aws-sdk-kms 1.101.0 → 1.118.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
data/lib/aws-sdk-kms.rb CHANGED
@@ -54,7 +54,7 @@ module Aws::KMS
54
54
  autoload :EndpointProvider, 'aws-sdk-kms/endpoint_provider'
55
55
  autoload :Endpoints, 'aws-sdk-kms/endpoints'
56
56
 
57
- GEM_VERSION = '1.101.0'
57
+ GEM_VERSION = '1.118.0'
58
58
 
59
59
  end
60
60
 
data/sig/client.rbs CHANGED
@@ -18,6 +18,7 @@ module Aws
18
18
  ?account_id: String,
19
19
  ?active_endpoint_cache: bool,
20
20
  ?adaptive_retry_wait_to_fill: bool,
21
+ ?auth_scheme_preference: Array[String],
21
22
  ?client_side_monitoring: bool,
22
23
  ?client_side_monitoring_client_id: String,
23
24
  ?client_side_monitoring_host: String,
@@ -118,6 +119,7 @@ module Aws
118
119
  ?xks_proxy_uri_endpoint: ::String,
119
120
  ?xks_proxy_uri_path: ::String,
120
121
  ?xks_proxy_vpc_endpoint_service_name: ::String,
122
+ ?xks_proxy_vpc_endpoint_service_owner: ::String,
121
123
  ?xks_proxy_authentication_credential: {
122
124
  access_key_id: ::String,
123
125
  raw_secret_access_key: ::String
@@ -157,7 +159,7 @@ module Aws
157
159
  ?description: ::String,
158
160
  ?key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT"),
159
161
  ?customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2"),
160
- ?key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2"),
162
+ ?key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519"),
161
163
  ?origin: ("AWS_KMS" | "EXTERNAL" | "AWS_CLOUDHSM" | "EXTERNAL_KEY_STORE"),
162
164
  ?custom_key_store_id: ::String,
163
165
  ?bypass_policy_lockout_safety_check: bool,
@@ -178,6 +180,7 @@ module Aws
178
180
  def plaintext: () -> ::String
179
181
  def encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
180
182
  def ciphertext_for_recipient: () -> ::String
183
+ def key_material_id: () -> ::String
181
184
  end
182
185
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#decrypt-instance_method
183
186
  def decrypt: (
@@ -209,11 +212,17 @@ module Aws
209
212
  ) -> _DeleteCustomKeyStoreResponseSuccess
210
213
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteCustomKeyStoreResponseSuccess
211
214
 
215
+ interface _DeleteImportedKeyMaterialResponseSuccess
216
+ include ::Seahorse::Client::_ResponseSuccess[Types::DeleteImportedKeyMaterialResponse]
217
+ def key_id: () -> ::String
218
+ def key_material_id: () -> ::String
219
+ end
212
220
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#delete_imported_key_material-instance_method
213
221
  def delete_imported_key_material: (
214
- key_id: ::String
215
- ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
216
- | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
222
+ key_id: ::String,
223
+ ?key_material_id: ::String
224
+ ) -> _DeleteImportedKeyMaterialResponseSuccess
225
+ | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteImportedKeyMaterialResponseSuccess
217
226
 
