aws-sdk-paymentcryptography 1.35.0 → 1.37.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +10 -0
  3. data/VERSION +1 -1
  4. data/lib/aws-sdk-paymentcryptography/client.rb +212 -111
  5. data/lib/aws-sdk-paymentcryptography/types.rb +50 -43
  6. data/lib/aws-sdk-paymentcryptography.rb +1 -1
  7. data/sig/client.rbs +14 -13
  8. data/sig/resource.rbs +1 -0
  9. data/sig/types.rbs +12 -12
  10. metadata +3 -3
data/lib/aws-sdk-paymentcryptography/types.rb CHANGED
@@ -151,8 +151,11 @@ module Aws::PaymentCryptography
151
151
  # @return [Array<Types::Tag>]
152
152
  #
153
153
  # @!attribute [rw] derive_key_usage
154
- # The cryptographic usage of an ECDH derived key as defined in section
155
- # A.5.2 of the TR-31 spec.
154
+ # The intended cryptographic usage of keys derived from the ECC key
155
+ # pair to be created.
156
+ #
157
+ # After creating an ECC key pair, you cannot change the intended
158
+ # cryptographic usage of keys derived from it using ECDH.
156
159
  # @return [String]
157
160
  #
158
161
  # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/CreateKeyInput AWS API Documentation
@@ -228,18 +231,20 @@ module Aws::PaymentCryptography
228
231
  include Aws::Structure
229
232
  end
230
233
 
231
- # Derivation data used to derive an ECDH key.
234
+ # The shared information used when deriving a key using ECDH.
232
235
  #
233
236
  # @note DiffieHellmanDerivationData is a union - when making an API calls you must set exactly one of the members.
234
237
  #
235
238
  # @!attribute [rw] shared_information
236
- # A byte string containing information that binds the ECDH derived key
237
- # to the two parties involved or to the context of the key.
239
+ # A string containing information that binds the ECDH derived key to
240
+ # the two parties involved or to the context of the key.
238
241
  #
239
242
  # It may include details like identities of the two parties deriving
240
243
  # the key, context of the operation, session IDs, and optionally a
241
- # nonce. It must not contain zero bytes, and re-using shared
242
- # information for multiple ECDH key derivations is not recommended.
244
+ # nonce. It must not contain zero bytes. It is not recommended to
245
+ # reuse shared information for multiple ECDH key derivations, as it
246
+ # could result in derived key material being the same across different
247
+ # derivations.
243
248
  # @return [String]
244
249
  #
245
250
  # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/DiffieHellmanDerivationData AWS API Documentation
@@ -283,37 +288,38 @@ module Aws::PaymentCryptography
283
288
  include Aws::Structure
284
289
  end
285
290
 
