amazonka-ssm 1.4.3 → 1.4.4

raw patch · 41 files changed

+2717/−213 lines, 41 filesdep ~amazonka-coredep ~amazonka-ssmdep ~amazonka-testPVP: major bump suggested

API removals or changes: PVP suggests a major version bump

Dependency ranges changed: amazonka-core, amazonka-ssm, amazonka-test

API changes (from Hackage documentation)

Files

• README.md +26/−44
• amazonka-ssm.cabal +41/−49
• fixture/AddTagsToResource.yaml +0/−0
• fixture/AddTagsToResourceResponse.proto +0/−0
• fixture/CreateActivation.yaml +0/−0
• fixture/CreateActivationResponse.proto +0/−0
• fixture/DeleteActivation.yaml +0/−0
• fixture/DeleteActivationResponse.proto +0/−0
• fixture/DeregisterManagedInstance.yaml +0/−0
• fixture/DeregisterManagedInstanceResponse.proto +0/−0
• fixture/DescribeActivations.yaml +0/−0
• fixture/DescribeActivationsResponse.proto +0/−0
• fixture/ListTagsForResource.yaml +0/−0
• fixture/ListTagsForResourceResponse.proto +0/−0
• fixture/RemoveTagsFromResource.yaml +0/−0
• fixture/RemoveTagsFromResourceResponse.proto +0/−0
• fixture/UpdateManagedInstanceRole.yaml +0/−0
• fixture/UpdateManagedInstanceRoleResponse.proto +0/−0
• gen/Network/AWS/SSM.hs +163/−42
• gen/Network/AWS/SSM/AddTagsToResource.hs +146/−0
• gen/Network/AWS/SSM/CancelCommand.hs +3/−1
• gen/Network/AWS/SSM/CreateActivation.hs +182/−0
• gen/Network/AWS/SSM/CreateAssociation.hs +15/−15
• gen/Network/AWS/SSM/CreateAssociationBatch.hs +1/−1
• gen/Network/AWS/SSM/CreateDocument.hs +2/−2
• gen/Network/AWS/SSM/DeleteActivation.hs +121/−0
• gen/Network/AWS/SSM/DeregisterManagedInstance.hs +123/−0
• gen/Network/AWS/SSM/DescribeActivations.hs +162/−0
• gen/Network/AWS/SSM/DescribeAssociation.hs +14/−14
• gen/Network/AWS/SSM/DescribeDocumentPermission.hs +145/−0
• gen/Network/AWS/SSM/DescribeInstanceInformation.hs +1/−1
• gen/Network/AWS/SSM/ListTagsForResource.hs +143/−0
• gen/Network/AWS/SSM/ModifyDocumentPermission.hs +154/−0
• gen/Network/AWS/SSM/RemoveTagsFromResource.hs +144/−0
• gen/Network/AWS/SSM/SendCommand.hs +48/−4
• gen/Network/AWS/SSM/Types.hs +121/−2
• gen/Network/AWS/SSM/Types/Product.hs +419/−22
• gen/Network/AWS/SSM/Types/Sum.hs +226/−14
• gen/Network/AWS/SSM/UpdateManagedInstanceRole.hs +135/−0
• src/.gitkeep +0/−0
• test/Test/AWS/Gen/SSM.hs +182/−2

@@ -8,16 +8,20 @@  ## Version -`1.4.3`+`1.4.4`   ## Description -Simple Systems Manager (SSM) enables you to remotely manage the configuration of your Amazon EC2 instance. Using SSM, you can run scripts or commands using either EC2 Run Command or SSM Config. (SSM Config is currently available only for Windows instances.)+Amazon EC2 Simple Systems Manager (SSM) enables you to remotely manage the configuration of your Amazon EC2 instances, virtual machines (VMs), or servers in your on-premises environment or in an environment provided by other cloud providers using scripts, commands, or the Amazon EC2 console. SSM includes an on-demand solution called /Amazon EC2 Run Command/ and a lightweight instance configuration solution called /SSM Config/. +This references is intended to be used with the EC2 Run Command User Guide for <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/execute-remote-commands.html Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/execute-remote-commands.html Windows>.++You must register your on-premises servers and VMs through an activation process before you can configure them using Run Command. Registered servers and VMs are called /managed instances/. For more information, see <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/managed-instances.html Setting Up Run Command On Managed Instances (On-Premises Servers and VMs) on Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/managed-instances.html Setting Up Run Command On Managed Instances (On-Premises Servers and VMs) on Windows>.+ __Run Command__ -Run Command provides an on-demand experience for executing commands. You can use pre-defined Amazon SSM documents to perform the actions listed later in this section, or you can create your own documents. With these documents, you can remotely configure your instances by sending commands using the __Commands__ page in the <http://console.aws.amazon.com/ec2/ Amazon EC2 console>, <http://docs.aws.amazon.com/powershell/latest/reference/items/Amazon_Simple_Systems_Management_cmdlets.html AWS Tools for Windows PowerShell>, or the <http://docs.aws.amazon.com/cli/latest/reference/ssm/index.html AWS CLI>.+Run Command provides an on-demand experience for executing commands. You can use pre-defined SSM documents to perform the actions listed later in this section, or you can create your own documents. With these documents, you can remotely configure your instances by sending commands using the __Commands__ page in the <http://console.aws.amazon.com/ec2/ Amazon EC2 console>, <http://docs.aws.amazon.com/powershell/latest/reference/items/Amazon_Simple_Systems_Management_cmdlets.html AWS Tools for Windows PowerShell>, the <http://docs.aws.amazon.com/cli/latest/reference/ssm/index.html AWS CLI>, or AWS SDKs.  Run Command reports the status of the command execution for each instance targeted by a command. You can also audit the command execution to understand who executed commands, when, and what changes were made. By switching between different SSM documents, you can quickly configure your instances with different types of commands. To get started with Run Command, verify that your environment meets the prerequisites for remotely running commands on EC2 instances (<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/remote-commands-prereq.html Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/remote-commands-prereq.html Windows>). @@ -27,65 +31,43 @@  SSM Config and Run Command include the following pre-defined documents. -Amazon Pre-defined SSM Documents--Name Description Platform--AWS-RunShellScript--Run shell scripts--Linux--AWS-UpdateSSMAgent--Update the Amazon SSM agent--Linux--AWS-JoinDirectoryServiceDomain--Join an AWS Directory--Windows--AWS-RunPowerShellScript+__Linux__ -Run PowerShell commands or scripts+-   __AWS-RunShellScript__ to run shell scripts -Windows+-   __AWS-UpdateSSMAgent__ to update the Amazon SSM agent -AWS-UpdateEC2Config+__Windows__ -Update the EC2Config service+-   __AWS-JoinDirectoryServiceDomain__ to join an AWS Directory -Windows+-   __AWS-RunPowerShellScript__ to run PowerShell commands or scripts -AWS-ConfigureWindowsUpdate+-   __AWS-UpdateEC2Config__ to update the EC2Config service -Configure Windows Update settings+-   __AWS-ConfigureWindowsUpdate__ to configure Windows Update settings -Windows+-   __AWS-InstallApplication__ to install, repair, or uninstall software using an MSI package -AWS-InstallApplication+-   __AWS-InstallPowerShellModule__ to install PowerShell modules -Install, repair, or uninstall software using an MSI package+-   __AWS-ConfigureCloudWatch__ to configure Amazon CloudWatch Logs to monitor applications and systems -Windows+-   __AWS-ListWindowsInventory__ to collect information about an EC2 instance running in Windows. -AWS-InstallPowerShellModule+-   __AWS-FindWindowsUpdates__ to scan an instance and determines which updates are missing. -Install PowerShell modules+-   __AWS-InstallMissingWindowsUpdates__ to install missing updates on your EC2 instance. -Windows+-   __AWS-InstallSpecificWindowsUpdates__ to install one or more specific updates. -AWS-ConfigureCloudWatch+The commands or scripts specified in SSM documents run with administrative privilege on your instances because the Amazon SSM agent runs as root on Linux and the EC2Config service runs in the Local System account on Windows. If a user has permission to execute any of the pre-defined SSM documents (any document that begins with AWS-*) then that user also has administrator access to the instance. Delegate access to Run Command and SSM Config judiciously. This becomes extremely important if you create your own SSM documents. Amazon Web Services does not provide guidance about how to create secure SSM documents. You create SSM documents and delegate access to Run Command at your own risk. As a security best practice, we recommend that you assign access to \"AWS-*\" documents, especially the AWS-RunShellScript document on Linux and the AWS-RunPowerShellScript document on Windows, to trusted administrators only. You can create SSM documents for specific tasks and delegate access to non-administrators. -Configure Amazon CloudWatch Logs to monitor applications and systems+For information about creating and sharing SSM documents, see the following topics in the SSM User Guide: -Windows+-   <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-ssm-doc.html Creating SSM Documents> and <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ssm-sharing.html Sharing SSM Documents> (Linux) -The commands or scripts specified in SSM documents run with administrative privilege on your instances because the Amazon SSM agent runs as root on Linux and the EC2Config service runs in the Local System account on Windows. If a user has permission to execute any of the pre-defined SSM documents (any document that begins with AWS-*) then that user also has administrator access to the instance. Delegate access to SSM and Run Command judiciously. This becomes extremely important if you create your own SSM documents. Amazon Web Services does not provide guidance about how to create secure SSM documents. You create SSM documents and delegate access to Run Command at your own risk. As a security best practice, we recommend that you assign access to \"AWS-*\" documents, especially the AWS-RunShellScript document on Linux and the AWS-RunPowerShellScript document on Windows, to trusted administrators only. You can create SSM documents for specific tasks and delegate access to non-administrators.+-   <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/create-ssm-doc.html Creating SSM Documents> and <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ssm-sharing.html Sharing SSM Documents> (Windows)  Documentation is available via [Hackage](http://hackage.haskell.org/package/amazonka-ssm) and the [AWS API Reference](https://aws.amazon.com/documentation/).

@@ -1,5 +1,5 @@ name:                  amazonka-ssm-version:               1.4.3+version:               1.4.4 synopsis:              Amazon Simple Systems Management Service SDK. homepage:              https://github.com/brendanhay/amazonka bug-reports:           https://github.com/brendanhay/amazonka/issues@@ -11,13 +11,17 @@ category:              Network, AWS, Cloud, Distributed Computing build-type:            Simple cabal-version:         >= 1.10-extra-source-files:    README.md fixture/*.yaml fixture/*.proto+extra-source-files:    README.md fixture/*.yaml fixture/*.proto src/.gitkeep description:-    Simple Systems Manager (SSM) enables you to remotely manage the configuration of your Amazon EC2 instance. Using SSM, you can run scripts or commands using either EC2 Run Command or SSM Config. (SSM Config is currently available only for Windows instances.)+    Amazon EC2 Simple Systems Manager (SSM) enables you to remotely manage the configuration of your Amazon EC2 instances, virtual machines (VMs), or servers in your on-premises environment or in an environment provided by other cloud providers using scripts, commands, or the Amazon EC2 console. SSM includes an on-demand solution called /Amazon EC2 Run Command/ and a lightweight instance configuration solution called /SSM Config/. +    This references is intended to be used with the EC2 Run Command User Guide for <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/execute-remote-commands.html Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/execute-remote-commands.html Windows>.++    You must register your on-premises servers and VMs through an activation process before you can configure them using Run Command. Registered servers and VMs are called /managed instances/. For more information, see <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/managed-instances.html Setting Up Run Command On Managed Instances (On-Premises Servers and VMs) on Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/managed-instances.html Setting Up Run Command On Managed Instances (On-Premises Servers and VMs) on Windows>.+     __Run Command__ -    Run Command provides an on-demand experience for executing commands. You can use pre-defined Amazon SSM documents to perform the actions listed later in this section, or you can create your own documents. With these documents, you can remotely configure your instances by sending commands using the __Commands__ page in the <http://console.aws.amazon.com/ec2/ Amazon EC2 console>, <http://docs.aws.amazon.com/powershell/latest/reference/items/Amazon_Simple_Systems_Management_cmdlets.html AWS Tools for Windows PowerShell>, or the <http://docs.aws.amazon.com/cli/latest/reference/ssm/index.html AWS CLI>.+    Run Command provides an on-demand experience for executing commands. You can use pre-defined SSM documents to perform the actions listed later in this section, or you can create your own documents. With these documents, you can remotely configure your instances by sending commands using the __Commands__ page in the <http://console.aws.amazon.com/ec2/ Amazon EC2 console>, <http://docs.aws.amazon.com/powershell/latest/reference/items/Amazon_Simple_Systems_Management_cmdlets.html AWS Tools for Windows PowerShell>, the <http://docs.aws.amazon.com/cli/latest/reference/ssm/index.html AWS CLI>, or AWS SDKs.      Run Command reports the status of the command execution for each instance targeted by a command. You can also audit the command execution to understand who executed commands, when, and what changes were made. By switching between different SSM documents, you can quickly configure your instances with different types of commands. To get started with Run Command, verify that your environment meets the prerequisites for remotely running commands on EC2 instances (<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/remote-commands-prereq.html Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/remote-commands-prereq.html Windows>). @@ -27,65 +31,43 @@      SSM Config and Run Command include the following pre-defined documents. -    Amazon Pre-defined SSM Documents--    Name Description Platform--    AWS-RunShellScript--    Run shell scripts--    Linux--    AWS-UpdateSSMAgent--    Update the Amazon SSM agent--    Linux--    AWS-JoinDirectoryServiceDomain--    Join an AWS Directory--    Windows--    AWS-RunPowerShellScript+    __Linux__ -    Run PowerShell commands or scripts+    -   __AWS-RunShellScript__ to run shell scripts -    Windows+    -   __AWS-UpdateSSMAgent__ to update the Amazon SSM agent -    AWS-UpdateEC2Config+    __Windows__ -    Update the EC2Config service+    -   __AWS-JoinDirectoryServiceDomain__ to join an AWS Directory -    Windows+    -   __AWS-RunPowerShellScript__ to run PowerShell commands or scripts -    AWS-ConfigureWindowsUpdate+    -   __AWS-UpdateEC2Config__ to update the EC2Config service -    Configure Windows Update settings+    -   __AWS-ConfigureWindowsUpdate__ to configure Windows Update settings -    Windows+    -   __AWS-InstallApplication__ to install, repair, or uninstall software using an MSI package -    AWS-InstallApplication+    -   __AWS-InstallPowerShellModule__ to install PowerShell modules -    Install, repair, or uninstall software using an MSI package+    -   __AWS-ConfigureCloudWatch__ to configure Amazon CloudWatch Logs to monitor applications and systems -    Windows+    -   __AWS-ListWindowsInventory__ to collect information about an EC2 instance running in Windows. -    AWS-InstallPowerShellModule+    -   __AWS-FindWindowsUpdates__ to scan an instance and determines which updates are missing. -    Install PowerShell modules+    -   __AWS-InstallMissingWindowsUpdates__ to install missing updates on your EC2 instance. -    Windows+    -   __AWS-InstallSpecificWindowsUpdates__ to install one or more specific updates. -    AWS-ConfigureCloudWatch+    The commands or scripts specified in SSM documents run with administrative privilege on your instances because the Amazon SSM agent runs as root on Linux and the EC2Config service runs in the Local System account on Windows. If a user has permission to execute any of the pre-defined SSM documents (any document that begins with AWS-*) then that user also has administrator access to the instance. Delegate access to Run Command and SSM Config judiciously. This becomes extremely important if you create your own SSM documents. Amazon Web Services does not provide guidance about how to create secure SSM documents. You create SSM documents and delegate access to Run Command at your own risk. As a security best practice, we recommend that you assign access to \"AWS-*\" documents, especially the AWS-RunShellScript document on Linux and the AWS-RunPowerShellScript document on Windows, to trusted administrators only. You can create SSM documents for specific tasks and delegate access to non-administrators. -    Configure Amazon CloudWatch Logs to monitor applications and systems+    For information about creating and sharing SSM documents, see the following topics in the SSM User Guide: -    Windows+    -   <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-ssm-doc.html Creating SSM Documents> and <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ssm-sharing.html Sharing SSM Documents> (Linux) -    The commands or scripts specified in SSM documents run with administrative privilege on your instances because the Amazon SSM agent runs as root on Linux and the EC2Config service runs in the Local System account on Windows. If a user has permission to execute any of the pre-defined SSM documents (any document that begins with AWS-*) then that user also has administrator access to the instance. Delegate access to SSM and Run Command judiciously. This becomes extremely important if you create your own SSM documents. Amazon Web Services does not provide guidance about how to create secure SSM documents. You create SSM documents and delegate access to Run Command at your own risk. As a security best practice, we recommend that you assign access to \"AWS-*\" documents, especially the AWS-RunShellScript document on Linux and the AWS-RunPowerShellScript document on Windows, to trusted administrators only. You can create SSM documents for specific tasks and delegate access to non-administrators.+    -   <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/create-ssm-doc.html Creating SSM Documents> and <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ssm-sharing.html Sharing SSM Documents> (Windows)     .     The types from this library are intended to be used with     <http://hackage.haskell.org/package/amazonka amazonka>, which provides@@ -113,23 +95,33 @@      exposed-modules:           Network.AWS.SSM+        , Network.AWS.SSM.AddTagsToResource         , Network.AWS.SSM.CancelCommand+        , Network.AWS.SSM.CreateActivation         , Network.AWS.SSM.CreateAssociation         , Network.AWS.SSM.CreateAssociationBatch         , Network.AWS.SSM.CreateDocument+        , Network.AWS.SSM.DeleteActivation         , Network.AWS.SSM.DeleteAssociation         , Network.AWS.SSM.DeleteDocument+        , Network.AWS.SSM.DeregisterManagedInstance+        , Network.AWS.SSM.DescribeActivations         , Network.AWS.SSM.DescribeAssociation         , Network.AWS.SSM.DescribeDocument+        , Network.AWS.SSM.DescribeDocumentPermission         , Network.AWS.SSM.DescribeInstanceInformation         , Network.AWS.SSM.GetDocument         , Network.AWS.SSM.ListAssociations         , Network.AWS.SSM.ListCommandInvocations         , Network.AWS.SSM.ListCommands         , Network.AWS.SSM.ListDocuments+        , Network.AWS.SSM.ListTagsForResource+        , Network.AWS.SSM.ModifyDocumentPermission+        , Network.AWS.SSM.RemoveTagsFromResource         , Network.AWS.SSM.SendCommand         , Network.AWS.SSM.Types         , Network.AWS.SSM.UpdateAssociationStatus+        , Network.AWS.SSM.UpdateManagedInstanceRole         , Network.AWS.SSM.Waiters      other-modules:@@ -137,7 +129,7 @@         , Network.AWS.SSM.Types.Sum      build-depends:-          amazonka-core == 1.4.3.*+          amazonka-core == 1.4.4.*         , base          >= 4.7     && < 5  test-suite amazonka-ssm-test@@ -157,9 +149,9 @@         , Test.AWS.SSM.Internal      build-depends:-          amazonka-core == 1.4.3.*-        , amazonka-test == 1.4.3.*-        , amazonka-ssm == 1.4.3.*+          amazonka-core == 1.4.4.*+        , amazonka-test == 1.4.4.*+        , amazonka-ssm == 1.4.4.*         , base         , bytestring         , tasty

