oci 2.9.0 → 2.10.0

data/lib/oci/key_management/models/generated_key.rb

@@ -12,14 +12,14 @@ module OCI
     attr_accessor :ciphertext
 
     # The plaintext data encryption key, a base64-encoded sequence of random bytes, which is
-    # included if the [GenerateDataEncryptionKey](https://docs.cloud.oracle.com/api/#/en/key/release/GeneratedKey/GenerateDataEncryptionKey)
+    # included if the [GenerateDataEncryptionKey](https://docs.cloud.oracle.com/api/#/en/key/latest/GeneratedKey/GenerateDataEncryptionKey)
     # request includes the `includePlaintextKey` parameter and sets its value to \"true\".
     #
     # @return [String]
     attr_accessor :plaintext
 
     # The checksum of the plaintext data encryption key, which is included if the
-    # [GenerateDataEncryptionKey](https://docs.cloud.oracle.com/api/#/en/key/release/GeneratedKey/GenerateDataEncryptionKey)
+    # [GenerateDataEncryptionKey](https://docs.cloud.oracle.com/api/#/en/key/latest/GeneratedKey/GenerateDataEncryptionKey)
     # request includes the `includePlaintextKey` parameter and sets its value to \"true\".
     #
     # @return [String]

data/lib/oci/key_management/models/import_key_details.rb

@@ -7,6 +7,11 @@ require 'date'
 module OCI
   # ImportKeyDetails model.
   class KeyManagement::Models::ImportKeyDetails
+    PROTECTION_MODE_ENUM = [
+      PROTECTION_MODE_HSM = 'HSM'.freeze,
+      PROTECTION_MODE_SOFTWARE = 'SOFTWARE'.freeze
+    ].freeze
+
     # **[Required]** The OCID of the compartment that contains this key.
     # @return [String]
     attr_accessor :compartment_id
@@ -38,6 +43,15 @@ module OCI
     # @return [OCI::KeyManagement::Models::WrappedImportKey]
     attr_accessor :wrapped_import_key
 
+    # The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed.
+    # A protection mode of `HSM` means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside
+    # the HSM. A protection mode of `SOFTWARE` means that the key persists on the server, protected by the vault's RSA wrapping key which persists
+    # on the HSM. All cryptographic operations that use a key with a protection mode of `SOFTWARE` are performed on the server. By default,
+    # a key's protection mode is set to `HSM`. You can't change a key's protection mode after the key is created or imported.
+    #
+    # @return [String]
+    attr_reader :protection_mode
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
@@ -47,7 +61,8 @@ module OCI
         'display_name': :'displayName',
         'freeform_tags': :'freeformTags',
         'key_shape': :'keyShape',
-        'wrapped_import_key': :'wrappedImportKey'
+        'wrapped_import_key': :'wrappedImportKey',
+        'protection_mode': :'protectionMode'
         # rubocop:enable Style/SymbolLiteral
       }
     end
@@ -61,7 +76,8 @@ module OCI
         'display_name': :'String',
         'freeform_tags': :'Hash<String, String>',
         'key_shape': :'OCI::KeyManagement::Models::KeyShape',
-        'wrapped_import_key': :'OCI::KeyManagement::Models::WrappedImportKey'
+        'wrapped_import_key': :'OCI::KeyManagement::Models::WrappedImportKey',
+        'protection_mode': :'String'
         # rubocop:enable Style/SymbolLiteral
       }
     end
@@ -78,6 +94,7 @@ module OCI
     # @option attributes [Hash<String, String>] :freeform_tags The value to assign to the {#freeform_tags} property
     # @option attributes [OCI::KeyManagement::Models::KeyShape] :key_shape The value to assign to the {#key_shape} property
     # @option attributes [OCI::KeyManagement::Models::WrappedImportKey] :wrapped_import_key The value to assign to the {#wrapped_import_key} property
+    # @option attributes [String] :protection_mode The value to assign to the {#protection_mode} property
     def initialize(attributes = {})
       return unless attributes.is_a?(Hash)
 