286
- # Parameter information for key material export using the asymmetric
287
- # ECDH key exchange method.
291
+ # Key derivation parameter information for key material export using
292
+ # asymmetric ECDH key exchange method.
288
293
  #
289
294
  # @!attribute [rw] private_key_identifier
290
- # The `keyARN` of the asymmetric ECC key.
295
+ # The `keyARN` of the asymmetric ECC key created within Amazon Web
296
+ # Services Payment Cryptography.
291
297
  # @return [String]
292
298
  #
293
299
  # @!attribute [rw] certificate_authority_public_key_identifier
294
- # The `keyARN` of the certificate that signed the client's
295
- # `PublicKeyCertificate`.
300
+ # The `keyARN` of the CA that signed the `PublicKeyCertificate` for
301
+ # the client's receiving ECC key pair.
296
302
  # @return [String]
297
303
  #
298
304
  # @!attribute [rw] public_key_certificate
299
- # The client's public key certificate in PEM format (base64 encoded)
300
- # to use for ECDH key derivation.
305
+ # The public key certificate of the client's receiving ECC key pair,
306
+ # in PEM format (base64 encoded), to use for ECDH key derivation.
301
307
  # @return [String]
302
308
  #
303
309
  # @!attribute [rw] derive_key_algorithm
304
- # The key algorithm of the derived ECDH key.
310
+ # The key algorithm of the shared derived ECDH key.
305
311
  # @return [String]
306
312
  #
307
313
  # @!attribute [rw] key_derivation_function
308
- # The key derivation function to use for deriving a key using ECDH.
314
+ # The key derivation function to use when deriving a key using ECDH.
309
315
  # @return [String]
310
316
  #
311
317
  # @!attribute [rw] key_derivation_hash_algorithm
312
- # The hash type to use for deriving a key using ECDH.
318
+ # The hash type to use when deriving a key using ECDH.
313
319
  # @return [String]
314
320
  #
315
321
  # @!attribute [rw] derivation_data
316
- # Derivation data used to derive an ECDH key.
322
+ # The shared information used when deriving a key using ECDH.
317
323
  # @return [Types::DiffieHellmanDerivationData]
318
324
  #
319
325
  # @!attribute [rw] key_block_headers
@@ -428,8 +434,8 @@ module Aws::PaymentCryptography
428
434
  # @return [Types::ExportKeyCryptogram]
429
435
  #
430
436
  # @!attribute [rw] diffie_hellman_tr_31_key_block
431
- # Parameter information for key material export using the asymmetric
432
- # ECDH key exchange method.
437
+ # Key derivation parameter information for key material export using
438
+ # asymmetric ECDH key exchange method.
433
439
  # @return [Types::ExportDiffieHellmanTr31KeyBlock]
434
440
  #
435
441
  # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/ExportKeyMaterial AWS API Documentation
@@ -505,7 +511,7 @@ module Aws::PaymentCryptography
505
511
  # Payment Cryptography. It also contains the signing key certificate
506
512
  # that will sign the wrapped key during TR-34 key block generation.
507
513
  # Call [GetParametersForExport][1] to receive an export token. It
508
- # expires after 7 days. You can use the same export token to export
514
+ # expires after 30 days. You can use the same export token to export
509
515
  # multiple keys from the same service account.
510
516
  #
511
517
  #
@@ -616,7 +622,7 @@ module Aws::PaymentCryptography
616
622
  # @!attribute [rw] signing_key_certificate
617
623
  # The signing key certificate in PEM format (base64 encoded) of the
618
624
  # public key for signature within the TR-34 key block. The certificate
619
- # expires after 7 days.
625
+ # expires after 30 days.
620
626
  # @return [String]
621
627
  #
622
628
  # @!attribute [rw] signing_key_certificate_chain
@@ -632,8 +638,8 @@ module Aws::PaymentCryptography
632
638
  #
633
639
  # @!attribute [rw] export_token
634
640
  # The export token to initiate key export from Amazon Web Services
635
- # Payment Cryptography. The export token expires after 7 days. You can
636
- # use the same export token to export multiple keys from the same
641
+ # Payment Cryptography. The export token expires after 30 days. You
642
+ # can use the same export token to export multiple keys from the same
637
643
  # service account.
638
644
  # @return [String]
639
645
  #
@@ -684,7 +690,7 @@ module Aws::PaymentCryptography
684
690
  # @!attribute [rw] wrapping_key_certificate
685
691
  # The wrapping key certificate in PEM format (base64 encoded) of the
686
692
  # wrapping key for use within the TR-34 key block. The certificate
687
- # expires in 7 days.
693
+ # expires in 30 days.
688
694
  # @return [String]
689
695
  #
690
696
  # @!attribute [rw] wrapping_key_certificate_chain
@@ -700,8 +706,8 @@ module Aws::PaymentCryptography
700
706
  #
701
707
  # @!attribute [rw] import_token
702
708
  # The import token to initiate key import into Amazon Web Services
703
- # Payment Cryptography. The import token expires after 7 days. You can
704
- # use the same import token to import multiple keys to the same
709
+ # Payment Cryptography. The import token expires after 30 days. You
710
+ # can use the same import token to import multiple keys to the same
705
711
  # service account.
706
712
  # @return [String]
707
713
  #
@@ -754,37 +760,38 @@ module Aws::PaymentCryptography
754
760
  include Aws::Structure
755
761
  end
756
762
 