@@ -11,11 +11,15 @@ -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Simple Systems Manager (SSM) enables you to remotely manage the configuration of your Amazon EC2 instance. Using SSM, you can run scripts or commands using either EC2 Run Command or SSM Config. (SSM Config is currently available only for Windows instances.)+-- Amazon EC2 Simple Systems Manager (SSM) enables you to remotely manage the configuration of your Amazon EC2 instances, virtual machines (VMs), or servers in your on-premises environment or in an environment provided by other cloud providers using scripts, commands, or the Amazon EC2 console. SSM includes an on-demand solution called /Amazon EC2 Run Command/ and a lightweight instance configuration solution called /SSM Config/. --+-- This references is intended to be used with the EC2 Run Command User Guide for <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/execute-remote-commands.html Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/execute-remote-commands.html Windows>.+--+-- You must register your on-premises servers and VMs through an activation process before you can configure them using Run Command. Registered servers and VMs are called /managed instances/. For more information, see <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/managed-instances.html Setting Up Run Command On Managed Instances (On-Premises Servers and VMs) on Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/managed-instances.html Setting Up Run Command On Managed Instances (On-Premises Servers and VMs) on Windows>.+-- -- __Run Command__ ----- Run Command provides an on-demand experience for executing commands. You can use pre-defined Amazon SSM documents to perform the actions listed later in this section, or you can create your own documents. With these documents, you can remotely configure your instances by sending commands using the __Commands__ page in the <http://console.aws.amazon.com/ec2/ Amazon EC2 console>, <http://docs.aws.amazon.com/powershell/latest/reference/items/Amazon_Simple_Systems_Management_cmdlets.html AWS Tools for Windows PowerShell>, or the <http://docs.aws.amazon.com/cli/latest/reference/ssm/index.html AWS CLI>.+-- Run Command provides an on-demand experience for executing commands. You can use pre-defined SSM documents to perform the actions listed later in this section, or you can create your own documents. With these documents, you can remotely configure your instances by sending commands using the __Commands__ page in the <http://console.aws.amazon.com/ec2/ Amazon EC2 console>, <http://docs.aws.amazon.com/powershell/latest/reference/items/Amazon_Simple_Systems_Management_cmdlets.html AWS Tools for Windows PowerShell>, the <http://docs.aws.amazon.com/cli/latest/reference/ssm/index.html AWS CLI>, or AWS SDKs. -- -- Run Command reports the status of the command execution for each instance targeted by a command. You can also audit the command execution to understand who executed commands, when, and what changes were made. By switching between different SSM documents, you can quickly configure your instances with different types of commands. To get started with Run Command, verify that your environment meets the prerequisites for remotely running commands on EC2 instances (<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/remote-commands-prereq.html Linux> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/remote-commands-prereq.html Windows>). --@@ -25,65 +29,44 @@ -- -- SSM Config and Run Command include the following pre-defined documents. ----- Amazon Pre-defined SSM Documents------ Name Description Platform------ AWS-RunShellScript------ Run shell scripts------ Linux------ AWS-UpdateSSMAgent------ Update the Amazon SSM agent------ Linux------ AWS-JoinDirectoryServiceDomain------ Join an AWS Directory------ Windows+-- __Linux__ ----- AWS-RunPowerShellScript+-- -   __AWS-RunShellScript__ to run shell scripts ----- Run PowerShell commands or scripts+-- -   __AWS-UpdateSSMAgent__ to update the Amazon SSM agent ----- Windows+-- __Windows__ ----- AWS-UpdateEC2Config+-- -   __AWS-JoinDirectoryServiceDomain__ to join an AWS Directory ----- Update the EC2Config service+-- -   __AWS-RunPowerShellScript__ to run PowerShell commands or scripts ----- Windows+-- -   __AWS-UpdateEC2Config__ to update the EC2Config service ----- AWS-ConfigureWindowsUpdate+-- -   __AWS-ConfigureWindowsUpdate__ to configure Windows Update settings ----- Configure Windows Update settings+-- -   __AWS-InstallApplication__ to install, repair, or uninstall software using an MSI package ----- Windows+-- -   __AWS-InstallPowerShellModule__ to install PowerShell modules ----- AWS-InstallApplication+-- -   __AWS-ConfigureCloudWatch__ to configure Amazon CloudWatch Logs to monitor applications and systems ----- Install, repair, or uninstall software using an MSI package+-- -   __AWS-ListWindowsInventory__ to collect information about an EC2 instance running in Windows. ----- Windows+-- -   __AWS-FindWindowsUpdates__ to scan an instance and determines which updates are missing. ----- AWS-InstallPowerShellModule+-- -   __AWS-InstallMissingWindowsUpdates__ to install missing updates on your EC2 instance. ----- Install PowerShell modules+-- -   __AWS-InstallSpecificWindowsUpdates__ to install one or more specific updates. ----- Windows+-- The commands or scripts specified in SSM documents run with administrative privilege on your instances because the Amazon SSM agent runs as root on Linux and the EC2Config service runs in the Local System account on Windows. If a user has permission to execute any of the pre-defined SSM documents (any document that begins with AWS-*) then that user also has administrator access to the instance. Delegate access to Run Command and SSM Config judiciously. This becomes extremely important if you create your own SSM documents. Amazon Web Services does not provide guidance about how to create secure SSM documents. You create SSM documents and delegate access to Run Command at your own risk. As a security best practice, we recommend that you assign access to \"AWS-*\" documents, especially the AWS-RunShellScript document on Linux and the AWS-RunPowerShellScript document on Windows, to trusted administrators only. You can create SSM documents for specific tasks and delegate access to non-administrators. ----- AWS-ConfigureCloudWatch+-- For information about creating and sharing SSM documents, see the following topics in the SSM User Guide: ----- Configure Amazon CloudWatch Logs to monitor applications and systems+-- -   <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-ssm-doc.html Creating SSM Documents> and <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ssm-sharing.html Sharing SSM Documents> (Linux) ----- Windows+-- -   <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/create-ssm-doc.html Creating SSM Documents> and <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ssm-sharing.html Sharing SSM Documents> (Windows) ----- The commands or scripts specified in SSM documents run with administrative privilege on your instances because the Amazon SSM agent runs as root on Linux and the EC2Config service runs in the Local System account on Windows. If a user has permission to execute any of the pre-defined SSM documents (any document that begins with AWS-*) then that user also has administrator access to the instance. Delegate access to SSM and Run Command judiciously. This becomes extremely important if you create your own SSM documents. Amazon Web Services does not provide guidance about how to create secure SSM documents. You create SSM documents and delegate access to Run Command at your own risk. As a security best practice, we recommend that you assign access to \"AWS-*\" documents, especially the AWS-RunShellScript document on Linux and the AWS-RunPowerShellScript document on Windows, to trusted administrators only. You can create SSM documents for specific tasks and delegate access to non-administrators. module Network.AWS.SSM     (     -- * Service Configuration@@ -95,6 +78,9 @@     -- ** UnsupportedPlatformType     , _UnsupportedPlatformType +    -- ** InvalidPermissionType+    , _InvalidPermissionType+     -- ** AssociatedInstances     , _AssociatedInstances @@ -110,12 +96,18 @@     -- ** InvalidOutputFolder     , _InvalidOutputFolder +    -- ** InvalidActivationId+    , _InvalidActivationId+     -- ** InvalidCommandId     , _InvalidCommandId      -- ** DuplicateInstanceId     , _DuplicateInstanceId +    -- ** InvalidResourceType+    , _InvalidResourceType+     -- ** InvalidDocument     , _InvalidDocument @@ -140,51 +132,99 @@     -- ** InternalServerError     , _InternalServerError +    -- ** InvalidRole+    , _InvalidRole+     -- ** TooManyUpdates     , _TooManyUpdates +    -- ** InvalidActivation+    , _InvalidActivation+     -- ** MaxDocumentSizeExceeded     , _MaxDocumentSizeExceeded +    -- ** InvalidDocumentOperation+    , _InvalidDocumentOperation+     -- ** InvalidParameters     , _InvalidParameters +    -- ** InvalidResourceId+    , _InvalidResourceId++    -- ** InvalidNotificationConfig+    , _InvalidNotificationConfig++    -- ** DocumentPermissionLimit+    , _DocumentPermissionLimit+     -- ** DocumentAlreadyExists     , _DocumentAlreadyExists      -- ** DocumentLimitExceeded     , _DocumentLimitExceeded +    -- ** InvalidFilter+    , _InvalidFilter+     -- * Waiters     -- $waiters      -- * Operations     -- $operations +    -- ** DescribeActivations+    , module Network.AWS.SSM.DescribeActivations++    -- ** ListTagsForResource+    , module Network.AWS.SSM.ListTagsForResource+     -- ** DescribeDocument     , module Network.AWS.SSM.DescribeDocument      -- ** CreateAssociation     , module Network.AWS.SSM.CreateAssociation +    -- ** DeleteActivation+    , module Network.AWS.SSM.DeleteActivation++    -- ** CreateActivation+    , module Network.AWS.SSM.CreateActivation+     -- ** CreateDocument     , module Network.AWS.SSM.CreateDocument +    -- ** RemoveTagsFromResource+    , module Network.AWS.SSM.RemoveTagsFromResource+     -- ** ListCommandInvocations (Paginated)     , module Network.AWS.SSM.ListCommandInvocations      -- ** ListDocuments (Paginated)     , module Network.AWS.SSM.ListDocuments +    -- ** UpdateManagedInstanceRole+    , module Network.AWS.SSM.UpdateManagedInstanceRole+     -- ** GetDocument     , module Network.AWS.SSM.GetDocument +    -- ** AddTagsToResource+    , module Network.AWS.SSM.AddTagsToResource+     -- ** CancelCommand     , module Network.AWS.SSM.CancelCommand +    -- ** DeregisterManagedInstance+    , module Network.AWS.SSM.DeregisterManagedInstance+     -- ** DescribeAssociation     , module Network.AWS.SSM.DescribeAssociation +    -- ** ModifyDocumentPermission+    , module Network.AWS.SSM.ModifyDocumentPermission+     -- ** UpdateAssociationStatus     , module Network.AWS.SSM.UpdateAssociationStatus @@ -206,6 +246,9 @@     -- ** DeleteDocument     , module Network.AWS.SSM.DeleteDocument +    -- ** DescribeDocumentPermission+    , module Network.AWS.SSM.DescribeDocumentPermission+     -- ** CreateAssociationBatch     , module Network.AWS.SSM.CreateAssociationBatch @@ -229,12 +272,21 @@     -- ** CommandStatus     , CommandStatus (..) +    -- ** DescribeActivationsFilterKeys+    , DescribeActivationsFilterKeys (..)+     -- ** DocumentFilterKey     , DocumentFilterKey (..) +    -- ** DocumentHashType+    , DocumentHashType (..)+     -- ** DocumentParameterType     , DocumentParameterType (..) +    -- ** DocumentPermissionType+    , DocumentPermissionType (..)+     -- ** DocumentStatus     , DocumentStatus (..) @@ -244,12 +296,37 @@     -- ** InstanceInformationFilterKey     , InstanceInformationFilterKey (..) +    -- ** NotificationEvent+    , NotificationEvent (..)++    -- ** NotificationType+    , NotificationType (..)+     -- ** PingStatus     , PingStatus (..)      -- ** PlatformType     , PlatformType (..) +    -- ** ResourceType+    , ResourceType (..)++    -- ** ResourceTypeForTagging+    , ResourceTypeForTagging (..)++    -- ** Activation+    , Activation+    , activation+    , aExpired+    , aDefaultInstanceName+    , aActivationId+    , aCreatedDate+    , aRegistrationLimit+    , aExpirationDate+    , aDescription+    , aRegistrationsCount+    , aIAMRole+     -- ** Association     , Association     , association@@ -284,6 +361,7 @@     , command     , cStatus     , cExpiresAfter+    , cNotificationConfig     , cOutputS3KeyPrefix     , cDocumentName     , cInstanceIds@@ -292,6 +370,7 @@     , cComment     , cOutputS3BucketName     , cRequestedDateTime+    , cServiceRole      -- ** CommandFilter     , CommandFilter@@ -304,12 +383,14 @@     , commandInvocation     , ciInstanceId     , ciStatus+    , ciNotificationConfig     , ciCommandPlugins     , ciDocumentName     , ciCommandId     , ciComment     , ciTraceOutput     , ciRequestedDateTime+    , ciServiceRole      -- ** CommandPlugin     , CommandPlugin@@ -330,14 +411,23 @@     , cabreName     , cabreParameters +    -- ** DescribeActivationsFilter+    , DescribeActivationsFilter+    , describeActivationsFilter+    , dafFilterKey+    , dafFilterValues+     -- ** DocumentDescription     , DocumentDescription     , documentDescription     , dStatus+    , dHash     , dSha1+    , dOwner     , dPlatformTypes     , dCreatedDate     , dName+    , dHashType     , dParameters     , dDescription @@ -350,6 +440,7 @@     -- ** DocumentIdentifier     , DocumentIdentifier     , documentIdentifier+    , diOwner     , diPlatformTypes     , diName @@ -373,37 +464,67 @@     , instanceInformation     , iiInstanceId     , iiPingStatus+    , iiIPAddress+    , iiResourceType+    , iiRegistrationDate     , iiPlatformVersion     , iiIsLatestVersion     , iiAgentVersion     , iiLastPingDateTime+    , iiActivationId+    , iiName     , iiPlatformType     , iiPlatformName+    , iiComputerName+    , iiIAMRole      -- ** InstanceInformationFilter     , InstanceInformationFilter     , instanceInformationFilter     , iifKey     , iifValueSet++    -- ** NotificationConfig+    , NotificationConfig+    , notificationConfig+    , ncNotificationEvents+    , ncNotificationType+    , ncNotificationARN++    -- ** Tag+    , Tag+    , tag+    , tagKey+    , tagValue     ) where +import           Network.AWS.SSM.AddTagsToResource import           Network.AWS.SSM.CancelCommand+import           Network.AWS.SSM.CreateActivation import           Network.AWS.SSM.CreateAssociation import           Network.AWS.SSM.CreateAssociationBatch import           Network.AWS.SSM.CreateDocument+import           Network.AWS.SSM.DeleteActivation import           Network.AWS.SSM.DeleteAssociation import           Network.AWS.SSM.DeleteDocument+import           Network.AWS.SSM.DeregisterManagedInstance+import           Network.AWS.SSM.DescribeActivations import           Network.AWS.SSM.DescribeAssociation import           Network.AWS.SSM.DescribeDocument+import           Network.AWS.SSM.DescribeDocumentPermission import           Network.AWS.SSM.DescribeInstanceInformation import           Network.AWS.SSM.GetDocument import           Network.AWS.SSM.ListAssociations import           Network.AWS.SSM.ListCommandInvocations import           Network.AWS.SSM.ListCommands import           Network.AWS.SSM.ListDocuments+import           Network.AWS.SSM.ListTagsForResource+import           Network.AWS.SSM.ModifyDocumentPermission+import           Network.AWS.SSM.RemoveTagsFromResource import           Network.AWS.SSM.SendCommand import           Network.AWS.SSM.Types import           Network.AWS.SSM.UpdateAssociationStatus+import           Network.AWS.SSM.UpdateManagedInstanceRole import           Network.AWS.SSM.Waiters  {- $errors

@@ -0,0 +1,146 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.AddTagsToResource+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Adds or overwrites one or more tags for the specified resource. Tags are metadata that you assign to your managed instances. Tags enable you to categorize your managed instances in different ways, for example, by purpose, owner, or environment. Each tag consists of a key and an optional value, both of which you define. For example, you could define a set of tags for your account\'s managed instances that helps you track each instance\'s owner and stack level. For example: Key=Owner and Value=DbAdmin, SysAdmin, or Dev. Or Key=Stack and Value=Production, Pre-Production, or Test. Each resource can have a maximum of 10 tags.+--+-- We recommend that you devise a set of tag keys that meets your needs for each resource type. Using a consistent set of tag keys makes it easier for you to manage your resources. You can search and filter the resources based on the tags you add. Tags don\'t have any semantic meaning to Amazon EC2 and are interpreted strictly as a string of characters.+--+-- For more information about tags, see <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html Tagging Your Amazon EC2 Resources> in the Amazon EC2 User Guide.+module Network.AWS.SSM.AddTagsToResource+    (+    -- * Creating a Request+      addTagsToResource+    , AddTagsToResource+    -- * Request Lenses+    , attrResourceType+    , attrResourceId+    , attrTags++    -- * Destructuring the Response+    , addTagsToResourceResponse+    , AddTagsToResourceResponse+    -- * Response Lenses+    , attrrsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'addTagsToResource' smart constructor.+data AddTagsToResource = AddTagsToResource'+    { _attrResourceType :: !ResourceTypeForTagging+    , _attrResourceId   :: !Text+    , _attrTags         :: ![Tag]+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'AddTagsToResource' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'attrResourceType'+--+-- * 'attrResourceId'+--+-- * 'attrTags'+addTagsToResource+    :: ResourceTypeForTagging -- ^ 'attrResourceType'+    -> Text -- ^ 'attrResourceId'+    -> AddTagsToResource+addTagsToResource pResourceType_ pResourceId_ =+    AddTagsToResource'+    { _attrResourceType = pResourceType_+    , _attrResourceId = pResourceId_+    , _attrTags = mempty+    }++-- | Specifies the type of resource you are tagging.+attrResourceType :: Lens' AddTagsToResource ResourceTypeForTagging+attrResourceType = lens _attrResourceType (\ s a -> s{_attrResourceType = a});++-- | The resource ID you want to tag.+attrResourceId :: Lens' AddTagsToResource Text+attrResourceId = lens _attrResourceId (\ s a -> s{_attrResourceId = a});++-- | One or more tags. The value parameter is required, but if you don\'t want the tag to have a value, specify the parameter with no value, and we set the value to an empty string.+attrTags :: Lens' AddTagsToResource [Tag]+attrTags = lens _attrTags (\ s a -> s{_attrTags = a}) . _Coerce;++instance AWSRequest AddTagsToResource where+        type Rs AddTagsToResource = AddTagsToResourceResponse+        request = postJSON ssm+        response+          = receiveEmpty+              (\ s h x ->+                 AddTagsToResourceResponse' <$> (pure (fromEnum s)))++instance Hashable AddTagsToResource++instance NFData AddTagsToResource++instance ToHeaders AddTagsToResource where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.AddTagsToResource" :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AddTagsToResource where+        toJSON AddTagsToResource'{..}+          = object+              (catMaybes+                 [Just ("ResourceType" .= _attrResourceType),+                  Just ("ResourceId" .= _attrResourceId),+                  Just ("Tags" .= _attrTags)])++instance ToPath AddTagsToResource where+        toPath = const "/"++instance ToQuery AddTagsToResource where+        toQuery = const mempty++-- | /See:/ 'addTagsToResourceResponse' smart constructor.+newtype AddTagsToResourceResponse = AddTagsToResourceResponse'+    { _attrrsResponseStatus :: Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'AddTagsToResourceResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'attrrsResponseStatus'+addTagsToResourceResponse+    :: Int -- ^ 'attrrsResponseStatus'+    -> AddTagsToResourceResponse+addTagsToResourceResponse pResponseStatus_ =+    AddTagsToResourceResponse'+    { _attrrsResponseStatus = pResponseStatus_+    }++-- | The response status code.+attrrsResponseStatus :: Lens' AddTagsToResourceResponse Int+attrrsResponseStatus = lens _attrrsResponseStatus (\ s a -> s{_attrrsResponseStatus = a});++instance NFData AddTagsToResourceResponse

