aws-sdk-paymentcryptography 1.42.0 → 1.43.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e8f672c232a26a796b2a5fcfc602b1f3263d7fe2f563d3ad7fc37c19d2660ba6
-  data.tar.gz: ba1b10b034bc5c0a1e1d7cca627fc603c25259a41088ccdc07459efde6e1ca20
+  metadata.gz: 98bc0552dc0db48c6a5c7cd5cfd1aab97f3917c150827763c0550d63842104a5
+  data.tar.gz: d7309509afbe2e28b36e9fdffd6125e6182e2ec4610dfd309c8cfa7a8541af74
 SHA512:
-  metadata.gz: 8ff781bef308f68d50852f298a2f7732e4f3da1ea9442121bdadb67bd0c0f901130277e62ff579b78cf43382c604b8df50442febc4b5a0ea2dffa982960b5e19
-  data.tar.gz: 9f303a3e0a413500a0f32feac4976fd8727e5040322fc8d00002b0d6cf15e3e76c5e55be235f314bc231bff04f98a2105a6d175fb0528aa06667c019e860b0af
+  metadata.gz: 19a8431e073048fa685c1be9477c0327dd0fb470375cd47faabfbaeecdd974fe97e9ff573f3ccff862e6c38079af53f4c46e12b7ccebf694a0b292c1834f8360
+  data.tar.gz: b45d8f7a657f271a76bfdc8cc861a9e243cabce7372684b13a3dbcc711d62baea4e2c38f0f01fc475416065a3ffa9a0ca2a1879a59c80df6f6b75c4a8d2b0b9f

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.43.0 (2025-09-12)
+------------------
+
+* Feature - Add support for certificates to be signed by 3rd party certificate authorities.  New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export
+
 1.42.0 (2025-09-10)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.42.0
+1.43.0

data/lib/aws-sdk-paymentcryptography/client.rb

@@ -1385,7 +1385,9 @@ module Aws::PaymentCryptography
     #       tr_34_key_block: {
     #         certificate_authority_public_key_identifier: "KeyArnOrKeyAliasType", # required
     #         wrapping_key_certificate: "CertificateType", # required
-    #         export_token: "ExportTokenId", # required
+    #         export_token: "ExportTokenId",
+    #         signing_key_identifier: "KeyArnOrKeyAliasType",
+    #         signing_key_certificate: "CertificateType",
     #         key_block_format: "X9_TR34_2012", # required, accepts X9_TR34_2012
     #         random_nonce: "EvenHexLengthBetween16And32",
     #         key_block_headers: {
@@ -1518,6 +1520,50 @@ module Aws::PaymentCryptography
       req.send_request(options)
     end
 
+    # Used to retrieve the public key for a keypair.
+    #
+    # @option params [required, String] :key_identifier
+    #   Asymmetric key used for generating the certificate signing request
+    #
+    # @option params [required, String] :signing_algorithm
+    #   Algorithm used to generate the certificate signing request
+    #
+    # @option params [required, Types::CertificateSubjectType] :certificate_subject
+    #   Certificate subject data
+    #
+    # @return [Types::GetCertificateSigningRequestOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetCertificateSigningRequestOutput#certificate_signing_request #certificate_signing_request} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_certificate_signing_request({
+    #     key_identifier: "KeyArnOrKeyAliasType", # required
+    #     signing_algorithm: "SHA224", # required, accepts SHA224, SHA256, SHA384, SHA512
+    #     certificate_subject: { # required
+    #       common_name: "CertificateSubjectTypeCommonNameString", # required
+    #       organization_unit: "CertificateSubjectTypeOrganizationUnitString",
+    #       organization: "CertificateSubjectTypeOrganizationString",
+    #       city: "CertificateSubjectTypeCityString",
+    #       country: "CertificateSubjectTypeCountryString",
+    #       state_or_province: "CertificateSubjectTypeStateOrProvinceString",
+    #       email_address: "CertificateSubjectTypeEmailAddressString",
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.certificate_signing_request #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/GetCertificateSigningRequest AWS API Documentation
+    #
+    # @overload get_certificate_signing_request(params = {})
+    # @param [Hash] params ({})
+    def get_certificate_signing_request(params = {}, options = {})
+      req = build_request(:get_certificate_signing_request, params)
+      req.send_request(options)
+    end
+
     # Retrieves the list of regions where default key replication is
     # currently enabled for your account.
     #
@@ -2131,7 +2177,9 @@ module Aws::PaymentCryptography
     #       tr_34_key_block: {
     #         certificate_authority_public_key_identifier: "KeyArnOrKeyAliasType", # required
     #         signing_key_certificate: "CertificateType", # required
-    #         import_token: "ImportTokenId", # required
+    #         import_token: "ImportTokenId",
+    #         wrapping_key_identifier: "KeyArnOrKeyAliasType",
+    #         wrapping_key_certificate: "CertificateType",
     #         wrapped_key_block: "Tr34WrappedKeyBlock", # required
     #         key_block_format: "X9_TR34_2012", # required, accepts X9_TR34_2012
     #         random_nonce: "EvenHexLengthBetween16And32",
@@ -3007,7 +3055,7 @@ module Aws::PaymentCryptography
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-paymentcryptography'
-      context[:gem_version] = '1.42.0'
+      context[:gem_version] = '1.43.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-paymentcryptography/client_api.rb

