aws-sdk-paymentcryptography 1.41.0 → 1.43.0

data/lib/aws-sdk-paymentcryptography.rb

@@ -23,7 +23,7 @@ Aws::Plugins::GlobalConfiguration.add_identifier(:paymentcryptography)
 # structure.
 #
 #     payment_cryptography = Aws::PaymentCryptography::Client.new
-#     resp = payment_cryptography.create_alias(params)
+#     resp = payment_cryptography.add_key_replication_regions(params)
 #
 # See {Client} for more information.
 #
@@ -55,7 +55,7 @@ module Aws::PaymentCryptography
   autoload :EndpointProvider, 'aws-sdk-paymentcryptography/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-paymentcryptography/endpoints'
 
-  GEM_VERSION = '1.41.0'
+  GEM_VERSION = '1.43.0'
 
 end
 

data/sig/client.rbs

@@ -79,6 +79,17 @@ module Aws
                   | (?Hash[Symbol, untyped]) -> instance
 
 
+      interface _AddKeyReplicationRegionsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::AddKeyReplicationRegionsOutput]
+        def key: () -> Types::Key
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#add_key_replication_regions-instance_method
+      def add_key_replication_regions: (
+                                         key_identifier: ::String,
+                                         replication_regions: Array[::String]
+                                       ) -> _AddKeyReplicationRegionsResponseSuccess
+                                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _AddKeyReplicationRegionsResponseSuccess
+
       interface _CreateAliasResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::CreateAliasOutput]
         def alias: () -> Types::Alias
@@ -112,7 +123,7 @@ module Aws
                             no_restrictions: bool?
                           }
                         },
-                        ?key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC"),
+                        ?key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC" | "SHA_1"),
                         exportable: bool,
                         ?enabled: bool,
                         ?tags: Array[
@@ -121,7 +132,8 @@ module Aws
                             value: ::String
                           },
                         ],
-                        ?derive_key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY")
+                        ?derive_key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY"),
+                        ?replication_regions: Array[::String]
                       ) -> _CreateKeyResponseSuccess
                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateKeyResponseSuccess
 
@@ -145,6 +157,26 @@ module Aws
                       ) -> _DeleteKeyResponseSuccess
                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteKeyResponseSuccess
 
+      interface _DisableDefaultKeyReplicationRegionsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DisableDefaultKeyReplicationRegionsOutput]
+        def enabled_replication_regions: () -> ::Array[::String]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#disable_default_key_replication_regions-instance_method
+      def disable_default_key_replication_regions: (
+                                                     replication_regions: Array[::String]
+                                                   ) -> _DisableDefaultKeyReplicationRegionsResponseSuccess
+                                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DisableDefaultKeyReplicationRegionsResponseSuccess
+
+      interface _EnableDefaultKeyReplicationRegionsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::EnableDefaultKeyReplicationRegionsOutput]
+        def enabled_replication_regions: () -> ::Array[::String]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#enable_default_key_replication_regions-instance_method
+      def enable_default_key_replication_regions: (
+                                                    replication_regions: Array[::String]
+                                                  ) -> _EnableDefaultKeyReplicationRegionsResponseSuccess
+                                                | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _EnableDefaultKeyReplicationRegionsResponseSuccess
+
       interface _ExportKeyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::ExportKeyOutput]
         def wrapped_key: () -> Types::WrappedKey
@@ -174,7 +206,9 @@ module Aws
                           tr_34_key_block: {
                             certificate_authority_public_key_identifier: ::String,
                             wrapping_key_certificate: ::String,
-                            export_token: ::String,
+                            export_token: ::String?,
+                            signing_key_identifier: ::String?,
+                            signing_key_certificate: ::String?,
                             key_block_format: ("X9_TR34_2012"),
                             random_nonce: ::String?,
                             key_block_headers: {
@@ -232,7 +266,7 @@ module Aws
                           export_dukpt_initial_key: {
                             key_serial_number: ::String
                           }?,
-                          key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")?
+                          key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC" | "SHA_1")?
                         }
                       ) -> _ExportKeyResponseSuccess
                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ExportKeyResponseSuccess
@@ -247,6 +281,35 @@ module Aws
                      ) -> _GetAliasResponseSuccess
                    | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetAliasResponseSuccess
 
+      interface _GetCertificateSigningRequestResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetCertificateSigningRequestOutput]
+        def certificate_signing_request: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#get_certificate_signing_request-instance_method
+      def get_certificate_signing_request: (
+                                             key_identifier: ::String,
+                                             signing_algorithm: ("SHA224" | "SHA256" | "SHA384" | "SHA512"),
+                                             certificate_subject: {
+                                               common_name: ::String,
+                                               organization_unit: ::String?,
+                                               organization: ::String?,
+                                               city: ::String?,
+                                               country: ::String?,
+                                               state_or_province: ::String?,
+                                               email_address: ::String?
+                                             }
+                                           ) -> _GetCertificateSigningRequestResponseSuccess
+                                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetCertificateSigningRequestResponseSuccess
+
+      interface _GetDefaultKeyReplicationRegionsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetDefaultKeyReplicationRegionsOutput]
+        def enabled_replication_regions: () -> ::Array[::String]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#get_default_key_replication_regions-instance_method
+      def get_default_key_replication_regions: (
+                                               ) -> _GetDefaultKeyReplicationRegionsResponseSuccess
+                                             | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetDefaultKeyReplicationRegionsResponseSuccess
+
       interface _GetKeyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetKeyOutput]
         def key: () -> Types::Key
@@ -351,7 +414,9 @@ module Aws
                           tr_34_key_block: {
                             certificate_authority_public_key_identifier: ::String,
                             signing_key_certificate: ::String,
-                            import_token: ::String,
+                            import_token: ::String?,
+                            wrapping_key_identifier: ::String?,
+                            wrapping_key_certificate: ::String?,
                             wrapped_key_block: ::String,
                             key_block_format: ("X9_TR34_2012"),
                             random_nonce: ::String?
@@ -391,14 +456,15 @@ module Aws
                             wrapped_key_block: ::String
                           }?
                         },
-                        ?key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC"),
+                        ?key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC" | "SHA_1"),
                         ?enabled: bool,
                         ?tags: Array[
                           {
                             key: ::String,
                             value: ::String
                           },
-                        ]
+                        ],
+                        ?replication_regions: Array[::String]
                       ) -> _ImportKeyResponseSuccess
                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ImportKeyResponseSuccess
 
@@ -441,6 +507,17 @@ module Aws
                                   ) -> _ListTagsForResourceResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListTagsForResourceResponseSuccess
 
+      interface _RemoveKeyReplicationRegionsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::RemoveKeyReplicationRegionsOutput]
+        def key: () -> Types::Key
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#remove_key_replication_regions-instance_method
+      def remove_key_replication_regions: (
+                                            key_identifier: ::String,
+                                            replication_regions: Array[::String]
+                                          ) -> _RemoveKeyReplicationRegionsResponseSuccess
+                                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RemoveKeyReplicationRegionsResponseSuccess
+
       interface _RestoreKeyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::RestoreKeyOutput]
         def key: () -> Types::Key

data/sig/types.rbs

@@ -13,12 +13,34 @@ module Aws::PaymentCryptography
       SENSITIVE: []
     end
 
+    class AddKeyReplicationRegionsInput
+      attr_accessor key_identifier: ::String
+      attr_accessor replication_regions: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class AddKeyReplicationRegionsOutput
+      attr_accessor key: Types::Key
+      SENSITIVE: []
+    end
+
     class Alias
       attr_accessor alias_name: ::String
       attr_accessor key_arn: ::String
       SENSITIVE: []
     end
 
+    class CertificateSubjectType
+      attr_accessor common_name: ::String
+      attr_accessor organization_unit: ::String
+      attr_accessor organization: ::String
+      attr_accessor city: ::String
+      attr_accessor country: ::String
+      attr_accessor state_or_province: ::String
+      attr_accessor email_address: ::String
+      SENSITIVE: []
+    end
+
     class ConflictException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -37,11 +59,12 @@ module Aws::PaymentCryptography
 
     class CreateKeyInput
       attr_accessor key_attributes: Types::KeyAttributes
-      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
+      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC" | "SHA_1")
       attr_accessor exportable: bool
       attr_accessor enabled: bool
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor derive_key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY")
+      attr_accessor replication_regions: ::Array[::String]
       SENSITIVE: []
     end
 
@@ -80,9 +103,29 @@ module Aws::PaymentCryptography
       end
     end
 
+    class DisableDefaultKeyReplicationRegionsInput
+      attr_accessor replication_regions: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class DisableDefaultKeyReplicationRegionsOutput
+      attr_accessor enabled_replication_regions: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class EnableDefaultKeyReplicationRegionsInput
+      attr_accessor replication_regions: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class EnableDefaultKeyReplicationRegionsOutput
+      attr_accessor enabled_replication_regions: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class ExportAttributes
       attr_accessor export_dukpt_initial_key: Types::ExportDukptInitialKey
-      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
+      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC" | "SHA_1")
       SENSITIVE: []
     end
 
