amazonka-iam 0.3.4 → 0.3.5

raw patch · 20 files changed

+233/−74 lines, 20 filesdep ~amazonka-corePVP: major bump suggested

API removals or changes: PVP suggests a major version bump

Dependency ranges changed: amazonka-core

API changes (from Hackage documentation)

Files

• amazonka-iam.cabal +3/−2
• gen/Network/AWS/IAM.hs +2/−0
• gen/Network/AWS/IAM/CreatePolicy.hs +0/−2
• gen/Network/AWS/IAM/CreatePolicyVersion.hs +0/−2
• gen/Network/AWS/IAM/CreateRole.hs +4/−5
• gen/Network/AWS/IAM/DeleteInstanceProfile.hs +3/−4
• gen/Network/AWS/IAM/DeleteRole.hs +5/−6
• gen/Network/AWS/IAM/GetAccessKeyLastUsed.hs +121/−0
• gen/Network/AWS/IAM/GetAccountAuthorizationDetails.hs +3/−3
• gen/Network/AWS/IAM/GetAccountPasswordPolicy.hs +2/−2
• gen/Network/AWS/IAM/GetLoginProfile.hs +2/−2
• gen/Network/AWS/IAM/GetRole.hs +0/−3
• gen/Network/AWS/IAM/ListInstanceProfiles.hs +3/−3
• gen/Network/AWS/IAM/ListInstanceProfilesForRole.hs +2/−2
• gen/Network/AWS/IAM/ListRoles.hs +0/−3
• gen/Network/AWS/IAM/ListSigningCertificates.hs +5/−5
• gen/Network/AWS/IAM/Types.hs +75/−21
• gen/Network/AWS/IAM/UpdateGroup.hs +2/−6
• gen/Network/AWS/IAM/UpdateServerCertificate.hs +1/−1
• gen/Network/AWS/IAM/UpdateSigningCertificate.hs +0/−2

@@ -1,5 +1,5 @@ name:                  amazonka-iam-version:               0.3.4+version:               0.3.5 synopsis:              Amazon Identity and Access Management SDK. homepage:              https://github.com/brendanhay/amazonka license:               OtherLicense@@ -79,6 +79,7 @@         , Network.AWS.IAM.DetachUserPolicy         , Network.AWS.IAM.EnableMFADevice         , Network.AWS.IAM.GenerateCredentialReport+        , Network.AWS.IAM.GetAccessKeyLastUsed         , Network.AWS.IAM.GetAccountAuthorizationDetails         , Network.AWS.IAM.GetAccountPasswordPolicy         , Network.AWS.IAM.GetAccountSummary@@ -144,5 +145,5 @@     other-modules:      build-depends:-          amazonka-core == 0.3.4.*+          amazonka-core == 0.3.5.*         , base          >= 4.7     && < 5

@@ -58,6 +58,7 @@     , module Network.AWS.IAM.DetachUserPolicy     , module Network.AWS.IAM.EnableMFADevice     , module Network.AWS.IAM.GenerateCredentialReport+    , module Network.AWS.IAM.GetAccessKeyLastUsed     , module Network.AWS.IAM.GetAccountAuthorizationDetails     , module Network.AWS.IAM.GetAccountPasswordPolicy     , module Network.AWS.IAM.GetAccountSummary@@ -164,6 +165,7 @@ import Network.AWS.IAM.DetachUserPolicy import Network.AWS.IAM.EnableMFADevice import Network.AWS.IAM.GenerateCredentialReport+import Network.AWS.IAM.GetAccessKeyLastUsed import Network.AWS.IAM.GetAccountAuthorizationDetails import Network.AWS.IAM.GetAccountPasswordPolicy import Network.AWS.IAM.GetAccountSummary

@@ -106,8 +106,6 @@ cpPath = lens _cpPath (\s a -> s { _cpPath = a })  -- | The policy document.------ The policy must be URL-encoded according to <http://www.faqs.org/rfcs/rfc3986.html RFC 3986>. cpPolicyDocument :: Lens' CreatePolicy Text cpPolicyDocument = lens _cpPolicyDocument (\s a -> s { _cpPolicyDocument = a }) 