@@ -21,6 +21,15 @@ module Aws::PaymentCryptography
     AliasName = Shapes::StringShape.new(name: 'AliasName')
     Aliases = Shapes::ListShape.new(name: 'Aliases')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
+    CertificateSigningRequestType = Shapes::StringShape.new(name: 'CertificateSigningRequestType')
+    CertificateSubjectType = Shapes::StructureShape.new(name: 'CertificateSubjectType')
+    CertificateSubjectTypeCityString = Shapes::StringShape.new(name: 'CertificateSubjectTypeCityString')
+    CertificateSubjectTypeCommonNameString = Shapes::StringShape.new(name: 'CertificateSubjectTypeCommonNameString')
+    CertificateSubjectTypeCountryString = Shapes::StringShape.new(name: 'CertificateSubjectTypeCountryString')
+    CertificateSubjectTypeEmailAddressString = Shapes::StringShape.new(name: 'CertificateSubjectTypeEmailAddressString')
+    CertificateSubjectTypeOrganizationString = Shapes::StringShape.new(name: 'CertificateSubjectTypeOrganizationString')
+    CertificateSubjectTypeOrganizationUnitString = Shapes::StringShape.new(name: 'CertificateSubjectTypeOrganizationUnitString')
+    CertificateSubjectTypeStateOrProvinceString = Shapes::StringShape.new(name: 'CertificateSubjectTypeStateOrProvinceString')
     CertificateType = Shapes::StringShape.new(name: 'CertificateType')
     ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
     CreateAliasInput = Shapes::StructureShape.new(name: 'CreateAliasInput')
@@ -51,6 +60,8 @@ module Aws::PaymentCryptography
     ExportTr34KeyBlock = Shapes::StructureShape.new(name: 'ExportTr34KeyBlock')
     GetAliasInput = Shapes::StructureShape.new(name: 'GetAliasInput')
     GetAliasOutput = Shapes::StructureShape.new(name: 'GetAliasOutput')
+    GetCertificateSigningRequestInput = Shapes::StructureShape.new(name: 'GetCertificateSigningRequestInput')
+    GetCertificateSigningRequestOutput = Shapes::StructureShape.new(name: 'GetCertificateSigningRequestOutput')
     GetDefaultKeyReplicationRegionsInput = Shapes::StructureShape.new(name: 'GetDefaultKeyReplicationRegionsInput')
     GetDefaultKeyReplicationRegionsOutput = Shapes::StructureShape.new(name: 'GetDefaultKeyReplicationRegionsOutput')
     GetKeyInput = Shapes::StructureShape.new(name: 'GetKeyInput')
@@ -120,6 +131,7 @@ module Aws::PaymentCryptography
     ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
     ServiceUnavailableException = Shapes::StructureShape.new(name: 'ServiceUnavailableException')
     SharedInformation = Shapes::StringShape.new(name: 'SharedInformation')
+    SigningAlgorithmType = Shapes::StringShape.new(name: 'SigningAlgorithmType')
     StartKeyUsageInput = Shapes::StructureShape.new(name: 'StartKeyUsageInput')
     StartKeyUsageOutput = Shapes::StructureShape.new(name: 'StartKeyUsageOutput')
     StopKeyUsageInput = Shapes::StructureShape.new(name: 'StopKeyUsageInput')
@@ -165,6 +177,15 @@ module Aws::PaymentCryptography
 
