aws-sdk-kms 1.94.0 → 1.118.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +120 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-kms/client.rb +1152 -777
- data/lib/aws-sdk-kms/client_api.rb +41 -4
- data/lib/aws-sdk-kms/customizations.rb +0 -8
- data/lib/aws-sdk-kms/endpoint_parameters.rb +13 -10
- data/lib/aws-sdk-kms/endpoint_provider.rb +13 -17
- data/lib/aws-sdk-kms/endpoints.rb +2 -581
- data/lib/aws-sdk-kms/plugins/endpoints.rb +1 -112
- data/lib/aws-sdk-kms/types.rb +707 -330
- data/lib/aws-sdk-kms.rb +1 -1
- data/sig/client.rbs +41 -17
- data/sig/resource.rbs +3 -0
- data/sig/types.rbs +47 -16
- metadata +6 -9
|
@@ -15,6 +15,7 @@ module Aws::KMS
|
|
|
15
15
|
include Seahorse::Model
|
|
16
16
|
|
|
17
17
|
AWSAccountIdType = Shapes::StringShape.new(name: 'AWSAccountIdType')
|
|
18
|
+
AccountIdType = Shapes::StringShape.new(name: 'AccountIdType')
|
|
18
19
|
AlgorithmSpec = Shapes::StringShape.new(name: 'AlgorithmSpec')
|
|
19
20
|
AliasList = Shapes::ListShape.new(name: 'AliasList')
|
|
20
21
|
AliasListEntry = Shapes::StructureShape.new(name: 'AliasListEntry')
|
|
@@ -22,6 +23,8 @@ module Aws::KMS
|
|
|
22
23
|
AlreadyExistsException = Shapes::StructureShape.new(name: 'AlreadyExistsException')
|
|
23
24
|
ArnType = Shapes::StringShape.new(name: 'ArnType')
|
|
24
25
|
AttestationDocumentType = Shapes::BlobShape.new(name: 'AttestationDocumentType')
|
|
26
|
+
BackingKeyIdResponseType = Shapes::StringShape.new(name: 'BackingKeyIdResponseType')
|
|
27
|
+
BackingKeyIdType = Shapes::StringShape.new(name: 'BackingKeyIdType')
|
|
25
28
|
BooleanType = Shapes::BooleanShape.new(name: 'BooleanType')
|
|
26
29
|
CancelKeyDeletionRequest = Shapes::StructureShape.new(name: 'CancelKeyDeletionRequest')
|
|
27
30
|
CancelKeyDeletionResponse = Shapes::StructureShape.new(name: 'CancelKeyDeletionResponse')
|
|
@@ -63,6 +66,7 @@ module Aws::KMS
|
|
|
63
66
|
DeleteCustomKeyStoreRequest = Shapes::StructureShape.new(name: 'DeleteCustomKeyStoreRequest')
|
|
64
67
|
DeleteCustomKeyStoreResponse = Shapes::StructureShape.new(name: 'DeleteCustomKeyStoreResponse')
|
|
65
68
|
DeleteImportedKeyMaterialRequest = Shapes::StructureShape.new(name: 'DeleteImportedKeyMaterialRequest')
|
|
69
|
+
DeleteImportedKeyMaterialResponse = Shapes::StructureShape.new(name: 'DeleteImportedKeyMaterialResponse')
|
|
66
70
|
DependencyTimeoutException = Shapes::StructureShape.new(name: 'DependencyTimeoutException')
|
|
67
71
|
DeriveSharedSecretRequest = Shapes::StructureShape.new(name: 'DeriveSharedSecretRequest')
|
|
68
72
|
DeriveSharedSecretResponse = Shapes::StructureShape.new(name: 'DeriveSharedSecretResponse')
|
|
@@ -120,6 +124,9 @@ module Aws::KMS
|
|
|
120
124
|
GrantTokenType = Shapes::StringShape.new(name: 'GrantTokenType')
|
|
121
125
|
ImportKeyMaterialRequest = Shapes::StructureShape.new(name: 'ImportKeyMaterialRequest')
|
|
122
126
|
ImportKeyMaterialResponse = Shapes::StructureShape.new(name: 'ImportKeyMaterialResponse')
|
|
127
|
+
ImportState = Shapes::StringShape.new(name: 'ImportState')
|
|
128
|
+
ImportType = Shapes::StringShape.new(name: 'ImportType')
|
|
129
|
+
IncludeKeyMaterial = Shapes::StringShape.new(name: 'IncludeKeyMaterial')
|
|
123
130
|
IncorrectKeyException = Shapes::StructureShape.new(name: 'IncorrectKeyException')
|
|
124
131
|