218
227
  interface _DeriveSharedSecretResponseSuccess
219
228
  include ::Seahorse::Client::_ResponseSuccess[Types::DeriveSharedSecretResponse]
@@ -320,6 +329,7 @@ module Aws
320
329
  def plaintext: () -> ::String
321
330
  def key_id: () -> ::String
322
331
  def ciphertext_for_recipient: () -> ::String
332
+ def key_material_id: () -> ::String
323
333
  end
324
334
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key-instance_method
325
335
  def generate_data_key: (
@@ -342,14 +352,15 @@ module Aws
342
352
  def private_key_plaintext: () -> ::String
343
353
  def public_key: () -> ::String
344
354
  def key_id: () -> ::String
345
- def key_pair_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
355
+ def key_pair_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
346
356
  def ciphertext_for_recipient: () -> ::String
357
+ def key_material_id: () -> ::String
347
358
  end
348
359
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_pair-instance_method
349
360
  def generate_data_key_pair: (
350
361
  ?encryption_context: Hash[::String, ::String],
351
362
  key_id: ::String,
352
- key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2"),
363
+ key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519"),
353
364
  ?grant_tokens: Array[::String],
354
365
  ?recipient: {
355
366
  key_encryption_algorithm: ("RSAES_OAEP_SHA_256")?,
@@ -364,13 +375,14 @@ module Aws
364
375
  def private_key_ciphertext_blob: () -> ::String
365
376
  def public_key: () -> ::String
366
377
  def key_id: () -> ::String
367
- def key_pair_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
378
+ def key_pair_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
379
+ def key_material_id: () -> ::String
368
380
  end
369
381
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_pair_without_plaintext-instance_method
370
382
  def generate_data_key_pair_without_plaintext: (
371
383
  ?encryption_context: Hash[::String, ::String],
372
384
  key_id: ::String,
373
- key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2"),
385
+ key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519"),
374
386
  ?grant_tokens: Array[::String],
375
387
  ?dry_run: bool
376
388
  ) -> _GenerateDataKeyPairWithoutPlaintextResponseSuccess
@@ -380,6 +392,7 @@ module Aws
380
392
  include ::Seahorse::Client::_ResponseSuccess[Types::GenerateDataKeyWithoutPlaintextResponse]
381
393
  def ciphertext_blob: () -> ::String
382
394
  def key_id: () -> ::String
395
+ def key_material_id: () -> ::String
383
396
  end
384
397
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#generate_data_key_without_plaintext-instance_method
385
398
  def generate_data_key_without_plaintext: (
@@ -470,10 +483,10 @@ module Aws
470
483
  def key_id: () -> ::String
471
484
  def public_key: () -> ::String
472
485
  def customer_master_key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
473
- def key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
486
+ def key_spec: () -> ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519")
474
487
  def key_usage: () -> ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
475
488
  def encryption_algorithms: () -> ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
476
- def signing_algorithms: () -> ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
489
+ def signing_algorithms: () -> ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")]
477
490
  def key_agreement_algorithms: () -> ::Array[("ECDH")]
478
491
  end
479
492
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#get_public_key-instance_method
@@ -485,6 +498,8 @@ module Aws
485
498
 
486
499
  interface _ImportKeyMaterialResponseSuccess
487
500
  include ::Seahorse::Client::_ResponseSuccess[Types::ImportKeyMaterialResponse]
501
+ def key_id: () -> ::String
502
+ def key_material_id: () -> ::String
488
503
  end
489
504
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#import_key_material-instance_method
490
505
  def import_key_material: (
@@ -492,7 +507,10 @@ module Aws
492
507
  import_token: ::String,
493
508
  encrypted_key_material: ::String,
494
509
  ?valid_to: ::Time,
495
- ?expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
510
+ ?expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE"),
511
+ ?import_type: ("NEW_KEY_MATERIAL" | "EXISTING_KEY_MATERIAL"),
512
+ ?key_material_description: ::String,
513
+ ?key_material_id: ::String
496
514
  ) -> _ImportKeyMaterialResponseSuccess
497
515
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ImportKeyMaterialResponseSuccess
498
516
 