     Aliases.member = Shapes::ShapeRef.new(shape: Alias)
 
+    CertificateSubjectType.add_member(:common_name, Shapes::ShapeRef.new(shape: CertificateSubjectTypeCommonNameString, required: true, location_name: "CommonName"))
+    CertificateSubjectType.add_member(:organization_unit, Shapes::ShapeRef.new(shape: CertificateSubjectTypeOrganizationUnitString, location_name: "OrganizationUnit"))
+    CertificateSubjectType.add_member(:organization, Shapes::ShapeRef.new(shape: CertificateSubjectTypeOrganizationString, location_name: "Organization"))
+    CertificateSubjectType.add_member(:city, Shapes::ShapeRef.new(shape: CertificateSubjectTypeCityString, location_name: "City"))
+    CertificateSubjectType.add_member(:country, Shapes::ShapeRef.new(shape: CertificateSubjectTypeCountryString, location_name: "Country"))
+    CertificateSubjectType.add_member(:state_or_province, Shapes::ShapeRef.new(shape: CertificateSubjectTypeStateOrProvinceString, location_name: "StateOrProvince"))
+    CertificateSubjectType.add_member(:email_address, Shapes::ShapeRef.new(shape: CertificateSubjectTypeEmailAddressString, location_name: "EmailAddress"))
+    CertificateSubjectType.struct_class = Types::CertificateSubjectType
+
     ConflictException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "Message"))
     ConflictException.struct_class = Types::ConflictException
 
@@ -265,7 +286,9 @@ module Aws::PaymentCryptography
 
     ExportTr34KeyBlock.add_member(:certificate_authority_public_key_identifier, Shapes::ShapeRef.new(shape: KeyArnOrKeyAliasType, required: true, location_name: "CertificateAuthorityPublicKeyIdentifier"))
     ExportTr34KeyBlock.add_member(:wrapping_key_certificate, Shapes::ShapeRef.new(shape: CertificateType, required: true, location_name: "WrappingKeyCertificate"))
-    ExportTr34KeyBlock.add_member(:export_token, Shapes::ShapeRef.new(shape: ExportTokenId, required: true, location_name: "ExportToken"))
+    ExportTr34KeyBlock.add_member(:export_token, Shapes::ShapeRef.new(shape: ExportTokenId, location_name: "ExportToken"))
+    ExportTr34KeyBlock.add_member(:signing_key_identifier, Shapes::ShapeRef.new(shape: KeyArnOrKeyAliasType, location_name: "SigningKeyIdentifier"))
+    ExportTr34KeyBlock.add_member(:signing_key_certificate, Shapes::ShapeRef.new(shape: CertificateType, location_name: "SigningKeyCertificate"))
     ExportTr34KeyBlock.add_member(:key_block_format, Shapes::ShapeRef.new(shape: Tr34KeyBlockFormat, required: true, location_name: "KeyBlockFormat"))
     ExportTr34KeyBlock.add_member(:random_nonce, Shapes::ShapeRef.new(shape: EvenHexLengthBetween16And32, location_name: "RandomNonce"))
     ExportTr34KeyBlock.add_member(:key_block_headers, Shapes::ShapeRef.new(shape: KeyBlockHeaders, location_name: "KeyBlockHeaders"))
@@ -277,6 +300,14 @@ module Aws::PaymentCryptography
     GetAliasOutput.add_member(:alias, Shapes::ShapeRef.new(shape: Alias, required: true, location_name: "Alias"))
     GetAliasOutput.struct_class = Types::GetAliasOutput
 
+    GetCertificateSigningRequestInput.add_member(:key_identifier, Shapes::ShapeRef.new(shape: KeyArnOrKeyAliasType, required: true, location_name: "KeyIdentifier"))
+    GetCertificateSigningRequestInput.add_member(:signing_algorithm, Shapes::ShapeRef.new(shape: SigningAlgorithmType, required: true, location_name: "SigningAlgorithm"))
+    GetCertificateSigningRequestInput.add_member(:certificate_subject, Shapes::ShapeRef.new(shape: CertificateSubjectType, required: true, location_name: "CertificateSubject"))
+    GetCertificateSigningRequestInput.struct_class = Types::GetCertificateSigningRequestInput
+
+    GetCertificateSigningRequestOutput.add_member(:certificate_signing_request, Shapes::ShapeRef.new(shape: CertificateSigningRequestType, required: true, location_name: "CertificateSigningRequest"))
+    GetCertificateSigningRequestOutput.struct_class = Types::GetCertificateSigningRequestOutput
+
     GetDefaultKeyReplicationRegionsInput.struct_class = Types::GetDefaultKeyReplicationRegionsInput
 
