aws-sdk-kms 1.0.0.rc3 → 1.0.0.rc4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d348ec6df574b88ba7fc4422404e1ec80da36ef7
-  data.tar.gz: 598efd7147127f5b74f0a5ecd87ae843467f6464
+  metadata.gz: 950b6bbfca0ed0aecadfc187fa3a51c2b74e73db
+  data.tar.gz: 54b3be39b30ddb3e5055401214cf21970012f904
 SHA512:
-  metadata.gz: 5f26941c3677b5eef0bb57068ec8fe9c67d604d2921f82ef688a230184212e30b99abf939684067807cf99059fab819ffbefede2960e0c2c55d5b87331f1c5f5
-  data.tar.gz: d3787c2cad1583842acbb9cbb360ca572dd3724d79474f0148e145f200bba3686e46d11641acfa99f20a1889bc02de9453aa6253777f03a346686002198e0bec
+  metadata.gz: b23b21e7984866b759857d97f4db42744bb9b5b94cf2617cb4a6de481cb513ab7c722d78abafdea7162f40c3e019de3ba16c8d42927ca3bad0cfef62c16133c1
+  data.tar.gz: 494c8670361f553f9dd44d21fc1794b65df695aca09fc7f681b8dff0df12b1a004cf3f15638baababeaeeb84c57708dfd3f13d8a7a1dc7bf3b00511218ab319d

data/lib/aws-sdk-kms.rb

@@ -42,6 +42,6 @@ require_relative 'aws-sdk-kms/customizations'
 # @service
 module Aws::KMS
 
-  GEM_VERSION = '1.0.0.rc3'
+  GEM_VERSION = '1.0.0.rc4'
 
 end

data/lib/aws-sdk-kms/client.rb

@@ -18,6 +18,7 @@ require 'aws-sdk-core/plugins/regional_endpoint.rb'
 require 'aws-sdk-core/plugins/response_paging.rb'
 require 'aws-sdk-core/plugins/stub_responses.rb'
 require 'aws-sdk-core/plugins/idempotency_token.rb'
+require 'aws-sdk-core/plugins/jsonvalue_converter.rb'
 require 'aws-sdk-core/plugins/signature_v4.rb'
 require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
 
@@ -45,6 +46,7 @@ module Aws::KMS
     add_plugin(Aws::Plugins::ResponsePaging)
     add_plugin(Aws::Plugins::StubResponses)
     add_plugin(Aws::Plugins::IdempotencyToken)
+    add_plugin(Aws::Plugins::JsonvalueConverter)
     add_plugin(Aws::Plugins::SignatureV4)
     add_plugin(Aws::Plugins::Protocols::JsonRpc)
 
@@ -310,13 +312,10 @@ module Aws::KMS
     #   A list of operations that the grant permits.
     #
     # @option params [Types::GrantConstraints] :constraints
-    #   The conditions under which the operations permitted by the grant are
-    #   allowed.
-    #
-    #   You can use this value to allow the operations permitted by the grant
-    #   only when a specified encryption context is present. For more
-    #   information, see [Encryption Context][1] in the *AWS Key Management
-    #   Service Developer Guide*.
+    #   A structure that you can use to allow certain operations in the grant
+    #   only when the desired encryption context is present. For more
+    #   information about encryption context, see [Encryption Context][1] in
+    #   the *AWS Key Management Service Developer Guide*.
     #
     #
     #
@@ -994,8 +993,8 @@ module Aws::KMS
     #     plaintext data key from memory.
     #
     # To return only an encrypted copy of the data key, use
-    # GenerateDataKeyWithoutPlaintext. To return an arbitrary unpredictable
-    # byte string, use GenerateRandom.
+    # GenerateDataKeyWithoutPlaintext. To return a random byte string that
+    # is cryptographically secure, use GenerateRandom.
     #
     # If you use the optional `EncryptionContext` field, you must store at
     # least enough information to be able to reconstruct the full encryption
@@ -1189,7 +1188,14 @@ module Aws::KMS
       req.send_request(options)
     end
 
-    # Generates an unpredictable byte string.
+    # Returns a random byte string that is cryptographically secure.
+    #
+    # For more information about entropy and random number generation, see
+    # the [AWS Key Management Service Cryptographic Details][1] whitepaper.
+    #
+    #
+    #
+    # [1]: https://d0.awsstatic.com/whitepapers/KMS-Cryptographic-Details.pdf
     #
     # @option params [Integer] :number_of_bytes
     #   The length of the byte string.
@@ -2338,7 +2344,7 @@ module Aws::KMS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-kms'
-      context[:gem_version] = '1.0.0.rc3'
+      context[:gem_version] = '1.0.0.rc4'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-kms/types.rb