@@ -42,7 +42,9 @@ import           Network.AWS.SSM.Types import           Network.AWS.SSM.Types.Product --- | /See:/ 'cancelCommand' smart constructor.+-- |+--+-- /See:/ 'cancelCommand' smart constructor. data CancelCommand = CancelCommand'     { _ccInstanceIds :: !(Maybe (List1 Text))     , _ccCommandId   :: !Text

@@ -0,0 +1,182 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.CreateActivation+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Registers your on-premises server or virtual machine with Amazon EC2 so that you can manage these resources using Run Command. An on-premises server or virtual machine that has been registered with EC2 is called a managed instance. For more information about activations, see <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/managed-instances.html Setting Up Managed Instances (Linux)> or <http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/managed-instances.html Setting Up Managed Instances (Windows)> in the Amazon EC2 User Guide.+module Network.AWS.SSM.CreateActivation+    (+    -- * Creating a Request+      createActivation+    , CreateActivation+    -- * Request Lenses+    , caDefaultInstanceName+    , caRegistrationLimit+    , caExpirationDate+    , caDescription+    , caIAMRole++    -- * Destructuring the Response+    , createActivationResponse+    , CreateActivationResponse+    -- * Response Lenses+    , carsActivationId+    , carsActivationCode+    , carsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'createActivation' smart constructor.+data CreateActivation = CreateActivation'+    { _caDefaultInstanceName :: !(Maybe Text)+    , _caRegistrationLimit   :: !(Maybe Nat)+    , _caExpirationDate      :: !(Maybe POSIX)+    , _caDescription         :: !(Maybe Text)+    , _caIAMRole             :: !Text+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'CreateActivation' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'caDefaultInstanceName'+--+-- * 'caRegistrationLimit'+--+-- * 'caExpirationDate'+--+-- * 'caDescription'+--+-- * 'caIAMRole'+createActivation+    :: Text -- ^ 'caIAMRole'+    -> CreateActivation+createActivation pIAMRole_ =+    CreateActivation'+    { _caDefaultInstanceName = Nothing+    , _caRegistrationLimit = Nothing+    , _caExpirationDate = Nothing+    , _caDescription = Nothing+    , _caIAMRole = pIAMRole_+    }++-- | The name of the registered, managed instance as it will appear in the Amazon EC2 console or when you use the AWS command line tools to list EC2 resources.+caDefaultInstanceName :: Lens' CreateActivation (Maybe Text)+caDefaultInstanceName = lens _caDefaultInstanceName (\ s a -> s{_caDefaultInstanceName = a});++-- | Specify the maximum number of managed instances you want to register. The default value is 1 instance.+caRegistrationLimit :: Lens' CreateActivation (Maybe Natural)+caRegistrationLimit = lens _caRegistrationLimit (\ s a -> s{_caRegistrationLimit = a}) . mapping _Nat;++-- | The date by which this activation request should expire. The default value is 24 hours.+caExpirationDate :: Lens' CreateActivation (Maybe UTCTime)+caExpirationDate = lens _caExpirationDate (\ s a -> s{_caExpirationDate = a}) . mapping _Time;++-- | A user-defined description of the resource that you want to register with Amazon EC2.+caDescription :: Lens' CreateActivation (Maybe Text)+caDescription = lens _caDescription (\ s a -> s{_caDescription = a});++-- | The Amazon Identity and Access Management (IAM) role that you want to assign to the managed instance.+caIAMRole :: Lens' CreateActivation Text+caIAMRole = lens _caIAMRole (\ s a -> s{_caIAMRole = a});++instance AWSRequest CreateActivation where+        type Rs CreateActivation = CreateActivationResponse+        request = postJSON ssm+        response+          = receiveJSON+              (\ s h x ->+                 CreateActivationResponse' <$>+                   (x .?> "ActivationId") <*> (x .?> "ActivationCode")+                     <*> (pure (fromEnum s)))++instance Hashable CreateActivation++instance NFData CreateActivation++instance ToHeaders CreateActivation where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.CreateActivation" :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON CreateActivation where+        toJSON CreateActivation'{..}+          = object+              (catMaybes+                 [("DefaultInstanceName" .=) <$>+                    _caDefaultInstanceName,+                  ("RegistrationLimit" .=) <$> _caRegistrationLimit,+                  ("ExpirationDate" .=) <$> _caExpirationDate,+                  ("Description" .=) <$> _caDescription,+                  Just ("IamRole" .= _caIAMRole)])++instance ToPath CreateActivation where+        toPath = const "/"++instance ToQuery CreateActivation where+        toQuery = const mempty++-- | /See:/ 'createActivationResponse' smart constructor.+data CreateActivationResponse = CreateActivationResponse'+    { _carsActivationId   :: !(Maybe Text)+    , _carsActivationCode :: !(Maybe Text)+    , _carsResponseStatus :: !Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'CreateActivationResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'carsActivationId'+--+-- * 'carsActivationCode'+--+-- * 'carsResponseStatus'+createActivationResponse+    :: Int -- ^ 'carsResponseStatus'+    -> CreateActivationResponse+createActivationResponse pResponseStatus_ =+    CreateActivationResponse'+    { _carsActivationId = Nothing+    , _carsActivationCode = Nothing+    , _carsResponseStatus = pResponseStatus_+    }++-- | The ID number generated by the system when it processed the activation. The activation ID functions like a user name.+carsActivationId :: Lens' CreateActivationResponse (Maybe Text)+carsActivationId = lens _carsActivationId (\ s a -> s{_carsActivationId = a});++-- | The code the system generates when it processes the activation. The activation code functions like a password to validate the activation ID.+carsActivationCode :: Lens' CreateActivationResponse (Maybe Text)+carsActivationCode = lens _carsActivationCode (\ s a -> s{_carsActivationCode = a});++-- | The response status code.+carsResponseStatus :: Lens' CreateActivationResponse Int+carsResponseStatus = lens _carsResponseStatus (\ s a -> s{_carsResponseStatus = a});++instance NFData CreateActivationResponse

@@ -20,7 +20,7 @@ -- -- Associates the specified SSM document with the specified instance. ----- When you associate an SSM document with an instance, the configuration agent on the instance processes the document and configures the instance as specified.+-- When you associate an SSM document with an instance, the configuration agent on the instance (SSM agent for Linux and EC2Config service for Windows) processes the document and configures the instance as specified. -- -- If you associate a document with an instance that already has an associated document, the system throws the AssociationAlreadyExists exception. module Network.AWS.SSM.CreateAssociation@@ -37,8 +37,8 @@     , createAssociationResponse     , CreateAssociationResponse     -- * Response Lenses-    , carsAssociationDescription-    , carsResponseStatus+    , crsAssociationDescription+    , crsResponseStatus     ) where  import           Network.AWS.Lens@@ -83,7 +83,7 @@ caName :: Lens' CreateAssociation Text caName = lens _caName (\ s a -> s{_caName = a}); --- | The Windows Server instance ID.+-- | The instance ID. caInstanceId :: Lens' CreateAssociation Text caInstanceId = lens _caInstanceId (\ s a -> s{_caInstanceId = a}); @@ -126,32 +126,32 @@  -- | /See:/ 'createAssociationResponse' smart constructor. data CreateAssociationResponse = CreateAssociationResponse'-    { _carsAssociationDescription :: !(Maybe AssociationDescription)-    , _carsResponseStatus         :: !Int+    { _crsAssociationDescription :: !(Maybe AssociationDescription)+    , _crsResponseStatus         :: !Int     } deriving (Eq,Read,Show,Data,Typeable,Generic)  -- | Creates a value of 'CreateAssociationResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'carsAssociationDescription'+-- * 'crsAssociationDescription' ----- * 'carsResponseStatus'+-- * 'crsResponseStatus' createAssociationResponse-    :: Int -- ^ 'carsResponseStatus'+    :: Int -- ^ 'crsResponseStatus'     -> CreateAssociationResponse createAssociationResponse pResponseStatus_ =     CreateAssociationResponse'-    { _carsAssociationDescription = Nothing-    , _carsResponseStatus = pResponseStatus_+    { _crsAssociationDescription = Nothing+    , _crsResponseStatus = pResponseStatus_     }  -- | Information about the association.-carsAssociationDescription :: Lens' CreateAssociationResponse (Maybe AssociationDescription)-carsAssociationDescription = lens _carsAssociationDescription (\ s a -> s{_carsAssociationDescription = a});+crsAssociationDescription :: Lens' CreateAssociationResponse (Maybe AssociationDescription)+crsAssociationDescription = lens _crsAssociationDescription (\ s a -> s{_crsAssociationDescription = a});  -- | The response status code.-carsResponseStatus :: Lens' CreateAssociationResponse Int-carsResponseStatus = lens _carsResponseStatus (\ s a -> s{_carsResponseStatus = a});+crsResponseStatus :: Lens' CreateAssociationResponse Int+crsResponseStatus = lens _crsResponseStatus (\ s a -> s{_crsResponseStatus = a});  instance NFData CreateAssociationResponse

@@ -20,7 +20,7 @@ -- -- Associates the specified SSM document with the specified instances. ----- When you associate an SSM document with an instance, the configuration agent on the instance processes the document and configures the instance as specified.+-- When you associate an SSM document with an instance, the configuration agent on the instance (SSM agent for Linux and EC2Config service for Windows) processes the document and configures the instance as specified. -- -- If you associate a document with an instance that already has an associated document, the system throws the AssociationAlreadyExists exception. module Network.AWS.SSM.CreateAssociationBatch

@@ -20,7 +20,7 @@ -- -- Creates an SSM document. ----- After you create an SSM document, you can use < CreateAssociation> to associate it with one or more running instances.+-- After you create an SSM document, you can use CreateAssociation to associate it with one or more running instances. module Network.AWS.SSM.CreateDocument     (     -- * Creating a Request@@ -68,7 +68,7 @@     , _cdName = pName_     } --- | A valid JSON string. For more information about the contents of this string, see <http://docs.aws.amazon.com/ssm/latest/APIReference/aws-ssm-document.html SSM Document>.+-- | A valid JSON string. cdContent :: Lens' CreateDocument Text cdContent = lens _cdContent (\ s a -> s{_cdContent = a}); 

@@ -0,0 +1,121 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.DeleteActivation+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Deletes an activation. You are not required to delete an activation. If you delete an activation, you can no longer use it to register additional managed instances. Deleting an activation does not de-register managed instances. You must manually de-register managed instances.+module Network.AWS.SSM.DeleteActivation+    (+    -- * Creating a Request+      deleteActivation+    , DeleteActivation+    -- * Request Lenses+    , daActivationId++    -- * Destructuring the Response+    , deleteActivationResponse+    , DeleteActivationResponse+    -- * Response Lenses+    , daarsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'deleteActivation' smart constructor.+newtype DeleteActivation = DeleteActivation'+    { _daActivationId :: Text+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DeleteActivation' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'daActivationId'+deleteActivation+    :: Text -- ^ 'daActivationId'+    -> DeleteActivation+deleteActivation pActivationId_ =+    DeleteActivation'+    { _daActivationId = pActivationId_+    }++-- | The ID of the activation that you want to delete.+daActivationId :: Lens' DeleteActivation Text+daActivationId = lens _daActivationId (\ s a -> s{_daActivationId = a});++instance AWSRequest DeleteActivation where+        type Rs DeleteActivation = DeleteActivationResponse+        request = postJSON ssm+        response+          = receiveEmpty+              (\ s h x ->+                 DeleteActivationResponse' <$> (pure (fromEnum s)))++instance Hashable DeleteActivation++instance NFData DeleteActivation++instance ToHeaders DeleteActivation where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.DeleteActivation" :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON DeleteActivation where+        toJSON DeleteActivation'{..}+          = object+              (catMaybes+                 [Just ("ActivationId" .= _daActivationId)])++instance ToPath DeleteActivation where+        toPath = const "/"++instance ToQuery DeleteActivation where+        toQuery = const mempty++-- | /See:/ 'deleteActivationResponse' smart constructor.+newtype DeleteActivationResponse = DeleteActivationResponse'+    { _daarsResponseStatus :: Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DeleteActivationResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'daarsResponseStatus'+deleteActivationResponse+    :: Int -- ^ 'daarsResponseStatus'+    -> DeleteActivationResponse+deleteActivationResponse pResponseStatus_ =+    DeleteActivationResponse'+    { _daarsResponseStatus = pResponseStatus_+    }++-- | The response status code.+daarsResponseStatus :: Lens' DeleteActivationResponse Int+daarsResponseStatus = lens _daarsResponseStatus (\ s a -> s{_daarsResponseStatus = a});++instance NFData DeleteActivationResponse

@@ -0,0 +1,123 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.DeregisterManagedInstance+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Removes the server or virtual machine from the list of registered servers. You can reregister the instance again at any time. If you don’t plan to use Run Command on the server, we suggest uninstalling the SSM agent first.+module Network.AWS.SSM.DeregisterManagedInstance+    (+    -- * Creating a Request+      deregisterManagedInstance+    , DeregisterManagedInstance+    -- * Request Lenses+    , dmiInstanceId++    -- * Destructuring the Response+    , deregisterManagedInstanceResponse+    , DeregisterManagedInstanceResponse+    -- * Response Lenses+    , dmirsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'deregisterManagedInstance' smart constructor.+newtype DeregisterManagedInstance = DeregisterManagedInstance'+    { _dmiInstanceId :: Text+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DeregisterManagedInstance' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'dmiInstanceId'+deregisterManagedInstance+    :: Text -- ^ 'dmiInstanceId'+    -> DeregisterManagedInstance+deregisterManagedInstance pInstanceId_ =+    DeregisterManagedInstance'+    { _dmiInstanceId = pInstanceId_+    }++-- | The ID assigned to the managed instance when you registered it using the activation process.+dmiInstanceId :: Lens' DeregisterManagedInstance Text+dmiInstanceId = lens _dmiInstanceId (\ s a -> s{_dmiInstanceId = a});++instance AWSRequest DeregisterManagedInstance where+        type Rs DeregisterManagedInstance =+             DeregisterManagedInstanceResponse+        request = postJSON ssm+        response+          = receiveEmpty+              (\ s h x ->+                 DeregisterManagedInstanceResponse' <$>+                   (pure (fromEnum s)))++instance Hashable DeregisterManagedInstance++instance NFData DeregisterManagedInstance++instance ToHeaders DeregisterManagedInstance where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.DeregisterManagedInstance" ::+                       ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON DeregisterManagedInstance where+        toJSON DeregisterManagedInstance'{..}+          = object+              (catMaybes [Just ("InstanceId" .= _dmiInstanceId)])++instance ToPath DeregisterManagedInstance where+        toPath = const "/"++instance ToQuery DeregisterManagedInstance where+        toQuery = const mempty++-- | /See:/ 'deregisterManagedInstanceResponse' smart constructor.+newtype DeregisterManagedInstanceResponse = DeregisterManagedInstanceResponse'+    { _dmirsResponseStatus :: Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DeregisterManagedInstanceResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'dmirsResponseStatus'+deregisterManagedInstanceResponse+    :: Int -- ^ 'dmirsResponseStatus'+    -> DeregisterManagedInstanceResponse+deregisterManagedInstanceResponse pResponseStatus_ =+    DeregisterManagedInstanceResponse'+    { _dmirsResponseStatus = pResponseStatus_+    }++-- | The response status code.+dmirsResponseStatus :: Lens' DeregisterManagedInstanceResponse Int+dmirsResponseStatus = lens _dmirsResponseStatus (\ s a -> s{_dmirsResponseStatus = a});++instance NFData DeregisterManagedInstanceResponse

@@ -0,0 +1,162 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.DescribeActivations+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Details about the activation, including: the date and time the activation was created, the expiration date, the IAM role assigned to the instances in the activation, and the number of instances activated by this registration.+module Network.AWS.SSM.DescribeActivations+    (+    -- * Creating a Request+      describeActivations+    , DescribeActivations+    -- * Request Lenses+    , daFilters+    , daNextToken+    , daMaxResults++    -- * Destructuring the Response+    , describeActivationsResponse+    , DescribeActivationsResponse+    -- * Response Lenses+    , darsActivationList+    , darsNextToken+    , darsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'describeActivations' smart constructor.+data DescribeActivations = DescribeActivations'+    { _daFilters    :: !(Maybe [DescribeActivationsFilter])+    , _daNextToken  :: !(Maybe Text)+    , _daMaxResults :: !(Maybe Nat)+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DescribeActivations' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'daFilters'+--+-- * 'daNextToken'+--+-- * 'daMaxResults'+describeActivations+    :: DescribeActivations+describeActivations =+    DescribeActivations'+    { _daFilters = Nothing+    , _daNextToken = Nothing+    , _daMaxResults = Nothing+    }++-- | A filter to view information about your activations.+daFilters :: Lens' DescribeActivations [DescribeActivationsFilter]+daFilters = lens _daFilters (\ s a -> s{_daFilters = a}) . _Default . _Coerce;++-- | A token to start the list. Use this token to get the next set of results.+daNextToken :: Lens' DescribeActivations (Maybe Text)+daNextToken = lens _daNextToken (\ s a -> s{_daNextToken = a});++-- | The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.+daMaxResults :: Lens' DescribeActivations (Maybe Natural)+daMaxResults = lens _daMaxResults (\ s a -> s{_daMaxResults = a}) . mapping _Nat;++instance AWSRequest DescribeActivations where+        type Rs DescribeActivations =+             DescribeActivationsResponse+        request = postJSON ssm+        response+          = receiveJSON+              (\ s h x ->+                 DescribeActivationsResponse' <$>+                   (x .?> "ActivationList" .!@ mempty) <*>+                     (x .?> "NextToken")+                     <*> (pure (fromEnum s)))++instance Hashable DescribeActivations++instance NFData DescribeActivations++instance ToHeaders DescribeActivations where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.DescribeActivations" :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON DescribeActivations where+        toJSON DescribeActivations'{..}+          = object+              (catMaybes+                 [("Filters" .=) <$> _daFilters,+                  ("NextToken" .=) <$> _daNextToken,+                  ("MaxResults" .=) <$> _daMaxResults])++instance ToPath DescribeActivations where+        toPath = const "/"++instance ToQuery DescribeActivations where+        toQuery = const mempty++-- | /See:/ 'describeActivationsResponse' smart constructor.+data DescribeActivationsResponse = DescribeActivationsResponse'+    { _darsActivationList :: !(Maybe [Activation])+    , _darsNextToken      :: !(Maybe Text)+    , _darsResponseStatus :: !Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DescribeActivationsResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'darsActivationList'+--+-- * 'darsNextToken'+--+-- * 'darsResponseStatus'+describeActivationsResponse+    :: Int -- ^ 'darsResponseStatus'+    -> DescribeActivationsResponse+describeActivationsResponse pResponseStatus_ =+    DescribeActivationsResponse'+    { _darsActivationList = Nothing+    , _darsNextToken = Nothing+    , _darsResponseStatus = pResponseStatus_+    }++-- | A list of activations for your AWS account.+darsActivationList :: Lens' DescribeActivationsResponse [Activation]+darsActivationList = lens _darsActivationList (\ s a -> s{_darsActivationList = a}) . _Default . _Coerce;++-- | The token for the next set of items to return. Use this token to get the next set of results.+darsNextToken :: Lens' DescribeActivationsResponse (Maybe Text)+darsNextToken = lens _darsNextToken (\ s a -> s{_darsNextToken = a});++-- | The response status code.+darsResponseStatus :: Lens' DescribeActivationsResponse Int+darsResponseStatus = lens _darsResponseStatus (\ s a -> s{_darsResponseStatus = a});++instance NFData DescribeActivationsResponse

