amazonka-sso-admin-2.0: Amazon Single Sign-On Admin SDK.
Copyright(c) 2013-2023 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellSafe-Inferred
LanguageHaskell2010

Amazonka.SSOAdmin.Lens

Contents

Description

 
Synopsis

Operations

AttachCustomerManagedPolicyReferenceToPermissionSet

attachCustomerManagedPolicyReferenceToPermissionSet_instanceArn :: Lens' AttachCustomerManagedPolicyReferenceToPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

attachCustomerManagedPolicyReferenceToPermissionSet_customerManagedPolicyReference :: Lens' AttachCustomerManagedPolicyReferenceToPermissionSet CustomerManagedPolicyReference Source #

Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.

AttachManagedPolicyToPermissionSet

attachManagedPolicyToPermissionSet_instanceArn :: Lens' AttachManagedPolicyToPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

attachManagedPolicyToPermissionSet_permissionSetArn :: Lens' AttachManagedPolicyToPermissionSet Text Source #

The ARN of the PermissionSet that the managed policy should be attached to.

attachManagedPolicyToPermissionSet_managedPolicyArn :: Lens' AttachManagedPolicyToPermissionSet Text Source #

The AWS managed policy ARN to be attached to a permission set.

CreateAccountAssignment

createAccountAssignment_instanceArn :: Lens' CreateAccountAssignment Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

createAccountAssignment_targetId :: Lens' CreateAccountAssignment Text Source #

TargetID is an AWS account identifier, typically a 10-12 digit string (For example, 123456789012).

createAccountAssignment_targetType :: Lens' CreateAccountAssignment TargetType Source #

The entity type for which the assignment will be created.

createAccountAssignment_permissionSetArn :: Lens' CreateAccountAssignment Text Source #

The ARN of the permission set that the admin wants to grant the principal access to.

createAccountAssignment_principalType :: Lens' CreateAccountAssignment PrincipalType Source #

The entity type for which the assignment will be created.

createAccountAssignment_principalId :: Lens' CreateAccountAssignment Text Source #

An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.

CreateInstanceAccessControlAttributeConfiguration

createInstanceAccessControlAttributeConfiguration_instanceArn :: Lens' CreateInstanceAccessControlAttributeConfiguration Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

createInstanceAccessControlAttributeConfiguration_instanceAccessControlAttributeConfiguration :: Lens' CreateInstanceAccessControlAttributeConfiguration InstanceAccessControlAttributeConfiguration Source #

Specifies the IAM Identity Center identity store attributes to add to your ABAC configuration. When using an external identity provider as an identity source, you can pass attributes through the SAML assertion. Doing so provides an alternative to configuring attributes from the IAM Identity Center identity store. If a SAML assertion passes any of these attributes, IAM Identity Center will replace the attribute value with the value from the IAM Identity Center identity store.

CreatePermissionSet

createPermissionSet_description :: Lens' CreatePermissionSet (Maybe Text) Source #

The description of the PermissionSet.

createPermissionSet_relayState :: Lens' CreatePermissionSet (Maybe Text) Source #

Used to redirect users within the application during the federation authentication process.

createPermissionSet_sessionDuration :: Lens' CreatePermissionSet (Maybe Text) Source #

The length of time that the application user sessions are valid in the ISO-8601 standard.

createPermissionSet_tags :: Lens' CreatePermissionSet (Maybe [Tag]) Source #

The tags to attach to the new PermissionSet.

createPermissionSet_instanceArn :: Lens' CreatePermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

DeleteAccountAssignment

deleteAccountAssignment_instanceArn :: Lens' DeleteAccountAssignment Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

deleteAccountAssignment_targetId :: Lens' DeleteAccountAssignment Text Source #

TargetID is an AWS account identifier, typically a 10-12 digit string (For example, 123456789012).

deleteAccountAssignment_targetType :: Lens' DeleteAccountAssignment TargetType Source #

The entity type for which the assignment will be deleted.

deleteAccountAssignment_permissionSetArn :: Lens' DeleteAccountAssignment Text Source #

The ARN of the permission set that will be used to remove access.

deleteAccountAssignment_principalType :: Lens' DeleteAccountAssignment PrincipalType Source #

The entity type for which the assignment will be deleted.

deleteAccountAssignment_principalId :: Lens' DeleteAccountAssignment Text Source #

An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.