757
- # Parameter information for key material import using the asymmetric
758
- # ECDH key exchange method.
763
+ # Key derivation parameter information for key material import using
764
+ # asymmetric ECDH key exchange method.
759
765
  #
760
766
  # @!attribute [rw] private_key_identifier
761
- # The `keyARN` of the asymmetric ECC key.
767
+ # The `keyARN` of the asymmetric ECC key created within Amazon Web
768
+ # Services Payment Cryptography.
762
769
  # @return [String]
763
770
  #
764
771
  # @!attribute [rw] certificate_authority_public_key_identifier
765
- # The `keyARN` of the certificate that signed the client's
766
- # `PublicKeyCertificate`.
772
+ # The `keyARN` of the CA that signed the `PublicKeyCertificate` for
773
+ # the client's receiving ECC key pair.
767
774
  # @return [String]
768
775
  #
769
776
  # @!attribute [rw] public_key_certificate
770
- # The client's public key certificate in PEM format (base64 encoded)
771
- # to use for ECDH key derivation.
777
+ # The public key certificate of the client's receiving ECC key pair,
778
+ # in PEM format (base64 encoded), to use for ECDH key derivation.
772
779
  # @return [String]
773
780
  #
774
781
  # @!attribute [rw] derive_key_algorithm
775
- # The key algorithm of the derived ECDH key.
782
+ # The key algorithm of the shared derived ECDH key.
776
783
  # @return [String]
777
784
  #
778
785
  # @!attribute [rw] key_derivation_function
779
- # The key derivation function to use for deriving a key using ECDH.
786
+ # The key derivation function to use when deriving a key using ECDH.
780
787
  # @return [String]
781
788
  #
782
789
  # @!attribute [rw] key_derivation_hash_algorithm
783
- # The hash type to use for deriving a key using ECDH.
790
+ # The hash type to use when deriving a key using ECDH.
784
791
  # @return [String]
785
792
  #
786
793
  # @!attribute [rw] derivation_data
787
- # Derivation data used to derive an ECDH key.
794
+ # The shared information used when deriving a key using ECDH.
788
795
  # @return [Types::DiffieHellmanDerivationData]
789
796
  #
790
797
  # @!attribute [rw] wrapped_key_block
@@ -826,8 +833,8 @@ module Aws::PaymentCryptography
826
833
  # @!attribute [rw] import_token
827
834
  # The import token that initiates key import using the asymmetric RSA
828
835
  # wrap and unwrap key exchange method into AWS Payment Cryptography.
829
- # It expires after 7 days. You can use the same import token to import
830
- # multiple keys to the same service account.
836
+ # It expires after 30 days. You can use the same import token to
837
+ # import multiple keys to the same service account.
831
838
  # @return [String]
832
839
  #
833
840
  # @!attribute [rw] wrapping_spec
@@ -937,8 +944,8 @@ module Aws::PaymentCryptography
937
944
  # @return [Types::ImportKeyCryptogram]
938
945
  #
939
946
  # @!attribute [rw] diffie_hellman_tr_31_key_block
940
- # Parameter information for key material import using the asymmetric
941
- # ECDH key exchange method.
947
+ # Key derivation parameter information for key material import using
948
+ # asymmetric ECDH key exchange method.
942
949
  # @return [Types::ImportDiffieHellmanTr31KeyBlock]
943
950
  #
944
951
  # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/ImportKeyMaterial AWS API Documentation
@@ -1014,7 +1021,7 @@ module Aws::PaymentCryptography
1014
1021
  # @!attribute [rw] import_token
1015
1022
  # The import token that initiates key import using the asymmetric
1016
1023
  # TR-34 key exchange method into Amazon Web Services Payment
1017
- # Cryptography. It expires after 7 days. You can use the same import
1024
+ # Cryptography. It expires after 30 days. You can use the same import
1018
1025
  # token to import multiple keys to the same service account.
1019
1026
  # @return [String]
1020
1027
  #
data/lib/aws-sdk-paymentcryptography.rb CHANGED
@@ -55,7 +55,7 @@ module Aws::PaymentCryptography
55
55
  autoload :EndpointProvider, 'aws-sdk-paymentcryptography/endpoint_provider'
56
56
  autoload :Endpoints, 'aws-sdk-paymentcryptography/endpoints'
57
57
 