IncorrectKeyMaterialException = Shapes::StructureShape.new(name: 'IncorrectKeyMaterialException')
|
|
125
132
|
IncorrectTrustAnchorException = Shapes::StructureShape.new(name: 'IncorrectTrustAnchorException')
|
|
@@ -142,6 +149,8 @@ module Aws::KMS
|
|
|
142
149
|
KeyList = Shapes::ListShape.new(name: 'KeyList')
|
|
143
150
|
KeyListEntry = Shapes::StructureShape.new(name: 'KeyListEntry')
|
|
144
151
|
KeyManagerType = Shapes::StringShape.new(name: 'KeyManagerType')
|
|
152
|
+
KeyMaterialDescriptionType = Shapes::StringShape.new(name: 'KeyMaterialDescriptionType')
|
|
153
|
+
KeyMaterialState = Shapes::StringShape.new(name: 'KeyMaterialState')
|
|
145
154
|
KeyMetadata = Shapes::StructureShape.new(name: 'KeyMetadata')
|
|
146
155
|
KeySpec = Shapes::StringShape.new(name: 'KeySpec')
|
|
147
156
|
KeyState = Shapes::StringShape.new(name: 'KeyState')
|
|
@@ -300,6 +309,7 @@ module Aws::KMS
|
|
|
300
309
|
CreateCustomKeyStoreRequest.add_member(:xks_proxy_uri_endpoint, Shapes::ShapeRef.new(shape: XksProxyUriEndpointType, location_name: "XksProxyUriEndpoint"))
|
|
301
310
|
CreateCustomKeyStoreRequest.add_member(:xks_proxy_uri_path, Shapes::ShapeRef.new(shape: XksProxyUriPathType, location_name: "XksProxyUriPath"))
|
|
302
311
|
CreateCustomKeyStoreRequest.add_member(:xks_proxy_vpc_endpoint_service_name, Shapes::ShapeRef.new(shape: XksProxyVpcEndpointServiceNameType, location_name: "XksProxyVpcEndpointServiceName"))
|
|
312
|
+
CreateCustomKeyStoreRequest.add_member(:xks_proxy_vpc_endpoint_service_owner, Shapes::ShapeRef.new(shape: AccountIdType, location_name: "XksProxyVpcEndpointServiceOwner"))
|
|
303
313
|
CreateCustomKeyStoreRequest.add_member(:xks_proxy_authentication_credential, Shapes::ShapeRef.new(shape: XksProxyAuthenticationCredentialType, location_name: "XksProxyAuthenticationCredential"))
|
|
304
314
|
CreateCustomKeyStoreRequest.add_member(:xks_proxy_connectivity, Shapes::ShapeRef.new(shape: XksProxyConnectivityType, location_name: "XksProxyConnectivity"))
|
|
305
315
|
CreateCustomKeyStoreRequest.struct_class = Types::CreateCustomKeyStoreRequest
|
|
@@ -324,7 +334,7 @@ module Aws::KMS
|
|
|
324
334
|
CreateKeyRequest.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyType, location_name: "Policy"))
|
|
325
335
|
CreateKeyRequest.add_member(:description, Shapes::ShapeRef.new(shape: DescriptionType, location_name: "Description"))
|
|
326
336
|
CreateKeyRequest.add_member(:key_usage, Shapes::ShapeRef.new(shape: KeyUsageType, location_name: "KeyUsage"))
|
|
327
|
-
CreateKeyRequest.add_member(:customer_master_key_spec, Shapes::ShapeRef.new(shape: CustomerMasterKeySpec, deprecated: true, location_name: "CustomerMasterKeySpec", metadata: {"deprecatedMessage"=>"This parameter has been deprecated. Instead, use the KeySpec parameter."}))
|
|
337
|
+
CreateKeyRequest.add_member(:customer_master_key_spec, Shapes::ShapeRef.new(shape: CustomerMasterKeySpec, deprecated: true, location_name: "CustomerMasterKeySpec", metadata: {"deprecatedMessage" => "This parameter has been deprecated. Instead, use the KeySpec parameter."}))
|
|
328
338
|
CreateKeyRequest.add_member(:key_spec, Shapes::ShapeRef.new(shape: KeySpec, location_name: "KeySpec"))
|
|
329
339
|
CreateKeyRequest.add_member(:origin, Shapes::ShapeRef.new(shape: OriginType, location_name: "Origin"))
|
|
330
340
|
