Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
- Service Configuration
- Errors
- InstanceAccessControlAttributeConfigurationStatus
- PrincipalType
- ProvisionTargetType
- ProvisioningStatus
- StatusValues
- TargetType
- AccessControlAttribute
- AccessControlAttributeValue
- AccountAssignment
- AccountAssignmentOperationStatus
- AccountAssignmentOperationStatusMetadata
- AttachedManagedPolicy
- InstanceAccessControlAttributeConfiguration
- InstanceMetadata
- OperationStatusFilter
- PermissionSet
- PermissionSetProvisioningStatus
- PermissionSetProvisioningStatusMetadata
- Tag
Synopsis
- defaultService :: Service
- _ValidationException :: AsError a => Getting (First ServiceError) a ServiceError
- _AccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError
- _ConflictException :: AsError a => Getting (First ServiceError) a ServiceError
- _ServiceQuotaExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _ThrottlingException :: AsError a => Getting (First ServiceError) a ServiceError
- _InternalServerException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
- newtype InstanceAccessControlAttributeConfigurationStatus where
- InstanceAccessControlAttributeConfigurationStatus' { }
- pattern InstanceAccessControlAttributeConfigurationStatus_CREATION_FAILED :: InstanceAccessControlAttributeConfigurationStatus
- pattern InstanceAccessControlAttributeConfigurationStatus_CREATION_IN_PROGRESS :: InstanceAccessControlAttributeConfigurationStatus
- pattern InstanceAccessControlAttributeConfigurationStatus_ENABLED :: InstanceAccessControlAttributeConfigurationStatus
- newtype PrincipalType where
- PrincipalType' { }
- pattern PrincipalType_GROUP :: PrincipalType
- pattern PrincipalType_USER :: PrincipalType
- newtype ProvisionTargetType where
- newtype ProvisioningStatus where
- newtype StatusValues where
- StatusValues' { }
- pattern StatusValues_FAILED :: StatusValues
- pattern StatusValues_IN_PROGRESS :: StatusValues
- pattern StatusValues_SUCCEEDED :: StatusValues
- newtype TargetType where
- TargetType' { }
- pattern TargetType_AWS_ACCOUNT :: TargetType
- data AccessControlAttribute = AccessControlAttribute' {}
- newAccessControlAttribute :: Text -> AccessControlAttributeValue -> AccessControlAttribute
- accessControlAttribute_key :: Lens' AccessControlAttribute Text
- accessControlAttribute_value :: Lens' AccessControlAttribute AccessControlAttributeValue
- data AccessControlAttributeValue = AccessControlAttributeValue' {}
- newAccessControlAttributeValue :: NonEmpty Text -> AccessControlAttributeValue
- accessControlAttributeValue_source :: Lens' AccessControlAttributeValue (NonEmpty Text)
- data AccountAssignment = AccountAssignment' {}
- newAccountAssignment :: AccountAssignment
- accountAssignment_principalId :: Lens' AccountAssignment (Maybe Text)
- accountAssignment_principalType :: Lens' AccountAssignment (Maybe PrincipalType)
- accountAssignment_accountId :: Lens' AccountAssignment (Maybe Text)
- accountAssignment_permissionSetArn :: Lens' AccountAssignment (Maybe Text)
- data AccountAssignmentOperationStatus = AccountAssignmentOperationStatus' {}
- newAccountAssignmentOperationStatus :: AccountAssignmentOperationStatus
- accountAssignmentOperationStatus_requestId :: Lens' AccountAssignmentOperationStatus (Maybe Text)
- accountAssignmentOperationStatus_status :: Lens' AccountAssignmentOperationStatus (Maybe StatusValues)
- accountAssignmentOperationStatus_failureReason :: Lens' AccountAssignmentOperationStatus (Maybe Text)
- accountAssignmentOperationStatus_targetId :: Lens' AccountAssignmentOperationStatus (Maybe Text)
- accountAssignmentOperationStatus_principalId :: Lens' AccountAssignmentOperationStatus (Maybe Text)
- accountAssignmentOperationStatus_principalType :: Lens' AccountAssignmentOperationStatus (Maybe PrincipalType)