@@ -32,8 +32,8 @@     , describeAssociationResponse     , DescribeAssociationResponse     -- * Response Lenses-    , darsAssociationDescription-    , darsResponseStatus+    , desrsAssociationDescription+    , desrsResponseStatus     ) where  import           Network.AWS.Lens@@ -70,7 +70,7 @@ daName :: Lens' DescribeAssociation Text daName = lens _daName (\ s a -> s{_daName = a}); --- | The Windows Server instance ID.+-- | The instance ID. daInstanceId :: Lens' DescribeAssociation Text daInstanceId = lens _daInstanceId (\ s a -> s{_daInstanceId = a}); @@ -113,32 +113,32 @@  -- | /See:/ 'describeAssociationResponse' smart constructor. data DescribeAssociationResponse = DescribeAssociationResponse'-    { _darsAssociationDescription :: !(Maybe AssociationDescription)-    , _darsResponseStatus         :: !Int+    { _desrsAssociationDescription :: !(Maybe AssociationDescription)+    , _desrsResponseStatus         :: !Int     } deriving (Eq,Read,Show,Data,Typeable,Generic)  -- | Creates a value of 'DescribeAssociationResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'darsAssociationDescription'+-- * 'desrsAssociationDescription' ----- * 'darsResponseStatus'+-- * 'desrsResponseStatus' describeAssociationResponse-    :: Int -- ^ 'darsResponseStatus'+    :: Int -- ^ 'desrsResponseStatus'     -> DescribeAssociationResponse describeAssociationResponse pResponseStatus_ =     DescribeAssociationResponse'-    { _darsAssociationDescription = Nothing-    , _darsResponseStatus = pResponseStatus_+    { _desrsAssociationDescription = Nothing+    , _desrsResponseStatus = pResponseStatus_     }  -- | Information about the association.-darsAssociationDescription :: Lens' DescribeAssociationResponse (Maybe AssociationDescription)-darsAssociationDescription = lens _darsAssociationDescription (\ s a -> s{_darsAssociationDescription = a});+desrsAssociationDescription :: Lens' DescribeAssociationResponse (Maybe AssociationDescription)+desrsAssociationDescription = lens _desrsAssociationDescription (\ s a -> s{_desrsAssociationDescription = a});  -- | The response status code.-darsResponseStatus :: Lens' DescribeAssociationResponse Int-darsResponseStatus = lens _darsResponseStatus (\ s a -> s{_darsResponseStatus = a});+desrsResponseStatus :: Lens' DescribeAssociationResponse Int+desrsResponseStatus = lens _desrsResponseStatus (\ s a -> s{_desrsResponseStatus = a});  instance NFData DescribeAssociationResponse

@@ -0,0 +1,145 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.DescribeDocumentPermission+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Describes the permissions for an SSM document. If you created the document, you are the owner. If a document is shared, it can either be shared privately (by specifying a user’s AWS account ID) or publicly (/All/).+module Network.AWS.SSM.DescribeDocumentPermission+    (+    -- * Creating a Request+      describeDocumentPermission+    , DescribeDocumentPermission+    -- * Request Lenses+    , ddpName+    , ddpPermissionType++    -- * Destructuring the Response+    , describeDocumentPermissionResponse+    , DescribeDocumentPermissionResponse+    -- * Response Lenses+    , ddprsAccountIds+    , ddprsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'describeDocumentPermission' smart constructor.+data DescribeDocumentPermission = DescribeDocumentPermission'+    { _ddpName           :: !Text+    , _ddpPermissionType :: !DocumentPermissionType+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DescribeDocumentPermission' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'ddpName'+--+-- * 'ddpPermissionType'+describeDocumentPermission+    :: Text -- ^ 'ddpName'+    -> DocumentPermissionType -- ^ 'ddpPermissionType'+    -> DescribeDocumentPermission+describeDocumentPermission pName_ pPermissionType_ =+    DescribeDocumentPermission'+    { _ddpName = pName_+    , _ddpPermissionType = pPermissionType_+    }++-- | The name of the document for which you are the owner.+ddpName :: Lens' DescribeDocumentPermission Text+ddpName = lens _ddpName (\ s a -> s{_ddpName = a});++-- | The permission type for the document. The permission type can be /Share/.+ddpPermissionType :: Lens' DescribeDocumentPermission DocumentPermissionType+ddpPermissionType = lens _ddpPermissionType (\ s a -> s{_ddpPermissionType = a});++instance AWSRequest DescribeDocumentPermission where+        type Rs DescribeDocumentPermission =+             DescribeDocumentPermissionResponse+        request = postJSON ssm+        response+          = receiveJSON+              (\ s h x ->+                 DescribeDocumentPermissionResponse' <$>+                   (x .?> "AccountIds" .!@ mempty) <*>+                     (pure (fromEnum s)))++instance Hashable DescribeDocumentPermission++instance NFData DescribeDocumentPermission++instance ToHeaders DescribeDocumentPermission where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.DescribeDocumentPermission" ::+                       ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON DescribeDocumentPermission where+        toJSON DescribeDocumentPermission'{..}+          = object+              (catMaybes+                 [Just ("Name" .= _ddpName),+                  Just ("PermissionType" .= _ddpPermissionType)])++instance ToPath DescribeDocumentPermission where+        toPath = const "/"++instance ToQuery DescribeDocumentPermission where+        toQuery = const mempty++-- | /See:/ 'describeDocumentPermissionResponse' smart constructor.+data DescribeDocumentPermissionResponse = DescribeDocumentPermissionResponse'+    { _ddprsAccountIds     :: !(Maybe [Text])+    , _ddprsResponseStatus :: !Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DescribeDocumentPermissionResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'ddprsAccountIds'+--+-- * 'ddprsResponseStatus'+describeDocumentPermissionResponse+    :: Int -- ^ 'ddprsResponseStatus'+    -> DescribeDocumentPermissionResponse+describeDocumentPermissionResponse pResponseStatus_ =+    DescribeDocumentPermissionResponse'+    { _ddprsAccountIds = Nothing+    , _ddprsResponseStatus = pResponseStatus_+    }++-- | The account IDs that have permission to use this document. The ID can be either an AWS account or /All/.+ddprsAccountIds :: Lens' DescribeDocumentPermissionResponse [Text]+ddprsAccountIds = lens _ddprsAccountIds (\ s a -> s{_ddprsAccountIds = a}) . _Default . _Coerce;++-- | The response status code.+ddprsResponseStatus :: Lens' DescribeDocumentPermissionResponse Int+ddprsResponseStatus = lens _ddprsResponseStatus (\ s a -> s{_ddprsResponseStatus = a});++instance NFData DescribeDocumentPermissionResponse

@@ -18,7 +18,7 @@ -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Describes one or more of your instances. You can use this to get information about instances like the operating system platform, the SSM agent version, status etc. If you specify one or more instance IDs, it returns information for those instances. If you do not specify instance IDs, it returns information for all your instances. If you specify an instance ID that is not valid or an instance that you do not own, you receive an error.+-- Describes one or more of your instances. You can use this to get information about instances like the operating system platform, the SSM agent version (Linux), status etc. If you specify one or more instance IDs, it returns information for those instances. If you do not specify instance IDs, it returns information for all your instances. If you specify an instance ID that is not valid or an instance that you do not own, you receive an error. module Network.AWS.SSM.DescribeInstanceInformation     (     -- * Creating a Request

@@ -0,0 +1,143 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.ListTagsForResource+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Returns a list of the tags assigned to the specified resource.+module Network.AWS.SSM.ListTagsForResource+    (+    -- * Creating a Request+      listTagsForResource+    , ListTagsForResource+    -- * Request Lenses+    , ltfrResourceType+    , ltfrResourceId++    -- * Destructuring the Response+    , listTagsForResourceResponse+    , ListTagsForResourceResponse+    -- * Response Lenses+    , ltfrrsTagList+    , ltfrrsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'listTagsForResource' smart constructor.+data ListTagsForResource = ListTagsForResource'+    { _ltfrResourceType :: !ResourceTypeForTagging+    , _ltfrResourceId   :: !Text+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'ListTagsForResource' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'ltfrResourceType'+--+-- * 'ltfrResourceId'+listTagsForResource+    :: ResourceTypeForTagging -- ^ 'ltfrResourceType'+    -> Text -- ^ 'ltfrResourceId'+    -> ListTagsForResource+listTagsForResource pResourceType_ pResourceId_ =+    ListTagsForResource'+    { _ltfrResourceType = pResourceType_+    , _ltfrResourceId = pResourceId_+    }++-- | Returns a list of tags for a specific resource type.+ltfrResourceType :: Lens' ListTagsForResource ResourceTypeForTagging+ltfrResourceType = lens _ltfrResourceType (\ s a -> s{_ltfrResourceType = a});++-- | The resource ID for which you want to see a list of tags.+ltfrResourceId :: Lens' ListTagsForResource Text+ltfrResourceId = lens _ltfrResourceId (\ s a -> s{_ltfrResourceId = a});++instance AWSRequest ListTagsForResource where+        type Rs ListTagsForResource =+             ListTagsForResourceResponse+        request = postJSON ssm+        response+          = receiveJSON+              (\ s h x ->+                 ListTagsForResourceResponse' <$>+                   (x .?> "TagList" .!@ mempty) <*> (pure (fromEnum s)))++instance Hashable ListTagsForResource++instance NFData ListTagsForResource++instance ToHeaders ListTagsForResource where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.ListTagsForResource" :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON ListTagsForResource where+        toJSON ListTagsForResource'{..}+          = object+              (catMaybes+                 [Just ("ResourceType" .= _ltfrResourceType),+                  Just ("ResourceId" .= _ltfrResourceId)])++instance ToPath ListTagsForResource where+        toPath = const "/"++instance ToQuery ListTagsForResource where+        toQuery = const mempty++-- | /See:/ 'listTagsForResourceResponse' smart constructor.+data ListTagsForResourceResponse = ListTagsForResourceResponse'+    { _ltfrrsTagList        :: !(Maybe [Tag])+    , _ltfrrsResponseStatus :: !Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'ListTagsForResourceResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'ltfrrsTagList'+--+-- * 'ltfrrsResponseStatus'+listTagsForResourceResponse+    :: Int -- ^ 'ltfrrsResponseStatus'+    -> ListTagsForResourceResponse+listTagsForResourceResponse pResponseStatus_ =+    ListTagsForResourceResponse'+    { _ltfrrsTagList = Nothing+    , _ltfrrsResponseStatus = pResponseStatus_+    }++-- | A list of tags.+ltfrrsTagList :: Lens' ListTagsForResourceResponse [Tag]+ltfrrsTagList = lens _ltfrrsTagList (\ s a -> s{_ltfrrsTagList = a}) . _Default . _Coerce;++-- | The response status code.+ltfrrsResponseStatus :: Lens' ListTagsForResourceResponse Int+ltfrrsResponseStatus = lens _ltfrrsResponseStatus (\ s a -> s{_ltfrrsResponseStatus = a});++instance NFData ListTagsForResourceResponse

@@ -0,0 +1,154 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.ModifyDocumentPermission+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Share a document publicly or privately. If you share a document privately, you must specify the AWS user account IDs for those people who can use the document. If you share a document publicly, you must specify /All/ as the account ID.+module Network.AWS.SSM.ModifyDocumentPermission+    (+    -- * Creating a Request+      modifyDocumentPermission+    , ModifyDocumentPermission+    -- * Request Lenses+    , mdpAccountIdsToAdd+    , mdpAccountIdsToRemove+    , mdpName+    , mdpPermissionType++    -- * Destructuring the Response+    , modifyDocumentPermissionResponse+    , ModifyDocumentPermissionResponse+    -- * Response Lenses+    , mdprsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'modifyDocumentPermission' smart constructor.+data ModifyDocumentPermission = ModifyDocumentPermission'+    { _mdpAccountIdsToAdd    :: !(Maybe [Text])+    , _mdpAccountIdsToRemove :: !(Maybe [Text])+    , _mdpName               :: !Text+    , _mdpPermissionType     :: !DocumentPermissionType+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'ModifyDocumentPermission' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'mdpAccountIdsToAdd'+--+-- * 'mdpAccountIdsToRemove'+--+-- * 'mdpName'+--+-- * 'mdpPermissionType'+modifyDocumentPermission+    :: Text -- ^ 'mdpName'+    -> DocumentPermissionType -- ^ 'mdpPermissionType'+    -> ModifyDocumentPermission+modifyDocumentPermission pName_ pPermissionType_ =+    ModifyDocumentPermission'+    { _mdpAccountIdsToAdd = Nothing+    , _mdpAccountIdsToRemove = Nothing+    , _mdpName = pName_+    , _mdpPermissionType = pPermissionType_+    }++-- | The AWS user accounts that should have access to the document. The account IDs can either be a group of account IDs or /All/.+mdpAccountIdsToAdd :: Lens' ModifyDocumentPermission [Text]+mdpAccountIdsToAdd = lens _mdpAccountIdsToAdd (\ s a -> s{_mdpAccountIdsToAdd = a}) . _Default . _Coerce;++-- | The AWS user accounts that should no longer have access to the document. The AWS user account can either be a group of account IDs or /All/. This action has a higher priority than /AccountIdsToAdd/. If you specify an account ID to add and the same ID to remove, the system removes access to the document.+mdpAccountIdsToRemove :: Lens' ModifyDocumentPermission [Text]+mdpAccountIdsToRemove = lens _mdpAccountIdsToRemove (\ s a -> s{_mdpAccountIdsToRemove = a}) . _Default . _Coerce;++-- | The name of the document that you want to share.+mdpName :: Lens' ModifyDocumentPermission Text+mdpName = lens _mdpName (\ s a -> s{_mdpName = a});++-- | The permission type for the document. The permission type can be /Share/.+mdpPermissionType :: Lens' ModifyDocumentPermission DocumentPermissionType+mdpPermissionType = lens _mdpPermissionType (\ s a -> s{_mdpPermissionType = a});++instance AWSRequest ModifyDocumentPermission where+        type Rs ModifyDocumentPermission =+             ModifyDocumentPermissionResponse+        request = postJSON ssm+        response+          = receiveEmpty+              (\ s h x ->+                 ModifyDocumentPermissionResponse' <$>+                   (pure (fromEnum s)))++instance Hashable ModifyDocumentPermission++instance NFData ModifyDocumentPermission++instance ToHeaders ModifyDocumentPermission where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.ModifyDocumentPermission" :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON ModifyDocumentPermission where+        toJSON ModifyDocumentPermission'{..}+          = object+              (catMaybes+                 [("AccountIdsToAdd" .=) <$> _mdpAccountIdsToAdd,+                  ("AccountIdsToRemove" .=) <$> _mdpAccountIdsToRemove,+                  Just ("Name" .= _mdpName),+                  Just ("PermissionType" .= _mdpPermissionType)])++instance ToPath ModifyDocumentPermission where+        toPath = const "/"++instance ToQuery ModifyDocumentPermission where+        toQuery = const mempty++-- | /See:/ 'modifyDocumentPermissionResponse' smart constructor.+newtype ModifyDocumentPermissionResponse = ModifyDocumentPermissionResponse'+    { _mdprsResponseStatus :: Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'ModifyDocumentPermissionResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'mdprsResponseStatus'+modifyDocumentPermissionResponse+    :: Int -- ^ 'mdprsResponseStatus'+    -> ModifyDocumentPermissionResponse+modifyDocumentPermissionResponse pResponseStatus_ =+    ModifyDocumentPermissionResponse'+    { _mdprsResponseStatus = pResponseStatus_+    }++-- | The response status code.+mdprsResponseStatus :: Lens' ModifyDocumentPermissionResponse Int+mdprsResponseStatus = lens _mdprsResponseStatus (\ s a -> s{_mdprsResponseStatus = a});++instance NFData ModifyDocumentPermissionResponse