     GetDefaultKeyReplicationRegionsOutput.add_member(:enabled_replication_regions, Shapes::ShapeRef.new(shape: Regions, required: true, location_name: "EnabledReplicationRegions"))
@@ -366,7 +397,9 @@ module Aws::PaymentCryptography
 
     ImportTr34KeyBlock.add_member(:certificate_authority_public_key_identifier, Shapes::ShapeRef.new(shape: KeyArnOrKeyAliasType, required: true, location_name: "CertificateAuthorityPublicKeyIdentifier"))
     ImportTr34KeyBlock.add_member(:signing_key_certificate, Shapes::ShapeRef.new(shape: CertificateType, required: true, location_name: "SigningKeyCertificate"))
-    ImportTr34KeyBlock.add_member(:import_token, Shapes::ShapeRef.new(shape: ImportTokenId, required: true, location_name: "ImportToken"))
+    ImportTr34KeyBlock.add_member(:import_token, Shapes::ShapeRef.new(shape: ImportTokenId, location_name: "ImportToken"))
+    ImportTr34KeyBlock.add_member(:wrapping_key_identifier, Shapes::ShapeRef.new(shape: KeyArnOrKeyAliasType, location_name: "WrappingKeyIdentifier"))
+    ImportTr34KeyBlock.add_member(:wrapping_key_certificate, Shapes::ShapeRef.new(shape: CertificateType, location_name: "WrappingKeyCertificate"))
     ImportTr34KeyBlock.add_member(:wrapped_key_block, Shapes::ShapeRef.new(shape: Tr34WrappedKeyBlock, required: true, location_name: "WrappedKeyBlock"))
     ImportTr34KeyBlock.add_member(:key_block_format, Shapes::ShapeRef.new(shape: Tr34KeyBlockFormat, required: true, location_name: "KeyBlockFormat"))
     ImportTr34KeyBlock.add_member(:random_nonce, Shapes::ShapeRef.new(shape: EvenHexLengthBetween16And32, location_name: "RandomNonce"))
@@ -709,6 +742,20 @@ module Aws::PaymentCryptography
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:get_certificate_signing_request, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetCertificateSigningRequest"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetCertificateSigningRequestInput)
+        o.output = Shapes::ShapeRef.new(shape: GetCertificateSigningRequestOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+      end)
+
       api.add_operation(:get_default_key_replication_regions, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetDefaultKeyReplicationRegions"
         o.http_method = "POST"

data/lib/aws-sdk-paymentcryptography/types.rb

@@ -98,6 +98,50 @@ module Aws::PaymentCryptography
       include Aws::Structure
     end
 
+    # Metadata used in generating the CSR
+    #
+    # @!attribute [rw] common_name
+    #   Common Name to be used in the certificate signing request
+    #   @return [String]
+    #
+    # @!attribute [rw] organization_unit
+    #   Organization Unit to be used in the certificate signing request
+    #   @return [String]
+    #
+    # @!attribute [rw] organization
+    #   Organization to be used in the certificate signing request
+    #   @return [String]
+    #
+    # @!attribute [rw] city
+    #   City to be used in the certificate signing request
+    #   @return [String]
+    #
+    # @!attribute [rw] country
+    #   Country to be used in the certificate signing request
+    #   @return [String]
+    #
+    # @!attribute [rw] state_or_province
+    #   State Or Province to be used in the certificate signing request
+    #   @return [String]
+    #
+    # @!attribute [rw] email_address
+    #   Email to be used in the certificate signing request
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/CertificateSubjectType AWS API Documentation
+    #
+    class CertificateSubjectType < Struct.new(
+      :common_name,
+      :organization_unit,
+      :organization,
+      :city,
+      :country,
+      :state_or_province,
+      :email_address)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # This request can cause an inconsistent state for the resource.
     #
     # The requested operation conflicts with the current state of the
@@ -660,6 +704,14 @@ module Aws::PaymentCryptography
     #   [1]: https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetParametersForExport.html
     #   @return [String]
     #
+    # @!attribute [rw] signing_key_identifier
+    #   Key Identifier used for signing the export key
+    #   @return [String]
+    #
+    # @!attribute [rw] signing_key_certificate
+    #   Certificate used for signing the export key
+    #   @return [String]
+    #
     # @!attribute [rw] key_block_format
     #   The format of key block that Amazon Web Services Payment
     #   Cryptography will use during key export.
@@ -682,6 +734,8 @@ module Aws::PaymentCryptography
       :certificate_authority_public_key_identifier,
       :wrapping_key_certificate,
       :export_token,
+      :signing_key_identifier,
+      :signing_key_certificate,
       :key_block_format,
       :random_nonce,
       :key_block_headers)
@@ -713,6 +767,40 @@ module Aws::PaymentCryptography
       include Aws::Structure
     end
 