58
- GEM_VERSION = '1.35.0'
58
+ GEM_VERSION = '1.37.0'
59
59
 
60
60
  end
61
61
 
data/sig/client.rbs CHANGED
@@ -18,6 +18,7 @@ module Aws
18
18
  ?account_id: String,
19
19
  ?active_endpoint_cache: bool,
20
20
  ?adaptive_retry_wait_to_fill: bool,
21
+ ?auth_scheme_preference: Array[String],
21
22
  ?client_side_monitoring: bool,
22
23
  ?client_side_monitoring_client_id: String,
23
24
  ?client_side_monitoring_host: String,
@@ -98,7 +99,7 @@ module Aws
98
99
  key_attributes: {
99
100
  key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_D1_ASYMMETRIC_KEY_FOR_DATA_ENCRYPTION" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_K3_ASYMMETRIC_KEY_FOR_KEY_AGREEMENT" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_S0_ASYMMETRIC_KEY_FOR_DIGITAL_SIGNATURE" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY" | "TR31_K2_TR34_ASYMMETRIC_KEY"),
100
101
  key_class: ("SYMMETRIC_KEY" | "ASYMMETRIC_KEY_PAIR" | "PRIVATE_KEY" | "PUBLIC_KEY"),
101
- key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
102
+ key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
102
103
  key_modes_of_use: {
103
104
  encrypt: bool?,
104
105
  decrypt: bool?,
@@ -111,7 +112,7 @@ module Aws
111
112
  no_restrictions: bool?
112
113
  }
113
114
  },
114
- ?key_check_value_algorithm: ("CMAC" | "ANSI_X9_24"),
115
+ ?key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC"),
115
116
  exportable: bool,
116
117
  ?enabled: bool,
117
118
  ?tags: Array[
@@ -202,7 +203,7 @@ module Aws
202
203
  private_key_identifier: ::String,
203
204
  certificate_authority_public_key_identifier: ::String,
204
205
  public_key_certificate: ::String,
205
- derive_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256"),
206
+ derive_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224"),
206
207
  key_derivation_function: ("NIST_SP800" | "ANSI_X963"),
207
208
  key_derivation_hash_algorithm: ("SHA_256" | "SHA_384" | "SHA_512"),
208
209
  derivation_data: {
@@ -231,7 +232,7 @@ module Aws
231
232
  export_dukpt_initial_key: {
232
233
  key_serial_number: ::String
233
234
  }?,
234
- key_check_value_algorithm: ("CMAC" | "ANSI_X9_24")?
235
+ key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")?
235
236
  }
236
237
  ) -> _ExportKeyResponseSuccess
237
238
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ExportKeyResponseSuccess
@@ -260,14 +261,14 @@ module Aws
260
261
  include ::Seahorse::Client::_ResponseSuccess[Types::GetParametersForExportOutput]
261
262
  def signing_key_certificate: () -> ::String
262
263
  def signing_key_certificate_chain: () -> ::String
263
- def signing_key_algorithm: () -> ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
264
+ def signing_key_algorithm: () -> ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
264
265
  def export_token: () -> ::String
265
266
  def parameters_valid_until_timestamp: () -> ::Time
266
267
  end
267
268
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#get_parameters_for_export-instance_method
268
269
  def get_parameters_for_export: (
269
270
  key_material_type: ("TR34_KEY_BLOCK" | "TR31_KEY_BLOCK" | "ROOT_PUBLIC_KEY_CERTIFICATE" | "TRUSTED_PUBLIC_KEY_CERTIFICATE" | "KEY_CRYPTOGRAM"),
270
- signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
271
+ signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
271
272
  ) -> _GetParametersForExportResponseSuccess
272
273
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetParametersForExportResponseSuccess
273
274
 
