aws-sdk-kms 1.101.0 → 1.106.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +25 -0
  3. data/VERSION +1 -1
  4. data/lib/aws-sdk-kms/client.rb +773 -545
  5. data/lib/aws-sdk-kms/client_api.rb +34 -1
  6. data/lib/aws-sdk-kms/types.rb +492 -207
  7. data/lib/aws-sdk-kms.rb +1 -1
  8. data/sig/client.rbs +32 -13
  9. data/sig/types.rbs +40 -12
  10. metadata +4 -4
data/lib/aws-sdk-kms.rb CHANGED
@@ -54,7 +54,7 @@ module Aws::KMS
54
54
  autoload :EndpointProvider, 'aws-sdk-kms/endpoint_provider'
55
55
  autoload :Endpoints, 'aws-sdk-kms/endpoints'
56
56
 
57
- GEM_VERSION = '1.101.0'
57
+ GEM_VERSION = '1.106.0'
58
58
 
59
59
  end
60
60
 
data/sig/client.rbs CHANGED
@@ -157,7 +157,7 @@ module Aws
157
157
  ?description: ::String,
158
158
  ?key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT"),
159
159
  ?customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2"),
160
- ?key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2"),
160
+ ?key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87"),
161
161
  ?origin: ("AWS_KMS" | "EXTERNAL" | "AWS_CLOUDHSM" | "EXTERNAL_KEY_STORE"),
162
162
  ?custom_key_store_id: ::String,
163
163
  ?bypass_policy_lockout_safety_check: bool,
@@ -178,6 +178,7 @@ module Aws
178
178
  def plaintext: () -> ::String
179
179
  def encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
180
180
  def ciphertext_for_recipient: () -> ::String
181
+ def key_material_id: () -> ::String
181
182
  end
182
183
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#decrypt-instance_method
183
184
  def decrypt: (
@@ -209,11 +210,17 @@ module Aws
209
210
  ) -> _DeleteCustomKeyStoreResponseSuccess
210
211
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteCustomKeyStoreResponseSuccess
211
212
 
213
+ interface _DeleteImportedKeyMaterialResponseSuccess
214
+ include ::Seahorse::Client::_ResponseSuccess[Types::DeleteImportedKeyMaterialResponse]
215
+ def key_id: () -> ::String
216
+ def key_material_id: () -> ::String
217
+ end
212
218
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#delete_imported_key_material-instance_method
213
219
  def delete_imported_key_material: (
214
- key_id: ::String
215
- ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
216
- | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
220
+ key_id: ::String,
221
+ ?key_material_id: ::String
222
+ ) -> _DeleteImportedKeyMaterialResponseSuccess
223
+ | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteImportedKeyMaterialResponseSuccess
217
224
 
218
225
  interface _DeriveSharedSecretResponseSuccess
219
226
  include ::Seahorse::Client::_ResponseSuccess[Types::DeriveSharedSecretResponse]
@@ -320,6 +327,7 @@ module Aws
320
327
  def plaintext: () -> ::String
321
328
  def key_id: () -> ::String
322
329
  def ciphertext_for_recipient: () -> ::String
330
+ def key_material_id: () -> ::String
323
331
  end
324
332
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key-instance_method
325
333
  def generate_data_key: (
@@ -344,6 +352,7 @@ module Aws
344
352
  def key_id: () -> ::String
345
353
  def key_pair_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
346
354
  def ciphertext_for_recipient: () -> ::String
355
+ def key_material_id: () -> ::String
347
356
  end
348
357
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_pair-instance_method
349
358
  def generate_data_key_pair: (
@@ -365,6 +374,7 @@ module Aws
365
374
  def public_key: () -> ::String
366
375
  def key_id: () -> ::String
367
376
  def key_pair_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
377
+ def key_material_id: () -> ::String
368
378
  end
369
379
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_pair_without_plaintext-instance_method
370
380
  def generate_data_key_pair_without_plaintext: (
@@ -380,6 +390,7 @@ module Aws
380
390
  include ::Seahorse::Client::_ResponseSuccess[Types::GenerateDataKeyWithoutPlaintextResponse]
381
391
  def ciphertext_blob: () -> ::String
382
392
  def key_id: () -> ::String
393
+ def key_material_id: () -> ::String
383
394
  end
384
395
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_without_plaintext-instance_method
385
396
  def generate_data_key_without_plaintext: (
@@ -470,10 +481,10 @@ module Aws
470
481
  def key_id: () -> ::String
471
482
  def public_key: () -> ::String
472
483
  def customer_master_key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
473
- def key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
484
+ def key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
474
485
  def key_usage: () -> ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
475
486
  def encryption_algorithms: () -> ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
476
- def signing_algorithms: () -> ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
487
+ def signing_algorithms: () -> ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")]
477
488
  def key_agreement_algorithms: () -> ::Array[("ECDH")]
478
489
  end
479
490
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#get_public_key-instance_method
@@ -485,6 +496,8 @@ module Aws
485
496
 