@@ -179,13 +179,10 @@ module Aws::KMS
     #   @return [Array<String>]
     #
     # @!attribute [rw] constraints
-    #   The conditions under which the operations permitted by the grant are
-    #   allowed.
-    #
-    #   You can use this value to allow the operations permitted by the
-    #   grant only when a specified encryption context is present. For more
-    #   information, see [Encryption Context][1] in the *AWS Key Management
-    #   Service Developer Guide*.
+    #   A structure that you can use to allow certain operations in the
+    #   grant only when the desired encryption context is present. For more
+    #   information about encryption context, see [Encryption Context][1] in
+    #   the *AWS Key Management Service Developer Guide*.
     #
     #
     #
@@ -961,7 +958,7 @@ module Aws::KMS
     end
 
     # @!attribute [rw] plaintext
-    #   The unpredictable byte string.
+    #   The random byte string.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/kms-2014-11-01/GenerateRandomResponse AWS API Documentation
@@ -1130,14 +1127,20 @@ module Aws::KMS
       include Aws::Structure
     end
 
-    # A structure for specifying the conditions under which the operations
-    # permitted by the grant are allowed.
-    #
-    # You can use this structure to allow the operations permitted by the
-    # grant only when a specified encryption context is present. For more
+    # A structure that you can use to allow certain operations in the grant
+    # only when the desired encryption context is present. For more
     # information about encryption context, see [Encryption Context][1] in
     # the *AWS Key Management Service Developer Guide*.
     #
+    # Grant constraints apply only to operations that accept encryption
+    # context as input. For example, the ` DescribeKey ` operation does not
+    # accept encryption context as input. A grant that allows the
+    # `DescribeKey` operation does so regardless of the grant constraints.
+    # In constrast, the ` Encrypt ` operation accepts encryption context as
+    # input. A grant that allows the `Encrypt` operation does so only when
+    # the encryption context of the `Encrypt` operation satisfies the grant
+    # constraints.
+    #
     #
     #
     # [1]: http://docs.aws.amazon.com/kms/latest/developerguide/encryption-context.html
@@ -1155,20 +1158,20 @@ module Aws::KMS
     #       }
     #
     # @!attribute [rw] encryption_context_subset
-    #   Contains a list of key-value pairs, a subset of which must be
-    #   present in the encryption context of a subsequent operation
-    #   permitted by the grant. When a subsequent operation permitted by the
-    #   grant includes an encryption context that matches this list or is a
-    #   subset of this list, the grant allows the operation. Otherwise, the
-    #   operation is not allowed.
+    #   A list of key-value pairs, all of which must be present in the
+    #   encryption context of certain subsequent operations that the grant
+    #   allows. When certain subsequent operations allowed by the grant
+    #   include encryption context that matches this list or is a superset
+    #   of this list, the grant allows the operation. Otherwise, the grant
+    #   does not allow the operation.
     #   @return [Hash<String,String>]
     #
     # @!attribute [rw] encryption_context_equals
-    #   Contains a list of key-value pairs that must be present in the
-    #   encryption context of a subsequent operation permitted by the grant.
-    #   When a subsequent operation permitted by the grant includes an
+    #   A list of key-value pairs that must be present in the encryption
+    #   context of certain subsequent operations that the grant allows. When
+    #   certain subsequent operations allowed by the grant include
     #   encryption context that matches this list, the grant allows the
-    #   operation. Otherwise, the operation is not allowed.
+    #   operation. Otherwise, the grant does not allow the operation.
     #   @return [Hash<String,String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/kms-2014-11-01/GrantConstraints AWS API Documentation
@@ -1217,7 +1220,8 @@ module Aws::KMS
     #   @return [Array<String>]
     #
     # @!attribute [rw] constraints
-    #   The conditions under which the grant's operations are allowed.
+    #   A list of key-value pairs that must be present in the encryption
+    #   context of certain subsequent operations that the grant allows.
     #   @return [Types::GrantConstraints]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/kms-2014-11-01/GrantListEntry AWS API Documentation

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-kms
 version: !ruby/object:Gem::Version
-  version: 1.0.0.rc3
+  version: 1.0.0.rc4
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-03-07 00:00:00.000000000 Z
+date: 2017-04-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core