aws-sdk-kms 1.134.0 → 1.136.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +10 -0
  3. data/VERSION +1 -1
  4. data/lib/aws-sdk-kms/client.rb +376 -22
  5. data/lib/aws-sdk-kms/client_api.rb +69 -0
  6. data/lib/aws-sdk-kms/types.rb +251 -6
  7. data/lib/aws-sdk-kms.rb +1 -1
  8. data/sig/client.rbs +42 -9
  9. data/sig/types.rbs +47 -13
  10. metadata +3 -3
data/sig/types.rbs CHANGED
@@ -100,7 +100,7 @@ module Aws::KMS
100
100
  attr_accessor key_id: ::String
101
101
  attr_accessor grantee_principal: ::String
102
102
  attr_accessor retiring_principal: ::String
103
- attr_accessor operations: ::Array[("Decrypt" | "Encrypt" | "GenerateDataKey" | "GenerateDataKeyWithoutPlaintext" | "ReEncryptFrom" | "ReEncryptTo" | "Sign" | "Verify" | "GetPublicKey" | "CreateGrant" | "RetireGrant" | "DescribeKey" | "GenerateDataKeyPair" | "GenerateDataKeyPairWithoutPlaintext" | "GenerateMac" | "VerifyMac" | "DeriveSharedSecret")]
103
+ attr_accessor operations: ::Array[("Decrypt" | "Encrypt" | "GenerateDataKey" | "GenerateDataKeyWithoutPlaintext" | "ReEncryptFrom" | "ReEncryptTo" | "Sign" | "Verify" | "GetPublicKey" | "CreateGrant" | "RetireGrant" | "DescribeKey" | "GenerateDataKeyPair" | "GenerateDataKeyPairWithoutPlaintext" | "GenerateMac" | "VerifyMac" | "DeriveSharedSecret" | "Encapsulate" | "Decapsulate")]
104
104
  attr_accessor constraints: Types::GrantConstraints
105
105
  attr_accessor grant_tokens: ::Array[::String]
106
106
  attr_accessor name: ::String
@@ -119,9 +119,9 @@ module Aws::KMS
119
119
  class CreateKeyRequest
120
120
  attr_accessor policy: ::String
121
121
  attr_accessor description: ::String
122
- attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
122
+ attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT" | "ENCAPSULATE_DECAPSULATE")
123
123
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
124
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519")
124
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519" | "ML_KEM_512" | "ML_KEM_768" | "ML_KEM_1024")
125
125
  attr_accessor origin: ("AWS_KMS" | "EXTERNAL" | "AWS_CLOUDHSM" | "EXTERNAL_KEY_STORE")
126
126
  attr_accessor custom_key_store_id: ::String
127
127
  attr_accessor bypass_policy_lockout_safety_check: bool
@@ -169,6 +169,22 @@ module Aws::KMS
169
169
  SENSITIVE: []
170
170
  end
171
171
 
172
+ class DecapsulateRequest
173
+ attr_accessor key_id: ::String
174
+ attr_accessor shared_secret_ciphertext_blob: ::String
175
+ attr_accessor encapsulation_algorithm: ("ML_KEM")
176
+ attr_accessor grant_tokens: ::Array[::String]
177
+ attr_accessor dry_run: bool
178
+ SENSITIVE: []
179
+ end
180
+
181
+ class DecapsulateResponse
182
+ attr_accessor key_id: ::String
183
+ attr_accessor shared_secret: ::String
184
+ attr_accessor encapsulation_algorithm: ("ML_KEM")
185
+ SENSITIVE: [:shared_secret]
186
+ end
187
+
172
188
  class DecryptRequest
173
189
  attr_accessor ciphertext_blob: ::String
174
190
  attr_accessor encryption_context: ::Hash[::String, ::String]
@@ -304,6 +320,22 @@ module Aws::KMS
304
320
  SENSITIVE: []
305
321
  end
306
322
 
323
+ class EncapsulateRequest
324
+ attr_accessor key_id: ::String
325
+ attr_accessor encapsulation_algorithm: ("ML_KEM")
326
+ attr_accessor grant_tokens: ::Array[::String]
327
+ attr_accessor dry_run: bool
328
+ SENSITIVE: []
329
+ end
330
+
331
+ class EncapsulateResponse
332
+ attr_accessor key_id: ::String
333
+ attr_accessor shared_secret: ::String
334
+ attr_accessor shared_secret_ciphertext_blob: ::String
335
+ attr_accessor encapsulation_algorithm: ("ML_KEM")
336
+ SENSITIVE: [:shared_secret]
337
+ end
338
+
307
339
  class EncryptRequest
308
340
  attr_accessor key_id: ::String
309
341
  attr_accessor plaintext: ::String
