aws-sdk-kms 1.101.0 → 1.109.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +40 -0
  3. data/VERSION +1 -1
  4. data/lib/aws-sdk-kms/client.rb +811 -573
  5. data/lib/aws-sdk-kms/client_api.rb +34 -1
  6. data/lib/aws-sdk-kms/types.rb +497 -212
  7. data/lib/aws-sdk-kms.rb +1 -1
  8. data/sig/client.rbs +33 -13
  9. data/sig/resource.rbs +1 -0
  10. data/sig/types.rbs +40 -12
  11. metadata +4 -4
data/lib/aws-sdk-kms.rb CHANGED
@@ -54,7 +54,7 @@ module Aws::KMS
54
54
  autoload :EndpointProvider, 'aws-sdk-kms/endpoint_provider'
55
55
  autoload :Endpoints, 'aws-sdk-kms/endpoints'
56
56
 
57
- GEM_VERSION = '1.101.0'
57
+ GEM_VERSION = '1.109.0'
58
58
 
59
59
  end
60
60
 
data/sig/client.rbs CHANGED
@@ -18,6 +18,7 @@ module Aws
18
18
  ?account_id: String,
19
19
  ?active_endpoint_cache: bool,
20
20
  ?adaptive_retry_wait_to_fill: bool,
21
+ ?auth_scheme_preference: Array[String],
21
22
  ?client_side_monitoring: bool,
22
23
  ?client_side_monitoring_client_id: String,
23
24
  ?client_side_monitoring_host: String,
@@ -157,7 +158,7 @@ module Aws
157
158
  ?description: ::String,
158
159
  ?key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT"),
159
160
  ?customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2"),
160
- ?key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2"),
161
+ ?key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87"),
161
162
  ?origin: ("AWS_KMS" | "EXTERNAL" | "AWS_CLOUDHSM" | "EXTERNAL_KEY_STORE"),
162
163
  ?custom_key_store_id: ::String,
163
164
  ?bypass_policy_lockout_safety_check: bool,
@@ -178,6 +179,7 @@ module Aws
178
179
  def plaintext: () -> ::String
179
180
  def encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
180
181
  def ciphertext_for_recipient: () -> ::String
182
+ def key_material_id: () -> ::String
181
183
  end
182
184
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#decrypt-instance_method
183
185
  def decrypt: (
@@ -209,11 +211,17 @@ module Aws
209
211
  ) -> _DeleteCustomKeyStoreResponseSuccess
210
212
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteCustomKeyStoreResponseSuccess
211
213
 
214
+ interface _DeleteImportedKeyMaterialResponseSuccess
215
+ include ::Seahorse::Client::_ResponseSuccess[Types::DeleteImportedKeyMaterialResponse]
216
+ def key_id: () -> ::String
217
+ def key_material_id: () -> ::String
218
+ end
212
219
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#delete_imported_key_material-instance_method
213
220
  def delete_imported_key_material: (
214
- key_id: ::String
215
- ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
216
- | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
221
+ key_id: ::String,
222
+ ?key_material_id: ::String
223
+ ) -> _DeleteImportedKeyMaterialResponseSuccess
224
+ | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteImportedKeyMaterialResponseSuccess
217
225
 
218
226
  interface _DeriveSharedSecretResponseSuccess
219
227
  include ::Seahorse::Client::_ResponseSuccess[Types::DeriveSharedSecretResponse]
@@ -320,6 +328,7 @@ module Aws
320
328
  def plaintext: () -> ::String
321
329
  def key_id: () -> ::String
322
330
  def ciphertext_for_recipient: () -> ::String
331
+ def key_material_id: () -> ::String
323
332
  end
324
333
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key-instance_method
325
334
  def generate_data_key: (
@@ -344,6 +353,7 @@ module Aws
344
353
  def key_id: () -> ::String
345
354
  def key_pair_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
346
355
  def ciphertext_for_recipient: () -> ::String
356
+ def key_material_id: () -> ::String
347
357
  end
348
358
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_pair-instance_method
349
359
  def generate_data_key_pair: (
@@ -365,6 +375,7 @@ module Aws
365
375
  def public_key: () -> ::String
366
376
  def key_id: () -> ::String
367
377
  def key_pair_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
378
+ def key_material_id: () -> ::String
368
379
  end
369
380
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_pair_without_plaintext-instance_method
370
381
  def generate_data_key_pair_without_plaintext: (
@@ -380,6 +391,7 @@ module Aws
380
391
  include ::Seahorse::Client::_ResponseSuccess[Types::GenerateDataKeyWithoutPlaintextResponse]
381
392
  def ciphertext_blob: () -> ::String
382
393
  def key_id: () -> ::String
394
+ def key_material_id: () -> ::String
383
395
  end
384
396
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_without_plaintext-instance_method
385
397
  def generate_data_key_without_plaintext: (
@@ -470,10 +482,10 @@ module Aws
470
482
  def key_id: () -> ::String
471
483
  def public_key: () -> ::String
472
484
  def customer_master_key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
473
- def key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
485
+ def key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
474
486
  def key_usage: () -> ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
475
487
  def encryption_algorithms: () -> ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
476
- def signing_algorithms: () -> ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
488
+ def signing_algorithms: () -> ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")]
477
489
  def key_agreement_algorithms: () -> ::Array[("ECDH")]
478
490
  end
479
491
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#get_public_key-instance_method
@@ -485,6 +497,8 @@ module Aws
485
497
 