@@ -87,8 +87,6 @@ cpvPolicyArn = lens _cpvPolicyArn (\s a -> s { _cpvPolicyArn = a })  -- | The policy document.------ The policy must be URL-encoded according to <http://www.faqs.org/rfcs/rfc3986.html RFC 3986>. cpvPolicyDocument :: Lens' CreatePolicyVersion Text cpvPolicyDocument =     lens _cpvPolicyDocument (\s a -> s { _cpvPolicyDocument = a })

@@ -22,13 +22,12 @@ -- -- Derived from AWS service descriptions, licensed under Apache 2.0. --- | Creates a new role for your AWS account. For more information about roles,--- go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html Working with Roles>. For information about limitations on role names and+-- | Creates a new role for your AWS account. For more information about roles, go+-- to <http://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html Working with Roles>. For information about limitations on role names and -- the number of roles you can create, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html Limitations on IAM Entities> in the /Using IAM/ guide. ----- The example policy grants permission to an EC2 instance to assume the role.--- The policy is URL-encoded according to RFC 3986. For more information about--- RFC 3986, go to <http://www.faqs.org/rfcs/rfc3986.html http://www.faqs.org/rfcs/rfc3986.html>.+-- The policy in the following example grants permission to an EC2 instance to+-- assume the role. -- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html> module Network.AWS.IAM.CreateRole

@@ -22,14 +22,13 @@ -- -- Derived from AWS service descriptions, licensed under Apache 2.0. --- | Deletes the specified instance profile. The instance profile must not have--- an associated role.+-- | Deletes the specified instance profile. The instance profile must not have an+-- associated role. -- -- Make sure you do not have any Amazon EC2 instances running with the -- instance profile you are about to delete. Deleting a role or instance profile -- that is associated with a running instance will break any applications--- running on the instance.   For more information about instance profiles, go--- to <http://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html About Instance Profiles>.+-- running on the instance.  For more information about instance profiles, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html About Instance Profiles>. -- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_DeleteInstanceProfile.html> module Network.AWS.IAM.DeleteInstanceProfile

@@ -22,13 +22,12 @@ -- -- Derived from AWS service descriptions, licensed under Apache 2.0. --- | Deletes the specified role. The role must not have any policies attached.--- For more information about roles, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html Working with Roles>.+-- | Deletes the specified role. The role must not have any policies attached. For+-- more information about roles, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html Working with Roles>. ----- Make sure you do not have any Amazon EC2 instances running with the role--- you are about to delete. Deleting a role or instance profile that is--- associated with a running instance will break any applications running on the--- instance.+-- Make sure you do not have any Amazon EC2 instances running with the role you+-- are about to delete. Deleting a role or instance profile that is associated+-- with a running instance will break any applications running on the instance. -- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_DeleteRole.html> module Network.AWS.IAM.DeleteRole