@@ -0,0 +1,144 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.RemoveTagsFromResource+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Removes all tags from the specified resource.+module Network.AWS.SSM.RemoveTagsFromResource+    (+    -- * Creating a Request+      removeTagsFromResource+    , RemoveTagsFromResource+    -- * Request Lenses+    , rtfrResourceType+    , rtfrResourceId+    , rtfrTagKeys++    -- * Destructuring the Response+    , removeTagsFromResourceResponse+    , RemoveTagsFromResourceResponse+    -- * Response Lenses+    , rtfrrsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'removeTagsFromResource' smart constructor.+data RemoveTagsFromResource = RemoveTagsFromResource'+    { _rtfrResourceType :: !ResourceTypeForTagging+    , _rtfrResourceId   :: !Text+    , _rtfrTagKeys      :: ![Text]+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'RemoveTagsFromResource' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'rtfrResourceType'+--+-- * 'rtfrResourceId'+--+-- * 'rtfrTagKeys'+removeTagsFromResource+    :: ResourceTypeForTagging -- ^ 'rtfrResourceType'+    -> Text -- ^ 'rtfrResourceId'+    -> RemoveTagsFromResource+removeTagsFromResource pResourceType_ pResourceId_ =+    RemoveTagsFromResource'+    { _rtfrResourceType = pResourceType_+    , _rtfrResourceId = pResourceId_+    , _rtfrTagKeys = mempty+    }++-- | The type of resource of which you want to remove a tag.+rtfrResourceType :: Lens' RemoveTagsFromResource ResourceTypeForTagging+rtfrResourceType = lens _rtfrResourceType (\ s a -> s{_rtfrResourceType = a});++-- | The resource ID for which you want to remove tags.+rtfrResourceId :: Lens' RemoveTagsFromResource Text+rtfrResourceId = lens _rtfrResourceId (\ s a -> s{_rtfrResourceId = a});++-- | Tag keys that you want to remove from the specified resource.+rtfrTagKeys :: Lens' RemoveTagsFromResource [Text]+rtfrTagKeys = lens _rtfrTagKeys (\ s a -> s{_rtfrTagKeys = a}) . _Coerce;++instance AWSRequest RemoveTagsFromResource where+        type Rs RemoveTagsFromResource =+             RemoveTagsFromResourceResponse+        request = postJSON ssm+        response+          = receiveEmpty+              (\ s h x ->+                 RemoveTagsFromResourceResponse' <$>+                   (pure (fromEnum s)))++instance Hashable RemoveTagsFromResource++instance NFData RemoveTagsFromResource++instance ToHeaders RemoveTagsFromResource where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.RemoveTagsFromResource" :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON RemoveTagsFromResource where+        toJSON RemoveTagsFromResource'{..}+          = object+              (catMaybes+                 [Just ("ResourceType" .= _rtfrResourceType),+                  Just ("ResourceId" .= _rtfrResourceId),+                  Just ("TagKeys" .= _rtfrTagKeys)])++instance ToPath RemoveTagsFromResource where+        toPath = const "/"++instance ToQuery RemoveTagsFromResource where+        toQuery = const mempty++-- | /See:/ 'removeTagsFromResourceResponse' smart constructor.+newtype RemoveTagsFromResourceResponse = RemoveTagsFromResourceResponse'+    { _rtfrrsResponseStatus :: Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'RemoveTagsFromResourceResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'rtfrrsResponseStatus'+removeTagsFromResourceResponse+    :: Int -- ^ 'rtfrrsResponseStatus'+    -> RemoveTagsFromResourceResponse+removeTagsFromResourceResponse pResponseStatus_ =+    RemoveTagsFromResourceResponse'+    { _rtfrrsResponseStatus = pResponseStatus_+    }++-- | The response status code.+rtfrrsResponseStatus :: Lens' RemoveTagsFromResourceResponse Int+rtfrrsResponseStatus = lens _rtfrrsResponseStatus (\ s a -> s{_rtfrrsResponseStatus = a});++instance NFData RemoveTagsFromResourceResponse

@@ -25,8 +25,12 @@       sendCommand     , SendCommand     -- * Request Lenses+    , scServiceRoleARN+    , scNotificationConfig+    , scDocumentHashType     , scOutputS3KeyPrefix     , scParameters+    , scDocumentHash     , scTimeoutSeconds     , scComment     , scOutputS3BucketName@@ -50,8 +54,12 @@  -- | /See:/ 'sendCommand' smart constructor. data SendCommand = SendCommand'-    { _scOutputS3KeyPrefix  :: !(Maybe Text)+    { _scServiceRoleARN     :: !(Maybe Text)+    , _scNotificationConfig :: !(Maybe NotificationConfig)+    , _scDocumentHashType   :: !(Maybe DocumentHashType)+    , _scOutputS3KeyPrefix  :: !(Maybe Text)     , _scParameters         :: !(Maybe (Map Text [Text]))+    , _scDocumentHash       :: !(Maybe Text)     , _scTimeoutSeconds     :: !(Maybe Nat)     , _scComment            :: !(Maybe Text)     , _scOutputS3BucketName :: !(Maybe Text)@@ -63,10 +71,18 @@ -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'scServiceRoleARN'+--+-- * 'scNotificationConfig'+--+-- * 'scDocumentHashType'+-- -- * 'scOutputS3KeyPrefix' -- -- * 'scParameters' --+-- * 'scDocumentHash'+-- -- * 'scTimeoutSeconds' -- -- * 'scComment'@@ -82,8 +98,12 @@     -> SendCommand sendCommand pInstanceIds_ pDocumentName_ =     SendCommand'-    { _scOutputS3KeyPrefix = Nothing+    { _scServiceRoleARN = Nothing+    , _scNotificationConfig = Nothing+    , _scDocumentHashType = Nothing+    , _scOutputS3KeyPrefix = Nothing     , _scParameters = Nothing+    , _scDocumentHash = Nothing     , _scTimeoutSeconds = Nothing     , _scComment = Nothing     , _scOutputS3BucketName = Nothing@@ -91,6 +111,20 @@     , _scDocumentName = pDocumentName_     } +-- | The IAM role that SSM uses to send notifications.+scServiceRoleARN :: Lens' SendCommand (Maybe Text)+scServiceRoleARN = lens _scServiceRoleARN (\ s a -> s{_scServiceRoleARN = a});++-- | Configurations for sending notifications.+scNotificationConfig :: Lens' SendCommand (Maybe NotificationConfig)+scNotificationConfig = lens _scNotificationConfig (\ s a -> s{_scNotificationConfig = a});++-- | Sha256 or Sha1.+--+-- Sha1 hashes have been deprecated.+scDocumentHashType :: Lens' SendCommand (Maybe DocumentHashType)+scDocumentHashType = lens _scDocumentHashType (\ s a -> s{_scDocumentHashType = a});+ -- | The directory structure within the S3 bucket where the responses should be stored. scOutputS3KeyPrefix :: Lens' SendCommand (Maybe Text) scOutputS3KeyPrefix = lens _scOutputS3KeyPrefix (\ s a -> s{_scOutputS3KeyPrefix = a});@@ -99,6 +133,12 @@ scParameters :: Lens' SendCommand (HashMap Text [Text]) scParameters = lens _scParameters (\ s a -> s{_scParameters = a}) . _Default . _Map; +-- | The Sha256 or Sha1 hash created by the system when the document was created.+--+-- Sha1 hashes have been deprecated.+scDocumentHash :: Lens' SendCommand (Maybe Text)+scDocumentHash = lens _scDocumentHash (\ s a -> s{_scDocumentHash = a});+ -- | If this time is reached and the command has not already started executing, it will not execute. scTimeoutSeconds :: Lens' SendCommand (Maybe Natural) scTimeoutSeconds = lens _scTimeoutSeconds (\ s a -> s{_scTimeoutSeconds = a}) . mapping _Nat;@@ -111,7 +151,7 @@ scOutputS3BucketName :: Lens' SendCommand (Maybe Text) scOutputS3BucketName = lens _scOutputS3BucketName (\ s a -> s{_scOutputS3BucketName = a}); --- | Required. The instance IDs where the command should execute.+-- | Required. The instance IDs where the command should execute. You can specify a maximum of 50 IDs. scInstanceIds :: Lens' SendCommand (NonEmpty Text) scInstanceIds = lens _scInstanceIds (\ s a -> s{_scInstanceIds = a}) . _List1; @@ -145,8 +185,12 @@         toJSON SendCommand'{..}           = object               (catMaybes-                 [("OutputS3KeyPrefix" .=) <$> _scOutputS3KeyPrefix,+                 [("ServiceRoleArn" .=) <$> _scServiceRoleARN,+                  ("NotificationConfig" .=) <$> _scNotificationConfig,+                  ("DocumentHashType" .=) <$> _scDocumentHashType,+                  ("OutputS3KeyPrefix" .=) <$> _scOutputS3KeyPrefix,                   ("Parameters" .=) <$> _scParameters,+                  ("DocumentHash" .=) <$> _scDocumentHash,                   ("TimeoutSeconds" .=) <$> _scTimeoutSeconds,                   ("Comment" .=) <$> _scComment,                   ("OutputS3BucketName" .=) <$> _scOutputS3BucketName,

@@ -17,13 +17,16 @@      -- * Errors     , _UnsupportedPlatformType+    , _InvalidPermissionType     , _AssociatedInstances     , _InvalidInstanceId     , _StatusUnchanged     , _InvalidNextToken     , _InvalidOutputFolder+    , _InvalidActivationId     , _InvalidCommandId     , _DuplicateInstanceId+    , _InvalidResourceType     , _InvalidDocument     , _InvalidFilterKey     , _InvalidInstanceInformationFilterValue@@ -32,11 +35,18 @@     , _AssociationLimitExceeded     , _AssociationDoesNotExist     , _InternalServerError+    , _InvalidRole     , _TooManyUpdates+    , _InvalidActivation     , _MaxDocumentSizeExceeded+    , _InvalidDocumentOperation     , _InvalidParameters+    , _InvalidResourceId+    , _InvalidNotificationConfig+    , _DocumentPermissionLimit     , _DocumentAlreadyExists     , _DocumentLimitExceeded+    , _InvalidFilter      -- * AssociationFilterKey     , AssociationFilterKey (..)@@ -56,12 +66,21 @@     -- * CommandStatus     , CommandStatus (..) +    -- * DescribeActivationsFilterKeys+    , DescribeActivationsFilterKeys (..)+     -- * DocumentFilterKey     , DocumentFilterKey (..) +    -- * DocumentHashType+    , DocumentHashType (..)+     -- * DocumentParameterType     , DocumentParameterType (..) +    -- * DocumentPermissionType+    , DocumentPermissionType (..)+     -- * DocumentStatus     , DocumentStatus (..) @@ -71,12 +90,37 @@     -- * InstanceInformationFilterKey     , InstanceInformationFilterKey (..) +    -- * NotificationEvent+    , NotificationEvent (..)++    -- * NotificationType+    , NotificationType (..)+     -- * PingStatus     , PingStatus (..)      -- * PlatformType     , PlatformType (..) +    -- * ResourceType+    , ResourceType (..)++    -- * ResourceTypeForTagging+    , ResourceTypeForTagging (..)++    -- * Activation+    , Activation+    , activation+    , aExpired+    , aDefaultInstanceName+    , aActivationId+    , aCreatedDate+    , aRegistrationLimit+    , aExpirationDate+    , aDescription+    , aRegistrationsCount+    , aIAMRole+     -- * Association     , Association     , association@@ -111,6 +155,7 @@     , command     , cStatus     , cExpiresAfter+    , cNotificationConfig     , cOutputS3KeyPrefix     , cDocumentName     , cInstanceIds@@ -119,6 +164,7 @@     , cComment     , cOutputS3BucketName     , cRequestedDateTime+    , cServiceRole      -- * CommandFilter     , CommandFilter@@ -131,12 +177,14 @@     , commandInvocation     , ciInstanceId     , ciStatus+    , ciNotificationConfig     , ciCommandPlugins     , ciDocumentName     , ciCommandId     , ciComment     , ciTraceOutput     , ciRequestedDateTime+    , ciServiceRole      -- * CommandPlugin     , CommandPlugin@@ -157,14 +205,23 @@     , cabreName     , cabreParameters +    -- * DescribeActivationsFilter+    , DescribeActivationsFilter+    , describeActivationsFilter+    , dafFilterKey+    , dafFilterValues+     -- * DocumentDescription     , DocumentDescription     , documentDescription     , dStatus+    , dHash     , dSha1+    , dOwner     , dPlatformTypes     , dCreatedDate     , dName+    , dHashType     , dParameters     , dDescription @@ -177,6 +234,7 @@     -- * DocumentIdentifier     , DocumentIdentifier     , documentIdentifier+    , diOwner     , diPlatformTypes     , diName @@ -200,18 +258,38 @@     , instanceInformation     , iiInstanceId     , iiPingStatus+    , iiIPAddress+    , iiResourceType+    , iiRegistrationDate     , iiPlatformVersion     , iiIsLatestVersion     , iiAgentVersion     , iiLastPingDateTime+    , iiActivationId+    , iiName     , iiPlatformType     , iiPlatformName+    , iiComputerName+    , iiIAMRole      -- * InstanceInformationFilter     , InstanceInformationFilter     , instanceInformationFilter     , iifKey     , iifValueSet++    -- * NotificationConfig+    , NotificationConfig+    , notificationConfig+    , ncNotificationEvents+    , ncNotificationType+    , ncNotificationARN++    -- * Tag+    , Tag+    , tag+    , tagKey+    , tagValue     ) where  import           Network.AWS.Lens@@ -254,10 +332,14 @@       | has (hasStatus 509) e = Just "limit_exceeded"       | otherwise = Nothing --- | The document does not support the platform type of the given instance ID(s).+-- | The document does not support the platform type of the given instance ID(s). For example, you sent an SSM document for a Windows instance to a Linux instance. _UnsupportedPlatformType :: AsError a => Getting (First ServiceError) a ServiceError _UnsupportedPlatformType = _ServiceError . hasCode "UnsupportedPlatformType" +-- | The permission type is not supported. /Share/ is the only supported permission type.+_InvalidPermissionType :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidPermissionType = _ServiceError . hasCode "InvalidPermissionType"+ -- | You must disassociate an SSM document from all instances before you can delete it. _AssociatedInstances :: AsError a => Getting (First ServiceError) a ServiceError _AssociatedInstances = _ServiceError . hasCode "AssociatedInstances"@@ -278,6 +360,10 @@ _InvalidOutputFolder :: AsError a => Getting (First ServiceError) a ServiceError _InvalidOutputFolder = _ServiceError . hasCode "InvalidOutputFolder" +-- | The activation ID is not valid. Verify the you entered the correct ActivationId or ActivationCode and try again.+_InvalidActivationId :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidActivationId = _ServiceError . hasCode "InvalidActivationId"+ -- | Prism for InvalidCommandId' errors. _InvalidCommandId :: AsError a => Getting (First ServiceError) a ServiceError _InvalidCommandId = _ServiceError . hasCode "InvalidCommandId"@@ -286,6 +372,10 @@ _DuplicateInstanceId :: AsError a => Getting (First ServiceError) a ServiceError _DuplicateInstanceId = _ServiceError . hasCode "DuplicateInstanceId" +-- | The resource type is not valid. If you are attempting to tag an instance, the instance must be a registered, managed instance.+_InvalidResourceType :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidResourceType = _ServiceError . hasCode "InvalidResourceType"+ -- | The specified document does not exist. _InvalidDocument :: AsError a => Getting (First ServiceError) a ServiceError _InvalidDocument = _ServiceError . hasCode "InvalidDocument"@@ -319,22 +409,51 @@ _InternalServerError :: AsError a => Getting (First ServiceError) a ServiceError _InternalServerError = _ServiceError . hasCode "InternalServerError" +-- | The role name can\'t contain invalid characters. Also verify that you specified an IAM role for notifications that includes the required trust policy. For information about configuring the IAM role for SSM notifications, see <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/rc-sns.html Configuring SNS Notifications SSM> in the /Amazon Elastic Compute Cloud User Guide/ .+_InvalidRole :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidRole = _ServiceError . hasCode "InvalidRole"+ -- | There are concurrent updates for a resource that supports one update at a time. _TooManyUpdates :: AsError a => Getting (First ServiceError) a ServiceError _TooManyUpdates = _ServiceError . hasCode "TooManyUpdates" +-- | The activation is not valid. The activation might have been deleted, or the ActivationId and the ActivationCode do not match.+_InvalidActivation :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidActivation = _ServiceError . hasCode "InvalidActivation"+ -- | The size limit of an SSM document is 64 KB. _MaxDocumentSizeExceeded :: AsError a => Getting (First ServiceError) a ServiceError _MaxDocumentSizeExceeded = _ServiceError . hasCode "MaxDocumentSizeExceeded" +-- | You attempted to delete a document while it is still shared. You must stop sharing the document before you can delete it.+_InvalidDocumentOperation :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidDocumentOperation = _ServiceError . hasCode "InvalidDocumentOperation"+ -- | You must specify values for all required parameters in the SSM document. You can only supply values to parameters defined in the SSM document. _InvalidParameters :: AsError a => Getting (First ServiceError) a ServiceError _InvalidParameters = _ServiceError . hasCode "InvalidParameters" +-- | The resource ID is not valid. Verify that you entered the correct ID and try again.+_InvalidResourceId :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidResourceId = _ServiceError . hasCode "InvalidResourceId"++-- | One or more configuration items is not valid. Verify that a valid Amazon Resource Name (ARN) was provided for an Amazon SNS topic.+_InvalidNotificationConfig :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidNotificationConfig =+    _ServiceError . hasCode "InvalidNotificationConfig"++-- | The document cannot be shared with more AWS user accounts. You can share a document with a maximum of 20 accounts. You can publicly share up to five documents. If you need to increase this limit, contact AWS Support.+_DocumentPermissionLimit :: AsError a => Getting (First ServiceError) a ServiceError+_DocumentPermissionLimit = _ServiceError . hasCode "DocumentPermissionLimit"+ -- | The specified SSM document already exists. _DocumentAlreadyExists :: AsError a => Getting (First ServiceError) a ServiceError _DocumentAlreadyExists = _ServiceError . hasCode "DocumentAlreadyExists" --- | You can have at most 100 active SSM documents.+-- | You can have at most 200 active SSM documents. _DocumentLimitExceeded :: AsError a => Getting (First ServiceError) a ServiceError _DocumentLimitExceeded = _ServiceError . hasCode "DocumentLimitExceeded"++-- | The filter name is not valid. Verify the you entered the correct name and try again.+_InvalidFilter :: AsError a => Getting (First ServiceError) a ServiceError+_InvalidFilter = _ServiceError . hasCode "InvalidFilter"