- accountAssignmentOperationStatus_targetType :: Lens' AccountAssignmentOperationStatus (Maybe TargetType)
- accountAssignmentOperationStatus_createdDate :: Lens' AccountAssignmentOperationStatus (Maybe UTCTime)
- accountAssignmentOperationStatus_permissionSetArn :: Lens' AccountAssignmentOperationStatus (Maybe Text)
- data AccountAssignmentOperationStatusMetadata = AccountAssignmentOperationStatusMetadata' {}
- newAccountAssignmentOperationStatusMetadata :: AccountAssignmentOperationStatusMetadata
- accountAssignmentOperationStatusMetadata_requestId :: Lens' AccountAssignmentOperationStatusMetadata (Maybe Text)
- accountAssignmentOperationStatusMetadata_status :: Lens' AccountAssignmentOperationStatusMetadata (Maybe StatusValues)
- accountAssignmentOperationStatusMetadata_createdDate :: Lens' AccountAssignmentOperationStatusMetadata (Maybe UTCTime)
- data AttachedManagedPolicy = AttachedManagedPolicy' {}
- newAttachedManagedPolicy :: AttachedManagedPolicy
- attachedManagedPolicy_arn :: Lens' AttachedManagedPolicy (Maybe Text)
- attachedManagedPolicy_name :: Lens' AttachedManagedPolicy (Maybe Text)
- data InstanceAccessControlAttributeConfiguration = InstanceAccessControlAttributeConfiguration' {}
- newInstanceAccessControlAttributeConfiguration :: InstanceAccessControlAttributeConfiguration
- instanceAccessControlAttributeConfiguration_accessControlAttributes :: Lens' InstanceAccessControlAttributeConfiguration [AccessControlAttribute]
- data InstanceMetadata = InstanceMetadata' {}
- newInstanceMetadata :: InstanceMetadata
- instanceMetadata_identityStoreId :: Lens' InstanceMetadata (Maybe Text)
- instanceMetadata_instanceArn :: Lens' InstanceMetadata (Maybe Text)
- data OperationStatusFilter = OperationStatusFilter' {}
- newOperationStatusFilter :: OperationStatusFilter
- operationStatusFilter_status :: Lens' OperationStatusFilter (Maybe StatusValues)
- data PermissionSet = PermissionSet' {}
- newPermissionSet :: PermissionSet
- permissionSet_relayState :: Lens' PermissionSet (Maybe Text)
- permissionSet_sessionDuration :: Lens' PermissionSet (Maybe Text)
- permissionSet_createdDate :: Lens' PermissionSet (Maybe UTCTime)
- permissionSet_permissionSetArn :: Lens' PermissionSet (Maybe Text)
- permissionSet_name :: Lens' PermissionSet (Maybe Text)
- permissionSet_description :: Lens' PermissionSet (Maybe Text)
- data PermissionSetProvisioningStatus = PermissionSetProvisioningStatus' {}
- newPermissionSetProvisioningStatus :: PermissionSetProvisioningStatus
- permissionSetProvisioningStatus_requestId :: Lens' PermissionSetProvisioningStatus (Maybe Text)
- permissionSetProvisioningStatus_status :: Lens' PermissionSetProvisioningStatus (Maybe StatusValues)
- permissionSetProvisioningStatus_failureReason :: Lens' PermissionSetProvisioningStatus (Maybe Text)
- permissionSetProvisioningStatus_accountId :: Lens' PermissionSetProvisioningStatus (Maybe Text)
- permissionSetProvisioningStatus_createdDate :: Lens' PermissionSetProvisioningStatus (Maybe UTCTime)
- permissionSetProvisioningStatus_permissionSetArn :: Lens' PermissionSetProvisioningStatus (Maybe Text)
- data PermissionSetProvisioningStatusMetadata = PermissionSetProvisioningStatusMetadata' {}
- newPermissionSetProvisioningStatusMetadata :: PermissionSetProvisioningStatusMetadata
- permissionSetProvisioningStatusMetadata_requestId :: Lens' PermissionSetProvisioningStatusMetadata (Maybe Text)
- permissionSetProvisioningStatusMetadata_status :: Lens' PermissionSetProvisioningStatusMetadata (Maybe StatusValues)
- permissionSetProvisioningStatusMetadata_createdDate :: Lens' PermissionSetProvisioningStatusMetadata (Maybe UTCTime)
- data Tag = Tag' {}
- newTag :: Tag
- tag_value :: Lens' Tag (Maybe Text)
- tag_key :: Lens' Tag (Maybe Text)
Service Configuration
defaultService :: Service Source #
API version 2020-07-20
of the Amazon Single Sign-On Admin SDK configuration.
