Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
Synopsis
Documentation
data AccessControlAttribute Source #
These are Amazon Web Services SSO identity store attributes that you can
configure for use in attributes-based access control (ABAC). You can
create permissions policies that determine who can access your Amazon
Web Services resources based upon the configured attribute values. When
you enable ABAC and specify AccessControlAttributes
, Amazon Web
Services SSO passes the attribute values of the authenticated user into
IAM for use in policy evaluation.
See: newAccessControlAttribute
smart constructor.
AccessControlAttribute' | |
|
Instances
newAccessControlAttribute Source #
Create a value of AccessControlAttribute
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:key:AccessControlAttribute'
, accessControlAttribute_key
- The name of the attribute associated with your identities in your
identity source. This is used to map a specified attribute in your
identity source with an attribute in Amazon Web Services SSO.
$sel:value:AccessControlAttribute'
, accessControlAttribute_value
- The value used for mapping a specified attribute to an identity source.
accessControlAttribute_key :: Lens' AccessControlAttribute Text Source #
The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in Amazon Web Services SSO.
accessControlAttribute_value :: Lens' AccessControlAttribute AccessControlAttributeValue Source #
The value used for mapping a specified attribute to an identity source.