DeleteInlinePolicyFromPermissionSet

deleteInlinePolicyFromPermissionSet_instanceArn :: Lens' DeleteInlinePolicyFromPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

deleteInlinePolicyFromPermissionSet_permissionSetArn :: Lens' DeleteInlinePolicyFromPermissionSet Text Source #

The ARN of the permission set that will be used to remove access.

DeleteInstanceAccessControlAttributeConfiguration

deleteInstanceAccessControlAttributeConfiguration_instanceArn :: Lens' DeleteInstanceAccessControlAttributeConfiguration Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

DeletePermissionSet

deletePermissionSet_instanceArn :: Lens' DeletePermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

deletePermissionSet_permissionSetArn :: Lens' DeletePermissionSet Text Source #

The ARN of the permission set that should be deleted.

DeletePermissionsBoundaryFromPermissionSet

deletePermissionsBoundaryFromPermissionSet_instanceArn :: Lens' DeletePermissionsBoundaryFromPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

DescribeAccountAssignmentCreationStatus

describeAccountAssignmentCreationStatus_instanceArn :: Lens' DescribeAccountAssignmentCreationStatus Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

DescribeAccountAssignmentDeletionStatus

describeAccountAssignmentDeletionStatus_instanceArn :: Lens' DescribeAccountAssignmentDeletionStatus Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

DescribeInstanceAccessControlAttributeConfiguration

describeInstanceAccessControlAttributeConfiguration_instanceArn :: Lens' DescribeInstanceAccessControlAttributeConfiguration Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

DescribePermissionSet

describePermissionSet_instanceArn :: Lens' DescribePermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

DescribePermissionSetProvisioningStatus

describePermissionSetProvisioningStatus_instanceArn :: Lens' DescribePermissionSetProvisioningStatus Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

describePermissionSetProvisioningStatus_provisionPermissionSetRequestId :: Lens' DescribePermissionSetProvisioningStatus Text Source #

The identifier that is provided by the ProvisionPermissionSet call to retrieve the current status of the provisioning workflow.

DetachCustomerManagedPolicyReferenceFromPermissionSet

detachCustomerManagedPolicyReferenceFromPermissionSet_instanceArn :: Lens' DetachCustomerManagedPolicyReferenceFromPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

detachCustomerManagedPolicyReferenceFromPermissionSet_customerManagedPolicyReference :: Lens' DetachCustomerManagedPolicyReferenceFromPermissionSet CustomerManagedPolicyReference Source #

Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.

DetachManagedPolicyFromPermissionSet

detachManagedPolicyFromPermissionSet_instanceArn :: Lens' DetachManagedPolicyFromPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

detachManagedPolicyFromPermissionSet_permissionSetArn :: Lens' DetachManagedPolicyFromPermissionSet Text Source #

The ARN of the PermissionSet from which the policy should be detached.

detachManagedPolicyFromPermissionSet_managedPolicyArn :: Lens' DetachManagedPolicyFromPermissionSet Text Source #

The AWS managed policy ARN to be detached from a permission set.

GetInlinePolicyForPermissionSet

getInlinePolicyForPermissionSet_instanceArn :: Lens' GetInlinePolicyForPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

GetPermissionsBoundaryForPermissionSet

getPermissionsBoundaryForPermissionSet_instanceArn :: Lens' GetPermissionsBoundaryForPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

ListAccountAssignmentCreationStatus

listAccountAssignmentCreationStatus_maxResults :: Lens' ListAccountAssignmentCreationStatus (Maybe Natural) Source #

The maximum number of results to display for the assignment.

listAccountAssignmentCreationStatus_nextToken :: Lens' ListAccountAssignmentCreationStatus (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listAccountAssignmentCreationStatus_instanceArn :: Lens' ListAccountAssignmentCreationStatus Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listAccountAssignmentCreationStatusResponse_nextToken :: Lens' ListAccountAssignmentCreationStatusResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListAccountAssignmentDeletionStatus

listAccountAssignmentDeletionStatus_maxResults :: Lens' ListAccountAssignmentDeletionStatus (Maybe Natural) Source #

The maximum number of results to display for the assignment.

listAccountAssignmentDeletionStatus_nextToken :: Lens' ListAccountAssignmentDeletionStatus (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listAccountAssignmentDeletionStatus_instanceArn :: Lens' ListAccountAssignmentDeletionStatus Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listAccountAssignmentDeletionStatusResponse_nextToken :: Lens' ListAccountAssignmentDeletionStatusResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListAccountAssignments

listAccountAssignments_maxResults :: Lens' ListAccountAssignments (Maybe Natural) Source #