@@ -0,0 +1,121 @@+{-# LANGUAGE DataKinds                   #-}+{-# LANGUAGE DeriveGeneric               #-}+{-# LANGUAGE FlexibleInstances           #-}+{-# LANGUAGE GeneralizedNewtypeDeriving  #-}+{-# LANGUAGE LambdaCase                  #-}+{-# LANGUAGE NoImplicitPrelude           #-}+{-# LANGUAGE OverloadedStrings           #-}+{-# LANGUAGE RecordWildCards             #-}+{-# LANGUAGE TypeFamilies                #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- Module      : Network.AWS.IAM.GetAccessKeyLastUsed+-- Copyright   : (c) 2013-2014 Brendan Hay <brendan.g.hay@gmail.com>+-- License     : This Source Code Form is subject to the terms of+--               the Mozilla Public License, v. 2.0.+--               A copy of the MPL can be found in the LICENSE file or+--               you can obtain it at http://mozilla.org/MPL/2.0/.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : experimental+-- Portability : non-portable (GHC extensions)+--+-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- | Retrieves information about when the specified access key was last used. The+-- information includes the date and time of last use, along with the AWS+-- service and region that were specified in the last request made with that key.+--+-- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_GetAccessKeyLastUsed.html>+module Network.AWS.IAM.GetAccessKeyLastUsed+    (+    -- * Request+      GetAccessKeyLastUsed+    -- ** Request constructor+    , getAccessKeyLastUsed+    -- ** Request lenses+    , gakluAccessKeyId++    -- * Response+    , GetAccessKeyLastUsedResponse+    -- ** Response constructor+    , getAccessKeyLastUsedResponse+    -- ** Response lenses+    , gaklurAccessKeyLastUsed+    , gaklurUserName+    ) where++import Network.AWS.Prelude+import Network.AWS.Request.Query+import Network.AWS.IAM.Types+import qualified GHC.Exts++newtype GetAccessKeyLastUsed = GetAccessKeyLastUsed+    { _gakluAccessKeyId :: Text+    } deriving (Eq, Ord, Read, Show, Monoid, IsString)++-- | 'GetAccessKeyLastUsed' constructor.+--+-- The fields accessible through corresponding lenses are:+--+-- * 'gakluAccessKeyId' @::@ 'Text'+--+getAccessKeyLastUsed :: Text -- ^ 'gakluAccessKeyId'+                     -> GetAccessKeyLastUsed+getAccessKeyLastUsed p1 = GetAccessKeyLastUsed+    { _gakluAccessKeyId = p1+    }++-- | The identifier of an access key.+gakluAccessKeyId :: Lens' GetAccessKeyLastUsed Text+gakluAccessKeyId = lens _gakluAccessKeyId (\s a -> s { _gakluAccessKeyId = a })++data GetAccessKeyLastUsedResponse = GetAccessKeyLastUsedResponse+    { _gaklurAccessKeyLastUsed :: Maybe AccessKeyLastUsed+    , _gaklurUserName          :: Maybe Text+    } deriving (Eq, Read, Show)++-- | 'GetAccessKeyLastUsedResponse' constructor.+--+-- The fields accessible through corresponding lenses are:+--+-- * 'gaklurAccessKeyLastUsed' @::@ 'Maybe' 'AccessKeyLastUsed'+--+-- * 'gaklurUserName' @::@ 'Maybe' 'Text'+--+getAccessKeyLastUsedResponse :: GetAccessKeyLastUsedResponse+getAccessKeyLastUsedResponse = GetAccessKeyLastUsedResponse+    { _gaklurUserName          = Nothing+    , _gaklurAccessKeyLastUsed = Nothing+    }++-- | Contains information about the last time the access key was used.+gaklurAccessKeyLastUsed :: Lens' GetAccessKeyLastUsedResponse (Maybe AccessKeyLastUsed)+gaklurAccessKeyLastUsed =+    lens _gaklurAccessKeyLastUsed (\s a -> s { _gaklurAccessKeyLastUsed = a })++-- | The name of the AWS IAM user that owns this access key.+gaklurUserName :: Lens' GetAccessKeyLastUsedResponse (Maybe Text)+gaklurUserName = lens _gaklurUserName (\s a -> s { _gaklurUserName = a })++instance ToPath GetAccessKeyLastUsed where+    toPath = const "/"++instance ToQuery GetAccessKeyLastUsed where+    toQuery GetAccessKeyLastUsed{..} = mconcat+        [ "AccessKeyId" =? _gakluAccessKeyId+        ]++instance ToHeaders GetAccessKeyLastUsed++instance AWSRequest GetAccessKeyLastUsed where+    type Sv GetAccessKeyLastUsed = IAM+    type Rs GetAccessKeyLastUsed = GetAccessKeyLastUsedResponse++    request  = post "GetAccessKeyLastUsed"+    response = xmlResponse++instance FromXML GetAccessKeyLastUsedResponse where+    parseXML = withElement "GetAccessKeyLastUsedResult" $ \x -> GetAccessKeyLastUsedResponse+        <$> x .@? "AccessKeyLastUsed"+        <*> x .@? "UserName"

@@ -22,9 +22,9 @@ -- -- Derived from AWS service descriptions, licensed under Apache 2.0. --- | Retrieves information about all IAM users, groups, and roles in your account,--- including their relationships to one another and their policies. Use this API--- to obtain a snapshot of the configuration of IAM permissions (users, groups,+-- | Retrieves information about all IAM users, groups, roles, and policies in+-- your account, including their relationships to one another. Use this API to+-- obtain a snapshot of the configuration of IAM permissions (users, groups, -- roles, and policies) in your account. -- -- You can optionally filter the results using the 'Filter' parameter. You can

@@ -22,8 +22,8 @@ -- -- Derived from AWS service descriptions, licensed under Apache 2.0. --- | Retrieves the password policy for the AWS account. For more information--- about using a password policy, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html Managing an IAM Password Policy>.+-- | Retrieves the password policy for the AWS account. For more information about+-- using a password policy, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html Managing an IAM Password Policy>. -- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_GetAccountPasswordPolicy.html> module Network.AWS.IAM.GetAccountPasswordPolicy