486
497
  interface _ImportKeyMaterialResponseSuccess
487
498
  include ::Seahorse::Client::_ResponseSuccess[Types::ImportKeyMaterialResponse]
499
+ def key_id: () -> ::String
500
+ def key_material_id: () -> ::String
488
501
  end
489
502
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#import_key_material-instance_method
490
503
  def import_key_material: (
@@ -492,7 +505,10 @@ module Aws
492
505
  import_token: ::String,
493
506
  encrypted_key_material: ::String,
494
507
  ?valid_to: ::Time,
495
- ?expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
508
+ ?expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE"),
509
+ ?import_type: ("NEW_KEY_MATERIAL" | "EXISTING_KEY_MATERIAL"),
510
+ ?key_material_description: ::String,
511
+ ?key_material_id: ::String
496
512
  ) -> _ImportKeyMaterialResponseSuccess
497
513
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ImportKeyMaterialResponseSuccess
498
514
 
@@ -549,6 +565,7 @@ module Aws
549
565
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#list_key_rotations-instance_method
550
566
  def list_key_rotations: (
551
567
  key_id: ::String,
568
+ ?include_key_material: ("ALL_KEY_MATERIAL" | "ROTATIONS_ONLY"),
552
569
  ?limit: ::Integer,
553
570
  ?marker: ::String
554
571
  ) -> _ListKeyRotationsResponseSuccess
@@ -611,6 +628,8 @@ module Aws
611
628
  def key_id: () -> ::String
612
629
  def source_encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
613
630
  def destination_encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
631
+ def source_key_material_id: () -> ::String
632
+ def destination_key_material_id: () -> ::String
614
633
  end
615
634
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#re_encrypt-instance_method
616
635
  def re_encrypt: (
@@ -693,15 +712,15 @@ module Aws
693
712
  include ::Seahorse::Client::_ResponseSuccess[Types::SignResponse]
694
713
  def key_id: () -> ::String
695
714
  def signature: () -> ::String
696
- def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
715
+ def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
697
716
  end
698
717
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#sign-instance_method
699
718
  def sign: (
700
719
  key_id: ::String,
701
720
  message: ::String,
702
- ?message_type: ("RAW" | "DIGEST"),
721
+ ?message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU"),
703
722
  ?grant_tokens: Array[::String],
704
- signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA"),
723
+ signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256"),
705
724
  ?dry_run: bool
706
725
  ) -> _SignResponseSuccess
707
726
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _SignResponseSuccess
@@ -770,15 +789,15 @@ module Aws
770
789
  include ::Seahorse::Client::_ResponseSuccess[Types::VerifyResponse]
771
790
  def key_id: () -> ::String
772
791
  def signature_valid: () -> bool
773
- def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
792
+ def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
774
793
  end
775
794
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#verify-instance_method
776
795
  def verify: (
777
796
  key_id: ::String,
778
797
  message: ::String,
779
- ?message_type: ("RAW" | "DIGEST"),
798
+ ?message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU"),
780
799
  signature: ::String,
781
- signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA"),
800
+ signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256"),
782
801
  ?grant_tokens: Array[::String],
783
802
  ?dry_run: bool
784
803
  ) -> _VerifyResponseSuccess
data/sig/types.rbs CHANGED
@@ -118,7 +118,7 @@ module Aws::KMS
118
118
  attr_accessor description: ::String
119
119
  attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
120
120
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
121
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
121
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
122
122
  attr_accessor origin: ("AWS_KMS" | "EXTERNAL" | "AWS_CLOUDHSM" | "EXTERNAL_KEY_STORE")
123
123
  attr_accessor custom_key_store_id: ::String
124
124
  attr_accessor bypass_policy_lockout_safety_check: bool
@@ -182,6 +182,7 @@ module Aws::KMS
182
182
  attr_accessor plaintext: ::String
183
183
  attr_accessor encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
184
184
  attr_accessor ciphertext_for_recipient: ::String
185
+ attr_accessor key_material_id: ::String
185
186
  SENSITIVE: [:plaintext]
186
187
  end
187
188
 
