@aws-sdk/client-kms 3.218.0 → 3.220.0

package/README.md

@@ -17,7 +17,7 @@ see the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/">
 <i>Key Management Service Developer Guide</i>
 </a>.</p>
 <note>
-<p>KMS is replacing the term <i>customer master key (CMK)</i> with <i>KMS key</i> and <i>KMS key</i>. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.</p>
+<p>KMS has replaced the term <i>customer master key (CMK)</i> with <i>KMS key</i> and <i>KMS key</i>. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.</p>
 <p>Amazon Web Services provides SDKs that consist of libraries and sample code for various programming
 languages and platforms (Java, Ruby, .Net, macOS, Android, etc.). The SDKs provide a
 convenient way to create programmatic access to KMS and other Amazon Web Services services. For example,
@@ -26,23 +26,24 @@ retrying requests automatically. For more information about the Amazon Web Servi
 download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web
 Services</a>.</p>
 </note>
-<p>We recommend that you use the Amazon Web Services SDKs to make programmatic API calls to KMS. </p>
+<p>We recommend that you use the Amazon Web Services SDKs to make programmatic API calls to KMS.</p>
 <p>If you need to use FIPS 140-2 validated cryptographic modules when communicating with
 Amazon Web Services, use the FIPS endpoint in your preferred Amazon Web Services Region. For more information about the
-available FIPS endpoints, see <a href="https://docs.aws.amazon.com/general/latest/gr/kms.html#kms_region">Service endpoints</a> in the Key Management Service topic of the <i>Amazon Web Services General Reference</i>.</p>
-<p>All KMS API calls must be signed and be transmitted using Transport Layer Security (TLS).
-KMS recommends you always use the latest supported TLS version. Clients
-must also support cipher suites with Perfect Forward Secrecy (PFS) such as Ephemeral
-Diffie-Hellman (DHE) or Elliptic Curve Ephemeral Diffie-Hellman (ECDHE). Most modern systems
-such as Java 7 and later support these modes.</p>
+available FIPS endpoints, see <a href="https://docs.aws.amazon.com/general/latest/gr/kms.html#kms_region">Service endpoints</a> in the Key Management Service topic of
+the <i>Amazon Web Services General Reference</i>.</p>
+<p>All KMS API calls must be signed and be transmitted using Transport Layer Security
+(TLS). KMS recommends you always use the latest supported TLS version. Clients must also
+support cipher suites with Perfect Forward Secrecy (PFS) such as Ephemeral Diffie-Hellman
+(DHE) or Elliptic Curve Ephemeral Diffie-Hellman (ECDHE). Most modern systems such as Java 7
+and later support these modes.</p>
 <p>
 <b>Signing Requests</b>
 </p>
 <p>Requests must be signed by using an access key ID and a secret access key. We strongly
 recommend that you <i>do not</i> use your Amazon Web Services account (root) access key ID and
-secret key for everyday work with KMS. Instead, use the access key ID and secret access key
-for an IAM user. You can also use the Amazon Web Services Security Token Service to generate temporary
-security credentials that you can use to sign requests.</p>
+secret access key for everyday work with KMS. Instead, use the access key ID and secret
+access key for an IAM user. You can also use the Amazon Web Services Security Token Service to generate
+temporary security credentials that you can use to sign requests.</p>
 <p>All KMS operations require <a href="https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html">Signature Version 4</a>.</p>
 <p>
 <b>Logging API Requests</b>

package/dist-cjs/endpoint/ruleset.js

@@ -6,7 +6,7 @@ exports.ruleSet = {
     parameters: {
         Region: {
             builtIn: "AWS::Region",
-            required: false,
+            required: true,
             documentation: "The AWS region used to dispatch the request.",
             type: "String",
         },