@@ -21,6 +21,111 @@ import           Network.AWS.Prelude import           Network.AWS.SSM.Types.Sum +-- | An activation registers one or more on-premises servers or virtual machines (VMs) with AWS so that you can configure those servers or VMs using Run Command. A server or VM that has been registered with AWS is called a managed instance.+--+-- /See:/ 'activation' smart constructor.+data Activation = Activation'+    { _aExpired             :: !(Maybe Bool)+    , _aDefaultInstanceName :: !(Maybe Text)+    , _aActivationId        :: !(Maybe Text)+    , _aCreatedDate         :: !(Maybe POSIX)+    , _aRegistrationLimit   :: !(Maybe Nat)+    , _aExpirationDate      :: !(Maybe POSIX)+    , _aDescription         :: !(Maybe Text)+    , _aRegistrationsCount  :: !(Maybe Nat)+    , _aIAMRole             :: !(Maybe Text)+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'Activation' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'aExpired'+--+-- * 'aDefaultInstanceName'+--+-- * 'aActivationId'+--+-- * 'aCreatedDate'+--+-- * 'aRegistrationLimit'+--+-- * 'aExpirationDate'+--+-- * 'aDescription'+--+-- * 'aRegistrationsCount'+--+-- * 'aIAMRole'+activation+    :: Activation+activation =+    Activation'+    { _aExpired = Nothing+    , _aDefaultInstanceName = Nothing+    , _aActivationId = Nothing+    , _aCreatedDate = Nothing+    , _aRegistrationLimit = Nothing+    , _aExpirationDate = Nothing+    , _aDescription = Nothing+    , _aRegistrationsCount = Nothing+    , _aIAMRole = Nothing+    }++-- | Whether or not the activation is expired.+aExpired :: Lens' Activation (Maybe Bool)+aExpired = lens _aExpired (\ s a -> s{_aExpired = a});++-- | A name for the managed instance when it is created.+aDefaultInstanceName :: Lens' Activation (Maybe Text)+aDefaultInstanceName = lens _aDefaultInstanceName (\ s a -> s{_aDefaultInstanceName = a});++-- | The ID created by SSM when you submitted the activation.+aActivationId :: Lens' Activation (Maybe Text)+aActivationId = lens _aActivationId (\ s a -> s{_aActivationId = a});++-- | The date the activation was created.+aCreatedDate :: Lens' Activation (Maybe UTCTime)+aCreatedDate = lens _aCreatedDate (\ s a -> s{_aCreatedDate = a}) . mapping _Time;++-- | The maximum number of managed instances that can be registered using this activation.+aRegistrationLimit :: Lens' Activation (Maybe Natural)+aRegistrationLimit = lens _aRegistrationLimit (\ s a -> s{_aRegistrationLimit = a}) . mapping _Nat;++-- | The date when this activation can no longer be used to register managed instances.+aExpirationDate :: Lens' Activation (Maybe UTCTime)+aExpirationDate = lens _aExpirationDate (\ s a -> s{_aExpirationDate = a}) . mapping _Time;++-- | A user defined description of the activation.+aDescription :: Lens' Activation (Maybe Text)+aDescription = lens _aDescription (\ s a -> s{_aDescription = a});++-- | The number of managed instances already registered with this activation.+aRegistrationsCount :: Lens' Activation (Maybe Natural)+aRegistrationsCount = lens _aRegistrationsCount (\ s a -> s{_aRegistrationsCount = a}) . mapping _Nat;++-- | The Amazon Identity and Access Management (IAM) role to assign to the managed instance.+aIAMRole :: Lens' Activation (Maybe Text)+aIAMRole = lens _aIAMRole (\ s a -> s{_aIAMRole = a});++instance FromJSON Activation where+        parseJSON+          = withObject "Activation"+              (\ x ->+                 Activation' <$>+                   (x .:? "Expired") <*> (x .:? "DefaultInstanceName")+                     <*> (x .:? "ActivationId")+                     <*> (x .:? "CreatedDate")+                     <*> (x .:? "RegistrationLimit")+                     <*> (x .:? "ExpirationDate")+                     <*> (x .:? "Description")+                     <*> (x .:? "RegistrationsCount")+                     <*> (x .:? "IamRole"))++instance Hashable Activation++instance NFData Activation+ -- | Describes an association of an SSM document and an instance. -- -- /See:/ 'association' smart constructor.@@ -252,6 +357,7 @@ data Command = Command'     { _cStatus             :: !(Maybe CommandStatus)     , _cExpiresAfter       :: !(Maybe POSIX)+    , _cNotificationConfig :: !(Maybe NotificationConfig)     , _cOutputS3KeyPrefix  :: !(Maybe Text)     , _cDocumentName       :: !(Maybe Text)     , _cInstanceIds        :: !(Maybe (List1 Text))@@ -260,6 +366,7 @@     , _cComment            :: !(Maybe Text)     , _cOutputS3BucketName :: !(Maybe Text)     , _cRequestedDateTime  :: !(Maybe POSIX)+    , _cServiceRole        :: !(Maybe Text)     } deriving (Eq,Read,Show,Data,Typeable,Generic)  -- | Creates a value of 'Command' with the minimum fields required to make a request.@@ -270,6 +377,8 @@ -- -- * 'cExpiresAfter' --+-- * 'cNotificationConfig'+-- -- * 'cOutputS3KeyPrefix' -- -- * 'cDocumentName'@@ -285,12 +394,15 @@ -- * 'cOutputS3BucketName' -- -- * 'cRequestedDateTime'+--+-- * 'cServiceRole' command     :: Command command =     Command'     { _cStatus = Nothing     , _cExpiresAfter = Nothing+    , _cNotificationConfig = Nothing     , _cOutputS3KeyPrefix = Nothing     , _cDocumentName = Nothing     , _cInstanceIds = Nothing@@ -299,6 +411,7 @@     , _cComment = Nothing     , _cOutputS3BucketName = Nothing     , _cRequestedDateTime = Nothing+    , _cServiceRole = Nothing     }  -- | The status of the command.@@ -309,6 +422,10 @@ cExpiresAfter :: Lens' Command (Maybe UTCTime) cExpiresAfter = lens _cExpiresAfter (\ s a -> s{_cExpiresAfter = a}) . mapping _Time; +-- | Configurations for sending notifications about command status changes.+cNotificationConfig :: Lens' Command (Maybe NotificationConfig)+cNotificationConfig = lens _cNotificationConfig (\ s a -> s{_cNotificationConfig = a});+ -- | The S3 directory path inside the bucket where the responses to the command executions should be stored. This was requested when issuing the command. cOutputS3KeyPrefix :: Lens' Command (Maybe Text) cOutputS3KeyPrefix = lens _cOutputS3KeyPrefix (\ s a -> s{_cOutputS3KeyPrefix = a});@@ -341,20 +458,26 @@ cRequestedDateTime :: Lens' Command (Maybe UTCTime) cRequestedDateTime = lens _cRequestedDateTime (\ s a -> s{_cRequestedDateTime = a}) . mapping _Time; +-- | The IAM service role that SSM uses to act on your behalf when sending notifications about command status changes.+cServiceRole :: Lens' Command (Maybe Text)+cServiceRole = lens _cServiceRole (\ s a -> s{_cServiceRole = a});+ instance FromJSON Command where         parseJSON           = withObject "Command"               (\ x ->                  Command' <$>                    (x .:? "Status") <*> (x .:? "ExpiresAfter") <*>-                     (x .:? "OutputS3KeyPrefix")+                     (x .:? "NotificationConfig")+                     <*> (x .:? "OutputS3KeyPrefix")                      <*> (x .:? "DocumentName")                      <*> (x .:? "InstanceIds")                      <*> (x .:? "CommandId")                      <*> (x .:? "Parameters" .!= mempty)                      <*> (x .:? "Comment")                      <*> (x .:? "OutputS3BucketName")-                     <*> (x .:? "RequestedDateTime"))+                     <*> (x .:? "RequestedDateTime")+                     <*> (x .:? "ServiceRole"))  instance Hashable Command @@ -407,14 +530,16 @@ -- -- /See:/ 'commandInvocation' smart constructor. data CommandInvocation = CommandInvocation'-    { _ciInstanceId        :: !(Maybe Text)-    , _ciStatus            :: !(Maybe CommandInvocationStatus)-    , _ciCommandPlugins    :: !(Maybe [CommandPlugin])-    , _ciDocumentName      :: !(Maybe Text)-    , _ciCommandId         :: !(Maybe Text)-    , _ciComment           :: !(Maybe Text)-    , _ciTraceOutput       :: !(Maybe Text)-    , _ciRequestedDateTime :: !(Maybe POSIX)+    { _ciInstanceId         :: !(Maybe Text)+    , _ciStatus             :: !(Maybe CommandInvocationStatus)+    , _ciNotificationConfig :: !(Maybe NotificationConfig)+    , _ciCommandPlugins     :: !(Maybe [CommandPlugin])+    , _ciDocumentName       :: !(Maybe Text)+    , _ciCommandId          :: !(Maybe Text)+    , _ciComment            :: !(Maybe Text)+    , _ciTraceOutput        :: !(Maybe Text)+    , _ciRequestedDateTime  :: !(Maybe POSIX)+    , _ciServiceRole        :: !(Maybe Text)     } deriving (Eq,Read,Show,Data,Typeable,Generic)  -- | Creates a value of 'CommandInvocation' with the minimum fields required to make a request.@@ -425,6 +550,8 @@ -- -- * 'ciStatus' --+-- * 'ciNotificationConfig'+-- -- * 'ciCommandPlugins' -- -- * 'ciDocumentName'@@ -436,18 +563,22 @@ -- * 'ciTraceOutput' -- -- * 'ciRequestedDateTime'+--+-- * 'ciServiceRole' commandInvocation     :: CommandInvocation commandInvocation =     CommandInvocation'     { _ciInstanceId = Nothing     , _ciStatus = Nothing+    , _ciNotificationConfig = Nothing     , _ciCommandPlugins = Nothing     , _ciDocumentName = Nothing     , _ciCommandId = Nothing     , _ciComment = Nothing     , _ciTraceOutput = Nothing     , _ciRequestedDateTime = Nothing+    , _ciServiceRole = Nothing     }  -- | The instance ID in which this invocation was requested.@@ -458,6 +589,10 @@ ciStatus :: Lens' CommandInvocation (Maybe CommandInvocationStatus) ciStatus = lens _ciStatus (\ s a -> s{_ciStatus = a}); +-- | Configurations for sending notifications about command status changes on a per instance basis.+ciNotificationConfig :: Lens' CommandInvocation (Maybe NotificationConfig)+ciNotificationConfig = lens _ciNotificationConfig (\ s a -> s{_ciNotificationConfig = a});+ -- | Undocumented member. ciCommandPlugins :: Lens' CommandInvocation [CommandPlugin] ciCommandPlugins = lens _ciCommandPlugins (\ s a -> s{_ciCommandPlugins = a}) . _Default . _Coerce;@@ -482,18 +617,24 @@ ciRequestedDateTime :: Lens' CommandInvocation (Maybe UTCTime) ciRequestedDateTime = lens _ciRequestedDateTime (\ s a -> s{_ciRequestedDateTime = a}) . mapping _Time; +-- | The IAM service role that SSM uses to act on your behalf when sending notifications about command status changes on a per instance basis.+ciServiceRole :: Lens' CommandInvocation (Maybe Text)+ciServiceRole = lens _ciServiceRole (\ s a -> s{_ciServiceRole = a});+ instance FromJSON CommandInvocation where         parseJSON           = withObject "CommandInvocation"               (\ x ->                  CommandInvocation' <$>                    (x .:? "InstanceId") <*> (x .:? "Status") <*>-                     (x .:? "CommandPlugins" .!= mempty)+                     (x .:? "NotificationConfig")+                     <*> (x .:? "CommandPlugins" .!= mempty)                      <*> (x .:? "DocumentName")                      <*> (x .:? "CommandId")                      <*> (x .:? "Comment")                      <*> (x .:? "TraceOutput")-                     <*> (x .:? "RequestedDateTime"))+                     <*> (x .:? "RequestedDateTime")+                     <*> (x .:? "ServiceRole"))  instance Hashable CommandInvocation @@ -656,15 +797,60 @@                   ("Name" .=) <$> _cabreName,                   ("Parameters" .=) <$> _cabreParameters]) +-- | Filter for the DescribeActivation API.+--+-- /See:/ 'describeActivationsFilter' smart constructor.+data DescribeActivationsFilter = DescribeActivationsFilter'+    { _dafFilterKey    :: !(Maybe DescribeActivationsFilterKeys)+    , _dafFilterValues :: !(Maybe [Text])+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'DescribeActivationsFilter' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'dafFilterKey'+--+-- * 'dafFilterValues'+describeActivationsFilter+    :: DescribeActivationsFilter+describeActivationsFilter =+    DescribeActivationsFilter'+    { _dafFilterKey = Nothing+    , _dafFilterValues = Nothing+    }++-- | The name of the filter.+dafFilterKey :: Lens' DescribeActivationsFilter (Maybe DescribeActivationsFilterKeys)+dafFilterKey = lens _dafFilterKey (\ s a -> s{_dafFilterKey = a});++-- | The filter values.+dafFilterValues :: Lens' DescribeActivationsFilter [Text]+dafFilterValues = lens _dafFilterValues (\ s a -> s{_dafFilterValues = a}) . _Default . _Coerce;++instance Hashable DescribeActivationsFilter++instance NFData DescribeActivationsFilter++instance ToJSON DescribeActivationsFilter where+        toJSON DescribeActivationsFilter'{..}+          = object+              (catMaybes+                 [("FilterKey" .=) <$> _dafFilterKey,+                  ("FilterValues" .=) <$> _dafFilterValues])+ -- | Describes an SSM document. -- -- /See:/ 'documentDescription' smart constructor. data DocumentDescription = DocumentDescription'     { _dStatus        :: !(Maybe DocumentStatus)+    , _dHash          :: !(Maybe Text)     , _dSha1          :: !(Maybe Text)+    , _dOwner         :: !(Maybe Text)     , _dPlatformTypes :: !(Maybe [PlatformType])     , _dCreatedDate   :: !(Maybe POSIX)     , _dName          :: !(Maybe Text)+    , _dHashType      :: !(Maybe DocumentHashType)     , _dParameters    :: !(Maybe [DocumentParameter])     , _dDescription   :: !(Maybe Text)     } deriving (Eq,Read,Show,Data,Typeable,Generic)@@ -675,14 +861,20 @@ -- -- * 'dStatus' --+-- * 'dHash'+-- -- * 'dSha1' --+-- * 'dOwner'+-- -- * 'dPlatformTypes' -- -- * 'dCreatedDate' -- -- * 'dName' --+-- * 'dHashType'+-- -- * 'dParameters' -- -- * 'dDescription'@@ -691,10 +883,13 @@ documentDescription =     DocumentDescription'     { _dStatus = Nothing+    , _dHash = Nothing     , _dSha1 = Nothing+    , _dOwner = Nothing     , _dPlatformTypes = Nothing     , _dCreatedDate = Nothing     , _dName = Nothing+    , _dHashType = Nothing     , _dParameters = Nothing     , _dDescription = Nothing     }@@ -703,10 +898,20 @@ dStatus :: Lens' DocumentDescription (Maybe DocumentStatus) dStatus = lens _dStatus (\ s a -> s{_dStatus = a}); +-- | The Sha256 or Sha1 hash created by the system when the document was created.+--+-- Sha1 hashes have been deprecated.+dHash :: Lens' DocumentDescription (Maybe Text)+dHash = lens _dHash (\ s a -> s{_dHash = a});+ -- | The SHA1 hash of the document, which you can use for verification purposes. dSha1 :: Lens' DocumentDescription (Maybe Text) dSha1 = lens _dSha1 (\ s a -> s{_dSha1 = a}); +-- | The AWS user account of the person who created the document.+dOwner :: Lens' DocumentDescription (Maybe Text)+dOwner = lens _dOwner (\ s a -> s{_dOwner = a});+ -- | The list of OS platforms compatible with this SSM document. dPlatformTypes :: Lens' DocumentDescription [PlatformType] dPlatformTypes = lens _dPlatformTypes (\ s a -> s{_dPlatformTypes = a}) . _Default . _Coerce;@@ -719,6 +924,12 @@ dName :: Lens' DocumentDescription (Maybe Text) dName = lens _dName (\ s a -> s{_dName = a}); +-- | Sha256 or Sha1.+--+-- Sha1 hashes have been deprecated.+dHashType :: Lens' DocumentDescription (Maybe DocumentHashType)+dHashType = lens _dHashType (\ s a -> s{_dHashType = a});+ -- | A description of the parameters for a document. dParameters :: Lens' DocumentDescription [DocumentParameter] dParameters = lens _dParameters (\ s a -> s{_dParameters = a}) . _Default . _Coerce;@@ -732,10 +943,13 @@           = withObject "DocumentDescription"               (\ x ->                  DocumentDescription' <$>-                   (x .:? "Status") <*> (x .:? "Sha1") <*>-                     (x .:? "PlatformTypes" .!= mempty)+                   (x .:? "Status") <*> (x .:? "Hash") <*>+                     (x .:? "Sha1")+                     <*> (x .:? "Owner")+                     <*> (x .:? "PlatformTypes" .!= mempty)                      <*> (x .:? "CreatedDate")                      <*> (x .:? "Name")+                     <*> (x .:? "HashType")                      <*> (x .:? "Parameters" .!= mempty)                      <*> (x .:? "Description")) @@ -790,7 +1004,8 @@ -- -- /See:/ 'documentIdentifier' smart constructor. data DocumentIdentifier = DocumentIdentifier'-    { _diPlatformTypes :: !(Maybe [PlatformType])+    { _diOwner         :: !(Maybe Text)+    , _diPlatformTypes :: !(Maybe [PlatformType])     , _diName          :: !(Maybe Text)     } deriving (Eq,Read,Show,Data,Typeable,Generic) @@ -798,6 +1013,8 @@ -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'diOwner'+-- -- * 'diPlatformTypes' -- -- * 'diName'@@ -805,10 +1022,15 @@     :: DocumentIdentifier documentIdentifier =     DocumentIdentifier'-    { _diPlatformTypes = Nothing+    { _diOwner = Nothing+    , _diPlatformTypes = Nothing     , _diName = Nothing     } +-- | The AWS user account of the person who created the document.+diOwner :: Lens' DocumentIdentifier (Maybe Text)+diOwner = lens _diOwner (\ s a -> s{_diOwner = a});+ -- | The operating system platform. diPlatformTypes :: Lens' DocumentIdentifier [PlatformType] diPlatformTypes = lens _diPlatformTypes (\ s a -> s{_diPlatformTypes = a}) . _Default . _Coerce;@@ -822,14 +1044,17 @@           = withObject "DocumentIdentifier"               (\ x ->                  DocumentIdentifier' <$>-                   (x .:? "PlatformTypes" .!= mempty) <*>-                     (x .:? "Name"))+                   (x .:? "Owner") <*>+                     (x .:? "PlatformTypes" .!= mempty)+                     <*> (x .:? "Name"))  instance Hashable DocumentIdentifier  instance NFData DocumentIdentifier --- | /See:/ 'documentParameter' smart constructor.+-- | Parameters specified in the SSM document that execute on the server when the command is run.+--+-- /See:/ 'documentParameter' smart constructor. data DocumentParameter = DocumentParameter'     { _dpName         :: !(Maybe Text)     , _dpDefaultValue :: !(Maybe Text)@@ -944,12 +1169,19 @@ data InstanceInformation = InstanceInformation'     { _iiInstanceId       :: !(Maybe Text)     , _iiPingStatus       :: !(Maybe PingStatus)+    , _iiIPAddress        :: !(Maybe Text)+    , _iiResourceType     :: !(Maybe ResourceType)+    , _iiRegistrationDate :: !(Maybe POSIX)     , _iiPlatformVersion  :: !(Maybe Text)     , _iiIsLatestVersion  :: !(Maybe Bool)     , _iiAgentVersion     :: !(Maybe Text)     , _iiLastPingDateTime :: !(Maybe POSIX)+    , _iiActivationId     :: !(Maybe Text)+    , _iiName             :: !(Maybe Text)     , _iiPlatformType     :: !(Maybe PlatformType)     , _iiPlatformName     :: !(Maybe Text)+    , _iiComputerName     :: !(Maybe Text)+    , _iiIAMRole          :: !(Maybe Text)     } deriving (Eq,Read,Show,Data,Typeable,Generic)  -- | Creates a value of 'InstanceInformation' with the minimum fields required to make a request.@@ -960,6 +1192,12 @@ -- -- * 'iiPingStatus' --+-- * 'iiIPAddress'+--+-- * 'iiResourceType'+--+-- * 'iiRegistrationDate'+-- -- * 'iiPlatformVersion' -- -- * 'iiIsLatestVersion'@@ -968,21 +1206,36 @@ -- -- * 'iiLastPingDateTime' --+-- * 'iiActivationId'+--+-- * 'iiName'+-- -- * 'iiPlatformType' -- -- * 'iiPlatformName'+--+-- * 'iiComputerName'+--+-- * 'iiIAMRole' instanceInformation     :: InstanceInformation instanceInformation =     InstanceInformation'     { _iiInstanceId = Nothing     , _iiPingStatus = Nothing+    , _iiIPAddress = Nothing+    , _iiResourceType = Nothing+    , _iiRegistrationDate = Nothing     , _iiPlatformVersion = Nothing     , _iiIsLatestVersion = Nothing     , _iiAgentVersion = Nothing     , _iiLastPingDateTime = Nothing+    , _iiActivationId = Nothing+    , _iiName = Nothing     , _iiPlatformType = Nothing     , _iiPlatformName = Nothing+    , _iiComputerName = Nothing+    , _iiIAMRole = Nothing     }  -- | The instance ID.@@ -993,6 +1246,18 @@ iiPingStatus :: Lens' InstanceInformation (Maybe PingStatus) iiPingStatus = lens _iiPingStatus (\ s a -> s{_iiPingStatus = a}); +-- | The IP address of the managed instance.+iiIPAddress :: Lens' InstanceInformation (Maybe Text)+iiIPAddress = lens _iiIPAddress (\ s a -> s{_iiIPAddress = a});++-- | The type of instance. Instances are either EC2 instances or managed instances.+iiResourceType :: Lens' InstanceInformation (Maybe ResourceType)+iiResourceType = lens _iiResourceType (\ s a -> s{_iiResourceType = a});++-- | The date the server or VM was registered with AWS as a managed instance.+iiRegistrationDate :: Lens' InstanceInformation (Maybe UTCTime)+iiRegistrationDate = lens _iiRegistrationDate (\ s a -> s{_iiRegistrationDate = a}) . mapping _Time;+ -- | The version of the OS platform running on your instance. iiPlatformVersion :: Lens' InstanceInformation (Maybe Text) iiPlatformVersion = lens _iiPlatformVersion (\ s a -> s{_iiPlatformVersion = a});@@ -1001,7 +1266,7 @@ iiIsLatestVersion :: Lens' InstanceInformation (Maybe Bool) iiIsLatestVersion = lens _iiIsLatestVersion (\ s a -> s{_iiIsLatestVersion = a}); --- | The version of the SSM agent running on your instance.+-- | The version of the SSM agent running on your Linux instance. iiAgentVersion :: Lens' InstanceInformation (Maybe Text) iiAgentVersion = lens _iiAgentVersion (\ s a -> s{_iiAgentVersion = a}); @@ -1009,6 +1274,14 @@ iiLastPingDateTime :: Lens' InstanceInformation (Maybe UTCTime) iiLastPingDateTime = lens _iiLastPingDateTime (\ s a -> s{_iiLastPingDateTime = a}) . mapping _Time; +-- | The activation ID created by SSM when the server or VM was registered.+iiActivationId :: Lens' InstanceInformation (Maybe Text)+iiActivationId = lens _iiActivationId (\ s a -> s{_iiActivationId = a});++-- | The name of the managed instance.+iiName :: Lens' InstanceInformation (Maybe Text)+iiName = lens _iiName (\ s a -> s{_iiName = a});+ -- | The operating system platform type. iiPlatformType :: Lens' InstanceInformation (Maybe PlatformType) iiPlatformType = lens _iiPlatformType (\ s a -> s{_iiPlatformType = a});@@ -1017,18 +1290,33 @@ iiPlatformName :: Lens' InstanceInformation (Maybe Text) iiPlatformName = lens _iiPlatformName (\ s a -> s{_iiPlatformName = a}); +-- | The fully qualified host name of the managed instance.+iiComputerName :: Lens' InstanceInformation (Maybe Text)+iiComputerName = lens _iiComputerName (\ s a -> s{_iiComputerName = a});++-- | The Amazon Identity and Access Management (IAM) role assigned to EC2 instances or managed instances.+iiIAMRole :: Lens' InstanceInformation (Maybe Text)+iiIAMRole = lens _iiIAMRole (\ s a -> s{_iiIAMRole = a});+ instance FromJSON InstanceInformation where         parseJSON           = withObject "InstanceInformation"               (\ x ->                  InstanceInformation' <$>                    (x .:? "InstanceId") <*> (x .:? "PingStatus") <*>-                     (x .:? "PlatformVersion")+                     (x .:? "IPAddress")+                     <*> (x .:? "ResourceType")+                     <*> (x .:? "RegistrationDate")+                     <*> (x .:? "PlatformVersion")                      <*> (x .:? "IsLatestVersion")                      <*> (x .:? "AgentVersion")                      <*> (x .:? "LastPingDateTime")+                     <*> (x .:? "ActivationId")+                     <*> (x .:? "Name")                      <*> (x .:? "PlatformType")-                     <*> (x .:? "PlatformName"))+                     <*> (x .:? "PlatformName")+                     <*> (x .:? "ComputerName")+                     <*> (x .:? "IamRole"))  instance Hashable InstanceInformation @@ -1077,3 +1365,112 @@               (catMaybes                  [Just ("key" .= _iifKey),                   Just ("valueSet" .= _iifValueSet)])++-- | Configurations for sending notifications.+--+-- /See:/ 'notificationConfig' smart constructor.+data NotificationConfig = NotificationConfig'+    { _ncNotificationEvents :: !(Maybe [NotificationEvent])+    , _ncNotificationType   :: !(Maybe NotificationType)+    , _ncNotificationARN    :: !(Maybe Text)+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'NotificationConfig' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'ncNotificationEvents'+--+-- * 'ncNotificationType'+--+-- * 'ncNotificationARN'+notificationConfig+    :: NotificationConfig+notificationConfig =+    NotificationConfig'+    { _ncNotificationEvents = Nothing+    , _ncNotificationType = Nothing+    , _ncNotificationARN = Nothing+    }++-- | The different events for which you can receive notifications. These events include the following: All (events), InProgress, Success, TimedOut, Cancelled, Failed. To learn more about these events, see <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitor-commands.html Monitoring Commands> in the /Amazon Elastic Compute Cloud User Guide/ .+ncNotificationEvents :: Lens' NotificationConfig [NotificationEvent]+ncNotificationEvents = lens _ncNotificationEvents (\ s a -> s{_ncNotificationEvents = a}) . _Default . _Coerce;++-- | Command: Receive notification when the status of a command changes. Invocation: For commands sent to multiple instances, receive notification on a per-instance basis when the status of a command changes.+ncNotificationType :: Lens' NotificationConfig (Maybe NotificationType)+ncNotificationType = lens _ncNotificationType (\ s a -> s{_ncNotificationType = a});++-- | An Amazon Resource Name (ARN) for a Simple Notification Service (SNS) topic. SSM pushes notifications about command status changes to this topic.+ncNotificationARN :: Lens' NotificationConfig (Maybe Text)+ncNotificationARN = lens _ncNotificationARN (\ s a -> s{_ncNotificationARN = a});++instance FromJSON NotificationConfig where+        parseJSON+          = withObject "NotificationConfig"+              (\ x ->+                 NotificationConfig' <$>+                   (x .:? "NotificationEvents" .!= mempty) <*>+                     (x .:? "NotificationType")+                     <*> (x .:? "NotificationArn"))++instance Hashable NotificationConfig++instance NFData NotificationConfig++instance ToJSON NotificationConfig where+        toJSON NotificationConfig'{..}+          = object+              (catMaybes+                 [("NotificationEvents" .=) <$> _ncNotificationEvents,+                  ("NotificationType" .=) <$> _ncNotificationType,+                  ("NotificationArn" .=) <$> _ncNotificationARN])++-- | Metadata that you assign to your managed instances. Tags enable you to categorize your managed instances in different ways, for example, by purpose, owner, or environment.+--+-- /See:/ 'tag' smart constructor.+data Tag = Tag'+    { _tagKey   :: !Text+    , _tagValue :: !Text+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'Tag' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'tagKey'+--+-- * 'tagValue'+tag+    :: Text -- ^ 'tagKey'+    -> Text -- ^ 'tagValue'+    -> Tag+tag pKey_ pValue_ =+    Tag'+    { _tagKey = pKey_+    , _tagValue = pValue_+    }++-- | The name of the tag.+tagKey :: Lens' Tag Text+tagKey = lens _tagKey (\ s a -> s{_tagKey = a});++-- | The value of the tag.+tagValue :: Lens' Tag Text+tagValue = lens _tagValue (\ s a -> s{_tagValue = a});++instance FromJSON Tag where+        parseJSON+          = withObject "Tag"+              (\ x -> Tag' <$> (x .: "Key") <*> (x .: "Value"))++instance Hashable Tag++instance NFData Tag++instance ToJSON Tag where+        toJSON Tag'{..}+          = object+              (catMaybes+                 [Just ("Key" .= _tagKey),+                  Just ("Value" .= _tagValue)])

