amazonka-secretsmanager 1.6.1 → 2.0

raw patch · 81 files changed

+10272/−4275 lines, 81 filesdep +case-insensitivedep ~amazonka-coredep ~amazonka-testdep ~basesetup-changedPVP ok

version bump matches the API change (PVP)

Dependencies added: case-insensitive

Dependency ranges changed: amazonka-core, amazonka-test, base

API changes (from Hackage documentation)

Files

• README.md +3/−4
• Setup.hs +0/−2
• amazonka-secretsmanager.cabal +105/−89
• fixture/DeleteResourcePolicy.yaml +10/−0
• fixture/DeleteResourcePolicyResponse.proto +0/−0
• fixture/GetResourcePolicy.yaml +10/−0
• fixture/GetResourcePolicyResponse.proto +0/−0
• fixture/PutResourcePolicy.yaml +10/−0
• fixture/PutResourcePolicyResponse.proto +0/−0
• fixture/RemoveRegionsFromReplication.yaml +10/−0
• fixture/RemoveRegionsFromReplicationResponse.proto +0/−0
• fixture/ReplicateSecretToRegions.yaml +10/−0
• fixture/ReplicateSecretToRegionsResponse.proto +0/−0
• fixture/StopReplicationToReplica.yaml +10/−0
• fixture/StopReplicationToReplicaResponse.proto +0/−0
• fixture/ValidateResourcePolicy.yaml +10/−0
• fixture/ValidateResourcePolicyResponse.proto +0/−0
• gen/Amazonka/SecretsManager.hs +328/−0
• gen/Amazonka/SecretsManager/CancelRotateSecret.hs +242/−0
• gen/Amazonka/SecretsManager/CreateSecret.hs +751/−0
• gen/Amazonka/SecretsManager/DeleteResourcePolicy.hs +207/−0
• gen/Amazonka/SecretsManager/DeleteSecret.hs +341/−0
• gen/Amazonka/SecretsManager/DescribeSecret.hs +557/−0
• gen/Amazonka/SecretsManager/GetRandomPassword.hs +313/−0
• gen/Amazonka/SecretsManager/GetResourcePolicy.hs +226/−0
• gen/Amazonka/SecretsManager/GetSecretValue.hs +398/−0
• gen/Amazonka/SecretsManager/Lens.hs +310/−0
• gen/Amazonka/SecretsManager/ListSecretVersionIds.hs +337/−0
• gen/Amazonka/SecretsManager/ListSecrets.hs +309/−0
• gen/Amazonka/SecretsManager/PutResourcePolicy.hs +255/−0
• gen/Amazonka/SecretsManager/PutSecretValue.hs +493/−0
• gen/Amazonka/SecretsManager/RemoveRegionsFromReplication.hs +228/−0
• gen/Amazonka/SecretsManager/ReplicateSecretToRegions.hs +240/−0
• gen/Amazonka/SecretsManager/RestoreSecret.hs +203/−0
• gen/Amazonka/SecretsManager/RotateSecret.hs +399/−0
• gen/Amazonka/SecretsManager/StopReplicationToReplica.hs +190/−0
• gen/Amazonka/SecretsManager/TagResource.hs +217/−0
• gen/Amazonka/SecretsManager/Types.hs +302/−0
• gen/Amazonka/SecretsManager/Types/Filter.hs +133/−0
• gen/Amazonka/SecretsManager/Types/FilterNameStringType.hs +96/−0
• gen/Amazonka/SecretsManager/Types/ReplicaRegionType.hs +90/−0
• gen/Amazonka/SecretsManager/Types/ReplicationStatusType.hs +128/−0
• gen/Amazonka/SecretsManager/Types/RotationRulesType.hs +229/−0
• gen/Amazonka/SecretsManager/Types/SecretListEntry.hs +362/−0
• gen/Amazonka/SecretsManager/Types/SecretVersionsListEntry.hs +130/−0
• gen/Amazonka/SecretsManager/Types/SortOrderType.hs +71/−0
• gen/Amazonka/SecretsManager/Types/StatusType.hs +76/−0
• gen/Amazonka/SecretsManager/Types/Tag.hs +92/−0
• gen/Amazonka/SecretsManager/Types/ValidationErrorsEntry.hs +87/−0
• gen/Amazonka/SecretsManager/UntagResource.hs +205/−0
• gen/Amazonka/SecretsManager/UpdateSecret.hs +464/−0
• gen/Amazonka/SecretsManager/UpdateSecretVersionStage.hs +305/−0
• gen/Amazonka/SecretsManager/ValidateResourcePolicy.hs +239/−0
• gen/Amazonka/SecretsManager/Waiters.hs +24/−0
• gen/Network/AWS/SecretsManager.hs +0/−214
• gen/Network/AWS/SecretsManager/CancelRotateSecret.hs +0/−186
• gen/Network/AWS/SecretsManager/CreateSecret.hs +0/−250
• gen/Network/AWS/SecretsManager/DeleteSecret.hs +0/−185
• gen/Network/AWS/SecretsManager/DescribeSecret.hs +0/−273
• gen/Network/AWS/SecretsManager/GetRandomPassword.hs +0/−213
• gen/Network/AWS/SecretsManager/GetSecretValue.hs +0/−235
• gen/Network/AWS/SecretsManager/ListSecretVersionIds.hs +0/−213
• gen/Network/AWS/SecretsManager/ListSecrets.hs +0/−167
• gen/Network/AWS/SecretsManager/PutSecretValue.hs +0/−241
• gen/Network/AWS/SecretsManager/RestoreSecret.hs +0/−157
• gen/Network/AWS/SecretsManager/RotateSecret.hs +0/−221
• gen/Network/AWS/SecretsManager/TagResource.hs +0/−152
• gen/Network/AWS/SecretsManager/Types.hs +0/−187
• gen/Network/AWS/SecretsManager/Types/Product.hs +0/−319
• gen/Network/AWS/SecretsManager/Types/Sum.hs +0/−20
• gen/Network/AWS/SecretsManager/UntagResource.hs +0/−138
• gen/Network/AWS/SecretsManager/UpdateSecret.hs +0/−239
• gen/Network/AWS/SecretsManager/UpdateSecretVersionStage.hs +0/−202
• gen/Network/AWS/SecretsManager/Waiters.hs +0/−21
• test/Main.hs +11/−9
• test/Test/AWS/Gen/SecretsManager.hs +0/−309
• test/Test/AWS/SecretsManager.hs +0/−20
• test/Test/AWS/SecretsManager/Internal.hs +0/−9
• test/Test/Amazonka/Gen/SecretsManager.hs +478/−0
• test/Test/Amazonka/SecretsManager.hs +20/−0
• test/Test/Amazonka/SecretsManager/Internal.hs +8/−0

@@ -7,9 +7,8 @@   ## Version--`1.6.1`-+ +`2.0` - Derived from API version @2017-10-17@ of the AWS service descriptions, licensed under Apache 2.0.  ## Description @@ -26,7 +25,7 @@ The provided lenses should be compatible with any of the major lens libraries [lens](http://hackage.haskell.org/package/lens) or [lens-family-core](http://hackage.haskell.org/package/lens-family-core). -See [Network.AWS.SecretsManager](http://hackage.haskell.org/package/amazonka-secretsmanager/docs/Network-AWS-SecretsManager.html)+See [Amazonka.SecretsManager](http://hackage.haskell.org/package/amazonka-secretsmanager/docs/Amazonka-SecretsManager.html) or [the AWS documentation](https://aws.amazon.com/documentation/) to get started.  

@@ -1,2 +0,0 @@-import           Distribution.Simple-main = defaultMain

@@ -1,100 +1,116 @@-name:                  amazonka-secretsmanager-version:               1.6.1-synopsis:              Amazon Secrets Manager SDK.-homepage:              https://github.com/brendanhay/amazonka-bug-reports:           https://github.com/brendanhay/amazonka/issues-license:               MPL-2.0-license-file:          LICENSE-author:                Brendan Hay-maintainer:            Brendan Hay <brendan.g.hay+amazonka@gmail.com>-copyright:             Copyright (c) 2013-2018 Brendan Hay-category:              Network, AWS, Cloud, Distributed Computing-build-type:            Simple-cabal-version:         >= 1.10-extra-source-files:    README.md fixture/*.yaml fixture/*.proto src/.gitkeep+cabal-version:      2.2+name:               amazonka-secretsmanager+version:            2.0+synopsis:           Amazon Secrets Manager SDK.+homepage:           https://github.com/brendanhay/amazonka+bug-reports:        https://github.com/brendanhay/amazonka/issues+license:            MPL-2.0+license-file:       LICENSE+author:             Brendan Hay+maintainer:+  Brendan Hay <brendan.g.hay+amazonka@gmail.com>, Jack Kelly <jack@jackkelly.name>++copyright:          Copyright (c) 2013-2023 Brendan Hay+category:           AWS+build-type:         Simple+extra-source-files:+  fixture/*.proto+  fixture/*.yaml+  README.md+  src/.gitkeep+ description:-    The types from this library are intended to be used with-    <http://hackage.haskell.org/package/amazonka amazonka>, which provides-    mechanisms for specifying AuthN/AuthZ information, sending requests,-    and receiving responses.-    .-    Lenses are used for constructing and manipulating types,-    due to the depth of nesting of AWS types and transparency regarding-    de/serialisation into more palatable Haskell values.-    The provided lenses should be compatible with any of the major lens libraries-    such as <http://hackage.haskell.org/package/lens lens> or-    <http://hackage.haskell.org/package/lens-family-core lens-family-core>.-    .-    See "Network.AWS.SecretsManager" or <https://aws.amazon.com/documentation/ the AWS documentation>-    to get started.+  Derived from API version @2017-10-17@ of the AWS service descriptions, licensed under Apache 2.0.+  .+  The types from this library are intended to be used with <http://hackage.haskell.org/package/amazonka amazonka>,+  which provides mechanisms for specifying AuthN/AuthZ information, sending requests, and receiving responses.+  .+  It is recommended to use generic lenses or optics from packages such as <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify optional fields and deconstruct responses.+  .+  Generated lenses can be found in "Amazonka.SecretsManager.Lens" and are+  suitable for use with a lens package such as <http://hackage.haskell.org/package/lens lens> or <http://hackage.haskell.org/package/lens-family-core lens-family-core>.+  .+  See "Amazonka.SecretsManager" and the <https://aws.amazon.com/documentation/ AWS documentation> to get started.  source-repository head-    type:              git-    location:          git://github.com/brendanhay/amazonka.git-    subdir:            amazonka-secretsmanager+  type:     git+  location: git://github.com/brendanhay/amazonka.git+  subdir:   amazonka-secretsmanager  library-    default-language:  Haskell2010-    hs-source-dirs:    src gen--    ghc-options:-        -Wall-        -fwarn-incomplete-uni-patterns-        -fwarn-incomplete-record-updates-        -funbox-strict-fields--    exposed-modules:-          Network.AWS.SecretsManager-        , Network.AWS.SecretsManager.CancelRotateSecret-        , Network.AWS.SecretsManager.CreateSecret-        , Network.AWS.SecretsManager.DeleteSecret-        , Network.AWS.SecretsManager.DescribeSecret-        , Network.AWS.SecretsManager.GetRandomPassword-        , Network.AWS.SecretsManager.GetSecretValue-        , Network.AWS.SecretsManager.ListSecretVersionIds-        , Network.AWS.SecretsManager.ListSecrets-        , Network.AWS.SecretsManager.PutSecretValue-        , Network.AWS.SecretsManager.RestoreSecret-        , Network.AWS.SecretsManager.RotateSecret-        , Network.AWS.SecretsManager.TagResource-        , Network.AWS.SecretsManager.Types-        , Network.AWS.SecretsManager.UntagResource-        , Network.AWS.SecretsManager.UpdateSecret-        , Network.AWS.SecretsManager.UpdateSecretVersionStage-        , Network.AWS.SecretsManager.Waiters+  default-language: Haskell2010+  hs-source-dirs:   src gen+  ghc-options:+    -Wall -fwarn-incomplete-uni-patterns+    -fwarn-incomplete-record-updates -funbox-strict-fields -    other-modules:-          Network.AWS.SecretsManager.Types.Product-        , Network.AWS.SecretsManager.Types.Sum+  exposed-modules:+    Amazonka.SecretsManager+    Amazonka.SecretsManager.CancelRotateSecret+    Amazonka.SecretsManager.CreateSecret+    Amazonka.SecretsManager.DeleteResourcePolicy+    Amazonka.SecretsManager.DeleteSecret+    Amazonka.SecretsManager.DescribeSecret+    Amazonka.SecretsManager.GetRandomPassword+    Amazonka.SecretsManager.GetResourcePolicy+    Amazonka.SecretsManager.GetSecretValue+    Amazonka.SecretsManager.Lens+    Amazonka.SecretsManager.ListSecrets+    Amazonka.SecretsManager.ListSecretVersionIds+    Amazonka.SecretsManager.PutResourcePolicy+    Amazonka.SecretsManager.PutSecretValue+    Amazonka.SecretsManager.RemoveRegionsFromReplication+    Amazonka.SecretsManager.ReplicateSecretToRegions+    Amazonka.SecretsManager.RestoreSecret+    Amazonka.SecretsManager.RotateSecret+    Amazonka.SecretsManager.StopReplicationToReplica+    Amazonka.SecretsManager.TagResource+    Amazonka.SecretsManager.Types+    Amazonka.SecretsManager.Types.Filter+    Amazonka.SecretsManager.Types.FilterNameStringType+    Amazonka.SecretsManager.Types.ReplicaRegionType+    Amazonka.SecretsManager.Types.ReplicationStatusType+    Amazonka.SecretsManager.Types.RotationRulesType+    Amazonka.SecretsManager.Types.SecretListEntry+    Amazonka.SecretsManager.Types.SecretVersionsListEntry+    Amazonka.SecretsManager.Types.SortOrderType+    Amazonka.SecretsManager.Types.StatusType+    Amazonka.SecretsManager.Types.Tag+    Amazonka.SecretsManager.Types.ValidationErrorsEntry+    Amazonka.SecretsManager.UntagResource+    Amazonka.SecretsManager.UpdateSecret+    Amazonka.SecretsManager.UpdateSecretVersionStage+    Amazonka.SecretsManager.ValidateResourcePolicy+    Amazonka.SecretsManager.Waiters -    build-depends:-          amazonka-core == 1.6.1.*-        , base          >= 4.7     && < 5+  build-depends:+    , amazonka-core  >=2.0  && <2.1+    , base           >=4.12 && <5  test-suite amazonka-secretsmanager-test-    type:              exitcode-stdio-1.0-    default-language:  Haskell2010-    hs-source-dirs:    test-    main-is:           Main.hs--    ghc-options:       -Wall -threaded+  type:             exitcode-stdio-1.0+  default-language: Haskell2010+  hs-source-dirs:   test+  main-is:          Main.hs+  ghc-options:      -Wall -threaded -    -- This section is encoded by the template and any modules added by-    -- hand outside these namespaces will not correctly be added to the-    -- distribution package.-    other-modules:-          Test.AWS.SecretsManager-        , Test.AWS.Gen.SecretsManager-        , Test.AWS.SecretsManager.Internal+  -- This section is encoded by the template and any modules added by+  -- hand outside these namespaces will not correctly be added to the+  -- distribution package.+  other-modules:+    Test.Amazonka.Gen.SecretsManager+    Test.Amazonka.SecretsManager+    Test.Amazonka.SecretsManager.Internal -    build-depends:-          amazonka-core == 1.6.1.*-        , amazonka-test == 1.6.1.*-        , amazonka-secretsmanager-        , base-        , bytestring-        , tasty-        , tasty-hunit-        , text-        , time-        , unordered-containers+  build-depends:+    , amazonka-core            >=2.0 && <2.1+    , amazonka-secretsmanager+    , amazonka-test            >=2.0 && <2.1+    , base+    , bytestring+    , case-insensitive+    , tasty+    , tasty-hunit+    , text+    , time+    , unordered-containers

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/secretsmanager/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  secretsmanager.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/secretsmanager/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  secretsmanager.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/secretsmanager/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  secretsmanager.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/secretsmanager/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  secretsmanager.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/secretsmanager/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  secretsmanager.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/secretsmanager/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  secretsmanager.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/secretsmanager/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  secretsmanager.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,328 @@+{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- |+-- Module      : Amazonka.SecretsManager+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Derived from API version @2017-10-17@ of the AWS service descriptions, licensed under Apache 2.0.+--+-- Amazon Web Services Secrets Manager+--+-- Amazon Web Services Secrets Manager provides a service to enable you to+-- store, manage, and retrieve, secrets.+--+-- This guide provides descriptions of the Secrets Manager API. For more+-- information about using this service, see the+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/introduction.html Amazon Web Services Secrets Manager User Guide>.+--+-- __API Version__+--+-- This version of the Secrets Manager API Reference documents the Secrets+-- Manager API version 2017-10-17.+--+-- __Support and Feedback for Amazon Web Services Secrets Manager__+--+-- We welcome your feedback. Send your comments to+-- <mailto:awssecretsmanager-feedback@amazon.com awssecretsmanager-feedback\@amazon.com>,+-- or post your feedback and questions in the+-- <http://forums.aws.amazon.com/forum.jspa?forumID=296 Amazon Web Services Secrets Manager Discussion Forum>.+-- For more information about the Amazon Web Services Discussion Forums,+-- see <http://forums.aws.amazon.com/help.jspa Forums Help>.+--+-- __Logging API Requests__+--+-- Amazon Web Services Secrets Manager supports Amazon Web Services+-- CloudTrail, a service that records Amazon Web Services API calls for+-- your Amazon Web Services account and delivers log files to an Amazon S3+-- bucket. By using information that\'s collected by Amazon Web Services+-- CloudTrail, you can determine the requests successfully made to Secrets+-- Manager, who made the request, when it was made, and so on. For more+-- about Amazon Web Services Secrets Manager and support for Amazon Web+-- Services CloudTrail, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/monitoring.html#monitoring_cloudtrail Logging Amazon Web Services Secrets Manager Events with Amazon Web Services CloudTrail>+-- in the /Amazon Web Services Secrets Manager User Guide/. To learn more+-- about CloudTrail, including enabling it and find your log files, see the+-- <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html Amazon Web Services CloudTrail User Guide>.+module Amazonka.SecretsManager+  ( -- * Service Configuration+    defaultService,++    -- * Errors+    -- $errors++    -- ** DecryptionFailure+    _DecryptionFailure,++    -- ** EncryptionFailure+    _EncryptionFailure,++    -- ** InternalServiceError+    _InternalServiceError,++    -- ** InvalidNextTokenException+    _InvalidNextTokenException,++    -- ** InvalidParameterException+    _InvalidParameterException,++    -- ** InvalidRequestException+    _InvalidRequestException,++    -- ** LimitExceededException+    _LimitExceededException,++    -- ** MalformedPolicyDocumentException+    _MalformedPolicyDocumentException,++    -- ** PreconditionNotMetException+    _PreconditionNotMetException,++    -- ** PublicPolicyException+    _PublicPolicyException,++    -- ** ResourceExistsException+    _ResourceExistsException,++    -- ** ResourceNotFoundException+    _ResourceNotFoundException,++    -- * Waiters+    -- $waiters++    -- * Operations+    -- $operations++    -- ** CancelRotateSecret+    CancelRotateSecret (CancelRotateSecret'),+    newCancelRotateSecret,+    CancelRotateSecretResponse (CancelRotateSecretResponse'),+    newCancelRotateSecretResponse,++    -- ** CreateSecret+    CreateSecret (CreateSecret'),+    newCreateSecret,+    CreateSecretResponse (CreateSecretResponse'),+    newCreateSecretResponse,++    -- ** DeleteResourcePolicy+    DeleteResourcePolicy (DeleteResourcePolicy'),+    newDeleteResourcePolicy,+    DeleteResourcePolicyResponse (DeleteResourcePolicyResponse'),+    newDeleteResourcePolicyResponse,++    -- ** DeleteSecret+    DeleteSecret (DeleteSecret'),+    newDeleteSecret,+    DeleteSecretResponse (DeleteSecretResponse'),+    newDeleteSecretResponse,++    -- ** DescribeSecret+    DescribeSecret (DescribeSecret'),+    newDescribeSecret,+    DescribeSecretResponse (DescribeSecretResponse'),+    newDescribeSecretResponse,++    -- ** GetRandomPassword+    GetRandomPassword (GetRandomPassword'),+    newGetRandomPassword,+    GetRandomPasswordResponse (GetRandomPasswordResponse'),+    newGetRandomPasswordResponse,++    -- ** GetResourcePolicy+    GetResourcePolicy (GetResourcePolicy'),+    newGetResourcePolicy,+    GetResourcePolicyResponse (GetResourcePolicyResponse'),+    newGetResourcePolicyResponse,++    -- ** GetSecretValue+    GetSecretValue (GetSecretValue'),+    newGetSecretValue,+    GetSecretValueResponse (GetSecretValueResponse'),+    newGetSecretValueResponse,++    -- ** ListSecretVersionIds (Paginated)+    ListSecretVersionIds (ListSecretVersionIds'),+    newListSecretVersionIds,+    ListSecretVersionIdsResponse (ListSecretVersionIdsResponse'),+    newListSecretVersionIdsResponse,++    -- ** ListSecrets (Paginated)+    ListSecrets (ListSecrets'),+    newListSecrets,+    ListSecretsResponse (ListSecretsResponse'),+    newListSecretsResponse,++    -- ** PutResourcePolicy+    PutResourcePolicy (PutResourcePolicy'),+    newPutResourcePolicy,+    PutResourcePolicyResponse (PutResourcePolicyResponse'),+    newPutResourcePolicyResponse,++    -- ** PutSecretValue+    PutSecretValue (PutSecretValue'),+    newPutSecretValue,+    PutSecretValueResponse (PutSecretValueResponse'),+    newPutSecretValueResponse,++    -- ** RemoveRegionsFromReplication+    RemoveRegionsFromReplication (RemoveRegionsFromReplication'),+    newRemoveRegionsFromReplication,+    RemoveRegionsFromReplicationResponse (RemoveRegionsFromReplicationResponse'),+    newRemoveRegionsFromReplicationResponse,++    -- ** ReplicateSecretToRegions+    ReplicateSecretToRegions (ReplicateSecretToRegions'),+    newReplicateSecretToRegions,+    ReplicateSecretToRegionsResponse (ReplicateSecretToRegionsResponse'),+    newReplicateSecretToRegionsResponse,++    -- ** RestoreSecret+    RestoreSecret (RestoreSecret'),+    newRestoreSecret,+    RestoreSecretResponse (RestoreSecretResponse'),+    newRestoreSecretResponse,++    -- ** RotateSecret+    RotateSecret (RotateSecret'),+    newRotateSecret,+    RotateSecretResponse (RotateSecretResponse'),+    newRotateSecretResponse,++    -- ** StopReplicationToReplica+    StopReplicationToReplica (StopReplicationToReplica'),+    newStopReplicationToReplica,+    StopReplicationToReplicaResponse (StopReplicationToReplicaResponse'),+    newStopReplicationToReplicaResponse,++    -- ** TagResource+    TagResource (TagResource'),+    newTagResource,+    TagResourceResponse (TagResourceResponse'),+    newTagResourceResponse,++    -- ** UntagResource+    UntagResource (UntagResource'),+    newUntagResource,+    UntagResourceResponse (UntagResourceResponse'),+    newUntagResourceResponse,++    -- ** UpdateSecret+    UpdateSecret (UpdateSecret'),+    newUpdateSecret,+    UpdateSecretResponse (UpdateSecretResponse'),+    newUpdateSecretResponse,++    -- ** UpdateSecretVersionStage+    UpdateSecretVersionStage (UpdateSecretVersionStage'),+    newUpdateSecretVersionStage,+    UpdateSecretVersionStageResponse (UpdateSecretVersionStageResponse'),+    newUpdateSecretVersionStageResponse,++    -- ** ValidateResourcePolicy+    ValidateResourcePolicy (ValidateResourcePolicy'),+    newValidateResourcePolicy,+    ValidateResourcePolicyResponse (ValidateResourcePolicyResponse'),+    newValidateResourcePolicyResponse,++    -- * Types++    -- ** FilterNameStringType+    FilterNameStringType (..),++    -- ** SortOrderType+    SortOrderType (..),++    -- ** StatusType+    StatusType (..),++    -- ** Filter+    Filter (Filter'),+    newFilter,++    -- ** ReplicaRegionType+    ReplicaRegionType (ReplicaRegionType'),+    newReplicaRegionType,++    -- ** ReplicationStatusType+    ReplicationStatusType (ReplicationStatusType'),+    newReplicationStatusType,++    -- ** RotationRulesType+    RotationRulesType (RotationRulesType'),+    newRotationRulesType,++    -- ** SecretListEntry+    SecretListEntry (SecretListEntry'),+    newSecretListEntry,++    -- ** SecretVersionsListEntry+    SecretVersionsListEntry (SecretVersionsListEntry'),+    newSecretVersionsListEntry,++    -- ** Tag+    Tag (Tag'),+    newTag,++    -- ** ValidationErrorsEntry+    ValidationErrorsEntry (ValidationErrorsEntry'),+    newValidationErrorsEntry,+  )+where++import Amazonka.SecretsManager.CancelRotateSecret+import Amazonka.SecretsManager.CreateSecret+import Amazonka.SecretsManager.DeleteResourcePolicy+import Amazonka.SecretsManager.DeleteSecret+import Amazonka.SecretsManager.DescribeSecret+import Amazonka.SecretsManager.GetRandomPassword+import Amazonka.SecretsManager.GetResourcePolicy+import Amazonka.SecretsManager.GetSecretValue+import Amazonka.SecretsManager.Lens+import Amazonka.SecretsManager.ListSecretVersionIds+import Amazonka.SecretsManager.ListSecrets+import Amazonka.SecretsManager.PutResourcePolicy+import Amazonka.SecretsManager.PutSecretValue+import Amazonka.SecretsManager.RemoveRegionsFromReplication+import Amazonka.SecretsManager.ReplicateSecretToRegions+import Amazonka.SecretsManager.RestoreSecret+import Amazonka.SecretsManager.RotateSecret+import Amazonka.SecretsManager.StopReplicationToReplica+import Amazonka.SecretsManager.TagResource+import Amazonka.SecretsManager.Types+import Amazonka.SecretsManager.UntagResource+import Amazonka.SecretsManager.UpdateSecret+import Amazonka.SecretsManager.UpdateSecretVersionStage+import Amazonka.SecretsManager.ValidateResourcePolicy+import Amazonka.SecretsManager.Waiters++-- $errors+-- Error matchers are designed for use with the functions provided by+-- <http://hackage.haskell.org/package/lens/docs/Control-Exception-Lens.html Control.Exception.Lens>.+-- This allows catching (and rethrowing) service specific errors returned+-- by 'SecretsManager'.++-- $operations+-- Some AWS operations return results that are incomplete and require subsequent+-- requests in order to obtain the entire result set. The process of sending+-- subsequent requests to continue where a previous request left off is called+-- pagination. For example, the 'ListObjects' operation of Amazon S3 returns up to+-- 1000 objects at a time, and you must send subsequent requests with the+-- appropriate Marker in order to retrieve the next page of results.+--+-- Operations that have an 'AWSPager' instance can transparently perform subsequent+-- requests, correctly setting Markers and other request facets to iterate through+-- the entire result set of a truncated API operation. Operations which support+-- this have an additional note in the documentation.+--+-- Many operations have the ability to filter results on the server side. See the+-- individual operation parameters for details.++-- $waiters+-- Waiters poll by repeatedly sending a request until some remote success condition+-- configured by the 'Wait' specification is fulfilled. The 'Wait' specification+-- determines how many attempts should be made, in addition to delay and retry strategies.