@@ -275,14 +276,14 @@ module Aws
275
276
  include ::Seahorse::Client::_ResponseSuccess[Types::GetParametersForImportOutput]
276
277
  def wrapping_key_certificate: () -> ::String
277
278
  def wrapping_key_certificate_chain: () -> ::String
278
- def wrapping_key_algorithm: () -> ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
279
+ def wrapping_key_algorithm: () -> ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
279
280
  def import_token: () -> ::String
280
281
  def parameters_valid_until_timestamp: () -> ::Time
281
282
  end
282
283
  # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#get_parameters_for_import-instance_method
283
284
  def get_parameters_for_import: (
284
285
  key_material_type: ("TR34_KEY_BLOCK" | "TR31_KEY_BLOCK" | "ROOT_PUBLIC_KEY_CERTIFICATE" | "TRUSTED_PUBLIC_KEY_CERTIFICATE" | "KEY_CRYPTOGRAM"),
285
- wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
286
+ wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
286
287
  ) -> _GetParametersForImportResponseSuccess
287
288
  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetParametersForImportResponseSuccess
288
289
 
@@ -308,7 +309,7 @@ module Aws
308
309
  key_attributes: {
309
310
  key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_D1_ASYMMETRIC_KEY_FOR_DATA_ENCRYPTION" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_K3_ASYMMETRIC_KEY_FOR_KEY_AGREEMENT" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_S0_ASYMMETRIC_KEY_FOR_DIGITAL_SIGNATURE" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY" | "TR31_K2_TR34_ASYMMETRIC_KEY"),
310
311
  key_class: ("SYMMETRIC_KEY" | "ASYMMETRIC_KEY_PAIR" | "PRIVATE_KEY" | "PUBLIC_KEY"),
311
- key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
312
+ key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
312
313
  key_modes_of_use: {
313
314
  encrypt: bool?,
314
315
  decrypt: bool?,
@@ -327,7 +328,7 @@ module Aws
327
328
  key_attributes: {
328
329
  key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_D1_ASYMMETRIC_KEY_FOR_DATA_ENCRYPTION" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_K3_ASYMMETRIC_KEY_FOR_KEY_AGREEMENT" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_S0_ASYMMETRIC_KEY_FOR_DIGITAL_SIGNATURE" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY" | "TR31_K2_TR34_ASYMMETRIC_KEY"),
329
330
  key_class: ("SYMMETRIC_KEY" | "ASYMMETRIC_KEY_PAIR" | "PRIVATE_KEY" | "PUBLIC_KEY"),
330
- key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
331
+ key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
331
332
  key_modes_of_use: {
332
333
  encrypt: bool?,
333
334
  decrypt: bool?,
@@ -359,7 +360,7 @@ module Aws
359
360
  key_attributes: {
360
361
  key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_D1_ASYMMETRIC_KEY_FOR_DATA_ENCRYPTION" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_K3_ASYMMETRIC_KEY_FOR_KEY_AGREEMENT" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_S0_ASYMMETRIC_KEY_FOR_DIGITAL_SIGNATURE" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY" | "TR31_K2_TR34_ASYMMETRIC_KEY"),
361
362
  key_class: ("SYMMETRIC_KEY" | "ASYMMETRIC_KEY_PAIR" | "PRIVATE_KEY" | "PUBLIC_KEY"),
362
- key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
363
+ key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
363
364
  key_modes_of_use: {
364
365
  encrypt: bool?,
365
366
  decrypt: bool?,
@@ -381,7 +382,7 @@ module Aws
381
382
  private_key_identifier: ::String,
382
383
  certificate_authority_public_key_identifier: ::String,
383
384
  public_key_certificate: ::String,
384
- derive_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256"),
385
+ derive_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224"),
385
386
  key_derivation_function: ("NIST_SP800" | "ANSI_X963"),
386
387
  key_derivation_hash_algorithm: ("SHA_256" | "SHA_384" | "SHA_512"),
387
388
  derivation_data: {
@@ -390,7 +391,7 @@ module Aws
390
391
  wrapped_key_block: ::String
391
392
  }?
392
393
  },
393
- ?key_check_value_algorithm: ("CMAC" | "ANSI_X9_24"),
394
+ ?key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC"),
394
395
  ?enabled: bool,
395
396
  ?tags: Array[
396
397
  {
data/sig/resource.rbs CHANGED
@@ -18,6 +18,7 @@ module Aws
18
18
  ?account_id: String,
19
19
  ?active_endpoint_cache: bool,
20
20
  ?adaptive_retry_wait_to_fill: bool,
21
+ ?auth_scheme_preference: Array[String],
21
22
  ?client_side_monitoring: bool,
22
23
  ?client_side_monitoring_client_id: String,
23
24
  ?client_side_monitoring_host: String,
data/sig/types.rbs CHANGED
@@ -37,7 +37,7 @@ module Aws::PaymentCryptography
37
37
 
