aws-sdk-paymentcryptography 1.52.0 → 1.53.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cf2e9e860f7a57d01637e32fdb56096b347af74193b89d96ca10e47007930058
-  data.tar.gz: 6fc7d9e24ce508256e49a624565735e84c56012cbf81a7fb8405edf628f3be84
+  metadata.gz: d5cffaec408c39db3cd083fa499cf9c4489ed0023b5496a16a86cb5fc09496f5
+  data.tar.gz: '069eb1d2f169b434b4d8b2955000b0947f538b6e57fec13a61145342b57cd2d3'
 SHA512:
-  metadata.gz: 31cf3bf9ae7dd0dc46edf583685c79512db5f14febc49cd29840de6b206e03f80123106f8bdafb0563c8673cfdad643452d04ea33c7ca1ee579c25ead7d7173e
-  data.tar.gz: 31eb77d1f6b2a4b8923ac6e6741ef74c398bd1ab9345c3ee4505f405ee5453529f490855a5cffd8cd74a196dd5bcba5b235e8c19b66283260136e2e92aa37366
+  metadata.gz: 34a9a733b10090d27031b6dd20da6d96ea466d3c37caef078641bb64577b105dbc6939d04ac98c83d4ac437955bc3aa900385c2122776fc10ca6d94ba7b87814
+  data.tar.gz: 888e657a160acf85c545ee56ffe1d9dd0737cf4f3fbb9013377f93c54c0e0cda2a193b079e6848c86278bd8ed74967ca45a343f0c8f5dbbdfd162e55e1c1c45e

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.53.0 (2026-04-03)
+------------------
+
+* Feature - Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions
+
 1.52.0 (2026-03-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.52.0
+1.53.0

data/lib/aws-sdk-paymentcryptography/client.rb

@@ -1708,6 +1708,10 @@ module Aws::PaymentCryptography
     # export token expires in 30 days. You can use the same export token to
     # export multiple keys from your service account.
     #
+    # To return a previously generated export token and signing key
+    # certificate instead of generating new ones, set
+    # `ReuseLastGeneratedToken` to `true`.
+    #
     # **Cross-account use:** This operation can't be used across different
     # Amazon Web Services accounts.
     #
@@ -1733,6 +1737,16 @@ module Aws::PaymentCryptography
     #   certificate signs the wrapped key under export within the TR-34 key
     #   block. `RSA_2048` is the only signing key algorithm allowed.
     #
+    # @option params [Boolean] :reuse_last_generated_token
+    #   Specifies whether to reuse the existing export token and signing key
+    #   certificate. If set to `true` and a valid export token exists for the
+    #   same key material type and signing key algorithm with at least 7 days
+    #   of remaining validity, the existing token and signing key certificate
+    #   are returned. Otherwise, a new export token and signing key
+    #   certificate are generated. The default value is `false`, which
+    #   generates a new export token and signing key certificate on every
+    #   call.
+    #
     # @return [Types::GetParametersForExportOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetParametersForExportOutput#signing_key_certificate #signing_key_certificate} => String
@@ -1746,6 +1760,7 @@ module Aws::PaymentCryptography
     #   resp = client.get_parameters_for_export({
     #     key_material_type: "TR34_KEY_BLOCK", # required, accepts TR34_KEY_BLOCK, TR31_KEY_BLOCK, ROOT_PUBLIC_KEY_CERTIFICATE, TRUSTED_PUBLIC_KEY_CERTIFICATE, KEY_CRYPTOGRAM
     #     signing_key_algorithm: "TDES_2KEY", # required, accepts TDES_2KEY, TDES_3KEY, AES_128, AES_192, AES_256, HMAC_SHA256, HMAC_SHA384, HMAC_SHA512, HMAC_SHA224, RSA_2048, RSA_3072, RSA_4096, ECC_NIST_P256, ECC_NIST_P384, ECC_NIST_P521
+    #     reuse_last_generated_token: false,
     #   })
     #
     # @example Response structure
@@ -1776,6 +1791,10 @@ module Aws::PaymentCryptography
     # You can use the same import token to import multiple keys into your
     # service account.
     #
+    # To return a previously generated import token and wrapping key
+    # certificate instead of generating new ones, set
+    # `ReuseLastGeneratedToken` to `true`.
+    #
     # **Cross-account use:** This operation can't be used across different
     # Amazon Web Services accounts.
     #
@@ -1807,6 +1826,16 @@ module Aws::PaymentCryptography
     #   `RSA_4096` are the allowed algorithms for RSA WrappedKeyCryptogram
     #   import.
     #
+    # @option params [Boolean] :reuse_last_generated_token
+    #   Specifies whether to reuse the existing import token and wrapping key
+    #   certificate. If set to `true` and a valid import token exists for the
+    #   same key material type and wrapping key algorithm with at least 7 days
+    #   of remaining validity, the existing token and wrapping key certificate
+    #   are returned. Otherwise, a new import token and wrapping key
+    #   certificate are generated. The default value is `false`, which
+    #   generates a new import token and wrapping key certificate on every
+    #   call.
+    #
     # @return [Types::GetParametersForImportOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetParametersForImportOutput#wrapping_key_certificate #wrapping_key_certificate} => String
@@ -1820,6 +1849,7 @@ module Aws::PaymentCryptography
     #   resp = client.get_parameters_for_import({
     #     key_material_type: "TR34_KEY_BLOCK", # required, accepts TR34_KEY_BLOCK, TR31_KEY_BLOCK, ROOT_PUBLIC_KEY_CERTIFICATE, TRUSTED_PUBLIC_KEY_CERTIFICATE, KEY_CRYPTOGRAM
     #     wrapping_key_algorithm: "TDES_2KEY", # required, accepts TDES_2KEY, TDES_3KEY, AES_128, AES_192, AES_256, HMAC_SHA256, HMAC_SHA384, HMAC_SHA512, HMAC_SHA224, RSA_2048, RSA_3072, RSA_4096, ECC_NIST_P256, ECC_NIST_P384, ECC_NIST_P521
+    #     reuse_last_generated_token: false,
     #   })
     #
     # @example Response structure
@@ -3092,7 +3122,7 @@ module Aws::PaymentCryptography
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-paymentcryptography'
-      context[:gem_version] = '1.52.0'
+      context[:gem_version] = '1.53.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-paymentcryptography/client_api.rb