@@ -549,6 +567,7 @@ module Aws
549
567
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#list_key_rotations-instance_method
550
568
  def list_key_rotations: (
551
569
  key_id: ::String,
570
+ ?include_key_material: ("ALL_KEY_MATERIAL" | "ROTATIONS_ONLY"),
552
571
  ?limit: ::Integer,
553
572
  ?marker: ::String
554
573
  ) -> _ListKeyRotationsResponseSuccess
@@ -611,6 +630,8 @@ module Aws
611
630
  def key_id: () -> ::String
612
631
  def source_encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
613
632
  def destination_encryption_algorithm: () -> ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
633
+ def source_key_material_id: () -> ::String
634
+ def destination_key_material_id: () -> ::String
614
635
  end
615
636
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#re_encrypt-instance_method
616
637
  def re_encrypt: (
@@ -693,15 +714,15 @@ module Aws
693
714
  include ::Seahorse::Client::_ResponseSuccess[Types::SignResponse]
694
715
  def key_id: () -> ::String
695
716
  def signature: () -> ::String
696
- def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
717
+ def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")
697
718
  end
698
719
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#sign-instance_method
699
720
  def sign: (
700
721
  key_id: ::String,
701
722
  message: ::String,
702
- ?message_type: ("RAW" | "DIGEST"),
723
+ ?message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU"),
703
724
  ?grant_tokens: Array[::String],
704
- signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA"),
725
+ signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512"),
705
726
  ?dry_run: bool
706
727
  ) -> _SignResponseSuccess
707
728
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _SignResponseSuccess
@@ -744,6 +765,7 @@ module Aws
744
765
  ?xks_proxy_uri_endpoint: ::String,
745
766
  ?xks_proxy_uri_path: ::String,
746
767
  ?xks_proxy_vpc_endpoint_service_name: ::String,
768
+ ?xks_proxy_vpc_endpoint_service_owner: ::String,
747
769
  ?xks_proxy_authentication_credential: {
748
770
  access_key_id: ::String,
749
771
  raw_secret_access_key: ::String
@@ -770,15 +792,15 @@ module Aws
770
792
  include ::Seahorse::Client::_ResponseSuccess[Types::VerifyResponse]
771
793
  def key_id: () -> ::String
772
794
  def signature_valid: () -> bool
773
- def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
795
+ def signing_algorithm: () -> ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")
774
796
  end
775
797
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/KMS/Client.html#verify-instance_method
776
798
  def verify: (
777
799
  key_id: ::String,
778
800
  message: ::String,
779
- ?message_type: ("RAW" | "DIGEST"),
801
+ ?message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU"),
780
802
  signature: ::String,
781
- signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA"),
803
+ signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512"),
782
804
  ?grant_tokens: Array[::String],
783
805
  ?dry_run: bool
784
806
  ) -> _VerifyResponseSuccess
data/sig/resource.rbs CHANGED
@@ -18,6 +18,7 @@ module Aws
18
18
  ?account_id: String,
19
19
  ?active_endpoint_cache: bool,
20
20
  ?adaptive_retry_wait_to_fill: bool,
21
+ ?auth_scheme_preference: Array[String],
21
22
  ?client_side_monitoring: bool,
22
23
  ?client_side_monitoring_client_id: String,
23
24
  ?client_side_monitoring_host: String,
data/sig/types.rbs CHANGED
@@ -85,6 +85,7 @@ module Aws::KMS
85
85
  attr_accessor xks_proxy_uri_endpoint: ::String
86
86
  attr_accessor xks_proxy_uri_path: ::String
87
87
  attr_accessor xks_proxy_vpc_endpoint_service_name: ::String
88
+ attr_accessor xks_proxy_vpc_endpoint_service_owner: ::String
88
89
  attr_accessor xks_proxy_authentication_credential: Types::XksProxyAuthenticationCredentialType
89
90
  attr_accessor xks_proxy_connectivity: ("PUBLIC_ENDPOINT" | "VPC_ENDPOINT_SERVICE")
90
91
  SENSITIVE: [:key_store_password]
@@ -118,7 +119,7 @@ module Aws::KMS
118
119
  attr_accessor description: ::String
119
120
  attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
120
121
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
121
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
122
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519")
122
123
  attr_accessor origin: ("AWS_KMS" | "EXTERNAL" | "AWS_CLOUDHSM" | "EXTERNAL_KEY_STORE")
123
124
  attr_accessor custom_key_store_id: ::String
124
125
  attr_accessor bypass_policy_lockout_safety_check: bool
@@ -182,6 +183,7 @@ module Aws::KMS
182
183
  attr_accessor plaintext: ::String
183
184
  attr_accessor encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
184
185
  attr_accessor ciphertext_for_recipient: ::String
186
+ attr_accessor key_material_id: ::String
185
187
  SENSITIVE: [:plaintext]
186
188
  end
187
189
 
@@ -200,6 +202,13 @@ module Aws::KMS
200
202
 
201
203
  class DeleteImportedKeyMaterialRequest
202
204
  attr_accessor key_id: ::String
205
+ attr_accessor key_material_id: ::String
206
+ SENSITIVE: []
207
+ end
208
+
209
+ class DeleteImportedKeyMaterialResponse
210
+ attr_accessor key_id: ::String
211
+ attr_accessor key_material_id: ::String
203
212
  SENSITIVE: []
204
213
  end
205
214
 
@@ -317,7 +326,7 @@ module Aws::KMS
317
326
  class GenerateDataKeyPairRequest
318
327
  attr_accessor encryption_context: ::Hash[::String, ::String]
319
328
  attr_accessor key_id: ::String
320
- attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
329
+ attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
321
330
  attr_accessor grant_tokens: ::Array[::String]
322
331
  attr_accessor recipient: Types::RecipientInfo
323
332
  attr_accessor dry_run: bool
@@ -329,15 +338,16 @@ module Aws::KMS
329
338
  attr_accessor private_key_plaintext: ::String
330
339
  attr_accessor public_key: ::String
331
340
  attr_accessor key_id: ::String
332
- attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
341
+ attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
333
342
  attr_accessor ciphertext_for_recipient: ::String
343
+ attr_accessor key_material_id: ::String
334
344
  SENSITIVE: [:private_key_plaintext]
335
345
  end
336
346
 