@@ -22,8 +22,8 @@ -- -- Derived from AWS service descriptions, licensed under Apache 2.0. --- | Retrieves the user name and password-creation date for the specified user.--- If the user has not been assigned a password, the action returns a 404 ('NoSuchEntity') error.+-- | Retrieves the user name and password-creation date for the specified user. If+-- the user has not been assigned a password, the action returns a 404 ('NoSuchEntity') error. -- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_GetLoginProfile.html> module Network.AWS.IAM.GetLoginProfile

@@ -26,9 +26,6 @@ -- GUID, ARN, and the policy granting permission to assume the role. For more -- information about ARNs, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html#Identifiers_ARNs ARNs>. For more information about roles, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html Working with Roles>. ----- The returned policy is URL-encoded according to RFC 3986. For more--- information about RFC 3986, go to <http://www.faqs.org/rfcs/rfc3986.html http://www.faqs.org/rfcs/rfc3986.html>.--- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_GetRole.html> module Network.AWS.IAM.GetRole     (

@@ -22,9 +22,9 @@ -- -- Derived from AWS service descriptions, licensed under Apache 2.0. --- | Lists the instance profiles that have the specified path prefix. If there--- are none, the action returns an empty list. For more information about--- instance profiles, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html About Instance Profiles>.+-- | Lists the instance profiles that have the specified path prefix. If there are+-- none, the action returns an empty list. For more information about instance+-- profiles, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html About Instance Profiles>. -- -- You can paginate the results using the 'MaxItems' and 'Marker' parameters. --

@@ -22,8 +22,8 @@ -- -- Derived from AWS service descriptions, licensed under Apache 2.0. --- | Lists the instance profiles that have the specified associated role. If--- there are none, the action returns an empty list. For more information about+-- | Lists the instance profiles that have the specified associated role. If there+-- are none, the action returns an empty list. For more information about -- instance profiles, go to <http://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html About Instance Profiles>. -- -- You can paginate the results using the 'MaxItems' and 'Marker' parameters.

@@ -27,9 +27,6 @@ -- -- You can paginate the results using the 'MaxItems' and 'Marker' parameters. ----- The returned policy is URL-encoded according to RFC 3986. For more--- information about RFC 3986, go to <http://www.faqs.org/rfcs/rfc3986.html http://www.faqs.org/rfcs/rfc3986.html>.--- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_ListRoles.html> module Network.AWS.IAM.ListRoles     (

@@ -25,8 +25,8 @@ -- | Returns information about the signing certificates associated with the -- specified user. If there are none, the action returns an empty list. ----- Although each user is limited to a small number of signing certificates,--- you can still paginate the results using the 'MaxItems' and 'Marker' parameters.+-- Although each user is limited to a small number of signing certificates, you+-- can still paginate the results using the 'MaxItems' and 'Marker' parameters. -- -- If the 'UserName' field is not specified, the user name is determined -- implicitly based on the AWS access key ID used to sign the request. Because@@ -84,9 +84,9 @@     , _lsc1MaxItems = Nothing     } --- | Use this only when paginating results, and only in a subsequent request--- after you've received a response where the results are truncated. Set it to--- the value of the 'Marker' element in the response you just received.+-- | Use this only when paginating results, and only in a subsequent request after+-- you've received a response where the results are truncated. Set it to the+-- value of the 'Marker' element in the response you just received. lsc1Marker :: Lens' ListSigningCertificates (Maybe Text) lsc1Marker = lens _lsc1Marker (\s a -> s { _lsc1Marker = a }) 