@@ -119,10 +136,26 @@ module OCI
       raise 'You cannot provide both :wrappedImportKey and :wrapped_import_key' if attributes.key?(:'wrappedImportKey') && attributes.key?(:'wrapped_import_key')
 
       self.wrapped_import_key = attributes[:'wrapped_import_key'] if attributes[:'wrapped_import_key']
+
+      self.protection_mode = attributes[:'protectionMode'] if attributes[:'protectionMode']
+      self.protection_mode = "HSM" if protection_mode.nil? && !attributes.key?(:'protectionMode') # rubocop:disable Style/StringLiterals
+
+      raise 'You cannot provide both :protectionMode and :protection_mode' if attributes.key?(:'protectionMode') && attributes.key?(:'protection_mode')
+
+      self.protection_mode = attributes[:'protection_mode'] if attributes[:'protection_mode']
+      self.protection_mode = "HSM" if protection_mode.nil? && !attributes.key?(:'protectionMode') && !attributes.key?(:'protection_mode') # rubocop:disable Style/StringLiterals
     end
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity
     # rubocop:enable Metrics/MethodLength, Layout/EmptyLines, Style/SymbolLiteral
 
+    # Custom attribute writer method checking allowed values (enum).
+    # @param [Object] protection_mode Object to be assigned
+    def protection_mode=(protection_mode)
+      raise "Invalid value for 'protection_mode': this must be one of the values in PROTECTION_MODE_ENUM." if protection_mode && !PROTECTION_MODE_ENUM.include?(protection_mode)
+
+      @protection_mode = protection_mode
+    end
+
     # rubocop:disable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
 
 
@@ -137,7 +170,8 @@ module OCI
         display_name == other.display_name &&
         freeform_tags == other.freeform_tags &&
         key_shape == other.key_shape &&
-        wrapped_import_key == other.wrapped_import_key
+        wrapped_import_key == other.wrapped_import_key &&
+        protection_mode == other.protection_mode
     end
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
 
@@ -153,7 +187,7 @@ module OCI
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [compartment_id, defined_tags, display_name, freeform_tags, key_shape, wrapped_import_key].hash
+      [compartment_id, defined_tags, display_name, freeform_tags, key_shape, wrapped_import_key, protection_mode].hash
     end
     # rubocop:enable Metrics/AbcSize, Layout/EmptyLines
 

data/lib/oci/key_management/models/key.rb

@@ -8,6 +8,12 @@ require 'logger'
 module OCI
   # Key model.
   class KeyManagement::Models::Key
+    PROTECTION_MODE_ENUM = [
+      PROTECTION_MODE_HSM = 'HSM'.freeze,
+      PROTECTION_MODE_SOFTWARE = 'SOFTWARE'.freeze,
+      PROTECTION_MODE_UNKNOWN_ENUM_VALUE = 'UNKNOWN_ENUM_VALUE'.freeze
+    ].freeze
+
     LIFECYCLE_STATE_ENUM = [
       LIFECYCLE_STATE_CREATING = 'CREATING'.freeze,
       LIFECYCLE_STATE_ENABLING = 'ENABLING'.freeze,
@@ -64,6 +70,15 @@ module OCI
     # @return [OCI::KeyManagement::Models::KeyShape]
     attr_accessor :key_shape
 