CreateKeyRequest.add_member(:custom_key_store_id, Shapes::ShapeRef.new(shape: CustomKeyStoreIdType, location_name: "CustomKeyStoreId"))
|
|
@@ -375,6 +385,7 @@ module Aws::KMS
|
|
|
375
385
|
DecryptResponse.add_member(:plaintext, Shapes::ShapeRef.new(shape: PlaintextType, location_name: "Plaintext"))
|
|
376
386
|
DecryptResponse.add_member(:encryption_algorithm, Shapes::ShapeRef.new(shape: EncryptionAlgorithmSpec, location_name: "EncryptionAlgorithm"))
|
|
377
387
|
DecryptResponse.add_member(:ciphertext_for_recipient, Shapes::ShapeRef.new(shape: CiphertextType, location_name: "CiphertextForRecipient"))
|
|
388
|
+
DecryptResponse.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
378
389
|
DecryptResponse.struct_class = Types::DecryptResponse
|
|
379
390
|
|
|
380
391
|
DeleteAliasRequest.add_member(:alias_name, Shapes::ShapeRef.new(shape: AliasNameType, required: true, location_name: "AliasName"))
|
|
@@ -386,8 +397,13 @@ module Aws::KMS
|
|
|
386
397
|
DeleteCustomKeyStoreResponse.struct_class = Types::DeleteCustomKeyStoreResponse
|
|
387
398
|
|
|
388
399
|
DeleteImportedKeyMaterialRequest.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, required: true, location_name: "KeyId"))
|
|
400
|
+
DeleteImportedKeyMaterialRequest.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
389
401
|
DeleteImportedKeyMaterialRequest.struct_class = Types::DeleteImportedKeyMaterialRequest
|
|
390
402
|
|
|
403
|
+
DeleteImportedKeyMaterialResponse.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
404
|
+
DeleteImportedKeyMaterialResponse.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdResponseType, location_name: "KeyMaterialId"))
|
|
405
|
+
DeleteImportedKeyMaterialResponse.struct_class = Types::DeleteImportedKeyMaterialResponse
|
|
406
|
+
|
|
391
407
|
DependencyTimeoutException.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessageType, location_name: "message"))
|
|
392
408
|
DependencyTimeoutException.struct_class = Types::DependencyTimeoutException
|
|
393
409
|
|
|
@@ -483,6 +499,7 @@ module Aws::KMS
|
|
|
483
499
|
GenerateDataKeyPairResponse.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
484
500
|
GenerateDataKeyPairResponse.add_member(:key_pair_spec, Shapes::ShapeRef.new(shape: DataKeyPairSpec, location_name: "KeyPairSpec"))
|
|
485
501
|
GenerateDataKeyPairResponse.add_member(:ciphertext_for_recipient, Shapes::ShapeRef.new(shape: CiphertextType, location_name: "CiphertextForRecipient"))
|
|
502
|
+
GenerateDataKeyPairResponse.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
486
503
|
GenerateDataKeyPairResponse.struct_class = Types::GenerateDataKeyPairResponse
|
|
487
504
|
|
|
488
505
|
GenerateDataKeyPairWithoutPlaintextRequest.add_member(:encryption_context, Shapes::ShapeRef.new(shape: EncryptionContextType, location_name: "EncryptionContext"))
|
|
@@ -496,6 +513,7 @@ module Aws::KMS
|
|
|
496
513
|
GenerateDataKeyPairWithoutPlaintextResponse.add_member(:public_key, Shapes::ShapeRef.new(shape: PublicKeyType, location_name: "PublicKey"))
|
|
497
514
|
GenerateDataKeyPairWithoutPlaintextResponse.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
498
515
|
GenerateDataKeyPairWithoutPlaintextResponse.add_member(:key_pair_spec, Shapes::ShapeRef.new(shape: DataKeyPairSpec, location_name: "KeyPairSpec"))
|
|
516
|
+
GenerateDataKeyPairWithoutPlaintextResponse.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