@@ -95,7 +138,7 @@ module Aws::PaymentCryptography
       attr_accessor key_derivation_hash_algorithm: ("SHA_256" | "SHA_384" | "SHA_512")
       attr_accessor derivation_data: Types::DiffieHellmanDerivationData
       attr_accessor key_block_headers: Types::KeyBlockHeaders
-      SENSITIVE: [:public_key_certificate]
+      SENSITIVE: []
     end
 
     class ExportDukptInitialKey
@@ -107,7 +150,7 @@ module Aws::PaymentCryptography
       attr_accessor certificate_authority_public_key_identifier: ::String
       attr_accessor wrapping_key_certificate: ::String
       attr_accessor wrapping_spec: ("RSA_OAEP_SHA_256" | "RSA_OAEP_SHA_512")
-      SENSITIVE: [:wrapping_key_certificate]
+      SENSITIVE: []
     end
 
     class ExportKeyInput
@@ -152,10 +195,12 @@ module Aws::PaymentCryptography
       attr_accessor certificate_authority_public_key_identifier: ::String
       attr_accessor wrapping_key_certificate: ::String
       attr_accessor export_token: ::String
+      attr_accessor signing_key_identifier: ::String
+      attr_accessor signing_key_certificate: ::String
       attr_accessor key_block_format: ("X9_TR34_2012")
       attr_accessor random_nonce: ::String
       attr_accessor key_block_headers: Types::KeyBlockHeaders
-      SENSITIVE: [:wrapping_key_certificate]
+      SENSITIVE: []
     end
 
     class GetAliasInput
@@ -168,6 +213,26 @@ module Aws::PaymentCryptography
       SENSITIVE: []
     end
 
+    class GetCertificateSigningRequestInput
+      attr_accessor key_identifier: ::String
+      attr_accessor signing_algorithm: ("SHA224" | "SHA256" | "SHA384" | "SHA512")
+      attr_accessor certificate_subject: Types::CertificateSubjectType
+      SENSITIVE: []
+    end
+
+    class GetCertificateSigningRequestOutput
+      attr_accessor certificate_signing_request: ::String
+      SENSITIVE: [:certificate_signing_request]
+    end
+
+    class GetDefaultKeyReplicationRegionsInput < Aws::EmptyStructure
+    end
+
+    class GetDefaultKeyReplicationRegionsOutput
+      attr_accessor enabled_replication_regions: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class GetKeyInput
       attr_accessor key_identifier: ::String
       SENSITIVE: []
@@ -190,7 +255,7 @@ module Aws::PaymentCryptography
       attr_accessor signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
       attr_accessor export_token: ::String
       attr_accessor parameters_valid_until_timestamp: ::Time
-      SENSITIVE: [:signing_key_certificate, :signing_key_certificate_chain]
+      SENSITIVE: []
     end
 
     class GetParametersForImportInput
@@ -205,7 +270,7 @@ module Aws::PaymentCryptography
       attr_accessor wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
       attr_accessor import_token: ::String
       attr_accessor parameters_valid_until_timestamp: ::Time
-      SENSITIVE: [:wrapping_key_certificate, :wrapping_key_certificate_chain]
+      SENSITIVE: []
     end
 
     class GetPublicKeyCertificateInput
@@ -216,7 +281,7 @@ module Aws::PaymentCryptography
     class GetPublicKeyCertificateOutput
       attr_accessor key_certificate: ::String
       attr_accessor key_certificate_chain: ::String
-      SENSITIVE: [:key_certificate, :key_certificate_chain]
+      SENSITIVE: []
     end
 
     class ImportDiffieHellmanTr31KeyBlock
@@ -228,7 +293,7 @@ module Aws::PaymentCryptography
       attr_accessor key_derivation_hash_algorithm: ("SHA_256" | "SHA_384" | "SHA_512")
       attr_accessor derivation_data: Types::DiffieHellmanDerivationData
       attr_accessor wrapped_key_block: ::String
-      SENSITIVE: [:public_key_certificate, :wrapped_key_block]
+      SENSITIVE: [:wrapped_key_block]
     end
 
     class ImportKeyCryptogram
@@ -242,9 +307,10 @@ module Aws::PaymentCryptography
 
     class ImportKeyInput
       attr_accessor key_material: Types::ImportKeyMaterial
-      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
+      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC" | "SHA_1")
       attr_accessor enabled: bool
       attr_accessor tags: ::Array[Types::Tag]
+      attr_accessor replication_regions: ::Array[::String]
       SENSITIVE: []
     end
 
