| Copyright | (c) 2013-2021 Brendan Hay |
|---|---|
| License | Mozilla Public License, v. 2.0. |
| Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
| Stability | auto-generated |
| Portability | non-portable (GHC extensions) |
| Safe Haskell | None |
Amazonka.SSOAdmin
Contents
- Service Configuration
- Errors
- Waiters
- Operations
- DescribePermissionSet
- ListTagsForResource (Paginated)
- CreateInstanceAccessControlAttributeConfiguration
- GetInlinePolicyForPermissionSet
- ListPermissionSets (Paginated)
- DeletePermissionSet
- UpdatePermissionSet
- ProvisionPermissionSet
- ListAccountAssignments (Paginated)
- DescribePermissionSetProvisioningStatus
- AttachManagedPolicyToPermissionSet
- ListManagedPoliciesInPermissionSet (Paginated)
- DeleteInlinePolicyFromPermissionSet
- DeleteInstanceAccessControlAttributeConfiguration
- UpdateInstanceAccessControlAttributeConfiguration
- DescribeAccountAssignmentDeletionStatus
- DescribeAccountAssignmentCreationStatus
- PutInlinePolicyToPermissionSet
- ListAccountsForProvisionedPermissionSet (Paginated)
- ListPermissionSetsProvisionedToAccount (Paginated)
- DetachManagedPolicyFromPermissionSet
- ListAccountAssignmentCreationStatus (Paginated)
- CreatePermissionSet
- ListAccountAssignmentDeletionStatus (Paginated)
- TagResource
- ListInstances (Paginated)
- DescribeInstanceAccessControlAttributeConfiguration
- UntagResource
- DeleteAccountAssignment
- ListPermissionSetProvisioningStatus (Paginated)
- CreateAccountAssignment
- Types
- InstanceAccessControlAttributeConfigurationStatus
- PrincipalType
- ProvisionTargetType
- ProvisioningStatus
- StatusValues
- TargetType
- AccessControlAttribute
- AccessControlAttributeValue
- AccountAssignment
- AccountAssignmentOperationStatus
- AccountAssignmentOperationStatusMetadata
- AttachedManagedPolicy
- InstanceAccessControlAttributeConfiguration
- InstanceMetadata
- OperationStatusFilter
- PermissionSet
- PermissionSetProvisioningStatus
- PermissionSetProvisioningStatusMetadata
- Tag
Description
Derived from API version 2020-07-20 of the AWS service descriptions, licensed under Apache 2.0.
Amazon Web Services Single Sign On (SSO) is a cloud SSO service that makes it easy to centrally manage SSO access to multiple Amazon Web Services accounts and business applications. This guide provides information on SSO operations which could be used for access management of Amazon Web Services accounts. For information about Amazon Web Services SSO features, see the Amazon Web Services Single Sign-On User Guide.
Many operations in the SSO APIs rely on identifiers for users and groups, known as principals. For more information about how to work with principals and principal IDs in Amazon Web Services SSO, see the Amazon Web Services SSO Identity Store API Reference.
Synopsis
- defaultService :: Service
- _ValidationException :: AsError a => Getting (First ServiceError) a ServiceError
- _AccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError
- _ConflictException :: AsError a => Getting (First ServiceError) a ServiceError
- _ServiceQuotaExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _ThrottlingException :: AsError a => Getting (First ServiceError) a ServiceError
- _InternalServerException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
- data DescribePermissionSet = DescribePermissionSet' Text Text
- newDescribePermissionSet :: Text -> Text -> DescribePermissionSet
- data DescribePermissionSetResponse = DescribePermissionSetResponse' (Maybe PermissionSet) Int
- newDescribePermissionSetResponse :: Int -> DescribePermissionSetResponse
- data ListTagsForResource = ListTagsForResource' (Maybe Text) Text Text
- newListTagsForResource :: Text -> Text -> ListTagsForResource
- data ListTagsForResourceResponse = ListTagsForResourceResponse' (Maybe Text) (Maybe [Tag]) Int
- newListTagsForResourceResponse :: Int -> ListTagsForResourceResponse
- data CreateInstanceAccessControlAttributeConfiguration = CreateInstanceAccessControlAttributeConfiguration' Text InstanceAccessControlAttributeConfiguration
- newCreateInstanceAccessControlAttributeConfiguration :: Text -> InstanceAccessControlAttributeConfiguration -> CreateInstanceAccessControlAttributeConfiguration
- data CreateInstanceAccessControlAttributeConfigurationResponse = CreateInstanceAccessControlAttributeConfigurationResponse' Int
- newCreateInstanceAccessControlAttributeConfigurationResponse :: Int -> CreateInstanceAccessControlAttributeConfigurationResponse
- data GetInlinePolicyForPermissionSet = GetInlinePolicyForPermissionSet' Text Text
- newGetInlinePolicyForPermissionSet :: Text -> Text -> GetInlinePolicyForPermissionSet
- data GetInlinePolicyForPermissionSetResponse = GetInlinePolicyForPermissionSetResponse' (Maybe (Sensitive Text)) Int
- newGetInlinePolicyForPermissionSetResponse :: Int -> GetInlinePolicyForPermissionSetResponse
- data ListPermissionSets = ListPermissionSets' (Maybe Text) (Maybe Natural) Text
- newListPermissionSets :: Text -> ListPermissionSets
- data ListPermissionSetsResponse = ListPermissionSetsResponse' (Maybe [Text]) (Maybe Text) Int
- newListPermissionSetsResponse :: Int -> ListPermissionSetsResponse
- data DeletePermissionSet = DeletePermissionSet' Text Text
- newDeletePermissionSet :: Text -> Text -> DeletePermissionSet
- data DeletePermissionSetResponse = DeletePermissionSetResponse' Int
- newDeletePermissionSetResponse :: Int -> DeletePermissionSetResponse
- data UpdatePermissionSet = UpdatePermissionSet' (Maybe Text) (Maybe Text) (Maybe Text) Text Text
- newUpdatePermissionSet :: Text -> Text -> UpdatePermissionSet
- data UpdatePermissionSetResponse = UpdatePermissionSetResponse' Int
- newUpdatePermissionSetResponse :: Int -> UpdatePermissionSetResponse
- data ProvisionPermissionSet = ProvisionPermissionSet' (Maybe Text) Text Text ProvisionTargetType
- newProvisionPermissionSet :: Text -> Text -> ProvisionTargetType -> ProvisionPermissionSet
- data ProvisionPermissionSetResponse = ProvisionPermissionSetResponse' (Maybe PermissionSetProvisioningStatus) Int
- newProvisionPermissionSetResponse :: Int -> ProvisionPermissionSetResponse
- data ListAccountAssignments = ListAccountAssignments' (Maybe Text) (Maybe Natural) Text Text Text
- newListAccountAssignments :: Text -> Text -> Text -> ListAccountAssignments
- data ListAccountAssignmentsResponse = ListAccountAssignmentsResponse' (Maybe [AccountAssignment]) (Maybe Text) Int
- newListAccountAssignmentsResponse :: Int -> ListAccountAssignmentsResponse
- data DescribePermissionSetProvisioningStatus = DescribePermissionSetProvisioningStatus' Text Text
- newDescribePermissionSetProvisioningStatus :: Text -> Text -> DescribePermissionSetProvisioningStatus
- data DescribePermissionSetProvisioningStatusResponse = DescribePermissionSetProvisioningStatusResponse' (Maybe PermissionSetProvisioningStatus) Int
- newDescribePermissionSetProvisioningStatusResponse :: Int -> DescribePermissionSetProvisioningStatusResponse
- data AttachManagedPolicyToPermissionSet = AttachManagedPolicyToPermissionSet' Text Text Text
- newAttachManagedPolicyToPermissionSet :: Text -> Text -> Text -> AttachManagedPolicyToPermissionSet
- data AttachManagedPolicyToPermissionSetResponse = AttachManagedPolicyToPermissionSetResponse' Int
- newAttachManagedPolicyToPermissionSetResponse :: Int -> AttachManagedPolicyToPermissionSetResponse
- data ListManagedPoliciesInPermissionSet = ListManagedPoliciesInPermissionSet' (Maybe Text) (Maybe Natural) Text Text
- newListManagedPoliciesInPermissionSet :: Text -> Text -> ListManagedPoliciesInPermissionSet
- data ListManagedPoliciesInPermissionSetResponse = ListManagedPoliciesInPermissionSetResponse' (Maybe Text) (Maybe [AttachedManagedPolicy]) Int
- newListManagedPoliciesInPermissionSetResponse :: Int -> ListManagedPoliciesInPermissionSetResponse
- data DeleteInlinePolicyFromPermissionSet = DeleteInlinePolicyFromPermissionSet' Text Text
- newDeleteInlinePolicyFromPermissionSet :: Text -> Text -> DeleteInlinePolicyFromPermissionSet
- data DeleteInlinePolicyFromPermissionSetResponse = DeleteInlinePolicyFromPermissionSetResponse' Int
- newDeleteInlinePolicyFromPermissionSetResponse :: Int -> DeleteInlinePolicyFromPermissionSetResponse
- data DeleteInstanceAccessControlAttributeConfiguration = DeleteInstanceAccessControlAttributeConfiguration' Text
- newDeleteInstanceAccessControlAttributeConfiguration :: Text -> DeleteInstanceAccessControlAttributeConfiguration
- data DeleteInstanceAccessControlAttributeConfigurationResponse = DeleteInstanceAccessControlAttributeConfigurationResponse' Int
- newDeleteInstanceAccessControlAttributeConfigurationResponse :: Int -> DeleteInstanceAccessControlAttributeConfigurationResponse
- data UpdateInstanceAccessControlAttributeConfiguration = UpdateInstanceAccessControlAttributeConfiguration' Text InstanceAccessControlAttributeConfiguration
- newUpdateInstanceAccessControlAttributeConfiguration :: Text -> InstanceAccessControlAttributeConfiguration -> UpdateInstanceAccessControlAttributeConfiguration
- data UpdateInstanceAccessControlAttributeConfigurationResponse = UpdateInstanceAccessControlAttributeConfigurationResponse' Int
- newUpdateInstanceAccessControlAttributeConfigurationResponse :: Int -> UpdateInstanceAccessControlAttributeConfigurationResponse
- data DescribeAccountAssignmentDeletionStatus = DescribeAccountAssignmentDeletionStatus' Text Text
- newDescribeAccountAssignmentDeletionStatus :: Text -> Text -> DescribeAccountAssignmentDeletionStatus
- data DescribeAccountAssignmentDeletionStatusResponse = DescribeAccountAssignmentDeletionStatusResponse' (Maybe AccountAssignmentOperationStatus) Int
- newDescribeAccountAssignmentDeletionStatusResponse :: Int -> DescribeAccountAssignmentDeletionStatusResponse
