Amazonka.Prelude as Prelude
import qualified Amazonka.Request as Request
import qualified Amazonka.Response as Response
import Amazonka.SecretsManager.Types

-- | /See:/ 'newUpdateSecret' smart constructor.
data UpdateSecret = UpdateSecret'
  { -- | (Optional) Specifies updated binary data that you want to encrypt and
    -- store in the new version of the secret. To use this parameter in the
    -- command-line tools, we recommend that you store your binary data in a
    -- file and then use the appropriate technique for your tool to pass the
    -- contents of the file as a parameter. Either @SecretBinary@ or
    -- @SecretString@ must have a value, but not both. They cannot both be
    -- empty.
    --
    -- This parameter is not accessible using the Secrets Manager console.
    UpdateSecret -> Maybe (Sensitive Base64)
secretBinary :: Prelude.Maybe (Core.Sensitive Core.Base64),
    -- | (Optional) Specifies an updated ARN or alias of the Amazon Web Services
    -- KMS customer master key (CMK) that Secrets Manager uses to encrypt the
    -- protected text in new versions of this secret as well as any existing
    -- versions of this secret that have the staging labels AWSCURRENT,
    -- AWSPENDING, or AWSPREVIOUS. For more information about staging labels,
    -- see
    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/terms-concepts.html#term_staging-label Staging Labels>
    -- in the /Amazon Web Services Secrets Manager User Guide/.
    --
    -- You can only use the account\'s default CMK to encrypt and decrypt if
    -- you call this operation using credentials from the same account that
    -- owns the secret. If the secret is in a different account, then you must
    -- create a custom CMK and provide the ARN of that CMK in this field. The
    -- user making the call must have permissions to both the secret and the
    -- CMK in their respective accounts.
    UpdateSecret -> Maybe Text
kmsKeyId :: Prelude.Maybe Prelude.Text,
    -- | (Optional) Specifies updated text data that you want to encrypt and
    -- store in this new version of the secret. Either @SecretBinary@ or
    -- @SecretString@ must have a value, but not both. They cannot both be
    -- empty.
    --
    -- If you create this secret by using the Secrets Manager console then
    -- Secrets Manager puts the protected secret text in only the
    -- @SecretString@ parameter. The Secrets Manager console stores the
    -- information as a JSON structure of key\/value pairs that the default
    -- Lambda rotation function knows how to parse.
    --
    -- For storing multiple values, we recommend that you use a JSON text
    -- string argument and specify key\/value pairs. For more information, see
    -- <https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-parameters.html Specifying parameter values for the Amazon Web Services CLI>
    -- in the Amazon Web Services CLI User Guide.
    UpdateSecret -> Maybe (Sensitive Text)
secretString :: Prelude.Maybe (Core.Sensitive Prelude.Text),
    -- | (Optional) If you want to add a new version to the secret, this
    -- parameter specifies a unique identifier for the new version that helps
    -- ensure idempotency.
    --
    -- If you use the Amazon Web Services CLI or one of the Amazon Web Services
    -- SDK to call this operation, then you can leave this parameter empty. The
    -- CLI or SDK generates a random UUID for you and includes that in the
    -- request. If you don\'t use the SDK and instead generate a raw HTTP
    -- request to the Secrets Manager service endpoint, then you must generate
    -- a @ClientRequestToken@ yourself for new versions and include that value
    -- in the request.
    --
    -- You typically only need to interact with this value if you implement
    -- your own retry logic and want to ensure that a given secret is not
    -- created twice. We recommend that you generate a
    -- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>
    -- value to ensure uniqueness within the specified secret.
    --
    -- Secrets Manager uses this value to prevent the accidental creation of
    -- duplicate versions if there are failures and retries during the Lambda
    -- rotation function\'s processing.
    --
    -- -   If the @ClientRequestToken@ value isn\'t already associated with a
    --     version of the secret then a new version of the secret is created.
    --
    -- -   If a version with this value already exists and that version\'s
    --     @SecretString@ and @SecretBinary@ values are the same as those in
    --     the request then the request is ignored (the operation is
    --     idempotent).
    --
    -- -   If a version with this value already exists and that version\'s
    --     @SecretString@ and @SecretBinary@ values are different from the
    --     request then an error occurs because you cannot modify an existing
    --     secret value.
    --
    -- This value becomes the @VersionId@ of the new version.
    UpdateSecret -> Maybe Text
clientRequestToken :: Prelude.Maybe Prelude.Text,
    -- | (Optional) Specifies an updated user-provided description of the secret.
    UpdateSecret -> Maybe Text
description :: Prelude.Maybe Prelude.Text,
    -- | Specifies the secret that you want to modify or to which you want to add
    -- a new version. You can specify either the Amazon Resource Name (ARN) or
    -- the friendly name of the secret.
    --
    -- For an ARN, we recommend that you specify a complete ARN rather than a
    -- partial ARN.
    UpdateSecret -> Text
secretId :: Prelude.Text
  }
  deriving (UpdateSecret -> UpdateSecret -> Bool
(UpdateSecret -> UpdateSecret -> Bool)
-> (UpdateSecret -> UpdateSecret -> Bool) -> Eq UpdateSecret
forall a. (a -> a -> Bool) -> (a -> a -> Bool) -> Eq a
/= :: UpdateSecret -> UpdateSecret -> Bool
$c/= :: UpdateSecret -> UpdateSecret -> Bool
== :: UpdateSecret -> UpdateSecret -> Bool
$c== :: UpdateSecret -> UpdateSecret -> Bool
Prelude.Eq, Int -> UpdateSecret -> ShowS
[UpdateSecret] -> ShowS
UpdateSecret -> String
(Int -> UpdateSecret -> ShowS)
-> (UpdateSecret -> String)
-> ([UpdateSecret] -> ShowS)
-> Show UpdateSecret
forall a.
(Int -> a -> ShowS) -> (a -> String) -> ([a] -> ShowS) -> Show a
showList :: [UpdateSecret] -> ShowS
$cshowList :: [UpdateSecret] -> ShowS
show :: UpdateSecret -> String
$cshow :: UpdateSecret -> String
showsPrec :: Int -> UpdateSecret -> ShowS
$cshowsPrec :: Int -> UpdateSecret -> ShowS
Prelude.Show, (forall x. UpdateSecret -> Rep UpdateSecret x)
-> (forall x. Rep UpdateSecret x -> UpdateSecret)
-> Generic UpdateSecret
forall x. Rep UpdateSecret x -> UpdateSecret
forall x. UpdateSecret -> Rep UpdateSecret x
forall a.
(forall x. a -> Rep a x) -> (forall x. Rep a x -> a) -> Generic a
$cto :: forall x. Rep UpdateSecret x -> UpdateSecret
$cfrom :: forall x. UpdateSecret -> Rep UpdateSecret x
Prelude.Generic)