@@ -289,10 +355,12 @@ module Aws::PaymentCryptography
       attr_accessor certificate_authority_public_key_identifier: ::String
       attr_accessor signing_key_certificate: ::String
       attr_accessor import_token: ::String
+      attr_accessor wrapping_key_identifier: ::String
+      attr_accessor wrapping_key_certificate: ::String
       attr_accessor wrapped_key_block: ::String
       attr_accessor key_block_format: ("X9_TR34_2012")
       attr_accessor random_nonce: ::String
-      SENSITIVE: [:signing_key_certificate, :wrapped_key_block]
+      SENSITIVE: [:wrapped_key_block]
     end
 
     class InternalServerException
@@ -304,7 +372,7 @@ module Aws::PaymentCryptography
       attr_accessor key_arn: ::String
       attr_accessor key_attributes: Types::KeyAttributes
       attr_accessor key_check_value: ::String
-      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
+      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC" | "SHA_1")
       attr_accessor enabled: bool
       attr_accessor exportable: bool
       attr_accessor key_state: ("CREATE_IN_PROGRESS" | "CREATE_COMPLETE" | "DELETE_PENDING" | "DELETE_COMPLETE")
@@ -315,6 +383,10 @@ module Aws::PaymentCryptography
       attr_accessor delete_pending_timestamp: ::Time
       attr_accessor delete_timestamp: ::Time
       attr_accessor derive_key_usage: ("TR31_B0_BASE_DERIVATION_KEY" | "TR31_C0_CARD_VERIFICATION_KEY" | "TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY" | "TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS" | "TR31_E1_EMV_MKEY_CONFIDENTIALITY" | "TR31_E2_EMV_MKEY_INTEGRITY" | "TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS" | "TR31_E5_EMV_MKEY_CARD_PERSONALIZATION" | "TR31_E6_EMV_MKEY_OTHER" | "TR31_K0_KEY_ENCRYPTION_KEY" | "TR31_K1_KEY_BLOCK_PROTECTION_KEY" | "TR31_M3_ISO_9797_3_MAC_KEY" | "TR31_M1_ISO_9797_1_MAC_KEY" | "TR31_M6_ISO_9797_5_CMAC_KEY" | "TR31_M7_HMAC_KEY" | "TR31_P0_PIN_ENCRYPTION_KEY" | "TR31_P1_PIN_GENERATION_KEY" | "TR31_V1_IBM3624_PIN_VERIFICATION_KEY" | "TR31_V2_VISA_PIN_VERIFICATION_KEY")
+      attr_accessor multi_region_key_type: ("PRIMARY" | "REPLICA")
+      attr_accessor primary_region: ::String
+      attr_accessor replication_status: ::Hash[::String, Types::ReplicationStatusType]
+      attr_accessor using_default_replication_regions: bool
       SENSITIVE: []
     end
 
@@ -354,6 +426,8 @@ module Aws::PaymentCryptography
       attr_accessor key_check_value: ::String
       attr_accessor exportable: bool
       attr_accessor enabled: bool
+      attr_accessor multi_region_key_type: ("PRIMARY" | "REPLICA")
+      attr_accessor primary_region: ::String
       SENSITIVE: []
     end
 
@@ -396,6 +470,23 @@ module Aws::PaymentCryptography
       SENSITIVE: []
     end
 
+    class RemoveKeyReplicationRegionsInput
+      attr_accessor key_identifier: ::String
+      attr_accessor replication_regions: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class RemoveKeyReplicationRegionsOutput
+      attr_accessor key: Types::Key
+      SENSITIVE: []
+    end
+
+    class ReplicationStatusType
+      attr_accessor status: ("IN_PROGRESS" | "DELETE_IN_PROGRESS" | "FAILED" | "SYNCHRONIZED")
+      attr_accessor status_message: ::String
+      SENSITIVE: []
+    end
+
     class ResourceNotFoundException
       attr_accessor resource_id: ::String
       SENSITIVE: []
@@ -414,7 +505,7 @@ module Aws::PaymentCryptography
     class RootCertificatePublicKey
       attr_accessor key_attributes: Types::KeyAttributes
       attr_accessor public_key_certificate: ::String
-      SENSITIVE: [:public_key_certificate]
+      SENSITIVE: []
     end
 
     class ServiceQuotaExceededException
@@ -471,7 +562,7 @@ module Aws::PaymentCryptography
       attr_accessor key_attributes: Types::KeyAttributes
       attr_accessor public_key_certificate: ::String
       attr_accessor certificate_authority_public_key_identifier: ::String
-      SENSITIVE: [:public_key_certificate]
+      SENSITIVE: []
     end
 
     class UntagResourceInput
@@ -504,7 +595,7 @@ module Aws::PaymentCryptography
       attr_accessor wrapped_key_material_format: ("KEY_CRYPTOGRAM" | "TR31_KEY_BLOCK" | "TR34_KEY_BLOCK")
       attr_accessor key_material: ::String
       attr_accessor key_check_value: ::String
-      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC")
+      attr_accessor key_check_value_algorithm: ("CMAC" | "ANSI_X9_24" | "HMAC" | "SHA_1")
       SENSITIVE: [:key_material]
     end
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-paymentcryptography
 version: !ruby/object:Gem::Version
-  version: 1.41.0
+  version: 1.43.0
 platform: ruby
 authors:
 - Amazon Web Services