+    # The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed.
+    # A protection mode of `HSM` means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside
+    # the HSM. A protection mode of `SOFTWARE` means that the key persists on the server, protected by the vault's RSA wrapping key which persists
+    # on the HSM. All cryptographic operations that use a key with a protection mode of `SOFTWARE` are performed on the server. By default,
+    # a key's protection mode is set to `HSM`. You can't change a key's protection mode after the key is created or imported.
+    #
+    # @return [String]
+    attr_reader :protection_mode
+
     # **[Required]** The key's current lifecycle state.
     #
     # Example: `ENABLED`
@@ -103,6 +118,7 @@ module OCI
         'freeform_tags': :'freeformTags',
         'id': :'id',
         'key_shape': :'keyShape',
+        'protection_mode': :'protectionMode',
         'lifecycle_state': :'lifecycleState',
         'time_created': :'timeCreated',
         'time_of_deletion': :'timeOfDeletion',
@@ -123,6 +139,7 @@ module OCI
         'freeform_tags': :'Hash<String, String>',
         'id': :'String',
         'key_shape': :'OCI::KeyManagement::Models::KeyShape',
+        'protection_mode': :'String',
         'lifecycle_state': :'String',
         'time_created': :'DateTime',
         'time_of_deletion': :'DateTime',
@@ -145,6 +162,7 @@ module OCI
     # @option attributes [Hash<String, String>] :freeform_tags The value to assign to the {#freeform_tags} property
     # @option attributes [String] :id The value to assign to the {#id} property
     # @option attributes [OCI::KeyManagement::Models::KeyShape] :key_shape The value to assign to the {#key_shape} property
+    # @option attributes [String] :protection_mode The value to assign to the {#protection_mode} property
     # @option attributes [String] :lifecycle_state The value to assign to the {#lifecycle_state} property
     # @option attributes [DateTime] :time_created The value to assign to the {#time_created} property
     # @option attributes [DateTime] :time_of_deletion The value to assign to the {#time_of_deletion} property
@@ -194,6 +212,12 @@ module OCI
 
       self.key_shape = attributes[:'key_shape'] if attributes[:'key_shape']
 
+      self.protection_mode = attributes[:'protectionMode'] if attributes[:'protectionMode']
+
+      raise 'You cannot provide both :protectionMode and :protection_mode' if attributes.key?(:'protectionMode') && attributes.key?(:'protection_mode')
+
+      self.protection_mode = attributes[:'protection_mode'] if attributes[:'protection_mode']
+
       self.lifecycle_state = attributes[:'lifecycleState'] if attributes[:'lifecycleState']
 
       raise 'You cannot provide both :lifecycleState and :lifecycle_state' if attributes.key?(:'lifecycleState') && attributes.key?(:'lifecycle_state')
@@ -227,6 +251,19 @@ module OCI
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity
     # rubocop:enable Metrics/MethodLength, Layout/EmptyLines, Style/SymbolLiteral
 
+    # Custom attribute writer method checking allowed values (enum).
+    # @param [Object] protection_mode Object to be assigned
+    def protection_mode=(protection_mode)
+      # rubocop:disable Style/ConditionalAssignment
+      if protection_mode && !PROTECTION_MODE_ENUM.include?(protection_mode)
+        OCI.logger.debug("Unknown value for 'protection_mode' [" + protection_mode + "]. Mapping to 'PROTECTION_MODE_UNKNOWN_ENUM_VALUE'") if OCI.logger
+        @protection_mode = PROTECTION_MODE_UNKNOWN_ENUM_VALUE
+      else
+        @protection_mode = protection_mode
+      end
+      # rubocop:enable Style/ConditionalAssignment
+    end
+
     # Custom attribute writer method checking allowed values (enum).
     # @param [Object] lifecycle_state Object to be assigned
     def lifecycle_state=(lifecycle_state)
@@ -256,6 +293,7 @@ module OCI
         freeform_tags == other.freeform_tags &&
         id == other.id &&
         key_shape == other.key_shape &&
+        protection_mode == other.protection_mode &&
         lifecycle_state == other.lifecycle_state &&
         time_created == other.time_created &&
         time_of_deletion == other.time_of_deletion &&
@@ -276,7 +314,7 @@ module OCI
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [compartment_id, current_key_version, defined_tags, display_name, freeform_tags, id, key_shape, lifecycle_state, time_created, time_of_deletion, vault_id, restored_from_key_id].hash
+      [compartment_id, current_key_version, defined_tags, display_name, freeform_tags, id, key_shape, protection_mode, lifecycle_state, time_created, time_of_deletion, vault_id, restored_from_key_id].hash
     end
     # rubocop:enable Metrics/AbcSize, Layout/EmptyLines
 

data/lib/oci/key_management/models/key_summary.rb

@@ -25,6 +25,12 @@ module OCI
       LIFECYCLE_STATE_UNKNOWN_ENUM_VALUE = 'UNKNOWN_ENUM_VALUE'.freeze
     ].freeze
 