The maximum number of results to display for the assignment.

listAccountAssignments_nextToken :: Lens' ListAccountAssignments (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listAccountAssignments_instanceArn :: Lens' ListAccountAssignments Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listAccountAssignments_accountId :: Lens' ListAccountAssignments Text Source #

The identifier of the AWS account from which to list the assignments.

listAccountAssignments_permissionSetArn :: Lens' ListAccountAssignments Text Source #

The ARN of the permission set from which to list assignments.

listAccountAssignmentsResponse_accountAssignments :: Lens' ListAccountAssignmentsResponse (Maybe [AccountAssignment]) Source #

The list of assignments that match the input AWS account and permission set.

listAccountAssignmentsResponse_nextToken :: Lens' ListAccountAssignmentsResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListAccountsForProvisionedPermissionSet

listAccountsForProvisionedPermissionSet_nextToken :: Lens' ListAccountsForProvisionedPermissionSet (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listAccountsForProvisionedPermissionSet_instanceArn :: Lens' ListAccountsForProvisionedPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listAccountsForProvisionedPermissionSet_permissionSetArn :: Lens' ListAccountsForProvisionedPermissionSet Text Source #

The ARN of the PermissionSet from which the associated AWS accounts will be listed.

listAccountsForProvisionedPermissionSetResponse_nextToken :: Lens' ListAccountsForProvisionedPermissionSetResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListCustomerManagedPolicyReferencesInPermissionSet

listCustomerManagedPolicyReferencesInPermissionSet_nextToken :: Lens' ListCustomerManagedPolicyReferencesInPermissionSet (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listCustomerManagedPolicyReferencesInPermissionSet_instanceArn :: Lens' ListCustomerManagedPolicyReferencesInPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

listCustomerManagedPolicyReferencesInPermissionSetResponse_nextToken :: Lens' ListCustomerManagedPolicyReferencesInPermissionSetResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListInstances

listInstances_maxResults :: Lens' ListInstances (Maybe Natural) Source #

The maximum number of results to display for the instance.

listInstances_nextToken :: Lens' ListInstances (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listInstancesResponse_instances :: Lens' ListInstancesResponse (Maybe [InstanceMetadata]) Source #

Lists the IAM Identity Center instances that the caller has access to.

listInstancesResponse_nextToken :: Lens' ListInstancesResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListManagedPoliciesInPermissionSet

listManagedPoliciesInPermissionSet_maxResults :: Lens' ListManagedPoliciesInPermissionSet (Maybe Natural) Source #

The maximum number of results to display for the PermissionSet.

listManagedPoliciesInPermissionSet_nextToken :: Lens' ListManagedPoliciesInPermissionSet (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listManagedPoliciesInPermissionSet_instanceArn :: Lens' ListManagedPoliciesInPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listManagedPoliciesInPermissionSet_permissionSetArn :: Lens' ListManagedPoliciesInPermissionSet Text Source #

The ARN of the PermissionSet whose managed policies will be listed.

listManagedPoliciesInPermissionSetResponse_nextToken :: Lens' ListManagedPoliciesInPermissionSetResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListPermissionSetProvisioningStatus

listPermissionSetProvisioningStatus_maxResults :: Lens' ListPermissionSetProvisioningStatus (Maybe Natural) Source #

The maximum number of results to display for the assignment.

listPermissionSetProvisioningStatus_nextToken :: Lens' ListPermissionSetProvisioningStatus (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listPermissionSetProvisioningStatus_instanceArn :: Lens' ListPermissionSetProvisioningStatus Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listPermissionSetProvisioningStatusResponse_nextToken :: Lens' ListPermissionSetProvisioningStatusResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListPermissionSets

listPermissionSets_maxResults :: Lens' ListPermissionSets (Maybe Natural) Source #

The maximum number of results to display for the assignment.

listPermissionSets_nextToken :: Lens' ListPermissionSets (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listPermissionSets_instanceArn :: Lens' ListPermissionSets Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listPermissionSetsResponse_nextToken :: Lens' ListPermissionSetsResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listPermissionSetsResponse_permissionSets :: Lens' ListPermissionSetsResponse (Maybe [Text]) Source #

Defines the level of access on an AWS account.