499
517
|
GenerateDataKeyPairWithoutPlaintextResponse.struct_class = Types::GenerateDataKeyPairWithoutPlaintextResponse
|
|
500
518
|
|
|
501
519
|
GenerateDataKeyRequest.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, required: true, location_name: "KeyId"))
|
|
@@ -511,6 +529,7 @@ module Aws::KMS
|
|
|
511
529
|
GenerateDataKeyResponse.add_member(:plaintext, Shapes::ShapeRef.new(shape: PlaintextType, location_name: "Plaintext"))
|
|
512
530
|
GenerateDataKeyResponse.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
513
531
|
GenerateDataKeyResponse.add_member(:ciphertext_for_recipient, Shapes::ShapeRef.new(shape: CiphertextType, location_name: "CiphertextForRecipient"))
|
|
532
|
+
GenerateDataKeyResponse.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
514
533
|
GenerateDataKeyResponse.struct_class = Types::GenerateDataKeyResponse
|
|
515
534
|
|
|
516
535
|
GenerateDataKeyWithoutPlaintextRequest.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, required: true, location_name: "KeyId"))
|
|
@@ -523,6 +542,7 @@ module Aws::KMS
|
|
|
523
542
|
|
|
524
543
|
GenerateDataKeyWithoutPlaintextResponse.add_member(:ciphertext_blob, Shapes::ShapeRef.new(shape: CiphertextType, location_name: "CiphertextBlob"))
|
|
525
544
|
GenerateDataKeyWithoutPlaintextResponse.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
545
|
+
GenerateDataKeyWithoutPlaintextResponse.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
526
546
|
GenerateDataKeyWithoutPlaintextResponse.struct_class = Types::GenerateDataKeyWithoutPlaintextResponse
|
|
527
547
|
|
|
528
548
|
GenerateMacRequest.add_member(:message, Shapes::ShapeRef.new(shape: PlaintextType, required: true, location_name: "Message"))
|
|
@@ -581,7 +601,7 @@ module Aws::KMS
|
|
|
581
601
|
|
|
582
602
|
GetPublicKeyResponse.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
583
603
|
GetPublicKeyResponse.add_member(:public_key, Shapes::ShapeRef.new(shape: PublicKeyType, location_name: "PublicKey"))
|
|
584
|
-
GetPublicKeyResponse.add_member(:customer_master_key_spec, Shapes::ShapeRef.new(shape: CustomerMasterKeySpec, deprecated: true, location_name: "CustomerMasterKeySpec", metadata: {"deprecatedMessage"=>"This field has been deprecated. Instead, use the KeySpec field."}))
|
|
604
|
+
GetPublicKeyResponse.add_member(:customer_master_key_spec, Shapes::ShapeRef.new(shape: CustomerMasterKeySpec, deprecated: true, location_name: "CustomerMasterKeySpec", metadata: {"deprecatedMessage" => "This field has been deprecated. Instead, use the KeySpec field."}))
|
|
585
605
|
GetPublicKeyResponse.add_member(:key_spec, Shapes::ShapeRef.new(shape: KeySpec, location_name: "KeySpec"))
|
|
586
606
|
GetPublicKeyResponse.add_member(:key_usage, Shapes::ShapeRef.new(shape: KeyUsageType, location_name: "KeyUsage"))
|
|
587
607
|
GetPublicKeyResponse.add_member(:encryption_algorithms, Shapes::ShapeRef.new(shape: EncryptionAlgorithmSpecList, location_name: "EncryptionAlgorithms"))
|
|
@@ -615,8 +635,13 @@ module Aws::KMS
|
|
|
615
635
|
ImportKeyMaterialRequest.add_member(:encrypted_key_material, Shapes::ShapeRef.new(shape: CiphertextType, required: true, location_name: "EncryptedKeyMaterial"))
|
|
616
636
|
ImportKeyMaterialRequest.add_member(:valid_to, Shapes::ShapeRef.new(shape: DateType, location_name: "ValidTo"))