@@ -0,0 +1,242 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.CancelRotateSecret+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Turns off automatic rotation, and if a rotation is currently in+-- progress, cancels the rotation.+--+-- If you cancel a rotation in progress, it can leave the @VersionStage@+-- labels in an unexpected state. You might need to remove the staging+-- label @AWSPENDING@ from the partially created version. You also need to+-- determine whether to roll back to the previous version of the secret by+-- moving the staging label @AWSCURRENT@ to the version that has+-- @AWSPENDING@. To determine which version has a specific staging label,+-- call ListSecretVersionIds. Then use UpdateSecretVersionStage to change+-- staging labels. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html How rotation works>.+--+-- To turn on automatic rotation again, call RotateSecret.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:CancelRotateSecret@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.CancelRotateSecret+  ( -- * Creating a Request+    CancelRotateSecret (..),+    newCancelRotateSecret,++    -- * Request Lenses+    cancelRotateSecret_secretId,++    -- * Destructuring the Response+    CancelRotateSecretResponse (..),+    newCancelRotateSecretResponse,++    -- * Response Lenses+    cancelRotateSecretResponse_arn,+    cancelRotateSecretResponse_name,+    cancelRotateSecretResponse_versionId,+    cancelRotateSecretResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newCancelRotateSecret' smart constructor.+data CancelRotateSecret = CancelRotateSecret'+  { -- | The ARN or name of the secret.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    secretId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CancelRotateSecret' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'secretId', 'cancelRotateSecret_secretId' - The ARN or name of the secret.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+newCancelRotateSecret ::+  -- | 'secretId'+  Prelude.Text ->+  CancelRotateSecret+newCancelRotateSecret pSecretId_ =+  CancelRotateSecret' {secretId = pSecretId_}++-- | The ARN or name of the secret.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+cancelRotateSecret_secretId :: Lens.Lens' CancelRotateSecret Prelude.Text+cancelRotateSecret_secretId = Lens.lens (\CancelRotateSecret' {secretId} -> secretId) (\s@CancelRotateSecret' {} a -> s {secretId = a} :: CancelRotateSecret)++instance Core.AWSRequest CancelRotateSecret where+  type+    AWSResponse CancelRotateSecret =+      CancelRotateSecretResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          CancelRotateSecretResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (x Data..?> "VersionId")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable CancelRotateSecret where+  hashWithSalt _salt CancelRotateSecret' {..} =+    _salt `Prelude.hashWithSalt` secretId++instance Prelude.NFData CancelRotateSecret where+  rnf CancelRotateSecret' {..} = Prelude.rnf secretId++instance Data.ToHeaders CancelRotateSecret where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.CancelRotateSecret" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON CancelRotateSecret where+  toJSON CancelRotateSecret' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("SecretId" Data..= secretId)]+      )++instance Data.ToPath CancelRotateSecret where+  toPath = Prelude.const "/"++instance Data.ToQuery CancelRotateSecret where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newCancelRotateSecretResponse' smart constructor.+data CancelRotateSecretResponse = CancelRotateSecretResponse'+  { -- | The ARN of the secret.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The name of the secret.+    name :: Prelude.Maybe Prelude.Text,+    -- | The unique identifier of the version of the secret created during the+    -- rotation. This version might not be complete, and should be evaluated+    -- for possible deletion. We recommend that you remove the @VersionStage@+    -- value @AWSPENDING@ from this version so that Secrets Manager can delete+    -- it. Failing to clean up a cancelled rotation can block you from starting+    -- future rotations.+    versionId :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CancelRotateSecretResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'cancelRotateSecretResponse_arn' - The ARN of the secret.+--+-- 'name', 'cancelRotateSecretResponse_name' - The name of the secret.+--+-- 'versionId', 'cancelRotateSecretResponse_versionId' - The unique identifier of the version of the secret created during the+-- rotation. This version might not be complete, and should be evaluated+-- for possible deletion. We recommend that you remove the @VersionStage@+-- value @AWSPENDING@ from this version so that Secrets Manager can delete+-- it. Failing to clean up a cancelled rotation can block you from starting+-- future rotations.+--+-- 'httpStatus', 'cancelRotateSecretResponse_httpStatus' - The response's http status code.+newCancelRotateSecretResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  CancelRotateSecretResponse+newCancelRotateSecretResponse pHttpStatus_ =+  CancelRotateSecretResponse'+    { arn = Prelude.Nothing,+      name = Prelude.Nothing,+      versionId = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret.+cancelRotateSecretResponse_arn :: Lens.Lens' CancelRotateSecretResponse (Prelude.Maybe Prelude.Text)+cancelRotateSecretResponse_arn = Lens.lens (\CancelRotateSecretResponse' {arn} -> arn) (\s@CancelRotateSecretResponse' {} a -> s {arn = a} :: CancelRotateSecretResponse)++-- | The name of the secret.+cancelRotateSecretResponse_name :: Lens.Lens' CancelRotateSecretResponse (Prelude.Maybe Prelude.Text)+cancelRotateSecretResponse_name = Lens.lens (\CancelRotateSecretResponse' {name} -> name) (\s@CancelRotateSecretResponse' {} a -> s {name = a} :: CancelRotateSecretResponse)++-- | The unique identifier of the version of the secret created during the+-- rotation. This version might not be complete, and should be evaluated+-- for possible deletion. We recommend that you remove the @VersionStage@+-- value @AWSPENDING@ from this version so that Secrets Manager can delete+-- it. Failing to clean up a cancelled rotation can block you from starting+-- future rotations.+cancelRotateSecretResponse_versionId :: Lens.Lens' CancelRotateSecretResponse (Prelude.Maybe Prelude.Text)+cancelRotateSecretResponse_versionId = Lens.lens (\CancelRotateSecretResponse' {versionId} -> versionId) (\s@CancelRotateSecretResponse' {} a -> s {versionId = a} :: CancelRotateSecretResponse)++-- | The response's http status code.+cancelRotateSecretResponse_httpStatus :: Lens.Lens' CancelRotateSecretResponse Prelude.Int+cancelRotateSecretResponse_httpStatus = Lens.lens (\CancelRotateSecretResponse' {httpStatus} -> httpStatus) (\s@CancelRotateSecretResponse' {} a -> s {httpStatus = a} :: CancelRotateSecretResponse)++instance Prelude.NFData CancelRotateSecretResponse where+  rnf CancelRotateSecretResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf versionId+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,751 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.CreateSecret+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates a new secret. A /secret/ can be a password, a set of credentials+-- such as a user name and password, an OAuth token, or other secret+-- information that you store in an encrypted form in Secrets Manager. The+-- secret also includes the connection information to access a database or+-- other service, which Secrets Manager doesn\'t encrypt. A secret in+-- Secrets Manager consists of both the protected secret data and the+-- important information needed to manage the secret.+--+-- For information about creating a secret in the console, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_create-basic-secret.html Create a secret>.+--+-- To create a secret, you can provide the secret value to be encrypted in+-- either the @SecretString@ parameter or the @SecretBinary@ parameter, but+-- not both. If you include @SecretString@ or @SecretBinary@ then Secrets+-- Manager creates an initial secret version and automatically attaches the+-- staging label @AWSCURRENT@ to it.+--+-- For database credentials you want to rotate, for Secrets Manager to be+-- able to rotate the secret, you must make sure the JSON you store in the+-- @SecretString@ matches the+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_secret_json_structure.html JSON structure of a database secret>.+--+-- If you don\'t specify an KMS encryption key, Secrets Manager uses the+-- Amazon Web Services managed key @aws\/secretsmanager@. If this key+-- doesn\'t already exist in your account, then Secrets Manager creates it+-- for you automatically. All users and roles in the Amazon Web Services+-- account automatically have access to use @aws\/secretsmanager@. Creating+-- @aws\/secretsmanager@ can result in a one-time significant delay in+-- returning the result.+--+-- If the secret is in a different Amazon Web Services account from the+-- credentials calling the API, then you can\'t use @aws\/secretsmanager@+-- to encrypt the secret, and you must create and use a customer managed+-- KMS key.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- except @SecretBinary@ or @SecretString@ because it might be logged. For+-- more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:CreateSecret@. If you include+-- tags in the secret, you also need @secretsmanager:TagResource@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+--+-- To encrypt the secret with a KMS key other than @aws\/secretsmanager@,+-- you need @kms:GenerateDataKey@ and @kms:Decrypt@ permission to the key.+module Amazonka.SecretsManager.CreateSecret+  ( -- * Creating a Request+    CreateSecret (..),+    newCreateSecret,++    -- * Request Lenses+    createSecret_addReplicaRegions,+    createSecret_clientRequestToken,+    createSecret_description,+    createSecret_forceOverwriteReplicaSecret,+    createSecret_kmsKeyId,+    createSecret_secretBinary,+    createSecret_secretString,+    createSecret_tags,+    createSecret_name,++    -- * Destructuring the Response+    CreateSecretResponse (..),+    newCreateSecretResponse,++    -- * Response Lenses+    createSecretResponse_arn,+    createSecretResponse_name,+    createSecretResponse_replicationStatus,+    createSecretResponse_versionId,+    createSecretResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newCreateSecret' smart constructor.+data CreateSecret = CreateSecret'+  { -- | A list of Regions and KMS keys to replicate secrets.+    addReplicaRegions :: Prelude.Maybe (Prelude.NonEmpty ReplicaRegionType),+    -- | If you include @SecretString@ or @SecretBinary@, then Secrets Manager+    -- creates an initial version for the secret, and this parameter specifies+    -- the unique identifier for the new version.+    --+    -- If you use the Amazon Web Services CLI or one of the Amazon Web Services+    -- SDKs to call this operation, then you can leave this parameter empty.+    -- The CLI or SDK generates a random UUID for you and includes it as the+    -- value for this parameter in the request. If you don\'t use the SDK and+    -- instead generate a raw HTTP request to the Secrets Manager service+    -- endpoint, then you must generate a @ClientRequestToken@ yourself for the+    -- new version and include the value in the request.+    --+    -- This value helps ensure idempotency. Secrets Manager uses this value to+    -- prevent the accidental creation of duplicate versions if there are+    -- failures and retries during a rotation. We recommend that you generate a+    -- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+    -- value to ensure uniqueness of your versions within the specified secret.+    --+    -- -   If the @ClientRequestToken@ value isn\'t already associated with a+    --     version of the secret then a new version of the secret is created.+    --+    -- -   If a version with this value already exists and the version+    --     @SecretString@ and @SecretBinary@ values are the same as those in+    --     the request, then the request is ignored.+    --+    -- -   If a version with this value already exists and that version\'s+    --     @SecretString@ and @SecretBinary@ values are different from those in+    --     the request, then the request fails because you cannot modify an+    --     existing version. Instead, use PutSecretValue to create a new+    --     version.+    --+    -- This value becomes the @VersionId@ of the new version.+    clientRequestToken :: Prelude.Maybe Prelude.Text,+    -- | The description of the secret.+    description :: Prelude.Maybe Prelude.Text,+    -- | Specifies whether to overwrite a secret with the same name in the+    -- destination Region.+    forceOverwriteReplicaSecret :: Prelude.Maybe Prelude.Bool,+    -- | The ARN, key ID, or alias of the KMS key that Secrets Manager uses to+    -- encrypt the secret value in the secret. An alias is always prefixed by+    -- @alias\/@, for example @alias\/aws\/secretsmanager@. For more+    -- information, see+    -- <https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html About aliases>.+    --+    -- To use a KMS key in a different account, use the key ARN or the alias+    -- ARN.+    --+    -- If you don\'t specify this value, then Secrets Manager uses the key+    -- @aws\/secretsmanager@. If that key doesn\'t yet exist, then Secrets+    -- Manager creates it for you automatically the first time it encrypts the+    -- secret value.+    --+    -- If the secret is in a different Amazon Web Services account from the+    -- credentials calling the API, then you can\'t use @aws\/secretsmanager@+    -- to encrypt the secret, and you must create and use a customer managed+    -- KMS key.+    kmsKeyId :: Prelude.Maybe Prelude.Text,+    -- | The binary data to encrypt and store in the new version of the secret.+    -- We recommend that you store your binary data in a file and then pass the+    -- contents of the file as a parameter.+    --+    -- Either @SecretString@ or @SecretBinary@ must have a value, but not both.+    --+    -- This parameter is not available in the Secrets Manager console.+    secretBinary :: Prelude.Maybe (Data.Sensitive Data.Base64),+    -- | The text data to encrypt and store in this new version of the secret. We+    -- recommend you use a JSON structure of key\/value pairs for your secret+    -- value.+    --+    -- Either @SecretString@ or @SecretBinary@ must have a value, but not both.+    --+    -- If you create a secret by using the Secrets Manager console then Secrets+    -- Manager puts the protected secret text in only the @SecretString@+    -- parameter. The Secrets Manager console stores the information as a JSON+    -- structure of key\/value pairs that a Lambda rotation function can parse.+    secretString :: Prelude.Maybe (Data.Sensitive Prelude.Text),+    -- | A list of tags to attach to the secret. Each tag is a key and value pair+    -- of strings in a JSON text string, for example:+    --+    -- @[{\"Key\":\"CostCenter\",\"Value\":\"12345\"},{\"Key\":\"environment\",\"Value\":\"production\"}]@+    --+    -- Secrets Manager tag key names are case sensitive. A tag with the key+    -- \"ABC\" is a different tag from one with key \"abc\".+    --+    -- If you check tags in permissions policies as part of your security+    -- strategy, then adding or removing a tag can change permissions. If the+    -- completion of this operation would result in you losing your permissions+    -- for this secret, then Secrets Manager blocks the operation and returns+    -- an @Access Denied@ error. For more information, see+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#tag-secrets-abac Control access to secrets using tags>+    -- and+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#auth-and-access_tags2 Limit access to identities with tags that match secrets\' tags>.+    --+    -- For information about how to format a JSON parameter for the various+    -- command line tool environments, see+    -- <https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json Using JSON for Parameters>.+    -- If your command-line tool or SDK requires quotation marks around the+    -- parameter, you should use single quotes to avoid confusion with the+    -- double quotes required in the JSON text.+    --+    -- The following restrictions apply to tags:+    --+    -- -   Maximum number of tags per secret: 50+    --+    -- -   Maximum key length: 127 Unicode characters in UTF-8+    --+    -- -   Maximum value length: 255 Unicode characters in UTF-8+    --+    -- -   Tag keys and values are case sensitive.+    --+    -- -   Do not use the @aws:@ prefix in your tag names or values because+    --     Amazon Web Services reserves it for Amazon Web Services use. You+    --     can\'t edit or delete tag names or values with this prefix. Tags+    --     with this prefix do not count against your tags per secret limit.+    --+    -- -   If you use your tagging schema across multiple services and+    --     resources, other services might have restrictions on allowed+    --     characters. Generally allowed characters: letters, spaces, and+    --     numbers representable in UTF-8, plus the following special+    --     characters: + - = . _ : \/ \@.+    tags :: Prelude.Maybe [Tag],+    -- | The name of the new secret.+    --+    -- The secret name can contain ASCII letters, numbers, and the following+    -- characters: \/_+=.\@-+    --+    -- Do not end your secret name with a hyphen followed by six characters. If+    -- you do so, you risk confusion and unexpected results when searching for+    -- a secret by partial ARN. Secrets Manager automatically adds a hyphen and+    -- six random characters after the secret name at the end of the ARN.+    name :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CreateSecret' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'addReplicaRegions', 'createSecret_addReplicaRegions' - A list of Regions and KMS keys to replicate secrets.+--+-- 'clientRequestToken', 'createSecret_clientRequestToken' - If you include @SecretString@ or @SecretBinary@, then Secrets Manager+-- creates an initial version for the secret, and this parameter specifies+-- the unique identifier for the new version.+--+-- If you use the Amazon Web Services CLI or one of the Amazon Web Services+-- SDKs to call this operation, then you can leave this parameter empty.+-- The CLI or SDK generates a random UUID for you and includes it as the+-- value for this parameter in the request. If you don\'t use the SDK and+-- instead generate a raw HTTP request to the Secrets Manager service+-- endpoint, then you must generate a @ClientRequestToken@ yourself for the+-- new version and include the value in the request.+--+-- This value helps ensure idempotency. Secrets Manager uses this value to+-- prevent the accidental creation of duplicate versions if there are+-- failures and retries during a rotation. We recommend that you generate a+-- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+-- value to ensure uniqueness of your versions within the specified secret.+--+-- -   If the @ClientRequestToken@ value isn\'t already associated with a+--     version of the secret then a new version of the secret is created.+--+-- -   If a version with this value already exists and the version+--     @SecretString@ and @SecretBinary@ values are the same as those in+--     the request, then the request is ignored.+--+-- -   If a version with this value already exists and that version\'s+--     @SecretString@ and @SecretBinary@ values are different from those in+--     the request, then the request fails because you cannot modify an+--     existing version. Instead, use PutSecretValue to create a new+--     version.+--+-- This value becomes the @VersionId@ of the new version.+--+-- 'description', 'createSecret_description' - The description of the secret.+--+-- 'forceOverwriteReplicaSecret', 'createSecret_forceOverwriteReplicaSecret' - Specifies whether to overwrite a secret with the same name in the+-- destination Region.+--+-- 'kmsKeyId', 'createSecret_kmsKeyId' - The ARN, key ID, or alias of the KMS key that Secrets Manager uses to+-- encrypt the secret value in the secret. An alias is always prefixed by+-- @alias\/@, for example @alias\/aws\/secretsmanager@. For more+-- information, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html About aliases>.+--+-- To use a KMS key in a different account, use the key ARN or the alias+-- ARN.+--+-- If you don\'t specify this value, then Secrets Manager uses the key+-- @aws\/secretsmanager@. If that key doesn\'t yet exist, then Secrets+-- Manager creates it for you automatically the first time it encrypts the+-- secret value.+--+-- If the secret is in a different Amazon Web Services account from the+-- credentials calling the API, then you can\'t use @aws\/secretsmanager@+-- to encrypt the secret, and you must create and use a customer managed+-- KMS key.+--+-- 'secretBinary', 'createSecret_secretBinary' - The binary data to encrypt and store in the new version of the secret.+-- We recommend that you store your binary data in a file and then pass the+-- contents of the file as a parameter.+--+-- Either @SecretString@ or @SecretBinary@ must have a value, but not both.+--+-- This parameter is not available in the Secrets Manager console.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+--+-- 'secretString', 'createSecret_secretString' - The text data to encrypt and store in this new version of the secret. We+-- recommend you use a JSON structure of key\/value pairs for your secret+-- value.+--+-- Either @SecretString@ or @SecretBinary@ must have a value, but not both.+--+-- If you create a secret by using the Secrets Manager console then Secrets+-- Manager puts the protected secret text in only the @SecretString@+-- parameter. The Secrets Manager console stores the information as a JSON+-- structure of key\/value pairs that a Lambda rotation function can parse.+--+-- 'tags', 'createSecret_tags' - A list of tags to attach to the secret. Each tag is a key and value pair+-- of strings in a JSON text string, for example:+--+-- @[{\"Key\":\"CostCenter\",\"Value\":\"12345\"},{\"Key\":\"environment\",\"Value\":\"production\"}]@+--+-- Secrets Manager tag key names are case sensitive. A tag with the key+-- \"ABC\" is a different tag from one with key \"abc\".+--+-- If you check tags in permissions policies as part of your security+-- strategy, then adding or removing a tag can change permissions. If the+-- completion of this operation would result in you losing your permissions+-- for this secret, then Secrets Manager blocks the operation and returns+-- an @Access Denied@ error. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#tag-secrets-abac Control access to secrets using tags>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#auth-and-access_tags2 Limit access to identities with tags that match secrets\' tags>.+--+-- For information about how to format a JSON parameter for the various+-- command line tool environments, see+-- <https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json Using JSON for Parameters>.+-- If your command-line tool or SDK requires quotation marks around the+-- parameter, you should use single quotes to avoid confusion with the+-- double quotes required in the JSON text.+--+-- The following restrictions apply to tags:+--+-- -   Maximum number of tags per secret: 50+--+-- -   Maximum key length: 127 Unicode characters in UTF-8+--+-- -   Maximum value length: 255 Unicode characters in UTF-8+--+-- -   Tag keys and values are case sensitive.+--+-- -   Do not use the @aws:@ prefix in your tag names or values because+--     Amazon Web Services reserves it for Amazon Web Services use. You+--     can\'t edit or delete tag names or values with this prefix. Tags+--     with this prefix do not count against your tags per secret limit.+--+-- -   If you use your tagging schema across multiple services and+--     resources, other services might have restrictions on allowed+--     characters. Generally allowed characters: letters, spaces, and+--     numbers representable in UTF-8, plus the following special+--     characters: + - = . _ : \/ \@.+--+-- 'name', 'createSecret_name' - The name of the new secret.+--+-- The secret name can contain ASCII letters, numbers, and the following+-- characters: \/_+=.\@-+--+-- Do not end your secret name with a hyphen followed by six characters. If+-- you do so, you risk confusion and unexpected results when searching for+-- a secret by partial ARN. Secrets Manager automatically adds a hyphen and+-- six random characters after the secret name at the end of the ARN.+newCreateSecret ::+  -- | 'name'+  Prelude.Text ->+  CreateSecret+newCreateSecret pName_ =+  CreateSecret'+    { addReplicaRegions = Prelude.Nothing,+      clientRequestToken = Prelude.Nothing,+      description = Prelude.Nothing,+      forceOverwriteReplicaSecret = Prelude.Nothing,+      kmsKeyId = Prelude.Nothing,+      secretBinary = Prelude.Nothing,+      secretString = Prelude.Nothing,+      tags = Prelude.Nothing,+      name = pName_+    }++-- | A list of Regions and KMS keys to replicate secrets.+createSecret_addReplicaRegions :: Lens.Lens' CreateSecret (Prelude.Maybe (Prelude.NonEmpty ReplicaRegionType))+createSecret_addReplicaRegions = Lens.lens (\CreateSecret' {addReplicaRegions} -> addReplicaRegions) (\s@CreateSecret' {} a -> s {addReplicaRegions = a} :: CreateSecret) Prelude.. Lens.mapping Lens.coerced++-- | If you include @SecretString@ or @SecretBinary@, then Secrets Manager+-- creates an initial version for the secret, and this parameter specifies+-- the unique identifier for the new version.+--+-- If you use the Amazon Web Services CLI or one of the Amazon Web Services+-- SDKs to call this operation, then you can leave this parameter empty.+-- The CLI or SDK generates a random UUID for you and includes it as the+-- value for this parameter in the request. If you don\'t use the SDK and+-- instead generate a raw HTTP request to the Secrets Manager service+-- endpoint, then you must generate a @ClientRequestToken@ yourself for the+-- new version and include the value in the request.+--+-- This value helps ensure idempotency. Secrets Manager uses this value to+-- prevent the accidental creation of duplicate versions if there are+-- failures and retries during a rotation. We recommend that you generate a+-- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+-- value to ensure uniqueness of your versions within the specified secret.+--+-- -   If the @ClientRequestToken@ value isn\'t already associated with a+--     version of the secret then a new version of the secret is created.