- data DescribeAccountAssignmentCreationStatus = DescribeAccountAssignmentCreationStatus' Text Text
- newDescribeAccountAssignmentCreationStatus :: Text -> Text -> DescribeAccountAssignmentCreationStatus
- data DescribeAccountAssignmentCreationStatusResponse = DescribeAccountAssignmentCreationStatusResponse' (Maybe AccountAssignmentOperationStatus) Int
- newDescribeAccountAssignmentCreationStatusResponse :: Int -> DescribeAccountAssignmentCreationStatusResponse
- data PutInlinePolicyToPermissionSet = PutInlinePolicyToPermissionSet' Text Text (Sensitive Text)
- newPutInlinePolicyToPermissionSet :: Text -> Text -> Text -> PutInlinePolicyToPermissionSet
- data PutInlinePolicyToPermissionSetResponse = PutInlinePolicyToPermissionSetResponse' Int
- newPutInlinePolicyToPermissionSetResponse :: Int -> PutInlinePolicyToPermissionSetResponse
- data ListAccountsForProvisionedPermissionSet = ListAccountsForProvisionedPermissionSet' (Maybe ProvisioningStatus) (Maybe Text) (Maybe Natural) Text Text
- newListAccountsForProvisionedPermissionSet :: Text -> Text -> ListAccountsForProvisionedPermissionSet
- data ListAccountsForProvisionedPermissionSetResponse = ListAccountsForProvisionedPermissionSetResponse' (Maybe [Text]) (Maybe Text) Int
- newListAccountsForProvisionedPermissionSetResponse :: Int -> ListAccountsForProvisionedPermissionSetResponse
- data ListPermissionSetsProvisionedToAccount = ListPermissionSetsProvisionedToAccount' (Maybe ProvisioningStatus) (Maybe Text) (Maybe Natural) Text Text
- newListPermissionSetsProvisionedToAccount :: Text -> Text -> ListPermissionSetsProvisionedToAccount
- data ListPermissionSetsProvisionedToAccountResponse = ListPermissionSetsProvisionedToAccountResponse' (Maybe [Text]) (Maybe Text) Int
- newListPermissionSetsProvisionedToAccountResponse :: Int -> ListPermissionSetsProvisionedToAccountResponse
- data DetachManagedPolicyFromPermissionSet = DetachManagedPolicyFromPermissionSet' Text Text Text
- newDetachManagedPolicyFromPermissionSet :: Text -> Text -> Text -> DetachManagedPolicyFromPermissionSet
- data DetachManagedPolicyFromPermissionSetResponse = DetachManagedPolicyFromPermissionSetResponse' Int
- newDetachManagedPolicyFromPermissionSetResponse :: Int -> DetachManagedPolicyFromPermissionSetResponse
- data ListAccountAssignmentCreationStatus = ListAccountAssignmentCreationStatus' (Maybe Text) (Maybe OperationStatusFilter) (Maybe Natural) Text
- newListAccountAssignmentCreationStatus :: Text -> ListAccountAssignmentCreationStatus
- data ListAccountAssignmentCreationStatusResponse = ListAccountAssignmentCreationStatusResponse' (Maybe [AccountAssignmentOperationStatusMetadata]) (Maybe Text) Int
- newListAccountAssignmentCreationStatusResponse :: Int -> ListAccountAssignmentCreationStatusResponse
- data CreatePermissionSet = CreatePermissionSet' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [Tag]) Text Text
- newCreatePermissionSet :: Text -> Text -> CreatePermissionSet
- data CreatePermissionSetResponse = CreatePermissionSetResponse' (Maybe PermissionSet) Int
- newCreatePermissionSetResponse :: Int -> CreatePermissionSetResponse
- data ListAccountAssignmentDeletionStatus = ListAccountAssignmentDeletionStatus' (Maybe Text) (Maybe OperationStatusFilter) (Maybe Natural) Text
- newListAccountAssignmentDeletionStatus :: Text -> ListAccountAssignmentDeletionStatus
- data ListAccountAssignmentDeletionStatusResponse = ListAccountAssignmentDeletionStatusResponse' (Maybe [AccountAssignmentOperationStatusMetadata]) (Maybe Text) Int
- newListAccountAssignmentDeletionStatusResponse :: Int -> ListAccountAssignmentDeletionStatusResponse
- data TagResource = TagResource' Text Text [Tag]
- newTagResource :: Text -> Text -> TagResource
- data TagResourceResponse = TagResourceResponse' Int
- newTagResourceResponse :: Int -> TagResourceResponse
- data ListInstances = ListInstances' (Maybe Text) (Maybe Natural)
- newListInstances :: ListInstances
- data ListInstancesResponse = ListInstancesResponse' (Maybe Text) (Maybe [InstanceMetadata]) Int
- newListInstancesResponse :: Int -> ListInstancesResponse
- data DescribeInstanceAccessControlAttributeConfiguration = DescribeInstanceAccessControlAttributeConfiguration' Text
- newDescribeInstanceAccessControlAttributeConfiguration :: Text -> DescribeInstanceAccessControlAttributeConfiguration
- data DescribeInstanceAccessControlAttributeConfigurationResponse = DescribeInstanceAccessControlAttributeConfigurationResponse' (Maybe InstanceAccessControlAttributeConfigurationStatus) (Maybe InstanceAccessControlAttributeConfiguration) (Maybe Text) Int
- newDescribeInstanceAccessControlAttributeConfigurationResponse :: Int -> DescribeInstanceAccessControlAttributeConfigurationResponse
- data UntagResource = UntagResource' Text Text (NonEmpty Text)
- newUntagResource :: Text -> Text -> NonEmpty Text -> UntagResource
- data UntagResourceResponse = UntagResourceResponse' Int
- newUntagResourceResponse :: Int -> UntagResourceResponse
- data DeleteAccountAssignment = DeleteAccountAssignment' Text Text TargetType Text PrincipalType Text
- newDeleteAccountAssignment :: Text -> Text -> TargetType -> Text -> PrincipalType -> Text -> DeleteAccountAssignment
- data DeleteAccountAssignmentResponse = DeleteAccountAssignmentResponse' (Maybe AccountAssignmentOperationStatus) Int
- newDeleteAccountAssignmentResponse :: Int -> DeleteAccountAssignmentResponse
- data ListPermissionSetProvisioningStatus = ListPermissionSetProvisioningStatus' (Maybe Text) (Maybe OperationStatusFilter) (Maybe Natural) Text
- newListPermissionSetProvisioningStatus :: Text -> ListPermissionSetProvisioningStatus
- data ListPermissionSetProvisioningStatusResponse = ListPermissionSetProvisioningStatusResponse' (Maybe [PermissionSetProvisioningStatusMetadata]) (Maybe Text) Int
- newListPermissionSetProvisioningStatusResponse :: Int -> ListPermissionSetProvisioningStatusResponse
- data CreateAccountAssignment = CreateAccountAssignment' Text Text TargetType Text PrincipalType Text
- newCreateAccountAssignment :: Text -> Text -> TargetType -> Text -> PrincipalType -> Text -> CreateAccountAssignment
- data CreateAccountAssignmentResponse = CreateAccountAssignmentResponse' (Maybe AccountAssignmentOperationStatus) Int
- newCreateAccountAssignmentResponse :: Int -> CreateAccountAssignmentResponse
- newtype InstanceAccessControlAttributeConfigurationStatus where
- InstanceAccessControlAttributeConfigurationStatus' { }
- pattern InstanceAccessControlAttributeConfigurationStatus_CREATION_FAILED :: InstanceAccessControlAttributeConfigurationStatus
- pattern InstanceAccessControlAttributeConfigurationStatus_CREATION_IN_PROGRESS :: InstanceAccessControlAttributeConfigurationStatus
- pattern InstanceAccessControlAttributeConfigurationStatus_ENABLED :: InstanceAccessControlAttributeConfigurationStatus
- newtype PrincipalType where
- PrincipalType' { }
- pattern PrincipalType_GROUP :: PrincipalType
- pattern PrincipalType_USER :: PrincipalType
- newtype ProvisionTargetType where
- newtype ProvisioningStatus where
- newtype StatusValues where
- StatusValues' { }
- pattern StatusValues_FAILED :: StatusValues
- pattern StatusValues_IN_PROGRESS :: StatusValues
- pattern StatusValues_SUCCEEDED :: StatusValues
- newtype TargetType where
- TargetType' { }
- pattern TargetType_AWS_ACCOUNT :: TargetType
- data AccessControlAttribute = AccessControlAttribute' Text AccessControlAttributeValue
- newAccessControlAttribute :: Text -> AccessControlAttributeValue -> AccessControlAttribute
- data AccessControlAttributeValue = AccessControlAttributeValue' (NonEmpty Text)
- newAccessControlAttributeValue :: NonEmpty Text -> AccessControlAttributeValue
- data AccountAssignment = AccountAssignment' (Maybe Text) (Maybe PrincipalType) (Maybe Text) (Maybe Text)
- newAccountAssignment :: AccountAssignment
- data AccountAssignmentOperationStatus = AccountAssignmentOperationStatus' (Maybe Text) (Maybe StatusValues) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe PrincipalType) (Maybe TargetType) (Maybe POSIX) (Maybe Text)
- newAccountAssignmentOperationStatus :: AccountAssignmentOperationStatus
- data AccountAssignmentOperationStatusMetadata = AccountAssignmentOperationStatusMetadata' (Maybe Text) (Maybe StatusValues) (Maybe POSIX)
- newAccountAssignmentOperationStatusMetadata :: AccountAssignmentOperationStatusMetadata
- data AttachedManagedPolicy = AttachedManagedPolicy' (Maybe Text) (Maybe Text)
- newAttachedManagedPolicy :: AttachedManagedPolicy
- data InstanceAccessControlAttributeConfiguration = InstanceAccessControlAttributeConfiguration' [AccessControlAttribute]
- newInstanceAccessControlAttributeConfiguration :: InstanceAccessControlAttributeConfiguration
- data InstanceMetadata = InstanceMetadata' (Maybe Text) (Maybe Text)
- newInstanceMetadata :: InstanceMetadata
- data OperationStatusFilter = OperationStatusFilter' (Maybe StatusValues)
- newOperationStatusFilter :: OperationStatusFilter
- data PermissionSet = PermissionSet' (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe Text) (Maybe Text) (Maybe Text)
- newPermissionSet :: PermissionSet
- data PermissionSetProvisioningStatus = PermissionSetProvisioningStatus' (Maybe Text) (Maybe StatusValues) (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe Text)
- newPermissionSetProvisioningStatus :: PermissionSetProvisioningStatus
- data PermissionSetProvisioningStatusMetadata = PermissionSetProvisioningStatusMetadata' (Maybe Text) (Maybe StatusValues) (Maybe POSIX)
- newPermissionSetProvisioningStatusMetadata :: PermissionSetProvisioningStatusMetadata
- data Tag = Tag' (Maybe Text) (Maybe Text)
- newTag :: Tag
Service Configuration
defaultService :: Service Source #
API version 2020-07-20 of the Amazon Single Sign-On Admin SDK configuration.