-- |
-- Create a value of 'UpdateSecret' with all optional fields omitted.
--
-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.
--
-- The following record fields are available, with the corresponding lenses provided
-- for backwards compatibility:
--
-- 'secretBinary', 'updateSecret_secretBinary' - (Optional) Specifies updated binary data that you want to encrypt and
-- store in the new version of the secret. To use this parameter in the
-- command-line tools, we recommend that you store your binary data in a
-- file and then use the appropriate technique for your tool to pass the
-- contents of the file as a parameter. Either @SecretBinary@ or
-- @SecretString@ must have a value, but not both. They cannot both be
-- empty.
--
-- This parameter is not accessible using the Secrets Manager console.--
-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.
-- -- The underlying isomorphism will encode to Base64 representation during
-- -- serialisation, and decode from Base64 representation during deserialisation.
-- -- This 'Lens' accepts and returns only raw unencoded data.
--
-- 'kmsKeyId', 'updateSecret_kmsKeyId' - (Optional) Specifies an updated ARN or alias of the Amazon Web Services
-- KMS customer master key (CMK) that Secrets Manager uses to encrypt the
-- protected text in new versions of this secret as well as any existing
-- versions of this secret that have the staging labels AWSCURRENT,
-- AWSPENDING, or AWSPREVIOUS. For more information about staging labels,
-- see
-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/terms-concepts.html#term_staging-label Staging Labels>
-- in the /Amazon Web Services Secrets Manager User Guide/.
--
-- You can only use the account\'s default CMK to encrypt and decrypt if
-- you call this operation using credentials from the same account that
-- owns the secret. If the secret is in a different account, then you must
-- create a custom CMK and provide the ARN of that CMK in this field. The
-- user making the call must have permissions to both the secret and the
-- CMK in their respective accounts.
--
-- 'secretString', 'updateSecret_secretString' - (Optional) Specifies updated text data that you want to encrypt and
-- store in this new version of the secret. Either @SecretBinary@ or
-- @SecretString@ must have a value, but not both. They cannot both be
-- empty.
--
-- If you create this secret by using the Secrets Manager console then
-- Secrets Manager puts the protected secret text in only the
-- @SecretString@ parameter. The Secrets Manager console stores the
-- information as a JSON structure of key\/value pairs that the default
-- Lambda rotation function knows how to parse.
--
-- For storing multiple values, we recommend that you use a JSON text
-- string argument and specify key\/value pairs. For more information, see
-- <https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-parameters.html Specifying parameter values for the Amazon Web Services CLI>
-- in the Amazon Web Services CLI User Guide.
--
-- 'clientRequestToken', 'updateSecret_clientRequestToken' - (Optional) If you want to add a new version to the secret, this
-- parameter specifies a unique identifier for the new version that helps
-- ensure idempotency.
--
-- If you use the Amazon Web Services CLI or one of the Amazon Web Services
-- SDK to call this operation, then you can leave this parameter empty. The
-- CLI or SDK generates a random UUID for you and includes that in the
-- request. If you don\'t use the SDK and instead generate a raw HTTP
-- request to the Secrets Manager service endpoint, then you must generate
-- a @ClientRequestToken@ yourself for new versions and include that value
-- in the request.
--
-- You typically only need to interact with this value if you implement
-- your own retry logic and want to ensure that a given secret is not
-- created twice. We recommend that you generate a
-- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>
-- value to ensure uniqueness within the specified secret.
--
-- Secrets Manager uses this value to prevent the accidental creation of
-- duplicate versions if there are failures and retries during the Lambda
-- rotation function\'s processing.
--
-- -   If the @ClientRequestToken@ value isn\'t already associated with a
--     version of the secret then a new version of the secret is created.
--
-- -   If a version with this value already exists and that version\'s
--     @SecretString@ and @SecretBinary@ values are the same as those in
--     the request then the request is ignored (the operation is
--     idempotent).
--
-- -   If a version with this value already exists and that version\'s
--     @SecretString@ and @SecretBinary@ values are different from the
--     request then an error occurs because you cannot modify an existing
--     secret value.
--
-- This value becomes the @VersionId@ of the new version.
--
-- 'description', 'updateSecret_description' - (Optional) Specifies an updated user-provided description of the secret.
--
-- 'secretId', 'updateSecret_secretId' - Specifies the secret that you want to modify or to which you want to add
-- a new version. You can specify either the Amazon Resource Name (ARN) or
-- the friendly name of the secret.
--
-- For an ARN, we recommend that you specify a complete ARN rather than a
-- partial ARN.
newUpdateSecret ::
  -- | 'secretId'
  Prelude.Text ->
  UpdateSecret
newUpdateSecret :: Text -> UpdateSecret
newUpdateSecret Text
pSecretId_ =
  UpdateSecret' :: Maybe (Sensitive Base64)
-> Maybe Text
-> Maybe (Sensitive Text)
-> Maybe Text
-> Maybe Text
-> Text
-> UpdateSecret
UpdateSecret'
    { $sel:secretBinary:UpdateSecret' :: Maybe (Sensitive Base64)
secretBinary = Maybe (Sensitive Base64)
forall a. Maybe a
Prelude.Nothing,
      $sel:kmsKeyId:UpdateSecret' :: Maybe Text
kmsKeyId = Maybe Text
forall a. Maybe a
Prelude.Nothing,
      $sel:secretString:UpdateSecret' :: Maybe (Sensitive Text)
secretString = Maybe (Sensitive Text)
forall a. Maybe a
Prelude.Nothing,
      $sel:clientRequestToken:UpdateSecret' :: Maybe Text
clientRequestToken = Maybe Text
forall a. Maybe a
Prelude.Nothing,
      $sel:description:UpdateSecret' :: Maybe Text
description = Maybe Text
forall a. Maybe a
Prelude.Nothing,
      $sel:secretId:UpdateSecret' :: Text
secretId = Text
pSecretId_
    }

