Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
- Service Configuration
- Errors
- Waiters
- Operations
- UpdateServer
- DeleteServer
- CreateWorkflow
- DeleteSshPublicKey
- ListSecurityPolicies
- DeleteWorkflow
- ListTagsForResource
- SendWorkflowStepState
- StopServer
- ListUsers
- DescribeServer
- DescribeSecurityPolicy
- ImportSshPublicKey
- ListExecutions
- CreateServer
- TestIdentityProvider
- ListServers (Paginated)
- DescribeUser
- DescribeExecution
- ListWorkflows
- CreateUser
- StartServer
- UpdateAccess
- DeleteAccess
- CreateAccess
- ListAccesses
- UpdateUser
- DeleteUser
- TagResource
- UntagResource
- DescribeWorkflow
- DescribeAccess
- Types
- CustomStepStatus
- Domain
- EndpointType
- ExecutionErrorType
- ExecutionStatus
- HomeDirectoryType
- IdentityProviderType
- OverwriteExisting
- Protocol
- State
- WorkflowStepType
- CopyStepDetails
- CustomStepDetails
- DeleteStepDetails
- DescribedAccess
- DescribedExecution
- DescribedSecurityPolicy
- DescribedServer
- DescribedUser
- DescribedWorkflow
- EfsFileLocation
- EndpointDetails
- ExecutionError
- ExecutionResults
- ExecutionStepResult
- FileLocation
- HomeDirectoryMapEntry
- IdentityProviderDetails
- InputFileLocation
- ListedAccess
- ListedExecution
- ListedServer
- ListedUser
- ListedWorkflow
- LoggingConfiguration
- PosixProfile
- ProtocolDetails
- S3FileLocation
- S3InputFileLocation
- S3Tag
- ServiceMetadata
- SshPublicKey
- Tag
- TagStepDetails
- UserDetails
- WorkflowDetail
- WorkflowDetails
- WorkflowStep
Derived from API version 2018-11-05
of the AWS service descriptions, licensed under Apache 2.0.
Amazon Web Services Transfer Family is a fully managed service that enables the transfer of files over the File Transfer Protocol (FTP), File Transfer Protocol over SSL (FTPS), or Secure Shell (SSH) File Transfer Protocol (SFTP) directly into and out of Amazon Simple Storage Service (Amazon S3). Amazon Web Services helps you seamlessly migrate your file transfer workflows to Amazon Web Services Transfer Family by integrating with existing authentication systems, and providing DNS routing with Amazon Route 53 so nothing changes for your customers and partners, or their applications. With your data in Amazon S3, you can use it with Amazon Web Services services for processing, analytics, machine learning, and archiving. Getting started with Amazon Web Services Transfer Family is easy since there is no infrastructure to buy and set up.
Synopsis
- defaultService :: Service
- _AccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidRequestException :: AsError a => Getting (First ServiceError) a ServiceError
- _ConflictException :: AsError a => Getting (First ServiceError) a ServiceError
- _ThrottlingException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError
- _InternalServiceError :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceExistsException :: AsError a => Getting (First ServiceError) a ServiceError
- _ServiceUnavailableException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
- data UpdateServer = UpdateServer' (Maybe ProtocolDetails) (Maybe Text) (Maybe (Sensitive Text)) (Maybe (NonEmpty Protocol)) (Maybe EndpointType) (Maybe Text) (Maybe Text) (Maybe IdentityProviderDetails) (Maybe WorkflowDetails) (Maybe EndpointDetails) Text
- newUpdateServer :: Text -> UpdateServer
- data UpdateServerResponse = UpdateServerResponse' Int Text
- newUpdateServerResponse :: Int -> Text -> UpdateServerResponse
- data DeleteServer = DeleteServer' Text
- newDeleteServer :: Text -> DeleteServer
- data DeleteServerResponse = DeleteServerResponse' {
- newDeleteServerResponse :: DeleteServerResponse
- data CreateWorkflow = CreateWorkflow' (Maybe [WorkflowStep]) (Maybe Text) (Maybe (NonEmpty Tag)) [WorkflowStep]
- newCreateWorkflow :: CreateWorkflow
- data CreateWorkflowResponse = CreateWorkflowResponse' Int Text
- newCreateWorkflowResponse :: Int -> Text -> CreateWorkflowResponse
- data DeleteSshPublicKey = DeleteSshPublicKey' Text Text Text
- newDeleteSshPublicKey :: Text -> Text -> Text -> DeleteSshPublicKey
- data DeleteSshPublicKeyResponse = DeleteSshPublicKeyResponse' {
- newDeleteSshPublicKeyResponse :: DeleteSshPublicKeyResponse
- data ListSecurityPolicies = ListSecurityPolicies' (Maybe Text) (Maybe Natural)
- newListSecurityPolicies :: ListSecurityPolicies
- data ListSecurityPoliciesResponse = ListSecurityPoliciesResponse' (Maybe Text) Int [Text]
- newListSecurityPoliciesResponse :: Int -> ListSecurityPoliciesResponse
- data DeleteWorkflow = DeleteWorkflow' Text
- newDeleteWorkflow :: Text -> DeleteWorkflow
- data DeleteWorkflowResponse = DeleteWorkflowResponse' {
- newDeleteWorkflowResponse :: DeleteWorkflowResponse
- data ListTagsForResource = ListTagsForResource' (Maybe Text) (Maybe Natural) Text
- newListTagsForResource :: Text -> ListTagsForResource
- data ListTagsForResourceResponse = ListTagsForResourceResponse' (Maybe Text) (Maybe Text) (Maybe (NonEmpty Tag)) Int
- newListTagsForResourceResponse :: Int -> ListTagsForResourceResponse
- data SendWorkflowStepState = SendWorkflowStepState' Text Text Text CustomStepStatus
- newSendWorkflowStepState :: Text -> Text -> Text -> CustomStepStatus -> SendWorkflowStepState
- data SendWorkflowStepStateResponse = SendWorkflowStepStateResponse' Int
- newSendWorkflowStepStateResponse :: Int -> SendWorkflowStepStateResponse
- data StopServer = StopServer' Text
- newStopServer :: Text -> StopServer
- data StopServerResponse = StopServerResponse' {
- newStopServerResponse :: StopServerResponse
- data ListUsers = ListUsers' (Maybe Text) (Maybe Natural) Text
- newListUsers :: Text -> ListUsers
- data ListUsersResponse = ListUsersResponse' (Maybe Text) Int Text [ListedUser]
- newListUsersResponse :: Int -> Text -> ListUsersResponse
- data DescribeServer = DescribeServer' Text
- newDescribeServer :: Text -> DescribeServer
- data DescribeServerResponse = DescribeServerResponse' Int DescribedServer
- newDescribeServerResponse :: Int -> DescribedServer -> DescribeServerResponse
- data DescribeSecurityPolicy = DescribeSecurityPolicy' Text
- newDescribeSecurityPolicy :: Text -> DescribeSecurityPolicy
- data DescribeSecurityPolicyResponse = DescribeSecurityPolicyResponse' Int DescribedSecurityPolicy
- newDescribeSecurityPolicyResponse :: Int -> DescribedSecurityPolicy -> DescribeSecurityPolicyResponse
- data ImportSshPublicKey = ImportSshPublicKey' Text Text Text
- newImportSshPublicKey :: Text -> Text -> Text -> ImportSshPublicKey
- data ImportSshPublicKeyResponse = ImportSshPublicKeyResponse' Int Text Text Text
- newImportSshPublicKeyResponse :: Int -> Text -> Text -> Text -> ImportSshPublicKeyResponse
- data ListExecutions = ListExecutions' (Maybe Text) (Maybe Natural) Text
- newListExecutions :: Text -> ListExecutions
- data ListExecutionsResponse = ListExecutionsResponse' (Maybe Text) Int Text [ListedExecution]
- newListExecutionsResponse :: Int -> Text -> ListExecutionsResponse
- data CreateServer = CreateServer' (Maybe Text) (Maybe (Sensitive Text)) (Maybe IdentityProviderType) (Maybe (NonEmpty Protocol)) (Maybe Domain) (Maybe EndpointType) (Maybe Text) (Maybe Text) (Maybe IdentityProviderDetails) (Maybe WorkflowDetails) (Maybe (NonEmpty Tag)) (Maybe EndpointDetails)
- newCreateServer :: CreateServer
- data CreateServerResponse = CreateServerResponse' Int Text
- newCreateServerResponse :: Int -> Text -> CreateServerResponse
- data TestIdentityProvider = TestIdentityProvider' (Maybe Protocol) (Maybe (Sensitive Text)) (Maybe Text) Text Text
- newTestIdentityProvider :: Text -> Text -> TestIdentityProvider
- data TestIdentityProviderResponse = TestIdentityProviderResponse' (Maybe Text) (Maybe Text) Int Int Text
- newTestIdentityProviderResponse :: Int -> Int -> Text -> TestIdentityProviderResponse
- data ListServers = ListServers' (Maybe Text) (Maybe Natural)
- newListServers :: ListServers
- data ListServersResponse = ListServersResponse' (Maybe Text) Int [ListedServer]
- newListServersResponse :: Int -> ListServersResponse
- data DescribeUser = DescribeUser' Text Text
- newDescribeUser :: Text -> Text -> DescribeUser
- data DescribeUserResponse = DescribeUserResponse' Int Text DescribedUser
- newDescribeUserResponse :: Int -> Text -> DescribedUser -> DescribeUserResponse
- data DescribeExecution = DescribeExecution' Text Text
- newDescribeExecution :: Text -> Text -> DescribeExecution
- data DescribeExecutionResponse = DescribeExecutionResponse' Int Text DescribedExecution
- newDescribeExecutionResponse :: Int -> Text -> DescribedExecution -> DescribeExecutionResponse
- data ListWorkflows = ListWorkflows' (Maybe Text) (Maybe Natural)
- newListWorkflows :: ListWorkflows
- data ListWorkflowsResponse = ListWorkflowsResponse' (Maybe Text) Int [ListedWorkflow]
- newListWorkflowsResponse :: Int -> ListWorkflowsResponse
- data CreateUser = CreateUser' (Maybe HomeDirectoryType) (Maybe Text) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe (NonEmpty Tag)) Text Text Text
- newCreateUser :: Text -> Text -> Text -> CreateUser
- data CreateUserResponse = CreateUserResponse' Int Text Text
- newCreateUserResponse :: Int -> Text -> Text -> CreateUserResponse
- data StartServer = StartServer' Text
- newStartServer :: Text -> StartServer
- data StartServerResponse = StartServerResponse' {
- newStartServerResponse :: StartServerResponse
- data UpdateAccess = UpdateAccess' (Maybe HomeDirectoryType) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe Text) Text Text
- newUpdateAccess :: Text -> Text -> UpdateAccess
- data UpdateAccessResponse = UpdateAccessResponse' Int Text Text
- newUpdateAccessResponse :: Int -> Text -> Text -> UpdateAccessResponse
- data DeleteAccess = DeleteAccess' Text Text
- newDeleteAccess :: Text -> Text -> DeleteAccess
- data DeleteAccessResponse = DeleteAccessResponse' {
- newDeleteAccessResponse :: DeleteAccessResponse
- data CreateAccess = CreateAccess' (Maybe HomeDirectoryType) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) Text Text Text
- newCreateAccess :: Text -> Text -> Text -> CreateAccess
- data CreateAccessResponse = CreateAccessResponse' Int Text Text
- newCreateAccessResponse :: Int -> Text -> Text -> CreateAccessResponse
- data ListAccesses = ListAccesses' (Maybe Text) (Maybe Natural) Text
- newListAccesses :: Text -> ListAccesses
- data ListAccessesResponse = ListAccessesResponse' (Maybe Text) Int Text [ListedAccess]
- newListAccessesResponse :: Int -> Text -> ListAccessesResponse
- data UpdateUser = UpdateUser' (Maybe HomeDirectoryType) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe Text) Text Text
- newUpdateUser :: Text -> Text -> UpdateUser
- data UpdateUserResponse = UpdateUserResponse' Int Text Text
- newUpdateUserResponse :: Int -> Text -> Text -> UpdateUserResponse
- data DeleteUser = DeleteUser' Text Text
- newDeleteUser :: Text -> Text -> DeleteUser
- data DeleteUserResponse = DeleteUserResponse' {
- newDeleteUserResponse :: DeleteUserResponse
- data TagResource = TagResource' Text (NonEmpty Tag)
- newTagResource :: Text -> NonEmpty Tag -> TagResource
- data TagResourceResponse = TagResourceResponse' {
- newTagResourceResponse :: TagResourceResponse
- data UntagResource = UntagResource' Text (NonEmpty Text)
- newUntagResource :: Text -> NonEmpty Text -> UntagResource
- data UntagResourceResponse = UntagResourceResponse' {
- newUntagResourceResponse :: UntagResourceResponse
- data DescribeWorkflow = DescribeWorkflow' Text
- newDescribeWorkflow :: Text -> DescribeWorkflow
- data DescribeWorkflowResponse = DescribeWorkflowResponse' Int DescribedWorkflow
- newDescribeWorkflowResponse :: Int -> DescribedWorkflow -> DescribeWorkflowResponse
- data DescribeAccess = DescribeAccess' Text Text
- newDescribeAccess :: Text -> Text -> DescribeAccess
- data DescribeAccessResponse = DescribeAccessResponse' Int Text DescribedAccess
- newDescribeAccessResponse :: Int -> Text -> DescribedAccess -> DescribeAccessResponse
- newtype CustomStepStatus where
- CustomStepStatus' { }
- pattern CustomStepStatus_FAILURE :: CustomStepStatus
- pattern CustomStepStatus_SUCCESS :: CustomStepStatus
- newtype Domain where
- Domain' {
- fromDomain :: Text
- pattern Domain_EFS :: Domain
- pattern Domain_S3 :: Domain
- Domain' {
- newtype EndpointType where
- EndpointType' { }
- pattern EndpointType_PUBLIC :: EndpointType
- pattern EndpointType_VPC :: EndpointType
- pattern EndpointType_VPC_ENDPOINT :: EndpointType
- newtype ExecutionErrorType where
- newtype ExecutionStatus where
- ExecutionStatus' { }
- pattern ExecutionStatus_COMPLETED :: ExecutionStatus
- pattern ExecutionStatus_EXCEPTION :: ExecutionStatus
- pattern ExecutionStatus_HANDLING_EXCEPTION :: ExecutionStatus
- pattern ExecutionStatus_IN_PROGRESS :: ExecutionStatus
- newtype HomeDirectoryType where
- HomeDirectoryType' { }
- pattern HomeDirectoryType_LOGICAL :: HomeDirectoryType
- pattern HomeDirectoryType_PATH :: HomeDirectoryType
- newtype IdentityProviderType where
- newtype OverwriteExisting where
- OverwriteExisting' { }
- pattern OverwriteExisting_FALSE :: OverwriteExisting
- pattern OverwriteExisting_TRUE :: OverwriteExisting
- newtype Protocol where
- Protocol' {
- fromProtocol :: Text
- pattern Protocol_FTP :: Protocol
- pattern Protocol_FTPS :: Protocol
- pattern Protocol_SFTP :: Protocol
- Protocol' {
- newtype State where
- State' { }
- pattern State_OFFLINE :: State
- pattern State_ONLINE :: State
- pattern State_STARTING :: State
- pattern State_START_FAILED :: State
- pattern State_STOPPING :: State
- pattern State_STOP_FAILED :: State
- newtype WorkflowStepType where
- WorkflowStepType' { }
- pattern WorkflowStepType_COPY :: WorkflowStepType
- pattern WorkflowStepType_CUSTOM :: WorkflowStepType
- pattern WorkflowStepType_DELETE :: WorkflowStepType
- pattern WorkflowStepType_TAG :: WorkflowStepType
- data CopyStepDetails = CopyStepDetails' (Maybe InputFileLocation) (Maybe OverwriteExisting) (Maybe Text)
- newCopyStepDetails :: CopyStepDetails
- data CustomStepDetails = CustomStepDetails' (Maybe Text) (Maybe Natural) (Maybe Text)
- newCustomStepDetails :: CustomStepDetails
- data DeleteStepDetails = DeleteStepDetails' (Maybe Text)
- newDeleteStepDetails :: DeleteStepDetails
- data DescribedAccess = DescribedAccess' (Maybe HomeDirectoryType) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newDescribedAccess :: DescribedAccess
- data DescribedExecution = DescribedExecution' (Maybe ExecutionStatus) (Maybe Text) (Maybe ExecutionResults) (Maybe FileLocation) (Maybe PosixProfile) (Maybe ServiceMetadata) (Maybe LoggingConfiguration) (Maybe Text)
- newDescribedExecution :: DescribedExecution
- data DescribedSecurityPolicy = DescribedSecurityPolicy' (Maybe Bool) (Maybe [Text]) (Maybe [Text]) (Maybe [Text]) (Maybe [Text]) Text
- newDescribedSecurityPolicy :: Text -> DescribedSecurityPolicy
- data DescribedServer = DescribedServer' (Maybe ProtocolDetails) (Maybe Text) (Maybe State) (Maybe IdentityProviderType) (Maybe (NonEmpty Protocol)) (Maybe Text) (Maybe Domain) (Maybe EndpointType) (Maybe Text) (Maybe Text) (Maybe Int) (Maybe Text) (Maybe IdentityProviderDetails) (Maybe WorkflowDetails) (Maybe (NonEmpty Tag)) (Maybe EndpointDetails) Text
- newDescribedServer :: Text -> DescribedServer
- data DescribedUser = DescribedUser' (Maybe [SshPublicKey]) (Maybe HomeDirectoryType) (Maybe Text) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe (NonEmpty Tag)) Text
- newDescribedUser :: Text -> DescribedUser
- data DescribedWorkflow = DescribedWorkflow' (Maybe [WorkflowStep]) (Maybe [WorkflowStep]) (Maybe Text) (Maybe Text) (Maybe (NonEmpty Tag)) Text
- newDescribedWorkflow :: Text -> DescribedWorkflow
- data EfsFileLocation = EfsFileLocation' (Maybe Text) (Maybe Text)
- newEfsFileLocation :: EfsFileLocation
- data EndpointDetails = EndpointDetails' (Maybe [Text]) (Maybe [Text]) (Maybe Text) (Maybe [Text]) (Maybe Text)
- newEndpointDetails :: EndpointDetails
- data ExecutionError = ExecutionError' ExecutionErrorType Text
- newExecutionError :: ExecutionErrorType -> Text -> ExecutionError
- data ExecutionResults = ExecutionResults' (Maybe (NonEmpty ExecutionStepResult)) (Maybe (NonEmpty ExecutionStepResult))
- newExecutionResults :: ExecutionResults
- data ExecutionStepResult = ExecutionStepResult' (Maybe WorkflowStepType) (Maybe ExecutionError) (Maybe Text)
- newExecutionStepResult :: ExecutionStepResult
- data FileLocation = FileLocation' (Maybe EfsFileLocation) (Maybe S3FileLocation)
- newFileLocation :: FileLocation
- data HomeDirectoryMapEntry = HomeDirectoryMapEntry' Text Text
- newHomeDirectoryMapEntry :: Text -> Text -> HomeDirectoryMapEntry
- data IdentityProviderDetails = IdentityProviderDetails' (Maybe Text) (Maybe Text) (Maybe Text)
- newIdentityProviderDetails :: IdentityProviderDetails
- data InputFileLocation = InputFileLocation' (Maybe EfsFileLocation) (Maybe S3InputFileLocation)
- newInputFileLocation :: InputFileLocation
- data ListedAccess = ListedAccess' (Maybe HomeDirectoryType) (Maybe Text) (Maybe Text) (Maybe Text)
- newListedAccess :: ListedAccess
- data ListedExecution = ListedExecution' (Maybe ExecutionStatus) (Maybe Text) (Maybe FileLocation) (Maybe ServiceMetadata)
- newListedExecution :: ListedExecution
- data ListedServer = ListedServer' (Maybe Text) (Maybe State) (Maybe IdentityProviderType) (Maybe Text) (Maybe Domain) (Maybe EndpointType) (Maybe Int) Text
- newListedServer :: Text -> ListedServer
- data ListedUser = ListedUser' (Maybe HomeDirectoryType) (Maybe Text) (Maybe Text) (Maybe Int) (Maybe Text) Text
- newListedUser :: Text -> ListedUser
- data ListedWorkflow = ListedWorkflow' (Maybe Text) (Maybe Text) (Maybe Text)
- newListedWorkflow :: ListedWorkflow
- data LoggingConfiguration = LoggingConfiguration' (Maybe Text) (Maybe Text)
- newLoggingConfiguration :: LoggingConfiguration
- data PosixProfile = PosixProfile' (Maybe [Natural]) Natural Natural
- newPosixProfile :: Natural -> Natural -> PosixProfile
- data ProtocolDetails = ProtocolDetails' (Maybe Text)
- newProtocolDetails :: ProtocolDetails
- data S3FileLocation = S3FileLocation' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newS3FileLocation :: S3FileLocation
- data S3InputFileLocation = S3InputFileLocation' (Maybe Text) (Maybe Text)
- newS3InputFileLocation :: S3InputFileLocation
- data S3Tag = S3Tag' Text Text
- newS3Tag :: Text -> Text -> S3Tag
- data ServiceMetadata = ServiceMetadata' UserDetails
- newServiceMetadata :: UserDetails -> ServiceMetadata
- data SshPublicKey = SshPublicKey' POSIX Text Text
- newSshPublicKey :: UTCTime -> Text -> Text -> SshPublicKey
- data Tag = Tag' Text Text
- newTag :: Text -> Text -> Tag
- data TagStepDetails = TagStepDetails' (Maybe Text) (Maybe (NonEmpty S3Tag))
- newTagStepDetails :: TagStepDetails
- data UserDetails = UserDetails' (Maybe Text) Text Text
- newUserDetails :: Text -> Text -> UserDetails
- data WorkflowDetail = WorkflowDetail' Text Text
- newWorkflowDetail :: Text -> Text -> WorkflowDetail
- data WorkflowDetails = WorkflowDetails' [WorkflowDetail]
- newWorkflowDetails :: WorkflowDetails
- data WorkflowStep = WorkflowStep' (Maybe TagStepDetails) (Maybe DeleteStepDetails) (Maybe CopyStepDetails) (Maybe WorkflowStepType) (Maybe CustomStepDetails)
- newWorkflowStep :: WorkflowStep
Service Configuration
defaultService :: Service Source #
API version 2018-11-05
of the Amazon Transfer Family SDK configuration.