+--+-- -   If a version with this value already exists and the version+--     @SecretString@ and @SecretBinary@ values are the same as those in+--     the request, then the request is ignored.+--+-- -   If a version with this value already exists and that version\'s+--     @SecretString@ and @SecretBinary@ values are different from those in+--     the request, then the request fails because you cannot modify an+--     existing version. Instead, use PutSecretValue to create a new+--     version.+--+-- This value becomes the @VersionId@ of the new version.+createSecret_clientRequestToken :: Lens.Lens' CreateSecret (Prelude.Maybe Prelude.Text)+createSecret_clientRequestToken = Lens.lens (\CreateSecret' {clientRequestToken} -> clientRequestToken) (\s@CreateSecret' {} a -> s {clientRequestToken = a} :: CreateSecret)++-- | The description of the secret.+createSecret_description :: Lens.Lens' CreateSecret (Prelude.Maybe Prelude.Text)+createSecret_description = Lens.lens (\CreateSecret' {description} -> description) (\s@CreateSecret' {} a -> s {description = a} :: CreateSecret)++-- | Specifies whether to overwrite a secret with the same name in the+-- destination Region.+createSecret_forceOverwriteReplicaSecret :: Lens.Lens' CreateSecret (Prelude.Maybe Prelude.Bool)+createSecret_forceOverwriteReplicaSecret = Lens.lens (\CreateSecret' {forceOverwriteReplicaSecret} -> forceOverwriteReplicaSecret) (\s@CreateSecret' {} a -> s {forceOverwriteReplicaSecret = a} :: CreateSecret)++-- | The ARN, key ID, or alias of the KMS key that Secrets Manager uses to+-- encrypt the secret value in the secret. An alias is always prefixed by+-- @alias\/@, for example @alias\/aws\/secretsmanager@. For more+-- information, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html About aliases>.+--+-- To use a KMS key in a different account, use the key ARN or the alias+-- ARN.+--+-- If you don\'t specify this value, then Secrets Manager uses the key+-- @aws\/secretsmanager@. If that key doesn\'t yet exist, then Secrets+-- Manager creates it for you automatically the first time it encrypts the+-- secret value.+--+-- If the secret is in a different Amazon Web Services account from the+-- credentials calling the API, then you can\'t use @aws\/secretsmanager@+-- to encrypt the secret, and you must create and use a customer managed+-- KMS key.+createSecret_kmsKeyId :: Lens.Lens' CreateSecret (Prelude.Maybe Prelude.Text)+createSecret_kmsKeyId = Lens.lens (\CreateSecret' {kmsKeyId} -> kmsKeyId) (\s@CreateSecret' {} a -> s {kmsKeyId = a} :: CreateSecret)++-- | The binary data to encrypt and store in the new version of the secret.+-- We recommend that you store your binary data in a file and then pass the+-- contents of the file as a parameter.+--+-- Either @SecretString@ or @SecretBinary@ must have a value, but not both.+--+-- This parameter is not available in the Secrets Manager console.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+createSecret_secretBinary :: Lens.Lens' CreateSecret (Prelude.Maybe Prelude.ByteString)+createSecret_secretBinary = Lens.lens (\CreateSecret' {secretBinary} -> secretBinary) (\s@CreateSecret' {} a -> s {secretBinary = a} :: CreateSecret) Prelude.. Lens.mapping (Data._Sensitive Prelude.. Data._Base64)++-- | The text data to encrypt and store in this new version of the secret. We+-- recommend you use a JSON structure of key\/value pairs for your secret+-- value.+--+-- Either @SecretString@ or @SecretBinary@ must have a value, but not both.+--+-- If you create a secret by using the Secrets Manager console then Secrets+-- Manager puts the protected secret text in only the @SecretString@+-- parameter. The Secrets Manager console stores the information as a JSON+-- structure of key\/value pairs that a Lambda rotation function can parse.+createSecret_secretString :: Lens.Lens' CreateSecret (Prelude.Maybe Prelude.Text)+createSecret_secretString = Lens.lens (\CreateSecret' {secretString} -> secretString) (\s@CreateSecret' {} a -> s {secretString = a} :: CreateSecret) Prelude.. Lens.mapping Data._Sensitive++-- | A list of tags to attach to the secret. Each tag is a key and value pair+-- of strings in a JSON text string, for example:+--+-- @[{\"Key\":\"CostCenter\",\"Value\":\"12345\"},{\"Key\":\"environment\",\"Value\":\"production\"}]@+--+-- Secrets Manager tag key names are case sensitive. A tag with the key+-- \"ABC\" is a different tag from one with key \"abc\".+--+-- If you check tags in permissions policies as part of your security+-- strategy, then adding or removing a tag can change permissions. If the+-- completion of this operation would result in you losing your permissions+-- for this secret, then Secrets Manager blocks the operation and returns+-- an @Access Denied@ error. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#tag-secrets-abac Control access to secrets using tags>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#auth-and-access_tags2 Limit access to identities with tags that match secrets\' tags>.+--+-- For information about how to format a JSON parameter for the various+-- command line tool environments, see+-- <https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json Using JSON for Parameters>.+-- If your command-line tool or SDK requires quotation marks around the+-- parameter, you should use single quotes to avoid confusion with the+-- double quotes required in the JSON text.+--+-- The following restrictions apply to tags:+--+-- -   Maximum number of tags per secret: 50+--+-- -   Maximum key length: 127 Unicode characters in UTF-8+--+-- -   Maximum value length: 255 Unicode characters in UTF-8+--+-- -   Tag keys and values are case sensitive.+--+-- -   Do not use the @aws:@ prefix in your tag names or values because+--     Amazon Web Services reserves it for Amazon Web Services use. You+--     can\'t edit or delete tag names or values with this prefix. Tags+--     with this prefix do not count against your tags per secret limit.+--+-- -   If you use your tagging schema across multiple services and+--     resources, other services might have restrictions on allowed+--     characters. Generally allowed characters: letters, spaces, and+--     numbers representable in UTF-8, plus the following special+--     characters: + - = . _ : \/ \@.+createSecret_tags :: Lens.Lens' CreateSecret (Prelude.Maybe [Tag])+createSecret_tags = Lens.lens (\CreateSecret' {tags} -> tags) (\s@CreateSecret' {} a -> s {tags = a} :: CreateSecret) Prelude.. Lens.mapping Lens.coerced++-- | The name of the new secret.+--+-- The secret name can contain ASCII letters, numbers, and the following+-- characters: \/_+=.\@-+--+-- Do not end your secret name with a hyphen followed by six characters. If+-- you do so, you risk confusion and unexpected results when searching for+-- a secret by partial ARN. Secrets Manager automatically adds a hyphen and+-- six random characters after the secret name at the end of the ARN.+createSecret_name :: Lens.Lens' CreateSecret Prelude.Text+createSecret_name = Lens.lens (\CreateSecret' {name} -> name) (\s@CreateSecret' {} a -> s {name = a} :: CreateSecret)++instance Core.AWSRequest CreateSecret where+  type AWSResponse CreateSecret = CreateSecretResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          CreateSecretResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> ( x+                            Data..?> "ReplicationStatus"+                            Core..!@ Prelude.mempty+                        )+            Prelude.<*> (x Data..?> "VersionId")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable CreateSecret where+  hashWithSalt _salt CreateSecret' {..} =+    _salt+      `Prelude.hashWithSalt` addReplicaRegions+      `Prelude.hashWithSalt` clientRequestToken+      `Prelude.hashWithSalt` description+      `Prelude.hashWithSalt` forceOverwriteReplicaSecret+      `Prelude.hashWithSalt` kmsKeyId+      `Prelude.hashWithSalt` secretBinary+      `Prelude.hashWithSalt` secretString+      `Prelude.hashWithSalt` tags+      `Prelude.hashWithSalt` name++instance Prelude.NFData CreateSecret where+  rnf CreateSecret' {..} =+    Prelude.rnf addReplicaRegions+      `Prelude.seq` Prelude.rnf clientRequestToken+      `Prelude.seq` Prelude.rnf description+      `Prelude.seq` Prelude.rnf forceOverwriteReplicaSecret+      `Prelude.seq` Prelude.rnf kmsKeyId+      `Prelude.seq` Prelude.rnf secretBinary+      `Prelude.seq` Prelude.rnf secretString+      `Prelude.seq` Prelude.rnf tags+      `Prelude.seq` Prelude.rnf name++instance Data.ToHeaders CreateSecret where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.CreateSecret" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON CreateSecret where+  toJSON CreateSecret' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("AddReplicaRegions" Data..=)+              Prelude.<$> addReplicaRegions,+            ("ClientRequestToken" Data..=)+              Prelude.<$> clientRequestToken,+            ("Description" Data..=) Prelude.<$> description,+            ("ForceOverwriteReplicaSecret" Data..=)+              Prelude.<$> forceOverwriteReplicaSecret,+            ("KmsKeyId" Data..=) Prelude.<$> kmsKeyId,+            ("SecretBinary" Data..=) Prelude.<$> secretBinary,+            ("SecretString" Data..=) Prelude.<$> secretString,+            ("Tags" Data..=) Prelude.<$> tags,+            Prelude.Just ("Name" Data..= name)+          ]+      )++instance Data.ToPath CreateSecret where+  toPath = Prelude.const "/"++instance Data.ToQuery CreateSecret where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newCreateSecretResponse' smart constructor.+data CreateSecretResponse = CreateSecretResponse'+  { -- | The ARN of the new secret. The ARN includes the name of the secret+    -- followed by six random characters. This ensures that if you create a new+    -- secret with the same name as a deleted secret, then users with access to+    -- the old secret don\'t get access to the new secret because the ARNs are+    -- different.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The name of the new secret.+    name :: Prelude.Maybe Prelude.Text,+    -- | A list of the replicas of this secret and their status:+    --+    -- -   @Failed@, which indicates that the replica was not created.+    --+    -- -   @InProgress@, which indicates that Secrets Manager is in the process+    --     of creating the replica.+    --+    -- -   @InSync@, which indicates that the replica was created.+    replicationStatus :: Prelude.Maybe [ReplicationStatusType],+    -- | The unique identifier associated with the version of the new secret.+    versionId :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CreateSecretResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'createSecretResponse_arn' - The ARN of the new secret. The ARN includes the name of the secret+-- followed by six random characters. This ensures that if you create a new+-- secret with the same name as a deleted secret, then users with access to+-- the old secret don\'t get access to the new secret because the ARNs are+-- different.+--+-- 'name', 'createSecretResponse_name' - The name of the new secret.+--+-- 'replicationStatus', 'createSecretResponse_replicationStatus' - A list of the replicas of this secret and their status:+--+-- -   @Failed@, which indicates that the replica was not created.+--+-- -   @InProgress@, which indicates that Secrets Manager is in the process+--     of creating the replica.+--+-- -   @InSync@, which indicates that the replica was created.+--+-- 'versionId', 'createSecretResponse_versionId' - The unique identifier associated with the version of the new secret.+--+-- 'httpStatus', 'createSecretResponse_httpStatus' - The response's http status code.+newCreateSecretResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  CreateSecretResponse+newCreateSecretResponse pHttpStatus_ =+  CreateSecretResponse'+    { arn = Prelude.Nothing,+      name = Prelude.Nothing,+      replicationStatus = Prelude.Nothing,+      versionId = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the new secret. The ARN includes the name of the secret+-- followed by six random characters. This ensures that if you create a new+-- secret with the same name as a deleted secret, then users with access to+-- the old secret don\'t get access to the new secret because the ARNs are+-- different.+createSecretResponse_arn :: Lens.Lens' CreateSecretResponse (Prelude.Maybe Prelude.Text)+createSecretResponse_arn = Lens.lens (\CreateSecretResponse' {arn} -> arn) (\s@CreateSecretResponse' {} a -> s {arn = a} :: CreateSecretResponse)++-- | The name of the new secret.+createSecretResponse_name :: Lens.Lens' CreateSecretResponse (Prelude.Maybe Prelude.Text)+createSecretResponse_name = Lens.lens (\CreateSecretResponse' {name} -> name) (\s@CreateSecretResponse' {} a -> s {name = a} :: CreateSecretResponse)++-- | A list of the replicas of this secret and their status:+--+-- -   @Failed@, which indicates that the replica was not created.+--+-- -   @InProgress@, which indicates that Secrets Manager is in the process+--     of creating the replica.+--+-- -   @InSync@, which indicates that the replica was created.+createSecretResponse_replicationStatus :: Lens.Lens' CreateSecretResponse (Prelude.Maybe [ReplicationStatusType])+createSecretResponse_replicationStatus = Lens.lens (\CreateSecretResponse' {replicationStatus} -> replicationStatus) (\s@CreateSecretResponse' {} a -> s {replicationStatus = a} :: CreateSecretResponse) Prelude.. Lens.mapping Lens.coerced++-- | The unique identifier associated with the version of the new secret.+createSecretResponse_versionId :: Lens.Lens' CreateSecretResponse (Prelude.Maybe Prelude.Text)+createSecretResponse_versionId = Lens.lens (\CreateSecretResponse' {versionId} -> versionId) (\s@CreateSecretResponse' {} a -> s {versionId = a} :: CreateSecretResponse)++-- | The response's http status code.+createSecretResponse_httpStatus :: Lens.Lens' CreateSecretResponse Prelude.Int+createSecretResponse_httpStatus = Lens.lens (\CreateSecretResponse' {httpStatus} -> httpStatus) (\s@CreateSecretResponse' {} a -> s {httpStatus = a} :: CreateSecretResponse)++instance Prelude.NFData CreateSecretResponse where+  rnf CreateSecretResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf replicationStatus+      `Prelude.seq` Prelude.rnf versionId+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,207 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.DeleteResourcePolicy+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Deletes the resource-based permission policy attached to the secret. To+-- attach a policy to a secret, use PutResourcePolicy.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:DeleteResourcePolicy@. For+-- more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.DeleteResourcePolicy+  ( -- * Creating a Request+    DeleteResourcePolicy (..),+    newDeleteResourcePolicy,++    -- * Request Lenses+    deleteResourcePolicy_secretId,++    -- * Destructuring the Response+    DeleteResourcePolicyResponse (..),+    newDeleteResourcePolicyResponse,++    -- * Response Lenses+    deleteResourcePolicyResponse_arn,+    deleteResourcePolicyResponse_name,+    deleteResourcePolicyResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newDeleteResourcePolicy' smart constructor.+data DeleteResourcePolicy = DeleteResourcePolicy'+  { -- | The ARN or name of the secret to delete the attached resource-based+    -- policy for.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    secretId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteResourcePolicy' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'secretId', 'deleteResourcePolicy_secretId' - The ARN or name of the secret to delete the attached resource-based+-- policy for.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+newDeleteResourcePolicy ::+  -- | 'secretId'+  Prelude.Text ->+  DeleteResourcePolicy+newDeleteResourcePolicy pSecretId_ =+  DeleteResourcePolicy' {secretId = pSecretId_}++-- | The ARN or name of the secret to delete the attached resource-based+-- policy for.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+deleteResourcePolicy_secretId :: Lens.Lens' DeleteResourcePolicy Prelude.Text+deleteResourcePolicy_secretId = Lens.lens (\DeleteResourcePolicy' {secretId} -> secretId) (\s@DeleteResourcePolicy' {} a -> s {secretId = a} :: DeleteResourcePolicy)++instance Core.AWSRequest DeleteResourcePolicy where+  type+    AWSResponse DeleteResourcePolicy =+      DeleteResourcePolicyResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          DeleteResourcePolicyResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable DeleteResourcePolicy where+  hashWithSalt _salt DeleteResourcePolicy' {..} =+    _salt `Prelude.hashWithSalt` secretId++instance Prelude.NFData DeleteResourcePolicy where+  rnf DeleteResourcePolicy' {..} = Prelude.rnf secretId++instance Data.ToHeaders DeleteResourcePolicy where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.DeleteResourcePolicy" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DeleteResourcePolicy where+  toJSON DeleteResourcePolicy' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("SecretId" Data..= secretId)]+      )++instance Data.ToPath DeleteResourcePolicy where+  toPath = Prelude.const "/"++instance Data.ToQuery DeleteResourcePolicy where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newDeleteResourcePolicyResponse' smart constructor.+data DeleteResourcePolicyResponse = DeleteResourcePolicyResponse'+  { -- | The ARN of the secret that the resource-based policy was deleted for.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The name of the secret that the resource-based policy was deleted for.+    name :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteResourcePolicyResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'deleteResourcePolicyResponse_arn' - The ARN of the secret that the resource-based policy was deleted for.+--+-- 'name', 'deleteResourcePolicyResponse_name' - The name of the secret that the resource-based policy was deleted for.+--+-- 'httpStatus', 'deleteResourcePolicyResponse_httpStatus' - The response's http status code.+newDeleteResourcePolicyResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  DeleteResourcePolicyResponse+newDeleteResourcePolicyResponse pHttpStatus_ =+  DeleteResourcePolicyResponse'+    { arn =+        Prelude.Nothing,+      name = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret that the resource-based policy was deleted for.+deleteResourcePolicyResponse_arn :: Lens.Lens' DeleteResourcePolicyResponse (Prelude.Maybe Prelude.Text)+deleteResourcePolicyResponse_arn = Lens.lens (\DeleteResourcePolicyResponse' {arn} -> arn) (\s@DeleteResourcePolicyResponse' {} a -> s {arn = a} :: DeleteResourcePolicyResponse)++-- | The name of the secret that the resource-based policy was deleted for.+deleteResourcePolicyResponse_name :: Lens.Lens' DeleteResourcePolicyResponse (Prelude.Maybe Prelude.Text)+deleteResourcePolicyResponse_name = Lens.lens (\DeleteResourcePolicyResponse' {name} -> name) (\s@DeleteResourcePolicyResponse' {} a -> s {name = a} :: DeleteResourcePolicyResponse)++-- | The response's http status code.+deleteResourcePolicyResponse_httpStatus :: Lens.Lens' DeleteResourcePolicyResponse Prelude.Int+deleteResourcePolicyResponse_httpStatus = Lens.lens (\DeleteResourcePolicyResponse' {httpStatus} -> httpStatus) (\s@DeleteResourcePolicyResponse' {} a -> s {httpStatus = a} :: DeleteResourcePolicyResponse)++instance Prelude.NFData DeleteResourcePolicyResponse where+  rnf DeleteResourcePolicyResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,341 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.DeleteSecret+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Deletes a secret and all of its versions. You can specify a recovery+-- window during which you can restore the secret. The minimum recovery+-- window is 7 days. The default recovery window is 30 days. Secrets+-- Manager attaches a @DeletionDate@ stamp to the secret that specifies the+-- end of the recovery window. At the end of the recovery window, Secrets+-- Manager deletes the secret permanently.+--+-- You can\'t delete a primary secret that is replicated to other Regions.+-- You must first delete the replicas using RemoveRegionsFromReplication,+-- and then delete the primary secret. When you delete a replica, it is+-- deleted immediately.+--+-- You can\'t directly delete a version of a secret. Instead, you remove+-- all staging labels from the version using UpdateSecretVersionStage. This+-- marks the version as deprecated, and then Secrets Manager can+-- automatically delete the version in the background.+--+-- To determine whether an application still uses a secret, you can create+-- an Amazon CloudWatch alarm to alert you to any attempts to access a+-- secret during the recovery window. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/monitoring_cloudwatch_deleted-secrets.html Monitor secrets scheduled for deletion>.+--+-- Secrets Manager performs the permanent secret deletion at the end of the+-- waiting period as a background task with low priority. There is no+-- guarantee of a specific time after the recovery window for the permanent+-- delete to occur.+--+-- At any time before recovery window ends, you can use RestoreSecret to+-- remove the @DeletionDate@ and cancel the deletion of the secret.+--+-- When a secret is scheduled for deletion, you cannot retrieve the secret+-- value. You must first cancel the deletion with RestoreSecret and then+-- you can retrieve the secret.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:DeleteSecret@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.DeleteSecret+  ( -- * Creating a Request+    DeleteSecret (..),+    newDeleteSecret,++    -- * Request Lenses+    deleteSecret_forceDeleteWithoutRecovery,+    deleteSecret_recoveryWindowInDays,+    deleteSecret_secretId,++    -- * Destructuring the Response+    DeleteSecretResponse (..),+    newDeleteSecretResponse,++    -- * Response Lenses+    deleteSecretResponse_arn,+    deleteSecretResponse_deletionDate,+    deleteSecretResponse_name,+    deleteSecretResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newDeleteSecret' smart constructor.+data DeleteSecret = DeleteSecret'+  { -- | Specifies whether to delete the secret without any recovery window. You+    -- can\'t use both this parameter and @RecoveryWindowInDays@ in the same+    -- call. If you don\'t use either, then Secrets Manager defaults to a 30+    -- day recovery window.+    --+    -- Secrets Manager performs the actual deletion with an asynchronous+    -- background process, so there might be a short delay before the secret is+    -- permanently deleted. If you delete a secret and then immediately create+    -- a secret with the same name, use appropriate back off and retry logic.+    --+    -- Use this parameter with caution. This parameter causes the operation to+    -- skip the normal recovery window before the permanent deletion that+    -- Secrets Manager would normally impose with the @RecoveryWindowInDays@+    -- parameter. If you delete a secret with the @ForceDeleteWithoutRecovery@+    -- parameter, then you have no opportunity to recover the secret. You lose+    -- the secret permanently.+    forceDeleteWithoutRecovery :: Prelude.Maybe Prelude.Bool,+    -- | The number of days from 7 to 30 that Secrets Manager waits before+    -- permanently deleting the secret. You can\'t use both this parameter and+    -- @ForceDeleteWithoutRecovery@ in the same call. If you don\'t use either,+    -- then Secrets Manager defaults to a 30 day recovery window.+    recoveryWindowInDays :: Prelude.Maybe Prelude.Integer,+    -- | The ARN or name of the secret to delete.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    secretId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteSecret' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'forceDeleteWithoutRecovery', 'deleteSecret_forceDeleteWithoutRecovery' - Specifies whether to delete the secret without any recovery window. You+-- can\'t use both this parameter and @RecoveryWindowInDays@ in the same+-- call. If you don\'t use either, then Secrets Manager defaults to a 30+-- day recovery window.+--+-- Secrets Manager performs the actual deletion with an asynchronous+-- background process, so there might be a short delay before the secret is+-- permanently deleted. If you delete a secret and then immediately create+-- a secret with the same name, use appropriate back off and retry logic.+--+-- Use this parameter with caution. This parameter causes the operation to+-- skip the normal recovery window before the permanent deletion that+-- Secrets Manager would normally impose with the @RecoveryWindowInDays@+-- parameter. If you delete a secret with the @ForceDeleteWithoutRecovery@+-- parameter, then you have no opportunity to recover the secret. You lose+-- the secret permanently.+--+-- 'recoveryWindowInDays', 'deleteSecret_recoveryWindowInDays' - The number of days from 7 to 30 that Secrets Manager waits before+-- permanently deleting the secret. You can\'t use both this parameter and+-- @ForceDeleteWithoutRecovery@ in the same call. If you don\'t use either,+-- then Secrets Manager defaults to a 30 day recovery window.+--+-- 'secretId', 'deleteSecret_secretId' - The ARN or name of the secret to delete.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+newDeleteSecret ::+  -- | 'secretId'+  Prelude.Text ->+  DeleteSecret+newDeleteSecret pSecretId_ =+  DeleteSecret'+    { forceDeleteWithoutRecovery =+        Prelude.Nothing,+      recoveryWindowInDays = Prelude.Nothing,+      secretId = pSecretId_+    }++-- | Specifies whether to delete the secret without any recovery window. You+-- can\'t use both this parameter and @RecoveryWindowInDays@ in the same+-- call. If you don\'t use either, then Secrets Manager defaults to a 30+-- day recovery window.+--+-- Secrets Manager performs the actual deletion with an asynchronous+-- background process, so there might be a short delay before the secret is+-- permanently deleted. If you delete a secret and then immediately create+-- a secret with the same name, use appropriate back off and retry logic.+--+-- Use this parameter with caution. This parameter causes the operation to+-- skip the normal recovery window before the permanent deletion that+-- Secrets Manager would normally impose with the @RecoveryWindowInDays@+-- parameter. If you delete a secret with the @ForceDeleteWithoutRecovery@+-- parameter, then you have no opportunity to recover the secret. You lose+-- the secret permanently.