-- | (Optional) Specifies updated binary data that you want to encrypt and
-- store in the new version of the secret. To use this parameter in the
-- command-line tools, we recommend that you store your binary data in a
-- file and then use the appropriate technique for your tool to pass the
-- contents of the file as a parameter. Either @SecretBinary@ or
-- @SecretString@ must have a value, but not both. They cannot both be
-- empty.
--
-- This parameter is not accessible using the Secrets Manager console.--
-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.
-- -- The underlying isomorphism will encode to Base64 representation during
-- -- serialisation, and decode from Base64 representation during deserialisation.
-- -- This 'Lens' accepts and returns only raw unencoded data.
updateSecret_secretBinary :: Lens.Lens' UpdateSecret (Prelude.Maybe Prelude.ByteString)
updateSecret_secretBinary :: (Maybe ByteString -> f (Maybe ByteString))
-> UpdateSecret -> f UpdateSecret
updateSecret_secretBinary = (UpdateSecret -> Maybe (Sensitive Base64))
-> (UpdateSecret -> Maybe (Sensitive Base64) -> UpdateSecret)
-> Lens
     UpdateSecret
     UpdateSecret
     (Maybe (Sensitive Base64))
     (Maybe (Sensitive Base64))
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecret' {Maybe (Sensitive Base64)
secretBinary :: Maybe (Sensitive Base64)
$sel:secretBinary:UpdateSecret' :: UpdateSecret -> Maybe (Sensitive Base64)
secretBinary} -> Maybe (Sensitive Base64)
secretBinary) (\s :: UpdateSecret
s@UpdateSecret' {} Maybe (Sensitive Base64)
a -> UpdateSecret
s {$sel:secretBinary:UpdateSecret' :: Maybe (Sensitive Base64)
secretBinary = Maybe (Sensitive Base64)
a} :: UpdateSecret) ((Maybe (Sensitive Base64) -> f (Maybe (Sensitive Base64)))
 -> UpdateSecret -> f UpdateSecret)
-> ((Maybe ByteString -> f (Maybe ByteString))
    -> Maybe (Sensitive Base64) -> f (Maybe (Sensitive Base64)))
-> (Maybe ByteString -> f (Maybe ByteString))
-> UpdateSecret
-> f UpdateSecret
forall b c a. (b -> c) -> (a -> b) -> a -> c
Prelude.. AnIso (Sensitive Base64) (Sensitive Base64) ByteString ByteString
-> Iso
     (Maybe (Sensitive Base64))
     (Maybe (Sensitive Base64))
     (Maybe ByteString)
     (Maybe ByteString)
forall (f :: * -> *) (g :: * -> *) s t a b.
(Functor f, Functor g) =>
AnIso s t a b -> Iso (f s) (g t) (f a) (g b)
Lens.mapping (Exchange ByteString ByteString Base64 (Identity Base64)
-> Exchange
     ByteString
     ByteString
     (Sensitive Base64)
     (Identity (Sensitive Base64))
forall a. Iso' (Sensitive a) a
Core._Sensitive (Exchange ByteString ByteString Base64 (Identity Base64)
 -> Exchange
      ByteString
      ByteString
      (Sensitive Base64)
      (Identity (Sensitive Base64)))
-> (Exchange ByteString ByteString ByteString (Identity ByteString)
    -> Exchange ByteString ByteString Base64 (Identity Base64))
-> AnIso
     (Sensitive Base64) (Sensitive Base64) ByteString ByteString
forall b c a. (b -> c) -> (a -> b) -> a -> c
Prelude.. Exchange ByteString ByteString ByteString (Identity ByteString)
-> Exchange ByteString ByteString Base64 (Identity Base64)
Iso' Base64 ByteString
Core._Base64)

