aws-sdk-kms 1.28.0 → 1.29.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7a1d64a3a6d8bb465bd5c3723efd25dc66979b2a
-  data.tar.gz: 4d62486183f53d341fda59abe505fe5eb574066f
+  metadata.gz: 390a07e2032bb5b13eda47e864a9ed55c9274aa9
+  data.tar.gz: 69953b632d5845c997248f12b64fb627039c0a9e
 SHA512:
-  metadata.gz: d3c526c701cc03769192f049859da5944e5d9e038ffd967bfd49001c2c67970e77710f96c654653a3ac4c4fef27342a247b406902eeb9a6b95a86c5baf6cfdec
-  data.tar.gz: 6c1a94627d34371d991d31b314c60c7da194e554c408ff0fa3d2e44abf803af6885d03f1b2e171dd6ec22fbf30ddc100333f57fc82abb4311b0a14b7668905ba
+  metadata.gz: 67394aa6a7da595a5387944e31f3585a6a210b3724d19d35519d7403f030b6b23a7c2ee64e7755e6ba759ef27c86aae01fd1ce8918e030ecfb5b88aa0320b87e
+  data.tar.gz: 56b2a2843623751e0085783be6c4c48cc7d364396b4ca43f26059a558ad7d9b6ffb386701051380f5f13469c65dc2a037eb1d0252a1b5bcfb8148f886157b2b6

data/lib/aws-sdk-kms.rb

@@ -42,6 +42,6 @@ require_relative 'aws-sdk-kms/customizations'
 # @service
 module Aws::KMS
 
-  GEM_VERSION = '1.28.0'
+  GEM_VERSION = '1.29.0'
 
 end

data/lib/aws-sdk-kms/client.rb

@@ -1626,7 +1626,7 @@ module Aws::KMS
     #   resp.custom_key_stores[0].cloud_hsm_cluster_id #=> String
     #   resp.custom_key_stores[0].trust_anchor_certificate #=> String
     #   resp.custom_key_stores[0].connection_state #=> String, one of "CONNECTED", "CONNECTING", "FAILED", "DISCONNECTED", "DISCONNECTING"
-    #   resp.custom_key_stores[0].connection_error_code #=> String, one of "INVALID_CREDENTIALS", "CLUSTER_NOT_FOUND", "NETWORK_ERRORS", "INTERNAL_ERROR", "INSUFFICIENT_CLOUDHSM_HSMS", "USER_LOCKED_OUT", "USER_NOT_FOUND", "USER_LOGGED_IN"
+    #   resp.custom_key_stores[0].connection_error_code #=> String, one of "INVALID_CREDENTIALS", "CLUSTER_NOT_FOUND", "NETWORK_ERRORS", "INTERNAL_ERROR", "INSUFFICIENT_CLOUDHSM_HSMS", "USER_LOCKED_OUT", "USER_NOT_FOUND", "USER_LOGGED_IN", "SUBNET_NOT_FOUND"
     #   resp.custom_key_stores[0].creation_date #=> Time
     #   resp.next_marker #=> String
     #   resp.truncated #=> Boolean
@@ -4791,8 +4791,8 @@ module Aws::KMS
     #
     # @option params [String] :message_type
     #   Tells AWS KMS whether the value of the `Message` parameter is a
-    #   message or message digest. To indicate a message, enter `RAW`. To
-    #   indicate a message digest, enter `DIGEST`.
+    #   message or message digest. The default value, RAW, indicates a
+    #   message. To indicate a message digest, enter `DIGEST`.
     #
     # @option params [Array<String>] :grant_tokens
     #   A list of grant tokens.
@@ -5375,7 +5375,7 @@ module Aws::KMS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-kms'
-      context[:gem_version] = '1.28.0'
+      context[:gem_version] = '1.29.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-kms/types.rb

@@ -920,6 +920,15 @@ module Aws::KMS
     #   * `NETWORK_ERRORS` - Network errors are preventing AWS KMS from
     #     connecting to the custom key store.
     #
+    #   * `SUBNET_NOT_FOUND` - A subnet in the AWS CloudHSM cluster
+    #     configuration was deleted. If AWS KMS cannot find all of the
+    #     subnets that were configured for the cluster when the custom key
+    #     store was created, attempts to connect fail. To fix this error,
+    #     create a cluster from a backup and associate it with your custom
+    #     key store. This process includes selecting a VPC and subnets. For
+    #     details, see [How to Fix a Connection Failure][1] in the *AWS Key
+    #     Management Service Developer Guide*.
+    #
     #   * `USER_LOCKED_OUT` - The `kmsuser` CU account is locked out of the
     #     associated AWS CloudHSM cluster due to too many failed password
     #     attempts. Before you can connect your custom key store to its AWS
@@ -2382,14 +2391,16 @@ module Aws::KMS
     # @!attribute [rw] public_key
     #   The exported public key.
     #
-    #   This value is returned as a binary [Distinguished Encoding Rules][1]
-    #   (DER)-encoded object. To decode it, use an ASN.1 parsing tool, such
-    #   as [OpenSSL asn1parse][2].
+    #   The value is a DER-encoded X.509 public key, also known as
+    #   `SubjectPublicKeyInfo` (SPKI), as defined in [RFC 5280][1]. When you
+    #   use the HTTP API or the AWS CLI, the value is Base64-encoded.
+    #   Otherwise, it is not Base64-encoded.
+    #
+    #
     #
     #
     #
-    #   [1]: https://www.itu.int/ITU-T/studygroups/com17/languages/X.690-0207.pdf
-    #   [2]: https://www.openssl.org/docs/man1.0.2/man1/asn1parse.html
+    #   [1]: https://tools.ietf.org/html/rfc5280
     #   @return [String]
     #
     # @!attribute [rw] customer_master_key_spec
@@ -3988,8 +3999,8 @@ module Aws::KMS
     #
     # @!attribute [rw] message_type
     #   Tells AWS KMS whether the value of the `Message` parameter is a
-    #   message or message digest. To indicate a message, enter `RAW`. To
-    #   indicate a message digest, enter `DIGEST`.
+    #   message or message digest. The default value, RAW, indicates a
+    #   message. To indicate a message digest, enter `DIGEST`.
     #   @return [String]
     #
     # @!attribute [rw] grant_tokens
@@ -4028,6 +4039,23 @@ module Aws::KMS
     #
     # @!attribute [rw] signature
     #   The cryptographic signature that was generated for the message.
+    #
+    #   * When used with the supported RSA signing algorithms, the encoding
+    #     of this value is defined by [PKCS #1 in RFC 8017][1].
+    #
+    #   * When used with the `ECDSA_SHA_256`, `ECDSA_SHA_384`, or
+    #     `ECDSA_SHA_512` signing algorithms, this value is a DER-encoded
+    #     object as defined by ANS X9.62–2005 and [RFC 3279 Section
+    #     2.2.3][2]. This is the most commonly used signature format and is
+    #     appropriate for most uses.
+    #
+    #   When you use the HTTP API or the AWS CLI, the value is
+    #   Base64-encoded. Otherwise, it is not Base64-encoded.
+    #
+    #
+    #
+    #   [1]: https://tools.ietf.org/html/rfc8017
+    #   [2]: https://tools.ietf.org/html/rfc3279#section-2.2.3
     #   @return [String]
     #
     # @!attribute [rw] signing_algorithm

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-kms
 version: !ruby/object:Gem::Version
-  version: 1.28.0
+  version: 1.29.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-01-20 00:00:00.000000000 Z
+date: 2020-02-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core