@@ -271,6 +271,13 @@     , sc1UploadDate     , sc1UserName +    -- * AccessKeyLastUsed+    , AccessKeyLastUsed+    , accessKeyLastUsed+    , akluLastUsedDate+    , akluRegion+    , akluServiceName+     -- * AccessKeyMetadata     , AccessKeyMetadata     , accessKeyMetadata@@ -325,7 +332,7 @@               -> RESTError               -> Bool         check (statusCode -> s) (awsErrorCode -> e)-            | s == 400 && "Throttling" == e = True -- Throttling+            | s == 400 && (Just "Throttling") == e = True -- Throttling             | s == 500  = True -- General Server Error             | s == 509  = True -- Limit Exceeded             | s == 503  = True -- Service Unavailable@@ -869,8 +876,7 @@  -- | The policy document. ----- The policy document is returned in the response to the 'GetPolicyVersion'--- operation. It is not included in the response to the 'ListPolicyVersions' or 'GetAccountAuthorizationDetails' operations.+-- The policy document is returned in the response to the 'GetPolicyVersion' and 'GetAccountAuthorizationDetails' operations. It is not returned in the response to the 'CreatePolicyVersion' or 'ListPolicyVersions' operations. pvDocument :: Lens' PolicyVersion (Maybe Text) pvDocument = lens _pvDocument (\s a -> s { _pvDocument = a }) @@ -1040,8 +1046,6 @@ rdArn = lens _rdArn (\s a -> s { _rdArn = a })  -- | The trust policy that grants permission to assume the role.------ The returned policy is URL-encoded according to <http://www.faqs.org/rfcs/rfc3986.html RFC 3986>. rdAssumeRolePolicyDocument :: Lens' RoleDetail (Maybe Text) rdAssumeRolePolicyDocument =     lens _rdAssumeRolePolicyDocument@@ -1554,7 +1558,7 @@     { _uArn              :: Text     , _uCreateDate       :: ISO8601     , _uPasswordLastUsed :: Maybe ISO8601-    , _uPath             :: Text+    , _uPath             :: Maybe Text     , _uUserId           :: Text     , _uUserName         :: Text     } deriving (Eq, Ord, Read, Show)@@ -1569,24 +1573,23 @@ -- -- * 'uPasswordLastUsed' @::@ 'Maybe' 'UTCTime' ----- * 'uPath' @::@ 'Text'+-- * 'uPath' @::@ 'Maybe' 'Text' -- -- * 'uUserId' @::@ 'Text' -- -- * 'uUserName' @::@ 'Text' ---user :: Text -- ^ 'uPath'-     -> Text -- ^ 'uUserName'+user :: Text -- ^ 'uUserName'      -> Text -- ^ 'uUserId'      -> Text -- ^ 'uArn'      -> UTCTime -- ^ 'uCreateDate'      -> User-user p1 p2 p3 p4 p5 = User-    { _uPath             = p1-    , _uUserName         = p2-    , _uUserId           = p3-    , _uArn              = p4-    , _uCreateDate       = withIso _Time (const id) p5+user p1 p2 p3 p4 = User+    { _uUserName         = p1+    , _uUserId           = p2+    , _uArn              = p3+    , _uCreateDate       = withIso _Time (const id) p4+    , _uPath             = Nothing     , _uPasswordLastUsed = Nothing     } @@ -1615,7 +1618,7 @@  -- | The path to the user. For more information about paths, see <http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html IAM Identifiers> -- in the /Using IAM/ guide.-uPath :: Lens' User Text+uPath :: Lens' User (Maybe Text) uPath = lens _uPath (\s a -> s { _uPath = a })  -- | The stable and unique string identifying the user. For more information about@@ -1632,7 +1635,7 @@         <$> x .@  "Arn"         <*> x .@  "CreateDate"         <*> x .@? "PasswordLastUsed"-        <*> x .@  "Path"+        <*> x .@? "Path"         <*> x .@  "UserId"         <*> x .@  "UserName" @@ -1666,8 +1669,6 @@     }  -- | The policy document.------ The returned policy is URL-encoded according to <http://www.faqs.org/rfcs/rfc3986.html RFC 3986>. pdPolicyDocument :: Lens' PolicyDetail (Maybe Text) pdPolicyDocument = lens _pdPolicyDocument (\s a -> s { _pdPolicyDocument = a }) @@ -1810,8 +1811,6 @@ rArn = lens _rArn (\s a -> s { _rArn = a })  -- | The policy that grants an entity permission to assume the role.------ The returned policy is URL-encoded according to <http://www.faqs.org/rfcs/rfc3986.html RFC 3986>. rAssumeRolePolicyDocument :: Lens' Role (Maybe Text) rAssumeRolePolicyDocument =     lens _rAssumeRolePolicyDocument@@ -2420,6 +2419,61 @@         , "Status"          =? _sc1Status         , "UploadDate"      =? _sc1UploadDate         , "UserName"        =? _sc1UserName+        ]++data AccessKeyLastUsed = AccessKeyLastUsed+    { _akluLastUsedDate :: ISO8601+    , _akluRegion       :: Text+    , _akluServiceName  :: Text+    } deriving (Eq, Ord, Read, Show)++-- | 'AccessKeyLastUsed' constructor.+--+-- The fields accessible through corresponding lenses are:+--+-- * 'akluLastUsedDate' @::@ 'UTCTime'+--+-- * 'akluRegion' @::@ 'Text'+--+-- * 'akluServiceName' @::@ 'Text'+--+accessKeyLastUsed :: UTCTime -- ^ 'akluLastUsedDate'+                  -> Text -- ^ 'akluServiceName'+                  -> Text -- ^ 'akluRegion'+                  -> AccessKeyLastUsed+accessKeyLastUsed p1 p2 p3 = AccessKeyLastUsed+    { _akluLastUsedDate = withIso _Time (const id) p1+    , _akluServiceName  = p2+    , _akluRegion       = p3+    }++-- | The date and time, in <http://www.iso.org/iso/iso8601 ISO 8601 date-time format>, when the access key was most+-- recently used.+akluLastUsedDate :: Lens' AccessKeyLastUsed UTCTime+akluLastUsedDate = lens _akluLastUsedDate (\s a -> s { _akluLastUsedDate = a }) . _Time++-- | The AWS region where this access key was most recently used.+--+-- For more information about AWS regions, see <http://docs.aws.amazon.com/general/latest/gr/rande.html Regions and Endpoints> in the+-- Amazon Web Services General Reference.+akluRegion :: Lens' AccessKeyLastUsed Text+akluRegion = lens _akluRegion (\s a -> s { _akluRegion = a })++-- | The name of the AWS service with which this access key was most recently used.+akluServiceName :: Lens' AccessKeyLastUsed Text+akluServiceName = lens _akluServiceName (\s a -> s { _akluServiceName = a })++instance FromXML AccessKeyLastUsed where+    parseXML x = AccessKeyLastUsed+        <$> x .@  "LastUsedDate"+        <*> x .@  "Region"+        <*> x .@  "ServiceName"++instance ToQuery AccessKeyLastUsed where+    toQuery AccessKeyLastUsed{..} = mconcat+        [ "LastUsedDate" =? _akluLastUsedDate+        , "Region"       =? _akluRegion+        , "ServiceName"  =? _akluServiceName         ]  data AccessKeyMetadata = AccessKeyMetadata