@@ -329,7 +361,7 @@ module Aws::KMS
329
361
  class GenerateDataKeyPairRequest
330
362
  attr_accessor encryption_context: ::Hash[::String, ::String]
331
363
  attr_accessor key_id: ::String
332
- attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
364
+ attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519" | "ML_KEM_512" | "ML_KEM_768" | "ML_KEM_1024")
333
365
  attr_accessor grant_tokens: ::Array[::String]
334
366
  attr_accessor recipient: Types::RecipientInfo
335
367
  attr_accessor dry_run: bool
@@ -341,7 +373,7 @@ module Aws::KMS
341
373
  attr_accessor private_key_plaintext: ::String
342
374
  attr_accessor public_key: ::String
343
375
  attr_accessor key_id: ::String
344
- attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
376
+ attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519" | "ML_KEM_512" | "ML_KEM_768" | "ML_KEM_1024")
345
377
  attr_accessor ciphertext_for_recipient: ::String
346
378
  attr_accessor key_material_id: ::String
347
379
  SENSITIVE: [:private_key_plaintext]
@@ -350,7 +382,7 @@ module Aws::KMS
350
382
  class GenerateDataKeyPairWithoutPlaintextRequest
351
383
  attr_accessor encryption_context: ::Hash[::String, ::String]
352
384
  attr_accessor key_id: ::String
353
- attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
385
+ attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519" | "ML_KEM_512" | "ML_KEM_768" | "ML_KEM_1024")
354
386
  attr_accessor grant_tokens: ::Array[::String]
355
387
  attr_accessor dry_run: bool
356
388
  SENSITIVE: []
@@ -360,7 +392,7 @@ module Aws::KMS
360
392
  attr_accessor private_key_ciphertext_blob: ::String
361
393
  attr_accessor public_key: ::String
362
394
  attr_accessor key_id: ::String
363
- attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519")
395
+ attr_accessor key_pair_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SM2" | "ECC_NIST_EDWARDS25519" | "ML_KEM_512" | "ML_KEM_768" | "ML_KEM_1024")
364
396
  attr_accessor key_material_id: ::String
365
397
  SENSITIVE: []
366
398
  end
@@ -495,11 +527,12 @@ module Aws::KMS
495
527
  attr_accessor key_id: ::String
496
528
  attr_accessor public_key: ::String
497
529
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
498
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519")
499
- attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
530
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519" | "ML_KEM_512" | "ML_KEM_768" | "ML_KEM_1024")
531
+ attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT" | "ENCAPSULATE_DECAPSULATE")
500
532
  attr_accessor encryption_algorithms: ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
501
533
  attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")]
502
534
  attr_accessor key_agreement_algorithms: ::Array[("ECDH")]
535
+ attr_accessor encapsulation_algorithms: ::Array[("ML_KEM")]
503
536
  SENSITIVE: []
504
537
  end
505
538
 
@@ -518,7 +551,7 @@ module Aws::KMS
518
551
  attr_accessor grantee_principal: ::String
519
552
  attr_accessor retiring_principal: ::String
520
553
  attr_accessor issuing_account: ::String
521
- attr_accessor operations: ::Array[("Decrypt" | "Encrypt" | "GenerateDataKey" | "GenerateDataKeyWithoutPlaintext" | "ReEncryptFrom" | "ReEncryptTo" | "Sign" | "Verify" | "GetPublicKey" | "CreateGrant" | "RetireGrant" | "DescribeKey" | "GenerateDataKeyPair" | "GenerateDataKeyPairWithoutPlaintext" | "GenerateMac" | "VerifyMac" | "DeriveSharedSecret")]
554
+ attr_accessor operations: ::Array[("Decrypt" | "Encrypt" | "GenerateDataKey" | "GenerateDataKeyWithoutPlaintext" | "ReEncryptFrom" | "ReEncryptTo" | "Sign" | "Verify" | "GetPublicKey" | "CreateGrant" | "RetireGrant" | "DescribeKey" | "GenerateDataKeyPair" | "GenerateDataKeyPairWithoutPlaintext" | "GenerateMac" | "VerifyMac" | "DeriveSharedSecret" | "Encapsulate" | "Decapsulate")]