@@ -29,7 +29,7 @@         "instanceid" -> pure AFKInstanceId         "name" -> pure AFKName         e -> fromTextError $ "Failure parsing AssociationFilterKey from value: '" <> e-           <> "'. Accepted values: InstanceId, Name"+           <> "'. Accepted values: instanceid, name"  instance ToText AssociationFilterKey where     toText = \case@@ -57,7 +57,7 @@         "pending" -> pure ASNPending         "success" -> pure ASNSuccess         e -> fromTextError $ "Failure parsing AssociationStatusName from value: '" <> e-           <> "'. Accepted values: Failed, Pending, Success"+           <> "'. Accepted values: failed, pending, success"  instance ToText AssociationStatusName where     toText = \case@@ -89,7 +89,7 @@         "invokedbefore" -> pure CommandInvokedBefore         "status" -> pure CommandStatus         e -> fromTextError $ "Failure parsing CommandFilterKey from value: '" <> e-           <> "'. Accepted values: InvokedAfter, InvokedBefore, Status"+           <> "'. Accepted values: invokedafter, invokedbefore, status"  instance ToText CommandFilterKey where     toText = \case@@ -126,7 +126,7 @@         "success" -> pure CISSuccess         "timedout" -> pure CISTimedOut         e -> fromTextError $ "Failure parsing CommandInvocationStatus from value: '" <> e-           <> "'. Accepted values: Cancelled, Cancelling, Failed, InProgress, Pending, Success, TimedOut"+           <> "'. Accepted values: cancelled, cancelling, failed, inprogress, pending, success, timedout"  instance ToText CommandInvocationStatus where     toText = \case@@ -165,7 +165,7 @@         "success" -> pure CPSSuccess         "timedout" -> pure CPSTimedOut         e -> fromTextError $ "Failure parsing CommandPluginStatus from value: '" <> e-           <> "'. Accepted values: Cancelled, Failed, InProgress, Pending, Success, TimedOut"+           <> "'. Accepted values: cancelled, failed, inprogress, pending, success, timedout"  instance ToText CommandPluginStatus where     toText = \case@@ -205,7 +205,7 @@         "success" -> pure Success         "timedout" -> pure TimedOut         e -> fromTextError $ "Failure parsing CommandStatus from value: '" <> e-           <> "'. Accepted values: Cancelled, Cancelling, Failed, InProgress, Pending, Success, TimedOut"+           <> "'. Accepted values: cancelled, cancelling, failed, inprogress, pending, success, timedout"  instance ToText CommandStatus where     toText = \case@@ -226,6 +226,35 @@ instance FromJSON CommandStatus where     parseJSON = parseJSONText "CommandStatus" +data DescribeActivationsFilterKeys+    = ActivationIds+    | DefaultInstanceName+    | IAMRole+    deriving (Eq,Ord,Read,Show,Enum,Bounded,Data,Typeable,Generic)++instance FromText DescribeActivationsFilterKeys where+    parser = takeLowerText >>= \case+        "activationids" -> pure ActivationIds+        "defaultinstancename" -> pure DefaultInstanceName+        "iamrole" -> pure IAMRole+        e -> fromTextError $ "Failure parsing DescribeActivationsFilterKeys from value: '" <> e+           <> "'. Accepted values: activationids, defaultinstancename, iamrole"++instance ToText DescribeActivationsFilterKeys where+    toText = \case+        ActivationIds -> "ActivationIds"+        DefaultInstanceName -> "DefaultInstanceName"+        IAMRole -> "IamRole"++instance Hashable     DescribeActivationsFilterKeys+instance NFData       DescribeActivationsFilterKeys+instance ToByteString DescribeActivationsFilterKeys+instance ToQuery      DescribeActivationsFilterKeys+instance ToHeader     DescribeActivationsFilterKeys++instance ToJSON DescribeActivationsFilterKeys where+    toJSON = toJSONText+ data DocumentFilterKey     = Name     | Owner@@ -238,7 +267,7 @@         "owner" -> pure Owner         "platformtypes" -> pure PlatformTypes         e -> fromTextError $ "Failure parsing DocumentFilterKey from value: '" <> e-           <> "'. Accepted values: Name, Owner, PlatformTypes"+           <> "'. Accepted values: name, owner, platformtypes"  instance ToText DocumentFilterKey where     toText = \case@@ -255,6 +284,35 @@ instance ToJSON DocumentFilterKey where     toJSON = toJSONText +data DocumentHashType+    = HashSHA1+    | HashSHA256+    deriving (Eq,Ord,Read,Show,Enum,Bounded,Data,Typeable,Generic)++instance FromText DocumentHashType where+    parser = takeLowerText >>= \case+        "sha1" -> pure HashSHA1+        "sha256" -> pure HashSHA256+        e -> fromTextError $ "Failure parsing DocumentHashType from value: '" <> e+           <> "'. Accepted values: sha1, sha256"++instance ToText DocumentHashType where+    toText = \case+        HashSHA1 -> "Sha1"+        HashSHA256 -> "Sha256"++instance Hashable     DocumentHashType+instance NFData       DocumentHashType+instance ToByteString DocumentHashType+instance ToQuery      DocumentHashType+instance ToHeader     DocumentHashType++instance ToJSON DocumentHashType where+    toJSON = toJSONText++instance FromJSON DocumentHashType where+    parseJSON = parseJSONText "DocumentHashType"+ data DocumentParameterType     = String     | StringList@@ -265,7 +323,7 @@         "string" -> pure String         "stringlist" -> pure StringList         e -> fromTextError $ "Failure parsing DocumentParameterType from value: '" <> e-           <> "'. Accepted values: String, StringList"+           <> "'. Accepted values: string, stringlist"  instance ToText DocumentParameterType where     toText = \case@@ -281,6 +339,29 @@ instance FromJSON DocumentParameterType where     parseJSON = parseJSONText "DocumentParameterType" +data DocumentPermissionType =+    Share+    deriving (Eq,Ord,Read,Show,Enum,Bounded,Data,Typeable,Generic)++instance FromText DocumentPermissionType where+    parser = takeLowerText >>= \case+        "share" -> pure Share+        e -> fromTextError $ "Failure parsing DocumentPermissionType from value: '" <> e+           <> "'. Accepted values: share"++instance ToText DocumentPermissionType where+    toText = \case+        Share -> "Share"++instance Hashable     DocumentPermissionType+instance NFData       DocumentPermissionType+instance ToByteString DocumentPermissionType+instance ToQuery      DocumentPermissionType+instance ToHeader     DocumentPermissionType++instance ToJSON DocumentPermissionType where+    toJSON = toJSONText+ data DocumentStatus     = Active     | Creating@@ -293,7 +374,7 @@         "creating" -> pure Creating         "deleting" -> pure Deleting         e -> fromTextError $ "Failure parsing DocumentStatus from value: '" <> e-           <> "'. Accepted values: Active, Creating, Deleting"+           <> "'. Accepted values: active, creating, deleting"  instance ToText DocumentStatus where     toText = \case@@ -322,7 +403,7 @@         "server" -> pure Server         "unknown" -> pure Unknown         e -> fromTextError $ "Failure parsing Fault from value: '" <> e-           <> "'. Accepted values: Client, Server, Unknown"+           <> "'. Accepted values: client, server, unknown"  instance ToText Fault where     toText = \case@@ -340,27 +421,36 @@     parseJSON = parseJSONText "Fault"  data InstanceInformationFilterKey-    = IIFKAgentVersion+    = IIFKActivationIds+    | IIFKAgentVersion+    | IIFKIAMRole     | IIFKInstanceIds     | IIFKPingStatus     | IIFKPlatformTypes+    | IIFKResourceType     deriving (Eq,Ord,Read,Show,Enum,Bounded,Data,Typeable,Generic)  instance FromText InstanceInformationFilterKey where     parser = takeLowerText >>= \case+        "activationids" -> pure IIFKActivationIds         "agentversion" -> pure IIFKAgentVersion+        "iamrole" -> pure IIFKIAMRole         "instanceids" -> pure IIFKInstanceIds         "pingstatus" -> pure IIFKPingStatus         "platformtypes" -> pure IIFKPlatformTypes+        "resourcetype" -> pure IIFKResourceType         e -> fromTextError $ "Failure parsing InstanceInformationFilterKey from value: '" <> e-           <> "'. Accepted values: AgentVersion, InstanceIds, PingStatus, PlatformTypes"+           <> "'. Accepted values: activationids, agentversion, iamrole, instanceids, pingstatus, platformtypes, resourcetype"  instance ToText InstanceInformationFilterKey where     toText = \case+        IIFKActivationIds -> "ActivationIds"         IIFKAgentVersion -> "AgentVersion"+        IIFKIAMRole -> "IamRole"         IIFKInstanceIds -> "InstanceIds"         IIFKPingStatus -> "PingStatus"         IIFKPlatformTypes -> "PlatformTypes"+        IIFKResourceType -> "ResourceType"  instance Hashable     InstanceInformationFilterKey instance NFData       InstanceInformationFilterKey@@ -371,6 +461,76 @@ instance ToJSON InstanceInformationFilterKey where     toJSON = toJSONText +data NotificationEvent+    = NEAll+    | NECancelled+    | NEFailed+    | NEInProgress+    | NESuccess+    | NETimedOut+    deriving (Eq,Ord,Read,Show,Enum,Bounded,Data,Typeable,Generic)++instance FromText NotificationEvent where+    parser = takeLowerText >>= \case+        "all" -> pure NEAll+        "cancelled" -> pure NECancelled+        "failed" -> pure NEFailed+        "inprogress" -> pure NEInProgress+        "success" -> pure NESuccess+        "timedout" -> pure NETimedOut+        e -> fromTextError $ "Failure parsing NotificationEvent from value: '" <> e+           <> "'. Accepted values: all, cancelled, failed, inprogress, success, timedout"++instance ToText NotificationEvent where+    toText = \case+        NEAll -> "All"+        NECancelled -> "Cancelled"+        NEFailed -> "Failed"+        NEInProgress -> "InProgress"+        NESuccess -> "Success"+        NETimedOut -> "TimedOut"++instance Hashable     NotificationEvent+instance NFData       NotificationEvent+instance ToByteString NotificationEvent+instance ToQuery      NotificationEvent+instance ToHeader     NotificationEvent++instance ToJSON NotificationEvent where+    toJSON = toJSONText++instance FromJSON NotificationEvent where+    parseJSON = parseJSONText "NotificationEvent"++data NotificationType+    = Command+    | Invocation+    deriving (Eq,Ord,Read,Show,Enum,Bounded,Data,Typeable,Generic)++instance FromText NotificationType where+    parser = takeLowerText >>= \case+        "command" -> pure Command+        "invocation" -> pure Invocation+        e -> fromTextError $ "Failure parsing NotificationType from value: '" <> e+           <> "'. Accepted values: command, invocation"++instance ToText NotificationType where+    toText = \case+        Command -> "Command"+        Invocation -> "Invocation"++instance Hashable     NotificationType+instance NFData       NotificationType+instance ToByteString NotificationType+instance ToQuery      NotificationType+instance ToHeader     NotificationType++instance ToJSON NotificationType where+    toJSON = toJSONText++instance FromJSON NotificationType where+    parseJSON = parseJSONText "NotificationType"+ data PingStatus     = ConnectionLost     | Inactive@@ -383,7 +543,7 @@         "inactive" -> pure Inactive         "online" -> pure Online         e -> fromTextError $ "Failure parsing PingStatus from value: '" <> e-           <> "'. Accepted values: ConnectionLost, Inactive, Online"+           <> "'. Accepted values: connectionlost, inactive, online"  instance ToText PingStatus where     toText = \case@@ -410,7 +570,7 @@         "linux" -> pure Linux         "windows" -> pure Windows         e -> fromTextError $ "Failure parsing PlatformType from value: '" <> e-           <> "'. Accepted values: Linux, Windows"+           <> "'. Accepted values: linux, windows"  instance ToText PlatformType where     toText = \case@@ -425,3 +585,55 @@  instance FromJSON PlatformType where     parseJSON = parseJSONText "PlatformType"++data ResourceType+    = Document+    | EC2Instance+    | ManagedInstance+    deriving (Eq,Ord,Read,Show,Enum,Bounded,Data,Typeable,Generic)++instance FromText ResourceType where+    parser = takeLowerText >>= \case+        "document" -> pure Document+        "ec2instance" -> pure EC2Instance+        "managedinstance" -> pure ManagedInstance+        e -> fromTextError $ "Failure parsing ResourceType from value: '" <> e+           <> "'. Accepted values: document, ec2instance, managedinstance"++instance ToText ResourceType where+    toText = \case+        Document -> "Document"+        EC2Instance -> "EC2Instance"+        ManagedInstance -> "ManagedInstance"++instance Hashable     ResourceType+instance NFData       ResourceType+instance ToByteString ResourceType+instance ToQuery      ResourceType+instance ToHeader     ResourceType++instance FromJSON ResourceType where+    parseJSON = parseJSONText "ResourceType"++data ResourceTypeForTagging =+    RTFTManagedInstance+    deriving (Eq,Ord,Read,Show,Enum,Bounded,Data,Typeable,Generic)++instance FromText ResourceTypeForTagging where+    parser = takeLowerText >>= \case+        "managedinstance" -> pure RTFTManagedInstance+        e -> fromTextError $ "Failure parsing ResourceTypeForTagging from value: '" <> e+           <> "'. Accepted values: managedinstance"++instance ToText ResourceTypeForTagging where+    toText = \case+        RTFTManagedInstance -> "ManagedInstance"++instance Hashable     ResourceTypeForTagging+instance NFData       ResourceTypeForTagging+instance ToByteString ResourceTypeForTagging+instance ToQuery      ResourceTypeForTagging+instance ToHeader     ResourceTypeForTagging++instance ToJSON ResourceTypeForTagging where+    toJSON = toJSONText