@@ -25,12 +25,8 @@ -- | Updates the name and/or the path of the specified group. -- -- You should understand the implications of changing a group's path or name.--- For more information, see <http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html Renaming Users and Groups> in the /Using IAM/ guide.--- To change a group name the requester must have appropriate permissions on--- both the source object and the target object. For example, to change Managers--- to MGRs, the entity making the request must have permission on Managers and--- MGRs, or must have permission on all (*). For more information about--- permissions, see Permissions and Policies.+-- For more information, see <http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html Renaming Users and Groups> in the /Using IAM/ guide.  To change a group name the requester must have appropriate permissions on both the source object and the target object. For example, to change Managers to MGRs, the entity making the request must have permission on Managers and MGRs, or must have permission on all (*). For more information about permissions, see+-- Permissions and Policies. -- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateGroup.html> module Network.AWS.IAM.UpdateGroup

@@ -25,7 +25,7 @@ -- | Updates the name and/or the path of the specified server certificate. -- -- You should understand the implications of changing a server certificate's--- path or name. For more information, see <http://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingServerCerts.html Managing Server Certificates> in the /Using IAM/ guide.   To change a server certificate name the requester must have+-- path or name. For more information, see <http://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingServerCerts.html Managing Server Certificates> in the /Using IAM/ guide.  To change a server certificate name the requester must have -- appropriate permissions on both the source object and the target object. For -- example, to change the name from ProductionCert to ProdCert, the entity -- making the request must have permission on ProductionCert and ProdCert, or

@@ -32,8 +32,6 @@ -- action to manage root credentials even if the AWS account has no associated -- users. ----- For information about rotating certificates, see <http://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingCredentials.html Managing Keys andCertificates> in the /Using IAM/ guide.--- -- <http://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateSigningCertificate.html> module Network.AWS.IAM.UpdateSigningCertificate     (