+deleteSecret_forceDeleteWithoutRecovery :: Lens.Lens' DeleteSecret (Prelude.Maybe Prelude.Bool)+deleteSecret_forceDeleteWithoutRecovery = Lens.lens (\DeleteSecret' {forceDeleteWithoutRecovery} -> forceDeleteWithoutRecovery) (\s@DeleteSecret' {} a -> s {forceDeleteWithoutRecovery = a} :: DeleteSecret)++-- | The number of days from 7 to 30 that Secrets Manager waits before+-- permanently deleting the secret. You can\'t use both this parameter and+-- @ForceDeleteWithoutRecovery@ in the same call. If you don\'t use either,+-- then Secrets Manager defaults to a 30 day recovery window.+deleteSecret_recoveryWindowInDays :: Lens.Lens' DeleteSecret (Prelude.Maybe Prelude.Integer)+deleteSecret_recoveryWindowInDays = Lens.lens (\DeleteSecret' {recoveryWindowInDays} -> recoveryWindowInDays) (\s@DeleteSecret' {} a -> s {recoveryWindowInDays = a} :: DeleteSecret)++-- | The ARN or name of the secret to delete.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+deleteSecret_secretId :: Lens.Lens' DeleteSecret Prelude.Text+deleteSecret_secretId = Lens.lens (\DeleteSecret' {secretId} -> secretId) (\s@DeleteSecret' {} a -> s {secretId = a} :: DeleteSecret)++instance Core.AWSRequest DeleteSecret where+  type AWSResponse DeleteSecret = DeleteSecretResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          DeleteSecretResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "DeletionDate")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable DeleteSecret where+  hashWithSalt _salt DeleteSecret' {..} =+    _salt+      `Prelude.hashWithSalt` forceDeleteWithoutRecovery+      `Prelude.hashWithSalt` recoveryWindowInDays+      `Prelude.hashWithSalt` secretId++instance Prelude.NFData DeleteSecret where+  rnf DeleteSecret' {..} =+    Prelude.rnf forceDeleteWithoutRecovery+      `Prelude.seq` Prelude.rnf recoveryWindowInDays+      `Prelude.seq` Prelude.rnf secretId++instance Data.ToHeaders DeleteSecret where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.DeleteSecret" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DeleteSecret where+  toJSON DeleteSecret' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("ForceDeleteWithoutRecovery" Data..=)+              Prelude.<$> forceDeleteWithoutRecovery,+            ("RecoveryWindowInDays" Data..=)+              Prelude.<$> recoveryWindowInDays,+            Prelude.Just ("SecretId" Data..= secretId)+          ]+      )++instance Data.ToPath DeleteSecret where+  toPath = Prelude.const "/"++instance Data.ToQuery DeleteSecret where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newDeleteSecretResponse' smart constructor.+data DeleteSecretResponse = DeleteSecretResponse'+  { -- | The ARN of the secret.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The date and time after which this secret Secrets Manager can+    -- permanently delete this secret, and it can no longer be restored. This+    -- value is the date and time of the delete request plus the number of days+    -- in @RecoveryWindowInDays@.+    deletionDate :: Prelude.Maybe Data.POSIX,+    -- | The name of the secret.+    name :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteSecretResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'deleteSecretResponse_arn' - The ARN of the secret.+--+-- 'deletionDate', 'deleteSecretResponse_deletionDate' - The date and time after which this secret Secrets Manager can+-- permanently delete this secret, and it can no longer be restored. This+-- value is the date and time of the delete request plus the number of days+-- in @RecoveryWindowInDays@.+--+-- 'name', 'deleteSecretResponse_name' - The name of the secret.+--+-- 'httpStatus', 'deleteSecretResponse_httpStatus' - The response's http status code.+newDeleteSecretResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  DeleteSecretResponse+newDeleteSecretResponse pHttpStatus_ =+  DeleteSecretResponse'+    { arn = Prelude.Nothing,+      deletionDate = Prelude.Nothing,+      name = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret.+deleteSecretResponse_arn :: Lens.Lens' DeleteSecretResponse (Prelude.Maybe Prelude.Text)+deleteSecretResponse_arn = Lens.lens (\DeleteSecretResponse' {arn} -> arn) (\s@DeleteSecretResponse' {} a -> s {arn = a} :: DeleteSecretResponse)++-- | The date and time after which this secret Secrets Manager can+-- permanently delete this secret, and it can no longer be restored. This+-- value is the date and time of the delete request plus the number of days+-- in @RecoveryWindowInDays@.+deleteSecretResponse_deletionDate :: Lens.Lens' DeleteSecretResponse (Prelude.Maybe Prelude.UTCTime)+deleteSecretResponse_deletionDate = Lens.lens (\DeleteSecretResponse' {deletionDate} -> deletionDate) (\s@DeleteSecretResponse' {} a -> s {deletionDate = a} :: DeleteSecretResponse) Prelude.. Lens.mapping Data._Time++-- | The name of the secret.+deleteSecretResponse_name :: Lens.Lens' DeleteSecretResponse (Prelude.Maybe Prelude.Text)+deleteSecretResponse_name = Lens.lens (\DeleteSecretResponse' {name} -> name) (\s@DeleteSecretResponse' {} a -> s {name = a} :: DeleteSecretResponse)++-- | The response's http status code.+deleteSecretResponse_httpStatus :: Lens.Lens' DeleteSecretResponse Prelude.Int+deleteSecretResponse_httpStatus = Lens.lens (\DeleteSecretResponse' {httpStatus} -> httpStatus) (\s@DeleteSecretResponse' {} a -> s {httpStatus = a} :: DeleteSecretResponse)++instance Prelude.NFData DeleteSecretResponse where+  rnf DeleteSecretResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf deletionDate+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,557 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.DescribeSecret+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Retrieves the details of a secret. It does not include the encrypted+-- secret value. Secrets Manager only returns fields that have a value in+-- the response.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:DescribeSecret@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.DescribeSecret+  ( -- * Creating a Request+    DescribeSecret (..),+    newDescribeSecret,++    -- * Request Lenses+    describeSecret_secretId,++    -- * Destructuring the Response+    DescribeSecretResponse (..),+    newDescribeSecretResponse,++    -- * Response Lenses+    describeSecretResponse_arn,+    describeSecretResponse_createdDate,+    describeSecretResponse_deletedDate,+    describeSecretResponse_description,+    describeSecretResponse_kmsKeyId,+    describeSecretResponse_lastAccessedDate,+    describeSecretResponse_lastChangedDate,+    describeSecretResponse_lastRotatedDate,+    describeSecretResponse_name,+    describeSecretResponse_nextRotationDate,+    describeSecretResponse_owningService,+    describeSecretResponse_primaryRegion,+    describeSecretResponse_replicationStatus,+    describeSecretResponse_rotationEnabled,+    describeSecretResponse_rotationLambdaARN,+    describeSecretResponse_rotationRules,+    describeSecretResponse_tags,+    describeSecretResponse_versionIdsToStages,+    describeSecretResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newDescribeSecret' smart constructor.+data DescribeSecret = DescribeSecret'+  { -- | The ARN or name of the secret.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    secretId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DescribeSecret' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'secretId', 'describeSecret_secretId' - The ARN or name of the secret.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+newDescribeSecret ::+  -- | 'secretId'+  Prelude.Text ->+  DescribeSecret+newDescribeSecret pSecretId_ =+  DescribeSecret' {secretId = pSecretId_}++-- | The ARN or name of the secret.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+describeSecret_secretId :: Lens.Lens' DescribeSecret Prelude.Text+describeSecret_secretId = Lens.lens (\DescribeSecret' {secretId} -> secretId) (\s@DescribeSecret' {} a -> s {secretId = a} :: DescribeSecret)++instance Core.AWSRequest DescribeSecret where+  type+    AWSResponse DescribeSecret =+      DescribeSecretResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          DescribeSecretResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "CreatedDate")+            Prelude.<*> (x Data..?> "DeletedDate")+            Prelude.<*> (x Data..?> "Description")+            Prelude.<*> (x Data..?> "KmsKeyId")+            Prelude.<*> (x Data..?> "LastAccessedDate")+            Prelude.<*> (x Data..?> "LastChangedDate")+            Prelude.<*> (x Data..?> "LastRotatedDate")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (x Data..?> "NextRotationDate")+            Prelude.<*> (x Data..?> "OwningService")+            Prelude.<*> (x Data..?> "PrimaryRegion")+            Prelude.<*> ( x+                            Data..?> "ReplicationStatus"+                            Core..!@ Prelude.mempty+                        )+            Prelude.<*> (x Data..?> "RotationEnabled")+            Prelude.<*> (x Data..?> "RotationLambdaARN")+            Prelude.<*> (x Data..?> "RotationRules")+            Prelude.<*> (x Data..?> "Tags" Core..!@ Prelude.mempty)+            Prelude.<*> ( x+                            Data..?> "VersionIdsToStages"+                            Core..!@ Prelude.mempty+                        )+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable DescribeSecret where+  hashWithSalt _salt DescribeSecret' {..} =+    _salt `Prelude.hashWithSalt` secretId++instance Prelude.NFData DescribeSecret where+  rnf DescribeSecret' {..} = Prelude.rnf secretId++instance Data.ToHeaders DescribeSecret where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.DescribeSecret" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DescribeSecret where+  toJSON DescribeSecret' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("SecretId" Data..= secretId)]+      )++instance Data.ToPath DescribeSecret where+  toPath = Prelude.const "/"++instance Data.ToQuery DescribeSecret where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newDescribeSecretResponse' smart constructor.+data DescribeSecretResponse = DescribeSecretResponse'+  { -- | The ARN of the secret.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The date the secret was created.+    createdDate :: Prelude.Maybe Data.POSIX,+    -- | The date the secret is scheduled for deletion. If it is not scheduled+    -- for deletion, this field is omitted. When you delete a secret, Secrets+    -- Manager requires a recovery window of at least 7 days before deleting+    -- the secret. Some time after the deleted date, Secrets Manager deletes+    -- the secret, including all of its versions.+    --+    -- If a secret is scheduled for deletion, then its details, including the+    -- encrypted secret value, is not accessible. To cancel a scheduled+    -- deletion and restore access to the secret, use RestoreSecret.+    deletedDate :: Prelude.Maybe Data.POSIX,+    -- | The description of the secret.+    description :: Prelude.Maybe Prelude.Text,+    -- | The key ID or alias ARN of the KMS key that Secrets Manager uses to+    -- encrypt the secret value. If the secret is encrypted with the Amazon Web+    -- Services managed key @aws\/secretsmanager@, this field is omitted.+    -- Secrets created using the console use an KMS key ID.+    kmsKeyId :: Prelude.Maybe Prelude.Text,+    -- | The date that the secret was last accessed in the Region. This field is+    -- omitted if the secret has never been retrieved in the Region.+    lastAccessedDate :: Prelude.Maybe Data.POSIX,+    -- | The last date and time that this secret was modified in any way.+    lastChangedDate :: Prelude.Maybe Data.POSIX,+    -- | The last date and time that Secrets Manager rotated the secret. If the+    -- secret isn\'t configured for rotation, Secrets Manager returns null.+    lastRotatedDate :: Prelude.Maybe Data.POSIX,+    -- | The name of the secret.+    name :: Prelude.Maybe Prelude.Text,+    nextRotationDate :: Prelude.Maybe Data.POSIX,+    -- | The ID of the service that created this secret. For more information,+    -- see+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html Secrets managed by other Amazon Web Services services>.+    owningService :: Prelude.Maybe Prelude.Text,+    -- | The Region the secret is in. If a secret is replicated to other Regions,+    -- the replicas are listed in @ReplicationStatus@.+    primaryRegion :: Prelude.Maybe Prelude.Text,+    -- | A list of the replicas of this secret and their status:+    --+    -- -   @Failed@, which indicates that the replica was not created.+    --+    -- -   @InProgress@, which indicates that Secrets Manager is in the process+    --     of creating the replica.+    --+    -- -   @InSync@, which indicates that the replica was created.+    replicationStatus :: Prelude.Maybe [ReplicationStatusType],+    -- | Specifies whether automatic rotation is turned on for this secret.+    --+    -- To turn on rotation, use RotateSecret. To turn off rotation, use+    -- CancelRotateSecret.+    rotationEnabled :: Prelude.Maybe Prelude.Bool,+    -- | The ARN of the Lambda function that Secrets Manager invokes to rotate+    -- the secret.+    rotationLambdaARN :: Prelude.Maybe Prelude.Text,+    -- | The rotation schedule and Lambda function for this secret. If the secret+    -- previously had rotation turned on, but it is now turned off, this field+    -- shows the previous rotation schedule and rotation function. If the+    -- secret never had rotation turned on, this field is omitted.+    rotationRules :: Prelude.Maybe RotationRulesType,+    -- | The list of tags attached to the secret. To add tags to a secret, use+    -- TagResource. To remove tags, use UntagResource.+    tags :: Prelude.Maybe [Tag],+    -- | A list of the versions of the secret that have staging labels attached.+    -- Versions that don\'t have staging labels are considered deprecated and+    -- Secrets Manager can delete them.+    --+    -- Secrets Manager uses staging labels to indicate the status of a secret+    -- version during rotation. The three staging labels for rotation are:+    --+    -- -   @AWSCURRENT@, which indicates the current version of the secret.+    --+    -- -   @AWSPENDING@, which indicates the version of the secret that+    --     contains new secret information that will become the next current+    --     version when rotation finishes.+    --+    --     During rotation, Secrets Manager creates an @AWSPENDING@ version ID+    --     before creating the new secret version. To check if a secret version+    --     exists, call GetSecretValue.+    --+    -- -   @AWSPREVIOUS@, which indicates the previous current version of the+    --     secret. You can use this as the /last known good/ version.+    --+    -- For more information about rotation and staging labels, see+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html How rotation works>.+    versionIdsToStages :: Prelude.Maybe (Prelude.HashMap Prelude.Text (Prelude.NonEmpty Prelude.Text)),+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DescribeSecretResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'describeSecretResponse_arn' - The ARN of the secret.+--+-- 'createdDate', 'describeSecretResponse_createdDate' - The date the secret was created.+--+-- 'deletedDate', 'describeSecretResponse_deletedDate' - The date the secret is scheduled for deletion. If it is not scheduled+-- for deletion, this field is omitted. When you delete a secret, Secrets+-- Manager requires a recovery window of at least 7 days before deleting+-- the secret. Some time after the deleted date, Secrets Manager deletes+-- the secret, including all of its versions.+--+-- If a secret is scheduled for deletion, then its details, including the+-- encrypted secret value, is not accessible. To cancel a scheduled+-- deletion and restore access to the secret, use RestoreSecret.+--+-- 'description', 'describeSecretResponse_description' - The description of the secret.+--+-- 'kmsKeyId', 'describeSecretResponse_kmsKeyId' - The key ID or alias ARN of the KMS key that Secrets Manager uses to+-- encrypt the secret value. If the secret is encrypted with the Amazon Web+-- Services managed key @aws\/secretsmanager@, this field is omitted.+-- Secrets created using the console use an KMS key ID.+--+-- 'lastAccessedDate', 'describeSecretResponse_lastAccessedDate' - The date that the secret was last accessed in the Region. This field is+-- omitted if the secret has never been retrieved in the Region.+--+-- 'lastChangedDate', 'describeSecretResponse_lastChangedDate' - The last date and time that this secret was modified in any way.+--+-- 'lastRotatedDate', 'describeSecretResponse_lastRotatedDate' - The last date and time that Secrets Manager rotated the secret. If the+-- secret isn\'t configured for rotation, Secrets Manager returns null.+--+-- 'name', 'describeSecretResponse_name' - The name of the secret.+--+-- 'nextRotationDate', 'describeSecretResponse_nextRotationDate' - Undocumented member.+--+-- 'owningService', 'describeSecretResponse_owningService' - The ID of the service that created this secret. For more information,+-- see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html Secrets managed by other Amazon Web Services services>.+--+-- 'primaryRegion', 'describeSecretResponse_primaryRegion' - The Region the secret is in. If a secret is replicated to other Regions,+-- the replicas are listed in @ReplicationStatus@.+--+-- 'replicationStatus', 'describeSecretResponse_replicationStatus' - A list of the replicas of this secret and their status:+--+-- -   @Failed@, which indicates that the replica was not created.+--+-- -   @InProgress@, which indicates that Secrets Manager is in the process+--     of creating the replica.+--+-- -   @InSync@, which indicates that the replica was created.+--+-- 'rotationEnabled', 'describeSecretResponse_rotationEnabled' - Specifies whether automatic rotation is turned on for this secret.+--+-- To turn on rotation, use RotateSecret. To turn off rotation, use+-- CancelRotateSecret.+--+-- 'rotationLambdaARN', 'describeSecretResponse_rotationLambdaARN' - The ARN of the Lambda function that Secrets Manager invokes to rotate+-- the secret.+--+-- 'rotationRules', 'describeSecretResponse_rotationRules' - The rotation schedule and Lambda function for this secret. If the secret+-- previously had rotation turned on, but it is now turned off, this field+-- shows the previous rotation schedule and rotation function. If the+-- secret never had rotation turned on, this field is omitted.+--+-- 'tags', 'describeSecretResponse_tags' - The list of tags attached to the secret. To add tags to a secret, use+-- TagResource. To remove tags, use UntagResource.+--+-- 'versionIdsToStages', 'describeSecretResponse_versionIdsToStages' - A list of the versions of the secret that have staging labels attached.+-- Versions that don\'t have staging labels are considered deprecated and+-- Secrets Manager can delete them.+--+-- Secrets Manager uses staging labels to indicate the status of a secret+-- version during rotation. The three staging labels for rotation are:+--+-- -   @AWSCURRENT@, which indicates the current version of the secret.+--+-- -   @AWSPENDING@, which indicates the version of the secret that+--     contains new secret information that will become the next current+--     version when rotation finishes.+--+--     During rotation, Secrets Manager creates an @AWSPENDING@ version ID+--     before creating the new secret version. To check if a secret version+--     exists, call GetSecretValue.+--+-- -   @AWSPREVIOUS@, which indicates the previous current version of the+--     secret. You can use this as the /last known good/ version.+--+-- For more information about rotation and staging labels, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html How rotation works>.+--+-- 'httpStatus', 'describeSecretResponse_httpStatus' - The response's http status code.+newDescribeSecretResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  DescribeSecretResponse+newDescribeSecretResponse pHttpStatus_ =+  DescribeSecretResponse'+    { arn = Prelude.Nothing,+      createdDate = Prelude.Nothing,+      deletedDate = Prelude.Nothing,+      description = Prelude.Nothing,+      kmsKeyId = Prelude.Nothing,+      lastAccessedDate = Prelude.Nothing,+      lastChangedDate = Prelude.Nothing,+      lastRotatedDate = Prelude.Nothing,+      name = Prelude.Nothing,+      nextRotationDate = Prelude.Nothing,+      owningService = Prelude.Nothing,+      primaryRegion = Prelude.Nothing,+      replicationStatus = Prelude.Nothing,+      rotationEnabled = Prelude.Nothing,+      rotationLambdaARN = Prelude.Nothing,+      rotationRules = Prelude.Nothing,+      tags = Prelude.Nothing,+      versionIdsToStages = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret.+describeSecretResponse_arn :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.Text)+describeSecretResponse_arn = Lens.lens (\DescribeSecretResponse' {arn} -> arn) (\s@DescribeSecretResponse' {} a -> s {arn = a} :: DescribeSecretResponse)++-- | The date the secret was created.+describeSecretResponse_createdDate :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.UTCTime)+describeSecretResponse_createdDate = Lens.lens (\DescribeSecretResponse' {createdDate} -> createdDate) (\s@DescribeSecretResponse' {} a -> s {createdDate = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Data._Time++-- | The date the secret is scheduled for deletion. If it is not scheduled+-- for deletion, this field is omitted. When you delete a secret, Secrets+-- Manager requires a recovery window of at least 7 days before deleting+-- the secret. Some time after the deleted date, Secrets Manager deletes+-- the secret, including all of its versions.+--+-- If a secret is scheduled for deletion, then its details, including the+-- encrypted secret value, is not accessible. To cancel a scheduled+-- deletion and restore access to the secret, use RestoreSecret.+describeSecretResponse_deletedDate :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.UTCTime)+describeSecretResponse_deletedDate = Lens.lens (\DescribeSecretResponse' {deletedDate} -> deletedDate) (\s@DescribeSecretResponse' {} a -> s {deletedDate = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Data._Time++-- | The description of the secret.+describeSecretResponse_description :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.Text)+describeSecretResponse_description = Lens.lens (\DescribeSecretResponse' {description} -> description) (\s@DescribeSecretResponse' {} a -> s {description = a} :: DescribeSecretResponse)++-- | The key ID or alias ARN of the KMS key that Secrets Manager uses to+-- encrypt the secret value. If the secret is encrypted with the Amazon Web+-- Services managed key @aws\/secretsmanager@, this field is omitted.+-- Secrets created using the console use an KMS key ID.+describeSecretResponse_kmsKeyId :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.Text)+describeSecretResponse_kmsKeyId = Lens.lens (\DescribeSecretResponse' {kmsKeyId} -> kmsKeyId) (\s@DescribeSecretResponse' {} a -> s {kmsKeyId = a} :: DescribeSecretResponse)++-- | The date that the secret was last accessed in the Region. This field is+-- omitted if the secret has never been retrieved in the Region.+describeSecretResponse_lastAccessedDate :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.UTCTime)+describeSecretResponse_lastAccessedDate = Lens.lens (\DescribeSecretResponse' {lastAccessedDate} -> lastAccessedDate) (\s@DescribeSecretResponse' {} a -> s {lastAccessedDate = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Data._Time++-- | The last date and time that this secret was modified in any way.+describeSecretResponse_lastChangedDate :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.UTCTime)+describeSecretResponse_lastChangedDate = Lens.lens (\DescribeSecretResponse' {lastChangedDate} -> lastChangedDate) (\s@DescribeSecretResponse' {} a -> s {lastChangedDate = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Data._Time++-- | The last date and time that Secrets Manager rotated the secret. If the+-- secret isn\'t configured for rotation, Secrets Manager returns null.+describeSecretResponse_lastRotatedDate :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.UTCTime)+describeSecretResponse_lastRotatedDate = Lens.lens (\DescribeSecretResponse' {lastRotatedDate} -> lastRotatedDate) (\s@DescribeSecretResponse' {} a -> s {lastRotatedDate = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Data._Time++-- | The name of the secret.+describeSecretResponse_name :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.Text)+describeSecretResponse_name = Lens.lens (\DescribeSecretResponse' {name} -> name) (\s@DescribeSecretResponse' {} a -> s {name = a} :: DescribeSecretResponse)++-- | Undocumented member.+describeSecretResponse_nextRotationDate :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.UTCTime)+describeSecretResponse_nextRotationDate = Lens.lens (\DescribeSecretResponse' {nextRotationDate} -> nextRotationDate) (\s@DescribeSecretResponse' {} a -> s {nextRotationDate = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Data._Time++-- | The ID of the service that created this secret. For more information,+-- see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html Secrets managed by other Amazon Web Services services>.+describeSecretResponse_owningService :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.Text)+describeSecretResponse_owningService = Lens.lens (\DescribeSecretResponse' {owningService} -> owningService) (\s@DescribeSecretResponse' {} a -> s {owningService = a} :: DescribeSecretResponse)++-- | The Region the secret is in. If a secret is replicated to other Regions,+-- the replicas are listed in @ReplicationStatus@.+describeSecretResponse_primaryRegion :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.Text)+describeSecretResponse_primaryRegion = Lens.lens (\DescribeSecretResponse' {primaryRegion} -> primaryRegion) (\s@DescribeSecretResponse' {} a -> s {primaryRegion = a} :: DescribeSecretResponse)++-- | A list of the replicas of this secret and their status:+--+-- -   @Failed@, which indicates that the replica was not created.+--+-- -   @InProgress@, which indicates that Secrets Manager is in the process+--     of creating the replica.+--+-- -   @InSync@, which indicates that the replica was created.+describeSecretResponse_replicationStatus :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe [ReplicationStatusType])+describeSecretResponse_replicationStatus = Lens.lens (\DescribeSecretResponse' {replicationStatus} -> replicationStatus) (\s@DescribeSecretResponse' {} a -> s {replicationStatus = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Lens.coerced++-- | Specifies whether automatic rotation is turned on for this secret.+--+-- To turn on rotation, use RotateSecret. To turn off rotation, use+-- CancelRotateSecret.