Errors
Error matchers are designed for use with the functions provided by
Control.Exception.Lens.
This allows catching (and rethrowing) service specific errors returned
by Transfer
.
AccessDeniedException
_AccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You do not have sufficient access to perform this action.
InvalidRequestException
_InvalidRequestException :: AsError a => Getting (First ServiceError) a ServiceError Source #
This exception is thrown when the client submits a malformed request.
ConflictException
_ConflictException :: AsError a => Getting (First ServiceError) a ServiceError Source #
This exception is thrown when the UpdateServer
is called for a file
transfer protocol-enabled server that has VPC as the endpoint type and
the server's VpcEndpointID
is not in the available state.
ThrottlingException
_ThrottlingException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request was denied due to request throttling.
HTTP Status Code: 400
InvalidNextTokenException
_InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The NextToken
parameter that was passed is invalid.
InternalServiceError
_InternalServiceError :: AsError a => Getting (First ServiceError) a ServiceError Source #
This exception is thrown when an error occurs in the Amazon Web ServicesTransfer Family service.
ResourceExistsException
_ResourceExistsException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The requested resource does not exist.
ServiceUnavailableException
_ServiceUnavailableException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The request has failed because the Amazon Web ServicesTransfer Family service is not available.
ResourceNotFoundException
_ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #
This exception is thrown when a resource is not found by the Amazon Web ServicesTransfer Family service.
Waiters
Waiters poll by repeatedly sending a request until some remote success condition
configured by the Wait
specification is fulfilled. The Wait
specification
determines how many attempts should be made, in addition to delay and retry strategies.
Operations
Some AWS operations return results that are incomplete and require subsequent
requests in order to obtain the entire result set. The process of sending
subsequent requests to continue where a previous request left off is called
pagination. For example, the ListObjects
operation of Amazon S3 returns up to
1000 objects at a time, and you must send subsequent requests with the
appropriate Marker in order to retrieve the next page of results.
Operations that have an AWSPager
instance can transparently perform subsequent
requests, correctly setting Markers and other request facets to iterate through
the entire result set of a truncated API operation. Operations which support
this have an additional note in the documentation.
Many operations have the ability to filter results on the server side. See the individual operation parameters for details.
UpdateServer
data UpdateServer Source #
See: newUpdateServer
smart constructor.
UpdateServer' (Maybe ProtocolDetails) (Maybe Text) (Maybe (Sensitive Text)) (Maybe (NonEmpty Protocol)) (Maybe EndpointType) (Maybe Text) (Maybe Text) (Maybe IdentityProviderDetails) (Maybe WorkflowDetails) (Maybe EndpointDetails) Text |
Instances
Create a value of UpdateServer
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:protocolDetails:UpdateServer'
, updateServer_protocolDetails
- The protocol settings that are configured for your server.
Use the PassiveIp
parameter to indicate passive mode (for FTP and FTPS
protocols). Enter a single dotted-quad IPv4 address, such as the
external IP address of a firewall, router, or load balancer.
$sel:loggingRole:UpdateServer'
, updateServer_loggingRole
- Specifies the Amazon Resource Name (ARN) of the Amazon Web Services
Identity and Access Management (IAM) role that allows a server to turn
on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When
set, user activity can be viewed in your CloudWatch logs.
$sel:hostKey:UpdateServer'
, updateServer_hostKey
- The RSA private key as generated by
ssh-keygen -N "" -m PEM -f my-new-server-key
.
If you aren't planning to migrate existing users from an existing server to a new server, don't update the host key. Accidentally changing a server's host key can be disruptive.
For more information, see Change the host key for your SFTP-enabled server in the Amazon Web ServicesTransfer Family User Guide.
$sel:protocols:UpdateServer'
, updateServer_protocols
- Specifies the file transfer protocol or protocols over which your file
transfer protocol client can connect to your server's endpoint. The
available protocols are:
- Secure Shell (SSH) File Transfer Protocol (SFTP): File transfer over SSH
- File Transfer Protocol Secure (FTPS): File transfer with TLS encryption
- File Transfer Protocol (FTP): Unencrypted file transfer
If you select FTPS
, you must choose a certificate stored in Amazon Web
ServicesCertificate Manager (ACM) which will be used to identify your
server when clients connect to it over FTPS.
If Protocol
includes either FTP
or FTPS
, then the EndpointType
must be VPC
and the IdentityProviderType
must be
AWS_DIRECTORY_SERVICE
or API_GATEWAY
.
If Protocol
includes FTP
, then AddressAllocationIds
cannot be
associated.
If Protocol
is set only to SFTP
, the EndpointType
can be set to
PUBLIC
and the IdentityProviderType
can be set to SERVICE_MANAGED
.
$sel:endpointType:UpdateServer'
, updateServer_endpointType
- The type of endpoint that you want your server to use. You can choose to
make your server's endpoint publicly accessible (PUBLIC) or host it
inside your VPC. With an endpoint that is hosted in a VPC, you can
restrict access to your server and resources only within your VPC or
choose to make it internet facing by attaching Elastic IP addresses
directly to it.
After May 19, 2021, you won't be able to create a server using
EndpointType=VPC_ENDPOINT
in your Amazon Web Servicesaccount if your
account hasn't already done so before May 19, 2021. If you have already
created servers with EndpointType=VPC_ENDPOINT
in your Amazon Web
Servicesaccount on or before May 19, 2021, you will not be affected.
After this date, use EndpointType
=VPC
.
For more information, see https://docs.aws.amazon.com/transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint.
It is recommended that you use VPC
as the EndpointType
. With this
endpoint type, you have the option to directly associate up to three
Elastic IPv4 addresses (BYO IP included) with your server's endpoint
and use VPC security groups to restrict traffic by the client's public
IP address. This is not possible with EndpointType
set to
VPC_ENDPOINT
.
$sel:securityPolicyName:UpdateServer'
, updateServer_securityPolicyName
- Specifies the name of the security policy that is attached to the
server.
$sel:certificate:UpdateServer'
, updateServer_certificate
- The Amazon Resource Name (ARN) of the Amazon Web ServicesCertificate
Manager (ACM) certificate. Required when Protocols
is set to FTPS
.
To request a new public certificate, see Request a public certificate in the Amazon Web ServicesCertificate Manager User Guide.
To import an existing certificate into ACM, see Importing certificates into ACM in the Amazon Web ServicesCertificate Manager User Guide.
To request a private certificate to use FTPS through private IP addresses, see Request a private certificate in the Amazon Web ServicesCertificate Manager User Guide.
Certificates with the following cryptographic algorithms and key sizes are supported:
- 2048-bit RSA (RSA_2048)
- 4096-bit RSA (RSA_4096)
- Elliptic Prime Curve 256 bit (EC_prime256v1)
- Elliptic Prime Curve 384 bit (EC_secp384r1)
- Elliptic Prime Curve 521 bit (EC_secp521r1)
The certificate must be a valid SSL/TLS X.509 version 3 certificate with FQDN or IP address specified and information about the issuer.
$sel:identityProviderDetails:UpdateServer'
, updateServer_identityProviderDetails
- An array containing all of the information required to call a
customer's authentication API method.
$sel:workflowDetails:UpdateServer'
, updateServer_workflowDetails
- Specifies the workflow ID for the workflow to assign and the execution
role used for executing the workflow.
$sel:endpointDetails:UpdateServer'
, updateServer_endpointDetails
- The virtual private cloud (VPC) endpoint settings that are configured
for your server. When you host your endpoint within your VPC, you can
make it accessible only to resources within your VPC, or you can attach
Elastic IP addresses and make it accessible to clients over the
internet. Your VPC's default security groups are automatically assigned
to your endpoint.
$sel:serverId:UpdateServer'
, updateServer_serverId
- A system-assigned unique identifier for a server instance that the user
account is assigned to.
data UpdateServerResponse Source #
See: newUpdateServerResponse
smart constructor.
Instances
newUpdateServerResponse Source #
:: Int | |
-> Text | |
-> UpdateServerResponse |
Create a value of UpdateServerResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateServerResponse'
, updateServerResponse_httpStatus
- The response's http status code.
$sel:serverId:UpdateServer'
, updateServerResponse_serverId
- A system-assigned unique identifier for a server that the user account
is assigned to.
DeleteServer
data DeleteServer Source #
See: newDeleteServer
smart constructor.
Instances
Create a value of DeleteServer
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:DeleteServer'
, deleteServer_serverId
- A unique system-assigned identifier for a server instance.
data DeleteServerResponse Source #
See: newDeleteServerResponse
smart constructor.
Instances
Eq DeleteServerResponse Source # | |
Defined in Amazonka.Transfer.DeleteServer (==) :: DeleteServerResponse -> DeleteServerResponse -> Bool # (/=) :: DeleteServerResponse -> DeleteServerResponse -> Bool # | |
Read DeleteServerResponse Source # | |
Show DeleteServerResponse Source # | |
Defined in Amazonka.Transfer.DeleteServer showsPrec :: Int -> DeleteServerResponse -> ShowS # show :: DeleteServerResponse -> String # showList :: [DeleteServerResponse] -> ShowS # | |
Generic DeleteServerResponse Source # | |
Defined in Amazonka.Transfer.DeleteServer type Rep DeleteServerResponse :: Type -> Type # from :: DeleteServerResponse -> Rep DeleteServerResponse x # to :: Rep DeleteServerResponse x -> DeleteServerResponse # | |
NFData DeleteServerResponse Source # | |
Defined in Amazonka.Transfer.DeleteServer rnf :: DeleteServerResponse -> () # | |
type Rep DeleteServerResponse Source # | |
newDeleteServerResponse :: DeleteServerResponse Source #
Create a value of DeleteServerResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
CreateWorkflow
data CreateWorkflow Source #
See: newCreateWorkflow
smart constructor.
CreateWorkflow' (Maybe [WorkflowStep]) (Maybe Text) (Maybe (NonEmpty Tag)) [WorkflowStep] |
Instances
newCreateWorkflow :: CreateWorkflow Source #
Create a value of CreateWorkflow
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:onExceptionSteps:CreateWorkflow'
, createWorkflow_onExceptionSteps
- Specifies the steps (actions) to take if errors are encountered during
execution of the workflow.
For custom steps, the lambda function needs to send FAILURE
to the
call back API to kick off the exception steps. Additionally, if the
lambda does not send SUCCESS
before it times out, the exception steps
are executed.
$sel:description:CreateWorkflow'
, createWorkflow_description
- A textual description for the workflow.
$sel:tags:CreateWorkflow'
, createWorkflow_tags
- Key-value pairs that can be used to group and search for workflows. Tags
are metadata attached to workflows for any purpose.
$sel:steps:CreateWorkflow'
, createWorkflow_steps
- Specifies the details for the steps that are in the specified workflow.
The TYPE
specifies which of the following actions is being taken for
this step.
- Copy: copy the file to another location
- Custom: custom step with a lambda target
- Delete: delete the file
- Tag: add a tag to the file
Currently, copying and tagging are supported only on S3.
For file location, you specify either the S3 bucket and key, or the EFS filesystem ID and path.
data CreateWorkflowResponse Source #
See: newCreateWorkflowResponse
smart constructor.
Instances
newCreateWorkflowResponse Source #
:: Int | |
-> Text | |
-> CreateWorkflowResponse |
Create a value of CreateWorkflowResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateWorkflowResponse'
, createWorkflowResponse_httpStatus
- The response's http status code.
$sel:workflowId:CreateWorkflowResponse'
, createWorkflowResponse_workflowId
- A unique identifier for the workflow.
DeleteSshPublicKey
data DeleteSshPublicKey Source #
See: newDeleteSshPublicKey
smart constructor.
Instances
newDeleteSshPublicKey Source #
:: Text | |
-> Text | |
-> Text | |
-> DeleteSshPublicKey |
Create a value of DeleteSshPublicKey
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:DeleteSshPublicKey'
, deleteSshPublicKey_serverId
- A system-assigned unique identifier for a file transfer protocol-enabled
server instance that has the user assigned to it.
$sel:sshPublicKeyId:DeleteSshPublicKey'
, deleteSshPublicKey_sshPublicKeyId
- A unique identifier used to reference your user's specific SSH key.
$sel:userName:DeleteSshPublicKey'
, deleteSshPublicKey_userName
- A unique string that identifies a user whose public key is being
deleted.
data DeleteSshPublicKeyResponse Source #
See: newDeleteSshPublicKeyResponse
smart constructor.
Instances
newDeleteSshPublicKeyResponse :: DeleteSshPublicKeyResponse Source #
Create a value of DeleteSshPublicKeyResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
ListSecurityPolicies
data ListSecurityPolicies Source #
See: newListSecurityPolicies
smart constructor.
Instances
newListSecurityPolicies :: ListSecurityPolicies Source #
Create a value of ListSecurityPolicies
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListSecurityPolicies'
, listSecurityPolicies_nextToken
- When additional results are obtained from the ListSecurityPolicies
command, a NextToken
parameter is returned in the output. You can then
pass the NextToken
parameter in a subsequent command to continue
listing additional security policies.
$sel:maxResults:ListSecurityPolicies'
, listSecurityPolicies_maxResults
- Specifies the number of security policies to return as a response to the
ListSecurityPolicies
query.
data ListSecurityPoliciesResponse Source #
See: newListSecurityPoliciesResponse
smart constructor.
Instances
newListSecurityPoliciesResponse Source #
Create a value of ListSecurityPoliciesResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListSecurityPolicies'
, listSecurityPoliciesResponse_nextToken
- When you can get additional results from the ListSecurityPolicies
operation, a NextToken
parameter is returned in the output. In a
following command, you can pass in the NextToken
parameter to continue
listing security policies.
$sel:httpStatus:ListSecurityPoliciesResponse'
, listSecurityPoliciesResponse_httpStatus
- The response's http status code.
