aws-sdk-kms 1.73.0 → 1.76.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +15 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-kms/client.rb +269 -54
- data/lib/aws-sdk-kms/endpoint_provider.rb +1 -1
- data/lib/aws-sdk-kms/plugins/endpoints.rb +3 -2
- data/lib/aws-sdk-kms/types.rb +36 -32
- data/lib/aws-sdk-kms.rb +1 -1
- metadata +2 -2
@@ -32,7 +32,7 @@ module Aws::KMS
|
|
32
32
|
raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
|
33
33
|
end
|
34
34
|
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
35
|
-
if Aws::Endpoints::Matchers.boolean_equals?(
|
35
|
+
if Aws::Endpoints::Matchers.boolean_equals?(Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"), true)
|
36
36
|
return Aws::Endpoints::Endpoint.new(url: "https://kms-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
37
37
|
end
|
38
38
|
raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
|
@@ -25,16 +25,17 @@ module Aws::KMS
|
|
25
25
|
# @api private
|
26
26
|
class Handler < Seahorse::Client::Handler
|
27
27
|
def call(context)
|
28
|
-
# If endpoint was discovered, do not resolve or apply the endpoint.
|
29
28
|
unless context[:discovered_endpoint]
|
30
29
|
params = parameters_for_operation(context)
|
31
30
|
endpoint = context.config.endpoint_provider.resolve_endpoint(params)
|
32
31
|
|
33
32
|
context.http_request.endpoint = endpoint.url
|
34
33
|
apply_endpoint_headers(context, endpoint.headers)
|
34
|
+
|
35
|
+
context[:endpoint_params] = params
|
36
|
+
context[:endpoint_properties] = endpoint.properties
|
35
37
|
end
|
36
38
|
|
37
|
-
context[:endpoint_params] = params
|
38
39
|
context[:auth_scheme] =
|
39
40
|
Aws::Endpoints.resolve_auth_scheme(context, endpoint)