ListPermissionSetsProvisionedToAccount

listPermissionSetsProvisionedToAccount_nextToken :: Lens' ListPermissionSetsProvisionedToAccount (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listPermissionSetsProvisionedToAccount_instanceArn :: Lens' ListPermissionSetsProvisionedToAccount Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listPermissionSetsProvisionedToAccount_accountId :: Lens' ListPermissionSetsProvisionedToAccount Text Source #

The identifier of the AWS account from which to list the assignments.

listPermissionSetsProvisionedToAccountResponse_nextToken :: Lens' ListPermissionSetsProvisionedToAccountResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

ListTagsForResource

listTagsForResource_nextToken :: Lens' ListTagsForResource (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listTagsForResource_instanceArn :: Lens' ListTagsForResource Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

listTagsForResource_resourceArn :: Lens' ListTagsForResource Text Source #

The ARN of the resource with the tags to be listed.

listTagsForResourceResponse_nextToken :: Lens' ListTagsForResourceResponse (Maybe Text) Source #

The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.

listTagsForResourceResponse_tags :: Lens' ListTagsForResourceResponse (Maybe [Tag]) Source #

A set of key-value pairs that are used to manage the resource.

ProvisionPermissionSet

provisionPermissionSet_targetId :: Lens' ProvisionPermissionSet (Maybe Text) Source #

TargetID is an AWS account identifier, typically a 10-12 digit string (For example, 123456789012).

provisionPermissionSet_instanceArn :: Lens' ProvisionPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

provisionPermissionSet_targetType :: Lens' ProvisionPermissionSet ProvisionTargetType Source #

The entity type for which the assignment will be created.

PutInlinePolicyToPermissionSet

putInlinePolicyToPermissionSet_instanceArn :: Lens' PutInlinePolicyToPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

PutPermissionsBoundaryToPermissionSet

putPermissionsBoundaryToPermissionSet_instanceArn :: Lens' PutPermissionsBoundaryToPermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

TagResource

tagResource_instanceArn :: Lens' TagResource Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

tagResource_resourceArn :: Lens' TagResource Text Source #

The ARN of the resource with the tags to be listed.

tagResource_tags :: Lens' TagResource [Tag] Source #

A set of key-value pairs that are used to manage the resource.

UntagResource

untagResource_instanceArn :: Lens' UntagResource Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

untagResource_resourceArn :: Lens' UntagResource Text Source #

The ARN of the resource with the tags to be listed.

untagResource_tagKeys :: Lens' UntagResource (NonEmpty Text) Source #

The keys of tags that are attached to the resource.

UpdateInstanceAccessControlAttributeConfiguration

updateInstanceAccessControlAttributeConfiguration_instanceArn :: Lens' UpdateInstanceAccessControlAttributeConfiguration Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed.

UpdatePermissionSet

updatePermissionSet_description :: Lens' UpdatePermissionSet (Maybe Text) Source #

The description of the PermissionSet.

updatePermissionSet_relayState :: Lens' UpdatePermissionSet (Maybe Text) Source #

Used to redirect users within the application during the federation authentication process.

updatePermissionSet_sessionDuration :: Lens' UpdatePermissionSet (Maybe Text) Source #

The length of time that the application user sessions are valid for in the ISO-8601 standard.

updatePermissionSet_instanceArn :: Lens' UpdatePermissionSet Text Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

Types

AccessControlAttribute

accessControlAttribute_key :: Lens' AccessControlAttribute Text Source #

The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in IAM Identity Center.

accessControlAttribute_value :: Lens' AccessControlAttribute AccessControlAttributeValue Source #

The value used for mapping a specified attribute to an identity source.

AccessControlAttributeValue

accessControlAttributeValue_source :: Lens' AccessControlAttributeValue (NonEmpty Text) Source #

The identity source to use when mapping a specified attribute to IAM Identity Center.

AccountAssignment

accountAssignment_accountId :: Lens' AccountAssignment (Maybe Text) Source #

The identifier of the AWS account.

accountAssignment_permissionSetArn :: Lens' AccountAssignment (Maybe Text) Source #

The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

accountAssignment_principalId :: Lens' AccountAssignment (Maybe Text) Source #

An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.

accountAssignment_principalType :: Lens' AccountAssignment (Maybe PrincipalType) Source #

The entity type for which the assignment will be created.