$sel:securityPolicyNames:ListSecurityPoliciesResponse'
, listSecurityPoliciesResponse_securityPolicyNames
- An array of security policies that were listed.
DeleteWorkflow
data DeleteWorkflow Source #
See: newDeleteWorkflow
smart constructor.
Instances
Create a value of DeleteWorkflow
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:workflowId:DeleteWorkflow'
, deleteWorkflow_workflowId
- A unique identifier for the workflow.
data DeleteWorkflowResponse Source #
See: newDeleteWorkflowResponse
smart constructor.
Instances
Eq DeleteWorkflowResponse Source # | |
Defined in Amazonka.Transfer.DeleteWorkflow | |
Read DeleteWorkflowResponse Source # | |
Show DeleteWorkflowResponse Source # | |
Defined in Amazonka.Transfer.DeleteWorkflow showsPrec :: Int -> DeleteWorkflowResponse -> ShowS # show :: DeleteWorkflowResponse -> String # showList :: [DeleteWorkflowResponse] -> ShowS # | |
Generic DeleteWorkflowResponse Source # | |
Defined in Amazonka.Transfer.DeleteWorkflow type Rep DeleteWorkflowResponse :: Type -> Type # | |
NFData DeleteWorkflowResponse Source # | |
Defined in Amazonka.Transfer.DeleteWorkflow rnf :: DeleteWorkflowResponse -> () # | |
type Rep DeleteWorkflowResponse Source # | |
newDeleteWorkflowResponse :: DeleteWorkflowResponse Source #
Create a value of DeleteWorkflowResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
ListTagsForResource
data ListTagsForResource Source #
See: newListTagsForResource
smart constructor.
Instances
newListTagsForResource Source #
Create a value of ListTagsForResource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListTagsForResource'
, listTagsForResource_nextToken
- When you request additional results from the ListTagsForResource
operation, a NextToken
parameter is returned in the input. You can
then pass in a subsequent command to the NextToken
parameter to
continue listing additional tags.
$sel:maxResults:ListTagsForResource'
, listTagsForResource_maxResults
- Specifies the number of tags to return as a response to the
ListTagsForResource
request.
$sel:arn:ListTagsForResource'
, listTagsForResource_arn
- Requests the tags associated with a particular Amazon Resource Name
(ARN). An ARN is an identifier for a specific Amazon Web Services
resource, such as a server, user, or role.
data ListTagsForResourceResponse Source #
See: newListTagsForResourceResponse
smart constructor.
Instances
newListTagsForResourceResponse Source #
Create a value of ListTagsForResourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:ListTagsForResource'
, listTagsForResourceResponse_arn
- The ARN you specified to list the tags of.
$sel:nextToken:ListTagsForResource'
, listTagsForResourceResponse_nextToken
- When you can get additional results from the ListTagsForResource
call,
a NextToken
parameter is returned in the output. You can then pass in
a subsequent command to the NextToken
parameter to continue listing
additional tags.
$sel:tags:ListTagsForResourceResponse'
, listTagsForResourceResponse_tags
- Key-value pairs that are assigned to a resource, usually for the purpose
of grouping and searching for items. Tags are metadata that you define.
$sel:httpStatus:ListTagsForResourceResponse'
, listTagsForResourceResponse_httpStatus
- The response's http status code.
SendWorkflowStepState
data SendWorkflowStepState Source #
See: newSendWorkflowStepState
smart constructor.
Instances
newSendWorkflowStepState Source #
:: Text | |
-> Text | |
-> Text | |
-> CustomStepStatus | |
-> SendWorkflowStepState |
Create a value of SendWorkflowStepState
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:workflowId:SendWorkflowStepState'
, sendWorkflowStepState_workflowId
- A unique identifier for the workflow.
$sel:executionId:SendWorkflowStepState'
, sendWorkflowStepState_executionId
- A unique identifier for the execution of a workflow.
$sel:token:SendWorkflowStepState'
, sendWorkflowStepState_token
- Used to distinguish between multiple callbacks for multiple Lambda steps
within the same execution.
$sel:status:SendWorkflowStepState'
, sendWorkflowStepState_status
- Indicates whether the specified step succeeded or failed.
data SendWorkflowStepStateResponse Source #
See: newSendWorkflowStepStateResponse
smart constructor.
Instances
Eq SendWorkflowStepStateResponse Source # | |
Read SendWorkflowStepStateResponse Source # | |
Show SendWorkflowStepStateResponse Source # | |
Defined in Amazonka.Transfer.SendWorkflowStepState showsPrec :: Int -> SendWorkflowStepStateResponse -> ShowS # show :: SendWorkflowStepStateResponse -> String # showList :: [SendWorkflowStepStateResponse] -> ShowS # | |
Generic SendWorkflowStepStateResponse Source # | |
NFData SendWorkflowStepStateResponse Source # | |
Defined in Amazonka.Transfer.SendWorkflowStepState rnf :: SendWorkflowStepStateResponse -> () # | |
type Rep SendWorkflowStepStateResponse Source # | |
Defined in Amazonka.Transfer.SendWorkflowStepState type Rep SendWorkflowStepStateResponse = D1 ('MetaData "SendWorkflowStepStateResponse" "Amazonka.Transfer.SendWorkflowStepState" "libZSservicesZSamazonka-transferZSamazonka-transfer" 'False) (C1 ('MetaCons "SendWorkflowStepStateResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newSendWorkflowStepStateResponse Source #
Create a value of SendWorkflowStepStateResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:SendWorkflowStepStateResponse'
, sendWorkflowStepStateResponse_httpStatus
- The response's http status code.
StopServer
data StopServer Source #
See: newStopServer
smart constructor.
Instances
Create a value of StopServer
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:StopServer'
, stopServer_serverId
- A system-assigned unique identifier for a server that you stopped.
data StopServerResponse Source #
See: newStopServerResponse
smart constructor.
Instances
Eq StopServerResponse Source # | |
Defined in Amazonka.Transfer.StopServer (==) :: StopServerResponse -> StopServerResponse -> Bool # (/=) :: StopServerResponse -> StopServerResponse -> Bool # | |
Read StopServerResponse Source # | |
Defined in Amazonka.Transfer.StopServer | |
Show StopServerResponse Source # | |
Defined in Amazonka.Transfer.StopServer showsPrec :: Int -> StopServerResponse -> ShowS # show :: StopServerResponse -> String # showList :: [StopServerResponse] -> ShowS # | |
Generic StopServerResponse Source # | |
Defined in Amazonka.Transfer.StopServer type Rep StopServerResponse :: Type -> Type # from :: StopServerResponse -> Rep StopServerResponse x # to :: Rep StopServerResponse x -> StopServerResponse # | |
NFData StopServerResponse Source # | |
Defined in Amazonka.Transfer.StopServer rnf :: StopServerResponse -> () # | |
type Rep StopServerResponse Source # | |
newStopServerResponse :: StopServerResponse Source #
Create a value of StopServerResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
ListUsers
See: newListUsers
smart constructor.
Instances
Create a value of ListUsers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListUsers'
, listUsers_nextToken
- When you can get additional results from the ListUsers
call, a
NextToken
parameter is returned in the output. You can then pass in a
subsequent command to the NextToken
parameter to continue listing
additional users.
$sel:maxResults:ListUsers'
, listUsers_maxResults
- Specifies the number of users to return as a response to the ListUsers
request.
$sel:serverId:ListUsers'
, listUsers_serverId
- A system-assigned unique identifier for a server that has users assigned
to it.
data ListUsersResponse Source #
See: newListUsersResponse
smart constructor.
Instances
Create a value of ListUsersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListUsers'
, listUsersResponse_nextToken
- When you can get additional results from the ListUsers
call, a
NextToken
parameter is returned in the output. You can then pass in a
subsequent command to the NextToken
parameter to continue listing
additional users.
$sel:httpStatus:ListUsersResponse'
, listUsersResponse_httpStatus
- The response's http status code.
$sel:serverId:ListUsers'
, listUsersResponse_serverId
- A system-assigned unique identifier for a server that the users are
assigned to.
$sel:users:ListUsersResponse'
, listUsersResponse_users
- Returns the user accounts and their properties for the ServerId
value
that you specify.
DescribeServer
data DescribeServer Source #
See: newDescribeServer
smart constructor.
Instances
Create a value of DescribeServer
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:DescribeServer'
, describeServer_serverId
- A system-assigned unique identifier for a server.
data DescribeServerResponse Source #
See: newDescribeServerResponse
smart constructor.
Instances
newDescribeServerResponse Source #
Create a value of DescribeServerResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DescribeServerResponse'
, describeServerResponse_httpStatus
- The response's http status code.
$sel:server:DescribeServerResponse'
, describeServerResponse_server
- An array containing the properties of a server with the ServerID
you
specified.
DescribeSecurityPolicy
data DescribeSecurityPolicy Source #
See: newDescribeSecurityPolicy
smart constructor.
Instances
newDescribeSecurityPolicy Source #
Create a value of DescribeSecurityPolicy
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:securityPolicyName:DescribeSecurityPolicy'
, describeSecurityPolicy_securityPolicyName
- Specifies the name of the security policy that is attached to the
server.
data DescribeSecurityPolicyResponse Source #
See: newDescribeSecurityPolicyResponse
smart constructor.
Instances
Eq DescribeSecurityPolicyResponse Source # | |
Read DescribeSecurityPolicyResponse Source # | |
Show DescribeSecurityPolicyResponse Source # | |
Defined in Amazonka.Transfer.DescribeSecurityPolicy | |
Generic DescribeSecurityPolicyResponse Source # | |
NFData DescribeSecurityPolicyResponse Source # | |
Defined in Amazonka.Transfer.DescribeSecurityPolicy rnf :: DescribeSecurityPolicyResponse -> () # | |
type Rep DescribeSecurityPolicyResponse Source # | |
Defined in Amazonka.Transfer.DescribeSecurityPolicy type Rep DescribeSecurityPolicyResponse = D1 ('MetaData "DescribeSecurityPolicyResponse" "Amazonka.Transfer.DescribeSecurityPolicy" "libZSservicesZSamazonka-transferZSamazonka-transfer" 'False) (C1 ('MetaCons "DescribeSecurityPolicyResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int) :*: S1 ('MetaSel ('Just "securityPolicy") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 DescribedSecurityPolicy))) |
newDescribeSecurityPolicyResponse Source #
Create a value of DescribeSecurityPolicyResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DescribeSecurityPolicyResponse'
, describeSecurityPolicyResponse_httpStatus
- The response's http status code.
$sel:securityPolicy:DescribeSecurityPolicyResponse'
, describeSecurityPolicyResponse_securityPolicy
- An array containing the properties of the security policy.
ImportSshPublicKey
data ImportSshPublicKey Source #
See: newImportSshPublicKey
smart constructor.
Instances
newImportSshPublicKey Source #
:: Text | |
-> Text | |
-> Text | |
-> ImportSshPublicKey |
Create a value of ImportSshPublicKey
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:ImportSshPublicKey'
, importSshPublicKey_serverId
- A system-assigned unique identifier for a server.
$sel:sshPublicKeyBody:ImportSshPublicKey'
, importSshPublicKey_sshPublicKeyBody
- The public key portion of an SSH key pair.
$sel:userName:ImportSshPublicKey'
, importSshPublicKey_userName
- The name of the user account that is assigned to one or more servers.
data ImportSshPublicKeyResponse Source #
Identifies the user, the server they belong to, and the identifier of the SSH public key associated with that user. A user can have more than one key on each server that they are associated with.
See: newImportSshPublicKeyResponse
smart constructor.
Instances
newImportSshPublicKeyResponse Source #
:: Int | |
-> Text | |
-> Text | |
-> Text | |
-> ImportSshPublicKeyResponse |
Create a value of ImportSshPublicKeyResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:ImportSshPublicKeyResponse'
, importSshPublicKeyResponse_httpStatus
- The response's http status code.
$sel:serverId:ImportSshPublicKey'
, importSshPublicKeyResponse_serverId
- A system-assigned unique identifier for a server.
$sel:sshPublicKeyId:ImportSshPublicKeyResponse'
, importSshPublicKeyResponse_sshPublicKeyId
- The name given to a public key by the system that was imported.
$sel:userName:ImportSshPublicKey'
, importSshPublicKeyResponse_userName
- A user name assigned to the ServerID
value that you specified.
ListExecutions
data ListExecutions Source #
See: newListExecutions
smart constructor.
Instances
Create a value of ListExecutions
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListExecutions'
, listExecutions_nextToken
- ListExecutions
returns the NextToken
parameter in the output. You
can then pass the NextToken
parameter in a subsequent command to
continue listing additional executions.
This is useful for pagination, for instance. If you have 100 executions
for a workflow, you might only want to list first 10. If so, callthe API
by specifing the max-results
:
aws transfer list-executions --max-results 10
This returns details for the first 10 executions, as well as the pointer
(NextToken
) to the eleventh execution. You can now call the API again,
suppling the NextToken
value you received:
aws transfer list-executions --max-results 10 --next-token $somePointerReturnedFromPreviousListResult
This call returns the next 10 executions, the 11th through the 20th. You can then repeat the call until the details for all 100 executions have been returned.
$sel:maxResults:ListExecutions'
, listExecutions_maxResults
- Specifies the aximum number of executions to return.
$sel:workflowId:ListExecutions'
, listExecutions_workflowId
- A unique identifier for the workflow.
data ListExecutionsResponse Source #
See: newListExecutionsResponse
smart constructor.
Instances
newListExecutionsResponse Source #
:: Int | |
-> Text | |
-> ListExecutionsResponse |
Create a value of ListExecutionsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListExecutions'
, listExecutionsResponse_nextToken
- ListExecutions
returns the NextToken
parameter in the output. You
can then pass the NextToken
parameter in a subsequent command to
continue listing additional executions.
$sel:httpStatus:ListExecutionsResponse'
, listExecutionsResponse_httpStatus
- The response's http status code.
$sel:workflowId:ListExecutions'
, listExecutionsResponse_workflowId
- A unique identifier for the workflow.
$sel:executions:ListExecutionsResponse'
, listExecutionsResponse_executions
- Returns the details for each execution.
- NextToken: returned from a call to several APIs, you can use pass it to a subsequent command to continue listing additional executions.
- StartTime: timestamp indicating when the execution began.
- Executions: details of the execution, including the execution ID, initial file location, and Service metadata.
- Status: one of the following values:
IN_PROGRESS
,COMPLETED
,EXCEPTION
,HANDLING_EXEPTION
.
CreateServer
data CreateServer Source #
See: newCreateServer
smart constructor.
CreateServer' (Maybe Text) (Maybe (Sensitive Text)) (Maybe IdentityProviderType) (Maybe (NonEmpty Protocol)) (Maybe Domain) (Maybe EndpointType) (Maybe Text) (Maybe Text) (Maybe IdentityProviderDetails) (Maybe WorkflowDetails) (Maybe (NonEmpty Tag)) (Maybe EndpointDetails) |
Instances
newCreateServer :: CreateServer Source #
Create a value of CreateServer
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:loggingRole:CreateServer'
, createServer_loggingRole
- Specifies the Amazon Resource Name (ARN) of the Amazon Web Services
Identity and Access Management (IAM) role that allows a server to turn
on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When
set, user activity can be viewed in your CloudWatch logs.
$sel:hostKey:CreateServer'
, createServer_hostKey
- The RSA private key as generated by the
ssh-keygen -N "" -m PEM -f my-new-server-key
command.
If you aren't planning to migrate existing users from an existing SFTP-enabled server to a new server, don't update the host key. Accidentally changing a server's host key can be disruptive.
For more information, see Change the host key for your SFTP-enabled server in the Amazon Web Services Transfer Family User Guide.
$sel:identityProviderType:CreateServer'
, createServer_identityProviderType
- Specifies the mode of authentication for a server. The default value is
SERVICE_MANAGED
, which allows you to store and access user credentials
within the Amazon Web Services Transfer Family service.
Use AWS_DIRECTORY_SERVICE
to provide access to Active Directory groups
in Amazon Web Services Managed Active Directory or Microsoft Active
Directory in your on-premises environment or in Amazon Web Services
using AD Connectors. This option also requires you to provide a
Directory ID using the IdentityProviderDetails
parameter.
Use the API_GATEWAY
value to integrate with an identity provider of
your choosing. The API_GATEWAY
setting requires you to provide an API
Gateway endpoint URL to call for authentication using the
IdentityProviderDetails
parameter.
$sel:protocols:CreateServer'
, createServer_protocols
- Specifies the file transfer protocol or protocols over which your file
transfer protocol client can connect to your server's endpoint. The
available protocols are:
SFTP
(Secure Shell (SSH) File Transfer Protocol): File transfer over SSHFTPS
(File Transfer Protocol Secure): File transfer with TLS encryptionFTP
(File Transfer Protocol): Unencrypted file transfer
If you select FTPS
, you must choose a certificate stored in Amazon Web
Services Certificate Manager (ACM) which is used to identify your server
when clients connect to it over FTPS.
If Protocol
includes either FTP
or FTPS
, then the EndpointType
must be VPC
and the IdentityProviderType
must be
AWS_DIRECTORY_SERVICE
or API_GATEWAY
.
If Protocol
includes FTP
, then AddressAllocationIds
cannot be
associated.
If Protocol
is set only to SFTP
, the EndpointType
can be set to
PUBLIC
and the IdentityProviderType
can be set to SERVICE_MANAGED
.
$sel:domain:CreateServer'
, createServer_domain
- The domain of the storage system that is used for file transfers. There
are two domains available: Amazon Simple Storage Service (Amazon S3) and
Amazon Elastic File System (Amazon EFS). The default value is S3.
After the server is created, the domain cannot be changed.
$sel:endpointType:CreateServer'
, createServer_endpointType
- The type of endpoint that you want your server to use. You can choose to
make your server's endpoint publicly accessible (PUBLIC) or host it
inside your VPC. With an endpoint that is hosted in a VPC, you can
restrict access to your server and resources only within your VPC or
choose to make it internet facing by attaching Elastic IP addresses
directly to it.