|
|
617
637
|
ImportKeyMaterialRequest.add_member(:expiration_model, Shapes::ShapeRef.new(shape: ExpirationModelType, location_name: "ExpirationModel"))
|
|
638
|
+
ImportKeyMaterialRequest.add_member(:import_type, Shapes::ShapeRef.new(shape: ImportType, location_name: "ImportType"))
|
|
639
|
+
ImportKeyMaterialRequest.add_member(:key_material_description, Shapes::ShapeRef.new(shape: KeyMaterialDescriptionType, location_name: "KeyMaterialDescription"))
|
|
640
|
+
ImportKeyMaterialRequest.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
618
641
|
ImportKeyMaterialRequest.struct_class = Types::ImportKeyMaterialRequest
|
|
619
642
|
|
|
643
|
+
ImportKeyMaterialResponse.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
644
|
+
ImportKeyMaterialResponse.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
620
645
|
ImportKeyMaterialResponse.struct_class = Types::ImportKeyMaterialResponse
|
|
621
646
|
|
|
622
647
|
IncorrectKeyException.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessageType, location_name: "message"))
|
|
@@ -687,7 +712,7 @@ module Aws::KMS
|
|
|
687
712
|
KeyMetadata.add_member(:cloud_hsm_cluster_id, Shapes::ShapeRef.new(shape: CloudHsmClusterIdType, location_name: "CloudHsmClusterId"))
|
|
688
713
|
KeyMetadata.add_member(:expiration_model, Shapes::ShapeRef.new(shape: ExpirationModelType, location_name: "ExpirationModel"))
|
|
689
714
|
KeyMetadata.add_member(:key_manager, Shapes::ShapeRef.new(shape: KeyManagerType, location_name: "KeyManager"))
|
|
690
|
-
KeyMetadata.add_member(:customer_master_key_spec, Shapes::ShapeRef.new(shape: CustomerMasterKeySpec, deprecated: true, location_name: "CustomerMasterKeySpec", metadata: {"deprecatedMessage"=>"This field has been deprecated. Instead, use the KeySpec field."}))
|
|
715
|
+
KeyMetadata.add_member(:customer_master_key_spec, Shapes::ShapeRef.new(shape: CustomerMasterKeySpec, deprecated: true, location_name: "CustomerMasterKeySpec", metadata: {"deprecatedMessage" => "This field has been deprecated. Instead, use the KeySpec field."}))
|
|
691
716
|
KeyMetadata.add_member(:key_spec, Shapes::ShapeRef.new(shape: KeySpec, location_name: "KeySpec"))
|
|
692
717
|
KeyMetadata.add_member(:encryption_algorithms, Shapes::ShapeRef.new(shape: EncryptionAlgorithmSpecList, location_name: "EncryptionAlgorithms"))
|
|
693
718
|
KeyMetadata.add_member(:signing_algorithms, Shapes::ShapeRef.new(shape: SigningAlgorithmSpecList, location_name: "SigningAlgorithms"))
|
|
@@ -697,6 +722,7 @@ module Aws::KMS
|
|
|
697
722
|
KeyMetadata.add_member(:pending_deletion_window_in_days, Shapes::ShapeRef.new(shape: PendingWindowInDaysType, location_name: "PendingDeletionWindowInDays"))
|
|
698
723
|
KeyMetadata.add_member(:mac_algorithms, Shapes::ShapeRef.new(shape: MacAlgorithmSpecList, location_name: "MacAlgorithms"))
|
|
699
724
|
KeyMetadata.add_member(:xks_key_configuration, Shapes::ShapeRef.new(shape: XksKeyConfigurationType, location_name: "XksKeyConfiguration"))
|
|
725
|
+
KeyMetadata.add_member(:current_key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "CurrentKeyMaterialId"))
|
|
700
726
|
KeyMetadata.struct_class = Types::KeyMetadata
|
|
701
727
|
|
|
702
728
|
KeyUnavailableException.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessageType, location_name: "message"))
|
|