+describeSecretResponse_rotationEnabled :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.Bool)+describeSecretResponse_rotationEnabled = Lens.lens (\DescribeSecretResponse' {rotationEnabled} -> rotationEnabled) (\s@DescribeSecretResponse' {} a -> s {rotationEnabled = a} :: DescribeSecretResponse)++-- | The ARN of the Lambda function that Secrets Manager invokes to rotate+-- the secret.+describeSecretResponse_rotationLambdaARN :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe Prelude.Text)+describeSecretResponse_rotationLambdaARN = Lens.lens (\DescribeSecretResponse' {rotationLambdaARN} -> rotationLambdaARN) (\s@DescribeSecretResponse' {} a -> s {rotationLambdaARN = a} :: DescribeSecretResponse)++-- | The rotation schedule and Lambda function for this secret. If the secret+-- previously had rotation turned on, but it is now turned off, this field+-- shows the previous rotation schedule and rotation function. If the+-- secret never had rotation turned on, this field is omitted.+describeSecretResponse_rotationRules :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe RotationRulesType)+describeSecretResponse_rotationRules = Lens.lens (\DescribeSecretResponse' {rotationRules} -> rotationRules) (\s@DescribeSecretResponse' {} a -> s {rotationRules = a} :: DescribeSecretResponse)++-- | The list of tags attached to the secret. To add tags to a secret, use+-- TagResource. To remove tags, use UntagResource.+describeSecretResponse_tags :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe [Tag])+describeSecretResponse_tags = Lens.lens (\DescribeSecretResponse' {tags} -> tags) (\s@DescribeSecretResponse' {} a -> s {tags = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Lens.coerced++-- | A list of the versions of the secret that have staging labels attached.+-- Versions that don\'t have staging labels are considered deprecated and+-- Secrets Manager can delete them.+--+-- Secrets Manager uses staging labels to indicate the status of a secret+-- version during rotation. The three staging labels for rotation are:+--+-- -   @AWSCURRENT@, which indicates the current version of the secret.+--+-- -   @AWSPENDING@, which indicates the version of the secret that+--     contains new secret information that will become the next current+--     version when rotation finishes.+--+--     During rotation, Secrets Manager creates an @AWSPENDING@ version ID+--     before creating the new secret version. To check if a secret version+--     exists, call GetSecretValue.+--+-- -   @AWSPREVIOUS@, which indicates the previous current version of the+--     secret. You can use this as the /last known good/ version.+--+-- For more information about rotation and staging labels, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html How rotation works>.+describeSecretResponse_versionIdsToStages :: Lens.Lens' DescribeSecretResponse (Prelude.Maybe (Prelude.HashMap Prelude.Text (Prelude.NonEmpty Prelude.Text)))+describeSecretResponse_versionIdsToStages = Lens.lens (\DescribeSecretResponse' {versionIdsToStages} -> versionIdsToStages) (\s@DescribeSecretResponse' {} a -> s {versionIdsToStages = a} :: DescribeSecretResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+describeSecretResponse_httpStatus :: Lens.Lens' DescribeSecretResponse Prelude.Int+describeSecretResponse_httpStatus = Lens.lens (\DescribeSecretResponse' {httpStatus} -> httpStatus) (\s@DescribeSecretResponse' {} a -> s {httpStatus = a} :: DescribeSecretResponse)++instance Prelude.NFData DescribeSecretResponse where+  rnf DescribeSecretResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf createdDate+      `Prelude.seq` Prelude.rnf deletedDate+      `Prelude.seq` Prelude.rnf description+      `Prelude.seq` Prelude.rnf kmsKeyId+      `Prelude.seq` Prelude.rnf lastAccessedDate+      `Prelude.seq` Prelude.rnf lastChangedDate+      `Prelude.seq` Prelude.rnf lastRotatedDate+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf nextRotationDate+      `Prelude.seq` Prelude.rnf owningService+      `Prelude.seq` Prelude.rnf primaryRegion+      `Prelude.seq` Prelude.rnf replicationStatus+      `Prelude.seq` Prelude.rnf rotationEnabled+      `Prelude.seq` Prelude.rnf rotationLambdaARN+      `Prelude.seq` Prelude.rnf rotationRules+      `Prelude.seq` Prelude.rnf tags+      `Prelude.seq` Prelude.rnf versionIdsToStages+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,313 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.GetRandomPassword+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Generates a random password. We recommend that you specify the maximum+-- length and include every character type that the system you are+-- generating a password for can support.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:GetRandomPassword@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.GetRandomPassword+  ( -- * Creating a Request+    GetRandomPassword (..),+    newGetRandomPassword,++    -- * Request Lenses+    getRandomPassword_excludeCharacters,+    getRandomPassword_excludeLowercase,+    getRandomPassword_excludeNumbers,+    getRandomPassword_excludePunctuation,+    getRandomPassword_excludeUppercase,+    getRandomPassword_includeSpace,+    getRandomPassword_passwordLength,+    getRandomPassword_requireEachIncludedType,++    -- * Destructuring the Response+    GetRandomPasswordResponse (..),+    newGetRandomPasswordResponse,++    -- * Response Lenses+    getRandomPasswordResponse_randomPassword,+    getRandomPasswordResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newGetRandomPassword' smart constructor.+data GetRandomPassword = GetRandomPassword'+  { -- | A string of the characters that you don\'t want in the password.+    excludeCharacters :: Prelude.Maybe Prelude.Text,+    -- | Specifies whether to exclude lowercase letters from the password. If you+    -- don\'t include this switch, the password can contain lowercase letters.+    excludeLowercase :: Prelude.Maybe Prelude.Bool,+    -- | Specifies whether to exclude numbers from the password. If you don\'t+    -- include this switch, the password can contain numbers.+    excludeNumbers :: Prelude.Maybe Prelude.Bool,+    -- | Specifies whether to exclude the following punctuation characters from+    -- the password:+    -- @! \" # $ % & \' ( ) * + , - . \/ : ; \< = > ? \@ [ \\ ] ^ _ \` { | } ~@.+    -- If you don\'t include this switch, the password can contain punctuation.+    excludePunctuation :: Prelude.Maybe Prelude.Bool,+    -- | Specifies whether to exclude uppercase letters from the password. If you+    -- don\'t include this switch, the password can contain uppercase letters.+    excludeUppercase :: Prelude.Maybe Prelude.Bool,+    -- | Specifies whether to include the space character. If you include this+    -- switch, the password can contain space characters.+    includeSpace :: Prelude.Maybe Prelude.Bool,+    -- | The length of the password. If you don\'t include this parameter, the+    -- default length is 32 characters.+    passwordLength :: Prelude.Maybe Prelude.Natural,+    -- | Specifies whether to include at least one upper and lowercase letter,+    -- one number, and one punctuation. If you don\'t include this switch, the+    -- password contains at least one of every character type.+    requireEachIncludedType :: Prelude.Maybe Prelude.Bool+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetRandomPassword' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'excludeCharacters', 'getRandomPassword_excludeCharacters' - A string of the characters that you don\'t want in the password.+--+-- 'excludeLowercase', 'getRandomPassword_excludeLowercase' - Specifies whether to exclude lowercase letters from the password. If you+-- don\'t include this switch, the password can contain lowercase letters.+--+-- 'excludeNumbers', 'getRandomPassword_excludeNumbers' - Specifies whether to exclude numbers from the password. If you don\'t+-- include this switch, the password can contain numbers.+--+-- 'excludePunctuation', 'getRandomPassword_excludePunctuation' - Specifies whether to exclude the following punctuation characters from+-- the password:+-- @! \" # $ % & \' ( ) * + , - . \/ : ; \< = > ? \@ [ \\ ] ^ _ \` { | } ~@.+-- If you don\'t include this switch, the password can contain punctuation.+--+-- 'excludeUppercase', 'getRandomPassword_excludeUppercase' - Specifies whether to exclude uppercase letters from the password. If you+-- don\'t include this switch, the password can contain uppercase letters.+--+-- 'includeSpace', 'getRandomPassword_includeSpace' - Specifies whether to include the space character. If you include this+-- switch, the password can contain space characters.+--+-- 'passwordLength', 'getRandomPassword_passwordLength' - The length of the password. If you don\'t include this parameter, the+-- default length is 32 characters.+--+-- 'requireEachIncludedType', 'getRandomPassword_requireEachIncludedType' - Specifies whether to include at least one upper and lowercase letter,+-- one number, and one punctuation. If you don\'t include this switch, the+-- password contains at least one of every character type.+newGetRandomPassword ::+  GetRandomPassword+newGetRandomPassword =+  GetRandomPassword'+    { excludeCharacters =+        Prelude.Nothing,+      excludeLowercase = Prelude.Nothing,+      excludeNumbers = Prelude.Nothing,+      excludePunctuation = Prelude.Nothing,+      excludeUppercase = Prelude.Nothing,+      includeSpace = Prelude.Nothing,+      passwordLength = Prelude.Nothing,+      requireEachIncludedType = Prelude.Nothing+    }++-- | A string of the characters that you don\'t want in the password.+getRandomPassword_excludeCharacters :: Lens.Lens' GetRandomPassword (Prelude.Maybe Prelude.Text)+getRandomPassword_excludeCharacters = Lens.lens (\GetRandomPassword' {excludeCharacters} -> excludeCharacters) (\s@GetRandomPassword' {} a -> s {excludeCharacters = a} :: GetRandomPassword)++-- | Specifies whether to exclude lowercase letters from the password. If you+-- don\'t include this switch, the password can contain lowercase letters.+getRandomPassword_excludeLowercase :: Lens.Lens' GetRandomPassword (Prelude.Maybe Prelude.Bool)+getRandomPassword_excludeLowercase = Lens.lens (\GetRandomPassword' {excludeLowercase} -> excludeLowercase) (\s@GetRandomPassword' {} a -> s {excludeLowercase = a} :: GetRandomPassword)++-- | Specifies whether to exclude numbers from the password. If you don\'t+-- include this switch, the password can contain numbers.+getRandomPassword_excludeNumbers :: Lens.Lens' GetRandomPassword (Prelude.Maybe Prelude.Bool)+getRandomPassword_excludeNumbers = Lens.lens (\GetRandomPassword' {excludeNumbers} -> excludeNumbers) (\s@GetRandomPassword' {} a -> s {excludeNumbers = a} :: GetRandomPassword)++-- | Specifies whether to exclude the following punctuation characters from+-- the password:+-- @! \" # $ % & \' ( ) * + , - . \/ : ; \< = > ? \@ [ \\ ] ^ _ \` { | } ~@.+-- If you don\'t include this switch, the password can contain punctuation.+getRandomPassword_excludePunctuation :: Lens.Lens' GetRandomPassword (Prelude.Maybe Prelude.Bool)+getRandomPassword_excludePunctuation = Lens.lens (\GetRandomPassword' {excludePunctuation} -> excludePunctuation) (\s@GetRandomPassword' {} a -> s {excludePunctuation = a} :: GetRandomPassword)++-- | Specifies whether to exclude uppercase letters from the password. If you+-- don\'t include this switch, the password can contain uppercase letters.+getRandomPassword_excludeUppercase :: Lens.Lens' GetRandomPassword (Prelude.Maybe Prelude.Bool)+getRandomPassword_excludeUppercase = Lens.lens (\GetRandomPassword' {excludeUppercase} -> excludeUppercase) (\s@GetRandomPassword' {} a -> s {excludeUppercase = a} :: GetRandomPassword)++-- | Specifies whether to include the space character. If you include this+-- switch, the password can contain space characters.+getRandomPassword_includeSpace :: Lens.Lens' GetRandomPassword (Prelude.Maybe Prelude.Bool)+getRandomPassword_includeSpace = Lens.lens (\GetRandomPassword' {includeSpace} -> includeSpace) (\s@GetRandomPassword' {} a -> s {includeSpace = a} :: GetRandomPassword)++-- | The length of the password. If you don\'t include this parameter, the+-- default length is 32 characters.+getRandomPassword_passwordLength :: Lens.Lens' GetRandomPassword (Prelude.Maybe Prelude.Natural)+getRandomPassword_passwordLength = Lens.lens (\GetRandomPassword' {passwordLength} -> passwordLength) (\s@GetRandomPassword' {} a -> s {passwordLength = a} :: GetRandomPassword)++-- | Specifies whether to include at least one upper and lowercase letter,+-- one number, and one punctuation. If you don\'t include this switch, the+-- password contains at least one of every character type.+getRandomPassword_requireEachIncludedType :: Lens.Lens' GetRandomPassword (Prelude.Maybe Prelude.Bool)+getRandomPassword_requireEachIncludedType = Lens.lens (\GetRandomPassword' {requireEachIncludedType} -> requireEachIncludedType) (\s@GetRandomPassword' {} a -> s {requireEachIncludedType = a} :: GetRandomPassword)++instance Core.AWSRequest GetRandomPassword where+  type+    AWSResponse GetRandomPassword =+      GetRandomPasswordResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetRandomPasswordResponse'+            Prelude.<$> (x Data..?> "RandomPassword")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetRandomPassword where+  hashWithSalt _salt GetRandomPassword' {..} =+    _salt+      `Prelude.hashWithSalt` excludeCharacters+      `Prelude.hashWithSalt` excludeLowercase+      `Prelude.hashWithSalt` excludeNumbers+      `Prelude.hashWithSalt` excludePunctuation+      `Prelude.hashWithSalt` excludeUppercase+      `Prelude.hashWithSalt` includeSpace+      `Prelude.hashWithSalt` passwordLength+      `Prelude.hashWithSalt` requireEachIncludedType++instance Prelude.NFData GetRandomPassword where+  rnf GetRandomPassword' {..} =+    Prelude.rnf excludeCharacters+      `Prelude.seq` Prelude.rnf excludeLowercase+      `Prelude.seq` Prelude.rnf excludeNumbers+      `Prelude.seq` Prelude.rnf excludePunctuation+      `Prelude.seq` Prelude.rnf excludeUppercase+      `Prelude.seq` Prelude.rnf includeSpace+      `Prelude.seq` Prelude.rnf passwordLength+      `Prelude.seq` Prelude.rnf requireEachIncludedType++instance Data.ToHeaders GetRandomPassword where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.GetRandomPassword" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetRandomPassword where+  toJSON GetRandomPassword' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("ExcludeCharacters" Data..=)+              Prelude.<$> excludeCharacters,+            ("ExcludeLowercase" Data..=)+              Prelude.<$> excludeLowercase,+            ("ExcludeNumbers" Data..=)+              Prelude.<$> excludeNumbers,+            ("ExcludePunctuation" Data..=)+              Prelude.<$> excludePunctuation,+            ("ExcludeUppercase" Data..=)+              Prelude.<$> excludeUppercase,+            ("IncludeSpace" Data..=) Prelude.<$> includeSpace,+            ("PasswordLength" Data..=)+              Prelude.<$> passwordLength,+            ("RequireEachIncludedType" Data..=)+              Prelude.<$> requireEachIncludedType+          ]+      )++instance Data.ToPath GetRandomPassword where+  toPath = Prelude.const "/"++instance Data.ToQuery GetRandomPassword where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newGetRandomPasswordResponse' smart constructor.+data GetRandomPasswordResponse = GetRandomPasswordResponse'+  { -- | A string with the password.+    randomPassword :: Prelude.Maybe (Data.Sensitive Prelude.Text),+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetRandomPasswordResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'randomPassword', 'getRandomPasswordResponse_randomPassword' - A string with the password.+--+-- 'httpStatus', 'getRandomPasswordResponse_httpStatus' - The response's http status code.+newGetRandomPasswordResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetRandomPasswordResponse+newGetRandomPasswordResponse pHttpStatus_ =+  GetRandomPasswordResponse'+    { randomPassword =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | A string with the password.+getRandomPasswordResponse_randomPassword :: Lens.Lens' GetRandomPasswordResponse (Prelude.Maybe Prelude.Text)+getRandomPasswordResponse_randomPassword = Lens.lens (\GetRandomPasswordResponse' {randomPassword} -> randomPassword) (\s@GetRandomPasswordResponse' {} a -> s {randomPassword = a} :: GetRandomPasswordResponse) Prelude.. Lens.mapping Data._Sensitive++-- | The response's http status code.+getRandomPasswordResponse_httpStatus :: Lens.Lens' GetRandomPasswordResponse Prelude.Int+getRandomPasswordResponse_httpStatus = Lens.lens (\GetRandomPasswordResponse' {httpStatus} -> httpStatus) (\s@GetRandomPasswordResponse' {} a -> s {httpStatus = a} :: GetRandomPasswordResponse)++instance Prelude.NFData GetRandomPasswordResponse where+  rnf GetRandomPasswordResponse' {..} =+    Prelude.rnf randomPassword+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,226 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.GetResourcePolicy+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Retrieves the JSON text of the resource-based policy document attached+-- to the secret. For more information about permissions policies attached+-- to a secret, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_resource-policies.html Permissions policies attached to a secret>.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:GetResourcePolicy@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.GetResourcePolicy+  ( -- * Creating a Request+    GetResourcePolicy (..),+    newGetResourcePolicy,++    -- * Request Lenses+    getResourcePolicy_secretId,++    -- * Destructuring the Response+    GetResourcePolicyResponse (..),+    newGetResourcePolicyResponse,++    -- * Response Lenses+    getResourcePolicyResponse_arn,+    getResourcePolicyResponse_name,+    getResourcePolicyResponse_resourcePolicy,+    getResourcePolicyResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newGetResourcePolicy' smart constructor.+data GetResourcePolicy = GetResourcePolicy'+  { -- | The ARN or name of the secret to retrieve the attached resource-based+    -- policy for.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    secretId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetResourcePolicy' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'secretId', 'getResourcePolicy_secretId' - The ARN or name of the secret to retrieve the attached resource-based+-- policy for.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+newGetResourcePolicy ::+  -- | 'secretId'+  Prelude.Text ->+  GetResourcePolicy+newGetResourcePolicy pSecretId_ =+  GetResourcePolicy' {secretId = pSecretId_}++-- | The ARN or name of the secret to retrieve the attached resource-based+-- policy for.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+getResourcePolicy_secretId :: Lens.Lens' GetResourcePolicy Prelude.Text+getResourcePolicy_secretId = Lens.lens (\GetResourcePolicy' {secretId} -> secretId) (\s@GetResourcePolicy' {} a -> s {secretId = a} :: GetResourcePolicy)++instance Core.AWSRequest GetResourcePolicy where+  type+    AWSResponse GetResourcePolicy =+      GetResourcePolicyResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetResourcePolicyResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (x Data..?> "ResourcePolicy")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetResourcePolicy where+  hashWithSalt _salt GetResourcePolicy' {..} =+    _salt `Prelude.hashWithSalt` secretId++instance Prelude.NFData GetResourcePolicy where+  rnf GetResourcePolicy' {..} = Prelude.rnf secretId++instance Data.ToHeaders GetResourcePolicy where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.GetResourcePolicy" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetResourcePolicy where+  toJSON GetResourcePolicy' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("SecretId" Data..= secretId)]+      )++instance Data.ToPath GetResourcePolicy where+  toPath = Prelude.const "/"++instance Data.ToQuery GetResourcePolicy where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newGetResourcePolicyResponse' smart constructor.+data GetResourcePolicyResponse = GetResourcePolicyResponse'+  { -- | The ARN of the secret that the resource-based policy was retrieved for.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The name of the secret that the resource-based policy was retrieved for.+    name :: Prelude.Maybe Prelude.Text,+    -- | A JSON-formatted string that contains the permissions policy attached to+    -- the secret. For more information about permissions policies, see+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control for Secrets Manager>.+    resourcePolicy :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetResourcePolicyResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'getResourcePolicyResponse_arn' - The ARN of the secret that the resource-based policy was retrieved for.+--+-- 'name', 'getResourcePolicyResponse_name' - The name of the secret that the resource-based policy was retrieved for.+--+-- 'resourcePolicy', 'getResourcePolicyResponse_resourcePolicy' - A JSON-formatted string that contains the permissions policy attached to+-- the secret. For more information about permissions policies, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control for Secrets Manager>.+--+-- 'httpStatus', 'getResourcePolicyResponse_httpStatus' - The response's http status code.+newGetResourcePolicyResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetResourcePolicyResponse+newGetResourcePolicyResponse pHttpStatus_ =+  GetResourcePolicyResponse'+    { arn = Prelude.Nothing,+      name = Prelude.Nothing,+      resourcePolicy = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret that the resource-based policy was retrieved for.+getResourcePolicyResponse_arn :: Lens.Lens' GetResourcePolicyResponse (Prelude.Maybe Prelude.Text)+getResourcePolicyResponse_arn = Lens.lens (\GetResourcePolicyResponse' {arn} -> arn) (\s@GetResourcePolicyResponse' {} a -> s {arn = a} :: GetResourcePolicyResponse)++-- | The name of the secret that the resource-based policy was retrieved for.+getResourcePolicyResponse_name :: Lens.Lens' GetResourcePolicyResponse (Prelude.Maybe Prelude.Text)+getResourcePolicyResponse_name = Lens.lens (\GetResourcePolicyResponse' {name} -> name) (\s@GetResourcePolicyResponse' {} a -> s {name = a} :: GetResourcePolicyResponse)++-- | A JSON-formatted string that contains the permissions policy attached to+-- the secret. For more information about permissions policies, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control for Secrets Manager>.+getResourcePolicyResponse_resourcePolicy :: Lens.Lens' GetResourcePolicyResponse (Prelude.Maybe Prelude.Text)+getResourcePolicyResponse_resourcePolicy = Lens.lens (\GetResourcePolicyResponse' {resourcePolicy} -> resourcePolicy) (\s@GetResourcePolicyResponse' {} a -> s {resourcePolicy = a} :: GetResourcePolicyResponse)++-- | The response's http status code.+getResourcePolicyResponse_httpStatus :: Lens.Lens' GetResourcePolicyResponse Prelude.Int+getResourcePolicyResponse_httpStatus = Lens.lens (\GetResourcePolicyResponse' {httpStatus} -> httpStatus) (\s@GetResourcePolicyResponse' {} a -> s {httpStatus = a} :: GetResourcePolicyResponse)++instance Prelude.NFData GetResourcePolicyResponse where+  rnf GetResourcePolicyResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf resourcePolicy+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,398 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.GetSecretValue+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Retrieves the contents of the encrypted fields @SecretString@ or+-- @SecretBinary@ from the specified version of a secret, whichever+-- contains content.+--+-- We recommend that you cache your secret values by using client-side+-- caching. Caching secrets improves speed and reduces your costs. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets.html Cache secrets for your applications>.+--+-- To retrieve the previous version of a secret, use @VersionStage@ and+-- specify AWSPREVIOUS. To revert to the previous version of a secret, call+-- <https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/update-secret-version-stage.html UpdateSecretVersionStage>.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:GetSecretValue@. If the secret+-- is encrypted using a customer-managed key instead of the Amazon Web+-- Services managed key @aws\/secretsmanager@, then you also need+-- @kms:Decrypt@ permissions for that key. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.GetSecretValue+  ( -- * Creating a Request+    GetSecretValue (..),+    newGetSecretValue,++    -- * Request Lenses+    getSecretValue_versionId,+    getSecretValue_versionStage,+    getSecretValue_secretId,++    -- * Destructuring the Response+    GetSecretValueResponse (..),+    newGetSecretValueResponse,++    -- * Response Lenses+    getSecretValueResponse_arn,+    getSecretValueResponse_createdDate,+    getSecretValueResponse_name,+    getSecretValueResponse_secretBinary,+    getSecretValueResponse_secretString,+    getSecretValueResponse_versionId,+    getSecretValueResponse_versionStages,+    getSecretValueResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newGetSecretValue' smart constructor.+data GetSecretValue = GetSecretValue'+  { -- | The unique identifier of the version of the secret to retrieve. If you+    -- include both this parameter and @VersionStage@, the two parameters must+    -- refer to the same secret version. If you don\'t specify either a+    -- @VersionStage@ or @VersionId@, then Secrets Manager returns the+    -- @AWSCURRENT@ version.+    --+    -- This value is typically a+    -- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+    -- value with 32 hexadecimal digits.+    versionId :: Prelude.Maybe Prelude.Text,+    -- | The staging label of the version of the secret to retrieve.+    --+    -- Secrets Manager uses staging labels to keep track of different versions+    -- during the rotation process. If you include both this parameter and+    -- @VersionId@, the two parameters must refer to the same secret version.+    -- If you don\'t specify either a @VersionStage@ or @VersionId@, Secrets+    -- Manager returns the @AWSCURRENT@ version.+    versionStage :: Prelude.Maybe Prelude.Text,+    -- | The ARN or name of the secret to retrieve.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    secretId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetSecretValue' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'versionId', 'getSecretValue_versionId' - The unique identifier of the version of the secret to retrieve. If you+-- include both this parameter and @VersionStage@, the two parameters must+-- refer to the same secret version. If you don\'t specify either a+-- @VersionStage@ or @VersionId@, then Secrets Manager returns the+-- @AWSCURRENT@ version.