Errors
_ValidationException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request failed because it contains a syntax error.
_AccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You do not have sufficient access to perform this action.
_ConflictException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Occurs when a conflict with a previous successful write is detected. This generally occurs when the previous write did not have time to propagate to the host serving the current request. A retry (with appropriate backoff logic) is the recommended response to this exception.
_ServiceQuotaExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Indicates that the principal has crossed the permitted number of resources that can be created.
_ThrottlingException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Indicates that the principal has crossed the throttling limits of the API operations.
_InternalServerException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request processing has failed because of an unknown error, exception, or failure with an internal server.
_ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Indicates that a requested resource is not found.
InstanceAccessControlAttributeConfigurationStatus
newtype InstanceAccessControlAttributeConfigurationStatus Source #
Instances
PrincipalType
newtype PrincipalType Source #
pattern PrincipalType_GROUP :: PrincipalType | |
pattern PrincipalType_USER :: PrincipalType |
Instances
ProvisionTargetType
newtype ProvisionTargetType Source #
pattern ProvisionTargetType_ALL_PROVISIONED_ACCOUNTS :: ProvisionTargetType | |
pattern ProvisionTargetType_AWS_ACCOUNT :: ProvisionTargetType |
Instances
ProvisioningStatus
newtype ProvisioningStatus Source #
pattern ProvisioningStatus_LATEST_PERMISSION_SET_NOT_PROVISIONED :: ProvisioningStatus | |
pattern ProvisioningStatus_LATEST_PERMISSION_SET_PROVISIONED :: ProvisioningStatus |
Instances
StatusValues
newtype StatusValues Source #
pattern StatusValues_FAILED :: StatusValues | |
pattern StatusValues_IN_PROGRESS :: StatusValues | |
pattern StatusValues_SUCCEEDED :: StatusValues |
Instances
TargetType
newtype TargetType Source #
pattern TargetType_AWS_ACCOUNT :: TargetType |
Instances
AccessControlAttribute
data AccessControlAttribute Source #
These are Amazon Web Services SSO identity store attributes that you can
configure for use in attributes-based access control (ABAC). You can
create permissions policies that determine who can access your Amazon
Web Services resources based upon the configured attribute values. When
you enable ABAC and specify AccessControlAttributes
, Amazon Web
Services SSO passes the attribute values of the authenticated user into
IAM for use in policy evaluation.
See: newAccessControlAttribute
smart constructor.
AccessControlAttribute' | |
|
Instances
newAccessControlAttribute Source #
Create a value of AccessControlAttribute
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:key:AccessControlAttribute'
, accessControlAttribute_key
- The name of the attribute associated with your identities in your
identity source. This is used to map a specified attribute in your
identity source with an attribute in Amazon Web Services SSO.
$sel:value:AccessControlAttribute'
, accessControlAttribute_value
- The value used for mapping a specified attribute to an identity source.
accessControlAttribute_key :: Lens' AccessControlAttribute Text Source #
The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in Amazon Web Services SSO.
accessControlAttribute_value :: Lens' AccessControlAttribute AccessControlAttributeValue Source #
The value used for mapping a specified attribute to an identity source.
AccessControlAttributeValue
data AccessControlAttributeValue Source #
The value used for mapping a specified attribute to an identity source.
See: newAccessControlAttributeValue
smart constructor.