@@ -200,6 +201,13 @@ module Aws::KMS
200
201
 
201
202
  class DeleteImportedKeyMaterialRequest
202
203
  attr_accessor key_id: ::String
204
+ attr_accessor key_material_id: ::String
205
+ SENSITIVE: []
206
+ end
207
+
208
+ class DeleteImportedKeyMaterialResponse
209
+ attr_accessor key_id: ::String
210
+ attr_accessor key_material_id: ::String
203
211
  SENSITIVE: []
204
212
  end
205
213
 
@@ -331,6 +339,7 @@ module Aws::KMS
331
339
  attr_accessor key_id: ::String
332
340
  attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
333
341
  attr_accessor ciphertext_for_recipient: ::String
342
+ attr_accessor key_material_id: ::String
334
343
  SENSITIVE: [:private_key_plaintext]
335
344
  end
336
345
 
@@ -348,6 +357,7 @@ module Aws::KMS
348
357
  attr_accessor public_key: ::String
349
358
  attr_accessor key_id: ::String
350
359
  attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
360
+ attr_accessor key_material_id: ::String
351
361
  SENSITIVE: []
352
362
  end
353
363
 
@@ -367,6 +377,7 @@ module Aws::KMS
367
377
  attr_accessor plaintext: ::String
368
378
  attr_accessor key_id: ::String
369
379
  attr_accessor ciphertext_for_recipient: ::String
380
+ attr_accessor key_material_id: ::String
370
381
  SENSITIVE: [:plaintext]
371
382
  end
372
383
 
@@ -383,6 +394,7 @@ module Aws::KMS
383
394
  class GenerateDataKeyWithoutPlaintextResponse
384
395
  attr_accessor ciphertext_blob: ::String
385
396
  attr_accessor key_id: ::String
397
+ attr_accessor key_material_id: ::String
386
398
  SENSITIVE: []
387
399
  end
388
400
 
@@ -466,10 +478,10 @@ module Aws::KMS
466
478
  attr_accessor key_id: ::String
467
479
  attr_accessor public_key: ::String
468
480
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
469
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
481
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
470
482
  attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
471
483
  attr_accessor encryption_algorithms: ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
472
- attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
484
+ attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")]
473
485
  attr_accessor key_agreement_algorithms: ::Array[("ECDH")]
474
486
  SENSITIVE: []
475
487
  end
@@ -499,10 +511,16 @@ module Aws::KMS
499
511
  attr_accessor encrypted_key_material: ::String
500
512
  attr_accessor valid_to: ::Time
501
513
  attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
514
+ attr_accessor import_type: ("NEW_KEY_MATERIAL" | "EXISTING_KEY_MATERIAL")
515
+ attr_accessor key_material_description: ::String
516
+ attr_accessor key_material_id: ::String
502
517
  SENSITIVE: []
503
518
  end
504
519
 
505
- class ImportKeyMaterialResponse < Aws::EmptyStructure
520
+ class ImportKeyMaterialResponse
521
+ attr_accessor key_id: ::String
522
+ attr_accessor key_material_id: ::String
523
+ SENSITIVE: []
506
524
  end
507
525
 
508
526
  class IncorrectKeyException
@@ -603,15 +621,16 @@ module Aws::KMS
603
621
  attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
604
622
  attr_accessor key_manager: ("AWS" | "CUSTOMER")
605
623
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
606
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
624
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
607
625
  attr_accessor encryption_algorithms: ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
608
- attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
626
+ attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")]
609
627
  attr_accessor key_agreement_algorithms: ::Array[("ECDH")]
610
628
  attr_accessor multi_region: bool
611
629
  attr_accessor multi_region_configuration: Types::MultiRegionConfiguration
612
630
  attr_accessor pending_deletion_window_in_days: ::Integer
613
631
  attr_accessor mac_algorithms: ::Array[("HMAC_SHA_224" | "HMAC_SHA_256" | "HMAC_SHA_384" | "HMAC_SHA_512")]
614
632
  attr_accessor xks_key_configuration: Types::XksKeyConfigurationType
633
+ attr_accessor current_key_material_id: ::String
615
634
  SENSITIVE: []
616
635
  end
617
636
 