+--+-- This value is typically a+-- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+-- value with 32 hexadecimal digits.+--+-- 'versionStage', 'getSecretValue_versionStage' - The staging label of the version of the secret to retrieve.+--+-- Secrets Manager uses staging labels to keep track of different versions+-- during the rotation process. If you include both this parameter and+-- @VersionId@, the two parameters must refer to the same secret version.+-- If you don\'t specify either a @VersionStage@ or @VersionId@, Secrets+-- Manager returns the @AWSCURRENT@ version.+--+-- 'secretId', 'getSecretValue_secretId' - The ARN or name of the secret to retrieve.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+newGetSecretValue ::+  -- | 'secretId'+  Prelude.Text ->+  GetSecretValue+newGetSecretValue pSecretId_ =+  GetSecretValue'+    { versionId = Prelude.Nothing,+      versionStage = Prelude.Nothing,+      secretId = pSecretId_+    }++-- | The unique identifier of the version of the secret to retrieve. If you+-- include both this parameter and @VersionStage@, the two parameters must+-- refer to the same secret version. If you don\'t specify either a+-- @VersionStage@ or @VersionId@, then Secrets Manager returns the+-- @AWSCURRENT@ version.+--+-- This value is typically a+-- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+-- value with 32 hexadecimal digits.+getSecretValue_versionId :: Lens.Lens' GetSecretValue (Prelude.Maybe Prelude.Text)+getSecretValue_versionId = Lens.lens (\GetSecretValue' {versionId} -> versionId) (\s@GetSecretValue' {} a -> s {versionId = a} :: GetSecretValue)++-- | The staging label of the version of the secret to retrieve.+--+-- Secrets Manager uses staging labels to keep track of different versions+-- during the rotation process. If you include both this parameter and+-- @VersionId@, the two parameters must refer to the same secret version.+-- If you don\'t specify either a @VersionStage@ or @VersionId@, Secrets+-- Manager returns the @AWSCURRENT@ version.+getSecretValue_versionStage :: Lens.Lens' GetSecretValue (Prelude.Maybe Prelude.Text)+getSecretValue_versionStage = Lens.lens (\GetSecretValue' {versionStage} -> versionStage) (\s@GetSecretValue' {} a -> s {versionStage = a} :: GetSecretValue)++-- | The ARN or name of the secret to retrieve.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+getSecretValue_secretId :: Lens.Lens' GetSecretValue Prelude.Text+getSecretValue_secretId = Lens.lens (\GetSecretValue' {secretId} -> secretId) (\s@GetSecretValue' {} a -> s {secretId = a} :: GetSecretValue)++instance Core.AWSRequest GetSecretValue where+  type+    AWSResponse GetSecretValue =+      GetSecretValueResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetSecretValueResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "CreatedDate")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (x Data..?> "SecretBinary")+            Prelude.<*> (x Data..?> "SecretString")+            Prelude.<*> (x Data..?> "VersionId")+            Prelude.<*> (x Data..?> "VersionStages")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetSecretValue where+  hashWithSalt _salt GetSecretValue' {..} =+    _salt+      `Prelude.hashWithSalt` versionId+      `Prelude.hashWithSalt` versionStage+      `Prelude.hashWithSalt` secretId++instance Prelude.NFData GetSecretValue where+  rnf GetSecretValue' {..} =+    Prelude.rnf versionId+      `Prelude.seq` Prelude.rnf versionStage+      `Prelude.seq` Prelude.rnf secretId++instance Data.ToHeaders GetSecretValue where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.GetSecretValue" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetSecretValue where+  toJSON GetSecretValue' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("VersionId" Data..=) Prelude.<$> versionId,+            ("VersionStage" Data..=) Prelude.<$> versionStage,+            Prelude.Just ("SecretId" Data..= secretId)+          ]+      )++instance Data.ToPath GetSecretValue where+  toPath = Prelude.const "/"++instance Data.ToQuery GetSecretValue where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newGetSecretValueResponse' smart constructor.+data GetSecretValueResponse = GetSecretValueResponse'+  { -- | The ARN of the secret.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The date and time that this version of the secret was created. If you+    -- don\'t specify which version in @VersionId@ or @VersionStage@, then+    -- Secrets Manager uses the @AWSCURRENT@ version.+    createdDate :: Prelude.Maybe Data.POSIX,+    -- | The friendly name of the secret.+    name :: Prelude.Maybe Prelude.Text,+    -- | The decrypted secret value, if the secret value was originally provided+    -- as binary data in the form of a byte array. The response parameter+    -- represents the binary data as a+    -- <https://tools.ietf.org/html/rfc4648#section-4 base64-encoded> string.+    --+    -- If the secret was created by using the Secrets Manager console, or if+    -- the secret value was originally provided as a string, then this field is+    -- omitted. The secret value appears in @SecretString@ instead.+    secretBinary :: Prelude.Maybe (Data.Sensitive Data.Base64),+    -- | The decrypted secret value, if the secret value was originally provided+    -- as a string or through the Secrets Manager console.+    --+    -- If this secret was created by using the console, then Secrets Manager+    -- stores the information as a JSON structure of key\/value pairs.+    secretString :: Prelude.Maybe (Data.Sensitive Prelude.Text),+    -- | The unique identifier of this version of the secret.+    versionId :: Prelude.Maybe Prelude.Text,+    -- | A list of all of the staging labels currently attached to this version+    -- of the secret.+    versionStages :: Prelude.Maybe (Prelude.NonEmpty Prelude.Text),+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetSecretValueResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'getSecretValueResponse_arn' - The ARN of the secret.+--+-- 'createdDate', 'getSecretValueResponse_createdDate' - The date and time that this version of the secret was created. If you+-- don\'t specify which version in @VersionId@ or @VersionStage@, then+-- Secrets Manager uses the @AWSCURRENT@ version.+--+-- 'name', 'getSecretValueResponse_name' - The friendly name of the secret.+--+-- 'secretBinary', 'getSecretValueResponse_secretBinary' - The decrypted secret value, if the secret value was originally provided+-- as binary data in the form of a byte array. The response parameter+-- represents the binary data as a+-- <https://tools.ietf.org/html/rfc4648#section-4 base64-encoded> string.+--+-- If the secret was created by using the Secrets Manager console, or if+-- the secret value was originally provided as a string, then this field is+-- omitted. The secret value appears in @SecretString@ instead.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+--+-- 'secretString', 'getSecretValueResponse_secretString' - The decrypted secret value, if the secret value was originally provided+-- as a string or through the Secrets Manager console.+--+-- If this secret was created by using the console, then Secrets Manager+-- stores the information as a JSON structure of key\/value pairs.+--+-- 'versionId', 'getSecretValueResponse_versionId' - The unique identifier of this version of the secret.+--+-- 'versionStages', 'getSecretValueResponse_versionStages' - A list of all of the staging labels currently attached to this version+-- of the secret.+--+-- 'httpStatus', 'getSecretValueResponse_httpStatus' - The response's http status code.+newGetSecretValueResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetSecretValueResponse+newGetSecretValueResponse pHttpStatus_ =+  GetSecretValueResponse'+    { arn = Prelude.Nothing,+      createdDate = Prelude.Nothing,+      name = Prelude.Nothing,+      secretBinary = Prelude.Nothing,+      secretString = Prelude.Nothing,+      versionId = Prelude.Nothing,+      versionStages = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret.+getSecretValueResponse_arn :: Lens.Lens' GetSecretValueResponse (Prelude.Maybe Prelude.Text)+getSecretValueResponse_arn = Lens.lens (\GetSecretValueResponse' {arn} -> arn) (\s@GetSecretValueResponse' {} a -> s {arn = a} :: GetSecretValueResponse)++-- | The date and time that this version of the secret was created. If you+-- don\'t specify which version in @VersionId@ or @VersionStage@, then+-- Secrets Manager uses the @AWSCURRENT@ version.+getSecretValueResponse_createdDate :: Lens.Lens' GetSecretValueResponse (Prelude.Maybe Prelude.UTCTime)+getSecretValueResponse_createdDate = Lens.lens (\GetSecretValueResponse' {createdDate} -> createdDate) (\s@GetSecretValueResponse' {} a -> s {createdDate = a} :: GetSecretValueResponse) Prelude.. Lens.mapping Data._Time++-- | The friendly name of the secret.+getSecretValueResponse_name :: Lens.Lens' GetSecretValueResponse (Prelude.Maybe Prelude.Text)+getSecretValueResponse_name = Lens.lens (\GetSecretValueResponse' {name} -> name) (\s@GetSecretValueResponse' {} a -> s {name = a} :: GetSecretValueResponse)++-- | The decrypted secret value, if the secret value was originally provided+-- as binary data in the form of a byte array. The response parameter+-- represents the binary data as a+-- <https://tools.ietf.org/html/rfc4648#section-4 base64-encoded> string.+--+-- If the secret was created by using the Secrets Manager console, or if+-- the secret value was originally provided as a string, then this field is+-- omitted. The secret value appears in @SecretString@ instead.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+getSecretValueResponse_secretBinary :: Lens.Lens' GetSecretValueResponse (Prelude.Maybe Prelude.ByteString)+getSecretValueResponse_secretBinary = Lens.lens (\GetSecretValueResponse' {secretBinary} -> secretBinary) (\s@GetSecretValueResponse' {} a -> s {secretBinary = a} :: GetSecretValueResponse) Prelude.. Lens.mapping (Data._Sensitive Prelude.. Data._Base64)++-- | The decrypted secret value, if the secret value was originally provided+-- as a string or through the Secrets Manager console.+--+-- If this secret was created by using the console, then Secrets Manager+-- stores the information as a JSON structure of key\/value pairs.+getSecretValueResponse_secretString :: Lens.Lens' GetSecretValueResponse (Prelude.Maybe Prelude.Text)+getSecretValueResponse_secretString = Lens.lens (\GetSecretValueResponse' {secretString} -> secretString) (\s@GetSecretValueResponse' {} a -> s {secretString = a} :: GetSecretValueResponse) Prelude.. Lens.mapping Data._Sensitive++-- | The unique identifier of this version of the secret.+getSecretValueResponse_versionId :: Lens.Lens' GetSecretValueResponse (Prelude.Maybe Prelude.Text)+getSecretValueResponse_versionId = Lens.lens (\GetSecretValueResponse' {versionId} -> versionId) (\s@GetSecretValueResponse' {} a -> s {versionId = a} :: GetSecretValueResponse)++-- | A list of all of the staging labels currently attached to this version+-- of the secret.+getSecretValueResponse_versionStages :: Lens.Lens' GetSecretValueResponse (Prelude.Maybe (Prelude.NonEmpty Prelude.Text))+getSecretValueResponse_versionStages = Lens.lens (\GetSecretValueResponse' {versionStages} -> versionStages) (\s@GetSecretValueResponse' {} a -> s {versionStages = a} :: GetSecretValueResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+getSecretValueResponse_httpStatus :: Lens.Lens' GetSecretValueResponse Prelude.Int+getSecretValueResponse_httpStatus = Lens.lens (\GetSecretValueResponse' {httpStatus} -> httpStatus) (\s@GetSecretValueResponse' {} a -> s {httpStatus = a} :: GetSecretValueResponse)++instance Prelude.NFData GetSecretValueResponse where+  rnf GetSecretValueResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf createdDate+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf secretBinary+      `Prelude.seq` Prelude.rnf secretString+      `Prelude.seq` Prelude.rnf versionId+      `Prelude.seq` Prelude.rnf versionStages+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,310 @@+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.Lens+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+module Amazonka.SecretsManager.Lens+  ( -- * Operations++    -- ** CancelRotateSecret+    cancelRotateSecret_secretId,+    cancelRotateSecretResponse_arn,+    cancelRotateSecretResponse_name,+    cancelRotateSecretResponse_versionId,+    cancelRotateSecretResponse_httpStatus,++    -- ** CreateSecret+    createSecret_addReplicaRegions,+    createSecret_clientRequestToken,+    createSecret_description,+    createSecret_forceOverwriteReplicaSecret,+    createSecret_kmsKeyId,+    createSecret_secretBinary,+    createSecret_secretString,+    createSecret_tags,+    createSecret_name,+    createSecretResponse_arn,+    createSecretResponse_name,+    createSecretResponse_replicationStatus,+    createSecretResponse_versionId,+    createSecretResponse_httpStatus,++    -- ** DeleteResourcePolicy+    deleteResourcePolicy_secretId,+    deleteResourcePolicyResponse_arn,+    deleteResourcePolicyResponse_name,+    deleteResourcePolicyResponse_httpStatus,++    -- ** DeleteSecret+    deleteSecret_forceDeleteWithoutRecovery,+    deleteSecret_recoveryWindowInDays,+    deleteSecret_secretId,+    deleteSecretResponse_arn,+    deleteSecretResponse_deletionDate,+    deleteSecretResponse_name,+    deleteSecretResponse_httpStatus,++    -- ** DescribeSecret+    describeSecret_secretId,+    describeSecretResponse_arn,+    describeSecretResponse_createdDate,+    describeSecretResponse_deletedDate,+    describeSecretResponse_description,+    describeSecretResponse_kmsKeyId,+    describeSecretResponse_lastAccessedDate,+    describeSecretResponse_lastChangedDate,+    describeSecretResponse_lastRotatedDate,+    describeSecretResponse_name,+    describeSecretResponse_nextRotationDate,+    describeSecretResponse_owningService,+    describeSecretResponse_primaryRegion,+    describeSecretResponse_replicationStatus,+    describeSecretResponse_rotationEnabled,+    describeSecretResponse_rotationLambdaARN,+    describeSecretResponse_rotationRules,+    describeSecretResponse_tags,+    describeSecretResponse_versionIdsToStages,+    describeSecretResponse_httpStatus,++    -- ** GetRandomPassword+    getRandomPassword_excludeCharacters,+    getRandomPassword_excludeLowercase,+    getRandomPassword_excludeNumbers,+    getRandomPassword_excludePunctuation,+    getRandomPassword_excludeUppercase,+    getRandomPassword_includeSpace,+    getRandomPassword_passwordLength,+    getRandomPassword_requireEachIncludedType,+    getRandomPasswordResponse_randomPassword,+    getRandomPasswordResponse_httpStatus,++    -- ** GetResourcePolicy+    getResourcePolicy_secretId,+    getResourcePolicyResponse_arn,+    getResourcePolicyResponse_name,+    getResourcePolicyResponse_resourcePolicy,+    getResourcePolicyResponse_httpStatus,++    -- ** GetSecretValue+    getSecretValue_versionId,+    getSecretValue_versionStage,+    getSecretValue_secretId,+    getSecretValueResponse_arn,+    getSecretValueResponse_createdDate,+    getSecretValueResponse_name,+    getSecretValueResponse_secretBinary,+    getSecretValueResponse_secretString,+    getSecretValueResponse_versionId,+    getSecretValueResponse_versionStages,+    getSecretValueResponse_httpStatus,++    -- ** ListSecretVersionIds+    listSecretVersionIds_includeDeprecated,+    listSecretVersionIds_maxResults,+    listSecretVersionIds_nextToken,+    listSecretVersionIds_secretId,+    listSecretVersionIdsResponse_arn,+    listSecretVersionIdsResponse_name,+    listSecretVersionIdsResponse_nextToken,+    listSecretVersionIdsResponse_versions,+    listSecretVersionIdsResponse_httpStatus,++    -- ** ListSecrets+    listSecrets_filters,+    listSecrets_includePlannedDeletion,+    listSecrets_maxResults,+    listSecrets_nextToken,+    listSecrets_sortOrder,+    listSecretsResponse_nextToken,+    listSecretsResponse_secretList,+    listSecretsResponse_httpStatus,++    -- ** PutResourcePolicy+    putResourcePolicy_blockPublicPolicy,+    putResourcePolicy_secretId,+    putResourcePolicy_resourcePolicy,+    putResourcePolicyResponse_arn,+    putResourcePolicyResponse_name,+    putResourcePolicyResponse_httpStatus,++    -- ** PutSecretValue+    putSecretValue_clientRequestToken,+    putSecretValue_secretBinary,+    putSecretValue_secretString,+    putSecretValue_versionStages,+    putSecretValue_secretId,+    putSecretValueResponse_arn,+    putSecretValueResponse_name,+    putSecretValueResponse_versionId,+    putSecretValueResponse_versionStages,+    putSecretValueResponse_httpStatus,++    -- ** RemoveRegionsFromReplication+    removeRegionsFromReplication_secretId,+    removeRegionsFromReplication_removeReplicaRegions,+    removeRegionsFromReplicationResponse_arn,+    removeRegionsFromReplicationResponse_replicationStatus,+    removeRegionsFromReplicationResponse_httpStatus,++    -- ** ReplicateSecretToRegions+    replicateSecretToRegions_forceOverwriteReplicaSecret,+    replicateSecretToRegions_secretId,+    replicateSecretToRegions_addReplicaRegions,+    replicateSecretToRegionsResponse_arn,+    replicateSecretToRegionsResponse_replicationStatus,+    replicateSecretToRegionsResponse_httpStatus,++    -- ** RestoreSecret+    restoreSecret_secretId,+    restoreSecretResponse_arn,+    restoreSecretResponse_name,+    restoreSecretResponse_httpStatus,++    -- ** RotateSecret+    rotateSecret_clientRequestToken,+    rotateSecret_rotateImmediately,+    rotateSecret_rotationLambdaARN,+    rotateSecret_rotationRules,+    rotateSecret_secretId,+    rotateSecretResponse_arn,+    rotateSecretResponse_name,+    rotateSecretResponse_versionId,+    rotateSecretResponse_httpStatus,++    -- ** StopReplicationToReplica+    stopReplicationToReplica_secretId,+    stopReplicationToReplicaResponse_arn,+    stopReplicationToReplicaResponse_httpStatus,++    -- ** TagResource+    tagResource_secretId,+    tagResource_tags,++    -- ** UntagResource+    untagResource_secretId,+    untagResource_tagKeys,++    -- ** UpdateSecret+    updateSecret_clientRequestToken,+    updateSecret_description,+    updateSecret_kmsKeyId,+    updateSecret_secretBinary,+    updateSecret_secretString,+    updateSecret_secretId,+    updateSecretResponse_arn,+    updateSecretResponse_name,+    updateSecretResponse_versionId,+    updateSecretResponse_httpStatus,++    -- ** UpdateSecretVersionStage+    updateSecretVersionStage_moveToVersionId,+    updateSecretVersionStage_removeFromVersionId,+    updateSecretVersionStage_secretId,+    updateSecretVersionStage_versionStage,+    updateSecretVersionStageResponse_arn,+    updateSecretVersionStageResponse_name,+    updateSecretVersionStageResponse_httpStatus,++    -- ** ValidateResourcePolicy+    validateResourcePolicy_secretId,+    validateResourcePolicy_resourcePolicy,+    validateResourcePolicyResponse_policyValidationPassed,+    validateResourcePolicyResponse_validationErrors,+    validateResourcePolicyResponse_httpStatus,++    -- * Types++    -- ** Filter+    filter_key,+    filter_values,++    -- ** ReplicaRegionType+    replicaRegionType_kmsKeyId,+    replicaRegionType_region,++    -- ** ReplicationStatusType+    replicationStatusType_kmsKeyId,+    replicationStatusType_lastAccessedDate,+    replicationStatusType_region,+    replicationStatusType_status,+    replicationStatusType_statusMessage,++    -- ** RotationRulesType+    rotationRulesType_automaticallyAfterDays,+    rotationRulesType_duration,+    rotationRulesType_scheduleExpression,++    -- ** SecretListEntry+    secretListEntry_arn,+    secretListEntry_createdDate,+    secretListEntry_deletedDate,+    secretListEntry_description,+    secretListEntry_kmsKeyId,+    secretListEntry_lastAccessedDate,+    secretListEntry_lastChangedDate,+    secretListEntry_lastRotatedDate,+    secretListEntry_name,+    secretListEntry_nextRotationDate,+    secretListEntry_owningService,+    secretListEntry_primaryRegion,+    secretListEntry_rotationEnabled,+    secretListEntry_rotationLambdaARN,+    secretListEntry_rotationRules,+    secretListEntry_secretVersionsToStages,+    secretListEntry_tags,++    -- ** SecretVersionsListEntry+    secretVersionsListEntry_createdDate,+    secretVersionsListEntry_kmsKeyIds,+    secretVersionsListEntry_lastAccessedDate,+    secretVersionsListEntry_versionId,+    secretVersionsListEntry_versionStages,++    -- ** Tag+    tag_key,+    tag_value,++    -- ** ValidationErrorsEntry+    validationErrorsEntry_checkName,+    validationErrorsEntry_errorMessage,+  )+where++import Amazonka.SecretsManager.CancelRotateSecret+import Amazonka.SecretsManager.CreateSecret+import Amazonka.SecretsManager.DeleteResourcePolicy+import Amazonka.SecretsManager.DeleteSecret+import Amazonka.SecretsManager.DescribeSecret+import Amazonka.SecretsManager.GetRandomPassword+import Amazonka.SecretsManager.GetResourcePolicy+import Amazonka.SecretsManager.GetSecretValue+import Amazonka.SecretsManager.ListSecretVersionIds+import Amazonka.SecretsManager.ListSecrets+import Amazonka.SecretsManager.PutResourcePolicy+import Amazonka.SecretsManager.PutSecretValue+import Amazonka.SecretsManager.RemoveRegionsFromReplication+import Amazonka.SecretsManager.ReplicateSecretToRegions+import Amazonka.SecretsManager.RestoreSecret+import Amazonka.SecretsManager.RotateSecret+import Amazonka.SecretsManager.StopReplicationToReplica+import Amazonka.SecretsManager.TagResource+import Amazonka.SecretsManager.Types.Filter+import Amazonka.SecretsManager.Types.ReplicaRegionType+import Amazonka.SecretsManager.Types.ReplicationStatusType+import Amazonka.SecretsManager.Types.RotationRulesType+import Amazonka.SecretsManager.Types.SecretListEntry+import Amazonka.SecretsManager.Types.SecretVersionsListEntry+import Amazonka.SecretsManager.Types.Tag+import Amazonka.SecretsManager.Types.ValidationErrorsEntry+import Amazonka.SecretsManager.UntagResource+import Amazonka.SecretsManager.UpdateSecret+import Amazonka.SecretsManager.UpdateSecretVersionStage+import Amazonka.SecretsManager.ValidateResourcePolicy

@@ -0,0 +1,337 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.ListSecretVersionIds+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Lists the versions of a secret. Secrets Manager uses staging labels to+-- indicate the different versions of a secret. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/getting-started.html#term_version Secrets Manager concepts: Versions>.+--+-- To list the secrets in the account, use ListSecrets.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:ListSecretVersionIds@. For+-- more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+--+-- This operation returns paginated results.+module Amazonka.SecretsManager.ListSecretVersionIds+  ( -- * Creating a Request+    ListSecretVersionIds (..),+    newListSecretVersionIds,++    -- * Request Lenses+    listSecretVersionIds_includeDeprecated,+    listSecretVersionIds_maxResults,+    listSecretVersionIds_nextToken,+    listSecretVersionIds_secretId,++    -- * Destructuring the Response+    ListSecretVersionIdsResponse (..),+    newListSecretVersionIdsResponse,++    -- * Response Lenses+    listSecretVersionIdsResponse_arn,+    listSecretVersionIdsResponse_name,+    listSecretVersionIdsResponse_nextToken,+    listSecretVersionIdsResponse_versions,+    listSecretVersionIdsResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newListSecretVersionIds' smart constructor.+data ListSecretVersionIds = ListSecretVersionIds'+  { -- | Specifies whether to include versions of secrets that don\'t have any+    -- staging labels attached to them. Versions without staging labels are+    -- considered deprecated and are subject to deletion by Secrets Manager.+    includeDeprecated :: Prelude.Maybe Prelude.Bool,+    -- | The number of results to include in the response.+    --+    -- If there are more results available, in the response, Secrets Manager+    -- includes @NextToken@. To get the next results, call+    -- @ListSecretVersionIds@ again with the value from @NextToken@.+    maxResults :: Prelude.Maybe Prelude.Natural,+    -- | A token that indicates where the output should continue from, if a+    -- previous call did not show all results. To get the next results, call+    -- @ListSecretVersionIds@ again with this value.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | The ARN or name of the secret whose versions you want to list.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    secretId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListSecretVersionIds' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'includeDeprecated', 'listSecretVersionIds_includeDeprecated' - Specifies whether to include versions of secrets that don\'t have any+-- staging labels attached to them. Versions without staging labels are+-- considered deprecated and are subject to deletion by Secrets Manager.+--+-- 'maxResults', 'listSecretVersionIds_maxResults' - The number of results to include in the response.+--+-- If there are more results available, in the response, Secrets Manager+-- includes @NextToken@. To get the next results, call+-- @ListSecretVersionIds@ again with the value from @NextToken@.+--+-- 'nextToken', 'listSecretVersionIds_nextToken' - A token that indicates where the output should continue from, if a+-- previous call did not show all results. To get the next results, call+-- @ListSecretVersionIds@ again with this value.+--+-- 'secretId', 'listSecretVersionIds_secretId' - The ARN or name of the secret whose versions you want to list.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+newListSecretVersionIds ::+  -- | 'secretId'+  Prelude.Text ->+  ListSecretVersionIds+newListSecretVersionIds pSecretId_ =+  ListSecretVersionIds'+    { includeDeprecated =+        Prelude.Nothing,+      maxResults = Prelude.Nothing,+      nextToken = Prelude.Nothing,+      secretId = pSecretId_+    }++-- | Specifies whether to include versions of secrets that don\'t have any+-- staging labels attached to them. Versions without staging labels are+-- considered deprecated and are subject to deletion by Secrets Manager.+listSecretVersionIds_includeDeprecated :: Lens.Lens' ListSecretVersionIds (Prelude.Maybe Prelude.Bool)+listSecretVersionIds_includeDeprecated = Lens.lens (\ListSecretVersionIds' {includeDeprecated} -> includeDeprecated) (\s@ListSecretVersionIds' {} a -> s {includeDeprecated = a} :: ListSecretVersionIds)++-- | The number of results to include in the response.+--+-- If there are more results available, in the response, Secrets Manager+-- includes @NextToken@. To get the next results, call+-- @ListSecretVersionIds@ again with the value from @NextToken@.