+    PROTECTION_MODE_ENUM = [
+      PROTECTION_MODE_HSM = 'HSM'.freeze,
+      PROTECTION_MODE_SOFTWARE = 'SOFTWARE'.freeze,
+      PROTECTION_MODE_UNKNOWN_ENUM_VALUE = 'UNKNOWN_ENUM_VALUE'.freeze
+    ].freeze
+
     # **[Required]** The OCID of the compartment that contains the key.
     # @return [String]
     attr_accessor :compartment_id
@@ -71,6 +77,15 @@ module OCI
     # @return [String]
     attr_accessor :vault_id
 
+    # The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed.
+    # A protection mode of `HSM` means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside
+    # the HSM. A protection mode of `SOFTWARE` means that the key persists on the server, protected by the vault's RSA wrapping key which persists
+    # on the HSM. All cryptographic operations that use a key with a protection mode of `SOFTWARE` are performed on the server. By default,
+    # a key's protection mode is set to `HSM`. You can't change a key's protection mode after the key is created or imported.
+    #
+    # @return [String]
+    attr_reader :protection_mode
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
@@ -82,7 +97,8 @@ module OCI
         'id': :'id',
         'lifecycle_state': :'lifecycleState',
         'time_created': :'timeCreated',
-        'vault_id': :'vaultId'
+        'vault_id': :'vaultId',
+        'protection_mode': :'protectionMode'
         # rubocop:enable Style/SymbolLiteral
       }
     end
@@ -98,7 +114,8 @@ module OCI
         'id': :'String',
         'lifecycle_state': :'String',
         'time_created': :'DateTime',
-        'vault_id': :'String'
+        'vault_id': :'String',
+        'protection_mode': :'String'
         # rubocop:enable Style/SymbolLiteral
       }
     end
@@ -117,6 +134,7 @@ module OCI
     # @option attributes [String] :lifecycle_state The value to assign to the {#lifecycle_state} property
     # @option attributes [DateTime] :time_created The value to assign to the {#time_created} property
     # @option attributes [String] :vault_id The value to assign to the {#vault_id} property
+    # @option attributes [String] :protection_mode The value to assign to the {#protection_mode} property
     def initialize(attributes = {})
       return unless attributes.is_a?(Hash)
 
@@ -166,6 +184,12 @@ module OCI
       raise 'You cannot provide both :vaultId and :vault_id' if attributes.key?(:'vaultId') && attributes.key?(:'vault_id')
 
       self.vault_id = attributes[:'vault_id'] if attributes[:'vault_id']
+
+      self.protection_mode = attributes[:'protectionMode'] if attributes[:'protectionMode']
+
+      raise 'You cannot provide both :protectionMode and :protection_mode' if attributes.key?(:'protectionMode') && attributes.key?(:'protection_mode')
+
+      self.protection_mode = attributes[:'protection_mode'] if attributes[:'protection_mode']
     end
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity
     # rubocop:enable Metrics/MethodLength, Layout/EmptyLines, Style/SymbolLiteral
@@ -183,6 +207,19 @@ module OCI
       # rubocop:enable Style/ConditionalAssignment
     end
 
+    # Custom attribute writer method checking allowed values (enum).
+    # @param [Object] protection_mode Object to be assigned
+    def protection_mode=(protection_mode)
+      # rubocop:disable Style/ConditionalAssignment
+      if protection_mode && !PROTECTION_MODE_ENUM.include?(protection_mode)
+        OCI.logger.debug("Unknown value for 'protection_mode' [" + protection_mode + "]. Mapping to 'PROTECTION_MODE_UNKNOWN_ENUM_VALUE'") if OCI.logger
+        @protection_mode = PROTECTION_MODE_UNKNOWN_ENUM_VALUE
+      else
+        @protection_mode = protection_mode
+      end
+      # rubocop:enable Style/ConditionalAssignment
+    end
+
     # rubocop:disable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
 