After May 19, 2021, you won't be able to create a server using
EndpointType=VPC_ENDPOINT
in your Amazon Web Services account if your
account hasn't already done so before May 19, 2021. If you have already
created servers with EndpointType=VPC_ENDPOINT
in your Amazon Web
Services account on or before May 19, 2021, you will not be affected.
After this date, use EndpointType
=VPC
.
For more information, see https://docs.aws.amazon.com/transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint.
It is recommended that you use VPC
as the EndpointType
. With this
endpoint type, you have the option to directly associate up to three
Elastic IPv4 addresses (BYO IP included) with your server's endpoint
and use VPC security groups to restrict traffic by the client's public
IP address. This is not possible with EndpointType
set to
VPC_ENDPOINT
.
$sel:securityPolicyName:CreateServer'
, createServer_securityPolicyName
- Specifies the name of the security policy that is attached to the
server.
$sel:certificate:CreateServer'
, createServer_certificate
- The Amazon Resource Name (ARN) of the Amazon Web Services Certificate
Manager (ACM) certificate. Required when Protocols
is set to FTPS
.
To request a new public certificate, see Request a public certificate in the Amazon Web Services Certificate Manager User Guide.
To import an existing certificate into ACM, see Importing certificates into ACM in the Amazon Web Services Certificate Manager User Guide.
To request a private certificate to use FTPS through private IP addresses, see Request a private certificate in the Amazon Web Services Certificate Manager User Guide.
Certificates with the following cryptographic algorithms and key sizes are supported:
- 2048-bit RSA (RSA_2048)
- 4096-bit RSA (RSA_4096)
- Elliptic Prime Curve 256 bit (EC_prime256v1)
- Elliptic Prime Curve 384 bit (EC_secp384r1)
- Elliptic Prime Curve 521 bit (EC_secp521r1)
The certificate must be a valid SSL/TLS X.509 version 3 certificate with FQDN or IP address specified and information about the issuer.
$sel:identityProviderDetails:CreateServer'
, createServer_identityProviderDetails
- Required when IdentityProviderType
is set to AWS_DIRECTORY_SERVICE
or API_GATEWAY
. Accepts an array containing all of the information
required to use a directory in AWS_DIRECTORY_SERVICE
or invoke a
customer-supplied authentication API, including the API Gateway URL. Not
required when IdentityProviderType
is set to SERVICE_MANAGED
.
$sel:workflowDetails:CreateServer'
, createServer_workflowDetails
- Specifies the workflow ID for the workflow to assign and the execution
role used for executing the workflow.
$sel:tags:CreateServer'
, createServer_tags
- Key-value pairs that can be used to group and search for servers.
$sel:endpointDetails:CreateServer'
, createServer_endpointDetails
- The virtual private cloud (VPC) endpoint settings that are configured
for your server. When you host your endpoint within your VPC, you can
make it accessible only to resources within your VPC, or you can attach
Elastic IP addresses and make it accessible to clients over the
internet. Your VPC's default security groups are automatically assigned
to your endpoint.
data CreateServerResponse Source #
See: newCreateServerResponse
smart constructor.
Instances
newCreateServerResponse Source #
:: Int | |
-> Text | |
-> CreateServerResponse |
Create a value of CreateServerResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateServerResponse'
, createServerResponse_httpStatus
- The response's http status code.
$sel:serverId:CreateServerResponse'
, createServerResponse_serverId
- The service-assigned ID of the server that is created.
TestIdentityProvider
data TestIdentityProvider Source #
See: newTestIdentityProvider
smart constructor.
Instances
newTestIdentityProvider Source #
:: Text | |
-> Text | |
-> TestIdentityProvider |
Create a value of TestIdentityProvider
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverProtocol:TestIdentityProvider'
, testIdentityProvider_serverProtocol
- The type of file transfer protocol to be tested.
The available protocols are:
- Secure Shell (SSH) File Transfer Protocol (SFTP)
- File Transfer Protocol Secure (FTPS)
- File Transfer Protocol (FTP)
$sel:userPassword:TestIdentityProvider'
, testIdentityProvider_userPassword
- The password of the user account to be tested.
$sel:sourceIp:TestIdentityProvider'
, testIdentityProvider_sourceIp
- The source IP address of the user account to be tested.
$sel:serverId:TestIdentityProvider'
, testIdentityProvider_serverId
- A system-assigned identifier for a specific server. That server's user
authentication method is tested with a user name and password.
$sel:userName:TestIdentityProvider'
, testIdentityProvider_userName
- The name of the user account to be tested.
data TestIdentityProviderResponse Source #
See: newTestIdentityProviderResponse
smart constructor.
Instances
newTestIdentityProviderResponse Source #
:: Int | |
-> Int | |
-> Text | |
-> TestIdentityProviderResponse |
Create a value of TestIdentityProviderResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:response:TestIdentityProviderResponse'
, testIdentityProviderResponse_response
- The response that is returned from your API Gateway.
$sel:message:TestIdentityProviderResponse'
, testIdentityProviderResponse_message
- A message that indicates whether the test was successful or not.
$sel:httpStatus:TestIdentityProviderResponse'
, testIdentityProviderResponse_httpStatus
- The response's http status code.
$sel:statusCode:TestIdentityProviderResponse'
, testIdentityProviderResponse_statusCode
- The HTTP status code that is the response from your API Gateway.
$sel:url:TestIdentityProviderResponse'
, testIdentityProviderResponse_url
- The endpoint of the service used to authenticate a user.
ListServers (Paginated)
data ListServers Source #
See: newListServers
smart constructor.
Instances
newListServers :: ListServers Source #
Create a value of ListServers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListServers'
, listServers_nextToken
- When additional results are obtained from the ListServers
command, a
NextToken
parameter is returned in the output. You can then pass the
NextToken
parameter in a subsequent command to continue listing
additional servers.
$sel:maxResults:ListServers'
, listServers_maxResults
- Specifies the number of servers to return as a response to the
ListServers
query.
data ListServersResponse Source #
See: newListServersResponse
smart constructor.
Instances
newListServersResponse Source #
Create a value of ListServersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListServers'
, listServersResponse_nextToken
- When you can get additional results from the ListServers
operation, a
NextToken
parameter is returned in the output. In a following command,
you can pass in the NextToken
parameter to continue listing additional
servers.
$sel:httpStatus:ListServersResponse'
, listServersResponse_httpStatus
- The response's http status code.
$sel:servers:ListServersResponse'
, listServersResponse_servers
- An array of servers that were listed.
DescribeUser
data DescribeUser Source #
See: newDescribeUser
smart constructor.
Instances
Create a value of DescribeUser
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:DescribeUser'
, describeUser_serverId
- A system-assigned unique identifier for a server that has this user
assigned.
$sel:userName:DescribeUser'
, describeUser_userName
- The name of the user assigned to one or more servers. User names are
part of the sign-in credentials to use the Amazon Web Services Transfer
Family service and perform file transfer tasks.
data DescribeUserResponse Source #
See: newDescribeUserResponse
smart constructor.
Instances
newDescribeUserResponse Source #
:: Int | |
-> Text | |
-> DescribedUser | |
-> DescribeUserResponse |
Create a value of DescribeUserResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DescribeUserResponse'
, describeUserResponse_httpStatus
- The response's http status code.
$sel:serverId:DescribeUser'
, describeUserResponse_serverId
- A system-assigned unique identifier for a server that has this user
assigned.
$sel:user:DescribeUserResponse'
, describeUserResponse_user
- An array containing the properties of the user account for the
ServerID
value that you specified.
DescribeExecution
data DescribeExecution Source #
See: newDescribeExecution
smart constructor.
Instances
:: Text | |
-> Text | |
-> DescribeExecution |
Create a value of DescribeExecution
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:executionId:DescribeExecution'
, describeExecution_executionId
- A unique identifier for the execution of a workflow.
$sel:workflowId:DescribeExecution'
, describeExecution_workflowId
- A unique identifier for the workflow.
data DescribeExecutionResponse Source #
See: newDescribeExecutionResponse
smart constructor.
Instances
newDescribeExecutionResponse Source #
Create a value of DescribeExecutionResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DescribeExecutionResponse'
, describeExecutionResponse_httpStatus
- The response's http status code.
$sel:workflowId:DescribeExecution'
, describeExecutionResponse_workflowId
- A unique identifier for the workflow.
$sel:execution:DescribeExecutionResponse'
, describeExecutionResponse_execution
- The structure that contains the details of the workflow' execution.
ListWorkflows
data ListWorkflows Source #
See: newListWorkflows
smart constructor.
Instances
newListWorkflows :: ListWorkflows Source #
Create a value of ListWorkflows
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListWorkflows'
, listWorkflows_nextToken
- ListWorkflows
returns the NextToken
parameter in the output. You can
then pass the NextToken
parameter in a subsequent command to continue
listing additional workflows.
$sel:maxResults:ListWorkflows'
, listWorkflows_maxResults
- Specifies the maximum number of workflows to return.
data ListWorkflowsResponse Source #
See: newListWorkflowsResponse
smart constructor.
Instances
newListWorkflowsResponse Source #
Create a value of ListWorkflowsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListWorkflows'
, listWorkflowsResponse_nextToken
- ListWorkflows
returns the NextToken
parameter in the output. You can
then pass the NextToken
parameter in a subsequent command to continue
listing additional workflows.
$sel:httpStatus:ListWorkflowsResponse'
, listWorkflowsResponse_httpStatus
- The response's http status code.
$sel:workflows:ListWorkflowsResponse'
, listWorkflowsResponse_workflows
- Returns the Arn
, WorkflowId
, and Description
for each workflow.
CreateUser
data CreateUser Source #
See: newCreateUser
smart constructor.
CreateUser' (Maybe HomeDirectoryType) (Maybe Text) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe (NonEmpty Tag)) Text Text Text |
Instances
:: Text | |
-> Text | |
-> Text | |
-> CreateUser |
Create a value of CreateUser
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:homeDirectoryType:CreateUser'
, createUser_homeDirectoryType
- The type of landing directory (folder) you want your users' home
directory to be when they log into the server. If you set it to PATH
,
the user will see the absolute Amazon S3 bucket or EFS paths as is in
their file transfer protocol clients. If you set it LOGICAL
, you need
to provide mappings in the HomeDirectoryMappings
for how you want to
make Amazon S3 or EFS paths visible to your users.
$sel:sshPublicKeyBody:CreateUser'
, createUser_sshPublicKeyBody
- The public portion of the Secure Shell (SSH) key used to authenticate
the user to the server.
$sel:posixProfile:CreateUser'
, createUser_posixProfile
- Specifies the full POSIX identity, including user ID (Uid
), group ID
(Gid
), and any secondary groups IDs (SecondaryGids
), that controls
your users' access to your Amazon EFS file systems. The POSIX
permissions that are set on files and directories in Amazon EFS
determine the level of access your users get when transferring files
into and out of your Amazon EFS file systems.
$sel:homeDirectoryMappings:CreateUser'
, createUser_homeDirectoryMappings
- Logical directory mappings that specify what Amazon S3 or Amazon EFS
paths and keys should be visible to your user and how you want to make
them visible. You must specify the Entry
and Target
pair, where
Entry
shows how the path is made visible and Target
is the actual
Amazon S3 or Amazon EFS path. If you only specify a target, it is
displayed as is. You also must ensure that your Amazon Web Services
Identity and Access Management (IAM) role provides access to paths in
Target
. This value can only be set when HomeDirectoryType
is set to
LOGICAL.
The following is an Entry
and Target
pair example.
[ { "Entry": "/directory1", "Target": "/bucket_name/home/mydirectory" } ]
In most cases, you can use this value instead of the session policy to
lock your user down to the designated home directory ("chroot
"). To
do this, you can set Entry
to /
and set Target
to the
HomeDirectory parameter value.
The following is an Entry
and Target
pair example for chroot
.
[ { "Entry:": "/", "Target": "/bucket_name/home/mydirectory" } ]
If the target of a logical directory entry does not exist in Amazon S3
or EFS, the entry is ignored. As a workaround, you can use the Amazon S3
API or EFS API to create 0 byte objects as place holders for your
directory. If using the CLI, use the s3api
or efsapi
call instead of
s3
or efs
so you can use the put-object operation. For example, you
use the following:
aws s3api put-object --bucket bucketname --key path/to/folder/
.
Make sure that the end of the key name ends in a /
for it to be
considered a folder.
$sel:policy:CreateUser'
, createUser_policy
- A session policy for your user so that you can use the same IAM role
across multiple users. This policy scopes down user access to portions
of their Amazon S3 bucket. Variables that you can use inside this policy
include ${Transfer:UserName}
, ${Transfer:HomeDirectory}
, and
${Transfer:HomeBucket}
.
This only applies when the domain of ServerId
is S3. EFS does not use
session policies.
For session policies, Amazon Web Services Transfer Family stores the
policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the
policy. You save the policy as a JSON blob and pass it in the Policy
argument.
For an example of a session policy, see Example session policy.
For more information, see AssumeRole in the Amazon Web Services Security Token Service API Reference.
$sel:homeDirectory:CreateUser'
, createUser_homeDirectory
- The landing directory (folder) for a user when they log in to the server
using the client.
A HomeDirectory
example is /bucket_name/home/mydirectory
.
$sel:tags:CreateUser'
, createUser_tags
- Key-value pairs that can be used to group and search for users. Tags are
metadata attached to users for any purpose.
$sel:role':CreateUser'
, createUser_role
- Specifies the Amazon Resource Name (ARN) of the IAM role that controls
your users' access to your Amazon S3 bucket or EFS file system. The
policies attached to this role determine the level of access that you
want to provide your users when transferring files into and out of your
Amazon S3 bucket or EFS file system. The IAM role should also contain a
trust relationship that allows the server to access your resources when
servicing your users' transfer requests.
$sel:serverId:CreateUser'
, createUser_serverId
- A system-assigned unique identifier for a server instance. This is the
specific server that you added your user to.
$sel:userName:CreateUser'
, createUser_userName
- A unique string that identifies a user and is associated with a
ServerId
. This user name must be a minimum of 3 and a maximum of 100
characters long. The following are valid characters: a-z, A-Z, 0-9,
underscore '_', hyphen '-', period '.', and at sign '@'. The
user name can't start with a hyphen, period, or at sign.
data CreateUserResponse Source #
See: newCreateUserResponse
smart constructor.
Instances
newCreateUserResponse Source #
:: Int | |
-> Text | |
-> Text | |
-> CreateUserResponse |
Create a value of CreateUserResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateUserResponse'
, createUserResponse_httpStatus
- The response's http status code.
$sel:serverId:CreateUser'
, createUserResponse_serverId
- The ID of the server that the user is attached to.
$sel:userName:CreateUser'
, createUserResponse_userName
- A unique string that identifies a user account associated with a server.
StartServer
data StartServer Source #
See: newStartServer
smart constructor.
Instances
Create a value of StartServer
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:StartServer'
, startServer_serverId
- A system-assigned unique identifier for a server that you start.
data StartServerResponse Source #
See: newStartServerResponse
smart constructor.
Instances
Eq StartServerResponse Source # | |
Defined in Amazonka.Transfer.StartServer (==) :: StartServerResponse -> StartServerResponse -> Bool # (/=) :: StartServerResponse -> StartServerResponse -> Bool # | |
Read StartServerResponse Source # | |
Defined in Amazonka.Transfer.StartServer | |
Show StartServerResponse Source # | |
Defined in Amazonka.Transfer.StartServer showsPrec :: Int -> StartServerResponse -> ShowS # show :: StartServerResponse -> String # showList :: [StartServerResponse] -> ShowS # | |
Generic StartServerResponse Source # | |
Defined in Amazonka.Transfer.StartServer type Rep StartServerResponse :: Type -> Type # from :: StartServerResponse -> Rep StartServerResponse x # to :: Rep StartServerResponse x -> StartServerResponse # | |
NFData StartServerResponse Source # | |
Defined in Amazonka.Transfer.StartServer rnf :: StartServerResponse -> () # | |
type Rep StartServerResponse Source # | |
newStartServerResponse :: StartServerResponse Source #
Create a value of StartServerResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
UpdateAccess
data UpdateAccess Source #
See: newUpdateAccess
smart constructor.
UpdateAccess' (Maybe HomeDirectoryType) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe Text) Text Text |
Instances
Create a value of UpdateAccess
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:homeDirectoryType:UpdateAccess'
, updateAccess_homeDirectoryType
- The type of landing directory (folder) you want your users' home
directory to be when they log into the server. If you set it to PATH
,
the user will see the absolute Amazon S3 bucket or EFS paths as is in
their file transfer protocol clients. If you set it LOGICAL
, you need
to provide mappings in the HomeDirectoryMappings
for how you want to
make Amazon S3 or EFS paths visible to your users.
$sel:posixProfile:UpdateAccess'
, updateAccess_posixProfile
- Undocumented member.
$sel:homeDirectoryMappings:UpdateAccess'
, updateAccess_homeDirectoryMappings
- Logical directory mappings that specify what Amazon S3 or Amazon EFS
paths and keys should be visible to your user and how you want to make
them visible. You must specify the Entry
and Target
pair, where
Entry
shows how the path is made visible and Target
is the actual
Amazon S3 or Amazon EFS path. If you only specify a target, it is
displayed as is. You also must ensure that your Amazon Web Services
Identity and Access Management (IAM) role provides access to paths in
Target
. This value can only be set when HomeDirectoryType
is set to
LOGICAL.
The following is an Entry
and Target
pair example.
[ { "Entry": "/directory1", "Target": "/bucket_name/home/mydirectory" } ]
In most cases, you can use this value instead of the session policy to
lock down your user to the designated home directory ("chroot
"). To
do this, you can set Entry
to /
and set Target
to the
HomeDirectory
parameter value.
The following is an Entry
and Target
pair example for chroot
.
[ { "Entry:": "/", "Target": "/bucket_name/home/mydirectory" } ]
If the target of a logical directory entry does not exist in Amazon S3
or EFS, the entry is ignored. As a workaround, you can use the Amazon S3
API or EFS API to create 0 byte objects as place holders for your
directory. If using the CLI, use the s3api
or efsapi
call instead of
s3
or efs
so you can use the put-object operation. For example, you
use the following:
aws s3api put-object --bucket bucketname --key path/to/folder/
.