Instances
newAccessControlAttributeValue Source #
Create a value of AccessControlAttributeValue
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:source:AccessControlAttributeValue'
, accessControlAttributeValue_source
- The identity source to use when mapping a specified attribute to Amazon
Web Services SSO.
accessControlAttributeValue_source :: Lens' AccessControlAttributeValue (NonEmpty Text) Source #
The identity source to use when mapping a specified attribute to Amazon Web Services SSO.
AccountAssignment
data AccountAssignment Source #
The assignment that indicates a principal's limited access to a specified Amazon Web Services account with a specified permission set.
The term principal here refers to a user or group that is defined in Amazon Web Services SSO.
See: newAccountAssignment
smart constructor.
AccountAssignment' | |
|
Instances
newAccountAssignment :: AccountAssignment Source #
Create a value of AccountAssignment
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:principalId:AccountAssignment'
, accountAssignment_principalId
- An identifier for an object in Amazon Web Services SSO, such as a user
or group. PrincipalIds are GUIDs (For example,
f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
PrincipalIds in Amazon Web Services SSO, see the
Amazon Web Services SSO Identity Store API Reference.
$sel:principalType:AccountAssignment'
, accountAssignment_principalType
- The entity type for which the assignment will be created.
$sel:accountId:AccountAssignment'
, accountAssignment_accountId
- The identifier of the Amazon Web Services account.
$sel:permissionSetArn:AccountAssignment'
, accountAssignment_permissionSetArn
- The ARN of the permission set. For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
accountAssignment_principalId :: Lens' AccountAssignment (Maybe Text) Source #
An identifier for an object in Amazon Web Services SSO, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in Amazon Web Services SSO, see the Amazon Web Services SSO Identity Store API Reference.
accountAssignment_principalType :: Lens' AccountAssignment (Maybe PrincipalType) Source #
The entity type for which the assignment will be created.
accountAssignment_accountId :: Lens' AccountAssignment (Maybe Text) Source #
The identifier of the Amazon Web Services account.
accountAssignment_permissionSetArn :: Lens' AccountAssignment (Maybe Text) Source #
The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.
AccountAssignmentOperationStatus
data AccountAssignmentOperationStatus Source #
The status of the creation or deletion operation of an assignment that a principal needs to access an account.
See: newAccountAssignmentOperationStatus
smart constructor.
AccountAssignmentOperationStatus' | |
|
Instances
newAccountAssignmentOperationStatus :: AccountAssignmentOperationStatus Source #
Create a value of AccountAssignmentOperationStatus
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:requestId:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_requestId
- The identifier for tracking the request operation that is generated by
the universally unique identifier (UUID) workflow.
$sel:status:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_status
- The status of the permission set provisioning process.
$sel:failureReason:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_failureReason
- The message that contains an error or exception in case of an operation
failure.
$sel:targetId:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_targetId
- TargetID is an Amazon Web Services account identifier, typically a 10-12
digit string (For example, 123456789012).
$sel:principalId:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_principalId
- An identifier for an object in Amazon Web Services SSO, such as a user
or group. PrincipalIds are GUIDs (For example,
f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
PrincipalIds in Amazon Web Services SSO, see the
Amazon Web Services SSO Identity Store API Reference.
$sel:principalType:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_principalType
- The entity type for which the assignment will be created.
$sel:targetType:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_targetType
- The entity type for which the assignment will be created.
$sel:createdDate:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_createdDate
- The date that the permission set was created.
$sel:permissionSetArn:AccountAssignmentOperationStatus'
, accountAssignmentOperationStatus_permissionSetArn
- The ARN of the permission set. For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
accountAssignmentOperationStatus_requestId :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #
The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow.
accountAssignmentOperationStatus_status :: Lens' AccountAssignmentOperationStatus (Maybe StatusValues) Source #
The status of the permission set provisioning process.
accountAssignmentOperationStatus_failureReason :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #
The message that contains an error or exception in case of an operation failure.
accountAssignmentOperationStatus_targetId :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #
TargetID is an Amazon Web Services account identifier, typically a 10-12 digit string (For example, 123456789012).