-- | (Optional) Specifies an updated ARN or alias of the Amazon Web Services
-- KMS customer master key (CMK) that Secrets Manager uses to encrypt the
-- protected text in new versions of this secret as well as any existing
-- versions of this secret that have the staging labels AWSCURRENT,
-- AWSPENDING, or AWSPREVIOUS. For more information about staging labels,
-- see
-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/terms-concepts.html#term_staging-label Staging Labels>
-- in the /Amazon Web Services Secrets Manager User Guide/.
--
-- You can only use the account\'s default CMK to encrypt and decrypt if
-- you call this operation using credentials from the same account that
-- owns the secret. If the secret is in a different account, then you must
-- create a custom CMK and provide the ARN of that CMK in this field. The
-- user making the call must have permissions to both the secret and the
-- CMK in their respective accounts.
updateSecret_kmsKeyId :: Lens.Lens' UpdateSecret (Prelude.Maybe Prelude.Text)
updateSecret_kmsKeyId :: (Maybe Text -> f (Maybe Text)) -> UpdateSecret -> f UpdateSecret
updateSecret_kmsKeyId = (UpdateSecret -> Maybe Text)
-> (UpdateSecret -> Maybe Text -> UpdateSecret)
-> Lens UpdateSecret UpdateSecret (Maybe Text) (Maybe Text)
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecret' {Maybe Text
kmsKeyId :: Maybe Text
$sel:kmsKeyId:UpdateSecret' :: UpdateSecret -> Maybe Text
kmsKeyId} -> Maybe Text
kmsKeyId) (\s :: UpdateSecret
s@UpdateSecret' {} Maybe Text
a -> UpdateSecret
s {$sel:kmsKeyId:UpdateSecret' :: Maybe Text
kmsKeyId = Maybe Text
a} :: UpdateSecret)

-- | (Optional) Specifies updated text data that you want to encrypt and
-- store in this new version of the secret. Either @SecretBinary@ or
-- @SecretString@ must have a value, but not both. They cannot both be
-- empty.
--
-- If you create this secret by using the Secrets Manager console then
-- Secrets Manager puts the protected secret text in only the
-- @SecretString@ parameter. The Secrets Manager console stores the
-- information as a JSON structure of key\/value pairs that the default
-- Lambda rotation function knows how to parse.
--
-- For storing multiple values, we recommend that you use a JSON text
-- string argument and specify key\/value pairs. For more information, see
-- <https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-parameters.html Specifying parameter values for the Amazon Web Services CLI>
-- in the Amazon Web Services CLI User Guide.
updateSecret_secretString :: Lens.Lens' UpdateSecret (Prelude.Maybe Prelude.Text)
updateSecret_secretString :: (Maybe Text -> f (Maybe Text)) -> UpdateSecret -> f UpdateSecret
updateSecret_secretString = (UpdateSecret -> Maybe (Sensitive Text))
-> (UpdateSecret -> Maybe (Sensitive Text) -> UpdateSecret)
-> Lens
     UpdateSecret
     UpdateSecret
     (Maybe (Sensitive Text))
     (Maybe (Sensitive Text))
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecret' {Maybe (Sensitive Text)
secretString :: Maybe (Sensitive Text)
$sel:secretString:UpdateSecret' :: UpdateSecret -> Maybe (Sensitive Text)
secretString} -> Maybe (Sensitive Text)
secretString) (\s :: UpdateSecret
s@UpdateSecret' {} Maybe (Sensitive Text)
a -> UpdateSecret
s {$sel:secretString:UpdateSecret' :: Maybe (Sensitive Text)
secretString = Maybe (Sensitive Text)
a} :: UpdateSecret) ((Maybe (Sensitive Text) -> f (Maybe (Sensitive Text)))
 -> UpdateSecret -> f UpdateSecret)
-> ((Maybe Text -> f (Maybe Text))
    -> Maybe (Sensitive Text) -> f (Maybe (Sensitive Text)))
-> (Maybe Text -> f (Maybe Text))
-> UpdateSecret
-> f UpdateSecret
forall b c a. (b -> c) -> (a -> b) -> a -> c
Prelude.. AnIso (Sensitive Text) (Sensitive Text) Text Text
-> Iso
     (Maybe (Sensitive Text))
     (Maybe (Sensitive Text))
     (Maybe Text)
     (Maybe Text)
forall (f :: * -> *) (g :: * -> *) s t a b.
(Functor f, Functor g) =>
AnIso s t a b -> Iso (f s) (g t) (f a) (g b)
Lens.mapping AnIso (Sensitive Text) (Sensitive Text) Text Text
forall a. Iso' (Sensitive a) a
Core._Sensitive

-- | (Optional) If you want to add a new version to the secret, this
-- parameter specifies a unique identifier for the new version that helps
-- ensure idempotency.
--
-- If you use the Amazon Web Services CLI or one of the Amazon Web Services
-- SDK to call this operation, then you can leave this parameter empty. The
-- CLI or SDK generates a random UUID for you and includes that in the
-- request. If you don\'t use the SDK and instead generate a raw HTTP
-- request to the Secrets Manager service endpoint, then you must generate
-- a @ClientRequestToken@ yourself for new versions and include that value
-- in the request.
--
-- You typically only need to interact with this value if you implement
-- your own retry logic and want to ensure that a given secret is not
-- created twice. We recommend that you generate a
-- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>
-- value to ensure uniqueness within the specified secret.
--
-- Secrets Manager uses this value to prevent the accidental creation of
-- duplicate versions if there are failures and retries during the Lambda
-- rotation function\'s processing.
--
-- -   If the @ClientRequestToken@ value isn\'t already associated with a
--     version of the secret then a new version of the secret is created.
--
-- -   If a version with this value already exists and that version\'s
--     @SecretString@ and @SecretBinary@ values are the same as those in
--     the request then the request is ignored (the operation is
--     idempotent).
--
-- -   If a version with this value already exists and that version\'s
--     @SecretString@ and @SecretBinary@ values are different from the
--     request then an error occurs because you cannot modify an existing
--     secret value.
--
-- This value becomes the @VersionId@ of the new version.
updateSecret_clientRequestToken :: Lens.Lens' UpdateSecret (Prelude.Maybe Prelude.Text)
updateSecret_clientRequestToken :: (Maybe Text -> f (Maybe Text)) -> UpdateSecret -> f UpdateSecret
updateSecret_clientRequestToken = (UpdateSecret -> Maybe Text)
-> (UpdateSecret -> Maybe Text -> UpdateSecret)
-> Lens UpdateSecret UpdateSecret (Maybe Text) (Maybe Text)
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecret' {Maybe Text
clientRequestToken :: Maybe Text
$sel:clientRequestToken:UpdateSecret' :: UpdateSecret -> Maybe Text
clientRequestToken} -> Maybe Text
clientRequestToken) (\s :: UpdateSecret
s@UpdateSecret' {} Maybe Text
a -> UpdateSecret
s {$sel:clientRequestToken:UpdateSecret' :: Maybe Text
clientRequestToken = Maybe Text
a} :: UpdateSecret)