@@ -738,6 +764,7 @@ module Aws::KMS
|
|
|
738
764
|
ListKeyPoliciesResponse.struct_class = Types::ListKeyPoliciesResponse
|
|
739
765
|
|
|
740
766
|
ListKeyRotationsRequest.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, required: true, location_name: "KeyId"))
|
|
767
|
+
ListKeyRotationsRequest.add_member(:include_key_material, Shapes::ShapeRef.new(shape: IncludeKeyMaterial, location_name: "IncludeKeyMaterial"))
|
|
741
768
|
ListKeyRotationsRequest.add_member(:limit, Shapes::ShapeRef.new(shape: LimitType, location_name: "Limit"))
|
|
742
769
|
ListKeyRotationsRequest.add_member(:marker, Shapes::ShapeRef.new(shape: MarkerType, location_name: "Marker"))
|
|
743
770
|
ListKeyRotationsRequest.struct_class = Types::ListKeyRotationsRequest
|
|
@@ -814,6 +841,8 @@ module Aws::KMS
|
|
|
814
841
|
ReEncryptResponse.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
815
842
|
ReEncryptResponse.add_member(:source_encryption_algorithm, Shapes::ShapeRef.new(shape: EncryptionAlgorithmSpec, location_name: "SourceEncryptionAlgorithm"))
|
|
816
843
|
ReEncryptResponse.add_member(:destination_encryption_algorithm, Shapes::ShapeRef.new(shape: EncryptionAlgorithmSpec, location_name: "DestinationEncryptionAlgorithm"))
|
|
844
|
+
ReEncryptResponse.add_member(:source_key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "SourceKeyMaterialId"))
|
|
845
|
+
ReEncryptResponse.add_member(:destination_key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "DestinationKeyMaterialId"))
|
|
817
846
|
ReEncryptResponse.struct_class = Types::ReEncryptResponse
|
|
818
847
|
|
|
819
848
|
RecipientInfo.add_member(:key_encryption_algorithm, Shapes::ShapeRef.new(shape: KeyEncryptionMechanism, location_name: "KeyEncryptionAlgorithm"))
|
|
@@ -853,6 +882,12 @@ module Aws::KMS
|
|
|
853
882
|
RotationsList.member = Shapes::ShapeRef.new(shape: RotationsListEntry)
|
|
854
883
|
|
|
855
884
|
RotationsListEntry.add_member(:key_id, Shapes::ShapeRef.new(shape: KeyIdType, location_name: "KeyId"))
|
|
885
|
+
RotationsListEntry.add_member(:key_material_id, Shapes::ShapeRef.new(shape: BackingKeyIdType, location_name: "KeyMaterialId"))
|
|
886
|
+
RotationsListEntry.add_member(:key_material_description, Shapes::ShapeRef.new(shape: KeyMaterialDescriptionType, location_name: "KeyMaterialDescription"))
|
|
887
|
+
RotationsListEntry.add_member(:import_state, Shapes::ShapeRef.new(shape: ImportState, location_name: "ImportState"))
|
|
888
|
+
RotationsListEntry.add_member(:key_material_state, Shapes::ShapeRef.new(shape: KeyMaterialState, location_name: "KeyMaterialState"))
|
|
889
|
+
RotationsListEntry.add_member(:expiration_model, Shapes::ShapeRef.new(shape: ExpirationModelType, location_name: "ExpirationModel"))
|
|
890
|
+
RotationsListEntry.add_member(:valid_to, Shapes::ShapeRef.new(shape: DateType, location_name: "ValidTo"))
|
|
856
891
|
RotationsListEntry.add_member(:rotation_date, Shapes::ShapeRef.new(shape: DateType, location_name: "RotationDate"))
|
|
857
892
|
RotationsListEntry.add_member(:rotation_type, Shapes::ShapeRef.new(shape: RotationType, location_name: "RotationType"))
|
|
858
893
|
RotationsListEntry.struct_class = Types::RotationsListEntry
|
|
@@ -915,6 +950,7 @@ module Aws::KMS
|
|
|
915
950
|
UpdateCustomKeyStoreRequest.add_member(:xks_proxy_uri_endpoint, Shapes::ShapeRef.new(shape: XksProxyUriEndpointType, location_name: "XksProxyUriEndpoint"))