Make sure that the end of the key name ends in a /
for it to be
considered a folder.
$sel:role':UpdateAccess'
, updateAccess_role
- Specifies the Amazon Resource Name (ARN) of the IAM role that controls
your users' access to your Amazon S3 bucket or EFS file system. The
policies attached to this role determine the level of access that you
want to provide your users when transferring files into and out of your
Amazon S3 bucket or EFS file system. The IAM role should also contain a
trust relationship that allows the server to access your resources when
servicing your users' transfer requests.
$sel:policy:UpdateAccess'
, updateAccess_policy
- A session policy for your user so that you can use the same IAM role
across multiple users. This policy scopes down user access to portions
of their Amazon S3 bucket. Variables that you can use inside this policy
include ${Transfer:UserName}
, ${Transfer:HomeDirectory}
, and
${Transfer:HomeBucket}
.
This only applies when the domain of ServerId
is S3. EFS does not use
session policies.
For session policies, Amazon Web Services Transfer Family stores the
policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the
policy. You save the policy as a JSON blob and pass it in the Policy
argument.
For an example of a session policy, see Example session policy.
For more information, see AssumeRole in the Amazon Web ServicesSecurity Token Service API Reference.
$sel:homeDirectory:UpdateAccess'
, updateAccess_homeDirectory
- The landing directory (folder) for a user when they log in to the server
using the client.
A HomeDirectory
example is /bucket_name/home/mydirectory
.
$sel:serverId:UpdateAccess'
, updateAccess_serverId
- A system-assigned unique identifier for a server instance. This is the
specific server that you added your user to.
$sel:externalId:UpdateAccess'
, updateAccess_externalId
- A unique identifier that is required to identify specific groups within
your directory. The users of the group that you associate have access to
your Amazon S3 or Amazon EFS resources over the enabled protocols using
Amazon Web Services Transfer Family. If you know the group name, you can
view the SID values by running the following command using Windows
PowerShell.
Get-ADGroup -Filter {samAccountName -like "YourGroupName*"} -Properties * | Select SamAccountName,ObjectSid
In that command, replace YourGroupName with the name of your Active Directory group.
The regex used to validate this parameter is a string of characters consisting of uppercase and lowercase alphanumeric characters with no spaces. You can also include underscores or any of the following characters: =,.@:/-
data UpdateAccessResponse Source #
See: newUpdateAccessResponse
smart constructor.
Instances
newUpdateAccessResponse Source #
:: Int | |
-> Text | |
-> Text | |
-> UpdateAccessResponse |
Create a value of UpdateAccessResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateAccessResponse'
, updateAccessResponse_httpStatus
- The response's http status code.
$sel:serverId:UpdateAccess'
, updateAccessResponse_serverId
- The ID of the server that the user is attached to.
$sel:externalId:UpdateAccess'
, updateAccessResponse_externalId
- The external ID of the group whose users have access to your Amazon S3
or Amazon EFS resources over the enabled protocols using Amazon Web
ServicesTransfer Family.
DeleteAccess
data DeleteAccess Source #
See: newDeleteAccess
smart constructor.
Instances
Create a value of DeleteAccess
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:DeleteAccess'
, deleteAccess_serverId
- A system-assigned unique identifier for a server that has this user
assigned.
$sel:externalId:DeleteAccess'
, deleteAccess_externalId
- A unique identifier that is required to identify specific groups within
your directory. The users of the group that you associate have access to
your Amazon S3 or Amazon EFS resources over the enabled protocols using
Amazon Web Services Transfer Family. If you know the group name, you can
view the SID values by running the following command using Windows
PowerShell.
Get-ADGroup -Filter {samAccountName -like "YourGroupName*"} -Properties * | Select SamAccountName,ObjectSid
In that command, replace YourGroupName with the name of your Active Directory group.
The regex used to validate this parameter is a string of characters consisting of uppercase and lowercase alphanumeric characters with no spaces. You can also include underscores or any of the following characters: =,.@:/-
data DeleteAccessResponse Source #
See: newDeleteAccessResponse
smart constructor.
Instances
Eq DeleteAccessResponse Source # | |
Defined in Amazonka.Transfer.DeleteAccess (==) :: DeleteAccessResponse -> DeleteAccessResponse -> Bool # (/=) :: DeleteAccessResponse -> DeleteAccessResponse -> Bool # | |
Read DeleteAccessResponse Source # | |
Show DeleteAccessResponse Source # | |
Defined in Amazonka.Transfer.DeleteAccess showsPrec :: Int -> DeleteAccessResponse -> ShowS # show :: DeleteAccessResponse -> String # showList :: [DeleteAccessResponse] -> ShowS # | |
Generic DeleteAccessResponse Source # | |
Defined in Amazonka.Transfer.DeleteAccess type Rep DeleteAccessResponse :: Type -> Type # from :: DeleteAccessResponse -> Rep DeleteAccessResponse x # to :: Rep DeleteAccessResponse x -> DeleteAccessResponse # | |
NFData DeleteAccessResponse Source # | |
Defined in Amazonka.Transfer.DeleteAccess rnf :: DeleteAccessResponse -> () # | |
type Rep DeleteAccessResponse Source # | |
newDeleteAccessResponse :: DeleteAccessResponse Source #
Create a value of DeleteAccessResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
CreateAccess
data CreateAccess Source #
See: newCreateAccess
smart constructor.
CreateAccess' (Maybe HomeDirectoryType) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) Text Text Text |
Instances
:: Text | |
-> Text | |
-> Text | |
-> CreateAccess |
Create a value of CreateAccess
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:homeDirectoryType:CreateAccess'
, createAccess_homeDirectoryType
- The type of landing directory (folder) you want your users' home
directory to be when they log into the server. If you set it to PATH
,
the user will see the absolute Amazon S3 bucket or EFS paths as is in
their file transfer protocol clients. If you set it LOGICAL
, you need
to provide mappings in the HomeDirectoryMappings
for how you want to
make Amazon S3 or EFS paths visible to your users.
$sel:posixProfile:CreateAccess'
, createAccess_posixProfile
- Undocumented member.
$sel:homeDirectoryMappings:CreateAccess'
, createAccess_homeDirectoryMappings
- Logical directory mappings that specify what Amazon S3 or Amazon EFS
paths and keys should be visible to your user and how you want to make
them visible. You must specify the Entry
and Target
pair, where
Entry
shows how the path is made visible and Target
is the actual
Amazon S3 or Amazon EFS path. If you only specify a target, it is
displayed as is. You also must ensure that your Amazon Web Services
Identity and Access Management (IAM) role provides access to paths in
Target
. This value can only be set when HomeDirectoryType
is set to
LOGICAL.
The following is an Entry
and Target
pair example.
[ { "Entry": "/directory1", "Target": "/bucket_name/home/mydirectory" } ]
In most cases, you can use this value instead of the session policy to
lock down your user to the designated home directory ("chroot
"). To
do this, you can set Entry
to /
and set Target
to the
HomeDirectory
parameter value.
The following is an Entry
and Target
pair example for chroot
.
[ { "Entry:": "/", "Target": "/bucket_name/home/mydirectory" } ]
If the target of a logical directory entry does not exist in Amazon S3
or EFS, the entry is ignored. As a workaround, you can use the Amazon S3
API or EFS API to create 0 byte objects as place holders for your
directory. If using the CLI, use the s3api
or efsapi
call instead of
s3
or efs
so you can use the put-object operation. For example, you
use the following:
aws s3api put-object --bucket bucketname --key path/to/folder/
.
Make sure that the end of the key name ends in a /
for it to be
considered a folder.
$sel:policy:CreateAccess'
, createAccess_policy
- A session policy for your user so that you can use the same IAM role
across multiple users. This policy scopes down user access to portions
of their Amazon S3 bucket. Variables that you can use inside this policy
include ${Transfer:UserName}
, ${Transfer:HomeDirectory}
, and
${Transfer:HomeBucket}
.
This only applies when the domain of ServerId
is S3. EFS does not use
session policies.
For session policies, Amazon Web Services Transfer Family stores the
policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the
policy. You save the policy as a JSON blob and pass it in the Policy
argument.
For an example of a session policy, see Example session policy.
For more information, see AssumeRole in the Amazon Web Services Security Token Service API Reference.
$sel:homeDirectory:CreateAccess'
, createAccess_homeDirectory
- The landing directory (folder) for a user when they log in to the server
using the client.
A HomeDirectory
example is /bucket_name/home/mydirectory
.
$sel:role':CreateAccess'
, createAccess_role
- Specifies the Amazon Resource Name (ARN) of the IAM role that controls
your users' access to your Amazon S3 bucket or EFS file system. The
policies attached to this role determine the level of access that you
want to provide your users when transferring files into and out of your
Amazon S3 bucket or EFS file system. The IAM role should also contain a
trust relationship that allows the server to access your resources when
servicing your users' transfer requests.
$sel:serverId:CreateAccess'
, createAccess_serverId
- A system-assigned unique identifier for a server instance. This is the
specific server that you added your user to.
$sel:externalId:CreateAccess'
, createAccess_externalId
- A unique identifier that is required to identify specific groups within
your directory. The users of the group that you associate have access to
your Amazon S3 or Amazon EFS resources over the enabled protocols using
Amazon Web Services Transfer Family. If you know the group name, you can
view the SID values by running the following command using Windows
PowerShell.
Get-ADGroup -Filter {samAccountName -like "YourGroupName*"} -Properties * | Select SamAccountName,ObjectSid
In that command, replace YourGroupName with the name of your Active Directory group.
The regex used to validate this parameter is a string of characters consisting of uppercase and lowercase alphanumeric characters with no spaces. You can also include underscores or any of the following characters: =,.@:/-
data CreateAccessResponse Source #
See: newCreateAccessResponse
smart constructor.
Instances
newCreateAccessResponse Source #
:: Int | |
-> Text | |
-> Text | |
-> CreateAccessResponse |
Create a value of CreateAccessResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateAccessResponse'
, createAccessResponse_httpStatus
- The response's http status code.
$sel:serverId:CreateAccess'
, createAccessResponse_serverId
- The ID of the server that the user is attached to.
$sel:externalId:CreateAccess'
, createAccessResponse_externalId
- The external ID of the group whose users have access to your Amazon S3
or Amazon EFS resources over the enabled protocols using Amazon Web
Services Transfer Family.
ListAccesses
data ListAccesses Source #
See: newListAccesses
smart constructor.
Instances
Create a value of ListAccesses
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListAccesses'
, listAccesses_nextToken
- When you can get additional results from the ListAccesses
call, a
NextToken
parameter is returned in the output. You can then pass in a
subsequent command to the NextToken
parameter to continue listing
additional accesses.
$sel:maxResults:ListAccesses'
, listAccesses_maxResults
- Specifies the maximum number of access SIDs to return.
$sel:serverId:ListAccesses'
, listAccesses_serverId
- A system-assigned unique identifier for a server that has users assigned
to it.
data ListAccessesResponse Source #
See: newListAccessesResponse
smart constructor.
Instances
newListAccessesResponse Source #
:: Int | |
-> Text | |
-> ListAccessesResponse |
Create a value of ListAccessesResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListAccesses'
, listAccessesResponse_nextToken
- When you can get additional results from the ListAccesses
call, a
NextToken
parameter is returned in the output. You can then pass in a
subsequent command to the NextToken
parameter to continue listing
additional accesses.
$sel:httpStatus:ListAccessesResponse'
, listAccessesResponse_httpStatus
- The response's http status code.
$sel:serverId:ListAccesses'
, listAccessesResponse_serverId
- A system-assigned unique identifier for a server that has users assigned
to it.
$sel:accesses:ListAccessesResponse'
, listAccessesResponse_accesses
- Returns the accesses and their properties for the ServerId
value that
you specify.
UpdateUser
data UpdateUser Source #
See: newUpdateUser
smart constructor.
UpdateUser' (Maybe HomeDirectoryType) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe Text) Text Text |
Instances
Create a value of UpdateUser
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:homeDirectoryType:UpdateUser'
, updateUser_homeDirectoryType
- The type of landing directory (folder) you want your users' home
directory to be when they log into the server. If you set it to PATH
,
the user will see the absolute Amazon S3 bucket or EFS paths as is in
their file transfer protocol clients. If you set it LOGICAL
, you need
to provide mappings in the HomeDirectoryMappings
for how you want to
make Amazon S3 or EFS paths visible to your users.
$sel:posixProfile:UpdateUser'
, updateUser_posixProfile
- Specifies the full POSIX identity, including user ID (Uid
), group ID
(Gid
), and any secondary groups IDs (SecondaryGids
), that controls
your users' access to your Amazon Elastic File Systems (Amazon EFS).
The POSIX permissions that are set on files and directories in your file
system determines the level of access your users get when transferring
files into and out of your Amazon EFS file systems.
$sel:homeDirectoryMappings:UpdateUser'
, updateUser_homeDirectoryMappings
- Logical directory mappings that specify what Amazon S3 or Amazon EFS
paths and keys should be visible to your user and how you want to make
them visible. You must specify the Entry
and Target
pair, where
Entry
shows how the path is made visible and Target
is the actual
Amazon S3 or Amazon EFS path. If you only specify a target, it is
displayed as is. You also must ensure that your Amazon Web Services
Identity and Access Management (IAM) role provides access to paths in
Target
. This value can only be set when HomeDirectoryType
is set to
LOGICAL.
The following is an Entry
and Target
pair example.
[ { "Entry": "/directory1", "Target": "/bucket_name/home/mydirectory" } ]
In most cases, you can use this value instead of the session policy to
lock down your user to the designated home directory ("chroot
"). To
do this, you can set Entry
to '/' and set Target
to the
HomeDirectory parameter value.
The following is an Entry
and Target
pair example for chroot
.
[ { "Entry:": "/", "Target": "/bucket_name/home/mydirectory" } ]
If the target of a logical directory entry does not exist in Amazon S3
or EFS, the entry is ignored. As a workaround, you can use the Amazon S3
API or EFS API to create 0 byte objects as place holders for your
directory. If using the CLI, use the s3api
or efsapi
call instead of
s3
or efs
so you can use the put-object operation. For example, you
use the following:
aws s3api put-object --bucket bucketname --key path/to/folder/
.
Make sure that the end of the key name ends in a /
for it to be
considered a folder.
$sel:role':UpdateUser'
, updateUser_role
- Specifies the Amazon Resource Name (ARN) of the IAM role that controls
your users' access to your Amazon S3 bucket or EFS file system. The
policies attached to this role determine the level of access that you
want to provide your users when transferring files into and out of your
Amazon S3 bucket or EFS file system. The IAM role should also contain a
trust relationship that allows the server to access your resources when
servicing your users' transfer requests.
$sel:policy:UpdateUser'
, updateUser_policy
- A session policy for your user so that you can use the same IAM role
across multiple users. This policy scopes down user access to portions
of their Amazon S3 bucket. Variables that you can use inside this policy
include ${Transfer:UserName}
, ${Transfer:HomeDirectory}
, and
${Transfer:HomeBucket}
.
This only applies when the domain of ServerId
is S3. EFS does not use
session policies.
For session policies, Amazon Web Services Transfer Family stores the
policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the
policy. You save the policy as a JSON blob and pass it in the Policy
argument.
For an example of a session policy, see Creating a session policy.
For more information, see AssumeRole in the Amazon Web Services Security Token Service API Reference.
$sel:homeDirectory:UpdateUser'
, updateUser_homeDirectory
- The landing directory (folder) for a user when they log in to the server
using the client.
A HomeDirectory
example is /bucket_name/home/mydirectory
.
$sel:serverId:UpdateUser'
, updateUser_serverId
- A system-assigned unique identifier for a server instance that the user
account is assigned to.
$sel:userName:UpdateUser'
, updateUser_userName
- A unique string that identifies a user and is associated with a server
as specified by the ServerId
. This user name must be a minimum of 3
and a maximum of 100 characters long. The following are valid
characters: a-z, A-Z, 0-9, underscore '_', hyphen '-', period '.',
and at sign '@'. The user name can't start with a hyphen, period, or
at sign.
data UpdateUserResponse Source #
UpdateUserResponse
returns the user name and identifier for the
request to update a user's properties.
See: newUpdateUserResponse
smart constructor.
Instances
newUpdateUserResponse Source #
:: Int | |
-> Text | |
-> Text | |
-> UpdateUserResponse |
Create a value of UpdateUserResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateUserResponse'
, updateUserResponse_httpStatus
- The response's http status code.
$sel:serverId:UpdateUser'
, updateUserResponse_serverId
- A system-assigned unique identifier for a server instance that the user
account is assigned to.
$sel:userName:UpdateUser'
, updateUserResponse_userName
- The unique identifier for a user that is assigned to a server instance
that was specified in the request.
DeleteUser
data DeleteUser Source #
See: newDeleteUser
smart constructor.
Instances
Create a value of DeleteUser
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:DeleteUser'
, deleteUser_serverId
- A system-assigned unique identifier for a server instance that has the
user assigned to it.
$sel:userName:DeleteUser'
, deleteUser_userName
- A unique string that identifies a user that is being deleted from a
server.
data DeleteUserResponse Source #
See: newDeleteUserResponse
smart constructor.
Instances
Eq DeleteUserResponse Source # | |
Defined in Amazonka.Transfer.DeleteUser (==) :: DeleteUserResponse -> DeleteUserResponse -> Bool # (/=) :: DeleteUserResponse -> DeleteUserResponse -> Bool # | |
Read DeleteUserResponse Source # | |
Defined in Amazonka.Transfer.DeleteUser | |
Show DeleteUserResponse Source # | |
Defined in Amazonka.Transfer.DeleteUser showsPrec :: Int -> DeleteUserResponse -> ShowS # show :: DeleteUserResponse -> String # showList :: [DeleteUserResponse] -> ShowS # | |
Generic DeleteUserResponse Source # | |
Defined in Amazonka.Transfer.DeleteUser type Rep DeleteUserResponse :: Type -> Type # from :: DeleteUserResponse -> Rep DeleteUserResponse x # to :: Rep DeleteUserResponse x -> DeleteUserResponse # | |
NFData DeleteUserResponse Source # | |
Defined in Amazonka.Transfer.DeleteUser rnf :: DeleteUserResponse -> () # | |
type Rep DeleteUserResponse Source # | |
newDeleteUserResponse :: DeleteUserResponse Source #
Create a value of DeleteUserResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
TagResource
data TagResource Source #
See: newTagResource
smart constructor.