337
347
  class GenerateDataKeyPairWithoutPlaintextRequest
338
348
  attr_accessor encryption_context: ::Hash[::String, ::String]
339
349
  attr_accessor key_id: ::String
340
- attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
350
+ attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
341
351
  attr_accessor grant_tokens: ::Array[::String]
342
352
  attr_accessor dry_run: bool
343
353
  SENSITIVE: []
@@ -347,7 +357,8 @@ module Aws::KMS
347
357
  attr_accessor private_key_ciphertext_blob: ::String
348
358
  attr_accessor public_key: ::String
349
359
  attr_accessor key_id: ::String
350
- attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2")
360
+ attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
361
+ attr_accessor key_material_id: ::String
351
362
  SENSITIVE: []
352
363
  end
353
364
 
@@ -367,6 +378,7 @@ module Aws::KMS
367
378
  attr_accessor plaintext: ::String
368
379
  attr_accessor key_id: ::String
369
380
  attr_accessor ciphertext_for_recipient: ::String
381
+ attr_accessor key_material_id: ::String
370
382
  SENSITIVE: [:plaintext]
371
383
  end
372
384
 
@@ -383,6 +395,7 @@ module Aws::KMS
383
395
  class GenerateDataKeyWithoutPlaintextResponse
384
396
  attr_accessor ciphertext_blob: ::String
385
397
  attr_accessor key_id: ::String
398
+ attr_accessor key_material_id: ::String
386
399
  SENSITIVE: []
387
400
  end
388
401
 
@@ -466,10 +479,10 @@ module Aws::KMS
466
479
  attr_accessor key_id: ::String
467
480
  attr_accessor public_key: ::String
468
481
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
469
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
482
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519")
470
483
  attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
471
484
  attr_accessor encryption_algorithms: ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
472
- attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
485
+ attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")]
473
486
  attr_accessor key_agreement_algorithms: ::Array[("ECDH")]
474
487
  SENSITIVE: []
475
488
  end
@@ -499,10 +512,16 @@ module Aws::KMS
499
512
  attr_accessor encrypted_key_material: ::String
500
513
  attr_accessor valid_to: ::Time
501
514
  attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
515
+ attr_accessor import_type: ("NEW_KEY_MATERIAL" | "EXISTING_KEY_MATERIAL")
516
+ attr_accessor key_material_description: ::String
517
+ attr_accessor key_material_id: ::String
502
518
  SENSITIVE: []
503
519
  end
504
520
 
505
- class ImportKeyMaterialResponse < Aws::EmptyStructure
521
+ class ImportKeyMaterialResponse
522
+ attr_accessor key_id: ::String
523
+ attr_accessor key_material_id: ::String
524
+ SENSITIVE: []
506
525
  end
507
526
 
508
527
  class IncorrectKeyException
@@ -603,15 +622,16 @@ module Aws::KMS
603
622
  attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
604
623
  attr_accessor key_manager: ("AWS" | "CUSTOMER")
605
624
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
606
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
625
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519")
607
626
  attr_accessor encryption_algorithms: ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
608
- attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")]
627
+ attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")]
609
628
  attr_accessor key_agreement_algorithms: ::Array[("ECDH")]
610
629
  attr_accessor multi_region: bool
611
630
  attr_accessor multi_region_configuration: Types::MultiRegionConfiguration
612
631
  attr_accessor pending_deletion_window_in_days: ::Integer
613
632
  attr_accessor mac_algorithms: ::Array[("HMAC_SHA_224" | "HMAC_SHA_256" | "HMAC_SHA_384" | "HMAC_SHA_512")]
614
633
  attr_accessor xks_key_configuration: Types::XksKeyConfigurationType
634
+ attr_accessor current_key_material_id: ::String
615
635
  SENSITIVE: []
616
636
  end
617
637
 
@@ -671,6 +691,7 @@ module Aws::KMS
671
691
 
672
692
  class ListKeyRotationsRequest
673
693
  attr_accessor key_id: ::String
694
+ attr_accessor include_key_material: ("ALL_KEY_MATERIAL" | "ROTATIONS_ONLY")
674
695
  attr_accessor limit: ::Integer
675
696
  attr_accessor marker: ::String
676
697
  SENSITIVE: []
@@ -767,6 +788,8 @@ module Aws::KMS
767
788
  attr_accessor key_id: ::String
768
789
  attr_accessor source_encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
769
790
  attr_accessor destination_encryption_algorithm: ("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")
791
+ attr_accessor source_key_material_id: ::String
792
+ attr_accessor destination_key_material_id: ::String
770
793
  SENSITIVE: []
771
794
  end
772
795
 