@@ -0,0 +1,135 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.SSM.UpdateManagedInstanceRole+-- Copyright   : (c) 2013-2016 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Assigns or changes an Amazon Identity and Access Management (IAM) role to the managed instance.+module Network.AWS.SSM.UpdateManagedInstanceRole+    (+    -- * Creating a Request+      updateManagedInstanceRole+    , UpdateManagedInstanceRole+    -- * Request Lenses+    , umirInstanceId+    , umirIAMRole++    -- * Destructuring the Response+    , updateManagedInstanceRoleResponse+    , UpdateManagedInstanceRoleResponse+    -- * Response Lenses+    , umirrsResponseStatus+    ) where++import           Network.AWS.Lens+import           Network.AWS.Prelude+import           Network.AWS.Request+import           Network.AWS.Response+import           Network.AWS.SSM.Types+import           Network.AWS.SSM.Types.Product++-- | /See:/ 'updateManagedInstanceRole' smart constructor.+data UpdateManagedInstanceRole = UpdateManagedInstanceRole'+    { _umirInstanceId :: !Text+    , _umirIAMRole    :: !Text+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'UpdateManagedInstanceRole' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'umirInstanceId'+--+-- * 'umirIAMRole'+updateManagedInstanceRole+    :: Text -- ^ 'umirInstanceId'+    -> Text -- ^ 'umirIAMRole'+    -> UpdateManagedInstanceRole+updateManagedInstanceRole pInstanceId_ pIAMRole_ =+    UpdateManagedInstanceRole'+    { _umirInstanceId = pInstanceId_+    , _umirIAMRole = pIAMRole_+    }++-- | The ID of the managed instance where you want to update the role.+umirInstanceId :: Lens' UpdateManagedInstanceRole Text+umirInstanceId = lens _umirInstanceId (\ s a -> s{_umirInstanceId = a});++-- | The IAM role you want to assign or change.+umirIAMRole :: Lens' UpdateManagedInstanceRole Text+umirIAMRole = lens _umirIAMRole (\ s a -> s{_umirIAMRole = a});++instance AWSRequest UpdateManagedInstanceRole where+        type Rs UpdateManagedInstanceRole =+             UpdateManagedInstanceRoleResponse+        request = postJSON ssm+        response+          = receiveEmpty+              (\ s h x ->+                 UpdateManagedInstanceRoleResponse' <$>+                   (pure (fromEnum s)))++instance Hashable UpdateManagedInstanceRole++instance NFData UpdateManagedInstanceRole++instance ToHeaders UpdateManagedInstanceRole where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AmazonSSM.UpdateManagedInstanceRole" ::+                       ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON UpdateManagedInstanceRole where+        toJSON UpdateManagedInstanceRole'{..}+          = object+              (catMaybes+                 [Just ("InstanceId" .= _umirInstanceId),+                  Just ("IamRole" .= _umirIAMRole)])++instance ToPath UpdateManagedInstanceRole where+        toPath = const "/"++instance ToQuery UpdateManagedInstanceRole where+        toQuery = const mempty++-- | /See:/ 'updateManagedInstanceRoleResponse' smart constructor.+newtype UpdateManagedInstanceRoleResponse = UpdateManagedInstanceRoleResponse'+    { _umirrsResponseStatus :: Int+    } deriving (Eq,Read,Show,Data,Typeable,Generic)++-- | Creates a value of 'UpdateManagedInstanceRoleResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'umirrsResponseStatus'+updateManagedInstanceRoleResponse+    :: Int -- ^ 'umirrsResponseStatus'+    -> UpdateManagedInstanceRoleResponse+updateManagedInstanceRoleResponse pResponseStatus_ =+    UpdateManagedInstanceRoleResponse'+    { _umirrsResponseStatus = pResponseStatus_+    }++-- | The response status code.+umirrsResponseStatus :: Lens' UpdateManagedInstanceRoleResponse Int+umirrsResponseStatus = lens _umirrsResponseStatus (\ s a -> s{_umirrsResponseStatus = a});++instance NFData UpdateManagedInstanceRoleResponse

@@ -28,30 +28,57 @@ -- fixtures :: TestTree -- fixtures = --     [ testGroup "request"---         [ requestDescribeDocument $+--         [ requestDescribeActivations $+--             describeActivations+--+--         , requestListTagsForResource $+--             listTagsForResource+--+--         , requestDescribeDocument $ --             describeDocument -- --         , requestCreateAssociation $ --             createAssociation --+--         , requestDeleteActivation $+--             deleteActivation+--+--         , requestCreateActivation $+--             createActivation+-- --         , requestCreateDocument $ --             createDocument --+--         , requestRemoveTagsFromResource $+--             removeTagsFromResource+-- --         , requestListCommandInvocations $ --             listCommandInvocations -- --         , requestListDocuments $ --             listDocuments --+--         , requestUpdateManagedInstanceRole $+--             updateManagedInstanceRole+-- --         , requestGetDocument $ --             getDocument --+--         , requestAddTagsToResource $+--             addTagsToResource+-- --         , requestCancelCommand $ --             cancelCommand --+--         , requestDeregisterManagedInstance $+--             deregisterManagedInstance+-- --         , requestDescribeAssociation $ --             describeAssociation --+--         , requestModifyDocumentPermission $+--             modifyDocumentPermission+-- --         , requestUpdateAssociationStatus $ --             updateAssociationStatus --@@ -73,36 +100,66 @@ --         , requestDeleteDocument $ --             deleteDocument --+--         , requestDescribeDocumentPermission $+--             describeDocumentPermission+-- --         , requestCreateAssociationBatch $ --             createAssociationBatch -- --           ]  --     , testGroup "response"---         [ responseDescribeDocument $+--         [ responseDescribeActivations $+--             describeActivationsResponse+--+--         , responseListTagsForResource $+--             listTagsForResourceResponse+--+--         , responseDescribeDocument $ --             describeDocumentResponse -- --         , responseCreateAssociation $ --             createAssociationResponse --+--         , responseDeleteActivation $+--             deleteActivationResponse+--+--         , responseCreateActivation $+--             createActivationResponse+-- --         , responseCreateDocument $ --             createDocumentResponse --+--         , responseRemoveTagsFromResource $+--             removeTagsFromResourceResponse+-- --         , responseListCommandInvocations $ --             listCommandInvocationsResponse -- --         , responseListDocuments $ --             listDocumentsResponse --+--         , responseUpdateManagedInstanceRole $+--             updateManagedInstanceRoleResponse+-- --         , responseGetDocument $ --             getDocumentResponse --+--         , responseAddTagsToResource $+--             addTagsToResourceResponse+-- --         , responseCancelCommand $ --             cancelCommandResponse --+--         , responseDeregisterManagedInstance $+--             deregisterManagedInstanceResponse+-- --         , responseDescribeAssociation $ --             describeAssociationResponse --+--         , responseModifyDocumentPermission $+--             modifyDocumentPermissionResponse+-- --         , responseUpdateAssociationStatus $ --             updateAssociationStatusResponse --@@ -124,6 +181,9 @@ --         , responseDeleteDocument $ --             deleteDocumentResponse --+--         , responseDescribeDocumentPermission $+--             describeDocumentPermissionResponse+-- --         , responseCreateAssociationBatch $ --             createAssociationBatchResponse --@@ -132,6 +192,16 @@  -- Requests +requestDescribeActivations :: DescribeActivations -> TestTree+requestDescribeActivations = req+    "DescribeActivations"+    "fixture/DescribeActivations.yaml"++requestListTagsForResource :: ListTagsForResource -> TestTree+requestListTagsForResource = req+    "ListTagsForResource"+    "fixture/ListTagsForResource.yaml"+ requestDescribeDocument :: DescribeDocument -> TestTree requestDescribeDocument = req     "DescribeDocument"@@ -142,11 +212,26 @@     "CreateAssociation"     "fixture/CreateAssociation.yaml" +requestDeleteActivation :: DeleteActivation -> TestTree+requestDeleteActivation = req+    "DeleteActivation"+    "fixture/DeleteActivation.yaml"++requestCreateActivation :: CreateActivation -> TestTree+requestCreateActivation = req+    "CreateActivation"+    "fixture/CreateActivation.yaml"+ requestCreateDocument :: CreateDocument -> TestTree requestCreateDocument = req     "CreateDocument"     "fixture/CreateDocument.yaml" +requestRemoveTagsFromResource :: RemoveTagsFromResource -> TestTree+requestRemoveTagsFromResource = req+    "RemoveTagsFromResource"+    "fixture/RemoveTagsFromResource.yaml"+ requestListCommandInvocations :: ListCommandInvocations -> TestTree requestListCommandInvocations = req     "ListCommandInvocations"@@ -157,21 +242,41 @@     "ListDocuments"     "fixture/ListDocuments.yaml" +requestUpdateManagedInstanceRole :: UpdateManagedInstanceRole -> TestTree+requestUpdateManagedInstanceRole = req+    "UpdateManagedInstanceRole"+    "fixture/UpdateManagedInstanceRole.yaml"+ requestGetDocument :: GetDocument -> TestTree requestGetDocument = req     "GetDocument"     "fixture/GetDocument.yaml" +requestAddTagsToResource :: AddTagsToResource -> TestTree+requestAddTagsToResource = req+    "AddTagsToResource"+    "fixture/AddTagsToResource.yaml"+ requestCancelCommand :: CancelCommand -> TestTree requestCancelCommand = req     "CancelCommand"     "fixture/CancelCommand.yaml" +requestDeregisterManagedInstance :: DeregisterManagedInstance -> TestTree+requestDeregisterManagedInstance = req+    "DeregisterManagedInstance"+    "fixture/DeregisterManagedInstance.yaml"+ requestDescribeAssociation :: DescribeAssociation -> TestTree requestDescribeAssociation = req     "DescribeAssociation"     "fixture/DescribeAssociation.yaml" +requestModifyDocumentPermission :: ModifyDocumentPermission -> TestTree+requestModifyDocumentPermission = req+    "ModifyDocumentPermission"+    "fixture/ModifyDocumentPermission.yaml"+ requestUpdateAssociationStatus :: UpdateAssociationStatus -> TestTree requestUpdateAssociationStatus = req     "UpdateAssociationStatus"@@ -207,6 +312,11 @@     "DeleteDocument"     "fixture/DeleteDocument.yaml" +requestDescribeDocumentPermission :: DescribeDocumentPermission -> TestTree+requestDescribeDocumentPermission = req+    "DescribeDocumentPermission"+    "fixture/DescribeDocumentPermission.yaml"+ requestCreateAssociationBatch :: CreateAssociationBatch -> TestTree requestCreateAssociationBatch = req     "CreateAssociationBatch"@@ -214,6 +324,20 @@  -- Responses +responseDescribeActivations :: DescribeActivationsResponse -> TestTree+responseDescribeActivations = res+    "DescribeActivationsResponse"+    "fixture/DescribeActivationsResponse.proto"+    ssm+    (Proxy :: Proxy DescribeActivations)++responseListTagsForResource :: ListTagsForResourceResponse -> TestTree+responseListTagsForResource = res+    "ListTagsForResourceResponse"+    "fixture/ListTagsForResourceResponse.proto"+    ssm+    (Proxy :: Proxy ListTagsForResource)+ responseDescribeDocument :: DescribeDocumentResponse -> TestTree responseDescribeDocument = res     "DescribeDocumentResponse"@@ -228,6 +352,20 @@     ssm     (Proxy :: Proxy CreateAssociation) +responseDeleteActivation :: DeleteActivationResponse -> TestTree+responseDeleteActivation = res+    "DeleteActivationResponse"+    "fixture/DeleteActivationResponse.proto"+    ssm+    (Proxy :: Proxy DeleteActivation)++responseCreateActivation :: CreateActivationResponse -> TestTree+responseCreateActivation = res+    "CreateActivationResponse"+    "fixture/CreateActivationResponse.proto"+    ssm+    (Proxy :: Proxy CreateActivation)+ responseCreateDocument :: CreateDocumentResponse -> TestTree responseCreateDocument = res     "CreateDocumentResponse"@@ -235,6 +373,13 @@     ssm     (Proxy :: Proxy CreateDocument) +responseRemoveTagsFromResource :: RemoveTagsFromResourceResponse -> TestTree+responseRemoveTagsFromResource = res+    "RemoveTagsFromResourceResponse"+    "fixture/RemoveTagsFromResourceResponse.proto"+    ssm+    (Proxy :: Proxy RemoveTagsFromResource)+ responseListCommandInvocations :: ListCommandInvocationsResponse -> TestTree responseListCommandInvocations = res     "ListCommandInvocationsResponse"@@ -249,6 +394,13 @@     ssm     (Proxy :: Proxy ListDocuments) +responseUpdateManagedInstanceRole :: UpdateManagedInstanceRoleResponse -> TestTree+responseUpdateManagedInstanceRole = res+    "UpdateManagedInstanceRoleResponse"+    "fixture/UpdateManagedInstanceRoleResponse.proto"+    ssm+    (Proxy :: Proxy UpdateManagedInstanceRole)+ responseGetDocument :: GetDocumentResponse -> TestTree responseGetDocument = res     "GetDocumentResponse"@@ -256,6 +408,13 @@     ssm     (Proxy :: Proxy GetDocument) +responseAddTagsToResource :: AddTagsToResourceResponse -> TestTree+responseAddTagsToResource = res+    "AddTagsToResourceResponse"+    "fixture/AddTagsToResourceResponse.proto"+    ssm+    (Proxy :: Proxy AddTagsToResource)+ responseCancelCommand :: CancelCommandResponse -> TestTree responseCancelCommand = res     "CancelCommandResponse"@@ -263,6 +422,13 @@     ssm     (Proxy :: Proxy CancelCommand) +responseDeregisterManagedInstance :: DeregisterManagedInstanceResponse -> TestTree+responseDeregisterManagedInstance = res+    "DeregisterManagedInstanceResponse"+    "fixture/DeregisterManagedInstanceResponse.proto"+    ssm+    (Proxy :: Proxy DeregisterManagedInstance)+ responseDescribeAssociation :: DescribeAssociationResponse -> TestTree responseDescribeAssociation = res     "DescribeAssociationResponse"@@ -270,6 +436,13 @@     ssm     (Proxy :: Proxy DescribeAssociation) +responseModifyDocumentPermission :: ModifyDocumentPermissionResponse -> TestTree+responseModifyDocumentPermission = res+    "ModifyDocumentPermissionResponse"+    "fixture/ModifyDocumentPermissionResponse.proto"+    ssm+    (Proxy :: Proxy ModifyDocumentPermission)+ responseUpdateAssociationStatus :: UpdateAssociationStatusResponse -> TestTree responseUpdateAssociationStatus = res     "UpdateAssociationStatusResponse"@@ -318,6 +491,13 @@     "fixture/DeleteDocumentResponse.proto"     ssm     (Proxy :: Proxy DeleteDocument)++responseDescribeDocumentPermission :: DescribeDocumentPermissionResponse -> TestTree+responseDescribeDocumentPermission = res+    "DescribeDocumentPermissionResponse"+    "fixture/DescribeDocumentPermissionResponse.proto"+    ssm+    (Proxy :: Proxy DescribeDocumentPermission)  responseCreateAssociationBatch :: CreateAssociationBatchResponse -> TestTree responseCreateAssociationBatch = res