-- | (Optional) Specifies an updated user-provided description of the secret.
updateSecret_description :: Lens.Lens' UpdateSecret (Prelude.Maybe Prelude.Text)
updateSecret_description :: (Maybe Text -> f (Maybe Text)) -> UpdateSecret -> f UpdateSecret
updateSecret_description = (UpdateSecret -> Maybe Text)
-> (UpdateSecret -> Maybe Text -> UpdateSecret)
-> Lens UpdateSecret UpdateSecret (Maybe Text) (Maybe Text)
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecret' {Maybe Text
description :: Maybe Text
$sel:description:UpdateSecret' :: UpdateSecret -> Maybe Text
description} -> Maybe Text
description) (\s :: UpdateSecret
s@UpdateSecret' {} Maybe Text
a -> UpdateSecret
s {$sel:description:UpdateSecret' :: Maybe Text
description = Maybe Text
a} :: UpdateSecret)

-- | Specifies the secret that you want to modify or to which you want to add
-- a new version. You can specify either the Amazon Resource Name (ARN) or
-- the friendly name of the secret.
--
-- For an ARN, we recommend that you specify a complete ARN rather than a
-- partial ARN.
updateSecret_secretId :: Lens.Lens' UpdateSecret Prelude.Text
updateSecret_secretId :: (Text -> f Text) -> UpdateSecret -> f UpdateSecret
updateSecret_secretId = (UpdateSecret -> Text)
-> (UpdateSecret -> Text -> UpdateSecret)
-> Lens UpdateSecret UpdateSecret Text Text
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecret' {Text
secretId :: Text
$sel:secretId:UpdateSecret' :: UpdateSecret -> Text
secretId} -> Text
secretId) (\s :: UpdateSecret
s@UpdateSecret' {} Text
a -> UpdateSecret
s {$sel:secretId:UpdateSecret' :: Text
secretId = Text
a} :: UpdateSecret)

instance Core.AWSRequest UpdateSecret where
  type AWSResponse UpdateSecret = UpdateSecretResponse
  request :: UpdateSecret -> Request UpdateSecret
request = Service -> UpdateSecret -> Request UpdateSecret
forall a. (ToRequest a, ToJSON a) => Service -> a -> Request a
Request.postJSON Service
defaultService
  response :: Logger
-> Service
-> Proxy UpdateSecret
-> ClientResponse ClientBody
-> m (Either Error (ClientResponse (AWSResponse UpdateSecret)))
response =
    (Int
 -> ResponseHeaders
 -> Object
 -> Either String (AWSResponse UpdateSecret))
-> Logger
-> Service
-> Proxy UpdateSecret
-> ClientResponse ClientBody
-> m (Either Error (ClientResponse (AWSResponse UpdateSecret)))
forall (m :: * -> *) a.
MonadResource m =>
(Int -> ResponseHeaders -> Object -> Either String (AWSResponse a))
-> Logger
-> Service
-> Proxy a
-> ClientResponse ClientBody
-> m (Either Error (ClientResponse (AWSResponse a)))
Response.receiveJSON
      ( \Int
s ResponseHeaders
h Object
x ->
          Maybe Text
-> Maybe Text -> Maybe Text -> Int -> UpdateSecretResponse
UpdateSecretResponse'
            (Maybe Text
 -> Maybe Text -> Maybe Text -> Int -> UpdateSecretResponse)
-> Either String (Maybe Text)
-> Either
     String (Maybe Text -> Maybe Text -> Int -> UpdateSecretResponse)
forall (f :: * -> *) a b. Functor f => (a -> b) -> f a -> f b
Prelude.<$> (Object
x Object -> Text -> Either String (Maybe Text)
forall a. FromJSON a => Object -> Text -> Either String (Maybe a)
Core..?> Text
"VersionId")
            Either
  String (Maybe Text -> Maybe Text -> Int -> UpdateSecretResponse)
-> Either String (Maybe Text)
-> Either String (Maybe Text -> Int -> UpdateSecretResponse)
forall (f :: * -> *) a b. Applicative f => f (a -> b) -> f a -> f b
Prelude.<*> (Object
x Object -> Text -> Either String (Maybe Text)
forall a. FromJSON a => Object -> Text -> Either String (Maybe a)
Core..?> Text
"ARN")
            Either String (Maybe Text -> Int -> UpdateSecretResponse)
-> Either String (Maybe Text)
-> Either String (Int -> UpdateSecretResponse)
forall (f :: * -> *) a b. Applicative f => f (a -> b) -> f a -> f b
Prelude.<*> (Object
x Object -> Text -> Either String (Maybe Text)
forall a. FromJSON a => Object -> Text -> Either String (Maybe a)
Core..?> Text
"Name")
            Either String (Int -> UpdateSecretResponse)
-> Either String Int -> Either String UpdateSecretResponse
forall (f :: * -> *) a b. Applicative f => f (a -> b) -> f a -> f b
Prelude.<*> (Int -> Either String Int
forall (f :: * -> *) a. Applicative f => a -> f a
Prelude.pure (Int -> Int
forall a. Enum a => a -> Int
Prelude.fromEnum Int
s))
      )