@@ -671,6 +690,7 @@ module Aws::KMS
671
690
 
672
691
  class ListKeyRotationsRequest
673
692
  attr_accessor key_id: ::String
693
+ attr_accessor include_key_material: ("ALL_KEY_MATERIAL" | "ROTATIONS_ONLY")
674
694
  attr_accessor limit: ::Integer
675
695
  attr_accessor marker: ::String
676
696
  SENSITIVE: []
@@ -767,6 +787,8 @@ module Aws::KMS
767
787
  attr_accessor key_id: ::String
768
788
  attr_accessor source_encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
769
789
  attr_accessor destination_encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
790
+ attr_accessor source_key_material_id: ::String
791
+ attr_accessor destination_key_material_id: ::String
770
792
  SENSITIVE: []
771
793
  end
772
794
 
@@ -820,6 +842,12 @@ module Aws::KMS
820
842
 
821
843
  class RotationsListEntry
822
844
  attr_accessor key_id: ::String
845
+ attr_accessor key_material_id: ::String
846
+ attr_accessor key_material_description: ::String
847
+ attr_accessor import_state: ("IMPORTED" | "PENDING_IMPORT")
848
+ attr_accessor key_material_state: ("NON_CURRENT" | "CURRENT" | "PENDING_ROTATION")
849
+ attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
850
+ attr_accessor valid_to: ::Time
823
851
  attr_accessor rotation_date: ::Time
824
852
  attr_accessor rotation_type: ("AUTOMATIC" | "ON_DEMAND")
825
853
  SENSITIVE: []
@@ -842,9 +870,9 @@ module Aws::KMS
842
870
  class SignRequest
843
871
  attr_accessor key_id: ::String
844
872
  attr_accessor message: ::String
845
- attr_accessor message_type: ("RAW" | "DIGEST")
873
+ attr_accessor message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU")
846
874
  attr_accessor grant_tokens: ::Array[::String]
847
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
875
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
848
876
  attr_accessor dry_run: bool
849
877
  SENSITIVE: [:message]
850
878
  end
@@ -852,7 +880,7 @@ module Aws::KMS
852
880
  class SignResponse
853
881
  attr_accessor key_id: ::String
854
882
  attr_accessor signature: ::String
855
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
883
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
856
884
  SENSITIVE: []
857
885
  end
858
886
 
@@ -938,9 +966,9 @@ module Aws::KMS
938
966
  class VerifyRequest
939
967
  attr_accessor key_id: ::String
940
968
  attr_accessor message: ::String
941
- attr_accessor message_type: ("RAW" | "DIGEST")
969
+ attr_accessor message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU")
942
970
  attr_accessor signature: ::String
943
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
971
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
944
972
  attr_accessor grant_tokens: ::Array[::String]
945
973
  attr_accessor dry_run: bool
946
974
  SENSITIVE: [:message]
@@ -949,7 +977,7 @@ module Aws::KMS
949
977
  class VerifyResponse
950
978
  attr_accessor key_id: ::String
951
979
  attr_accessor signature_valid: bool
952
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
980
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
953
981
  SENSITIVE: []
954
982
  end
955
983
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-kms
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.101.0
4
+ version: 1.106.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
18
18
  version: '3'
19
19
  - - ">="
20
20
  - !ruby/object:Gem::Version
21
- version: 3.216.0
21
+ version: 3.225.0
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
28
28
  version: '3'
29
29
  - - ">="
30
30
  - !ruby/object:Gem::Version
31
- version: 3.216.0
31
+ version: 3.225.0
32
32
  - !ruby/object:Gem::Dependency
33
33
  name: aws-sigv4
34
34
  requirement: !ruby/object:Gem::Requirement
@@ -83,7 +83,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
83
83
  requirements:
84
84
  - - ">="
85
85
  - !ruby/object:Gem::Version
86
- version: '2.5'
86
+ version: '2.7'
87
87
  required_rubygems_version: !ruby/object:Gem::Requirement
88
88
  requirements:
89
89
  - - ">="