Errors
Error matchers are designed for use with the functions provided by
Control.Exception.Lens.
This allows catching (and rethrowing) service specific errors returned
by SSOAdmin.
ValidationException
_ValidationException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request failed because it contains a syntax error.
AccessDeniedException
_AccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You do not have sufficient access to perform this action.
ConflictException
_ConflictException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Occurs when a conflict with a previous successful write is detected. This generally occurs when the previous write did not have time to propagate to the host serving the current request. A retry (with appropriate backoff logic) is the recommended response to this exception.
ServiceQuotaExceededException
_ServiceQuotaExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Indicates that the principal has crossed the permitted number of resources that can be created.
ThrottlingException
_ThrottlingException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Indicates that the principal has crossed the throttling limits of the API operations.
InternalServerException
_InternalServerException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request processing has failed because of an unknown error, exception, or failure with an internal server.
ResourceNotFoundException
_ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Indicates that a requested resource is not found.
Waiters
Waiters poll by repeatedly sending a request until some remote success condition
configured by the Wait specification is fulfilled. The Wait specification
determines how many attempts should be made, in addition to delay and retry strategies.
Operations
Some AWS operations return results that are incomplete and require subsequent
requests in order to obtain the entire result set. The process of sending
subsequent requests to continue where a previous request left off is called
pagination. For example, the ListObjects operation of Amazon S3 returns up to
1000 objects at a time, and you must send subsequent requests with the
appropriate Marker in order to retrieve the next page of results.
Operations that have an AWSPager instance can transparently perform subsequent
requests, correctly setting Markers and other request facets to iterate through
the entire result set of a truncated API operation. Operations which support
this have an additional note in the documentation.
Many operations have the ability to filter results on the server side. See the individual operation parameters for details.
DescribePermissionSet
data DescribePermissionSet Source #
See: newDescribePermissionSet smart constructor.
Constructors
| DescribePermissionSet' Text Text |
Instances
newDescribePermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> DescribePermissionSet |
Create a value of DescribePermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DescribePermissionSet', describePermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:DescribePermissionSet', describePermissionSet_permissionSetArn - The ARN of the permission set.
data DescribePermissionSetResponse Source #
See: newDescribePermissionSetResponse smart constructor.
Constructors
| DescribePermissionSetResponse' (Maybe PermissionSet) Int |
Instances
newDescribePermissionSetResponse Source #
Create a value of DescribePermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionSet:DescribePermissionSetResponse', describePermissionSetResponse_permissionSet - Describes the level of access on an Amazon Web Services account.
$sel:httpStatus:DescribePermissionSetResponse', describePermissionSetResponse_httpStatus - The response's http status code.
ListTagsForResource (Paginated)
data ListTagsForResource Source #
See: newListTagsForResource smart constructor.
Constructors
| ListTagsForResource' (Maybe Text) Text Text |
Instances
newListTagsForResource Source #
Arguments
| :: Text | |
| -> Text | |
| -> ListTagsForResource |
Create a value of ListTagsForResource with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListTagsForResource', listTagsForResource_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:instanceArn:ListTagsForResource', listTagsForResource_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:resourceArn:ListTagsForResource', listTagsForResource_resourceArn - The ARN of the resource with the tags to be listed.
data ListTagsForResourceResponse Source #
See: newListTagsForResourceResponse smart constructor.
Instances
newListTagsForResourceResponse Source #
Create a value of ListTagsForResourceResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListTagsForResource', listTagsForResourceResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:tags:ListTagsForResourceResponse', listTagsForResourceResponse_tags - A set of key-value pairs that are used to manage the resource.
$sel:httpStatus:ListTagsForResourceResponse', listTagsForResourceResponse_httpStatus - The response's http status code.
CreateInstanceAccessControlAttributeConfiguration
data CreateInstanceAccessControlAttributeConfiguration Source #
See: newCreateInstanceAccessControlAttributeConfiguration smart constructor.
Constructors
| CreateInstanceAccessControlAttributeConfiguration' Text InstanceAccessControlAttributeConfiguration |
Instances
newCreateInstanceAccessControlAttributeConfiguration Source #
Arguments
Create a value of CreateInstanceAccessControlAttributeConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:CreateInstanceAccessControlAttributeConfiguration', createInstanceAccessControlAttributeConfiguration_instanceArn - The ARN of the SSO instance under which the operation will be executed.
$sel:instanceAccessControlAttributeConfiguration:CreateInstanceAccessControlAttributeConfiguration', createInstanceAccessControlAttributeConfiguration_instanceAccessControlAttributeConfiguration - Specifies the Amazon Web Services SSO identity store attributes to add
to your ABAC configuration. When using an external identity provider as
an identity source, you can pass attributes through the SAML assertion.
Doing so provides an alternative to configuring attributes from the
Amazon Web Services SSO identity store. If a SAML assertion passes any
of these attributes, Amazon Web Services SSO will replace the attribute
value with the value from the Amazon Web Services SSO identity store.
data CreateInstanceAccessControlAttributeConfigurationResponse Source #
See: newCreateInstanceAccessControlAttributeConfigurationResponse smart constructor.
Instances
newCreateInstanceAccessControlAttributeConfigurationResponse Source #
Arguments
| :: Int |
|
| -> CreateInstanceAccessControlAttributeConfigurationResponse |
Create a value of CreateInstanceAccessControlAttributeConfigurationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateInstanceAccessControlAttributeConfigurationResponse', createInstanceAccessControlAttributeConfigurationResponse_httpStatus - The response's http status code.
GetInlinePolicyForPermissionSet
data GetInlinePolicyForPermissionSet Source #
See: newGetInlinePolicyForPermissionSet smart constructor.
Constructors
| GetInlinePolicyForPermissionSet' Text Text |
Instances
newGetInlinePolicyForPermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> GetInlinePolicyForPermissionSet |
Create a value of GetInlinePolicyForPermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:GetInlinePolicyForPermissionSet', getInlinePolicyForPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:GetInlinePolicyForPermissionSet', getInlinePolicyForPermissionSet_permissionSetArn - The ARN of the permission set.
data GetInlinePolicyForPermissionSetResponse Source #
See: newGetInlinePolicyForPermissionSetResponse smart constructor.
Constructors
| GetInlinePolicyForPermissionSetResponse' (Maybe (Sensitive Text)) Int |
Instances
newGetInlinePolicyForPermissionSetResponse Source #
Arguments
| :: Int | |
| -> GetInlinePolicyForPermissionSetResponse |
Create a value of GetInlinePolicyForPermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:inlinePolicy:GetInlinePolicyForPermissionSetResponse', getInlinePolicyForPermissionSetResponse_inlinePolicy - The IAM inline policy that is attached to the permission set.
$sel:httpStatus:GetInlinePolicyForPermissionSetResponse', getInlinePolicyForPermissionSetResponse_httpStatus - The response's http status code.
ListPermissionSets (Paginated)
data ListPermissionSets Source #
See: newListPermissionSets smart constructor.
Instances
newListPermissionSets Source #
Arguments
| :: Text | |
| -> ListPermissionSets |
Create a value of ListPermissionSets with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListPermissionSets', listPermissionSets_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:maxResults:ListPermissionSets', listPermissionSets_maxResults - The maximum number of results to display for the assignment.
$sel:instanceArn:ListPermissionSets', listPermissionSets_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
data ListPermissionSetsResponse Source #
See: newListPermissionSetsResponse smart constructor.
Instances
newListPermissionSetsResponse Source #
Create a value of ListPermissionSetsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionSets:ListPermissionSetsResponse', listPermissionSetsResponse_permissionSets - Defines the level of access on an Amazon Web Services account.
$sel:nextToken:ListPermissionSets', listPermissionSetsResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:httpStatus:ListPermissionSetsResponse', listPermissionSetsResponse_httpStatus - The response's http status code.
DeletePermissionSet
data DeletePermissionSet Source #
See: newDeletePermissionSet smart constructor.
Constructors
| DeletePermissionSet' Text Text |
Instances
newDeletePermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> DeletePermissionSet |
Create a value of DeletePermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DeletePermissionSet', deletePermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:DeletePermissionSet', deletePermissionSet_permissionSetArn - The ARN of the permission set that should be deleted.
data DeletePermissionSetResponse Source #
See: newDeletePermissionSetResponse smart constructor.
Constructors
| DeletePermissionSetResponse' Int |
Instances
newDeletePermissionSetResponse Source #
Create a value of DeletePermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeletePermissionSetResponse', deletePermissionSetResponse_httpStatus - The response's http status code.
UpdatePermissionSet
data UpdatePermissionSet Source #
See: newUpdatePermissionSet smart constructor.
Instances
newUpdatePermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> UpdatePermissionSet |
Create a value of UpdatePermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:relayState:UpdatePermissionSet', updatePermissionSet_relayState - Used to redirect users within the application during the federation
authentication process.
$sel:sessionDuration:UpdatePermissionSet', updatePermissionSet_sessionDuration - The length of time that the application user sessions are valid for in
the ISO-8601 standard.
$sel:description:UpdatePermissionSet', updatePermissionSet_description - The description of the PermissionSet.
$sel:instanceArn:UpdatePermissionSet', updatePermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:UpdatePermissionSet', updatePermissionSet_permissionSetArn - The ARN of the permission set.
data UpdatePermissionSetResponse Source #
See: newUpdatePermissionSetResponse smart constructor.