instance Prelude.Hashable UpdateSecret

instance Prelude.NFData UpdateSecret

instance Core.ToHeaders UpdateSecret where
  toHeaders :: UpdateSecret -> ResponseHeaders
toHeaders =
    ResponseHeaders -> UpdateSecret -> ResponseHeaders
forall a b. a -> b -> a
Prelude.const
      ( [ResponseHeaders] -> ResponseHeaders
forall a. Monoid a => [a] -> a
Prelude.mconcat
          [ HeaderName
"X-Amz-Target"
              HeaderName -> ByteString -> ResponseHeaders
forall a. ToHeader a => HeaderName -> a -> ResponseHeaders
Core.=# ( ByteString
"secretsmanager.UpdateSecret" ::
                          Prelude.ByteString
                      ),
            HeaderName
"Content-Type"
              HeaderName -> ByteString -> ResponseHeaders
forall a. ToHeader a => HeaderName -> a -> ResponseHeaders
Core.=# ( ByteString
"application/x-amz-json-1.1" ::
                          Prelude.ByteString
                      )
          ]
      )

instance Core.ToJSON UpdateSecret where
  toJSON :: UpdateSecret -> Value
toJSON UpdateSecret' {Maybe Text
Maybe (Sensitive Text)
Maybe (Sensitive Base64)
Text
secretId :: Text
description :: Maybe Text
clientRequestToken :: Maybe Text
secretString :: Maybe (Sensitive Text)
kmsKeyId :: Maybe Text
secretBinary :: Maybe (Sensitive Base64)
$sel:secretId:UpdateSecret' :: UpdateSecret -> Text
$sel:description:UpdateSecret' :: UpdateSecret -> Maybe Text
$sel:clientRequestToken:UpdateSecret' :: UpdateSecret -> Maybe Text
$sel:secretString:UpdateSecret' :: UpdateSecret -> Maybe (Sensitive Text)
$sel:kmsKeyId:UpdateSecret' :: UpdateSecret -> Maybe Text
$sel:secretBinary:UpdateSecret' :: UpdateSecret -> Maybe (Sensitive Base64)
..} =
    [Pair] -> Value
Core.object
      ( [Maybe Pair] -> [Pair]
forall a. [Maybe a] -> [a]
Prelude.catMaybes
          [ (Text
"SecretBinary" Text -> Sensitive Base64 -> Pair
forall kv v. (KeyValue kv, ToJSON v) => Text -> v -> kv
Core..=) (Sensitive Base64 -> Pair)
-> Maybe (Sensitive Base64) -> Maybe Pair
forall (f :: * -> *) a b. Functor f => (a -> b) -> f a -> f b
Prelude.<$> Maybe (Sensitive Base64)
secretBinary,
            (Text
"KmsKeyId" Text -> Text -> Pair
forall kv v. (KeyValue kv, ToJSON v) => Text -> v -> kv
Core..=) (Text -> Pair) -> Maybe Text -> Maybe Pair
forall (f :: * -> *) a b. Functor f => (a -> b) -> f a -> f b
Prelude.<$> Maybe Text
kmsKeyId,
            (Text
"SecretString" Text -> Sensitive Text -> Pair
forall kv v. (KeyValue kv, ToJSON v) => Text -> v -> kv
Core..=) (Sensitive Text -> Pair) -> Maybe (Sensitive Text) -> Maybe Pair
forall (f :: * -> *) a b. Functor f => (a -> b) -> f a -> f b
Prelude.<$> Maybe (Sensitive Text)
secretString,
            (Text
"ClientRequestToken" Text -> Text -> Pair
forall kv v. (KeyValue kv, ToJSON v) => Text -> v -> kv
Core..=)
              (Text -> Pair) -> Maybe Text -> Maybe Pair
forall (f :: * -> *) a b. Functor f => (a -> b) -> f a -> f b
Prelude.<$> Maybe Text
clientRequestToken,
            (Text
"Description" Text -> Text -> Pair
forall kv v. (KeyValue kv, ToJSON v) => Text -> v -> kv
Core..=) (Text -> Pair) -> Maybe Text -> Maybe Pair
forall (f :: * -> *) a b. Functor f => (a -> b) -> f a -> f b
Prelude.<$> Maybe Text
description,
            Pair -> Maybe Pair
forall a. a -> Maybe a
Prelude.Just (Text
"SecretId" Text -> Text -> Pair
forall kv v. (KeyValue kv, ToJSON v) => Text -> v -> kv
Core..= Text
secretId)
          ]
      )

instance Core.ToPath UpdateSecret where
  toPath :: UpdateSecret -> ByteString
toPath = ByteString -> UpdateSecret -> ByteString
forall a b. a -> b -> a
Prelude.const ByteString
"/"

instance Core.ToQuery UpdateSecret where
  toQuery :: UpdateSecret -> QueryString
toQuery = QueryString -> UpdateSecret -> QueryString
forall a b. a -> b -> a
Prelude.const QueryString
forall a. Monoid a => a
Prelude.mempty