+listSecretVersionIds_maxResults :: Lens.Lens' ListSecretVersionIds (Prelude.Maybe Prelude.Natural)+listSecretVersionIds_maxResults = Lens.lens (\ListSecretVersionIds' {maxResults} -> maxResults) (\s@ListSecretVersionIds' {} a -> s {maxResults = a} :: ListSecretVersionIds)++-- | A token that indicates where the output should continue from, if a+-- previous call did not show all results. To get the next results, call+-- @ListSecretVersionIds@ again with this value.+listSecretVersionIds_nextToken :: Lens.Lens' ListSecretVersionIds (Prelude.Maybe Prelude.Text)+listSecretVersionIds_nextToken = Lens.lens (\ListSecretVersionIds' {nextToken} -> nextToken) (\s@ListSecretVersionIds' {} a -> s {nextToken = a} :: ListSecretVersionIds)++-- | The ARN or name of the secret whose versions you want to list.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+listSecretVersionIds_secretId :: Lens.Lens' ListSecretVersionIds Prelude.Text+listSecretVersionIds_secretId = Lens.lens (\ListSecretVersionIds' {secretId} -> secretId) (\s@ListSecretVersionIds' {} a -> s {secretId = a} :: ListSecretVersionIds)++instance Core.AWSPager ListSecretVersionIds where+  page rq rs+    | Core.stop+        ( rs+            Lens.^? listSecretVersionIdsResponse_nextToken+            Prelude.. Lens._Just+        ) =+        Prelude.Nothing+    | Core.stop+        ( rs+            Lens.^? listSecretVersionIdsResponse_versions+            Prelude.. Lens._Just+        ) =+        Prelude.Nothing+    | Prelude.otherwise =+        Prelude.Just+          Prelude.$ rq+          Prelude.& listSecretVersionIds_nextToken+          Lens..~ rs+          Lens.^? listSecretVersionIdsResponse_nextToken+          Prelude.. Lens._Just++instance Core.AWSRequest ListSecretVersionIds where+  type+    AWSResponse ListSecretVersionIds =+      ListSecretVersionIdsResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ListSecretVersionIdsResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (x Data..?> "NextToken")+            Prelude.<*> (x Data..?> "Versions" Core..!@ Prelude.mempty)+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ListSecretVersionIds where+  hashWithSalt _salt ListSecretVersionIds' {..} =+    _salt+      `Prelude.hashWithSalt` includeDeprecated+      `Prelude.hashWithSalt` maxResults+      `Prelude.hashWithSalt` nextToken+      `Prelude.hashWithSalt` secretId++instance Prelude.NFData ListSecretVersionIds where+  rnf ListSecretVersionIds' {..} =+    Prelude.rnf includeDeprecated+      `Prelude.seq` Prelude.rnf maxResults+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf secretId++instance Data.ToHeaders ListSecretVersionIds where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.ListSecretVersionIds" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ListSecretVersionIds where+  toJSON ListSecretVersionIds' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("IncludeDeprecated" Data..=)+              Prelude.<$> includeDeprecated,+            ("MaxResults" Data..=) Prelude.<$> maxResults,+            ("NextToken" Data..=) Prelude.<$> nextToken,+            Prelude.Just ("SecretId" Data..= secretId)+          ]+      )++instance Data.ToPath ListSecretVersionIds where+  toPath = Prelude.const "/"++instance Data.ToQuery ListSecretVersionIds where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newListSecretVersionIdsResponse' smart constructor.+data ListSecretVersionIdsResponse = ListSecretVersionIdsResponse'+  { -- | The ARN of the secret.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The name of the secret.+    name :: Prelude.Maybe Prelude.Text,+    -- | Secrets Manager includes this value if there\'s more output available+    -- than what is included in the current response. This can occur even when+    -- the response includes no values at all, such as when you ask for a+    -- filtered view of a long list. To get the next results, call+    -- @ListSecretVersionIds@ again with this value.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | A list of the versions of the secret.+    versions :: Prelude.Maybe [SecretVersionsListEntry],+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListSecretVersionIdsResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'listSecretVersionIdsResponse_arn' - The ARN of the secret.+--+-- 'name', 'listSecretVersionIdsResponse_name' - The name of the secret.+--+-- 'nextToken', 'listSecretVersionIdsResponse_nextToken' - Secrets Manager includes this value if there\'s more output available+-- than what is included in the current response. This can occur even when+-- the response includes no values at all, such as when you ask for a+-- filtered view of a long list. To get the next results, call+-- @ListSecretVersionIds@ again with this value.+--+-- 'versions', 'listSecretVersionIdsResponse_versions' - A list of the versions of the secret.+--+-- 'httpStatus', 'listSecretVersionIdsResponse_httpStatus' - The response's http status code.+newListSecretVersionIdsResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ListSecretVersionIdsResponse+newListSecretVersionIdsResponse pHttpStatus_ =+  ListSecretVersionIdsResponse'+    { arn =+        Prelude.Nothing,+      name = Prelude.Nothing,+      nextToken = Prelude.Nothing,+      versions = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret.+listSecretVersionIdsResponse_arn :: Lens.Lens' ListSecretVersionIdsResponse (Prelude.Maybe Prelude.Text)+listSecretVersionIdsResponse_arn = Lens.lens (\ListSecretVersionIdsResponse' {arn} -> arn) (\s@ListSecretVersionIdsResponse' {} a -> s {arn = a} :: ListSecretVersionIdsResponse)++-- | The name of the secret.+listSecretVersionIdsResponse_name :: Lens.Lens' ListSecretVersionIdsResponse (Prelude.Maybe Prelude.Text)+listSecretVersionIdsResponse_name = Lens.lens (\ListSecretVersionIdsResponse' {name} -> name) (\s@ListSecretVersionIdsResponse' {} a -> s {name = a} :: ListSecretVersionIdsResponse)++-- | Secrets Manager includes this value if there\'s more output available+-- than what is included in the current response. This can occur even when+-- the response includes no values at all, such as when you ask for a+-- filtered view of a long list. To get the next results, call+-- @ListSecretVersionIds@ again with this value.+listSecretVersionIdsResponse_nextToken :: Lens.Lens' ListSecretVersionIdsResponse (Prelude.Maybe Prelude.Text)+listSecretVersionIdsResponse_nextToken = Lens.lens (\ListSecretVersionIdsResponse' {nextToken} -> nextToken) (\s@ListSecretVersionIdsResponse' {} a -> s {nextToken = a} :: ListSecretVersionIdsResponse)++-- | A list of the versions of the secret.+listSecretVersionIdsResponse_versions :: Lens.Lens' ListSecretVersionIdsResponse (Prelude.Maybe [SecretVersionsListEntry])+listSecretVersionIdsResponse_versions = Lens.lens (\ListSecretVersionIdsResponse' {versions} -> versions) (\s@ListSecretVersionIdsResponse' {} a -> s {versions = a} :: ListSecretVersionIdsResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+listSecretVersionIdsResponse_httpStatus :: Lens.Lens' ListSecretVersionIdsResponse Prelude.Int+listSecretVersionIdsResponse_httpStatus = Lens.lens (\ListSecretVersionIdsResponse' {httpStatus} -> httpStatus) (\s@ListSecretVersionIdsResponse' {} a -> s {httpStatus = a} :: ListSecretVersionIdsResponse)++instance Prelude.NFData ListSecretVersionIdsResponse where+  rnf ListSecretVersionIdsResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf versions+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,309 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.ListSecrets+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Lists the secrets that are stored by Secrets Manager in the Amazon Web+-- Services account, not including secrets that are marked for deletion. To+-- see secrets marked for deletion, use the Secrets Manager console.+--+-- ListSecrets is eventually consistent, however it might not reflect+-- changes from the last five minutes. To get the latest information for a+-- specific secret, use DescribeSecret.+--+-- To list the versions of a secret, use ListSecretVersionIds.+--+-- To get the secret value from @SecretString@ or @SecretBinary@, call+-- GetSecretValue.+--+-- For information about finding secrets in the console, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_search-secret.html Find secrets in Secrets Manager>.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:ListSecrets@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+--+-- This operation returns paginated results.+module Amazonka.SecretsManager.ListSecrets+  ( -- * Creating a Request+    ListSecrets (..),+    newListSecrets,++    -- * Request Lenses+    listSecrets_filters,+    listSecrets_includePlannedDeletion,+    listSecrets_maxResults,+    listSecrets_nextToken,+    listSecrets_sortOrder,++    -- * Destructuring the Response+    ListSecretsResponse (..),+    newListSecretsResponse,++    -- * Response Lenses+    listSecretsResponse_nextToken,+    listSecretsResponse_secretList,+    listSecretsResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newListSecrets' smart constructor.+data ListSecrets = ListSecrets'+  { -- | The filters to apply to the list of secrets.+    filters :: Prelude.Maybe [Filter],+    includePlannedDeletion :: Prelude.Maybe Prelude.Bool,+    -- | The number of results to include in the response.+    --+    -- If there are more results available, in the response, Secrets Manager+    -- includes @NextToken@. To get the next results, call @ListSecrets@ again+    -- with the value from @NextToken@.+    maxResults :: Prelude.Maybe Prelude.Natural,+    -- | A token that indicates where the output should continue from, if a+    -- previous call did not show all results. To get the next results, call+    -- @ListSecrets@ again with this value.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | Secrets are listed by @CreatedDate@.+    sortOrder :: Prelude.Maybe SortOrderType+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListSecrets' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'filters', 'listSecrets_filters' - The filters to apply to the list of secrets.+--+-- 'includePlannedDeletion', 'listSecrets_includePlannedDeletion' - Undocumented member.+--+-- 'maxResults', 'listSecrets_maxResults' - The number of results to include in the response.+--+-- If there are more results available, in the response, Secrets Manager+-- includes @NextToken@. To get the next results, call @ListSecrets@ again+-- with the value from @NextToken@.+--+-- 'nextToken', 'listSecrets_nextToken' - A token that indicates where the output should continue from, if a+-- previous call did not show all results. To get the next results, call+-- @ListSecrets@ again with this value.+--+-- 'sortOrder', 'listSecrets_sortOrder' - Secrets are listed by @CreatedDate@.+newListSecrets ::+  ListSecrets+newListSecrets =+  ListSecrets'+    { filters = Prelude.Nothing,+      includePlannedDeletion = Prelude.Nothing,+      maxResults = Prelude.Nothing,+      nextToken = Prelude.Nothing,+      sortOrder = Prelude.Nothing+    }++-- | The filters to apply to the list of secrets.+listSecrets_filters :: Lens.Lens' ListSecrets (Prelude.Maybe [Filter])+listSecrets_filters = Lens.lens (\ListSecrets' {filters} -> filters) (\s@ListSecrets' {} a -> s {filters = a} :: ListSecrets) Prelude.. Lens.mapping Lens.coerced++-- | Undocumented member.+listSecrets_includePlannedDeletion :: Lens.Lens' ListSecrets (Prelude.Maybe Prelude.Bool)+listSecrets_includePlannedDeletion = Lens.lens (\ListSecrets' {includePlannedDeletion} -> includePlannedDeletion) (\s@ListSecrets' {} a -> s {includePlannedDeletion = a} :: ListSecrets)++-- | The number of results to include in the response.+--+-- If there are more results available, in the response, Secrets Manager+-- includes @NextToken@. To get the next results, call @ListSecrets@ again+-- with the value from @NextToken@.+listSecrets_maxResults :: Lens.Lens' ListSecrets (Prelude.Maybe Prelude.Natural)+listSecrets_maxResults = Lens.lens (\ListSecrets' {maxResults} -> maxResults) (\s@ListSecrets' {} a -> s {maxResults = a} :: ListSecrets)++-- | A token that indicates where the output should continue from, if a+-- previous call did not show all results. To get the next results, call+-- @ListSecrets@ again with this value.+listSecrets_nextToken :: Lens.Lens' ListSecrets (Prelude.Maybe Prelude.Text)+listSecrets_nextToken = Lens.lens (\ListSecrets' {nextToken} -> nextToken) (\s@ListSecrets' {} a -> s {nextToken = a} :: ListSecrets)++-- | Secrets are listed by @CreatedDate@.+listSecrets_sortOrder :: Lens.Lens' ListSecrets (Prelude.Maybe SortOrderType)+listSecrets_sortOrder = Lens.lens (\ListSecrets' {sortOrder} -> sortOrder) (\s@ListSecrets' {} a -> s {sortOrder = a} :: ListSecrets)++instance Core.AWSPager ListSecrets where+  page rq rs+    | Core.stop+        ( rs+            Lens.^? listSecretsResponse_nextToken+            Prelude.. Lens._Just+        ) =+        Prelude.Nothing+    | Core.stop+        ( rs+            Lens.^? listSecretsResponse_secretList+            Prelude.. Lens._Just+        ) =+        Prelude.Nothing+    | Prelude.otherwise =+        Prelude.Just+          Prelude.$ rq+          Prelude.& listSecrets_nextToken+          Lens..~ rs+          Lens.^? listSecretsResponse_nextToken+          Prelude.. Lens._Just++instance Core.AWSRequest ListSecrets where+  type AWSResponse ListSecrets = ListSecretsResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ListSecretsResponse'+            Prelude.<$> (x Data..?> "NextToken")+            Prelude.<*> (x Data..?> "SecretList" Core..!@ Prelude.mempty)+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ListSecrets where+  hashWithSalt _salt ListSecrets' {..} =+    _salt+      `Prelude.hashWithSalt` filters+      `Prelude.hashWithSalt` includePlannedDeletion+      `Prelude.hashWithSalt` maxResults+      `Prelude.hashWithSalt` nextToken+      `Prelude.hashWithSalt` sortOrder++instance Prelude.NFData ListSecrets where+  rnf ListSecrets' {..} =+    Prelude.rnf filters+      `Prelude.seq` Prelude.rnf includePlannedDeletion+      `Prelude.seq` Prelude.rnf maxResults+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf sortOrder++instance Data.ToHeaders ListSecrets where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ("secretsmanager.ListSecrets" :: Prelude.ByteString),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ListSecrets where+  toJSON ListSecrets' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("Filters" Data..=) Prelude.<$> filters,+            ("IncludePlannedDeletion" Data..=)+              Prelude.<$> includePlannedDeletion,+            ("MaxResults" Data..=) Prelude.<$> maxResults,+            ("NextToken" Data..=) Prelude.<$> nextToken,+            ("SortOrder" Data..=) Prelude.<$> sortOrder+          ]+      )++instance Data.ToPath ListSecrets where+  toPath = Prelude.const "/"++instance Data.ToQuery ListSecrets where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newListSecretsResponse' smart constructor.+data ListSecretsResponse = ListSecretsResponse'+  { -- | Secrets Manager includes this value if there\'s more output available+    -- than what is included in the current response. This can occur even when+    -- the response includes no values at all, such as when you ask for a+    -- filtered view of a long list. To get the next results, call+    -- @ListSecrets@ again with this value.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | A list of the secrets in the account.+    secretList :: Prelude.Maybe [SecretListEntry],+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListSecretsResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'nextToken', 'listSecretsResponse_nextToken' - Secrets Manager includes this value if there\'s more output available+-- than what is included in the current response. This can occur even when+-- the response includes no values at all, such as when you ask for a+-- filtered view of a long list. To get the next results, call+-- @ListSecrets@ again with this value.+--+-- 'secretList', 'listSecretsResponse_secretList' - A list of the secrets in the account.+--+-- 'httpStatus', 'listSecretsResponse_httpStatus' - The response's http status code.+newListSecretsResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ListSecretsResponse+newListSecretsResponse pHttpStatus_ =+  ListSecretsResponse'+    { nextToken = Prelude.Nothing,+      secretList = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | Secrets Manager includes this value if there\'s more output available+-- than what is included in the current response. This can occur even when+-- the response includes no values at all, such as when you ask for a+-- filtered view of a long list. To get the next results, call+-- @ListSecrets@ again with this value.+listSecretsResponse_nextToken :: Lens.Lens' ListSecretsResponse (Prelude.Maybe Prelude.Text)+listSecretsResponse_nextToken = Lens.lens (\ListSecretsResponse' {nextToken} -> nextToken) (\s@ListSecretsResponse' {} a -> s {nextToken = a} :: ListSecretsResponse)++-- | A list of the secrets in the account.+listSecretsResponse_secretList :: Lens.Lens' ListSecretsResponse (Prelude.Maybe [SecretListEntry])+listSecretsResponse_secretList = Lens.lens (\ListSecretsResponse' {secretList} -> secretList) (\s@ListSecretsResponse' {} a -> s {secretList = a} :: ListSecretsResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+listSecretsResponse_httpStatus :: Lens.Lens' ListSecretsResponse Prelude.Int+listSecretsResponse_httpStatus = Lens.lens (\ListSecretsResponse' {httpStatus} -> httpStatus) (\s@ListSecretsResponse' {} a -> s {httpStatus = a} :: ListSecretsResponse)++instance Prelude.NFData ListSecretsResponse where+  rnf ListSecretsResponse' {..} =+    Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf secretList+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,255 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.PutResourcePolicy+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Attaches a resource-based permission policy to a secret. A+-- resource-based policy is optional. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control for Secrets Manager>+--+-- For information about attaching a policy in the console, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_resource-based-policies.html Attach a permissions policy to a secret>.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:PutResourcePolicy@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.PutResourcePolicy+  ( -- * Creating a Request+    PutResourcePolicy (..),+    newPutResourcePolicy,++    -- * Request Lenses+    putResourcePolicy_blockPublicPolicy,+    putResourcePolicy_secretId,+    putResourcePolicy_resourcePolicy,++    -- * Destructuring the Response+    PutResourcePolicyResponse (..),+    newPutResourcePolicyResponse,++    -- * Response Lenses+    putResourcePolicyResponse_arn,+    putResourcePolicyResponse_name,+    putResourcePolicyResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newPutResourcePolicy' smart constructor.+data PutResourcePolicy = PutResourcePolicy'+  { -- | Specifies whether to block resource-based policies that allow broad+    -- access to the secret, for example those that use a wildcard for the+    -- principal.+    blockPublicPolicy :: Prelude.Maybe Prelude.Bool,+    -- | The ARN or name of the secret to attach the resource-based policy.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    secretId :: Prelude.Text,+    -- | A JSON-formatted string for an Amazon Web Services resource-based+    -- policy. For example policies, see+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html Permissions policy examples>.+    resourcePolicy :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'PutResourcePolicy' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'blockPublicPolicy', 'putResourcePolicy_blockPublicPolicy' - Specifies whether to block resource-based policies that allow broad+-- access to the secret, for example those that use a wildcard for the+-- principal.+--+-- 'secretId', 'putResourcePolicy_secretId' - The ARN or name of the secret to attach the resource-based policy.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+--+-- 'resourcePolicy', 'putResourcePolicy_resourcePolicy' - A JSON-formatted string for an Amazon Web Services resource-based+-- policy. For example policies, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html Permissions policy examples>.+newPutResourcePolicy ::+  -- | 'secretId'+  Prelude.Text ->+  -- | 'resourcePolicy'+  Prelude.Text ->+  PutResourcePolicy+newPutResourcePolicy pSecretId_ pResourcePolicy_ =+  PutResourcePolicy'+    { blockPublicPolicy =+        Prelude.Nothing,+      secretId = pSecretId_,+      resourcePolicy = pResourcePolicy_+    }++-- | Specifies whether to block resource-based policies that allow broad+-- access to the secret, for example those that use a wildcard for the+-- principal.+putResourcePolicy_blockPublicPolicy :: Lens.Lens' PutResourcePolicy (Prelude.Maybe Prelude.Bool)+putResourcePolicy_blockPublicPolicy = Lens.lens (\PutResourcePolicy' {blockPublicPolicy} -> blockPublicPolicy) (\s@PutResourcePolicy' {} a -> s {blockPublicPolicy = a} :: PutResourcePolicy)++-- | The ARN or name of the secret to attach the resource-based policy.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+putResourcePolicy_secretId :: Lens.Lens' PutResourcePolicy Prelude.Text+putResourcePolicy_secretId = Lens.lens (\PutResourcePolicy' {secretId} -> secretId) (\s@PutResourcePolicy' {} a -> s {secretId = a} :: PutResourcePolicy)++-- | A JSON-formatted string for an Amazon Web Services resource-based+-- policy. For example policies, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html Permissions policy examples>.+putResourcePolicy_resourcePolicy :: Lens.Lens' PutResourcePolicy Prelude.Text+putResourcePolicy_resourcePolicy = Lens.lens (\PutResourcePolicy' {resourcePolicy} -> resourcePolicy) (\s@PutResourcePolicy' {} a -> s {resourcePolicy = a} :: PutResourcePolicy)++instance Core.AWSRequest PutResourcePolicy where+  type+    AWSResponse PutResourcePolicy =+      PutResourcePolicyResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          PutResourcePolicyResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable PutResourcePolicy where+  hashWithSalt _salt PutResourcePolicy' {..} =+    _salt+      `Prelude.hashWithSalt` blockPublicPolicy+      `Prelude.hashWithSalt` secretId+      `Prelude.hashWithSalt` resourcePolicy++instance Prelude.NFData PutResourcePolicy where+  rnf PutResourcePolicy' {..} =+    Prelude.rnf blockPublicPolicy+      `Prelude.seq` Prelude.rnf secretId+      `Prelude.seq` Prelude.rnf resourcePolicy++instance Data.ToHeaders PutResourcePolicy where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.PutResourcePolicy" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON PutResourcePolicy where+  toJSON PutResourcePolicy' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("BlockPublicPolicy" Data..=)+              Prelude.<$> blockPublicPolicy,+            Prelude.Just ("SecretId" Data..= secretId),+            Prelude.Just+              ("ResourcePolicy" Data..= resourcePolicy)+          ]+      )++instance Data.ToPath PutResourcePolicy where+  toPath = Prelude.const "/"++instance Data.ToQuery PutResourcePolicy where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newPutResourcePolicyResponse' smart constructor.+data PutResourcePolicyResponse = PutResourcePolicyResponse'+  { -- | The ARN of the secret.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The name of the secret.+    name :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'PutResourcePolicyResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'putResourcePolicyResponse_arn' - The ARN of the secret.+--+-- 'name', 'putResourcePolicyResponse_name' - The name of the secret.+--+-- 'httpStatus', 'putResourcePolicyResponse_httpStatus' - The response's http status code.+newPutResourcePolicyResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  PutResourcePolicyResponse+newPutResourcePolicyResponse pHttpStatus_ =+  PutResourcePolicyResponse'+    { arn = Prelude.Nothing,+      name = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret.+putResourcePolicyResponse_arn :: Lens.Lens' PutResourcePolicyResponse (Prelude.Maybe Prelude.Text)+putResourcePolicyResponse_arn = Lens.lens (\PutResourcePolicyResponse' {arn} -> arn) (\s@PutResourcePolicyResponse' {} a -> s {arn = a} :: PutResourcePolicyResponse)++-- | The name of the secret.+putResourcePolicyResponse_name :: Lens.Lens' PutResourcePolicyResponse (Prelude.Maybe Prelude.Text)+putResourcePolicyResponse_name = Lens.lens (\PutResourcePolicyResponse' {name} -> name) (\s@PutResourcePolicyResponse' {} a -> s {name = a} :: PutResourcePolicyResponse)++-- | The response's http status code.+putResourcePolicyResponse_httpStatus :: Lens.Lens' PutResourcePolicyResponse Prelude.Int+putResourcePolicyResponse_httpStatus = Lens.lens (\PutResourcePolicyResponse' {httpStatus} -> httpStatus) (\s@PutResourcePolicyResponse' {} a -> s {httpStatus = a} :: PutResourcePolicyResponse)++instance Prelude.NFData PutResourcePolicyResponse where+  rnf PutResourcePolicyResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,493 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.PutSecretValue+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates a new version with a new encrypted secret value and attaches it+-- to the secret. The version can contain a new @SecretString@ value or a+-- new @SecretBinary@ value.+--+-- We recommend you avoid calling @PutSecretValue@ at a sustained rate of+-- more than once every 10 minutes. When you update the secret value,+-- Secrets Manager creates a new version of the secret. Secrets Manager+-- removes outdated versions when there are more than 100, but it does not+-- remove versions created less than 24 hours ago. If you call+-- @PutSecretValue@ more than once every 10 minutes, you create more+-- versions than Secrets Manager removes, and you will reach the quota for+-- secret versions.+--+-- You can specify the staging labels to attach to the new version in+-- @VersionStages@. If you don\'t include @VersionStages@, then Secrets+-- Manager automatically moves the staging label @AWSCURRENT@ to this+-- version. If this operation creates the first version for the secret,+-- then Secrets Manager automatically attaches the staging label+-- @AWSCURRENT@ to it. If this operation moves the staging label+-- @AWSCURRENT@ from another version to this version, then Secrets Manager+-- also automatically moves the staging label @AWSPREVIOUS@ to the version+-- that @AWSCURRENT@ was removed from.