|
|
916
951
|
UpdateCustomKeyStoreRequest.add_member(:xks_proxy_uri_path, Shapes::ShapeRef.new(shape: XksProxyUriPathType, location_name: "XksProxyUriPath"))
|
|
917
952
|
UpdateCustomKeyStoreRequest.add_member(:xks_proxy_vpc_endpoint_service_name, Shapes::ShapeRef.new(shape: XksProxyVpcEndpointServiceNameType, location_name: "XksProxyVpcEndpointServiceName"))
|
|
953
|
+
UpdateCustomKeyStoreRequest.add_member(:xks_proxy_vpc_endpoint_service_owner, Shapes::ShapeRef.new(shape: AccountIdType, location_name: "XksProxyVpcEndpointServiceOwner"))
|
|
918
954
|
UpdateCustomKeyStoreRequest.add_member(:xks_proxy_authentication_credential, Shapes::ShapeRef.new(shape: XksProxyAuthenticationCredentialType, location_name: "XksProxyAuthenticationCredential"))
|
|
919
955
|
UpdateCustomKeyStoreRequest.add_member(:xks_proxy_connectivity, Shapes::ShapeRef.new(shape: XksProxyConnectivityType, location_name: "XksProxyConnectivity"))
|
|
920
956
|
UpdateCustomKeyStoreRequest.struct_class = Types::UpdateCustomKeyStoreRequest
|
|
@@ -977,6 +1013,7 @@ module Aws::KMS
|
|
|
977
1013
|
XksProxyConfigurationType.add_member(:uri_endpoint, Shapes::ShapeRef.new(shape: XksProxyUriEndpointType, location_name: "UriEndpoint"))
|
|
978
1014
|
XksProxyConfigurationType.add_member(:uri_path, Shapes::ShapeRef.new(shape: XksProxyUriPathType, location_name: "UriPath"))
|
|
979
1015
|
XksProxyConfigurationType.add_member(:vpc_endpoint_service_name, Shapes::ShapeRef.new(shape: XksProxyVpcEndpointServiceNameType, location_name: "VpcEndpointServiceName"))
|
|
1016
|
+
XksProxyConfigurationType.add_member(:vpc_endpoint_service_owner, Shapes::ShapeRef.new(shape: AccountIdType, location_name: "VpcEndpointServiceOwner"))
|
|
980
1017
|
XksProxyConfigurationType.struct_class = Types::XksProxyConfigurationType
|
|
981
1018
|
|
|
982
1019
|
XksProxyIncorrectAuthenticationCredentialException.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessageType, location_name: "message"))
|
|
@@ -1179,7 +1216,7 @@ module Aws::KMS
|
|
|
1179
1216
|
o.http_method = "POST"
|
|
1180
1217
|
o.http_request_uri = "/"
|
|
1181
1218
|
o.input = Shapes::ShapeRef.new(shape: DeleteImportedKeyMaterialRequest)
|
|
1182
|
-
o.output = Shapes::ShapeRef.new(shape:
|
|
1219
|
+
o.output = Shapes::ShapeRef.new(shape: DeleteImportedKeyMaterialResponse)
|
|
1183
1220
|
o.errors << Shapes::ShapeRef.new(shape: InvalidArnException)
|
|
1184
1221
|
o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
|
|
1185
1222
|
o.errors << Shapes::ShapeRef.new(shape: DependencyTimeoutException)
|
|
@@ -13,22 +13,22 @@ module Aws::KMS
|
|
|
13
13
|
# @!attribute region
|
|
14
14
|
# The AWS region used to dispatch the request.
|
|
15
15
|
#
|
|
16
|
-
# @return [
|
|
16
|
+
# @return [string]
|
|
17
17
|
#
|
|
18
18
|
# @!attribute use_dual_stack
|
|
19
19
|
# When true, use the dual-stack endpoint. If the configured endpoint does not support dual-stack, dispatching the request MAY return an error.
|
|
20
20
|
#
|
|
21
|
-
# @return [
|
|
21
|
+
# @return [boolean]
|
|
22
22
|
#
|
|
23
23
|
# @!attribute use_fips
|
|
24
24
|
# When true, send this request to the FIPS-compliant regional endpoint. If the configured endpoint does not have a FIPS compliant endpoint, dispatching the request will return an error.