38
38
  class CreateKeyInput
39
39
  attr_accessor key_attributes: Types::KeyAttributes
40
- attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24")
40
+ attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
41
41
  attr_accessor exportable: bool
42
42
  attr_accessor enabled: bool
43
43
  attr_accessor tags: ::Array[Types::Tag]
@@ -82,7 +82,7 @@ module Aws::PaymentCryptography
82
82
 
83
83
  class ExportAttributes
84
84
  attr_accessor export_dukpt_initial_key: Types::ExportDukptInitialKey
85
- attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24")
85
+ attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
86
86
  SENSITIVE: []
87
87
  end
88
88
 
@@ -90,7 +90,7 @@ module Aws::PaymentCryptography
90
90
  attr_accessor private_key_identifier: ::String
91
91
  attr_accessor certificate_authority_public_key_identifier: ::String
92
92
  attr_accessor public_key_certificate: ::String
93
- attr_accessor derive_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256")
93
+ attr_accessor derive_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224")
94
94
  attr_accessor key_derivation_function: ("NIST_SP800" | "ANSI_X963")
95
95
  attr_accessor key_derivation_hash_algorithm: ("SHA_256" | "SHA_384" | "SHA_512")
96
96
  attr_accessor derivation_data: Types::DiffieHellmanDerivationData
@@ -180,14 +180,14 @@ module Aws::PaymentCryptography
180
180
 
181
181
  class GetParametersForExportInput
182
182
  attr_accessor key_material_type: ("TR34_KEY_BLOCK" | "TR31_KEY_BLOCK" | "ROOT_PUBLIC_KEY_CERTIFICATE" | "TRUSTED_PUBLIC_KEY_CERTIFICATE" | "KEY_CRYPTOGRAM")
183
- attr_accessor signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
183
+ attr_accessor signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
184
184
  SENSITIVE: []
185
185
  end
186
186
 
187
187
  class GetParametersForExportOutput
188
188
  attr_accessor signing_key_certificate: ::String
189
189
  attr_accessor signing_key_certificate_chain: ::String
190
- attr_accessor signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
190
+ attr_accessor signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
191
191
  attr_accessor export_token: ::String
192
192
  attr_accessor parameters_valid_until_timestamp: ::Time
193
193
  SENSITIVE: [:signing_key_certificate, :signing_key_certificate_chain]
@@ -195,14 +195,14 @@ module Aws::PaymentCryptography
195
195
 
196
196
  class GetParametersForImportInput
197
197
  attr_accessor key_material_type: ("TR34_KEY_BLOCK" | "TR31_KEY_BLOCK" | "ROOT_PUBLIC_KEY_CERTIFICATE" | "TRUSTED_PUBLIC_KEY_CERTIFICATE" | "KEY_CRYPTOGRAM")
198
- attr_accessor wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
198
+ attr_accessor wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
199
199
  SENSITIVE: []
200
200
  end
201
201
 