Constructors
| UpdatePermissionSetResponse' Int |
Instances
newUpdatePermissionSetResponse Source #
Create a value of UpdatePermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdatePermissionSetResponse', updatePermissionSetResponse_httpStatus - The response's http status code.
ProvisionPermissionSet
data ProvisionPermissionSet Source #
See: newProvisionPermissionSet smart constructor.
Constructors
| ProvisionPermissionSet' (Maybe Text) Text Text ProvisionTargetType |
Instances
newProvisionPermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> ProvisionTargetType | |
| -> ProvisionPermissionSet |
Create a value of ProvisionPermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:targetId:ProvisionPermissionSet', provisionPermissionSet_targetId - TargetID is an Amazon Web Services account identifier, typically a 10-12
digit string (For example, 123456789012).
$sel:instanceArn:ProvisionPermissionSet', provisionPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:ProvisionPermissionSet', provisionPermissionSet_permissionSetArn - The ARN of the permission set.
$sel:targetType:ProvisionPermissionSet', provisionPermissionSet_targetType - The entity type for which the assignment will be created.
data ProvisionPermissionSetResponse Source #
See: newProvisionPermissionSetResponse smart constructor.
Instances
newProvisionPermissionSetResponse Source #
Create a value of ProvisionPermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionSetProvisioningStatus:ProvisionPermissionSetResponse', provisionPermissionSetResponse_permissionSetProvisioningStatus - The status object for the permission set provisioning operation.
$sel:httpStatus:ProvisionPermissionSetResponse', provisionPermissionSetResponse_httpStatus - The response's http status code.
ListAccountAssignments (Paginated)
data ListAccountAssignments Source #
See: newListAccountAssignments smart constructor.
Instances
newListAccountAssignments Source #
Arguments
| :: Text | |
| -> Text | |
| -> Text | |
| -> ListAccountAssignments |
Create a value of ListAccountAssignments with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListAccountAssignments', listAccountAssignments_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:maxResults:ListAccountAssignments', listAccountAssignments_maxResults - The maximum number of results to display for the assignment.
$sel:instanceArn:ListAccountAssignments', listAccountAssignments_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:accountId:ListAccountAssignments', listAccountAssignments_accountId - The identifier of the Amazon Web Services account from which to list the
assignments.
$sel:permissionSetArn:ListAccountAssignments', listAccountAssignments_permissionSetArn - The ARN of the permission set from which to list assignments.
data ListAccountAssignmentsResponse Source #
See: newListAccountAssignmentsResponse smart constructor.
Constructors
| ListAccountAssignmentsResponse' (Maybe [AccountAssignment]) (Maybe Text) Int |
Instances
newListAccountAssignmentsResponse Source #
Create a value of ListAccountAssignmentsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountAssignments:ListAccountAssignmentsResponse', listAccountAssignmentsResponse_accountAssignments - The list of assignments that match the input Amazon Web Services account
and permission set.
$sel:nextToken:ListAccountAssignments', listAccountAssignmentsResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:httpStatus:ListAccountAssignmentsResponse', listAccountAssignmentsResponse_httpStatus - The response's http status code.
DescribePermissionSetProvisioningStatus
data DescribePermissionSetProvisioningStatus Source #
See: newDescribePermissionSetProvisioningStatus smart constructor.
Constructors
| DescribePermissionSetProvisioningStatus' Text Text |
Instances
newDescribePermissionSetProvisioningStatus Source #
Arguments
| :: Text | |
| -> Text |
|
| -> DescribePermissionSetProvisioningStatus |
Create a value of DescribePermissionSetProvisioningStatus with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DescribePermissionSetProvisioningStatus', describePermissionSetProvisioningStatus_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:provisionPermissionSetRequestId:DescribePermissionSetProvisioningStatus', describePermissionSetProvisioningStatus_provisionPermissionSetRequestId - The identifier that is provided by the ProvisionPermissionSet call to
retrieve the current status of the provisioning workflow.
data DescribePermissionSetProvisioningStatusResponse Source #
See: newDescribePermissionSetProvisioningStatusResponse smart constructor.
Constructors
| DescribePermissionSetProvisioningStatusResponse' (Maybe PermissionSetProvisioningStatus) Int |
Instances
newDescribePermissionSetProvisioningStatusResponse Source #
Arguments
| :: Int |
|
| -> DescribePermissionSetProvisioningStatusResponse |
Create a value of DescribePermissionSetProvisioningStatusResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionSetProvisioningStatus:DescribePermissionSetProvisioningStatusResponse', describePermissionSetProvisioningStatusResponse_permissionSetProvisioningStatus - The status object for the permission set provisioning operation.
$sel:httpStatus:DescribePermissionSetProvisioningStatusResponse', describePermissionSetProvisioningStatusResponse_httpStatus - The response's http status code.
AttachManagedPolicyToPermissionSet
data AttachManagedPolicyToPermissionSet Source #
See: newAttachManagedPolicyToPermissionSet smart constructor.
Constructors
| AttachManagedPolicyToPermissionSet' Text Text Text |
Instances
newAttachManagedPolicyToPermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> Text | |
| -> AttachManagedPolicyToPermissionSet |
Create a value of AttachManagedPolicyToPermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:AttachManagedPolicyToPermissionSet', attachManagedPolicyToPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:AttachManagedPolicyToPermissionSet', attachManagedPolicyToPermissionSet_permissionSetArn - The ARN of the PermissionSet that the managed policy should be attached
to.
$sel:managedPolicyArn:AttachManagedPolicyToPermissionSet', attachManagedPolicyToPermissionSet_managedPolicyArn - The IAM managed policy ARN to be attached to a permission set.
data AttachManagedPolicyToPermissionSetResponse Source #
See: newAttachManagedPolicyToPermissionSetResponse smart constructor.
Constructors
| AttachManagedPolicyToPermissionSetResponse' Int |
Instances
newAttachManagedPolicyToPermissionSetResponse Source #
Arguments
| :: Int | |
| -> AttachManagedPolicyToPermissionSetResponse |
Create a value of AttachManagedPolicyToPermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:AttachManagedPolicyToPermissionSetResponse', attachManagedPolicyToPermissionSetResponse_httpStatus - The response's http status code.
ListManagedPoliciesInPermissionSet (Paginated)
data ListManagedPoliciesInPermissionSet Source #
See: newListManagedPoliciesInPermissionSet smart constructor.
Instances
newListManagedPoliciesInPermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> ListManagedPoliciesInPermissionSet |
Create a value of ListManagedPoliciesInPermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListManagedPoliciesInPermissionSet', listManagedPoliciesInPermissionSet_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:maxResults:ListManagedPoliciesInPermissionSet', listManagedPoliciesInPermissionSet_maxResults - The maximum number of results to display for the PermissionSet.
$sel:instanceArn:ListManagedPoliciesInPermissionSet', listManagedPoliciesInPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:ListManagedPoliciesInPermissionSet', listManagedPoliciesInPermissionSet_permissionSetArn - The ARN of the PermissionSet whose managed policies will be listed.
data ListManagedPoliciesInPermissionSetResponse Source #
See: newListManagedPoliciesInPermissionSetResponse smart constructor.
Constructors
| ListManagedPoliciesInPermissionSetResponse' (Maybe Text) (Maybe [AttachedManagedPolicy]) Int |
Instances
newListManagedPoliciesInPermissionSetResponse Source #
Arguments
| :: Int | |
| -> ListManagedPoliciesInPermissionSetResponse |
Create a value of ListManagedPoliciesInPermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListManagedPoliciesInPermissionSet', listManagedPoliciesInPermissionSetResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:attachedManagedPolicies:ListManagedPoliciesInPermissionSetResponse', listManagedPoliciesInPermissionSetResponse_attachedManagedPolicies - The array of the AttachedManagedPolicy data type object.
$sel:httpStatus:ListManagedPoliciesInPermissionSetResponse', listManagedPoliciesInPermissionSetResponse_httpStatus - The response's http status code.
DeleteInlinePolicyFromPermissionSet
data DeleteInlinePolicyFromPermissionSet Source #
See: newDeleteInlinePolicyFromPermissionSet smart constructor.
Constructors
| DeleteInlinePolicyFromPermissionSet' Text Text |
Instances
newDeleteInlinePolicyFromPermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> DeleteInlinePolicyFromPermissionSet |
Create a value of DeleteInlinePolicyFromPermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DeleteInlinePolicyFromPermissionSet', deleteInlinePolicyFromPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:DeleteInlinePolicyFromPermissionSet', deleteInlinePolicyFromPermissionSet_permissionSetArn - The ARN of the permission set that will be used to remove access.
data DeleteInlinePolicyFromPermissionSetResponse Source #
See: newDeleteInlinePolicyFromPermissionSetResponse smart constructor.
Constructors
| DeleteInlinePolicyFromPermissionSetResponse' Int |
Instances
newDeleteInlinePolicyFromPermissionSetResponse Source #
Arguments
| :: Int |
|
| -> DeleteInlinePolicyFromPermissionSetResponse |
Create a value of DeleteInlinePolicyFromPermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteInlinePolicyFromPermissionSetResponse', deleteInlinePolicyFromPermissionSetResponse_httpStatus - The response's http status code.
DeleteInstanceAccessControlAttributeConfiguration
data DeleteInstanceAccessControlAttributeConfiguration Source #
See: newDeleteInstanceAccessControlAttributeConfiguration smart constructor.
Instances
newDeleteInstanceAccessControlAttributeConfiguration Source #
Arguments
| :: Text |
|
| -> DeleteInstanceAccessControlAttributeConfiguration |
Create a value of DeleteInstanceAccessControlAttributeConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DeleteInstanceAccessControlAttributeConfiguration', deleteInstanceAccessControlAttributeConfiguration_instanceArn - The ARN of the SSO instance under which the operation will be executed.
data DeleteInstanceAccessControlAttributeConfigurationResponse Source #
See: newDeleteInstanceAccessControlAttributeConfigurationResponse smart constructor.
Instances
newDeleteInstanceAccessControlAttributeConfigurationResponse Source #
Arguments
| :: Int |
|
| -> DeleteInstanceAccessControlAttributeConfigurationResponse |
Create a value of DeleteInstanceAccessControlAttributeConfigurationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteInstanceAccessControlAttributeConfigurationResponse', deleteInstanceAccessControlAttributeConfigurationResponse_httpStatus - The response's http status code.