486
498
  interface _ImportKeyMaterialResponseSuccess
487
499
  include ::Seahorse::Client::_ResponseSuccess[Types::ImportKeyMaterialResponse]
500
+ def key_id: () -> ::String
501
+ def key_material_id: () -> ::String
488
502
  end
489
503
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#import_key_material-instance_method
490
504
  def import_key_material: (
@@ -492,7 +506,10 @@ module Aws
492
506
  import_token: ::String,
493
507
  encrypted_key_material: ::String,
494
508
  ?valid_to: ::Time,
495
- ?expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
509
+ ?expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE"),
510
+ ?import_type: ("NEW_KEY_MATERIAL" | "EXISTING_KEY_MATERIAL"),
511
+ ?key_material_description: ::String,
512
+ ?key_material_id: ::String
496
513
  ) -> _ImportKeyMaterialResponseSuccess
497
514
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ImportKeyMaterialResponseSuccess
498
515
 
@@ -549,6 +566,7 @@ module Aws
549
566
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#list_key_rotations-instance_method
550
567
  def list_key_rotations: (
551
568
  key_id: ::String,
569
+ ?include_key_material: ("ALL_KEY_MATERIAL" | "ROTATIONS_ONLY"),
552
570
  ?limit: ::Integer,
553
571
  ?marker: ::String
554
572
  ) -> _ListKeyRotationsResponseSuccess
@@ -611,6 +629,8 @@ module Aws
611
629
  def key_id: () -> ::String
612
630
  def source_encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
613
631
  def destination_encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
632
+ def source_key_material_id: () -> ::String
633
+ def destination_key_material_id: () -> ::String
614
634
  end
615
635
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#re_encrypt-instance_method
616
636
  def re_encrypt: (
@@ -693,15 +713,15 @@ module Aws
693
713
  include ::Seahorse::Client::_ResponseSuccess[Types::SignResponse]
694
714
  def key_id: () -> ::String
695
715
  def signature: () -> ::String
696
- def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
716
+ def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
697
717
  end
698
718
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#sign-instance_method
699
719
  def sign: (
700
720
  key_id: ::String,
701
721
  message: ::String,
702
- ?message_type: ("RAW" | "DIGEST"),
722
+ ?message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU"),
703
723
  ?grant_tokens: Array[::String],
704
- signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA"),
724
+ signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256"),
705
725
  ?dry_run: bool
706
726
  ) -> _SignResponseSuccess
707
727
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _SignResponseSuccess
@@ -770,15 +790,15 @@ module Aws
770
790
  include ::Seahorse::Client::_ResponseSuccess[Types::VerifyResponse]
771
791
  def key_id: () -> ::String
772
792
  def signature_valid: () -> bool
773
- def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
793
+ def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
774
794
  end
775
795
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#verify-instance_method
776
796
  def verify: (
777
797
  key_id: ::String,
778
798
  message: ::String,
779
- ?message_type: ("RAW" | "DIGEST"),
799
+ ?message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU"),
780
800
  signature: ::String,
781
- signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA"),
801
+ signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256"),
782
802
  ?grant_tokens: Array[::String],
783
803
  ?dry_run: bool
784
804
  ) -> _VerifyResponseSuccess
data/sig/resource.rbs CHANGED
@@ -18,6 +18,7 @@ module Aws
18
18
  ?account_id: String,
19
19
  ?active_endpoint_cache: bool,
20
20
  ?adaptive_retry_wait_to_fill: bool,
21
+ ?auth_scheme_preference: Array[String],
21
22
  ?client_side_monitoring: bool,
22
23
  ?client_side_monitoring_client_id: String,
23
24
  ?client_side_monitoring_host: String,
data/sig/types.rbs CHANGED
@@ -118,7 +118,7 @@ module Aws::KMS
118
118
  attr_accessor description: ::String
119
119
  attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
120
120
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
121
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
121
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
122
122
  attr_accessor origin: ("AWS_KMS" | "EXTERNAL" | "AWS_CLOUDHSM" | "EXTERNAL_KEY_STORE")
123
123
  attr_accessor custom_key_store_id: ::String
124
124
  attr_accessor bypass_policy_lockout_safety_check: bool
@@ -182,6 +182,7 @@ module Aws::KMS
182
182
  attr_accessor plaintext: ::String
183
183
  attr_accessor encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
184
184
  attr_accessor ciphertext_for_recipient: ::String
185
+ attr_accessor key_material_id: ::String
185
186
  SENSITIVE: [:plaintext]
186
187
  end
187
188
 