522
555
  attr_accessor constraints: Types::GrantConstraints
523
556
  attr_accessor grantee_service_principal: ::String
524
557
  attr_accessor retiring_service_principal: ::String
@@ -619,7 +652,7 @@ module Aws::KMS
619
652
  end
620
653
 
621
654
  class KeyLastUsageData
622
- attr_accessor operation: ("Decrypt" | "DeriveSharedSecret" | "Encrypt" | "GenerateDataKey" | "GenerateDataKeyPair" | "GenerateDataKeyPairWithoutPlaintext" | "GenerateDataKeyWithoutPlaintext" | "GenerateMac" | "ReEncrypt" | "Sign" | "Verify" | "VerifyMac")
655
+ attr_accessor operation: ("Decrypt" | "DeriveSharedSecret" | "Encrypt" | "GenerateDataKey" | "GenerateDataKeyPair" | "GenerateDataKeyPairWithoutPlaintext" | "GenerateDataKeyWithoutPlaintext" | "GenerateMac" | "ReEncrypt" | "Sign" | "Verify" | "VerifyMac" | "Encapsulate" | "Decapsulate")
623
656
  attr_accessor timestamp: ::Time
624
657
  attr_accessor cloud_trail_event_id: ::String
625
658
  attr_accessor kms_request_id: ::String
@@ -639,7 +672,7 @@ module Aws::KMS
639
672
  attr_accessor creation_date: ::Time
640
673
  attr_accessor enabled: bool
641
674
  attr_accessor description: ::String
642
- attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT")
675
+ attr_accessor key_usage: ("SIGN_VERIFY" | "ENCRYPT_DECRYPT" | "GENERATE_VERIFY_MAC" | "KEY_AGREEMENT" | "ENCAPSULATE_DECAPSULATE")
643
676
  attr_accessor key_state: ("Creating" | "Enabled" | "Disabled" | "PendingDeletion" | "PendingImport" | "PendingReplicaDeletion" | "Unavailable" | "Updating")
644
677
  attr_accessor deletion_date: ::Time
645
678
  attr_accessor valid_to: ::Time
@@ -649,10 +682,11 @@ module Aws::KMS
649
682
  attr_accessor expiration_model: ("KEY_MATERIAL_EXPIRES" | "KEY_MATERIAL_DOES_NOT_EXPIRE")
650
683
  attr_accessor key_manager: ("AWS" | "CUSTOMER")
651
684
  attr_accessor customer_master_key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2")
652
- attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519")
685
+ attr_accessor key_spec: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521" | "ECC_SECG_P256K1" | "SYMMETRIC_DEFAULT" | "HMAC_224" | "HMAC_256" | "HMAC_384" | "HMAC_512" | "SM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "ECC_NIST_EDWARDS25519" | "ML_KEM_512" | "ML_KEM_768" | "ML_KEM_1024")
653
686
  attr_accessor encryption_algorithms: ::Array[("SYMMETRIC_DEFAULT" | "RSAES_OAEP_SHA_1" | "RSAES_OAEP_SHA_256" | "SM2PKE")]
654
687
  attr_accessor signing_algorithms: ::Array[("RSASSA_PSS_SHA_256" | "RSASSA_PSS_SHA_384" | "RSASSA_PSS_SHA_512" | "RSASSA_PKCS1_V1_5_SHA_256" | "RSASSA_PKCS1_V1_5_SHA_384" | "RSASSA_PKCS1_V1_5_SHA_512" | "ECDSA_SHA_256" | "ECDSA_SHA_384" | "ECDSA_SHA_512" | "SM2DSA" | "ML_DSA_SHAKE_256" | "ED25519_SHA_512" | "ED25519_PH_SHA_512")]
655
688
  attr_accessor key_agreement_algorithms: ::Array[("ECDH")]
689
+ attr_accessor encapsulation_algorithms: ::Array[("ML_KEM")]
656
690
  attr_accessor multi_region: bool
657
691
  attr_accessor multi_region_configuration: Types::MultiRegionConfiguration
658
692
  attr_accessor pending_deletion_window_in_days: ::Integer
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-kms
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.134.0
4
+ version: 1.136.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
18
18
  version: '3'
19
19
  - - ">="
20
20
  - !ruby/object:Gem::Version
21
- version: 3.258.0
21
+ version: 3.260.0
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
28
28
  version: '3'
29
29
  - - ">="
30
30
  - !ruby/object:Gem::Version
31
- version: 3.258.0
31
+ version: 3.260.0
32
32
  - !ruby/object:Gem::Dependency
33
33
  name: aws-sigv4
34
34
  requirement: !ruby/object:Gem::Requirement