UpdateInstanceAccessControlAttributeConfiguration
data UpdateInstanceAccessControlAttributeConfiguration Source #
See: newUpdateInstanceAccessControlAttributeConfiguration smart constructor.
Constructors
| UpdateInstanceAccessControlAttributeConfiguration' Text InstanceAccessControlAttributeConfiguration |
Instances
newUpdateInstanceAccessControlAttributeConfiguration Source #
Arguments
Create a value of UpdateInstanceAccessControlAttributeConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:UpdateInstanceAccessControlAttributeConfiguration', updateInstanceAccessControlAttributeConfiguration_instanceArn - The ARN of the SSO instance under which the operation will be executed.
$sel:instanceAccessControlAttributeConfiguration:UpdateInstanceAccessControlAttributeConfiguration', updateInstanceAccessControlAttributeConfiguration_instanceAccessControlAttributeConfiguration - Updates the attributes for your ABAC configuration.
data UpdateInstanceAccessControlAttributeConfigurationResponse Source #
See: newUpdateInstanceAccessControlAttributeConfigurationResponse smart constructor.
Instances
newUpdateInstanceAccessControlAttributeConfigurationResponse Source #
Arguments
| :: Int |
|
| -> UpdateInstanceAccessControlAttributeConfigurationResponse |
Create a value of UpdateInstanceAccessControlAttributeConfigurationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateInstanceAccessControlAttributeConfigurationResponse', updateInstanceAccessControlAttributeConfigurationResponse_httpStatus - The response's http status code.
DescribeAccountAssignmentDeletionStatus
data DescribeAccountAssignmentDeletionStatus Source #
See: newDescribeAccountAssignmentDeletionStatus smart constructor.
Constructors
| DescribeAccountAssignmentDeletionStatus' Text Text |
Instances
newDescribeAccountAssignmentDeletionStatus Source #
Arguments
| :: Text | |
| -> Text |
|
| -> DescribeAccountAssignmentDeletionStatus |
Create a value of DescribeAccountAssignmentDeletionStatus with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DescribeAccountAssignmentDeletionStatus', describeAccountAssignmentDeletionStatus_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:accountAssignmentDeletionRequestId:DescribeAccountAssignmentDeletionStatus', describeAccountAssignmentDeletionStatus_accountAssignmentDeletionRequestId - The identifier that is used to track the request operation progress.
data DescribeAccountAssignmentDeletionStatusResponse Source #
See: newDescribeAccountAssignmentDeletionStatusResponse smart constructor.
Constructors
| DescribeAccountAssignmentDeletionStatusResponse' (Maybe AccountAssignmentOperationStatus) Int |
Instances
newDescribeAccountAssignmentDeletionStatusResponse Source #
Arguments
| :: Int |
|
| -> DescribeAccountAssignmentDeletionStatusResponse |
Create a value of DescribeAccountAssignmentDeletionStatusResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountAssignmentDeletionStatus:DescribeAccountAssignmentDeletionStatusResponse', describeAccountAssignmentDeletionStatusResponse_accountAssignmentDeletionStatus - The status object for the account assignment deletion operation.
$sel:httpStatus:DescribeAccountAssignmentDeletionStatusResponse', describeAccountAssignmentDeletionStatusResponse_httpStatus - The response's http status code.
DescribeAccountAssignmentCreationStatus
data DescribeAccountAssignmentCreationStatus Source #
See: newDescribeAccountAssignmentCreationStatus smart constructor.
Constructors
| DescribeAccountAssignmentCreationStatus' Text Text |
Instances
newDescribeAccountAssignmentCreationStatus Source #
Arguments
| :: Text | |
| -> Text |
|
| -> DescribeAccountAssignmentCreationStatus |
Create a value of DescribeAccountAssignmentCreationStatus with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DescribeAccountAssignmentCreationStatus', describeAccountAssignmentCreationStatus_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:accountAssignmentCreationRequestId:DescribeAccountAssignmentCreationStatus', describeAccountAssignmentCreationStatus_accountAssignmentCreationRequestId - The identifier that is used to track the request operation progress.
data DescribeAccountAssignmentCreationStatusResponse Source #
See: newDescribeAccountAssignmentCreationStatusResponse smart constructor.
Constructors
| DescribeAccountAssignmentCreationStatusResponse' (Maybe AccountAssignmentOperationStatus) Int |
Instances
newDescribeAccountAssignmentCreationStatusResponse Source #
Arguments
| :: Int |
|
| -> DescribeAccountAssignmentCreationStatusResponse |
Create a value of DescribeAccountAssignmentCreationStatusResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountAssignmentCreationStatus:DescribeAccountAssignmentCreationStatusResponse', describeAccountAssignmentCreationStatusResponse_accountAssignmentCreationStatus - The status object for the account assignment creation operation.
$sel:httpStatus:DescribeAccountAssignmentCreationStatusResponse', describeAccountAssignmentCreationStatusResponse_httpStatus - The response's http status code.
PutInlinePolicyToPermissionSet
data PutInlinePolicyToPermissionSet Source #
See: newPutInlinePolicyToPermissionSet smart constructor.
Constructors
| PutInlinePolicyToPermissionSet' Text Text (Sensitive Text) |
Instances
newPutInlinePolicyToPermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> Text | |
| -> PutInlinePolicyToPermissionSet |
Create a value of PutInlinePolicyToPermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:PutInlinePolicyToPermissionSet', putInlinePolicyToPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:PutInlinePolicyToPermissionSet', putInlinePolicyToPermissionSet_permissionSetArn - The ARN of the permission set.
$sel:inlinePolicy:PutInlinePolicyToPermissionSet', putInlinePolicyToPermissionSet_inlinePolicy - The IAM inline policy to attach to a PermissionSet.
data PutInlinePolicyToPermissionSetResponse Source #
See: newPutInlinePolicyToPermissionSetResponse smart constructor.
Constructors
| PutInlinePolicyToPermissionSetResponse' Int |
Instances
newPutInlinePolicyToPermissionSetResponse Source #
Arguments
| :: Int | |
| -> PutInlinePolicyToPermissionSetResponse |
Create a value of PutInlinePolicyToPermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:PutInlinePolicyToPermissionSetResponse', putInlinePolicyToPermissionSetResponse_httpStatus - The response's http status code.
ListAccountsForProvisionedPermissionSet (Paginated)
data ListAccountsForProvisionedPermissionSet Source #
See: newListAccountsForProvisionedPermissionSet smart constructor.
Constructors
| ListAccountsForProvisionedPermissionSet' (Maybe ProvisioningStatus) (Maybe Text) (Maybe Natural) Text Text |
Instances
newListAccountsForProvisionedPermissionSet Source #
Arguments
| :: Text | |
| -> Text |
|
| -> ListAccountsForProvisionedPermissionSet |
Create a value of ListAccountsForProvisionedPermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:provisioningStatus:ListAccountsForProvisionedPermissionSet', listAccountsForProvisionedPermissionSet_provisioningStatus - The permission set provisioning status for an Amazon Web Services
account.
$sel:nextToken:ListAccountsForProvisionedPermissionSet', listAccountsForProvisionedPermissionSet_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:maxResults:ListAccountsForProvisionedPermissionSet', listAccountsForProvisionedPermissionSet_maxResults - The maximum number of results to display for the PermissionSet.
$sel:instanceArn:ListAccountsForProvisionedPermissionSet', listAccountsForProvisionedPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:ListAccountsForProvisionedPermissionSet', listAccountsForProvisionedPermissionSet_permissionSetArn - The ARN of the PermissionSet from which the associated Amazon Web
Services accounts will be listed.
data ListAccountsForProvisionedPermissionSetResponse Source #
See: newListAccountsForProvisionedPermissionSetResponse smart constructor.
Instances
newListAccountsForProvisionedPermissionSetResponse Source #
Arguments
| :: Int |
|
| -> ListAccountsForProvisionedPermissionSetResponse |
Create a value of ListAccountsForProvisionedPermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountIds:ListAccountsForProvisionedPermissionSetResponse', listAccountsForProvisionedPermissionSetResponse_accountIds - The list of Amazon Web Services AccountIds.
$sel:nextToken:ListAccountsForProvisionedPermissionSet', listAccountsForProvisionedPermissionSetResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:httpStatus:ListAccountsForProvisionedPermissionSetResponse', listAccountsForProvisionedPermissionSetResponse_httpStatus - The response's http status code.
ListPermissionSetsProvisionedToAccount (Paginated)
data ListPermissionSetsProvisionedToAccount Source #
See: newListPermissionSetsProvisionedToAccount smart constructor.
Constructors
| ListPermissionSetsProvisionedToAccount' (Maybe ProvisioningStatus) (Maybe Text) (Maybe Natural) Text Text |
Instances
newListPermissionSetsProvisionedToAccount Source #
Arguments
| :: Text | |
| -> Text | |
| -> ListPermissionSetsProvisionedToAccount |
Create a value of ListPermissionSetsProvisionedToAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:provisioningStatus:ListPermissionSetsProvisionedToAccount', listPermissionSetsProvisionedToAccount_provisioningStatus - The status object for the permission set provisioning operation.
$sel:nextToken:ListPermissionSetsProvisionedToAccount', listPermissionSetsProvisionedToAccount_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:maxResults:ListPermissionSetsProvisionedToAccount', listPermissionSetsProvisionedToAccount_maxResults - The maximum number of results to display for the assignment.
$sel:instanceArn:ListPermissionSetsProvisionedToAccount', listPermissionSetsProvisionedToAccount_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:accountId:ListPermissionSetsProvisionedToAccount', listPermissionSetsProvisionedToAccount_accountId - The identifier of the Amazon Web Services account from which to list the
assignments.
data ListPermissionSetsProvisionedToAccountResponse Source #
See: newListPermissionSetsProvisionedToAccountResponse smart constructor.
Instances
newListPermissionSetsProvisionedToAccountResponse Source #
Arguments
| :: Int |
|
| -> ListPermissionSetsProvisionedToAccountResponse |
Create a value of ListPermissionSetsProvisionedToAccountResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionSets:ListPermissionSetsProvisionedToAccountResponse', listPermissionSetsProvisionedToAccountResponse_permissionSets - Defines the level of access that an Amazon Web Services account has.
$sel:nextToken:ListPermissionSetsProvisionedToAccount', listPermissionSetsProvisionedToAccountResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:httpStatus:ListPermissionSetsProvisionedToAccountResponse', listPermissionSetsProvisionedToAccountResponse_httpStatus - The response's http status code.