 
@@ -199,7 +236,8 @@ module OCI
         id == other.id &&
         lifecycle_state == other.lifecycle_state &&
         time_created == other.time_created &&
-        vault_id == other.vault_id
+        vault_id == other.vault_id &&
+        protection_mode == other.protection_mode
     end
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
 
@@ -215,7 +253,7 @@ module OCI
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [compartment_id, defined_tags, display_name, freeform_tags, id, lifecycle_state, time_created, vault_id].hash
+      [compartment_id, defined_tags, display_name, freeform_tags, id, lifecycle_state, time_created, vault_id, protection_mode].hash
     end
     # rubocop:enable Metrics/AbcSize, Layout/EmptyLines
 

data/lib/oci/key_management/models/vault.rb

@@ -33,8 +33,8 @@ module OCI
     attr_accessor :compartment_id
 
     # **[Required]** The service endpoint to perform cryptographic operations against. Cryptographic operations include
-    # [Encrypt](https://docs.cloud.oracle.com/api/#/en/key/release/EncryptedData/Encrypt), [Decrypt](https://docs.cloud.oracle.com/api/#/en/key/release/DecryptedData/Decrypt),
-    # and [GenerateDataEncryptionKey](https://docs.cloud.oracle.com/api/#/en/key/release/GeneratedKey/GenerateDataEncryptionKey) operations.
+    # [Encrypt](https://docs.cloud.oracle.com/api/#/en/key/latest/EncryptedData/Encrypt), [Decrypt](https://docs.cloud.oracle.com/api/#/en/key/latest/DecryptedData/Decrypt),
+    # and [GenerateDataEncryptionKey](https://docs.cloud.oracle.com/api/#/en/key/latest/GeneratedKey/GenerateDataEncryptionKey) operations.
     #
     # @return [String]
     attr_accessor :crypto_endpoint

data/lib/oci/key_management/models/vault_summary.rb

@@ -33,8 +33,8 @@ module OCI
     attr_accessor :compartment_id
 
     # **[Required]** The service endpoint to perform cryptographic operations against. Cryptographic operations include
-    # [Encrypt](https://docs.cloud.oracle.com/api/#/en/key/release/EncryptedData/Encrypt), [Decrypt](https://docs.cloud.oracle.com/api/#/en/key/release/DecryptedData/Decrypt),
-    # and [GenerateDataEncryptionKey](https://docs.cloud.oracle.com/api/#/en/key/release/GeneratedKey/GenerateDataEncryptionKey) operations.
+    # [Encrypt](https://docs.cloud.oracle.com/api/#/en/key/latest/EncryptedData/Encrypt), [Decrypt](https://docs.cloud.oracle.com/api/#/en/key/latest/DecryptedData/Decrypt),
+    # and [GenerateDataEncryptionKey](https://docs.cloud.oracle.com/api/#/en/key/latest/GeneratedKey/GenerateDataEncryptionKey) operations.
     #
     # @return [String]
     attr_accessor :crypto_endpoint

data/lib/oci/key_management/models/vault_usage.rb

@@ -7,20 +7,30 @@ require 'date'
 module OCI
   # VaultUsage model.
   class KeyManagement::Models::VaultUsage
-    # This attribute is required.
+    # **[Required]** The number of keys in this vault that persist on a hardware security module (HSM), across all compartments, excluding keys in a `DELETED` state.
     # @return [Integer]
     attr_accessor :key_count
 
-    # This attribute is required.
+    # **[Required]** The number of key versions in this vault that persist on a hardware security module (HSM), across all compartments, excluding key versions in a `DELETED` state.
     # @return [Integer]
     attr_accessor :key_version_count
 