accountAssignmentOperationStatus_principalId :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #
An identifier for an object in Amazon Web Services SSO, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in Amazon Web Services SSO, see the Amazon Web Services SSO Identity Store API Reference.
accountAssignmentOperationStatus_principalType :: Lens' AccountAssignmentOperationStatus (Maybe PrincipalType) Source #
The entity type for which the assignment will be created.
accountAssignmentOperationStatus_targetType :: Lens' AccountAssignmentOperationStatus (Maybe TargetType) Source #
The entity type for which the assignment will be created.
accountAssignmentOperationStatus_createdDate :: Lens' AccountAssignmentOperationStatus (Maybe UTCTime) Source #
The date that the permission set was created.
accountAssignmentOperationStatus_permissionSetArn :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #
The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.
AccountAssignmentOperationStatusMetadata
data AccountAssignmentOperationStatusMetadata Source #
Provides information about the AccountAssignment creation request.
See: newAccountAssignmentOperationStatusMetadata
smart constructor.
AccountAssignmentOperationStatusMetadata' | |
|
Instances
newAccountAssignmentOperationStatusMetadata :: AccountAssignmentOperationStatusMetadata Source #
Create a value of AccountAssignmentOperationStatusMetadata
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:requestId:AccountAssignmentOperationStatusMetadata'
, accountAssignmentOperationStatusMetadata_requestId
- The identifier for tracking the request operation that is generated by
the universally unique identifier (UUID) workflow.
$sel:status:AccountAssignmentOperationStatusMetadata'
, accountAssignmentOperationStatusMetadata_status
- The status of the permission set provisioning process.
$sel:createdDate:AccountAssignmentOperationStatusMetadata'
, accountAssignmentOperationStatusMetadata_createdDate
- The date that the permission set was created.
accountAssignmentOperationStatusMetadata_requestId :: Lens' AccountAssignmentOperationStatusMetadata (Maybe Text) Source #
The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow.
accountAssignmentOperationStatusMetadata_status :: Lens' AccountAssignmentOperationStatusMetadata (Maybe StatusValues) Source #
The status of the permission set provisioning process.
accountAssignmentOperationStatusMetadata_createdDate :: Lens' AccountAssignmentOperationStatusMetadata (Maybe UTCTime) Source #
The date that the permission set was created.
AttachedManagedPolicy
data AttachedManagedPolicy Source #
A structure that stores the details of the IAM managed policy.
See: newAttachedManagedPolicy
smart constructor.
Instances
newAttachedManagedPolicy :: AttachedManagedPolicy Source #
Create a value of AttachedManagedPolicy
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:AttachedManagedPolicy'
, attachedManagedPolicy_arn
- The ARN of the IAM managed policy. For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:name:AttachedManagedPolicy'
, attachedManagedPolicy_name
- The name of the IAM managed policy.
attachedManagedPolicy_arn :: Lens' AttachedManagedPolicy (Maybe Text) Source #
The ARN of the IAM managed policy. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.
attachedManagedPolicy_name :: Lens' AttachedManagedPolicy (Maybe Text) Source #
The name of the IAM managed policy.
InstanceAccessControlAttributeConfiguration
data InstanceAccessControlAttributeConfiguration Source #
Specifies the attributes to add to your attribute-based access control (ABAC) configuration.
See: newInstanceAccessControlAttributeConfiguration
smart constructor.
InstanceAccessControlAttributeConfiguration' | |
|
Instances
newInstanceAccessControlAttributeConfiguration :: InstanceAccessControlAttributeConfiguration Source #
Create a value of InstanceAccessControlAttributeConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accessControlAttributes:InstanceAccessControlAttributeConfiguration'
, instanceAccessControlAttributeConfiguration_accessControlAttributes
- Lists the attributes that are configured for ABAC in the specified
Amazon Web Services SSO instance.
instanceAccessControlAttributeConfiguration_accessControlAttributes :: Lens' InstanceAccessControlAttributeConfiguration [AccessControlAttribute] Source #
Lists the attributes that are configured for ABAC in the specified Amazon Web Services SSO instance.