@@ -330,6 +330,7 @@ module Aws::PaymentCryptography
 
     GetParametersForExportInput.add_member(:key_material_type, Shapes::ShapeRef.new(shape: KeyMaterialType, required: true, location_name: "KeyMaterialType"))
     GetParametersForExportInput.add_member(:signing_key_algorithm, Shapes::ShapeRef.new(shape: KeyAlgorithm, required: true, location_name: "SigningKeyAlgorithm"))
+    GetParametersForExportInput.add_member(:reuse_last_generated_token, Shapes::ShapeRef.new(shape: Boolean, location_name: "ReuseLastGeneratedToken"))
     GetParametersForExportInput.struct_class = Types::GetParametersForExportInput
 
     GetParametersForExportOutput.add_member(:signing_key_certificate, Shapes::ShapeRef.new(shape: CertificateType, required: true, location_name: "SigningKeyCertificate"))
@@ -341,6 +342,7 @@ module Aws::PaymentCryptography
 
     GetParametersForImportInput.add_member(:key_material_type, Shapes::ShapeRef.new(shape: KeyMaterialType, required: true, location_name: "KeyMaterialType"))
     GetParametersForImportInput.add_member(:wrapping_key_algorithm, Shapes::ShapeRef.new(shape: KeyAlgorithm, required: true, location_name: "WrappingKeyAlgorithm"))
+    GetParametersForImportInput.add_member(:reuse_last_generated_token, Shapes::ShapeRef.new(shape: Boolean, location_name: "ReuseLastGeneratedToken"))
     GetParametersForImportInput.struct_class = Types::GetParametersForImportInput
 
     GetParametersForImportOutput.add_member(:wrapping_key_certificate, Shapes::ShapeRef.new(shape: CertificateType, required: true, location_name: "WrappingKeyCertificate"))

