aws-sdk-kms 1.73.0 → 1.76.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +15 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-kms/client.rb +269 -54
- data/lib/aws-sdk-kms/endpoint_provider.rb +1 -1
- data/lib/aws-sdk-kms/plugins/endpoints.rb +3 -2
- data/lib/aws-sdk-kms/types.rb +36 -32
- data/lib/aws-sdk-kms.rb +1 -1
- metadata +2 -2
@@ -32,7 +32,7 @@ module Aws::KMS
|
|
32
32
|
raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
|
33
33
|
end
|
34
34
|
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
35
|
-
if Aws::Endpoints::Matchers.boolean_equals?(
|
35
|
+
if Aws::Endpoints::Matchers.boolean_equals?(Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"), true)
|
36
36
|
return Aws::Endpoints::Endpoint.new(url: "https://kms-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
37
37
|
end
|
38
38
|
raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
|
@@ -25,16 +25,17 @@ module Aws::KMS
|
|
25
25
|
# @api private
|
26
26
|
class Handler < Seahorse::Client::Handler
|
27
27
|
def call(context)
|
28
|
-
# If endpoint was discovered, do not resolve or apply the endpoint.
|
29
28
|
unless context[:discovered_endpoint]
|
30
29
|
params = parameters_for_operation(context)
|
31
30
|
endpoint = context.config.endpoint_provider.resolve_endpoint(params)
|
32
31
|
|
33
32
|
context.http_request.endpoint = endpoint.url
|
34
33
|
apply_endpoint_headers(context, endpoint.headers)
|
34
|
+
|
35
|
+
context[:endpoint_params] = params
|
36
|
+
context[:endpoint_properties] = endpoint.properties
|
35
37
|
end
|
36
38
|
|
37
|
-
context[:endpoint_params] = params
|
38
39
|
context[:auth_scheme] =
|
39
40
|
Aws::Endpoints.resolve_auth_scheme(context, endpoint)