package/dist-cjs/models/models_0.js

@@ -1,8 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvalidGrantIdException = exports.InvalidImportTokenException = exports.IncorrectKeyMaterialException = exports.WrappingKeySpec = exports.ExpiredImportTokenException = exports.InvalidMarkerException = exports.KeyUnavailableException = exports.InvalidKeyUsageException = exports.InvalidCiphertextException = exports.IncorrectKeyException = exports.DataKeySpec = exports.DataKeyPairSpec = exports.CustomKeyStoreHasCMKsException = exports.UnsupportedOperationException = exports.TagException = exports.MalformedPolicyDocumentException = exports.SigningAlgorithmSpec = exports.MultiRegionKeyType = exports.MacAlgorithmSpec = exports.KeyState = exports.KeyManagerType = exports.ExpirationModelType = exports.EncryptionAlgorithmSpec = exports.OriginType = exports.KeyUsageType = exports.KeySpec = exports.CustomerMasterKeySpec = exports.InvalidGrantTokenException = exports.DisabledException = exports.GrantOperation = exports.IncorrectTrustAnchorException = exports.CustomKeyStoreNameInUseException = exports.LimitExceededException = exports.InvalidAliasNameException = exports.ConnectionStateType = exports.ConnectionErrorCodeType = exports.CustomKeyStoreNotFoundException = exports.CustomKeyStoreInvalidStateException = exports.CloudHsmClusterNotRelatedException = exports.CloudHsmClusterNotFoundException = exports.CloudHsmClusterNotActiveException = exports.CloudHsmClusterInvalidConfigurationException = exports.CloudHsmClusterInUseException = exports.NotFoundException = exports.KMSInvalidStateException = exports.KMSInternalException = exports.InvalidArnException = exports.DependencyTimeoutException = exports.AlreadyExistsException = exports.AlgorithmSpec = void 0;
-exports.GenerateRandomRequestFilterSensitiveLog = exports.GenerateMacResponseFilterSensitiveLog = exports.GenerateMacRequestFilterSensitiveLog = exports.GenerateDataKeyWithoutPlaintextResponseFilterSensitiveLog = exports.GenerateDataKeyWithoutPlaintextRequestFilterSensitiveLog = exports.GenerateDataKeyPairWithoutPlaintextResponseFilterSensitiveLog = exports.GenerateDataKeyPairWithoutPlaintextRequestFilterSensitiveLog = exports.GenerateDataKeyPairResponseFilterSensitiveLog = exports.GenerateDataKeyPairRequestFilterSensitiveLog = exports.GenerateDataKeyResponseFilterSensitiveLog = exports.GenerateDataKeyRequestFilterSensitiveLog = exports.EncryptResponseFilterSensitiveLog = exports.EncryptRequestFilterSensitiveLog = exports.EnableKeyRotationRequestFilterSensitiveLog = exports.EnableKeyRequestFilterSensitiveLog = exports.DisconnectCustomKeyStoreResponseFilterSensitiveLog = exports.DisconnectCustomKeyStoreRequestFilterSensitiveLog = exports.DisableKeyRotationRequestFilterSensitiveLog = exports.DisableKeyRequestFilterSensitiveLog = exports.DescribeKeyResponseFilterSensitiveLog = exports.DescribeKeyRequestFilterSensitiveLog = exports.DescribeCustomKeyStoresResponseFilterSensitiveLog = exports.DescribeCustomKeyStoresRequestFilterSensitiveLog = exports.DeleteImportedKeyMaterialRequestFilterSensitiveLog = exports.DeleteCustomKeyStoreResponseFilterSensitiveLog = exports.DeleteCustomKeyStoreRequestFilterSensitiveLog = exports.DeleteAliasRequestFilterSensitiveLog = exports.DecryptResponseFilterSensitiveLog = exports.DecryptRequestFilterSensitiveLog = exports.CustomKeyStoresListEntryFilterSensitiveLog = exports.CreateKeyResponseFilterSensitiveLog = exports.KeyMetadataFilterSensitiveLog = exports.MultiRegionConfigurationFilterSensitiveLog = exports.MultiRegionKeyFilterSensitiveLog = exports.CreateKeyRequestFilterSensitiveLog = exports.TagFilterSensitiveLog = exports.CreateGrantResponseFilterSensitiveLog = exports.CreateGrantRequestFilterSensitiveLog = exports.GrantConstraintsFilterSensitiveLog = exports.CreateCustomKeyStoreResponseFilterSensitiveLog = exports.CreateCustomKeyStoreRequestFilterSensitiveLog = exports.CreateAliasRequestFilterSensitiveLog = exports.ConnectCustomKeyStoreResponseFilterSensitiveLog = exports.ConnectCustomKeyStoreRequestFilterSensitiveLog = exports.CancelKeyDeletionResponseFilterSensitiveLog = exports.CancelKeyDeletionRequestFilterSensitiveLog = exports.AliasListEntryFilterSensitiveLog = exports.MessageType = exports.KMSInvalidSignatureException = exports.KMSInvalidMacException = void 0;