DetachManagedPolicyFromPermissionSet
data DetachManagedPolicyFromPermissionSet Source #
See: newDetachManagedPolicyFromPermissionSet smart constructor.
Constructors
| DetachManagedPolicyFromPermissionSet' Text Text Text |
Instances
newDetachManagedPolicyFromPermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> Text | |
| -> DetachManagedPolicyFromPermissionSet |
Create a value of DetachManagedPolicyFromPermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DetachManagedPolicyFromPermissionSet', detachManagedPolicyFromPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:permissionSetArn:DetachManagedPolicyFromPermissionSet', detachManagedPolicyFromPermissionSet_permissionSetArn - The ARN of the PermissionSet from which the policy should be detached.
$sel:managedPolicyArn:DetachManagedPolicyFromPermissionSet', detachManagedPolicyFromPermissionSet_managedPolicyArn - The IAM managed policy ARN to be attached to a permission set.
data DetachManagedPolicyFromPermissionSetResponse Source #
See: newDetachManagedPolicyFromPermissionSetResponse smart constructor.
Constructors
| DetachManagedPolicyFromPermissionSetResponse' Int |
Instances
newDetachManagedPolicyFromPermissionSetResponse Source #
Arguments
| :: Int |
|
| -> DetachManagedPolicyFromPermissionSetResponse |
Create a value of DetachManagedPolicyFromPermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DetachManagedPolicyFromPermissionSetResponse', detachManagedPolicyFromPermissionSetResponse_httpStatus - The response's http status code.
ListAccountAssignmentCreationStatus (Paginated)
data ListAccountAssignmentCreationStatus Source #
See: newListAccountAssignmentCreationStatus smart constructor.
Constructors
| ListAccountAssignmentCreationStatus' (Maybe Text) (Maybe OperationStatusFilter) (Maybe Natural) Text |
Instances
newListAccountAssignmentCreationStatus Source #
Arguments
| :: Text | |
| -> ListAccountAssignmentCreationStatus |
Create a value of ListAccountAssignmentCreationStatus with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListAccountAssignmentCreationStatus', listAccountAssignmentCreationStatus_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:filter':ListAccountAssignmentCreationStatus', listAccountAssignmentCreationStatus_filter - Filters results based on the passed attribute value.
$sel:maxResults:ListAccountAssignmentCreationStatus', listAccountAssignmentCreationStatus_maxResults - The maximum number of results to display for the assignment.
$sel:instanceArn:ListAccountAssignmentCreationStatus', listAccountAssignmentCreationStatus_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
data ListAccountAssignmentCreationStatusResponse Source #
See: newListAccountAssignmentCreationStatusResponse smart constructor.
Constructors
| ListAccountAssignmentCreationStatusResponse' (Maybe [AccountAssignmentOperationStatusMetadata]) (Maybe Text) Int |
Instances
newListAccountAssignmentCreationStatusResponse Source #
Arguments
| :: Int |
|
| -> ListAccountAssignmentCreationStatusResponse |
Create a value of ListAccountAssignmentCreationStatusResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountAssignmentsCreationStatus:ListAccountAssignmentCreationStatusResponse', listAccountAssignmentCreationStatusResponse_accountAssignmentsCreationStatus - The status object for the account assignment creation operation.
$sel:nextToken:ListAccountAssignmentCreationStatus', listAccountAssignmentCreationStatusResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:httpStatus:ListAccountAssignmentCreationStatusResponse', listAccountAssignmentCreationStatusResponse_httpStatus - The response's http status code.
CreatePermissionSet
data CreatePermissionSet Source #
See: newCreatePermissionSet smart constructor.
Instances
newCreatePermissionSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> CreatePermissionSet |
Create a value of CreatePermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:relayState:CreatePermissionSet', createPermissionSet_relayState - Used to redirect users within the application during the federation
authentication process.
$sel:sessionDuration:CreatePermissionSet', createPermissionSet_sessionDuration - The length of time that the application user sessions are valid in the
ISO-8601 standard.
$sel:description:CreatePermissionSet', createPermissionSet_description - The description of the PermissionSet.
$sel:tags:CreatePermissionSet', createPermissionSet_tags - The tags to attach to the new PermissionSet.
$sel:name:CreatePermissionSet', createPermissionSet_name - The name of the PermissionSet.
$sel:instanceArn:CreatePermissionSet', createPermissionSet_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
data CreatePermissionSetResponse Source #
See: newCreatePermissionSetResponse smart constructor.
Constructors
| CreatePermissionSetResponse' (Maybe PermissionSet) Int |
Instances
newCreatePermissionSetResponse Source #
Create a value of CreatePermissionSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionSet:CreatePermissionSetResponse', createPermissionSetResponse_permissionSet - Defines the level of access on an Amazon Web Services account.
$sel:httpStatus:CreatePermissionSetResponse', createPermissionSetResponse_httpStatus - The response's http status code.
ListAccountAssignmentDeletionStatus (Paginated)
data ListAccountAssignmentDeletionStatus Source #
See: newListAccountAssignmentDeletionStatus smart constructor.
Constructors
| ListAccountAssignmentDeletionStatus' (Maybe Text) (Maybe OperationStatusFilter) (Maybe Natural) Text |
Instances
newListAccountAssignmentDeletionStatus Source #
Arguments
| :: Text | |
| -> ListAccountAssignmentDeletionStatus |
Create a value of ListAccountAssignmentDeletionStatus with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListAccountAssignmentDeletionStatus', listAccountAssignmentDeletionStatus_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:filter':ListAccountAssignmentDeletionStatus', listAccountAssignmentDeletionStatus_filter - Filters results based on the passed attribute value.
$sel:maxResults:ListAccountAssignmentDeletionStatus', listAccountAssignmentDeletionStatus_maxResults - The maximum number of results to display for the assignment.
$sel:instanceArn:ListAccountAssignmentDeletionStatus', listAccountAssignmentDeletionStatus_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
data ListAccountAssignmentDeletionStatusResponse Source #
See: newListAccountAssignmentDeletionStatusResponse smart constructor.
Constructors
| ListAccountAssignmentDeletionStatusResponse' (Maybe [AccountAssignmentOperationStatusMetadata]) (Maybe Text) Int |
Instances
newListAccountAssignmentDeletionStatusResponse Source #
Arguments
| :: Int |
|
| -> ListAccountAssignmentDeletionStatusResponse |
Create a value of ListAccountAssignmentDeletionStatusResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountAssignmentsDeletionStatus:ListAccountAssignmentDeletionStatusResponse', listAccountAssignmentDeletionStatusResponse_accountAssignmentsDeletionStatus - The status object for the account assignment deletion operation.
$sel:nextToken:ListAccountAssignmentDeletionStatus', listAccountAssignmentDeletionStatusResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:httpStatus:ListAccountAssignmentDeletionStatusResponse', listAccountAssignmentDeletionStatusResponse_httpStatus - The response's http status code.
TagResource
data TagResource Source #
See: newTagResource smart constructor.
Constructors
| TagResource' Text Text [Tag] |
Instances
Create a value of TagResource with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:TagResource', tagResource_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:resourceArn:TagResource', tagResource_resourceArn - The ARN of the resource with the tags to be listed.
$sel:tags:TagResource', tagResource_tags - A set of key-value pairs that are used to manage the resource.
data TagResourceResponse Source #
See: newTagResourceResponse smart constructor.
Constructors
| TagResourceResponse' Int |
Instances
newTagResourceResponse Source #
Arguments
| :: Int | |
| -> TagResourceResponse |
Create a value of TagResourceResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:TagResourceResponse', tagResourceResponse_httpStatus - The response's http status code.
ListInstances (Paginated)
data ListInstances Source #
See: newListInstances smart constructor.
Constructors
| ListInstances' (Maybe Text) (Maybe Natural) |
Instances
newListInstances :: ListInstances Source #
Create a value of ListInstances with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListInstances', listInstances_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:maxResults:ListInstances', listInstances_maxResults - The maximum number of results to display for the instance.
data ListInstancesResponse Source #
See: newListInstancesResponse smart constructor.
Constructors
| ListInstancesResponse' (Maybe Text) (Maybe [InstanceMetadata]) Int |
Instances
newListInstancesResponse Source #
Create a value of ListInstancesResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListInstances', listInstancesResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:instances:ListInstancesResponse', listInstancesResponse_instances - Lists the SSO instances that the caller has access to.
$sel:httpStatus:ListInstancesResponse', listInstancesResponse_httpStatus - The response's http status code.
DescribeInstanceAccessControlAttributeConfiguration
data DescribeInstanceAccessControlAttributeConfiguration Source #
See: newDescribeInstanceAccessControlAttributeConfiguration smart constructor.
Instances
newDescribeInstanceAccessControlAttributeConfiguration Source #
Arguments
| :: Text |
|
| -> DescribeInstanceAccessControlAttributeConfiguration |
Create a value of DescribeInstanceAccessControlAttributeConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DescribeInstanceAccessControlAttributeConfiguration', describeInstanceAccessControlAttributeConfiguration_instanceArn - The ARN of the SSO instance under which the operation will be executed.
data DescribeInstanceAccessControlAttributeConfigurationResponse Source #
See: newDescribeInstanceAccessControlAttributeConfigurationResponse smart constructor.
Constructors
| DescribeInstanceAccessControlAttributeConfigurationResponse' (Maybe InstanceAccessControlAttributeConfigurationStatus) (Maybe InstanceAccessControlAttributeConfiguration) (Maybe Text) Int |
Instances
newDescribeInstanceAccessControlAttributeConfigurationResponse Source #
Arguments
| :: Int |
|
| -> DescribeInstanceAccessControlAttributeConfigurationResponse |
Create a value of DescribeInstanceAccessControlAttributeConfigurationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:DescribeInstanceAccessControlAttributeConfigurationResponse', describeInstanceAccessControlAttributeConfigurationResponse_status - The status of the attribute configuration process.
$sel:instanceAccessControlAttributeConfiguration:DescribeInstanceAccessControlAttributeConfigurationResponse', describeInstanceAccessControlAttributeConfigurationResponse_instanceAccessControlAttributeConfiguration - Gets the list of Amazon Web Services SSO identity store attributes that
have been added to your ABAC configuration.
$sel:statusReason:DescribeInstanceAccessControlAttributeConfigurationResponse', describeInstanceAccessControlAttributeConfigurationResponse_statusReason - Provides more details about the current status of the specified
attribute.