|
40
41
|
|
data/lib/aws-sdk-kms/types.rb
CHANGED
@@ -418,7 +418,7 @@ module Aws::KMS
|
|
418
418
|
#
|
419
419
|
# * An external key store with `PUBLIC_ENDPOINT` connectivity cannot
|
420
420
|
# use the same `XksProxyUriEndpoint` value as an external key store
|
421
|
-
# with `VPC_ENDPOINT_SERVICE` connectivity in
|
421
|
+
# with `VPC_ENDPOINT_SERVICE` connectivity in this Amazon Web
|
422
422
|
# Services Region.
|
423
423
|
#
|
424
424
|
# * Each external key store with `VPC_ENDPOINT_SERVICE` connectivity
|
@@ -992,12 +992,13 @@ module Aws::KMS
|
|
992
992
|
# Management Service Developer Guide*.
|
993
993
|
#
|
994
994
|
# Use this parameter only when you intend to prevent the principal
|
995
|
-
# that is making the request from making a subsequent
|
996
|
-
# request on the KMS key.
|
995
|
+
# that is making the request from making a subsequent
|
996
|
+
# [PutKeyPolicy][2] request on the KMS key.
|
997
997
|
#
|
998
998
|
#
|
999
999
|
#
|
1000
1000
|
# [1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key
|
1001
|
+
# [2]: https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html
|
1001
1002
|
# @return [Boolean]
|
1002
1003
|
#
|
1003
1004
|
# @!attribute [rw] tags
|
@@ -1596,7 +1597,7 @@ module Aws::KMS
|
|
1596
1597
|
#
|
1597
1598
|
#
|
1598
1599
|
#
|
1599
|
-
# [1]: https://docs.aws.amazon.com/
|
1600
|
+
# [1]: https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave-concepts.html#term-attestdoc
|
1600
1601
|
# [2]: https://docs.aws.amazon.com/enclaves/latest/user/developing-applications.html#sdk
|
1601
1602
|
# [3]: https://docs.aws.amazon.com/kms/latest/developerguide/services-nitro-enclaves.html
|
1602
1603
|
# @return [Types::RecipientInfo]
|
@@ -3167,8 +3168,8 @@ module Aws::KMS
|
|
3167
3168
|
# You cannot use the RSAES\_OAEP\_SHA\_1 wrapping algorithm with the
|
3168
3169
|
# RSA\_2048 wrapping key spec to wrap ECC\_NIST\_P521 key material.
|
3169
3170
|
#
|
3170
|
-
# * **RSAES\_PKCS1\_V1\_5** (Deprecated) —
|
3171
|
-
#
|
3171
|
+
# * **RSAES\_PKCS1\_V1\_5** (Deprecated) — As of October 10, 2023, KMS
|
3172
|
+
# does not support the RSAES\_PKCS1\_V1\_5 wrapping algorithm.
|
3172
3173
|
# @return [String]
|
3173
3174
|
#
|
3174
3175
|
# @!attribute [rw] wrapping_key_spec
|
@@ -4710,12 +4711,13 @@ module Aws::KMS
|
|
4710
4711
|
# Management Service Developer Guide*.
|
4711
4712
|
#
|
4712
4713
|
# Use this parameter only when you intend to prevent the principal
|
4713
|
-
# that is making the request from making a subsequent
|
4714
|
-
# request on the KMS key.
|
4714
|
+
# that is making the request from making a subsequent
|
4715
|
+
# [PutKeyPolicy][2] request on the KMS key.
|
4715
4716
|
#
|
4716
4717
|
#
|
4717
4718
|
#
|
4718
4719
|
# [1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key
|
4720
|
+
# [2]: https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html
|
4719
4721
|
# @return [Boolean]
|
4720
4722
|
#
|
4721
4723
|
# @see http://docs.aws.amazon.com/goto/WebAPI/kms-2014-11-01/PutKeyPolicyRequest AWS API Documentation
|
@@ -5107,12 +5109,13 @@ module Aws::KMS
|
|
5107
5109
|
# Management Service Developer Guide*.
|
5108
5110
|
#
|
5109
5111
|
# Use this parameter only when you intend to prevent the principal
|
5110
|
-
# that is making the request from making a subsequent
|
5111
|
-
# request on the KMS key.
|
5112
|
+
# that is making the request from making a subsequent
|
5113
|
+
# [PutKeyPolicy][2] request on the KMS key.
|
5112
5114
|
#
|
5113
5115
|
#
|
5114
5116
|
#
|
5115
5117
|
# [1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key
|
5118
|
+
# [2]: https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html
|
5116
5119
|
# @return [Boolean]
|
5117
5120
|
#
|
5118
5121
|
# @!attribute [rw] description
|
@@ -6243,9 +6246,9 @@ module Aws::KMS
|
|
6243
6246
|
end
|
6244
6247
|
|
6245
6248
|
# The request was rejected because the (`XksKeyId`) is already
|
6246
|
-
# associated with
|
6247
|
-
# an external key store must be associated with a different
|
6248
|
-
# key.
|
6249
|
+
# associated with another KMS key in this external key store. Each KMS
|
6250
|
+
# key in an external key store must be associated with a different
|
6251
|
+
# external key.
|
6249
6252
|
#
|
6250
6253
|
# @!attribute [rw] message
|
6251
6254
|
# @return [String]
|
@@ -6424,9 +6427,9 @@ module Aws::KMS
|
|
6424
6427
|
include Aws::Structure
|
6425
6428
|
end
|
6426
6429
|
|
6427
|
-
# The request was rejected because the
|
6428
|
-
#
|
6429
|
-
#
|
6430
|
+
# The request was rejected because the external key store proxy is not
|
6431
|
+
# configured correctly. To identify the cause, see the error message
|
6432
|
+
# that accompanies the exception.
|
6430
6433
|
#
|
6431
6434
|
# @!attribute [rw] message
|
6432
6435
|
# @return [String]
|
@@ -6455,11 +6458,10 @@ module Aws::KMS
|
|
6455
6458
|
include Aws::Structure
|
6456
6459
|
end
|
6457
6460
|
|
6458
|
-
# The request was rejected because the
|
6459
|
-
#
|
6460
|
-
#
|
6461
|
-
#
|
6462
|
-
# address.
|
6461
|
+
# The request was rejected because the `XksProxyUriEndpoint` is already
|
6462
|
+
# associated with another external key store in this Amazon Web Services
|
6463
|
+
# Region. To identify the cause, see the error message that accompanies
|
6464
|
+
# the exception.
|
6463
6465
|
#
|
6464
6466
|
# @!attribute [rw] message
|
6465
6467
|
# @return [String]
|
@@ -6474,9 +6476,9 @@ module Aws::KMS
|
|
6474
6476
|
|
6475
6477
|
# The request was rejected because the concatenation of the
|
6476
6478
|
# `XksProxyUriEndpoint` and `XksProxyUriPath` is already associated with
|
6477
|
-
#
|
6478
|
-
#
|
6479
|
-
#
|
6479
|
+
# another external key store in this Amazon Web Services Region. Each
|
6480
|
+
# external key store in a Region must use a unique external key store
|
6481
|
+
# proxy API address.
|
6480
6482
|
#
|
6481
6483
|
# @!attribute [rw] message
|
6482
6484
|
# @return [String]
|
@@ -6509,10 +6511,9 @@ module Aws::KMS
|
|
6509
6511
|
end
|
6510
6512
|
|
6511
6513
|
# The request was rejected because the specified Amazon VPC endpoint
|
6512
|
-
# service is already associated with
|
6513
|
-
# Web Services
|
6514
|
-
#
|
6515
|
-
# endpoint service.
|
6514
|
+
# service is already associated with another external key store in this
|
6515
|
+
# Amazon Web Services Region. Each external key store in a Region must
|
6516
|
+
# use a different Amazon VPC endpoint service.
|
6516
6517
|
#
|
6517
6518
|
# @!attribute [rw] message
|
6518
6519
|
# @return [String]
|
@@ -6527,10 +6528,13 @@ module Aws::KMS
|
|
6527
6528
|
|
6528
6529
|
# The request was rejected because the Amazon VPC endpoint service
|
6529
6530
|
# configuration does not fulfill the requirements for an external key
|
6530
|
-
# store
|
6531
|
-
# requirements]
|
6532
|
-
#
|
6533
|
-
#
|
6531
|
+
# store. To identify the cause, see the error message that accompanies
|
6532
|
+
# the exception and [review the requirements][1] for Amazon VPC endpoint
|
6533
|
+
# service connectivity for an external key store.
|
6534
|
+
#
|
6535
|
+
#
|
6536
|
+
#
|
6537
|
+
# [1]: https://docs.aws.amazon.com/kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements
|
6534
6538
|
#
|
6535
6539
|
# @!attribute [rw] message
|
6536
6540
|
# @return [String]
|
data/lib/aws-sdk-kms.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-kms
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.76.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2024-01-05 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|