@@ -200,6 +201,13 @@ module Aws::KMS
200
201
 
201
202
  class DeleteImportedKeyMaterialRequest
202
203
  attr_accessor key_id: ::String
204
+ attr_accessor key_material_id: ::String
205
+ SENSITIVE: []
206
+ end
207
+
208
+ class DeleteImportedKeyMaterialResponse
209
+ attr_accessor key_id: ::String
210
+ attr_accessor key_material_id: ::String
203
211
  SENSITIVE: []
204
212
  end
205
213
 
@@ -331,6 +339,7 @@ module Aws::KMS
331
339
  attr_accessor key_id: ::String
332
340
  attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
333
341
  attr_accessor ciphertext_for_recipient: ::String
342
+ attr_accessor key_material_id: ::String
334
343
  SENSITIVE: [:private_key_plaintext]
335
344
  end
336
345
 
@@ -348,6 +357,7 @@ module Aws::KMS
348
357
  attr_accessor public_key: ::String
349
358
  attr_accessor key_id: ::String
350
359
  attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
360
+ attr_accessor key_material_id: ::String
351
361
  SENSITIVE: []
352
362
  end
353
363
 
@@ -367,6 +377,7 @@ module Aws::KMS
367
377
  attr_accessor plaintext: ::String
368
378
  attr_accessor key_id: ::String
369
379
  attr_accessor ciphertext_for_recipient: ::String
380
+ attr_accessor key_material_id: ::String
370
381
  SENSITIVE: [:plaintext]
371
382
  end
372
383
 
@@ -383,6 +394,7 @@ module Aws::KMS
383
394
  class GenerateDataKeyWithoutPlaintextResponse
384
395
  attr_accessor ciphertext_blob: ::String
385
396
  attr_accessor key_id: ::String
397
+ attr_accessor key_material_id: ::String
386
398
  SENSITIVE: []
387
399
  end
388
400
 
@@ -466,10 +478,10 @@ module Aws::KMS
466
478
  attr_accessor key_id: ::String
467
479
  attr_accessor public_key: ::String
468
480
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
469
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
481
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
470
482
  attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
471
483
  attr_accessor encryption_algorithms: ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
472
- attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
484
+ attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")]
473
485
  attr_accessor key_agreement_algorithms: ::Array[("ECDH")]
474
486
  SENSITIVE: []
475
487
  end
@@ -499,10 +511,16 @@ module Aws::KMS
499
511
  attr_accessor encrypted_key_material: ::String
500
512
  attr_accessor valid_to: ::Time
501
513
  attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
514
+ attr_accessor import_type: ("NEW_KEY_MATERIAL" | "EXISTING_KEY_MATERIAL")
515
+ attr_accessor key_material_description: ::String
516
+ attr_accessor key_material_id: ::String
502
517
  SENSITIVE: []
503
518
  end
504
519
 
505
- class ImportKeyMaterialResponse < Aws::EmptyStructure
520
+ class ImportKeyMaterialResponse
521
+ attr_accessor key_id: ::String
522
+ attr_accessor key_material_id: ::String
523
+ SENSITIVE: []
506
524
  end
507
525
 