InstanceMetadata
data InstanceMetadata Source #
Provides information about the SSO instance.
See: newInstanceMetadata
smart constructor.
InstanceMetadata' | |
|
Instances
newInstanceMetadata :: InstanceMetadata Source #
Create a value of InstanceMetadata
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:identityStoreId:InstanceMetadata'
, instanceMetadata_identityStoreId
- The identifier of the identity store that is connected to the SSO
instance.
$sel:instanceArn:InstanceMetadata'
, instanceMetadata_instanceArn
- The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
instanceMetadata_identityStoreId :: Lens' InstanceMetadata (Maybe Text) Source #
The identifier of the identity store that is connected to the SSO instance.
instanceMetadata_instanceArn :: Lens' InstanceMetadata (Maybe Text) Source #
The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.
OperationStatusFilter
data OperationStatusFilter Source #
Filters he operation status list based on the passed attribute value.
See: newOperationStatusFilter
smart constructor.
OperationStatusFilter' | |
|
Instances
newOperationStatusFilter :: OperationStatusFilter Source #
Create a value of OperationStatusFilter
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:OperationStatusFilter'
, operationStatusFilter_status
- Filters the list operations result based on the status attribute.
operationStatusFilter_status :: Lens' OperationStatusFilter (Maybe StatusValues) Source #
Filters the list operations result based on the status attribute.
PermissionSet
data PermissionSet Source #
An entity that contains IAM policies.
See: newPermissionSet
smart constructor.
PermissionSet' | |
|
Instances
newPermissionSet :: PermissionSet Source #
Create a value of PermissionSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:relayState:PermissionSet'
, permissionSet_relayState
- Used to redirect users within the application during the federation
authentication process.
$sel:sessionDuration:PermissionSet'
, permissionSet_sessionDuration
- The length of time that the application user sessions are valid for in
the ISO-8601 standard.
$sel:createdDate:PermissionSet'
, permissionSet_createdDate
- The date that the permission set was created.
$sel:permissionSetArn:PermissionSet'
, permissionSet_permissionSetArn
- The ARN of the permission set. For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:name:PermissionSet'
, permissionSet_name
- The name of the permission set.
$sel:description:PermissionSet'
, permissionSet_description
- The description of the PermissionSet.
permissionSet_relayState :: Lens' PermissionSet (Maybe Text) Source #
Used to redirect users within the application during the federation authentication process.
permissionSet_sessionDuration :: Lens' PermissionSet (Maybe Text) Source #
The length of time that the application user sessions are valid for in the ISO-8601 standard.
permissionSet_createdDate :: Lens' PermissionSet (Maybe UTCTime) Source #
The date that the permission set was created.
permissionSet_permissionSetArn :: Lens' PermissionSet (Maybe Text) Source #
The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.
permissionSet_name :: Lens' PermissionSet (Maybe Text) Source #
The name of the permission set.
permissionSet_description :: Lens' PermissionSet (Maybe Text) Source #
The description of the PermissionSet.
PermissionSetProvisioningStatus
data PermissionSetProvisioningStatus Source #
A structure that is used to provide the status of the provisioning operation for a specified permission set.
See: newPermissionSetProvisioningStatus
smart constructor.
PermissionSetProvisioningStatus' | |
|
Instances
newPermissionSetProvisioningStatus :: PermissionSetProvisioningStatus Source #
Create a value of PermissionSetProvisioningStatus
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:requestId:PermissionSetProvisioningStatus'
, permissionSetProvisioningStatus_requestId
- The identifier for tracking the request operation that is generated by
the universally unique identifier (UUID) workflow.
$sel:status:PermissionSetProvisioningStatus'
, permissionSetProvisioningStatus_status
- The status of the permission set provisioning process.
$sel:failureReason:PermissionSetProvisioningStatus'
, permissionSetProvisioningStatus_failureReason
- The message that contains an error or exception in case of an operation
failure.
$sel:accountId:PermissionSetProvisioningStatus'
, permissionSetProvisioningStatus_accountId
- The identifier of the Amazon Web Services account from which to list the
assignments.