@@ -820,6 +843,12 @@ module Aws::KMS
820
843
 
821
844
  class RotationsListEntry
822
845
  attr_accessor key_id: ::String
846
+ attr_accessor key_material_id: ::String
847
+ attr_accessor key_material_description: ::String
848
+ attr_accessor import_state: ("IMPORTED" | "PENDING_IMPORT")
849
+ attr_accessor key_material_state: ("NON_CURRENT" | "CURRENT" | "PENDING_ROTATION" | "PENDING_MULTI_REGION_IMPORT_AND_ROTATION")
850
+ attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
851
+ attr_accessor valid_to: ::Time
823
852
  attr_accessor rotation_date: ::Time
824
853
  attr_accessor rotation_type: ("AUTOMATIC" | "ON_DEMAND")
825
854
  SENSITIVE: []
@@ -842,9 +871,9 @@ module Aws::KMS
842
871
  class SignRequest
843
872
  attr_accessor key_id: ::String
844
873
  attr_accessor message: ::String
845
- attr_accessor message_type: ("RAW" | "DIGEST")
874
+ attr_accessor message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU")
846
875
  attr_accessor grant_tokens: ::Array[::String]
847
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
876
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")
848
877
  attr_accessor dry_run: bool
849
878
  SENSITIVE: [:message]
850
879
  end
@@ -852,7 +881,7 @@ module Aws::KMS
852
881
  class SignResponse
853
882
  attr_accessor key_id: ::String
854
883
  attr_accessor signature: ::String
855
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
884
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")
856
885
  SENSITIVE: []
857
886
  end
858
887
 
@@ -898,6 +927,7 @@ module Aws::KMS
898
927
  attr_accessor xks_proxy_uri_endpoint: ::String
899
928
  attr_accessor xks_proxy_uri_path: ::String
900
929
  attr_accessor xks_proxy_vpc_endpoint_service_name: ::String
930
+ attr_accessor xks_proxy_vpc_endpoint_service_owner: ::String
901
931
  attr_accessor xks_proxy_authentication_credential: Types::XksProxyAuthenticationCredentialType
902
932
  attr_accessor xks_proxy_connectivity: ("PUBLIC_ENDPOINT" | "VPC_ENDPOINT_SERVICE")
903
933
  SENSITIVE: [:key_store_password]
@@ -938,9 +968,9 @@ module Aws::KMS
938
968
  class VerifyRequest
939
969
  attr_accessor key_id: ::String
940
970
  attr_accessor message: ::String
941
- attr_accessor message_type: ("RAW" | "DIGEST")
971
+ attr_accessor message_type: ("RAW" | "DIGEST" | "EXTERNAL_MU")
942
972
  attr_accessor signature: ::String
943
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
973
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")
944
974
  attr_accessor grant_tokens: ::Array[::String]
945
975
  attr_accessor dry_run: bool
946
976
  SENSITIVE: [:message]
@@ -949,7 +979,7 @@ module Aws::KMS
949
979
  class VerifyResponse
950
980
  attr_accessor key_id: ::String
951
981
  attr_accessor signature_valid: bool
952
- attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA")
982
+ attr_accessor signing_algorithm: ("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")
953
983
  SENSITIVE: []
954
984
  end
955
985
 
@@ -985,6 +1015,7 @@ module Aws::KMS
985
1015
  attr_accessor uri_endpoint: ::String
986
1016
  attr_accessor uri_path: ::String
987
1017
  attr_accessor vpc_endpoint_service_name: ::String
1018
+ attr_accessor vpc_endpoint_service_owner: ::String
988
1019
  SENSITIVE: [:access_key_id]
989
1020
  end
990
1021
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-kms
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.101.0
4
+ version: 1.118.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
18
18
  version: '3'
19
19
  - - ">="
20
20
  - !ruby/object:Gem::Version
21
- version: 3.216.0
21
+ version: 3.239.1
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
28
28
  version: '3'
29
29
  - - ">="
30
30
  - !ruby/object:Gem::Version
31
- version: 3.216.0
31
+ version: 3.239.1
32
32
  - !ruby/object:Gem::Dependency
33
33
  name: aws-sigv4
34
34
  requirement: !ruby/object:Gem::Requirement
@@ -83,7 +83,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
83
83
  requirements:
84
84
  - - ">="
85
85
  - !ruby/object:Gem::Version
86
- version: '2.5'
86
+ version: '2.7'
87
87
  required_rubygems_version: !ruby/object:Gem::Requirement
88
88
  requirements:
89
89
  - - ">="