+    # @!attribute [rw] key_identifier
+    #   Asymmetric key used for generating the certificate signing request
+    #   @return [String]
+    #
+    # @!attribute [rw] signing_algorithm
+    #   Algorithm used to generate the certificate signing request
+    #   @return [String]
+    #
+    # @!attribute [rw] certificate_subject
+    #   Certificate subject data
+    #   @return [Types::CertificateSubjectType]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/GetCertificateSigningRequestInput AWS API Documentation
+    #
+    class GetCertificateSigningRequestInput < Struct.new(
+      :key_identifier,
+      :signing_algorithm,
+      :certificate_subject)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] certificate_signing_request
+    #   Certificate signing request
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/GetCertificateSigningRequestOutput AWS API Documentation
+    #
+    class GetCertificateSigningRequestOutput < Struct.new(
+      :certificate_signing_request)
+      SENSITIVE = [:certificate_signing_request]
+      include Aws::Structure
+    end
+
     # Input parameters for retrieving the account's default key replication
     # regions. This operation requires no input parameters.
     #
@@ -1207,6 +1295,14 @@ module Aws::PaymentCryptography
     #   token to import multiple keys to the same service account.
     #   @return [String]
     #
+    # @!attribute [rw] wrapping_key_identifier
+    #   Key Identifier used for unwrapping the import key
+    #   @return [String]
+    #
+    # @!attribute [rw] wrapping_key_certificate
+    #   Key Identifier used for unwrapping the import key
+    #   @return [String]
+    #
     # @!attribute [rw] wrapped_key_block
     #   The TR-34 wrapped key block to import.
     #   @return [String]
@@ -1228,6 +1324,8 @@ module Aws::PaymentCryptography
       :certificate_authority_public_key_identifier,
       :signing_key_certificate,
       :import_token,
+      :wrapping_key_identifier,
+      :wrapping_key_certificate,
       :wrapped_key_block,
       :key_block_format,
       :random_nonce)
@@ -1602,7 +1700,14 @@ module Aws::PaymentCryptography
     #   @return [Boolean]
     #
     # @!attribute [rw] multi_region_key_type
-    #   Defines the replication type of a key
+    #   Indicates whether this key is a multi-region key and its role in the
+    #   multi-region key hierarchy.
+    #
+    #   Multi-region keys allow the same key material to be used across
+    #   multiple Amazon Web Services Regions. This field specifies whether
+    #   the key is a primary key (which can be replicated to other regions)
+    #   or a replica key (which is a copy of a primary key in another
+    #   region).
     #   @return [String]
     #
     # @!attribute [rw] primary_region
@@ -1832,7 +1937,13 @@ module Aws::PaymentCryptography
     # about the replication process.
     #
     # @!attribute [rw] status
-    #   Defines the replication state of a key
+    #   The current status of key replication in this region.
+    #
+    #   This field indicates whether the key replication is in progress,
+    #   completed successfully, or has encountered an error. Possible values
+    #   include states such as SYNCRHONIZED, IN\_PROGRESS,
+    #   DELETE\_IN\_PROGRESS, or FAILED. This provides visibility into the
+    #   replication process for monitoring and troubleshooting purposes.
     #   @return [String]
     #
     # @!attribute [rw] status_message

data/lib/aws-sdk-paymentcryptography.rb

@@ -55,7 +55,7 @@ module Aws::PaymentCryptography
   autoload :EndpointProvider, 'aws-sdk-paymentcryptography/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-paymentcryptography/endpoints'
 