|
40
41
|
|
data/lib/aws-sdk-kms/types.rb
CHANGED
@@ -418,7 +418,7 @@ module Aws::KMS
|
|
418
418
|
#
|
419
419
|
# * An external key store with `PUBLIC_ENDPOINT` connectivity cannot
|
420
420
|
# use the same `XksProxyUriEndpoint` value as an external key store
|
421
|
-
# with `VPC_ENDPOINT_SERVICE` connectivity in
|
421
|
+
# with `VPC_ENDPOINT_SERVICE` connectivity in this Amazon Web
|
422
422
|
# Services Region.
|
423
423
|
#
|
424
424
|
# * Each external key store with `VPC_ENDPOINT_SERVICE` connectivity
|
@@ -992,12 +992,13 @@ module Aws::KMS
|
|
992
992
|
# Management Service Developer Guide*.
|
993
993
|
#
|
994
994
|
# Use this parameter only when you intend to prevent the principal
|
995
|
-
# that is making the request from making a subsequent
|
996
|
-
# request on the KMS key.
|
995
|
+
# that is making the request from making a subsequent
|
996
|
+
# [PutKeyPolicy][2] request on the KMS key.
|
997
997
|
#
|
998
998
|
#
|
999
999
|
#
|
1000
1000
|
# [1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key
|
1001
|
+
# [2]: https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html
|
1001
1002
|
# @return [Boolean]
|
1002
1003
|
#
|
1003
1004
|
# @!attribute [rw] tags
|
@@ -1596,7 +1597,7 @@ module Aws::KMS
|
|
1596
1597
|
#
|
1597
1598
|
#
|
1598
1599
|
#
|
1599
|
-
# [1]: https://docs.aws.amazon.com/
|
1600
|
+
# [1]: https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave-concepts.html#term-attestdoc
|
1600
1601
|
# [2]: https://docs.aws.amazon.com/enclaves/latest/user/developing-applications.html#sdk
|
1601
1602
|
# [3]: https://docs.aws.amazon.com/kms/latest/developerguide/services-nitro-enclaves.html
|
1602
1603
|
# @return [Types::RecipientInfo]
|
@@ -3167,8 +3168,8 @@ module Aws::KMS
|
|
3167
3168
|
# You cannot use the RSAES\_OAEP\_SHA\_1 wrapping algorithm with the
|
3168
3169
|
# RSA\_2048 wrapping key spec to wrap ECC\_NIST\_P521 key material.
|
3169
3170
|
#
|
3170
|
-
# * **RSAES\_PKCS1\_V1\_5** (Deprecated) —
|
3171
|
-
#
|
3171
|
+
# * **RSAES\_PKCS1\_V1\_5** (Deprecated) — As of October 10, 2023, KMS
|
3172
|
+
# does not support the RSAES\_PKCS1\_V1\_5 wrapping algorithm.
|
3172
3173
|
# @return [String]
|
3173
3174
|
#
|
3174
3175
|
# @!attribute [rw] wrapping_key_spec
|
@@ -4710,12 +4711,13 @@ module Aws::KMS
|
|
4710
4711
|
# Management Service Developer Guide*.
|
4711
4712
|
#
|
4712
4713
|
# Use this parameter only when you intend to prevent the principal
|
4713
|
-
# that is making the request from making a subsequent
|
4714
|
-
# request on the KMS key.
|
4714
|
+
# that is making the request from making a subsequent
|
4715
|
+
# [PutKeyPolicy][2] request on the KMS key.
|
4715
4716
|
#
|
4716
4717
|
#
|
4717
4718
|
#
|
4718
4719
|
# [1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key
|
4720
|
+
# [2]: https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html
|
4719
4721
|
# @return [Boolean]
|
4720
4722
|
#
|
4721
4723
|
# @see http://docs.aws.amazon.com/goto/WebAPI/kms-2014-11-01/PutKeyPolicyRequest AWS API Documentation
|
@@ -5107,12 +5109,13 @@ module Aws::KMS
|
|
5107
5109
|
# Management Service Developer Guide*.
|
5108
5110
|
#
|
5109
5111
|
# Use this parameter only when you intend to prevent the principal
|
5110
|
-
# that is making the request from making a subsequent
|
5111
|
-
# request on the KMS key.
|
5112
|
+
# that is making the request from making a subsequent
|
5113
|
+
# [PutKeyPolicy][2] request on the KMS key.
|
5112
5114
|
#
|
5113
5115
|
#
|
5114
5116
|
#
|
5115
5117
|
# [1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key
|
5118
|
+
# [2]: https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html
|
5116
5119
|
# @return [Boolean]
|
5117
5120
|
#
|
5118
5121
|
# @!attribute [rw] description
|
@@ -6243,9 +6246,9 @@ module Aws::KMS
|
|
6243
6246
|
end
|
6244
6247
|
|
6245
6248
|
# The request was rejected because the (`XksKeyId`) is already
|
6246
|
-
# associated with
|
6247
|
-
# an external key store must be associated with a different
|
6248
|
-
# key.
|
6249
|
+
# associated with another KMS key in this external key store. Each KMS
|
6250
|
+
# key in an external key store must be associated with a different
|
6251
|
+
# external key.
|
6249
6252
|
#
|
6250
6253
|
# @!attribute [rw] message
|
6251
6254
|
# @return [String]
|
@@ -6424,9 +6427,9 @@ module Aws::KMS
|
|
6424
6427
|
include Aws::Structure
|
6425
6428
|
end
|
6426
6429
|
|
6427
|
-
# The request was rejected because the
|
6428
|
-
#
|
6429
|
-
#
|
6430
|
+
# The request was rejected because the external key store proxy is not
|
6431
|
+
# configured correctly. To identify the cause, see the error message
|
6432
|
+
# that accompanies the exception.
|
6430
6433
|
#
|
6431
6434
|
# @!attribute [rw] message
|
6432
6435
|
# @return [String]
|
@@ -6455,11 +6458,10 @@ module Aws::KMS
|
|
6455
6458
|
include Aws::Structure
|
6456
6459
|
end
|
6457
6460
|
|
6458
|
-
# The request was rejected because the
|
6459
|
-
#
|
6460
|
-
#
|
6461
|
-
#
|
6462
|
-
# address.
|
6461
|
+
# The request was rejected because the `XksProxyUriEndpoint` is already
|
6462
|
+
# associated with another external key store in this Amazon Web Services
|
6463
|
+
# Region. To identify the cause, see the error message that accompanies
|
6464
|
+
# the exception.
|
6463
6465
|
#
|
6464
6466
|
# @!attribute [rw] message
|
6465
6467
|
# @return [String]
|
@@ -6474,9 +6476,9 @@ module Aws::KMS
|
|
6474
6476
|
|
6475
6477
|
# The request was rejected because the concatenation of the
|
6476
6478
|
# `XksProxyUriEndpoint` and `XksProxyUriPath` is already associated with
|
6477
|
-
#
|
6478
|
-
#
|
6479
|
-
#
|
6479
|
+
# another external key store in this Amazon Web Services Region. Each
|
6480
|
+
# external key store in a Region must use a unique external key store
|
6481
|
+
# proxy API address.
|
6480
6482
|
#
|
6481
6483
|
# @!attribute [rw] message
|
6482
6484
|
# @return [String]
|
@@ -6509,10 +6511,9 @@ module Aws::KMS
|
|
6509
6511
|
end
|
6510
6512
|
|
6511
6513
|
# The request was rejected because the specified Amazon VPC endpoint
|
6512
|
-
# service is already associated with
|
6513
|
-
# Web Services
|
6514
|
-
#
|
6515
|
-
# endpoint service.
|
6514
|
+
# service is already associated with another external key store in this
|
6515
|
+
# Amazon Web Services Region. Each external key store in a Region must
|
6516
|
+
# use a different Amazon VPC endpoint service.
|
6516
6517
|
#
|
6517
6518
|
# @!attribute [rw] message
|
6518
6519
|
# @return [String]
|
@@ -6527,10 +6528,13 @@ module Aws::KMS
|
|
6527
6528
|
|
6528
6529
|
# The request was rejected because the Amazon VPC endpoint service
|
6529
6530
|
# configuration does not fulfill the requirements for an external key
|
6530
|
-
# store
|
6531
|
-
# requirements]
|
6532
|
-
#
|
6533
|
-
#
|
6531
|
+
# store. To identify the cause, see the error message that accompanies
|
6532
|
+
# the exception and [review the requirements][1] for Amazon VPC endpoint
|
6533
|
+
# service connectivity for an external key store.
|
6534
|
+
#
|
6535
|
+
#
|
6536
|
+
#
|
6537
|
+
# [1]: https://docs.aws.amazon.com/kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements
|
6534
6538
|
#
|
6535
6539
|
# @!attribute [rw] message
|
6536
6540
|
# @return [String]
|
data/lib/aws-sdk-kms.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-kms
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.76.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2024-01-05 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|