$sel:httpStatus:DescribeInstanceAccessControlAttributeConfigurationResponse', describeInstanceAccessControlAttributeConfigurationResponse_httpStatus - The response's http status code.
UntagResource
data UntagResource Source #
See: newUntagResource smart constructor.
Constructors
| UntagResource' Text Text (NonEmpty Text) |
Instances
Arguments
| :: Text | |
| -> Text | |
| -> NonEmpty Text | |
| -> UntagResource |
Create a value of UntagResource with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:UntagResource', untagResource_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:resourceArn:UntagResource', untagResource_resourceArn - The ARN of the resource with the tags to be listed.
$sel:tagKeys:UntagResource', untagResource_tagKeys - The keys of tags that are attached to the resource.
data UntagResourceResponse Source #
See: newUntagResourceResponse smart constructor.
Constructors
| UntagResourceResponse' Int |
Instances
newUntagResourceResponse Source #
Create a value of UntagResourceResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UntagResourceResponse', untagResourceResponse_httpStatus - The response's http status code.
DeleteAccountAssignment
data DeleteAccountAssignment Source #
See: newDeleteAccountAssignment smart constructor.
Constructors
| DeleteAccountAssignment' Text Text TargetType Text PrincipalType Text |
Instances
newDeleteAccountAssignment Source #
Arguments
| :: Text | |
| -> Text | |
| -> TargetType | |
| -> Text | |
| -> PrincipalType | |
| -> Text | |
| -> DeleteAccountAssignment |
Create a value of DeleteAccountAssignment with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:DeleteAccountAssignment', deleteAccountAssignment_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:targetId:DeleteAccountAssignment', deleteAccountAssignment_targetId - TargetID is an Amazon Web Services account identifier, typically a 10-12
digit string (For example, 123456789012).
$sel:targetType:DeleteAccountAssignment', deleteAccountAssignment_targetType - The entity type for which the assignment will be deleted.
$sel:permissionSetArn:DeleteAccountAssignment', deleteAccountAssignment_permissionSetArn - The ARN of the permission set that will be used to remove access.
$sel:principalType:DeleteAccountAssignment', deleteAccountAssignment_principalType - The entity type for which the assignment will be deleted.
$sel:principalId:DeleteAccountAssignment', deleteAccountAssignment_principalId - An identifier for an object in Amazon Web Services SSO, such as a user
or group. PrincipalIds are GUIDs (For example,
f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
PrincipalIds in Amazon Web Services SSO, see the
Amazon Web Services SSO Identity Store API Reference.
data DeleteAccountAssignmentResponse Source #
See: newDeleteAccountAssignmentResponse smart constructor.
Instances
newDeleteAccountAssignmentResponse Source #
Create a value of DeleteAccountAssignmentResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountAssignmentDeletionStatus:DeleteAccountAssignmentResponse', deleteAccountAssignmentResponse_accountAssignmentDeletionStatus - The status object for the account assignment deletion operation.
$sel:httpStatus:DeleteAccountAssignmentResponse', deleteAccountAssignmentResponse_httpStatus - The response's http status code.
ListPermissionSetProvisioningStatus (Paginated)
data ListPermissionSetProvisioningStatus Source #
See: newListPermissionSetProvisioningStatus smart constructor.
Constructors
| ListPermissionSetProvisioningStatus' (Maybe Text) (Maybe OperationStatusFilter) (Maybe Natural) Text |
Instances
newListPermissionSetProvisioningStatus Source #
Arguments
| :: Text | |
| -> ListPermissionSetProvisioningStatus |
Create a value of ListPermissionSetProvisioningStatus with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListPermissionSetProvisioningStatus', listPermissionSetProvisioningStatus_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:filter':ListPermissionSetProvisioningStatus', listPermissionSetProvisioningStatus_filter - Filters results based on the passed attribute value.
$sel:maxResults:ListPermissionSetProvisioningStatus', listPermissionSetProvisioningStatus_maxResults - The maximum number of results to display for the assignment.
$sel:instanceArn:ListPermissionSetProvisioningStatus', listPermissionSetProvisioningStatus_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
data ListPermissionSetProvisioningStatusResponse Source #
See: newListPermissionSetProvisioningStatusResponse smart constructor.
Constructors
| ListPermissionSetProvisioningStatusResponse' (Maybe [PermissionSetProvisioningStatusMetadata]) (Maybe Text) Int |
Instances
newListPermissionSetProvisioningStatusResponse Source #
Arguments
| :: Int |
|
| -> ListPermissionSetProvisioningStatusResponse |
Create a value of ListPermissionSetProvisioningStatusResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionSetsProvisioningStatus:ListPermissionSetProvisioningStatusResponse', listPermissionSetProvisioningStatusResponse_permissionSetsProvisioningStatus - The status object for the permission set provisioning operation.
$sel:nextToken:ListPermissionSetProvisioningStatus', listPermissionSetProvisioningStatusResponse_nextToken - The pagination token for the list API. Initially the value is null. Use
the output of previous API calls to make subsequent calls.
$sel:httpStatus:ListPermissionSetProvisioningStatusResponse', listPermissionSetProvisioningStatusResponse_httpStatus - The response's http status code.
CreateAccountAssignment
data CreateAccountAssignment Source #
See: newCreateAccountAssignment smart constructor.
Constructors
| CreateAccountAssignment' Text Text TargetType Text PrincipalType Text |
Instances
newCreateAccountAssignment Source #
Arguments
| :: Text | |
| -> Text | |
| -> TargetType | |
| -> Text | |
| -> PrincipalType | |
| -> Text | |
| -> CreateAccountAssignment |
Create a value of CreateAccountAssignment with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:CreateAccountAssignment', createAccountAssignment_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:targetId:CreateAccountAssignment', createAccountAssignment_targetId - TargetID is an Amazon Web Services account identifier, typically a 10-12
digit string (For example, 123456789012).
$sel:targetType:CreateAccountAssignment', createAccountAssignment_targetType - The entity type for which the assignment will be created.
$sel:permissionSetArn:CreateAccountAssignment', createAccountAssignment_permissionSetArn - The ARN of the permission set that the admin wants to grant the
principal access to.
$sel:principalType:CreateAccountAssignment', createAccountAssignment_principalType - The entity type for which the assignment will be created.
$sel:principalId:CreateAccountAssignment', createAccountAssignment_principalId - An identifier for an object in Amazon Web Services SSO, such as a user
or group. PrincipalIds are GUIDs (For example,
f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
PrincipalIds in Amazon Web Services SSO, see the
Amazon Web Services SSO Identity Store API Reference.
data CreateAccountAssignmentResponse Source #
See: newCreateAccountAssignmentResponse smart constructor.
Instances
newCreateAccountAssignmentResponse Source #
Create a value of CreateAccountAssignmentResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountAssignmentCreationStatus:CreateAccountAssignmentResponse', createAccountAssignmentResponse_accountAssignmentCreationStatus - The status object for the account assignment creation operation.
$sel:httpStatus:CreateAccountAssignmentResponse', createAccountAssignmentResponse_httpStatus - The response's http status code.
Types
InstanceAccessControlAttributeConfigurationStatus
newtype InstanceAccessControlAttributeConfigurationStatus Source #
Bundled Patterns
Instances
PrincipalType
newtype PrincipalType Source #
Constructors
| PrincipalType' | |
Fields | |
Bundled Patterns
| pattern PrincipalType_GROUP :: PrincipalType | |
| pattern PrincipalType_USER :: PrincipalType |
Instances
ProvisionTargetType
newtype ProvisionTargetType Source #
Constructors
| ProvisionTargetType' | |
Fields | |
Bundled Patterns
| pattern ProvisionTargetType_ALL_PROVISIONED_ACCOUNTS :: ProvisionTargetType | |
| pattern ProvisionTargetType_AWS_ACCOUNT :: ProvisionTargetType |
Instances
ProvisioningStatus
newtype ProvisioningStatus Source #
Constructors
| ProvisioningStatus' | |
Fields | |
Bundled Patterns
| pattern ProvisioningStatus_LATEST_PERMISSION_SET_NOT_PROVISIONED :: ProvisioningStatus | |
| pattern ProvisioningStatus_LATEST_PERMISSION_SET_PROVISIONED :: ProvisioningStatus |
Instances
StatusValues
newtype StatusValues Source #
Constructors
| StatusValues' | |
Fields | |
Bundled Patterns
| pattern StatusValues_FAILED :: StatusValues | |
| pattern StatusValues_IN_PROGRESS :: StatusValues | |
| pattern StatusValues_SUCCEEDED :: StatusValues |
Instances
TargetType
newtype TargetType Source #
Constructors
| TargetType' | |
Fields | |
Bundled Patterns
| pattern TargetType_AWS_ACCOUNT :: TargetType |
Instances
AccessControlAttribute
data AccessControlAttribute Source #
These are Amazon Web Services SSO identity store attributes that you can
configure for use in attributes-based access control (ABAC). You can
create permissions policies that determine who can access your Amazon
Web Services resources based upon the configured attribute values. When
you enable ABAC and specify AccessControlAttributes, Amazon Web
Services SSO passes the attribute values of the authenticated user into
IAM for use in policy evaluation.
See: newAccessControlAttribute smart constructor.
Constructors
| AccessControlAttribute' Text AccessControlAttributeValue |
Instances
newAccessControlAttribute Source #
Arguments
| :: Text | |
| -> AccessControlAttributeValue | |
| -> AccessControlAttribute |
Create a value of AccessControlAttribute with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:key:AccessControlAttribute', accessControlAttribute_key - The name of the attribute associated with your identities in your
identity source. This is used to map a specified attribute in your
identity source with an attribute in Amazon Web Services SSO.
$sel:value:AccessControlAttribute', accessControlAttribute_value - The value used for mapping a specified attribute to an identity source.
AccessControlAttributeValue
data AccessControlAttributeValue Source #
The value used for mapping a specified attribute to an identity source.
See: newAccessControlAttributeValue smart constructor.
Constructors
| AccessControlAttributeValue' (NonEmpty Text) |
Instances
newAccessControlAttributeValue Source #
Create a value of AccessControlAttributeValue with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:source:AccessControlAttributeValue', accessControlAttributeValue_source - The identity source to use when mapping a specified attribute to Amazon
Web Services SSO.
AccountAssignment
data AccountAssignment Source #
The assignment that indicates a principal's limited access to a specified Amazon Web Services account with a specified permission set.