-  GEM_VERSION = '1.42.0'
+  GEM_VERSION = '1.43.0'
 
 end
 

data/sig/client.rbs

@@ -206,7 +206,9 @@ module Aws
                           tr_34_key_block: {
                             certificate_authority_public_key_identifier: ::String,
                             wrapping_key_certificate: ::String,
-                            export_token: ::String,
+                            export_token: ::String?,
+                            signing_key_identifier: ::String?,
+                            signing_key_certificate: ::String?,
                             key_block_format: ("X9_TR34_2012"),
                             random_nonce: ::String?,
                             key_block_headers: {
@@ -279,6 +281,26 @@ module Aws
                      ) -> _GetAliasResponseSuccess
                    | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetAliasResponseSuccess
 
+      interface _GetCertificateSigningRequestResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetCertificateSigningRequestOutput]
+        def certificate_signing_request: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#get_certificate_signing_request-instance_method
+      def get_certificate_signing_request: (
+                                             key_identifier: ::String,
+                                             signing_algorithm: ("SHA224" | "SHA256" | "SHA384" | "SHA512"),
+                                             certificate_subject: {
+                                               common_name: ::String,
+                                               organization_unit: ::String?,
+                                               organization: ::String?,
+                                               city: ::String?,
+                                               country: ::String?,
+                                               state_or_province: ::String?,
+                                               email_address: ::String?
+                                             }
+                                           ) -> _GetCertificateSigningRequestResponseSuccess
+                                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetCertificateSigningRequestResponseSuccess
+
       interface _GetDefaultKeyReplicationRegionsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetDefaultKeyReplicationRegionsOutput]
         def enabled_replication_regions: () -> ::Array[::String]
@@ -392,7 +414,9 @@ module Aws
                           tr_34_key_block: {
                             certificate_authority_public_key_identifier: ::String,
                             signing_key_certificate: ::String,
-                            import_token: ::String,
+                            import_token: ::String?,
+                            wrapping_key_identifier: ::String?,
+                            wrapping_key_certificate: ::String?,
                             wrapped_key_block: ::String,
                             key_block_format: ("X9_TR34_2012"),
                             random_nonce: ::String?

data/sig/types.rbs

@@ -30,6 +30,17 @@ module Aws::PaymentCryptography
       SENSITIVE: []
     end
 
+    class CertificateSubjectType
+      attr_accessor common_name: ::String
+      attr_accessor organization_unit: ::String
+      attr_accessor organization: ::String
+      attr_accessor city: ::String
+      attr_accessor country: ::String
+      attr_accessor state_or_province: ::String
+      attr_accessor email_address: ::String
+      SENSITIVE: []
+    end
+
     class ConflictException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -184,6 +195,8 @@ module Aws::PaymentCryptography
       attr_accessor certificate_authority_public_key_identifier: ::String
       attr_accessor wrapping_key_certificate: ::String
       attr_accessor export_token: ::String
+      attr_accessor signing_key_identifier: ::String
+      attr_accessor signing_key_certificate: ::String
       attr_accessor key_block_format: ("X9_TR34_2012")
       attr_accessor random_nonce: ::String
       attr_accessor key_block_headers: Types::KeyBlockHeaders
@@ -200,6 +213,18 @@ module Aws::PaymentCryptography
       SENSITIVE: []
     end
 
+    class GetCertificateSigningRequestInput
+      attr_accessor key_identifier: ::String
+      attr_accessor signing_algorithm: ("SHA224" | "SHA256" | "SHA384" | "SHA512")
+      attr_accessor certificate_subject: Types::CertificateSubjectType
+      SENSITIVE: []
+    end
+
+    class GetCertificateSigningRequestOutput
+      attr_accessor certificate_signing_request: ::String
+      SENSITIVE: [:certificate_signing_request]
+    end
+
     class GetDefaultKeyReplicationRegionsInput < Aws::EmptyStructure
     end
 
@@ -330,6 +355,8 @@ module Aws::PaymentCryptography
       attr_accessor certificate_authority_public_key_identifier: ::String
       attr_accessor signing_key_certificate: ::String
       attr_accessor import_token: ::String
+      attr_accessor wrapping_key_identifier: ::String
+      attr_accessor wrapping_key_certificate: ::String
       attr_accessor wrapped_key_block: ::String
       attr_accessor key_block_format: ("X9_TR34_2012")
       attr_accessor random_nonce: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-paymentcryptography
 version: !ruby/object:Gem::Version
-  version: 1.42.0
+  version: 1.43.0
 platform: ruby
 authors:
 - Amazon Web Services