202
202
  class GetParametersForImportOutput
203
203
  attr_accessor wrapping_key_certificate: ::String
204
204
  attr_accessor wrapping_key_certificate_chain: ::String
205
- attr_accessor wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
205
+ attr_accessor wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
206
206
  attr_accessor import_token: ::String
207
207
  attr_accessor parameters_valid_until_timestamp: ::Time
208
208
  SENSITIVE: [:wrapping_key_certificate, :wrapping_key_certificate_chain]
@@ -223,7 +223,7 @@ module Aws::PaymentCryptography
223
223
  attr_accessor private_key_identifier: ::String
224
224
  attr_accessor certificate_authority_public_key_identifier: ::String
225
225
  attr_accessor public_key_certificate: ::String
226
- attr_accessor derive_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256")
226
+ attr_accessor derive_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224")
227
227
  attr_accessor key_derivation_function: ("NIST_SP800" | "ANSI_X963")
228
228
  attr_accessor key_derivation_hash_algorithm: ("SHA_256" | "SHA_384" | "SHA_512")
229
229
  attr_accessor derivation_data: Types::DiffieHellmanDerivationData
@@ -242,7 +242,7 @@ module Aws::PaymentCryptography
242
242
 
243
243
  class ImportKeyInput
244
244
  attr_accessor key_material: Types::ImportKeyMaterial
245
- attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24")
245
+ attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
246
246
  attr_accessor enabled: bool
247
247
  attr_accessor tags: ::Array[Types::Tag]
248
248
  SENSITIVE: []
@@ -304,7 +304,7 @@ module Aws::PaymentCryptography
304
304
  attr_accessor key_arn: ::String
305
305
  attr_accessor key_attributes: Types::KeyAttributes
306
306
  attr_accessor key_check_value: ::String
307
- attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24")
307
+ attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
308
308
  attr_accessor enabled: bool
309
309
  attr_accessor exportable: bool
310
310
  attr_accessor key_state: ("CREATE_IN_PROGRESS" | "CREATE_COMPLETE" | "DELETE_PENDING" | "DELETE_COMPLETE")
@@ -321,7 +321,7 @@ module Aws::PaymentCryptography
321
321
  class KeyAttributes
322
322
  attr_accessor key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_D1_ASYMMETRIC_KEY_FOR_DATA_ENCRYPTION" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_K3_ASYMMETRIC_KEY_FOR_KEY_AGREEMENT" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_S0_ASYMMETRIC_KEY_FOR_DIGITAL_SIGNATURE" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY" | "TR31_K2_TR34_ASYMMETRIC_KEY")
323
323
  attr_accessor key_class: ("SYMMETRIC_KEY" | "ASYMMETRIC_KEY_PAIR" | "PRIVATE_KEY" | "PUBLIC_KEY")
324
- attr_accessor key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
324
+ attr_accessor key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
325
325
  attr_accessor key_modes_of_use: Types::KeyModesOfUse
326
326
  SENSITIVE: []
327
327
  end
@@ -504,7 +504,7 @@ module Aws::PaymentCryptography
504
504
  attr_accessor wrapped_key_material_format: ("KEY_CRYPTOGRAM" | "TR31_KEY_BLOCK" | "TR34_KEY_BLOCK")
505
505
  attr_accessor key_material: ::String
506
506
  attr_accessor key_check_value: ::String
507
- attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24")
507
+ attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
508
508
  SENSITIVE: [:key_material]
509
509
  end
510
510
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-paymentcryptography
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.35.0
4
+ version: 1.37.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
18
18
  version: '3'
19
19
  - - ">="
20
20
  - !ruby/object:Gem::Version
21
- version: 3.225.0
21
+ version: 3.227.0
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
28
28
  version: '3'
29
29
  - - ">="
30
30
  - !ruby/object:Gem::Version
31
- version: 3.225.0
31
+ version: 3.227.0
32
32
  - !ruby/object:Gem::Dependency
33
33
  name: aws-sigv4
34
34
  requirement: !ruby/object:Gem::Requirement