Instances
Create a value of TagResource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:TagResource'
, tagResource_arn
- An Amazon Resource Name (ARN) for a specific Amazon Web Services
resource, such as a server, user, or role.
$sel:tags:TagResource'
, tagResource_tags
- Key-value pairs assigned to ARNs that you can use to group and search
for resources by type. You can attach this metadata to user accounts for
any purpose.
data TagResourceResponse Source #
See: newTagResourceResponse
smart constructor.
Instances
Eq TagResourceResponse Source # | |
Defined in Amazonka.Transfer.TagResource (==) :: TagResourceResponse -> TagResourceResponse -> Bool # (/=) :: TagResourceResponse -> TagResourceResponse -> Bool # | |
Read TagResourceResponse Source # | |
Defined in Amazonka.Transfer.TagResource | |
Show TagResourceResponse Source # | |
Defined in Amazonka.Transfer.TagResource showsPrec :: Int -> TagResourceResponse -> ShowS # show :: TagResourceResponse -> String # showList :: [TagResourceResponse] -> ShowS # | |
Generic TagResourceResponse Source # | |
Defined in Amazonka.Transfer.TagResource type Rep TagResourceResponse :: Type -> Type # from :: TagResourceResponse -> Rep TagResourceResponse x # to :: Rep TagResourceResponse x -> TagResourceResponse # | |
NFData TagResourceResponse Source # | |
Defined in Amazonka.Transfer.TagResource rnf :: TagResourceResponse -> () # | |
type Rep TagResourceResponse Source # | |
newTagResourceResponse :: TagResourceResponse Source #
Create a value of TagResourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
UntagResource
data UntagResource Source #
See: newUntagResource
smart constructor.
Instances
Create a value of UntagResource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:UntagResource'
, untagResource_arn
- The value of the resource that will have the tag removed. An Amazon
Resource Name (ARN) is an identifier for a specific Amazon Web Services
resource, such as a server, user, or role.
$sel:tagKeys:UntagResource'
, untagResource_tagKeys
- TagKeys are key-value pairs assigned to ARNs that can be used to group
and search for resources by type. This metadata can be attached to
resources for any purpose.
data UntagResourceResponse Source #
See: newUntagResourceResponse
smart constructor.
Instances
Eq UntagResourceResponse Source # | |
Defined in Amazonka.Transfer.UntagResource (==) :: UntagResourceResponse -> UntagResourceResponse -> Bool # (/=) :: UntagResourceResponse -> UntagResourceResponse -> Bool # | |
Read UntagResourceResponse Source # | |
Show UntagResourceResponse Source # | |
Defined in Amazonka.Transfer.UntagResource showsPrec :: Int -> UntagResourceResponse -> ShowS # show :: UntagResourceResponse -> String # showList :: [UntagResourceResponse] -> ShowS # | |
Generic UntagResourceResponse Source # | |
Defined in Amazonka.Transfer.UntagResource type Rep UntagResourceResponse :: Type -> Type # | |
NFData UntagResourceResponse Source # | |
Defined in Amazonka.Transfer.UntagResource rnf :: UntagResourceResponse -> () # | |
type Rep UntagResourceResponse Source # | |
newUntagResourceResponse :: UntagResourceResponse Source #
Create a value of UntagResourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
DescribeWorkflow
data DescribeWorkflow Source #
See: newDescribeWorkflow
smart constructor.
Instances
Create a value of DescribeWorkflow
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:workflowId:DescribeWorkflow'
, describeWorkflow_workflowId
- A unique identifier for the workflow.
data DescribeWorkflowResponse Source #
See: newDescribeWorkflowResponse
smart constructor.
Instances
newDescribeWorkflowResponse Source #
Create a value of DescribeWorkflowResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DescribeWorkflowResponse'
, describeWorkflowResponse_httpStatus
- The response's http status code.
$sel:workflow:DescribeWorkflowResponse'
, describeWorkflowResponse_workflow
- The structure that contains the details of the workflow.
DescribeAccess
data DescribeAccess Source #
See: newDescribeAccess
smart constructor.
Instances
Create a value of DescribeAccess
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:serverId:DescribeAccess'
, describeAccess_serverId
- A system-assigned unique identifier for a server that has this access
assigned.
$sel:externalId:DescribeAccess'
, describeAccess_externalId
- A unique identifier that is required to identify specific groups within
your directory. The users of the group that you associate have access to
your Amazon S3 or Amazon EFS resources over the enabled protocols using
Amazon Web Services Transfer Family. If you know the group name, you can
view the SID values by running the following command using Windows
PowerShell.
Get-ADGroup -Filter {samAccountName -like "YourGroupName*"} -Properties * | Select SamAccountName,ObjectSid
In that command, replace YourGroupName with the name of your Active Directory group.
The regex used to validate this parameter is a string of characters consisting of uppercase and lowercase alphanumeric characters with no spaces. You can also include underscores or any of the following characters: =,.@:/-
data DescribeAccessResponse Source #
See: newDescribeAccessResponse
smart constructor.
Instances
newDescribeAccessResponse Source #
:: Int | |
-> Text | |
-> DescribedAccess | |
-> DescribeAccessResponse |
Create a value of DescribeAccessResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DescribeAccessResponse'
, describeAccessResponse_httpStatus
- The response's http status code.
$sel:serverId:DescribeAccess'
, describeAccessResponse_serverId
- A system-assigned unique identifier for a server that has this access
assigned.
$sel:access:DescribeAccessResponse'
, describeAccessResponse_access
- The external ID of the server that the access is attached to.
Types
CustomStepStatus
newtype CustomStepStatus Source #
pattern CustomStepStatus_FAILURE :: CustomStepStatus | |
pattern CustomStepStatus_SUCCESS :: CustomStepStatus |
Instances
Domain
pattern Domain_EFS :: Domain | |
pattern Domain_S3 :: Domain |
Instances
EndpointType
newtype EndpointType Source #
pattern EndpointType_PUBLIC :: EndpointType | |
pattern EndpointType_VPC :: EndpointType | |
pattern EndpointType_VPC_ENDPOINT :: EndpointType |
Instances
ExecutionErrorType
newtype ExecutionErrorType Source #
Instances
ExecutionStatus
newtype ExecutionStatus Source #
pattern ExecutionStatus_COMPLETED :: ExecutionStatus | |
pattern ExecutionStatus_EXCEPTION :: ExecutionStatus | |
pattern ExecutionStatus_HANDLING_EXCEPTION :: ExecutionStatus | |
pattern ExecutionStatus_IN_PROGRESS :: ExecutionStatus |
Instances
HomeDirectoryType
newtype HomeDirectoryType Source #
pattern HomeDirectoryType_LOGICAL :: HomeDirectoryType | |
pattern HomeDirectoryType_PATH :: HomeDirectoryType |
Instances
IdentityProviderType
newtype IdentityProviderType Source #
Returns information related to the type of user authentication that is
in use for a file transfer protocol-enabled server's users. For
AWS_DIRECTORY_SERVICE
or SERVICE_MANAGED
authentication, the Secure
Shell (SSH) public keys are stored with a user on the server instance.
For API_GATEWAY
authentication, your custom authentication method is
implemented by using an API call. The server can have only one method of
authentication.
Instances
OverwriteExisting
newtype OverwriteExisting Source #
pattern OverwriteExisting_FALSE :: OverwriteExisting | |
pattern OverwriteExisting_TRUE :: OverwriteExisting |
Instances
Protocol
pattern Protocol_FTP :: Protocol | |
pattern Protocol_FTPS :: Protocol | |
pattern Protocol_SFTP :: Protocol |
Instances
State
Describes the condition of a file transfer protocol-enabled server with
respect to its ability to perform file operations. There are six
possible states: OFFLINE
, ONLINE
, STARTING
, STOPPING
,
START_FAILED
, and STOP_FAILED
.
OFFLINE
indicates that the server exists, but that it is not available
for file operations. ONLINE
indicates that the server is available to
perform file operations. STARTING
indicates that the server's was
instantiated, but the server is not yet available to perform file
operations. Under normal conditions, it can take a couple of minutes for
the server to be completely operational. Both START_FAILED
and
STOP_FAILED
are error conditions.
pattern State_OFFLINE :: State | |
pattern State_ONLINE :: State | |
pattern State_STARTING :: State | |
pattern State_START_FAILED :: State | |
pattern State_STOPPING :: State | |
pattern State_STOP_FAILED :: State |
Instances
WorkflowStepType
newtype WorkflowStepType Source #
pattern WorkflowStepType_COPY :: WorkflowStepType | |
pattern WorkflowStepType_CUSTOM :: WorkflowStepType | |
pattern WorkflowStepType_DELETE :: WorkflowStepType | |
pattern WorkflowStepType_TAG :: WorkflowStepType |
Instances
CopyStepDetails
data CopyStepDetails Source #
Each step type has its own StepDetails
structure.
See: newCopyStepDetails
smart constructor.
Instances
newCopyStepDetails :: CopyStepDetails Source #
Create a value of CopyStepDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:destinationFileLocation:CopyStepDetails'
, copyStepDetails_destinationFileLocation
- Undocumented member.
$sel:overwriteExisting:CopyStepDetails'
, copyStepDetails_overwriteExisting
- A flag that indicates whether or not to overwrite an existing file of
the same name. The default is FALSE
.
$sel:name:CopyStepDetails'
, copyStepDetails_name
- The name of the step, used as an identifier.
CustomStepDetails
data CustomStepDetails Source #
Each step type has its own StepDetails
structure.
See: newCustomStepDetails
smart constructor.
Instances
newCustomStepDetails :: CustomStepDetails Source #
Create a value of CustomStepDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:name:CustomStepDetails'
, customStepDetails_name
- The name of the step, used as an identifier.
$sel:timeoutSeconds:CustomStepDetails'
, customStepDetails_timeoutSeconds
- Timeout, in seconds, for the step.
$sel:target:CustomStepDetails'
, customStepDetails_target
- The ARN for the lambda function that is being called.
DeleteStepDetails
data DeleteStepDetails Source #
The name of the step, used to identify the delete step.
See: newDeleteStepDetails
smart constructor.
Instances
newDeleteStepDetails :: DeleteStepDetails Source #
Create a value of DeleteStepDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:name:DeleteStepDetails'
, deleteStepDetails_name
- The name of the step, used as an identifier.
DescribedAccess
data DescribedAccess Source #
Describes the properties of the access that was specified.
See: newDescribedAccess
smart constructor.
DescribedAccess' (Maybe HomeDirectoryType) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) |
Instances
newDescribedAccess :: DescribedAccess Source #
Create a value of DescribedAccess
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:homeDirectoryType:DescribedAccess'
, describedAccess_homeDirectoryType
- The type of landing directory (folder) you want your users' home
directory to be when they log into the server. If you set it to PATH
,
the user will see the absolute Amazon S3 bucket or EFS paths as is in
their file transfer protocol clients. If you set it LOGICAL
, you need
to provide mappings in the HomeDirectoryMappings
for how you want to
make Amazon S3 or EFS paths visible to your users.
$sel:posixProfile:DescribedAccess'
, describedAccess_posixProfile
- Undocumented member.
$sel:homeDirectoryMappings:DescribedAccess'
, describedAccess_homeDirectoryMappings
- Logical directory mappings that specify what Amazon S3 or Amazon EFS
paths and keys should be visible to your user and how you want to make
them visible. You must specify the Entry
and Target
pair, where
Entry
shows how the path is made visible and Target
is the actual
Amazon S3 or Amazon EFS path. If you only specify a target, it is
displayed as is. You also must ensure that your Amazon Web Services
Identity and Access Management (IAM) role provides access to paths in
Target
. This value can only be set when HomeDirectoryType
is set to
LOGICAL.
In most cases, you can use this value instead of the session policy to
lock down the associated access to the designated home directory
("chroot
"). To do this, you can set Entry
to '/' and set
Target
to the HomeDirectory
parameter value.
$sel:role':DescribedAccess'
, describedAccess_role
- Specifies the Amazon Resource Name (ARN) of the IAM role that controls
your users' access to your Amazon S3 bucket or EFS file system. The
policies attached to this role determine the level of access that you
want to provide your users when transferring files into and out of your
Amazon S3 bucket or EFS file system. The IAM role should also contain a
trust relationship that allows the server to access your resources when
servicing your users' transfer requests.
$sel:policy:DescribedAccess'
, describedAccess_policy
- A session policy for your user so that you can use the same IAM role
across multiple users. This policy scopes down user access to portions
of their Amazon S3 bucket. Variables that you can use inside this policy
include ${Transfer:UserName}
, ${Transfer:HomeDirectory}
, and
${Transfer:HomeBucket}
.
$sel:externalId:DescribedAccess'
, describedAccess_externalId
- A unique identifier that is required to identify specific groups within
your directory. The users of the group that you associate have access to
your Amazon S3 or Amazon EFS resources over the enabled protocols using
Amazon Web Services Transfer Family. If you know the group name, you can
view the SID values by running the following command using Windows
PowerShell.
Get-ADGroup -Filter {samAccountName -like "YourGroupName*"} -Properties * | Select SamAccountName,ObjectSid
In that command, replace YourGroupName with the name of your Active Directory group.
The regex used to validate this parameter is a string of characters consisting of uppercase and lowercase alphanumeric characters with no spaces. You can also include underscores or any of the following characters: =,.@:/-
$sel:homeDirectory:DescribedAccess'
, describedAccess_homeDirectory
- The landing directory (folder) for a user when they log in to the server
using the client.
A HomeDirectory
example is /bucket_name/home/mydirectory
.
DescribedExecution
data DescribedExecution Source #
The details for an execution object.
See: newDescribedExecution
smart constructor.
DescribedExecution' (Maybe ExecutionStatus) (Maybe Text) (Maybe ExecutionResults) (Maybe FileLocation) (Maybe PosixProfile) (Maybe ServiceMetadata) (Maybe LoggingConfiguration) (Maybe Text) |
Instances
newDescribedExecution :: DescribedExecution Source #
Create a value of DescribedExecution
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:DescribedExecution'
, describedExecution_status
- The status is one of the execution. Can be in progress, completed,
exception encountered, or handling the exception.
$sel:executionId:DescribedExecution'
, describedExecution_executionId
- A unique identifier for the execution of a workflow.
$sel:results:DescribedExecution'
, describedExecution_results
- A structure that describes the execution results. This includes a list
of the steps along with the details of each step, error type and message
(if any), and the OnExceptionSteps
structure.
$sel:initialFileLocation:DescribedExecution'
, describedExecution_initialFileLocation
- A structure that describes the Amazon S3 or EFS file location. This is
the file location when the execution begins: if the file is being
copied, this is the initial (as opposed to destination) file location.
$sel:posixProfile:DescribedExecution'
, describedExecution_posixProfile
- Undocumented member.
$sel:serviceMetadata:DescribedExecution'
, describedExecution_serviceMetadata
- A container object for the session details associated with a workflow.
$sel:loggingConfiguration:DescribedExecution'
, describedExecution_loggingConfiguration
- The IAM logging role associated with the execution.
$sel:executionRole:DescribedExecution'
, describedExecution_executionRole
- The IAM role associated with the execution.
DescribedSecurityPolicy
data DescribedSecurityPolicy Source #
Describes the properties of a security policy that was specified. For more information about security policies, see Working with security policies.
See: newDescribedSecurityPolicy
smart constructor.
DescribedSecurityPolicy' (Maybe Bool) (Maybe [Text]) (Maybe [Text]) (Maybe [Text]) (Maybe [Text]) Text |
Instances
newDescribedSecurityPolicy Source #
Create a value of DescribedSecurityPolicy
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:fips:DescribedSecurityPolicy'
, describedSecurityPolicy_fips
- Specifies whether this policy enables Federal Information Processing
Standards (FIPS).
$sel:sshMacs:DescribedSecurityPolicy'
, describedSecurityPolicy_sshMacs
- Specifies the enabled SSH message authentication code (MAC) encryption
algorithms in the security policy that is attached to the server.
$sel:sshKexs:DescribedSecurityPolicy'
, describedSecurityPolicy_sshKexs
- Specifies the enabled SSH key exchange (KEX) encryption algorithms in
the security policy that is attached to the server.
$sel:tlsCiphers:DescribedSecurityPolicy'
, describedSecurityPolicy_tlsCiphers
- Specifies the enabled Transport Layer Security (TLS) cipher encryption
algorithms in the security policy that is attached to the server.
$sel:sshCiphers:DescribedSecurityPolicy'
, describedSecurityPolicy_sshCiphers
- Specifies the enabled Secure Shell (SSH) cipher encryption algorithms in
the security policy that is attached to the server.
$sel:securityPolicyName:DescribedSecurityPolicy'
, describedSecurityPolicy_securityPolicyName
- Specifies the name of the security policy that is attached to the
server.
DescribedServer
data DescribedServer Source #
Describes the properties of a file transfer protocol-enabled server that was specified.
See: newDescribedServer
smart constructor.
DescribedServer' (Maybe ProtocolDetails) (Maybe Text) (Maybe State) (Maybe IdentityProviderType) (Maybe (NonEmpty Protocol)) (Maybe Text) (Maybe Domain) (Maybe EndpointType) (Maybe Text) (Maybe Text) (Maybe Int) (Maybe Text) (Maybe IdentityProviderDetails) (Maybe WorkflowDetails) (Maybe (NonEmpty Tag)) (Maybe EndpointDetails) Text |
Instances
Create a value of DescribedServer
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:protocolDetails:DescribedServer'
, describedServer_protocolDetails
- The protocol settings that are configured for your server.
Use the PassiveIp
parameter to indicate passive mode. Enter a single
dotted-quad IPv4 address, such as the external IP address of a firewall,
router, or load balancer.