508
526
  class IncorrectKeyException
@@ -603,15 +621,16 @@ module Aws::KMS
603
621
  attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
604
622
  attr_accessor key_manager: ("AWS" | "CUSTOMER")
605
623
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
606
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
624
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
607
625
  attr_accessor encryption_algorithms: ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
608
- attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
626
+ attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")]
609
627
  attr_accessor key_agreement_algorithms: ::Array[("ECDH")]
610
628
  attr_accessor multi_region: bool
611
629
  attr_accessor multi_region_configuration: Types::MultiRegionConfiguration
612
630
  attr_accessor pending_deletion_window_in_days: ::Integer
613
631
  attr_accessor mac_algorithms: ::Array[("HMAC_SHA_224" | "HMAC_SHA_256" | "HMAC_SHA_384" | "HMAC_SHA_512")]
614
632
  attr_accessor xks_key_configuration: Types::XksKeyConfigurationType
633
+ attr_accessor current_key_material_id: ::String
615
634
  SENSITIVE: []
616
635
  end
617
636
 
@@ -671,6 +690,7 @@ module Aws::KMS
671
690
 
672
691
  class ListKeyRotationsRequest
673
692
  attr_accessor key_id: ::String
693
+ attr_accessor include_key_material: ("ALL_KEY_MATERIAL" | "ROTATIONS_ONLY")
674
694
  attr_accessor limit: ::Integer
675
695
  attr_accessor marker: ::String
676
696
  SENSITIVE: []
@@ -767,6 +787,8 @@ module Aws::KMS
767
787
  attr_accessor key_id: ::String
768
788
  attr_accessor source_encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
769
789
  attr_accessor destination_encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
790
+ attr_accessor source_key_material_id: ::String
791
+ attr_accessor destination_key_material_id: ::String
770
792
  SENSITIVE: []
771
793
  end
772
794
 
@@ -820,6 +842,12 @@ module Aws::KMS
820
842
 
821
843
  class RotationsListEntry
822
844
  attr_accessor key_id: ::String
845
+ attr_accessor key_material_id: ::String
846
+ attr_accessor key_material_description: ::String
847
+ attr_accessor import_state: ("IMPORTED" | "PENDING_IMPORT")
848
+ attr_accessor key_material_state: ("NON_CURRENT" | "CURRENT" | "PENDING_ROTATION")
849
+ attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
850
+ attr_accessor valid_to: ::Time
823
851
  attr_accessor rotation_date: ::Time
824
852
  attr_accessor rotation_type: ("AUTOMATIC" | "ON_DEMAND")
825
853
  SENSITIVE: []
@@ -842,9 +870,9 @@ module Aws::KMS
842
870
  class SignRequest
843
871
  attr_accessor key_id: ::String
844
872
  attr_accessor message: ::String
845
- attr_accessor message_type: ("RAW" | "DIGEST")
873
+ attr_accessor message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU")
846
874
  attr_accessor grant_tokens: ::Array[::String]
847
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
875
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
848
876
  attr_accessor dry_run: bool
849
877
  SENSITIVE: [:message]
850
878
  end
@@ -852,7 +880,7 @@ module Aws::KMS
852
880
  class SignResponse
853
881
  attr_accessor key_id: ::String
854
882
  attr_accessor signature: ::String
855
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
883
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
856
884
  SENSITIVE: []
857
885
  end
858
886
 
@@ -938,9 +966,9 @@ module Aws::KMS
938
966
  class VerifyRequest
939
967
  attr_accessor key_id: ::String
940
968
  attr_accessor message: ::String
941
- attr_accessor message_type: ("RAW" | "DIGEST")
969
+ attr_accessor message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU")
942
970
  attr_accessor signature: ::String
943
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
971
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
944
972
  attr_accessor grant_tokens: ::Array[::String]
945
973
  attr_accessor dry_run: bool
946
974
  SENSITIVE: [:message]
@@ -949,7 +977,7 @@ module Aws::KMS
949
977
  class VerifyResponse
950
978
  attr_accessor key_id: ::String
951
979
  attr_accessor signature_valid: bool
952
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
980
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256")
953
981
  SENSITIVE: []
954
982
  end
955
983
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-kms
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.101.0
4
+ version: 1.109.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
18
18
  version: '3'
19
19
  - - ">="
20
20
  - !ruby/object:Gem::Version
21
- version: 3.216.0
21
+ version: 3.228.0
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
28
28
  version: '3'
29
29
  - - ">="
30
30
  - !ruby/object:Gem::Version
31
- version: 3.216.0
31
+ version: 3.228.0
32
32
  - !ruby/object:Gem::Dependency
33
33
  name: aws-sigv4
34
34
  requirement: !ruby/object:Gem::Requirement
@@ -83,7 +83,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
83
83
  requirements:
84
84
  - - ">="
85
85
  - !ruby/object:Gem::Version
86
- version: '2.5'
86
+ version: '2.7'
87
87
  required_rubygems_version: !ruby/object:Gem::Requirement
88
88
  requirements:
89
89
  - - ">="