+--+-- This operation is idempotent. If you call this operation with a+-- @ClientRequestToken@ that matches an existing version\'s VersionId, and+-- you specify the same secret data, the operation succeeds but does+-- nothing. However, if the secret data is different, then the operation+-- fails because you can\'t modify an existing version; you can only create+-- new ones.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- except @SecretBinary@ or @SecretString@ because it might be logged. For+-- more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:PutSecretValue@. For more+-- information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.PutSecretValue+  ( -- * Creating a Request+    PutSecretValue (..),+    newPutSecretValue,++    -- * Request Lenses+    putSecretValue_clientRequestToken,+    putSecretValue_secretBinary,+    putSecretValue_secretString,+    putSecretValue_versionStages,+    putSecretValue_secretId,++    -- * Destructuring the Response+    PutSecretValueResponse (..),+    newPutSecretValueResponse,++    -- * Response Lenses+    putSecretValueResponse_arn,+    putSecretValueResponse_name,+    putSecretValueResponse_versionId,+    putSecretValueResponse_versionStages,+    putSecretValueResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newPutSecretValue' smart constructor.+data PutSecretValue = PutSecretValue'+  { -- | A unique identifier for the new version of the secret.+    --+    -- If you use the Amazon Web Services CLI or one of the Amazon Web Services+    -- SDKs to call this operation, then you can leave this parameter empty+    -- because they generate a random UUID for you. If you don\'t use the SDK+    -- and instead generate a raw HTTP request to the Secrets Manager service+    -- endpoint, then you must generate a @ClientRequestToken@ yourself for new+    -- versions and include that value in the request.+    --+    -- This value helps ensure idempotency. Secrets Manager uses this value to+    -- prevent the accidental creation of duplicate versions if there are+    -- failures and retries during the Lambda rotation function processing. We+    -- recommend that you generate a+    -- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+    -- value to ensure uniqueness within the specified secret.+    --+    -- -   If the @ClientRequestToken@ value isn\'t already associated with a+    --     version of the secret then a new version of the secret is created.+    --+    -- -   If a version with this value already exists and that version\'s+    --     @SecretString@ or @SecretBinary@ values are the same as those in the+    --     request then the request is ignored. The operation is idempotent.+    --+    -- -   If a version with this value already exists and the version of the+    --     @SecretString@ and @SecretBinary@ values are different from those in+    --     the request, then the request fails because you can\'t modify a+    --     secret version. You can only create new versions to store new secret+    --     values.+    --+    -- This value becomes the @VersionId@ of the new version.+    clientRequestToken :: Prelude.Maybe Prelude.Text,+    -- | The binary data to encrypt and store in the new version of the secret.+    -- To use this parameter in the command-line tools, we recommend that you+    -- store your binary data in a file and then pass the contents of the file+    -- as a parameter.+    --+    -- You must include @SecretBinary@ or @SecretString@, but not both.+    --+    -- You can\'t access this value from the Secrets Manager console.+    secretBinary :: Prelude.Maybe (Data.Sensitive Data.Base64),+    -- | The text to encrypt and store in the new version of the secret.+    --+    -- You must include @SecretBinary@ or @SecretString@, but not both.+    --+    -- We recommend you create the secret string as JSON key\/value pairs, as+    -- shown in the example.+    secretString :: Prelude.Maybe (Data.Sensitive Prelude.Text),+    -- | A list of staging labels to attach to this version of the secret.+    -- Secrets Manager uses staging labels to track versions of a secret+    -- through the rotation process.+    --+    -- If you specify a staging label that\'s already associated with a+    -- different version of the same secret, then Secrets Manager removes the+    -- label from the other version and attaches it to this version. If you+    -- specify @AWSCURRENT@, and it is already attached to another version,+    -- then Secrets Manager also moves the staging label @AWSPREVIOUS@ to the+    -- version that @AWSCURRENT@ was removed from.+    --+    -- If you don\'t include @VersionStages@, then Secrets Manager+    -- automatically moves the staging label @AWSCURRENT@ to this version.+    versionStages :: Prelude.Maybe (Prelude.NonEmpty Prelude.Text),+    -- | The ARN or name of the secret to add a new version to.+    --+    -- For an ARN, we recommend that you specify a complete ARN rather than a+    -- partial ARN. See+    -- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+    --+    -- If the secret doesn\'t already exist, use @CreateSecret@ instead.+    secretId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'PutSecretValue' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'clientRequestToken', 'putSecretValue_clientRequestToken' - A unique identifier for the new version of the secret.+--+-- If you use the Amazon Web Services CLI or one of the Amazon Web Services+-- SDKs to call this operation, then you can leave this parameter empty+-- because they generate a random UUID for you. If you don\'t use the SDK+-- and instead generate a raw HTTP request to the Secrets Manager service+-- endpoint, then you must generate a @ClientRequestToken@ yourself for new+-- versions and include that value in the request.+--+-- This value helps ensure idempotency. Secrets Manager uses this value to+-- prevent the accidental creation of duplicate versions if there are+-- failures and retries during the Lambda rotation function processing. We+-- recommend that you generate a+-- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+-- value to ensure uniqueness within the specified secret.+--+-- -   If the @ClientRequestToken@ value isn\'t already associated with a+--     version of the secret then a new version of the secret is created.+--+-- -   If a version with this value already exists and that version\'s+--     @SecretString@ or @SecretBinary@ values are the same as those in the+--     request then the request is ignored. The operation is idempotent.+--+-- -   If a version with this value already exists and the version of the+--     @SecretString@ and @SecretBinary@ values are different from those in+--     the request, then the request fails because you can\'t modify a+--     secret version. You can only create new versions to store new secret+--     values.+--+-- This value becomes the @VersionId@ of the new version.+--+-- 'secretBinary', 'putSecretValue_secretBinary' - The binary data to encrypt and store in the new version of the secret.+-- To use this parameter in the command-line tools, we recommend that you+-- store your binary data in a file and then pass the contents of the file+-- as a parameter.+--+-- You must include @SecretBinary@ or @SecretString@, but not both.+--+-- You can\'t access this value from the Secrets Manager console.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+--+-- 'secretString', 'putSecretValue_secretString' - The text to encrypt and store in the new version of the secret.+--+-- You must include @SecretBinary@ or @SecretString@, but not both.+--+-- We recommend you create the secret string as JSON key\/value pairs, as+-- shown in the example.+--+-- 'versionStages', 'putSecretValue_versionStages' - A list of staging labels to attach to this version of the secret.+-- Secrets Manager uses staging labels to track versions of a secret+-- through the rotation process.+--+-- If you specify a staging label that\'s already associated with a+-- different version of the same secret, then Secrets Manager removes the+-- label from the other version and attaches it to this version. If you+-- specify @AWSCURRENT@, and it is already attached to another version,+-- then Secrets Manager also moves the staging label @AWSPREVIOUS@ to the+-- version that @AWSCURRENT@ was removed from.+--+-- If you don\'t include @VersionStages@, then Secrets Manager+-- automatically moves the staging label @AWSCURRENT@ to this version.+--+-- 'secretId', 'putSecretValue_secretId' - The ARN or name of the secret to add a new version to.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+--+-- If the secret doesn\'t already exist, use @CreateSecret@ instead.+newPutSecretValue ::+  -- | 'secretId'+  Prelude.Text ->+  PutSecretValue+newPutSecretValue pSecretId_ =+  PutSecretValue'+    { clientRequestToken =+        Prelude.Nothing,+      secretBinary = Prelude.Nothing,+      secretString = Prelude.Nothing,+      versionStages = Prelude.Nothing,+      secretId = pSecretId_+    }++-- | A unique identifier for the new version of the secret.+--+-- If you use the Amazon Web Services CLI or one of the Amazon Web Services+-- SDKs to call this operation, then you can leave this parameter empty+-- because they generate a random UUID for you. If you don\'t use the SDK+-- and instead generate a raw HTTP request to the Secrets Manager service+-- endpoint, then you must generate a @ClientRequestToken@ yourself for new+-- versions and include that value in the request.+--+-- This value helps ensure idempotency. Secrets Manager uses this value to+-- prevent the accidental creation of duplicate versions if there are+-- failures and retries during the Lambda rotation function processing. We+-- recommend that you generate a+-- <https://wikipedia.org/wiki/Universally_unique_identifier UUID-type>+-- value to ensure uniqueness within the specified secret.+--+-- -   If the @ClientRequestToken@ value isn\'t already associated with a+--     version of the secret then a new version of the secret is created.+--+-- -   If a version with this value already exists and that version\'s+--     @SecretString@ or @SecretBinary@ values are the same as those in the+--     request then the request is ignored. The operation is idempotent.+--+-- -   If a version with this value already exists and the version of the+--     @SecretString@ and @SecretBinary@ values are different from those in+--     the request, then the request fails because you can\'t modify a+--     secret version. You can only create new versions to store new secret+--     values.+--+-- This value becomes the @VersionId@ of the new version.+putSecretValue_clientRequestToken :: Lens.Lens' PutSecretValue (Prelude.Maybe Prelude.Text)+putSecretValue_clientRequestToken = Lens.lens (\PutSecretValue' {clientRequestToken} -> clientRequestToken) (\s@PutSecretValue' {} a -> s {clientRequestToken = a} :: PutSecretValue)++-- | The binary data to encrypt and store in the new version of the secret.+-- To use this parameter in the command-line tools, we recommend that you+-- store your binary data in a file and then pass the contents of the file+-- as a parameter.+--+-- You must include @SecretBinary@ or @SecretString@, but not both.+--+-- You can\'t access this value from the Secrets Manager console.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+putSecretValue_secretBinary :: Lens.Lens' PutSecretValue (Prelude.Maybe Prelude.ByteString)+putSecretValue_secretBinary = Lens.lens (\PutSecretValue' {secretBinary} -> secretBinary) (\s@PutSecretValue' {} a -> s {secretBinary = a} :: PutSecretValue) Prelude.. Lens.mapping (Data._Sensitive Prelude.. Data._Base64)++-- | The text to encrypt and store in the new version of the secret.+--+-- You must include @SecretBinary@ or @SecretString@, but not both.+--+-- We recommend you create the secret string as JSON key\/value pairs, as+-- shown in the example.+putSecretValue_secretString :: Lens.Lens' PutSecretValue (Prelude.Maybe Prelude.Text)+putSecretValue_secretString = Lens.lens (\PutSecretValue' {secretString} -> secretString) (\s@PutSecretValue' {} a -> s {secretString = a} :: PutSecretValue) Prelude.. Lens.mapping Data._Sensitive++-- | A list of staging labels to attach to this version of the secret.+-- Secrets Manager uses staging labels to track versions of a secret+-- through the rotation process.+--+-- If you specify a staging label that\'s already associated with a+-- different version of the same secret, then Secrets Manager removes the+-- label from the other version and attaches it to this version. If you+-- specify @AWSCURRENT@, and it is already attached to another version,+-- then Secrets Manager also moves the staging label @AWSPREVIOUS@ to the+-- version that @AWSCURRENT@ was removed from.+--+-- If you don\'t include @VersionStages@, then Secrets Manager+-- automatically moves the staging label @AWSCURRENT@ to this version.+putSecretValue_versionStages :: Lens.Lens' PutSecretValue (Prelude.Maybe (Prelude.NonEmpty Prelude.Text))+putSecretValue_versionStages = Lens.lens (\PutSecretValue' {versionStages} -> versionStages) (\s@PutSecretValue' {} a -> s {versionStages = a} :: PutSecretValue) Prelude.. Lens.mapping Lens.coerced++-- | The ARN or name of the secret to add a new version to.+--+-- For an ARN, we recommend that you specify a complete ARN rather than a+-- partial ARN. See+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen Finding a secret from a partial ARN>.+--+-- If the secret doesn\'t already exist, use @CreateSecret@ instead.+putSecretValue_secretId :: Lens.Lens' PutSecretValue Prelude.Text+putSecretValue_secretId = Lens.lens (\PutSecretValue' {secretId} -> secretId) (\s@PutSecretValue' {} a -> s {secretId = a} :: PutSecretValue)++instance Core.AWSRequest PutSecretValue where+  type+    AWSResponse PutSecretValue =+      PutSecretValueResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          PutSecretValueResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> (x Data..?> "Name")+            Prelude.<*> (x Data..?> "VersionId")+            Prelude.<*> (x Data..?> "VersionStages")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable PutSecretValue where+  hashWithSalt _salt PutSecretValue' {..} =+    _salt+      `Prelude.hashWithSalt` clientRequestToken+      `Prelude.hashWithSalt` secretBinary+      `Prelude.hashWithSalt` secretString+      `Prelude.hashWithSalt` versionStages+      `Prelude.hashWithSalt` secretId++instance Prelude.NFData PutSecretValue where+  rnf PutSecretValue' {..} =+    Prelude.rnf clientRequestToken+      `Prelude.seq` Prelude.rnf secretBinary+      `Prelude.seq` Prelude.rnf secretString+      `Prelude.seq` Prelude.rnf versionStages+      `Prelude.seq` Prelude.rnf secretId++instance Data.ToHeaders PutSecretValue where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.PutSecretValue" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON PutSecretValue where+  toJSON PutSecretValue' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("ClientRequestToken" Data..=)+              Prelude.<$> clientRequestToken,+            ("SecretBinary" Data..=) Prelude.<$> secretBinary,+            ("SecretString" Data..=) Prelude.<$> secretString,+            ("VersionStages" Data..=) Prelude.<$> versionStages,+            Prelude.Just ("SecretId" Data..= secretId)+          ]+      )++instance Data.ToPath PutSecretValue where+  toPath = Prelude.const "/"++instance Data.ToQuery PutSecretValue where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newPutSecretValueResponse' smart constructor.+data PutSecretValueResponse = PutSecretValueResponse'+  { -- | The ARN of the secret.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The name of the secret.+    name :: Prelude.Maybe Prelude.Text,+    -- | The unique identifier of the version of the secret.+    versionId :: Prelude.Maybe Prelude.Text,+    -- | The list of staging labels that are currently attached to this version+    -- of the secret. Secrets Manager uses staging labels to track a version as+    -- it progresses through the secret rotation process.+    versionStages :: Prelude.Maybe (Prelude.NonEmpty Prelude.Text),+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'PutSecretValueResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'putSecretValueResponse_arn' - The ARN of the secret.+--+-- 'name', 'putSecretValueResponse_name' - The name of the secret.+--+-- 'versionId', 'putSecretValueResponse_versionId' - The unique identifier of the version of the secret.+--+-- 'versionStages', 'putSecretValueResponse_versionStages' - The list of staging labels that are currently attached to this version+-- of the secret. Secrets Manager uses staging labels to track a version as+-- it progresses through the secret rotation process.+--+-- 'httpStatus', 'putSecretValueResponse_httpStatus' - The response's http status code.+newPutSecretValueResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  PutSecretValueResponse+newPutSecretValueResponse pHttpStatus_ =+  PutSecretValueResponse'+    { arn = Prelude.Nothing,+      name = Prelude.Nothing,+      versionId = Prelude.Nothing,+      versionStages = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the secret.+putSecretValueResponse_arn :: Lens.Lens' PutSecretValueResponse (Prelude.Maybe Prelude.Text)+putSecretValueResponse_arn = Lens.lens (\PutSecretValueResponse' {arn} -> arn) (\s@PutSecretValueResponse' {} a -> s {arn = a} :: PutSecretValueResponse)++-- | The name of the secret.+putSecretValueResponse_name :: Lens.Lens' PutSecretValueResponse (Prelude.Maybe Prelude.Text)+putSecretValueResponse_name = Lens.lens (\PutSecretValueResponse' {name} -> name) (\s@PutSecretValueResponse' {} a -> s {name = a} :: PutSecretValueResponse)++-- | The unique identifier of the version of the secret.+putSecretValueResponse_versionId :: Lens.Lens' PutSecretValueResponse (Prelude.Maybe Prelude.Text)+putSecretValueResponse_versionId = Lens.lens (\PutSecretValueResponse' {versionId} -> versionId) (\s@PutSecretValueResponse' {} a -> s {versionId = a} :: PutSecretValueResponse)++-- | The list of staging labels that are currently attached to this version+-- of the secret. Secrets Manager uses staging labels to track a version as+-- it progresses through the secret rotation process.+putSecretValueResponse_versionStages :: Lens.Lens' PutSecretValueResponse (Prelude.Maybe (Prelude.NonEmpty Prelude.Text))+putSecretValueResponse_versionStages = Lens.lens (\PutSecretValueResponse' {versionStages} -> versionStages) (\s@PutSecretValueResponse' {} a -> s {versionStages = a} :: PutSecretValueResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+putSecretValueResponse_httpStatus :: Lens.Lens' PutSecretValueResponse Prelude.Int+putSecretValueResponse_httpStatus = Lens.lens (\PutSecretValueResponse' {httpStatus} -> httpStatus) (\s@PutSecretValueResponse' {} a -> s {httpStatus = a} :: PutSecretValueResponse)++instance Prelude.NFData PutSecretValueResponse where+  rnf PutSecretValueResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf name+      `Prelude.seq` Prelude.rnf versionId+      `Prelude.seq` Prelude.rnf versionStages+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,228 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.SecretsManager.RemoveRegionsFromReplication+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- For a secret that is replicated to other Regions, deletes the secret+-- replicas from the Regions you specify.+--+-- Secrets Manager generates a CloudTrail log entry when you call this+-- action. Do not include sensitive information in request parameters+-- because it might be logged. For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html Logging Secrets Manager events with CloudTrail>.+--+-- __Required permissions:__ @secretsmanager:RemoveRegionsFromReplication@.+-- For more information, see+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions IAM policy actions for Secrets Manager>+-- and+-- <https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html Authentication and access control in Secrets Manager>.+module Amazonka.SecretsManager.RemoveRegionsFromReplication+  ( -- * Creating a Request+    RemoveRegionsFromReplication (..),+    newRemoveRegionsFromReplication,++    -- * Request Lenses+    removeRegionsFromReplication_secretId,+    removeRegionsFromReplication_removeReplicaRegions,++    -- * Destructuring the Response+    RemoveRegionsFromReplicationResponse (..),+    newRemoveRegionsFromReplicationResponse,++    -- * Response Lenses+    removeRegionsFromReplicationResponse_arn,+    removeRegionsFromReplicationResponse_replicationStatus,+    removeRegionsFromReplicationResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response+import Amazonka.SecretsManager.Types++-- | /See:/ 'newRemoveRegionsFromReplication' smart constructor.+data RemoveRegionsFromReplication = RemoveRegionsFromReplication'+  { -- | The ARN or name of the secret.+    secretId :: Prelude.Text,+    -- | The Regions of the replicas to remove.+    removeReplicaRegions :: Prelude.NonEmpty Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'RemoveRegionsFromReplication' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'secretId', 'removeRegionsFromReplication_secretId' - The ARN or name of the secret.+--+-- 'removeReplicaRegions', 'removeRegionsFromReplication_removeReplicaRegions' - The Regions of the replicas to remove.+newRemoveRegionsFromReplication ::+  -- | 'secretId'+  Prelude.Text ->+  -- | 'removeReplicaRegions'+  Prelude.NonEmpty Prelude.Text ->+  RemoveRegionsFromReplication+newRemoveRegionsFromReplication+  pSecretId_+  pRemoveReplicaRegions_ =+    RemoveRegionsFromReplication'+      { secretId =+          pSecretId_,+        removeReplicaRegions =+          Lens.coerced Lens.# pRemoveReplicaRegions_+      }++-- | The ARN or name of the secret.+removeRegionsFromReplication_secretId :: Lens.Lens' RemoveRegionsFromReplication Prelude.Text+removeRegionsFromReplication_secretId = Lens.lens (\RemoveRegionsFromReplication' {secretId} -> secretId) (\s@RemoveRegionsFromReplication' {} a -> s {secretId = a} :: RemoveRegionsFromReplication)++-- | The Regions of the replicas to remove.+removeRegionsFromReplication_removeReplicaRegions :: Lens.Lens' RemoveRegionsFromReplication (Prelude.NonEmpty Prelude.Text)+removeRegionsFromReplication_removeReplicaRegions = Lens.lens (\RemoveRegionsFromReplication' {removeReplicaRegions} -> removeReplicaRegions) (\s@RemoveRegionsFromReplication' {} a -> s {removeReplicaRegions = a} :: RemoveRegionsFromReplication) Prelude.. Lens.coerced++instance Core.AWSRequest RemoveRegionsFromReplication where+  type+    AWSResponse RemoveRegionsFromReplication =+      RemoveRegionsFromReplicationResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          RemoveRegionsFromReplicationResponse'+            Prelude.<$> (x Data..?> "ARN")+            Prelude.<*> ( x+                            Data..?> "ReplicationStatus"+                            Core..!@ Prelude.mempty+                        )+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance+  Prelude.Hashable+    RemoveRegionsFromReplication+  where+  hashWithSalt _salt RemoveRegionsFromReplication' {..} =+    _salt+      `Prelude.hashWithSalt` secretId+      `Prelude.hashWithSalt` removeReplicaRegions++instance Prelude.NFData RemoveRegionsFromReplication where+  rnf RemoveRegionsFromReplication' {..} =+    Prelude.rnf secretId+      `Prelude.seq` Prelude.rnf removeReplicaRegions++instance Data.ToHeaders RemoveRegionsFromReplication where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "secretsmanager.RemoveRegionsFromReplication" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON RemoveRegionsFromReplication where+  toJSON RemoveRegionsFromReplication' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just ("SecretId" Data..= secretId),+            Prelude.Just+              ( "RemoveReplicaRegions"+                  Data..= removeReplicaRegions+              )+          ]+      )++instance Data.ToPath RemoveRegionsFromReplication where+  toPath = Prelude.const "/"++instance Data.ToQuery RemoveRegionsFromReplication where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newRemoveRegionsFromReplicationResponse' smart constructor.+data RemoveRegionsFromReplicationResponse = RemoveRegionsFromReplicationResponse'+  { -- | The ARN of the primary secret.+    arn :: Prelude.Maybe Prelude.Text,+    -- | The status of replicas for this secret after you remove Regions.+    replicationStatus :: Prelude.Maybe [ReplicationStatusType],+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'RemoveRegionsFromReplicationResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'arn', 'removeRegionsFromReplicationResponse_arn' - The ARN of the primary secret.+--+-- 'replicationStatus', 'removeRegionsFromReplicationResponse_replicationStatus' - The status of replicas for this secret after you remove Regions.+--+-- 'httpStatus', 'removeRegionsFromReplicationResponse_httpStatus' - The response's http status code.+newRemoveRegionsFromReplicationResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  RemoveRegionsFromReplicationResponse+newRemoveRegionsFromReplicationResponse pHttpStatus_ =+  RemoveRegionsFromReplicationResponse'+    { arn =+        Prelude.Nothing,+      replicationStatus = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ARN of the primary secret.+removeRegionsFromReplicationResponse_arn :: Lens.Lens' RemoveRegionsFromReplicationResponse (Prelude.Maybe Prelude.Text)+removeRegionsFromReplicationResponse_arn = Lens.lens (\RemoveRegionsFromReplicationResponse' {arn} -> arn) (\s@RemoveRegionsFromReplicationResponse' {} a -> s {arn = a} :: RemoveRegionsFromReplicationResponse)++-- | The status of replicas for this secret after you remove Regions.+removeRegionsFromReplicationResponse_replicationStatus :: Lens.Lens' RemoveRegionsFromReplicationResponse (Prelude.Maybe [ReplicationStatusType])+removeRegionsFromReplicationResponse_replicationStatus = Lens.lens (\RemoveRegionsFromReplicationResponse' {replicationStatus} -> replicationStatus) (\s@RemoveRegionsFromReplicationResponse' {} a -> s {replicationStatus = a} :: RemoveRegionsFromReplicationResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+removeRegionsFromReplicationResponse_httpStatus :: Lens.Lens' RemoveRegionsFromReplicationResponse Prelude.Int+removeRegionsFromReplicationResponse_httpStatus = Lens.lens (\RemoveRegionsFromReplicationResponse' {httpStatus} -> httpStatus) (\s@RemoveRegionsFromReplicationResponse' {} a -> s {httpStatus = a} :: RemoveRegionsFromReplicationResponse)++instance+  Prelude.NFData+    RemoveRegionsFromReplicationResponse+  where+  rnf RemoveRegionsFromReplicationResponse' {..} =+    Prelude.rnf arn+      `Prelude.seq` Prelude.rnf replicationStatus+      `Prelude.seq` Prelude.rnf httpStatus