$sel:loggingRole:DescribedServer'
, describedServer_loggingRole
- Specifies the Amazon Resource Name (ARN) of the Amazon Web Services
Identity and Access Management (IAM) role that allows a server to turn
on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When
set, user activity can be viewed in your CloudWatch logs.
$sel:state:DescribedServer'
, describedServer_state
- Specifies the condition of a server for the server that was described. A
value of ONLINE
indicates that the server can accept jobs and transfer
files. A State
value of OFFLINE
means that the server cannot perform
file transfer operations.
The states of STARTING
and STOPPING
indicate that the server is in
an intermediate state, either not fully able to respond, or not fully
offline. The values of START_FAILED
or STOP_FAILED
can indicate an
error condition.
$sel:identityProviderType:DescribedServer'
, describedServer_identityProviderType
- Specifies the mode of authentication for a server. The default value is
SERVICE_MANAGED
, which allows you to store and access user credentials
within the Amazon Web Services Transfer Family service.
Use AWS_DIRECTORY_SERVICE
to provide access to Active Directory groups
in Amazon Web Services Managed Active Directory or Microsoft Active
Directory in your on-premises environment or in Amazon Web Services
using AD Connectors. This option also requires you to provide a
Directory ID using the IdentityProviderDetails
parameter.
Use the API_GATEWAY
value to integrate with an identity provider of
your choosing. The API_GATEWAY
setting requires you to provide an API
Gateway endpoint URL to call for authentication using the
IdentityProviderDetails
parameter.
$sel:protocols:DescribedServer'
, describedServer_protocols
- Specifies the file transfer protocol or protocols over which your file
transfer protocol client can connect to your server's endpoint. The
available protocols are:
SFTP
(Secure Shell (SSH) File Transfer Protocol): File transfer over SSHFTPS
(File Transfer Protocol Secure): File transfer with TLS encryptionFTP
(File Transfer Protocol): Unencrypted file transfer
$sel:serverId:DescribedServer'
, describedServer_serverId
- Specifies the unique system-assigned identifier for a server that you
instantiate.
$sel:domain:DescribedServer'
, describedServer_domain
- Specifies the domain of the storage system that is used for file
transfers.
$sel:endpointType:DescribedServer'
, describedServer_endpointType
- Defines the type of endpoint that your server is connected to. If your
server is connected to a VPC endpoint, your server isn't accessible
over the public internet.
$sel:securityPolicyName:DescribedServer'
, describedServer_securityPolicyName
- Specifies the name of the security policy that is attached to the
server.
$sel:hostKeyFingerprint:DescribedServer'
, describedServer_hostKeyFingerprint
- Specifies the Base64-encoded SHA256 fingerprint of the server's host
key. This value is equivalent to the output of the
ssh-keygen -l -f my-new-server-key
command.
$sel:userCount:DescribedServer'
, describedServer_userCount
- Specifies the number of users that are assigned to a server you
specified with the ServerId
.
$sel:certificate:DescribedServer'
, describedServer_certificate
- Specifies the ARN of the Amazon Web ServicesCertificate Manager (ACM)
certificate. Required when Protocols
is set to FTPS
.
$sel:identityProviderDetails:DescribedServer'
, describedServer_identityProviderDetails
- Specifies information to call a customer-supplied authentication API.
This field is not populated when the IdentityProviderType
of a server
is AWS_DIRECTORY_SERVICE
or SERVICE_MANAGED
.
$sel:workflowDetails:DescribedServer'
, describedServer_workflowDetails
- Specifies the workflow ID for the workflow to assign and the execution
role used for executing the workflow.
$sel:tags:DescribedServer'
, describedServer_tags
- Specifies the key-value pairs that you can use to search for and group
servers that were assigned to the server that was described.
$sel:endpointDetails:DescribedServer'
, describedServer_endpointDetails
- The virtual private cloud (VPC) endpoint settings that are configured
for your server. When you host your endpoint within your VPC, you can
make it accessible only to resources within your VPC, or you can attach
Elastic IP addresses and make it accessible to clients over the
internet. Your VPC's default security groups are automatically assigned
to your endpoint.
$sel:arn:DescribedServer'
, describedServer_arn
- Specifies the unique Amazon Resource Name (ARN) of the server.
DescribedUser
data DescribedUser Source #
Describes the properties of a user that was specified.
See: newDescribedUser
smart constructor.
DescribedUser' (Maybe [SshPublicKey]) (Maybe HomeDirectoryType) (Maybe Text) (Maybe PosixProfile) (Maybe (NonEmpty HomeDirectoryMapEntry)) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe (NonEmpty Tag)) Text |
Instances
Create a value of DescribedUser
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:sshPublicKeys:DescribedUser'
, describedUser_sshPublicKeys
- Specifies the public key portion of the Secure Shell (SSH) keys stored
for the described user.
$sel:homeDirectoryType:DescribedUser'
, describedUser_homeDirectoryType
- The type of landing directory (folder) you want your users' home
directory to be when they log into the server. If you set it to PATH
,
the user will see the absolute Amazon S3 bucket or EFS paths as is in
their file transfer protocol clients. If you set it LOGICAL
, you need
to provide mappings in the HomeDirectoryMappings
for how you want to
make Amazon S3 or EFS paths visible to your users.
$sel:userName:DescribedUser'
, describedUser_userName
- Specifies the name of the user that was requested to be described. User
names are used for authentication purposes. This is the string that will
be used by your user when they log in to your server.
$sel:posixProfile:DescribedUser'
, describedUser_posixProfile
- Specifies the full POSIX identity, including user ID (Uid
), group ID
(Gid
), and any secondary groups IDs (SecondaryGids
), that controls
your users' access to your Amazon Elastic File System (Amazon EFS) file
systems. The POSIX permissions that are set on files and directories in
your file system determine the level of access your users get when
transferring files into and out of your Amazon EFS file systems.
$sel:homeDirectoryMappings:DescribedUser'
, describedUser_homeDirectoryMappings
- Logical directory mappings that specify what Amazon S3 or Amazon EFS
paths and keys should be visible to your user and how you want to make
them visible. You must specify the Entry
and Target
pair, where
Entry
shows how the path is made visible and Target
is the actual
Amazon S3 or Amazon EFS path. If you only specify a target, it is
displayed as is. You also must ensure that your Amazon Web Services
Identity and Access Management (IAM) role provides access to paths in
Target
. This value can only be set when HomeDirectoryType
is set to
LOGICAL.
In most cases, you can use this value instead of the session policy to
lock your user down to the designated home directory ("chroot
"). To
do this, you can set Entry
to '/' and set Target
to the
HomeDirectory parameter value.
$sel:role':DescribedUser'
, describedUser_role
- Specifies the Amazon Resource Name (ARN) of the IAM role that controls
your users' access to your Amazon S3 bucket or EFS file system. The
policies attached to this role determine the level of access that you
want to provide your users when transferring files into and out of your
Amazon S3 bucket or EFS file system. The IAM role should also contain a
trust relationship that allows the server to access your resources when
servicing your users' transfer requests.
$sel:policy:DescribedUser'
, describedUser_policy
- A session policy for your user so that you can use the same IAM role
across multiple users. This policy scopes down user access to portions
of their Amazon S3 bucket. Variables that you can use inside this policy
include ${Transfer:UserName}
, ${Transfer:HomeDirectory}
, and
${Transfer:HomeBucket}
.
$sel:homeDirectory:DescribedUser'
, describedUser_homeDirectory
- The landing directory (folder) for a user when they log in to the server
using the client.
A HomeDirectory
example is /bucket_name/home/mydirectory
.
$sel:tags:DescribedUser'
, describedUser_tags
- Specifies the key-value pairs for the user requested. Tag can be used to
search for and group users for a variety of purposes.
$sel:arn:DescribedUser'
, describedUser_arn
- Specifies the unique Amazon Resource Name (ARN) for the user that was
requested to be described.
DescribedWorkflow
data DescribedWorkflow Source #
Describes the properties of the specified workflow
See: newDescribedWorkflow
smart constructor.
DescribedWorkflow' (Maybe [WorkflowStep]) (Maybe [WorkflowStep]) (Maybe Text) (Maybe Text) (Maybe (NonEmpty Tag)) Text |
Instances
Create a value of DescribedWorkflow
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:onExceptionSteps:DescribedWorkflow'
, describedWorkflow_onExceptionSteps
- Specifies the steps (actions) to take if errors are encountered during
execution of the workflow.
$sel:steps:DescribedWorkflow'
, describedWorkflow_steps
- Specifies the details for the steps that are in the specified workflow.
$sel:workflowId:DescribedWorkflow'
, describedWorkflow_workflowId
- A unique identifier for the workflow.
$sel:description:DescribedWorkflow'
, describedWorkflow_description
- Specifies the text description for the workflow.
$sel:tags:DescribedWorkflow'
, describedWorkflow_tags
- Key-value pairs that can be used to group and search for workflows. Tags
are metadata attached to workflows for any purpose.
$sel:arn:DescribedWorkflow'
, describedWorkflow_arn
- Specifies the unique Amazon Resource Name (ARN) for the workflow.
EfsFileLocation
data EfsFileLocation Source #
Reserved for future use.
See: newEfsFileLocation
smart constructor.
Instances
newEfsFileLocation :: EfsFileLocation Source #
Create a value of EfsFileLocation
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:path:EfsFileLocation'
, efsFileLocation_path
- The pathname for the folder being used by a workflow.
$sel:fileSystemId:EfsFileLocation'
, efsFileLocation_fileSystemId
- The ID of the file system, assigned by Amazon EFS.
EndpointDetails
data EndpointDetails Source #
The virtual private cloud (VPC) endpoint settings that are configured
for your file transfer protocol-enabled server. With a VPC endpoint, you
can restrict access to your server and resources only within your VPC.
To control incoming internet traffic, invoke the UpdateServer
API and
attach an Elastic IP address to your server's endpoint.
After May 19, 2021, you won't be able to create a server using
EndpointType=VPC_ENDPOINT
in your Amazon Web Servicesaccount if your
account hasn't already done so before May 19, 2021. If you have already
created servers with EndpointType=VPC_ENDPOINT
in your Amazon Web
Servicesaccount on or before May 19, 2021, you will not be affected.
After this date, use EndpointType
=VPC
.
For more information, see https://docs.aws.amazon.com/transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint.
See: newEndpointDetails
smart constructor.
Instances
newEndpointDetails :: EndpointDetails Source #
Create a value of EndpointDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:securityGroupIds:EndpointDetails'
, endpointDetails_securityGroupIds
- A list of security groups IDs that are available to attach to your
server's endpoint.
This property can only be set when EndpointType
is set to VPC
.
You can edit the SecurityGroupIds
property in the
UpdateServer
API only if you are changing the EndpointType
from PUBLIC
or
VPC_ENDPOINT
to VPC
. To change security groups associated with your
server's VPC endpoint after creation, use the Amazon EC2
ModifyVpcEndpoint
API.
$sel:subnetIds:EndpointDetails'
, endpointDetails_subnetIds
- A list of subnet IDs that are required to host your server endpoint in
your VPC.
This property can only be set when EndpointType
is set to VPC
.
$sel:vpcId:EndpointDetails'
, endpointDetails_vpcId
- The VPC ID of the VPC in which a server's endpoint will be hosted.
This property can only be set when EndpointType
is set to VPC
.
$sel:addressAllocationIds:EndpointDetails'
, endpointDetails_addressAllocationIds
- A list of address allocation IDs that are required to attach an Elastic
IP address to your server's endpoint.
This property can only be set when EndpointType
is set to VPC
and it
is only valid in the UpdateServer
API.
$sel:vpcEndpointId:EndpointDetails'
, endpointDetails_vpcEndpointId
- The ID of the VPC endpoint.
This property can only be set when EndpointType
is set to
VPC_ENDPOINT
.
For more information, see https://docs.aws.amazon.com/transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint.
ExecutionError
data ExecutionError Source #
Specifies the error message and type, for an error that occurs during the execution of the workflow.
See: newExecutionError
smart constructor.
Instances
Create a value of ExecutionError
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:type':ExecutionError'
, executionError_type
- Specifies the error type: currently, the only valid value is
PERMISSION_DENIED
, which occurs if your policy does not contain the
correct permissions to complete one or more of the steps in the
workflow.
$sel:message:ExecutionError'
, executionError_message
- Specifies the descriptive message that corresponds to the ErrorType
.
ExecutionResults
data ExecutionResults Source #
Specifies the steps in the workflow, as well as the steps to execute in case of any errors during workflow execution.
See: newExecutionResults
smart constructor.
Instances
newExecutionResults :: ExecutionResults Source #
Create a value of ExecutionResults
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:onExceptionSteps:ExecutionResults'
, executionResults_onExceptionSteps
- Specifies the steps (actions) to take if errors are encountered during
execution of the workflow.
$sel:steps:ExecutionResults'
, executionResults_steps
- Specifies the details for the steps that are in the specified workflow.
ExecutionStepResult
data ExecutionStepResult Source #
Specifies the following details for the step: error (if any), outputs (if any), and the step type.
See: newExecutionStepResult
smart constructor.
Instances
newExecutionStepResult :: ExecutionStepResult Source #
Create a value of ExecutionStepResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:stepType:ExecutionStepResult'
, executionStepResult_stepType
- One of the available step types.
- Copy: copy the file to another location
- Custom: custom step with a lambda target
- Delete: delete the file
- Tag: add a tag to the file
$sel:error:ExecutionStepResult'
, executionStepResult_error
- Specifies the details for an error, if it occurred during execution of
the specified workfow step.
$sel:outputs:ExecutionStepResult'
, executionStepResult_outputs
- The values for the key/value pair applied as a tag to the file. Only
applicable if the step type is TAG
.
FileLocation
data FileLocation Source #
Specifies the Amazon S3 or EFS file details to be used in the step.
See: newFileLocation
smart constructor.
Instances
newFileLocation :: FileLocation Source #
Create a value of FileLocation
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:efsFileLocation:FileLocation'
, fileLocation_efsFileLocation
- Specifies the Amazon EFS ID and the path for the file being used.
$sel:s3FileLocation:FileLocation'
, fileLocation_s3FileLocation
- Specifies the S3 details for the file being used, such as bucket, Etag,
and so forth.
HomeDirectoryMapEntry
data HomeDirectoryMapEntry Source #
Represents an object that contains entries and targets for
HomeDirectoryMappings
.
The following is an Entry
and Target
pair example for chroot
.
[ { "Entry:": "/", "Target": "/bucket_name/home/mydirectory" } ]
If the target of a logical directory entry does not exist in Amazon S3
or EFS, the entry is ignored. As a workaround, you can use the Amazon S3
API or EFS API to create 0 byte objects as place holders for your
directory. If using the CLI, use the s3api
or efsapi
call instead of
s3
or efs
so you can use the put-object operation. For example, you
use the following:
aws s3api put-object --bucket bucketname --key path/to/folder/
.
Make sure that the end of the key name ends in a /
for it to be
considered a folder.
See: newHomeDirectoryMapEntry
smart constructor.
Instances
newHomeDirectoryMapEntry Source #
:: Text | |
-> Text | |
-> HomeDirectoryMapEntry |
Create a value of HomeDirectoryMapEntry
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:entry:HomeDirectoryMapEntry'
, homeDirectoryMapEntry_entry
- Represents an entry for HomeDirectoryMappings
.
$sel:target:HomeDirectoryMapEntry'
, homeDirectoryMapEntry_target
- Represents the map target that is used in a HomeDirectorymapEntry
.
IdentityProviderDetails
data IdentityProviderDetails Source #
Returns information related to the type of user authentication that is in use for a file transfer protocol-enabled server's users. A server can have only one method of authentication.
See: newIdentityProviderDetails
smart constructor.
Instances
newIdentityProviderDetails :: IdentityProviderDetails Source #
Create a value of IdentityProviderDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invocationRole:IdentityProviderDetails'
, identityProviderDetails_invocationRole
- Provides the type of InvocationRole
used to authenticate the user
account.
$sel:directoryId:IdentityProviderDetails'
, identityProviderDetails_directoryId
- The identifier of the Amazon Web ServicesDirectory Service directory
that you want to stop sharing.
$sel:url:IdentityProviderDetails'
, identityProviderDetails_url
- Provides the location of the service endpoint used to authenticate
users.
InputFileLocation
data InputFileLocation Source #
Specifies the location for the file being copied. Only applicable for the Copy type of workflow steps.
See: newInputFileLocation
smart constructor.
Instances
newInputFileLocation :: InputFileLocation Source #
Create a value of InputFileLocation
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:efsFileLocation:InputFileLocation'
, inputFileLocation_efsFileLocation
- Reserved for future use.
$sel:s3FileLocation:InputFileLocation'
, inputFileLocation_s3FileLocation
- Specifies the details for the S3 file being copied.
ListedAccess
data ListedAccess Source #
Lists the properties for one or more specified associated accesses.
See: newListedAccess
smart constructor.
ListedAccess' (Maybe HomeDirectoryType) (Maybe Text) (Maybe Text) (Maybe Text) |
Instances
newListedAccess :: ListedAccess Source #
Create a value of ListedAccess
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:homeDirectoryType:ListedAccess'
, listedAccess_homeDirectoryType
- The type of landing directory (folder) you want your users' home
directory to be when they log into the server. If you set it to PATH
,
the user will see the absolute Amazon S3 bucket or EFS paths as is in
their file transfer protocol clients. If you set it LOGICAL
, you need
to provide mappings in the HomeDirectoryMappings
for how you want to
make Amazon S3 or EFS paths visible to your users.
$sel:role':ListedAccess'
, listedAccess_role
- Specifies the Amazon Resource Name (ARN) of the IAM role that controls
your users' access to your Amazon S3 bucket or EFS file system. The
policies attached to this role determine the level of access that you
want to provide your users when transferring files into and out of your
Amazon S3 bucket or EFS file system. The IAM role should also contain a
trust relationship that allows the server to access your resources when
servicing your users' transfer requests.