$sel:createdDate:PermissionSetProvisioningStatus'
, permissionSetProvisioningStatus_createdDate
- The date that the permission set was created.
$sel:permissionSetArn:PermissionSetProvisioningStatus'
, permissionSetProvisioningStatus_permissionSetArn
- The ARN of the permission set that is being provisioned. For more
information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
permissionSetProvisioningStatus_requestId :: Lens' PermissionSetProvisioningStatus (Maybe Text) Source #
The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow.
permissionSetProvisioningStatus_status :: Lens' PermissionSetProvisioningStatus (Maybe StatusValues) Source #
The status of the permission set provisioning process.
permissionSetProvisioningStatus_failureReason :: Lens' PermissionSetProvisioningStatus (Maybe Text) Source #
The message that contains an error or exception in case of an operation failure.
permissionSetProvisioningStatus_accountId :: Lens' PermissionSetProvisioningStatus (Maybe Text) Source #
The identifier of the Amazon Web Services account from which to list the assignments.
permissionSetProvisioningStatus_createdDate :: Lens' PermissionSetProvisioningStatus (Maybe UTCTime) Source #
The date that the permission set was created.
permissionSetProvisioningStatus_permissionSetArn :: Lens' PermissionSetProvisioningStatus (Maybe Text) Source #
The ARN of the permission set that is being provisioned. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.
PermissionSetProvisioningStatusMetadata
data PermissionSetProvisioningStatusMetadata Source #
Provides information about the permission set provisioning status.
See: newPermissionSetProvisioningStatusMetadata
smart constructor.
PermissionSetProvisioningStatusMetadata' | |
|
Instances
newPermissionSetProvisioningStatusMetadata :: PermissionSetProvisioningStatusMetadata Source #
Create a value of PermissionSetProvisioningStatusMetadata
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:requestId:PermissionSetProvisioningStatusMetadata'
, permissionSetProvisioningStatusMetadata_requestId
- The identifier for tracking the request operation that is generated by
the universally unique identifier (UUID) workflow.
$sel:status:PermissionSetProvisioningStatusMetadata'
, permissionSetProvisioningStatusMetadata_status
- The status of the permission set provisioning process.
$sel:createdDate:PermissionSetProvisioningStatusMetadata'
, permissionSetProvisioningStatusMetadata_createdDate
- The date that the permission set was created.
permissionSetProvisioningStatusMetadata_requestId :: Lens' PermissionSetProvisioningStatusMetadata (Maybe Text) Source #
The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow.
permissionSetProvisioningStatusMetadata_status :: Lens' PermissionSetProvisioningStatusMetadata (Maybe StatusValues) Source #
The status of the permission set provisioning process.
permissionSetProvisioningStatusMetadata_createdDate :: Lens' PermissionSetProvisioningStatusMetadata (Maybe UTCTime) Source #
The date that the permission set was created.
Tag
A set of key-value pairs that are used to manage the resource. Tags can only be applied to permission sets and cannot be applied to corresponding roles that Amazon Web Services SSO creates in Amazon Web Services accounts.
See: newTag
smart constructor.
Instances
Eq Tag Source # | |
Read Tag Source # | |
Show Tag Source # | |
Generic Tag Source # | |
NFData Tag Source # | |
Defined in Amazonka.SSOAdmin.Types.Tag | |
Hashable Tag Source # | |
Defined in Amazonka.SSOAdmin.Types.Tag | |
ToJSON Tag Source # | |
Defined in Amazonka.SSOAdmin.Types.Tag | |
FromJSON Tag Source # | |
type Rep Tag Source # | |
Defined in Amazonka.SSOAdmin.Types.Tag type Rep Tag = D1 ('MetaData "Tag" "Amazonka.SSOAdmin.Types.Tag" "libZSservicesZSamazonka-sso-adminZSamazonka-sso-admin" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "value") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "key") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) |
Create a value of Tag
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:value:Tag'
, tag_value
- The value of the tag.
$sel:key:Tag'
, tag_key
- The key for the tag.