-- | /See:/ 'newUpdateSecretResponse' smart constructor.
data UpdateSecretResponse = UpdateSecretResponse'
  { -- | If a new version of the secret was created by this operation, then
    -- @VersionId@ contains the unique identifier of the new version.
    UpdateSecretResponse -> Maybe Text
versionId :: Prelude.Maybe Prelude.Text,
    -- | The ARN of the secret that was updated.
    --
    -- Secrets Manager automatically adds several random characters to the name
    -- at the end of the ARN when you initially create a secret. This affects
    -- only the ARN and not the actual friendly name. This ensures that if you
    -- create a new secret with the same name as an old secret that you
    -- previously deleted, then users with access to the old secret /don\'t/
    -- automatically get access to the new secret because the ARNs are
    -- different.
    UpdateSecretResponse -> Maybe Text
arn :: Prelude.Maybe Prelude.Text,
    -- | The friendly name of the secret that was updated.
    UpdateSecretResponse -> Maybe Text
name :: Prelude.Maybe Prelude.Text,
    -- | The response's http status code.
    UpdateSecretResponse -> Int
httpStatus :: Prelude.Int
  }
  deriving (UpdateSecretResponse -> UpdateSecretResponse -> Bool
(UpdateSecretResponse -> UpdateSecretResponse -> Bool)
-> (UpdateSecretResponse -> UpdateSecretResponse -> Bool)
-> Eq UpdateSecretResponse
forall a. (a -> a -> Bool) -> (a -> a -> Bool) -> Eq a
/= :: UpdateSecretResponse -> UpdateSecretResponse -> Bool
$c/= :: UpdateSecretResponse -> UpdateSecretResponse -> Bool
== :: UpdateSecretResponse -> UpdateSecretResponse -> Bool
$c== :: UpdateSecretResponse -> UpdateSecretResponse -> Bool
Prelude.Eq, ReadPrec [UpdateSecretResponse]
ReadPrec UpdateSecretResponse
Int -> ReadS UpdateSecretResponse
ReadS [UpdateSecretResponse]
(Int -> ReadS UpdateSecretResponse)
-> ReadS [UpdateSecretResponse]
-> ReadPrec UpdateSecretResponse
-> ReadPrec [UpdateSecretResponse]
-> Read UpdateSecretResponse
forall a.
(Int -> ReadS a)
-> ReadS [a] -> ReadPrec a -> ReadPrec [a] -> Read a
readListPrec :: ReadPrec [UpdateSecretResponse]
$creadListPrec :: ReadPrec [UpdateSecretResponse]
readPrec :: ReadPrec UpdateSecretResponse
$creadPrec :: ReadPrec UpdateSecretResponse
readList :: ReadS [UpdateSecretResponse]
$creadList :: ReadS [UpdateSecretResponse]
readsPrec :: Int -> ReadS UpdateSecretResponse
$creadsPrec :: Int -> ReadS UpdateSecretResponse
Prelude.Read, Int -> UpdateSecretResponse -> ShowS
[UpdateSecretResponse] -> ShowS
UpdateSecretResponse -> String
(Int -> UpdateSecretResponse -> ShowS)
-> (UpdateSecretResponse -> String)
-> ([UpdateSecretResponse] -> ShowS)
-> Show UpdateSecretResponse
forall a.
(Int -> a -> ShowS) -> (a -> String) -> ([a] -> ShowS) -> Show a
showList :: [UpdateSecretResponse] -> ShowS
$cshowList :: [UpdateSecretResponse] -> ShowS
show :: UpdateSecretResponse -> String
$cshow :: UpdateSecretResponse -> String
showsPrec :: Int -> UpdateSecretResponse -> ShowS
$cshowsPrec :: Int -> UpdateSecretResponse -> ShowS
Prelude.Show, (forall x. UpdateSecretResponse -> Rep UpdateSecretResponse x)
-> (forall x. Rep UpdateSecretResponse x -> UpdateSecretResponse)
-> Generic UpdateSecretResponse
forall x. Rep UpdateSecretResponse x -> UpdateSecretResponse
forall x. UpdateSecretResponse -> Rep UpdateSecretResponse x
forall a.
(forall x. a -> Rep a x) -> (forall x. Rep a x -> a) -> Generic a
$cto :: forall x. Rep UpdateSecretResponse x -> UpdateSecretResponse
$cfrom :: forall x. UpdateSecretResponse -> Rep UpdateSecretResponse x
Prelude.Generic)

-- |
-- Create a value of 'UpdateSecretResponse' with all optional fields omitted.
--
-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.
--
-- The following record fields are available, with the corresponding lenses provided
-- for backwards compatibility:
--
-- 'versionId', 'updateSecretResponse_versionId' - If a new version of the secret was created by this operation, then
-- @VersionId@ contains the unique identifier of the new version.
--
-- 'arn', 'updateSecretResponse_arn' - The ARN of the secret that was updated.
--
-- Secrets Manager automatically adds several random characters to the name
-- at the end of the ARN when you initially create a secret. This affects
-- only the ARN and not the actual friendly name. This ensures that if you
-- create a new secret with the same name as an old secret that you
-- previously deleted, then users with access to the old secret /don\'t/
-- automatically get access to the new secret because the ARNs are
-- different.
--
-- 'name', 'updateSecretResponse_name' - The friendly name of the secret that was updated.
--
-- 'httpStatus', 'updateSecretResponse_httpStatus' - The response's http status code.
newUpdateSecretResponse ::
  -- | 'httpStatus'
  Prelude.Int ->
  UpdateSecretResponse
newUpdateSecretResponse :: Int -> UpdateSecretResponse
newUpdateSecretResponse Int
pHttpStatus_ =
  UpdateSecretResponse' :: Maybe Text
-> Maybe Text -> Maybe Text -> Int -> UpdateSecretResponse
UpdateSecretResponse'
    { $sel:versionId:UpdateSecretResponse' :: Maybe Text
versionId = Maybe Text
forall a. Maybe a
Prelude.Nothing,
      $sel:arn:UpdateSecretResponse' :: Maybe Text
arn = Maybe Text
forall a. Maybe a
Prelude.Nothing,
      $sel:name:UpdateSecretResponse' :: Maybe Text
name = Maybe Text
forall a. Maybe a
Prelude.Nothing,
      $sel:httpStatus:UpdateSecretResponse' :: Int
httpStatus = Int
pHttpStatus_
    }