$sel:externalId:ListedAccess'
, listedAccess_externalId
- A unique identifier that is required to identify specific groups within
your directory. The users of the group that you associate have access to
your Amazon S3 or Amazon EFS resources over the enabled protocols using
Amazon Web Services Transfer Family. If you know the group name, you can
view the SID values by running the following command using Windows
PowerShell.
Get-ADGroup -Filter {samAccountName -like "YourGroupName*"} -Properties * | Select SamAccountName,ObjectSid
In that command, replace YourGroupName with the name of your Active Directory group.
The regex used to validate this parameter is a string of characters consisting of uppercase and lowercase alphanumeric characters with no spaces. You can also include underscores or any of the following characters: =,.@:/-
$sel:homeDirectory:ListedAccess'
, listedAccess_homeDirectory
- The landing directory (folder) for a user when they log in to the server
using the client.
A HomeDirectory
example is /bucket_name/home/mydirectory
.
ListedExecution
data ListedExecution Source #
Returns properties of the execution that is specified.
See: newListedExecution
smart constructor.
Instances
newListedExecution :: ListedExecution Source #
Create a value of ListedExecution
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:ListedExecution'
, listedExecution_status
- The status is one of the execution. Can be in progress, completed,
exception encountered, or handling the exception.
$sel:executionId:ListedExecution'
, listedExecution_executionId
- A unique identifier for the execution of a workflow.
$sel:initialFileLocation:ListedExecution'
, listedExecution_initialFileLocation
- A structure that describes the Amazon S3 or EFS file location. This is
the file location when the execution begins: if the file is being
copied, this is the initial (as opposed to destination) file location.
$sel:serviceMetadata:ListedExecution'
, listedExecution_serviceMetadata
- A container object for the session details associated with a workflow.
ListedServer
data ListedServer Source #
Returns properties of a file transfer protocol-enabled server that was specified.
See: newListedServer
smart constructor.
ListedServer' (Maybe Text) (Maybe State) (Maybe IdentityProviderType) (Maybe Text) (Maybe Domain) (Maybe EndpointType) (Maybe Int) Text |
Instances
Create a value of ListedServer
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:loggingRole:ListedServer'
, listedServer_loggingRole
- Specifies the Amazon Resource Name (ARN) of the Amazon Web Services
Identity and Access Management (IAM) role that allows a server to turn
on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When
set, user activity can be viewed in your CloudWatch logs.
$sel:state:ListedServer'
, listedServer_state
- Specifies the condition of a server for the server that was described. A
value of ONLINE
indicates that the server can accept jobs and transfer
files. A State
value of OFFLINE
means that the server cannot perform
file transfer operations.
The states of STARTING
and STOPPING
indicate that the server is in
an intermediate state, either not fully able to respond, or not fully
offline. The values of START_FAILED
or STOP_FAILED
can indicate an
error condition.
$sel:identityProviderType:ListedServer'
, listedServer_identityProviderType
- Specifies the mode of authentication for a server. The default value is
SERVICE_MANAGED
, which allows you to store and access user credentials
within the Amazon Web Services Transfer Family service.
Use AWS_DIRECTORY_SERVICE
to provide access to Active Directory groups
in Amazon Web Services Managed Active Directory or Microsoft Active
Directory in your on-premises environment or in Amazon Web Services
using AD Connectors. This option also requires you to provide a
Directory ID using the IdentityProviderDetails
parameter.
Use the API_GATEWAY
value to integrate with an identity provider of
your choosing. The API_GATEWAY
setting requires you to provide an API
Gateway endpoint URL to call for authentication using the
IdentityProviderDetails
parameter.
$sel:serverId:ListedServer'
, listedServer_serverId
- Specifies the unique system assigned identifier for the servers that
were listed.
$sel:domain:ListedServer'
, listedServer_domain
- Specifies the domain of the storage system that is used for file
transfers.
$sel:endpointType:ListedServer'
, listedServer_endpointType
- Specifies the type of VPC endpoint that your server is connected to. If
your server is connected to a VPC endpoint, your server isn't
accessible over the public internet.
$sel:userCount:ListedServer'
, listedServer_userCount
- Specifies the number of users that are assigned to a server you
specified with the ServerId
.
$sel:arn:ListedServer'
, listedServer_arn
- Specifies the unique Amazon Resource Name (ARN) for a server to be
listed.
ListedUser
data ListedUser Source #
Returns properties of the user that you specify.
See: newListedUser
smart constructor.
Instances
Create a value of ListedUser
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:homeDirectoryType:ListedUser'
, listedUser_homeDirectoryType
- The type of landing directory (folder) you want your users' home
directory to be when they log into the server. If you set it to PATH
,
the user will see the absolute Amazon S3 bucket or EFS paths as is in
their file transfer protocol clients. If you set it LOGICAL
, you need
to provide mappings in the HomeDirectoryMappings
for how you want to
make Amazon S3 or EFS paths visible to your users.
$sel:userName:ListedUser'
, listedUser_userName
- Specifies the name of the user whose ARN was specified. User names are
used for authentication purposes.
$sel:role':ListedUser'
, listedUser_role
- Specifies the Amazon Resource Name (ARN) of the IAM role that controls
your users' access to your Amazon S3 bucket or EFS file system. The
policies attached to this role determine the level of access that you
want to provide your users when transferring files into and out of your
Amazon S3 bucket or EFS file system. The IAM role should also contain a
trust relationship that allows the server to access your resources when
servicing your users' transfer requests.
The IAM role that controls your users' access to your Amazon S3 bucket
for servers with Domain=S3
, or your EFS file system for servers with
Domain=EFS
.
The policies attached to this role determine the level of access you want to provide your users when transferring files into and out of your S3 buckets or EFS file systems.
$sel:sshPublicKeyCount:ListedUser'
, listedUser_sshPublicKeyCount
- Specifies the number of SSH public keys stored for the user you
specified.
$sel:homeDirectory:ListedUser'
, listedUser_homeDirectory
- The landing directory (folder) for a user when they log in to the server
using the client.
A HomeDirectory
example is /bucket_name/home/mydirectory
.
$sel:arn:ListedUser'
, listedUser_arn
- Provides the unique Amazon Resource Name (ARN) for the user that you
want to learn about.
ListedWorkflow
data ListedWorkflow Source #
Contains the ID, text description, and Amazon Resource Name (ARN) for the workflow.
See: newListedWorkflow
smart constructor.
Instances
newListedWorkflow :: ListedWorkflow Source #
Create a value of ListedWorkflow
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:ListedWorkflow'
, listedWorkflow_arn
- Specifies the unique Amazon Resource Name (ARN) for the workflow.
$sel:workflowId:ListedWorkflow'
, listedWorkflow_workflowId
- A unique identifier for the workflow.
$sel:description:ListedWorkflow'
, listedWorkflow_description
- Specifies the text description for the workflow.
LoggingConfiguration
data LoggingConfiguration Source #
Consists of the logging role and the log group name.
See: newLoggingConfiguration
smart constructor.
Instances
newLoggingConfiguration :: LoggingConfiguration Source #
Create a value of LoggingConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:loggingRole:LoggingConfiguration'
, loggingConfiguration_loggingRole
- Specifies the Amazon Resource Name (ARN) of the Amazon Web Services
Identity and Access Management (IAM) role that allows a server to turn
on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When
set, user activity can be viewed in your CloudWatch logs.
$sel:logGroupName:LoggingConfiguration'
, loggingConfiguration_logGroupName
- The name of the CloudWatch logging group for the Amazon Web Services
Transfer server to which this workflow belongs.
PosixProfile
data PosixProfile Source #
The full POSIX identity, including user ID (Uid
), group ID (Gid
),
and any secondary groups IDs (SecondaryGids
), that controls your
users' access to your Amazon EFS file systems. The POSIX permissions
that are set on files and directories in your file system determine the
level of access your users get when transferring files into and out of
your Amazon EFS file systems.
See: newPosixProfile
smart constructor.
Instances
Create a value of PosixProfile
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:secondaryGids:PosixProfile'
, posixProfile_secondaryGids
- The secondary POSIX group IDs used for all EFS operations by this user.
$sel:uid:PosixProfile'
, posixProfile_uid
- The POSIX user ID used for all EFS operations by this user.
$sel:gid:PosixProfile'
, posixProfile_gid
- The POSIX group ID used for all EFS operations by this user.
ProtocolDetails
data ProtocolDetails Source #
The protocol settings that are configured for your server.
This type is only valid in the UpdateServer
API.
See: newProtocolDetails
smart constructor.
Instances
newProtocolDetails :: ProtocolDetails Source #
Create a value of ProtocolDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:passiveIp:ProtocolDetails'
, protocolDetails_passiveIp
- Indicates passive mode, for FTP and FTPS protocols. Enter a single
dotted-quad IPv4 address, such as the external IP address of a firewall,
router, or load balancer. For example:
aws transfer update-server --protocol-details PassiveIp=0.0.0.0
Replace 0.0.0.0
in the example above with the actual IP address you
want to use.
If you change the PassiveIp
value, you must stop and then restart your
Transfer server for the change to take effect. For details on using
Passive IP (PASV) in a NAT environment, see
Configuring your FTPS server behind a firewall or NAT with Amazon Web Services Transfer Family.
S3FileLocation
data S3FileLocation Source #
Specifies the details for the file location for the file being used in the workflow. Only applicable if you are using S3 storage.
See: newS3FileLocation
smart constructor.
Instances
newS3FileLocation :: S3FileLocation Source #
Create a value of S3FileLocation
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:versionId:S3FileLocation'
, s3FileLocation_versionId
- Specifies the file version.
$sel:etag:S3FileLocation'
, s3FileLocation_etag
- The entity tag is a hash of the object. The ETag reflects changes only
to the contents of an object, not its metadata.
$sel:bucket:S3FileLocation'
, s3FileLocation_bucket
- Specifies the S3 bucket that contains the file being used.
$sel:key:S3FileLocation'
, s3FileLocation_key
- The name assigned to the file when it was created in S3. You use the
object key to retrieve the object.
S3InputFileLocation
data S3InputFileLocation Source #
Specifies the customer input S3 file location. If it is used inside
copyStepDetails.DestinationFileLocation
, it should be the S3 copy
destination.
You need to provide the bucket and key. The key can represent either a path or a file. This is determined by whether or not you end the key value with the forward slash (/) character. If the final character is "/", then your file is copied to the folder, and its name does not change. If, rather, the final character is alphanumeric, your uploaded file is renamed to the path value. In this case, if a file with that name already exists, it is overwritten.
For example, if your path is shared-files/bob/
, your uploaded files
are copied to the shared-files/bob/
, folder. If your path is
shared-files/today
, each uploaded file is copied to the
shared-files
folder and named today
: each upload overwrites the
previous version of the bob file.
See: newS3InputFileLocation
smart constructor.
Instances
newS3InputFileLocation :: S3InputFileLocation Source #
Create a value of S3InputFileLocation
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:bucket:S3InputFileLocation'
, s3InputFileLocation_bucket
- Specifies the S3 bucket for the customer input file.
$sel:key:S3InputFileLocation'
, s3InputFileLocation_key
- The name assigned to the file when it was created in S3. You use the
object key to retrieve the object.
S3Tag
Specifies the key-value pair that are assigned to a file during the execution of a Tagging step.
See: newS3Tag
smart constructor.
Instances
Eq S3Tag Source # | |
Read S3Tag Source # | |
Show S3Tag Source # | |
Generic S3Tag Source # | |
NFData S3Tag Source # | |
Defined in Amazonka.Transfer.Types.S3Tag | |
Hashable S3Tag Source # | |
Defined in Amazonka.Transfer.Types.S3Tag | |
ToJSON S3Tag Source # | |
Defined in Amazonka.Transfer.Types.S3Tag | |
FromJSON S3Tag Source # | |
type Rep S3Tag Source # | |
Defined in Amazonka.Transfer.Types.S3Tag type Rep S3Tag = D1 ('MetaData "S3Tag" "Amazonka.Transfer.Types.S3Tag" "libZSservicesZSamazonka-transferZSamazonka-transfer" 'False) (C1 ('MetaCons "S3Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "key") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "value") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))) |
Create a value of S3Tag
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:key:S3Tag'
, s3Tag_key
- The name assigned to the tag that you create.
$sel:value:S3Tag'
, s3Tag_value
- The value that corresponds to the key.
ServiceMetadata
data ServiceMetadata Source #
A container object for the session details associated with a workflow.
See: newServiceMetadata
smart constructor.
Instances
Create a value of ServiceMetadata
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:userDetails:ServiceMetadata'
, serviceMetadata_userDetails
- The Server ID (ServerId
), Session ID (SessionId
) and user
(UserName
) make up the UserDetails
.
SshPublicKey
data SshPublicKey Source #
Provides information about the public Secure Shell (SSH) key that is
associated with a user account for the specific file transfer
protocol-enabled server (as identified by ServerId
). The information
returned includes the date the key was imported, the public key
contents, and the public key ID. A user can store more than one SSH
public key associated with their user name on a specific server.
See: newSshPublicKey
smart constructor.
Instances
:: UTCTime | |
-> Text | |
-> Text | |
-> SshPublicKey |
Create a value of SshPublicKey
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:dateImported:SshPublicKey'
, sshPublicKey_dateImported
- Specifies the date that the public key was added to the user account.
$sel:sshPublicKeyBody:SshPublicKey'
, sshPublicKey_sshPublicKeyBody
- Specifies the content of the SSH public key as specified by the
PublicKeyId
.
$sel:sshPublicKeyId:SshPublicKey'
, sshPublicKey_sshPublicKeyId
- Specifies the SshPublicKeyId
parameter contains the identifier of the
public key.
Tag
Creates a key-value pair for a specific resource. Tags are metadata that
you can use to search for and group a resource for various purposes. You
can apply tags to servers, users, and roles. A tag key can take more
than one value. For example, to group servers for accounting purposes,
you might create a tag called Group
and assign the values Research
and Accounting
to that group.
See: newTag
smart constructor.
Instances
Eq Tag Source # | |
Read Tag Source # | |
Show Tag Source # | |
Generic Tag Source # | |
NFData Tag Source # | |
Defined in Amazonka.Transfer.Types.Tag | |
Hashable Tag Source # | |
Defined in Amazonka.Transfer.Types.Tag | |
ToJSON Tag Source # | |
Defined in Amazonka.Transfer.Types.Tag | |
FromJSON Tag Source # | |
type Rep Tag Source # | |
Defined in Amazonka.Transfer.Types.Tag type Rep Tag = D1 ('MetaData "Tag" "Amazonka.Transfer.Types.Tag" "libZSservicesZSamazonka-transferZSamazonka-transfer" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "key") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "value") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))) |
Create a value of Tag
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:key:Tag'
, tag_key
- The name assigned to the tag that you create.
$sel:value:Tag'
, tag_value
- Contains one or more values that you assigned to the key name you
create.
TagStepDetails
data TagStepDetails Source #
Each step type has its own StepDetails
structure.
The key/value pairs used to tag a file during the execution of a workflow step.
See: newTagStepDetails
smart constructor.
Instances
newTagStepDetails :: TagStepDetails Source #
Create a value of TagStepDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:name:TagStepDetails'
, tagStepDetails_name
- The name of the step, used as an identifier.
$sel:tags:TagStepDetails'
, tagStepDetails_tags
- Array that contains from 1 to 10 key/value pairs.
UserDetails
data UserDetails Source #
Specifies the user name, server ID, and session ID for a workflow.
See: newUserDetails
smart constructor.
Instances
Create a value of UserDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:sessionId:UserDetails'
, userDetails_sessionId
- The system-assigned unique identifier for a session that corresponds to
the workflow.
$sel:userName:UserDetails'
, userDetails_userName
- A unique string that identifies a user account associated with a server.
$sel:serverId:UserDetails'
, userDetails_serverId
- The system-assigned unique identifier for a Transfer server instance.
WorkflowDetail
data WorkflowDetail Source #
Specifies the workflow ID for the workflow to assign and the execution role used for executing the workflow.
See: newWorkflowDetail
smart constructor.
Instances
Create a value of WorkflowDetail
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:workflowId:WorkflowDetail'
, workflowDetail_workflowId
- A unique identifier for the workflow.
$sel:executionRole:WorkflowDetail'
, workflowDetail_executionRole
- Includes the necessary permissions for S3, EFS, and Lambda operations
that Transfer can assume, so that all workflow steps can operate on the
required resources
WorkflowDetails
data WorkflowDetails Source #
Container for the WorkflowDetail
data type. It is used by actions that
trigger a workflow to begin execution.
See: newWorkflowDetails
smart constructor.
Instances
newWorkflowDetails :: WorkflowDetails Source #
Create a value of WorkflowDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:onUpload:WorkflowDetails'
, workflowDetails_onUpload
- A trigger that starts a workflow: the workflow begins to execute after a
file is uploaded.
WorkflowStep
data WorkflowStep Source #
The basic building block of a workflow.
See: newWorkflowStep
smart constructor.
WorkflowStep' (Maybe TagStepDetails) (Maybe DeleteStepDetails) (Maybe CopyStepDetails) (Maybe WorkflowStepType) (Maybe CustomStepDetails) |
Instances
newWorkflowStep :: WorkflowStep Source #
Create a value of WorkflowStep
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:tagStepDetails:WorkflowStep'
, workflowStep_tagStepDetails
- Details for a step that creates one or more tags.
You specify one or more tags: each tag contains a key/value pair.
$sel:deleteStepDetails:WorkflowStep'
, workflowStep_deleteStepDetails
- Details for a step that deletes the file.
$sel:copyStepDetails:WorkflowStep'
, workflowStep_copyStepDetails
- Details for a step that performs a file copy.
Consists of the following values:
- A description
- An S3 location for the destination of the file copy.
- A flag that indicates whether or not to overwrite an existing file
of the same name. The default is
FALSE
.
$sel:type':WorkflowStep'
, workflowStep_type
- Currently, the following step types are supported.
- Copy: copy the file to another location
- Custom: custom step with a lambda target
- Delete: delete the file
- Tag: add a tag to the file
$sel:customStepDetails:WorkflowStep'
, workflowStep_customStepDetails
- Details for a step that invokes a lambda function.
Consists of the lambda function name, target, and timeout (in seconds).