The term principal here refers to a user or group that is defined in Amazon Web Services SSO.
See: newAccountAssignment smart constructor.
Constructors
| AccountAssignment' (Maybe Text) (Maybe PrincipalType) (Maybe Text) (Maybe Text) |
Instances
newAccountAssignment :: AccountAssignment Source #
Create a value of AccountAssignment with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:principalId:AccountAssignment', accountAssignment_principalId - An identifier for an object in Amazon Web Services SSO, such as a user
or group. PrincipalIds are GUIDs (For example,
f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
PrincipalIds in Amazon Web Services SSO, see the
Amazon Web Services SSO Identity Store API Reference.
$sel:principalType:AccountAssignment', accountAssignment_principalType - The entity type for which the assignment will be created.
$sel:accountId:AccountAssignment', accountAssignment_accountId - The identifier of the Amazon Web Services account.
$sel:permissionSetArn:AccountAssignment', accountAssignment_permissionSetArn - The ARN of the permission set. For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
AccountAssignmentOperationStatus
data AccountAssignmentOperationStatus Source #
The status of the creation or deletion operation of an assignment that a principal needs to access an account.
See: newAccountAssignmentOperationStatus smart constructor.
Constructors
| AccountAssignmentOperationStatus' (Maybe Text) (Maybe StatusValues) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe PrincipalType) (Maybe TargetType) (Maybe POSIX) (Maybe Text) |
Instances
newAccountAssignmentOperationStatus :: AccountAssignmentOperationStatus Source #
Create a value of AccountAssignmentOperationStatus with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:requestId:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_requestId - The identifier for tracking the request operation that is generated by
the universally unique identifier (UUID) workflow.
$sel:status:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_status - The status of the permission set provisioning process.
$sel:failureReason:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_failureReason - The message that contains an error or exception in case of an operation
failure.
$sel:targetId:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_targetId - TargetID is an Amazon Web Services account identifier, typically a 10-12
digit string (For example, 123456789012).
$sel:principalId:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_principalId - An identifier for an object in Amazon Web Services SSO, such as a user
or group. PrincipalIds are GUIDs (For example,
f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
PrincipalIds in Amazon Web Services SSO, see the
Amazon Web Services SSO Identity Store API Reference.
$sel:principalType:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_principalType - The entity type for which the assignment will be created.
$sel:targetType:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_targetType - The entity type for which the assignment will be created.
$sel:createdDate:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_createdDate - The date that the permission set was created.
$sel:permissionSetArn:AccountAssignmentOperationStatus', accountAssignmentOperationStatus_permissionSetArn - The ARN of the permission set. For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
AccountAssignmentOperationStatusMetadata
data AccountAssignmentOperationStatusMetadata Source #
Provides information about the AccountAssignment creation request.
See: newAccountAssignmentOperationStatusMetadata smart constructor.
Constructors
| AccountAssignmentOperationStatusMetadata' (Maybe Text) (Maybe StatusValues) (Maybe POSIX) |
Instances
newAccountAssignmentOperationStatusMetadata :: AccountAssignmentOperationStatusMetadata Source #
Create a value of AccountAssignmentOperationStatusMetadata with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:requestId:AccountAssignmentOperationStatusMetadata', accountAssignmentOperationStatusMetadata_requestId - The identifier for tracking the request operation that is generated by
the universally unique identifier (UUID) workflow.
$sel:status:AccountAssignmentOperationStatusMetadata', accountAssignmentOperationStatusMetadata_status - The status of the permission set provisioning process.
$sel:createdDate:AccountAssignmentOperationStatusMetadata', accountAssignmentOperationStatusMetadata_createdDate - The date that the permission set was created.
AttachedManagedPolicy
data AttachedManagedPolicy Source #
A structure that stores the details of the IAM managed policy.
See: newAttachedManagedPolicy smart constructor.
Constructors
| AttachedManagedPolicy' (Maybe Text) (Maybe Text) |
Instances
newAttachedManagedPolicy :: AttachedManagedPolicy Source #
Create a value of AttachedManagedPolicy with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:AttachedManagedPolicy', attachedManagedPolicy_arn - The ARN of the IAM managed policy. For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:name:AttachedManagedPolicy', attachedManagedPolicy_name - The name of the IAM managed policy.
InstanceAccessControlAttributeConfiguration
data InstanceAccessControlAttributeConfiguration Source #
Specifies the attributes to add to your attribute-based access control (ABAC) configuration.
See: newInstanceAccessControlAttributeConfiguration smart constructor.
Instances
newInstanceAccessControlAttributeConfiguration :: InstanceAccessControlAttributeConfiguration Source #
Create a value of InstanceAccessControlAttributeConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accessControlAttributes:InstanceAccessControlAttributeConfiguration', instanceAccessControlAttributeConfiguration_accessControlAttributes - Lists the attributes that are configured for ABAC in the specified
Amazon Web Services SSO instance.
InstanceMetadata
data InstanceMetadata Source #
Provides information about the SSO instance.
See: newInstanceMetadata smart constructor.
Constructors
| InstanceMetadata' (Maybe Text) (Maybe Text) |
Instances
newInstanceMetadata :: InstanceMetadata Source #
Create a value of InstanceMetadata with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:identityStoreId:InstanceMetadata', instanceMetadata_identityStoreId - The identifier of the identity store that is connected to the SSO
instance.
$sel:instanceArn:InstanceMetadata', instanceMetadata_instanceArn - The ARN of the SSO instance under which the operation will be executed.
For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
OperationStatusFilter
data OperationStatusFilter Source #
Filters he operation status list based on the passed attribute value.
See: newOperationStatusFilter smart constructor.
Constructors
| OperationStatusFilter' (Maybe StatusValues) |
Instances
newOperationStatusFilter :: OperationStatusFilter Source #
Create a value of OperationStatusFilter with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:OperationStatusFilter', operationStatusFilter_status - Filters the list operations result based on the status attribute.
PermissionSet
data PermissionSet Source #
An entity that contains IAM policies.
See: newPermissionSet smart constructor.
Constructors
| PermissionSet' (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe Text) (Maybe Text) (Maybe Text) |
Instances
newPermissionSet :: PermissionSet Source #
Create a value of PermissionSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:relayState:PermissionSet', permissionSet_relayState - Used to redirect users within the application during the federation
authentication process.
$sel:sessionDuration:PermissionSet', permissionSet_sessionDuration - The length of time that the application user sessions are valid for in
the ISO-8601 standard.
$sel:createdDate:PermissionSet', permissionSet_createdDate - The date that the permission set was created.
$sel:permissionSetArn:PermissionSet', permissionSet_permissionSetArn - The ARN of the permission set. For more information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
$sel:name:PermissionSet', permissionSet_name - The name of the permission set.
$sel:description:PermissionSet', permissionSet_description - The description of the PermissionSet.
PermissionSetProvisioningStatus
data PermissionSetProvisioningStatus Source #
A structure that is used to provide the status of the provisioning operation for a specified permission set.
See: newPermissionSetProvisioningStatus smart constructor.
Constructors
| PermissionSetProvisioningStatus' (Maybe Text) (Maybe StatusValues) (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe Text) |
Instances
newPermissionSetProvisioningStatus :: PermissionSetProvisioningStatus Source #
Create a value of PermissionSetProvisioningStatus with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:requestId:PermissionSetProvisioningStatus', permissionSetProvisioningStatus_requestId - The identifier for tracking the request operation that is generated by
the universally unique identifier (UUID) workflow.
$sel:status:PermissionSetProvisioningStatus', permissionSetProvisioningStatus_status - The status of the permission set provisioning process.
$sel:failureReason:PermissionSetProvisioningStatus', permissionSetProvisioningStatus_failureReason - The message that contains an error or exception in case of an operation
failure.
$sel:accountId:PermissionSetProvisioningStatus', permissionSetProvisioningStatus_accountId - The identifier of the Amazon Web Services account from which to list the
assignments.
$sel:createdDate:PermissionSetProvisioningStatus', permissionSetProvisioningStatus_createdDate - The date that the permission set was created.
$sel:permissionSetArn:PermissionSetProvisioningStatus', permissionSetProvisioningStatus_permissionSetArn - The ARN of the permission set that is being provisioned. For more
information about ARNs, see
Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
in the Amazon Web Services General Reference.
PermissionSetProvisioningStatusMetadata
data PermissionSetProvisioningStatusMetadata Source #
Provides information about the permission set provisioning status.
See: newPermissionSetProvisioningStatusMetadata smart constructor.
Constructors
| PermissionSetProvisioningStatusMetadata' (Maybe Text) (Maybe StatusValues) (Maybe POSIX) |
Instances
newPermissionSetProvisioningStatusMetadata :: PermissionSetProvisioningStatusMetadata Source #
Create a value of PermissionSetProvisioningStatusMetadata with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:requestId:PermissionSetProvisioningStatusMetadata', permissionSetProvisioningStatusMetadata_requestId - The identifier for tracking the request operation that is generated by
the universally unique identifier (UUID) workflow.
$sel:status:PermissionSetProvisioningStatusMetadata', permissionSetProvisioningStatusMetadata_status - The status of the permission set provisioning process.
$sel:createdDate:PermissionSetProvisioningStatusMetadata', permissionSetProvisioningStatusMetadata_createdDate - The date that the permission set was created.
Tag
A set of key-value pairs that are used to manage the resource. Tags can only be applied to permission sets and cannot be applied to corresponding roles that Amazon Web Services SSO creates in Amazon Web Services accounts.
See: newTag smart constructor.
Instances
| Eq Tag Source # | |
| Read Tag Source # | |
| Show Tag Source # | |
| Generic Tag Source # | |
| NFData Tag Source # | |
Defined in Amazonka.SSOAdmin.Types.Tag | |
| Hashable Tag Source # | |
Defined in Amazonka.SSOAdmin.Types.Tag | |
| ToJSON Tag Source # | |
Defined in Amazonka.SSOAdmin.Types.Tag | |
| FromJSON Tag Source # | |
| type Rep Tag Source # | |
Defined in Amazonka.SSOAdmin.Types.Tag type Rep Tag = D1 ('MetaData "Tag" "Amazonka.SSOAdmin.Types.Tag" "libZSservicesZSamazonka-sso-adminZSamazonka-sso-admin" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "value") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "key") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
Create a value of Tag with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:value:Tag', tag_value - The value of the tag.
$sel:key:Tag', tag_key - The key for the tag.