+    # The number of keys in this vault that persist on the server, across all compartments, excluding keys in a `DELETED` state.
+    # @return [Integer]
+    attr_accessor :software_key_count
+
+    # The number of key versions in this vault that persist on the server, across all compartments, excluding key versions in a `DELETED` state.
+    # @return [Integer]
+    attr_accessor :software_key_version_count
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
         # rubocop:disable Style/SymbolLiteral
         'key_count': :'keyCount',
-        'key_version_count': :'keyVersionCount'
+        'key_version_count': :'keyVersionCount',
+        'software_key_count': :'softwareKeyCount',
+        'software_key_version_count': :'softwareKeyVersionCount'
         # rubocop:enable Style/SymbolLiteral
       }
     end
@@ -30,7 +40,9 @@ module OCI
       {
         # rubocop:disable Style/SymbolLiteral
         'key_count': :'Integer',
-        'key_version_count': :'Integer'
+        'key_version_count': :'Integer',
+        'software_key_count': :'Integer',
+        'software_key_version_count': :'Integer'
         # rubocop:enable Style/SymbolLiteral
       }
     end
@@ -43,6 +55,8 @@ module OCI
     # @param [Hash] attributes Model attributes in the form of hash
     # @option attributes [Integer] :key_count The value to assign to the {#key_count} property
     # @option attributes [Integer] :key_version_count The value to assign to the {#key_version_count} property
+    # @option attributes [Integer] :software_key_count The value to assign to the {#software_key_count} property
+    # @option attributes [Integer] :software_key_version_count The value to assign to the {#software_key_version_count} property
     def initialize(attributes = {})
       return unless attributes.is_a?(Hash)
 
@@ -60,6 +74,18 @@ module OCI
       raise 'You cannot provide both :keyVersionCount and :key_version_count' if attributes.key?(:'keyVersionCount') && attributes.key?(:'key_version_count')
 
       self.key_version_count = attributes[:'key_version_count'] if attributes[:'key_version_count']
+
+      self.software_key_count = attributes[:'softwareKeyCount'] if attributes[:'softwareKeyCount']
+
+      raise 'You cannot provide both :softwareKeyCount and :software_key_count' if attributes.key?(:'softwareKeyCount') && attributes.key?(:'software_key_count')
+
+      self.software_key_count = attributes[:'software_key_count'] if attributes[:'software_key_count']
+
+      self.software_key_version_count = attributes[:'softwareKeyVersionCount'] if attributes[:'softwareKeyVersionCount']
+
+      raise 'You cannot provide both :softwareKeyVersionCount and :software_key_version_count' if attributes.key?(:'softwareKeyVersionCount') && attributes.key?(:'software_key_version_count')
+
+      self.software_key_version_count = attributes[:'software_key_version_count'] if attributes[:'software_key_version_count']
     end
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity
     # rubocop:enable Metrics/MethodLength, Layout/EmptyLines, Style/SymbolLiteral
@@ -74,7 +100,9 @@ module OCI
 
       self.class == other.class &&
         key_count == other.key_count &&
-        key_version_count == other.key_version_count
+        key_version_count == other.key_version_count &&
+        software_key_count == other.software_key_count &&
+        software_key_version_count == other.software_key_version_count
     end
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
 
@@ -90,7 +118,7 @@ module OCI
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [key_count, key_version_count].hash
+      [key_count, key_version_count, software_key_count, software_key_version_count].hash
     end
     # rubocop:enable Metrics/AbcSize, Layout/EmptyLines
 

data/lib/oci/key_management/models/wrapped_import_key.rb

@@ -11,11 +11,11 @@ module OCI
       WRAPPING_ALGORITHM_RSA_OAEP_SHA256 = 'RSA_OAEP_SHA256'.freeze
     ].freeze
 
-    # **[Required]** The wrapped/encrypted key material to import. It is encrypted using RSA wrapped key and Base64 encoded.
+    # **[Required]** The key material to import, wrapped by the vault's public RSA wrapping key and base64-encoded.
     # @return [String]
     attr_accessor :key_material
 
-    # **[Required]** The wrapping mechanism to be used during key import
+    # **[Required]** The wrapping mechanism to use during key import.
     # @return [String]
     attr_reader :wrapping_algorithm