AccountAssignmentOperationStatus

accountAssignmentOperationStatus_failureReason :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #

The message that contains an error or exception in case of an operation failure.

accountAssignmentOperationStatus_permissionSetArn :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #

The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

accountAssignmentOperationStatus_principalId :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #

An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.

accountAssignmentOperationStatus_requestId :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #

The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow.

accountAssignmentOperationStatus_targetId :: Lens' AccountAssignmentOperationStatus (Maybe Text) Source #

TargetID is an AWS account identifier, typically a 10-12 digit string (For example, 123456789012).

accountAssignmentOperationStatus_targetType :: Lens' AccountAssignmentOperationStatus (Maybe TargetType) Source #

The entity type for which the assignment will be created.

AccountAssignmentOperationStatusMetadata

accountAssignmentOperationStatusMetadata_requestId :: Lens' AccountAssignmentOperationStatusMetadata (Maybe Text) Source #

The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow.

AttachedManagedPolicy

attachedManagedPolicy_arn :: Lens' AttachedManagedPolicy (Maybe Text) Source #

The ARN of the AWS managed policy. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

attachedManagedPolicy_name :: Lens' AttachedManagedPolicy (Maybe Text) Source #

The name of the AWS managed policy.

CustomerManagedPolicyReference

customerManagedPolicyReference_path :: Lens' CustomerManagedPolicyReference (Maybe Text) Source #

The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is /. For more information, see Friendly names and paths in the IAM User Guide.

customerManagedPolicyReference_name :: Lens' CustomerManagedPolicyReference Text Source #

The name of the IAM policy that you have configured in each account where you want to deploy your permission set.

InstanceAccessControlAttributeConfiguration

instanceAccessControlAttributeConfiguration_accessControlAttributes :: Lens' InstanceAccessControlAttributeConfiguration [AccessControlAttribute] Source #

Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.

InstanceMetadata

instanceMetadata_identityStoreId :: Lens' InstanceMetadata (Maybe Text) Source #

The identifier of the identity store that is connected to the IAM Identity Center instance.

instanceMetadata_instanceArn :: Lens' InstanceMetadata (Maybe Text) Source #

The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

OperationStatusFilter

operationStatusFilter_status :: Lens' OperationStatusFilter (Maybe StatusValues) Source #

Filters the list operations result based on the status attribute.

PermissionSet

permissionSet_createdDate :: Lens' PermissionSet (Maybe UTCTime) Source #

The date that the permission set was created.

permissionSet_description :: Lens' PermissionSet (Maybe Text) Source #

The description of the PermissionSet.

permissionSet_name :: Lens' PermissionSet (Maybe Text) Source #

The name of the permission set.

permissionSet_permissionSetArn :: Lens' PermissionSet (Maybe Text) Source #

The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

permissionSet_relayState :: Lens' PermissionSet (Maybe Text) Source #

Used to redirect users within the application during the federation authentication process.

permissionSet_sessionDuration :: Lens' PermissionSet (Maybe Text) Source #

The length of time that the application user sessions are valid for in the ISO-8601 standard.

PermissionSetProvisioningStatus

permissionSetProvisioningStatus_accountId :: Lens' PermissionSetProvisioningStatus (Maybe Text) Source #

The identifier of the AWS account from which to list the assignments.

permissionSetProvisioningStatus_failureReason :: Lens' PermissionSetProvisioningStatus (Maybe Text) Source #

The message that contains an error or exception in case of an operation failure.

permissionSetProvisioningStatus_permissionSetArn :: Lens' PermissionSetProvisioningStatus (Maybe Text) Source #

The ARN of the permission set that is being provisioned. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

permissionSetProvisioningStatus_requestId :: Lens' PermissionSetProvisioningStatus (Maybe Text) Source #

The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow.

PermissionSetProvisioningStatusMetadata

permissionSetProvisioningStatusMetadata_requestId :: Lens' PermissionSetProvisioningStatusMetadata (Maybe Text) Source #

The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow.

PermissionsBoundary

permissionsBoundary_customerManagedPolicyReference :: Lens' PermissionsBoundary (Maybe CustomerManagedPolicyReference) Source #

Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.

permissionsBoundary_managedPolicyArn :: Lens' PermissionsBoundary (Maybe Text) Source #

The AWS managed policy ARN that you want to attach to a permission set as a permissions boundary.

Tag

tag_key :: Lens' Tag Text Source #

The key for the tag.

tag_value :: Lens' Tag Text Source #

The value of the tag.