Copyright	(c) 2013-2021 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay <brendan.g.hay+amazonka@gmail.com>
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	None

Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration

Contents

Creating a Request
Request Lenses
Destructuring the Response
Response Lenses

Description

Enables the attributes-based access control (ABAC) feature for the specified Amazon Web Services SSO instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the Amazon Web Services SSO User Guide.

Synopsis

Creating a Request

data CreateInstanceAccessControlAttributeConfiguration Source #

See: newCreateInstanceAccessControlAttributeConfiguration smart constructor.

Constructors

CreateInstanceAccessControlAttributeConfiguration'

Fields

instanceArn :: Text
The ARN of the SSO instance under which the operation will be executed.
instanceAccessControlAttributeConfiguration :: InstanceAccessControlAttributeConfiguration
Specifies the Amazon Web Services SSO identity store attributes to add to your ABAC configuration. When using an external identity provider as an identity source, you can pass attributes through the SAML assertion. Doing so provides an alternative to configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of these attributes, Amazon Web Services SSO will replace the attribute value with the value from the Amazon Web Services SSO identity store.

Instances

Instances details

Eq CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods (==) :: CreateInstanceAccessControlAttributeConfiguration -> CreateInstanceAccessControlAttributeConfiguration -> Bool # (/=) :: CreateInstanceAccessControlAttributeConfiguration -> CreateInstanceAccessControlAttributeConfiguration -> Bool #
Read CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods readsPrec :: Int -> ReadS CreateInstanceAccessControlAttributeConfiguration # readList :: ReadS [CreateInstanceAccessControlAttributeConfiguration] # readPrec :: ReadPrec CreateInstanceAccessControlAttributeConfiguration # readListPrec :: ReadPrec [CreateInstanceAccessControlAttributeConfiguration] #
Show CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods showsPrec :: Int -> CreateInstanceAccessControlAttributeConfiguration -> ShowS # show :: CreateInstanceAccessControlAttributeConfiguration -> String # showList :: [CreateInstanceAccessControlAttributeConfiguration] -> ShowS #
Generic CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Associated Types type Rep CreateInstanceAccessControlAttributeConfiguration :: Type -> Type # Methods from :: CreateInstanceAccessControlAttributeConfiguration -> Rep CreateInstanceAccessControlAttributeConfiguration x # to :: Rep CreateInstanceAccessControlAttributeConfiguration x -> CreateInstanceAccessControlAttributeConfiguration #
NFData CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods rnf :: CreateInstanceAccessControlAttributeConfiguration -> () #
Hashable CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods hashWithSalt :: Int -> CreateInstanceAccessControlAttributeConfiguration -> Int # hash :: CreateInstanceAccessControlAttributeConfiguration -> Int #
ToJSON CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods toJSON :: CreateInstanceAccessControlAttributeConfiguration -> Value # toEncoding :: CreateInstanceAccessControlAttributeConfiguration -> Encoding # toJSONList :: [CreateInstanceAccessControlAttributeConfiguration] -> Value # toEncodingList :: [CreateInstanceAccessControlAttributeConfiguration] -> Encoding #
AWSRequest CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Associated Types type AWSResponse CreateInstanceAccessControlAttributeConfiguration # Methods request :: CreateInstanceAccessControlAttributeConfiguration -> Request CreateInstanceAccessControlAttributeConfiguration # response :: MonadResource m => Logger -> Service -> Proxy CreateInstanceAccessControlAttributeConfiguration -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse CreateInstanceAccessControlAttributeConfiguration))) #
ToHeaders CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods toHeaders :: CreateInstanceAccessControlAttributeConfiguration -> [Header] #
ToPath CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods toPath :: CreateInstanceAccessControlAttributeConfiguration -> ByteString #
ToQuery CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods toQuery :: CreateInstanceAccessControlAttributeConfiguration -> QueryString #
type Rep CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration type Rep CreateInstanceAccessControlAttributeConfiguration = D1 ('MetaData "CreateInstanceAccessControlAttributeConfiguration" "Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration" "libZSservicesZSamazonka-sso-adminZSamazonka-sso-admin" 'False) (C1 ('MetaCons "CreateInstanceAccessControlAttributeConfiguration'" 'PrefixI 'True) (S1 ('MetaSel ('Just "instanceArn") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "instanceAccessControlAttributeConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 InstanceAccessControlAttributeConfiguration)))
type AWSResponse CreateInstanceAccessControlAttributeConfiguration Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration type AWSResponse CreateInstanceAccessControlAttributeConfiguration = CreateInstanceAccessControlAttributeConfigurationResponse

newCreateInstanceAccessControlAttributeConfiguration Source #

Arguments

:: Text	`$sel:instanceArn:CreateInstanceAccessControlAttributeConfiguration'`
-> InstanceAccessControlAttributeConfiguration	`$sel:instanceAccessControlAttributeConfiguration:CreateInstanceAccessControlAttributeConfiguration'`
-> CreateInstanceAccessControlAttributeConfiguration

Create a value of CreateInstanceAccessControlAttributeConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:instanceArn:CreateInstanceAccessControlAttributeConfiguration', createInstanceAccessControlAttributeConfiguration_instanceArn - The ARN of the SSO instance under which the operation will be executed.