-- | If a new version of the secret was created by this operation, then
-- @VersionId@ contains the unique identifier of the new version.
updateSecretResponse_versionId :: Lens.Lens' UpdateSecretResponse (Prelude.Maybe Prelude.Text)
updateSecretResponse_versionId :: (Maybe Text -> f (Maybe Text))
-> UpdateSecretResponse -> f UpdateSecretResponse
updateSecretResponse_versionId = (UpdateSecretResponse -> Maybe Text)
-> (UpdateSecretResponse -> Maybe Text -> UpdateSecretResponse)
-> Lens
     UpdateSecretResponse UpdateSecretResponse (Maybe Text) (Maybe Text)
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecretResponse' {Maybe Text
versionId :: Maybe Text
$sel:versionId:UpdateSecretResponse' :: UpdateSecretResponse -> Maybe Text
versionId} -> Maybe Text
versionId) (\s :: UpdateSecretResponse
s@UpdateSecretResponse' {} Maybe Text
a -> UpdateSecretResponse
s {$sel:versionId:UpdateSecretResponse' :: Maybe Text
versionId = Maybe Text
a} :: UpdateSecretResponse)

-- | The ARN of the secret that was updated.
--
-- Secrets Manager automatically adds several random characters to the name
-- at the end of the ARN when you initially create a secret. This affects
-- only the ARN and not the actual friendly name. This ensures that if you
-- create a new secret with the same name as an old secret that you
-- previously deleted, then users with access to the old secret /don\'t/
-- automatically get access to the new secret because the ARNs are
-- different.
updateSecretResponse_arn :: Lens.Lens' UpdateSecretResponse (Prelude.Maybe Prelude.Text)
updateSecretResponse_arn :: (Maybe Text -> f (Maybe Text))
-> UpdateSecretResponse -> f UpdateSecretResponse
updateSecretResponse_arn = (UpdateSecretResponse -> Maybe Text)
-> (UpdateSecretResponse -> Maybe Text -> UpdateSecretResponse)
-> Lens
     UpdateSecretResponse UpdateSecretResponse (Maybe Text) (Maybe Text)
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecretResponse' {Maybe Text
arn :: Maybe Text
$sel:arn:UpdateSecretResponse' :: UpdateSecretResponse -> Maybe Text
arn} -> Maybe Text
arn) (\s :: UpdateSecretResponse
s@UpdateSecretResponse' {} Maybe Text
a -> UpdateSecretResponse
s {$sel:arn:UpdateSecretResponse' :: Maybe Text
arn = Maybe Text
a} :: UpdateSecretResponse)

-- | The friendly name of the secret that was updated.
updateSecretResponse_name :: Lens.Lens' UpdateSecretResponse (Prelude.Maybe Prelude.Text)
updateSecretResponse_name :: (Maybe Text -> f (Maybe Text))
-> UpdateSecretResponse -> f UpdateSecretResponse
updateSecretResponse_name = (UpdateSecretResponse -> Maybe Text)
-> (UpdateSecretResponse -> Maybe Text -> UpdateSecretResponse)
-> Lens
     UpdateSecretResponse UpdateSecretResponse (Maybe Text) (Maybe Text)
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecretResponse' {Maybe Text
name :: Maybe Text
$sel:name:UpdateSecretResponse' :: UpdateSecretResponse -> Maybe Text
name} -> Maybe Text
name) (\s :: UpdateSecretResponse
s@UpdateSecretResponse' {} Maybe Text
a -> UpdateSecretResponse
s {$sel:name:UpdateSecretResponse' :: Maybe Text
name = Maybe Text
a} :: UpdateSecretResponse)

-- | The response's http status code.
updateSecretResponse_httpStatus :: Lens.Lens' UpdateSecretResponse Prelude.Int
updateSecretResponse_httpStatus :: (Int -> f Int) -> UpdateSecretResponse -> f UpdateSecretResponse
updateSecretResponse_httpStatus = (UpdateSecretResponse -> Int)
-> (UpdateSecretResponse -> Int -> UpdateSecretResponse)
-> Lens UpdateSecretResponse UpdateSecretResponse Int Int
forall s a b t. (s -> a) -> (s -> b -> t) -> Lens s t a b
Lens.lens (\UpdateSecretResponse' {Int
httpStatus :: Int
$sel:httpStatus:UpdateSecretResponse' :: UpdateSecretResponse -> Int
httpStatus} -> Int
httpStatus) (\s :: UpdateSecretResponse
s@UpdateSecretResponse' {} Int
a -> UpdateSecretResponse
s {$sel:httpStatus:UpdateSecretResponse' :: Int
httpStatus = Int
a} :: UpdateSecretResponse)

instance Prelude.NFData UpdateSecretResponse