Copyright	(c) 2013-2023 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	Safe-Inferred
Language	Haskell2010

Amazonka.IAM.PutRolePermissionsBoundary

Contents

Creating a Request
Request Lenses
Destructuring the Response

Description

Adds or updates the policy that is specified as the IAM role's permissions boundary. You can use an Amazon Web Services managed policy or a customer managed policy to set the boundary for a role. Use the boundary to control the maximum permissions that the role can have. Setting a permissions boundary is an advanced feature that can affect the permissions for the role.

You cannot set the boundary for a service-linked role.

Policies used as permissions boundaries do not provide permissions. You must also attach a permissions policy to the role. To learn how the effective permissions for a role are evaluated, see IAM JSON policy evaluation logic in the IAM User Guide.

Creating a Request

data PutRolePermissionsBoundary Source #

See: newPutRolePermissionsBoundary smart constructor.

Constructors

PutRolePermissionsBoundary'
Fields roleName :: Text The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary. permissionsBoundary :: Text The ARN of the policy that is used to set the permissions boundary for the role.

Instances

Instances details

ToHeaders PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods toHeaders :: PutRolePermissionsBoundary -> [Header] #
ToPath PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods toPath :: PutRolePermissionsBoundary -> ByteString #
ToQuery PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods toQuery :: PutRolePermissionsBoundary -> QueryString #
AWSRequest PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Associated Types type AWSResponse PutRolePermissionsBoundary # Methods request :: (Service -> Service) -> PutRolePermissionsBoundary -> Request PutRolePermissionsBoundary # response :: MonadResource m => (ByteStringLazy -> IO ByteStringLazy) -> Service -> Proxy PutRolePermissionsBoundary -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse PutRolePermissionsBoundary))) #
Generic PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Associated Types type Rep PutRolePermissionsBoundary :: Type -> Type # Methods from :: PutRolePermissionsBoundary -> Rep PutRolePermissionsBoundary x # to :: Rep PutRolePermissionsBoundary x -> PutRolePermissionsBoundary #
Read PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods readsPrec :: Int -> ReadS PutRolePermissionsBoundary # readList :: ReadS [PutRolePermissionsBoundary] # readPrec :: ReadPrec PutRolePermissionsBoundary # readListPrec :: ReadPrec [PutRolePermissionsBoundary] #
Show PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods showsPrec :: Int -> PutRolePermissionsBoundary -> ShowS # show :: PutRolePermissionsBoundary -> String # showList :: [PutRolePermissionsBoundary] -> ShowS #
NFData PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods rnf :: PutRolePermissionsBoundary -> () #
Eq PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods (==) :: PutRolePermissionsBoundary -> PutRolePermissionsBoundary -> Bool # (/=) :: PutRolePermissionsBoundary -> PutRolePermissionsBoundary -> Bool #
Hashable PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods hashWithSalt :: Int -> PutRolePermissionsBoundary -> Int # hash :: PutRolePermissionsBoundary -> Int #
type AWSResponse PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary type AWSResponse PutRolePermissionsBoundary = PutRolePermissionsBoundaryResponse
type Rep PutRolePermissionsBoundary Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary type Rep PutRolePermissionsBoundary = D1 ('MetaData "PutRolePermissionsBoundary" "Amazonka.IAM.PutRolePermissionsBoundary" "amazonka-iam-2.0-5DxkArXx9sD3CCYYGFyGET" 'False) (C1 ('MetaCons "PutRolePermissionsBoundary'" 'PrefixI 'True) (S1 ('MetaSel ('Just "roleName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "permissionsBoundary") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))

newPutRolePermissionsBoundary Source #

Arguments

:: Text	`PutRolePermissionsBoundary`
-> Text	`PutRolePermissionsBoundary`
-> PutRolePermissionsBoundary

Create a value of PutRolePermissionsBoundary with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

PutRolePermissionsBoundary, putRolePermissionsBoundary_roleName - The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary.

PutRolePermissionsBoundary, putRolePermissionsBoundary_permissionsBoundary - The ARN of the policy that is used to set the permissions boundary for the role.

Request Lenses

putRolePermissionsBoundary_roleName :: Lens' PutRolePermissionsBoundary Text Source #

The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary.

putRolePermissionsBoundary_permissionsBoundary :: Lens' PutRolePermissionsBoundary Text Source #

The ARN of the policy that is used to set the permissions boundary for the role.

Destructuring the Response

data PutRolePermissionsBoundaryResponse Source #

See: newPutRolePermissionsBoundaryResponse smart constructor.

Constructors

PutRolePermissionsBoundaryResponse'

Instances

Instances details

Generic PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Associated Types type Rep PutRolePermissionsBoundaryResponse :: Type -> Type # Methods from :: PutRolePermissionsBoundaryResponse -> Rep PutRolePermissionsBoundaryResponse x # to :: Rep PutRolePermissionsBoundaryResponse x -> PutRolePermissionsBoundaryResponse #
Read PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods readsPrec :: Int -> ReadS PutRolePermissionsBoundaryResponse # readList :: ReadS [PutRolePermissionsBoundaryResponse] # readPrec :: ReadPrec PutRolePermissionsBoundaryResponse # readListPrec :: ReadPrec [PutRolePermissionsBoundaryResponse] #
Show PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods showsPrec :: Int -> PutRolePermissionsBoundaryResponse -> ShowS # show :: PutRolePermissionsBoundaryResponse -> String # showList :: [PutRolePermissionsBoundaryResponse] -> ShowS #
NFData PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods rnf :: PutRolePermissionsBoundaryResponse -> () #
Eq PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary Methods (==) :: PutRolePermissionsBoundaryResponse -> PutRolePermissionsBoundaryResponse -> Bool # (/=) :: PutRolePermissionsBoundaryResponse -> PutRolePermissionsBoundaryResponse -> Bool #
type Rep PutRolePermissionsBoundaryResponse Source #
Instance details Defined in Amazonka.IAM.PutRolePermissionsBoundary type Rep PutRolePermissionsBoundaryResponse = D1 ('MetaData "PutRolePermissionsBoundaryResponse" "Amazonka.IAM.PutRolePermissionsBoundary" "amazonka-iam-2.0-5DxkArXx9sD3CCYYGFyGET" 'False) (C1 ('MetaCons "PutRolePermissionsBoundaryResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newPutRolePermissionsBoundaryResponse :: PutRolePermissionsBoundaryResponse Source #

Create a value of PutRolePermissionsBoundaryResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.