$sel:instanceAccessControlAttributeConfiguration:CreateInstanceAccessControlAttributeConfiguration', createInstanceAccessControlAttributeConfiguration_instanceAccessControlAttributeConfiguration - Specifies the Amazon Web Services SSO identity store attributes to add to your ABAC configuration. When using an external identity provider as an identity source, you can pass attributes through the SAML assertion. Doing so provides an alternative to configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of these attributes, Amazon Web Services SSO will replace the attribute value with the value from the Amazon Web Services SSO identity store.

Request Lenses

createInstanceAccessControlAttributeConfiguration_instanceArn :: Lens' CreateInstanceAccessControlAttributeConfiguration Text Source #

The ARN of the SSO instance under which the operation will be executed.

createInstanceAccessControlAttributeConfiguration_instanceAccessControlAttributeConfiguration :: Lens' CreateInstanceAccessControlAttributeConfiguration InstanceAccessControlAttributeConfiguration Source #

Specifies the Amazon Web Services SSO identity store attributes to add to your ABAC configuration. When using an external identity provider as an identity source, you can pass attributes through the SAML assertion. Doing so provides an alternative to configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of these attributes, Amazon Web Services SSO will replace the attribute value with the value from the Amazon Web Services SSO identity store.

Destructuring the Response

data CreateInstanceAccessControlAttributeConfigurationResponse Source #

See: newCreateInstanceAccessControlAttributeConfigurationResponse smart constructor.

Constructors

CreateInstanceAccessControlAttributeConfigurationResponse'
Fields httpStatus :: Int The response's http status code.

Instances

Instances details

Eq CreateInstanceAccessControlAttributeConfigurationResponse Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods (==) :: CreateInstanceAccessControlAttributeConfigurationResponse -> CreateInstanceAccessControlAttributeConfigurationResponse -> Bool # (/=) :: CreateInstanceAccessControlAttributeConfigurationResponse -> CreateInstanceAccessControlAttributeConfigurationResponse -> Bool #
Read CreateInstanceAccessControlAttributeConfigurationResponse Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods readsPrec :: Int -> ReadS CreateInstanceAccessControlAttributeConfigurationResponse # readList :: ReadS [CreateInstanceAccessControlAttributeConfigurationResponse] # readPrec :: ReadPrec CreateInstanceAccessControlAttributeConfigurationResponse # readListPrec :: ReadPrec [CreateInstanceAccessControlAttributeConfigurationResponse] #
Show CreateInstanceAccessControlAttributeConfigurationResponse Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods showsPrec :: Int -> CreateInstanceAccessControlAttributeConfigurationResponse -> ShowS # show :: CreateInstanceAccessControlAttributeConfigurationResponse -> String # showList :: [CreateInstanceAccessControlAttributeConfigurationResponse] -> ShowS #
Generic CreateInstanceAccessControlAttributeConfigurationResponse Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Associated Types type Rep CreateInstanceAccessControlAttributeConfigurationResponse :: Type -> Type # Methods from :: CreateInstanceAccessControlAttributeConfigurationResponse -> Rep CreateInstanceAccessControlAttributeConfigurationResponse x # to :: Rep CreateInstanceAccessControlAttributeConfigurationResponse x -> CreateInstanceAccessControlAttributeConfigurationResponse #
NFData CreateInstanceAccessControlAttributeConfigurationResponse Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration Methods rnf :: CreateInstanceAccessControlAttributeConfigurationResponse -> () #
type Rep CreateInstanceAccessControlAttributeConfigurationResponse Source #
Instance details Defined in Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration type Rep CreateInstanceAccessControlAttributeConfigurationResponse = D1 ('MetaData "CreateInstanceAccessControlAttributeConfigurationResponse" "Amazonka.SSOAdmin.CreateInstanceAccessControlAttributeConfiguration" "libZSservicesZSamazonka-sso-adminZSamazonka-sso-admin" 'False) (C1 ('MetaCons "CreateInstanceAccessControlAttributeConfigurationResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newCreateInstanceAccessControlAttributeConfigurationResponse Source #

Arguments

:: Int	`$sel:httpStatus:CreateInstanceAccessControlAttributeConfigurationResponse'`
-> CreateInstanceAccessControlAttributeConfigurationResponse

Create a value of CreateInstanceAccessControlAttributeConfigurationResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:httpStatus:CreateInstanceAccessControlAttributeConfigurationResponse', createInstanceAccessControlAttributeConfigurationResponse_httpStatus - The response's http status code.

Response Lenses

createInstanceAccessControlAttributeConfigurationResponse_httpStatus :: Lens' CreateInstanceAccessControlAttributeConfigurationResponse Int Source #

The response's http status code.