data/lib/aws-sdk-paymentcryptography/types.rb

@@ -917,11 +917,23 @@ module Aws::PaymentCryptography
     #   key block. `RSA_2048` is the only signing key algorithm allowed.
     #   @return [String]
     #
+    # @!attribute [rw] reuse_last_generated_token
+    #   Specifies whether to reuse the existing export token and signing key
+    #   certificate. If set to `true` and a valid export token exists for
+    #   the same key material type and signing key algorithm with at least 7
+    #   days of remaining validity, the existing token and signing key
+    #   certificate are returned. Otherwise, a new export token and signing
+    #   key certificate are generated. The default value is `false`, which
+    #   generates a new export token and signing key certificate on every
+    #   call.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/GetParametersForExportInput AWS API Documentation
     #
     class GetParametersForExportInput < Struct.new(
       :key_material_type,
-      :signing_key_algorithm)
+      :signing_key_algorithm,
+      :reuse_last_generated_token)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -985,11 +997,23 @@ module Aws::PaymentCryptography
     #   import.
     #   @return [String]
     #
+    # @!attribute [rw] reuse_last_generated_token
+    #   Specifies whether to reuse the existing import token and wrapping
+    #   key certificate. If set to `true` and a valid import token exists
+    #   for the same key material type and wrapping key algorithm with at
+    #   least 7 days of remaining validity, the existing token and wrapping
+    #   key certificate are returned. Otherwise, a new import token and
+    #   wrapping key certificate are generated. The default value is
+    #   `false`, which generates a new import token and wrapping key
+    #   certificate on every call.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/payment-cryptography-2021-09-14/GetParametersForImportInput AWS API Documentation
     #
     class GetParametersForImportInput < Struct.new(
       :key_material_type,
-      :wrapping_key_algorithm)
+      :wrapping_key_algorithm,
+      :reuse_last_generated_token)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1049,7 +1073,10 @@ module Aws::PaymentCryptography
     # @!attribute [rw] key_certificate
     #   The public key component of the asymmetric key pair in a certificate
     #   PEM format (base64 encoded). It is signed by the root certificate
-    #   authority (CA). The certificate expires in 90 days.
+    #   authority (CA). The certificate is valid for 90 days from the time
+    #   it is issued. The service returns a cached certificate if one exists
+    #   with at least 30 days of remaining validity. Otherwise, a new 90-day
+    #   certificate is issued.
     #   @return [String]
     #
     # @!attribute [rw] key_certificate_chain

data/lib/aws-sdk-paymentcryptography.rb

@@ -55,7 +55,7 @@ module Aws::PaymentCryptography
   autoload :EndpointProvider, 'aws-sdk-paymentcryptography/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-paymentcryptography/endpoints'
 
-  GEM_VERSION = '1.52.0'
+  GEM_VERSION = '1.53.0'
 
 end
 

data/sig/client.rbs

@@ -335,7 +335,8 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#get_parameters_for_export-instance_method
       def get_parameters_for_export: (
                                        key_material_type: ("TR34_KEY_BLOCK" | "TR31_KEY_BLOCK" | "ROOT_PUBLIC_KEY_CERTIFICATE" | "TRUSTED_PUBLIC_KEY_CERTIFICATE" | "KEY_CRYPTOGRAM"),
-                                       signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
+                                       signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
+                                       ?reuse_last_generated_token: bool
                                      ) -> _GetParametersForExportResponseSuccess
                                    | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetParametersForExportResponseSuccess
 
@@ -350,7 +351,8 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/PaymentCryptography/Client.html#get_parameters_for_import-instance_method
       def get_parameters_for_import: (
                                        key_material_type: ("TR34_KEY_BLOCK" | "TR31_KEY_BLOCK" | "ROOT_PUBLIC_KEY_CERTIFICATE" | "TRUSTED_PUBLIC_KEY_CERTIFICATE" | "KEY_CRYPTOGRAM"),
-                                       wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
+                                       wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521"),
+                                       ?reuse_last_generated_token: bool
                                      ) -> _GetParametersForImportResponseSuccess
                                    | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetParametersForImportResponseSuccess
 

data/sig/types.rbs

@@ -255,6 +255,7 @@ module Aws::PaymentCryptography
     class GetParametersForExportInput
       attr_accessor key_material_type: ("TR34_KEY_BLOCK" | "TR31_KEY_BLOCK" | "ROOT_PUBLIC_KEY_CERTIFICATE" | "TRUSTED_PUBLIC_KEY_CERTIFICATE" | "KEY_CRYPTOGRAM")
       attr_accessor signing_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
+      attr_accessor reuse_last_generated_token: bool
       SENSITIVE: []
     end
 
@@ -270,6 +271,7 @@ module Aws::PaymentCryptography
     class GetParametersForImportInput
       attr_accessor key_material_type: ("TR34_KEY_BLOCK" | "TR31_KEY_BLOCK" | "ROOT_PUBLIC_KEY_CERTIFICATE" | "TRUSTED_PUBLIC_KEY_CERTIFICATE" | "KEY_CRYPTOGRAM")
       attr_accessor wrapping_key_algorithm: ("TDES_2KEY" | "TDES_3KEY" | "AES_128" | "AES_192" | "AES_256" | "HMAC_SHA256" | "HMAC_SHA384" | "HMAC_SHA512" | "HMAC_SHA224" | "RSA_2048" | "RSA_3072" | "RSA_4096" | "ECC_NIST_P256" | "ECC_NIST_P384" | "ECC_NIST_P521")
+      attr_accessor reuse_last_generated_token: bool
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-paymentcryptography
 version: !ruby/object:Gem::Version
-  version: 1.52.0
+  version: 1.53.0
 platform: ruby
 authors:
 - Amazon Web Services