|
|
25
25
|
#
|
|
26
|
-
# @return [
|
|
26
|
+
# @return [boolean]
|
|
27
27
|
#
|
|
28
28
|
# @!attribute endpoint
|
|
29
29
|
# Override the endpoint used to send this request
|
|
30
30
|
#
|
|
31
|
-
# @return [
|
|
31
|
+
# @return [string]
|
|
32
32
|
#
|
|
33
33
|
EndpointParameters = Struct.new(
|
|
34
34
|
:region,
|
|
@@ -52,15 +52,18 @@ module Aws::KMS
|
|
|
52
52
|
self[:region] = options[:region]
|
|
53
53
|
self[:use_dual_stack] = options[:use_dual_stack]
|
|
54
54
|
self[:use_dual_stack] = false if self[:use_dual_stack].nil?
|
|
55
|
-
if self[:use_dual_stack].nil?
|
|
56
|
-
raise ArgumentError, "Missing required EndpointParameter: :use_dual_stack"
|
|
57
|
-
end
|
|
58
55
|
self[:use_fips] = options[:use_fips]
|
|
59
56
|
self[:use_fips] = false if self[:use_fips].nil?
|
|
60
|
-
if self[:use_fips].nil?
|
|
61
|
-
raise ArgumentError, "Missing required EndpointParameter: :use_fips"
|
|
62
|
-
end
|
|
63
57
|
self[:endpoint] = options[:endpoint]
|
|
64
58
|
end
|
|
59
|
+
|
|
60
|
+
def self.create(config, options={})
|
|
61
|
+
new({
|
|
62
|
+
region: config.region,
|
|
63
|
+
use_dual_stack: config.use_dualstack_endpoint,
|
|
64
|
+
use_fips: config.use_fips_endpoint,
|
|
65
|
+
endpoint: (config.endpoint.to_s unless config.regional_endpoint),
|
|
66
|
+
}.merge(options))
|
|
67
|
+
end
|
|
65
68
|
end
|
|
66
69
|
end
|
|
@@ -10,40 +10,36 @@
|
|
|
10
10
|
module Aws::KMS
|
|
11
11
|
class EndpointProvider
|
|
12
12
|
def resolve_endpoint(parameters)
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
use_fips = parameters.use_fips
|
|
16
|
-
endpoint = parameters.endpoint
|
|
17
|
-
if Aws::Endpoints::Matchers.set?(endpoint)
|
|
18
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
|
13
|
+
if Aws::Endpoints::Matchers.set?(parameters.endpoint)
|
|
14
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
|
|
19
15
|
raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
|
|
20
16
|
end
|
|
21
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
|
17
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
|
22
18
|
raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
|
|
23
19
|
end
|
|
24
|
-
return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
|
|
20
|
+
return Aws::Endpoints::Endpoint.new(url: parameters.endpoint, headers: {}, properties: {})
|
|
25
21
|
end
|
|
26
|
-
if Aws::Endpoints::Matchers.set?(region)
|
|
27
|
-
if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
|
|
28
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
|
22
|
+
if Aws::Endpoints::Matchers.set?(parameters.region)
|
|
23
|
+
if (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region))
|
|
24
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
|
29
25
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
|
|
30
|
-
return Aws::Endpoints::Endpoint.new(url: "https://kms-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
|
26
|
+
return Aws::Endpoints::Endpoint.new(url: "https://kms-fips.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
|
31
27
|
end
|
|
32
28
|
raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
|
|
33
29
|
end
|
|
34
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
|
|
30
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
|
|
35
31
|
if Aws::Endpoints::Matchers.boolean_equals?(Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"), true)
|
|
36
|
-
return Aws::Endpoints::Endpoint.new(url: "https://kms-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
|
32
|
+
return Aws::Endpoints::Endpoint.new(url: "https://kms-fips.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
|
37
33
|
end
|
|
38
34
|
raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
|
|
39
35
|
end
|
|
40
|
-
if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
|
|
36
|
+
if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
|
|
41
37
|
if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
|
|
42
|
-
return Aws::Endpoints::Endpoint.new(url: "https://kms.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
|
38
|
+
return Aws::Endpoints::Endpoint.new(url: "https://kms.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
|
|
43
39
|
end
|
|
44
40
|
raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
|
|
45
41
|
end
|
|
46
|
-
return Aws::Endpoints::Endpoint.new(url: "https://kms.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
|
42
|
+
return Aws::Endpoints::Endpoint.new(url: "https://kms.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
|
|
47
43
|
end
|
|
48
44
|
end
|
|
49
45
|
raise ArgumentError, "Invalid Configuration: Missing Region"
|