-exports.VerifyMacResponseFilterSensitiveLog = exports.VerifyMacRequestFilterSensitiveLog = exports.VerifyResponseFilterSensitiveLog = exports.VerifyRequestFilterSensitiveLog = exports.UpdatePrimaryRegionRequestFilterSensitiveLog = exports.UpdateKeyDescriptionRequestFilterSensitiveLog = exports.UpdateCustomKeyStoreResponseFilterSensitiveLog = exports.UpdateCustomKeyStoreRequestFilterSensitiveLog = exports.UpdateAliasRequestFilterSensitiveLog = exports.UntagResourceRequestFilterSensitiveLog = exports.TagResourceRequestFilterSensitiveLog = exports.SignResponseFilterSensitiveLog = exports.SignRequestFilterSensitiveLog = exports.ScheduleKeyDeletionResponseFilterSensitiveLog = exports.ScheduleKeyDeletionRequestFilterSensitiveLog = exports.RevokeGrantRequestFilterSensitiveLog = exports.RetireGrantRequestFilterSensitiveLog = exports.ReplicateKeyResponseFilterSensitiveLog = exports.ReplicateKeyRequestFilterSensitiveLog = exports.ReEncryptResponseFilterSensitiveLog = exports.ReEncryptRequestFilterSensitiveLog = exports.PutKeyPolicyRequestFilterSensitiveLog = exports.ListRetirableGrantsRequestFilterSensitiveLog = exports.ListResourceTagsResponseFilterSensitiveLog = exports.ListResourceTagsRequestFilterSensitiveLog = exports.ListKeysResponseFilterSensitiveLog = exports.ListKeysRequestFilterSensitiveLog = exports.ListKeyPoliciesResponseFilterSensitiveLog = exports.ListKeyPoliciesRequestFilterSensitiveLog = exports.ListGrantsResponseFilterSensitiveLog = exports.ListGrantsRequestFilterSensitiveLog = exports.ListAliasesResponseFilterSensitiveLog = exports.ListAliasesRequestFilterSensitiveLog = exports.KeyListEntryFilterSensitiveLog = exports.ImportKeyMaterialResponseFilterSensitiveLog = exports.ImportKeyMaterialRequestFilterSensitiveLog = exports.GrantListEntryFilterSensitiveLog = exports.GetPublicKeyResponseFilterSensitiveLog = exports.GetPublicKeyRequestFilterSensitiveLog = exports.GetParametersForImportResponseFilterSensitiveLog = exports.GetParametersForImportRequestFilterSensitiveLog = exports.GetKeyRotationStatusResponseFilterSensitiveLog = exports.GetKeyRotationStatusRequestFilterSensitiveLog = exports.GetKeyPolicyResponseFilterSensitiveLog = exports.GetKeyPolicyRequestFilterSensitiveLog = exports.GenerateRandomResponseFilterSensitiveLog = void 0;
+exports.XksKeyInvalidConfigurationException = exports.XksKeyAlreadyInUseException = exports.UnsupportedOperationException = exports.TagException = exports.MalformedPolicyDocumentException = exports.SigningAlgorithmSpec = exports.MultiRegionKeyType = exports.MacAlgorithmSpec = exports.KeyState = exports.KeyManagerType = exports.ExpirationModelType = exports.EncryptionAlgorithmSpec = exports.OriginType = exports.KeyUsageType = exports.KeySpec = exports.CustomerMasterKeySpec = exports.InvalidGrantTokenException = exports.DisabledException = exports.GrantOperation = exports.XksProxyVpcEndpointServiceNotFoundException = exports.XksProxyVpcEndpointServiceInvalidConfigurationException = exports.XksProxyVpcEndpointServiceInUseException = exports.XksProxyUriUnreachableException = exports.XksProxyUriInUseException = exports.XksProxyUriEndpointInUseException = exports.XksProxyInvalidResponseException = exports.XksProxyInvalidConfigurationException = exports.XksProxyIncorrectAuthenticationCredentialException = exports.IncorrectTrustAnchorException = exports.CustomKeyStoreNameInUseException = exports.XksProxyConnectivityType = exports.CustomKeyStoreType = exports.LimitExceededException = exports.InvalidAliasNameException = exports.ConnectionStateType = exports.ConnectionErrorCodeType = exports.CustomKeyStoreNotFoundException = exports.CustomKeyStoreInvalidStateException = exports.CloudHsmClusterNotRelatedException = exports.CloudHsmClusterNotFoundException = exports.CloudHsmClusterNotActiveException = exports.CloudHsmClusterInvalidConfigurationException = exports.CloudHsmClusterInUseException = exports.NotFoundException = exports.KMSInvalidStateException = exports.KMSInternalException = exports.InvalidArnException = exports.DependencyTimeoutException = exports.AlreadyExistsException = exports.AlgorithmSpec = void 0;
+exports.DisableKeyRotationRequestFilterSensitiveLog = exports.DisableKeyRequestFilterSensitiveLog = exports.DescribeKeyResponseFilterSensitiveLog = exports.DescribeKeyRequestFilterSensitiveLog = exports.DescribeCustomKeyStoresResponseFilterSensitiveLog = exports.DescribeCustomKeyStoresRequestFilterSensitiveLog = exports.DeleteImportedKeyMaterialRequestFilterSensitiveLog = exports.DeleteCustomKeyStoreResponseFilterSensitiveLog = exports.DeleteCustomKeyStoreRequestFilterSensitiveLog = exports.DeleteAliasRequestFilterSensitiveLog = exports.DecryptResponseFilterSensitiveLog = exports.DecryptRequestFilterSensitiveLog = exports.CustomKeyStoresListEntryFilterSensitiveLog = exports.XksProxyConfigurationTypeFilterSensitiveLog = exports.CreateKeyResponseFilterSensitiveLog = exports.KeyMetadataFilterSensitiveLog = exports.XksKeyConfigurationTypeFilterSensitiveLog = exports.MultiRegionConfigurationFilterSensitiveLog = exports.MultiRegionKeyFilterSensitiveLog = exports.CreateKeyRequestFilterSensitiveLog = exports.TagFilterSensitiveLog = exports.CreateGrantResponseFilterSensitiveLog = exports.CreateGrantRequestFilterSensitiveLog = exports.GrantConstraintsFilterSensitiveLog = exports.CreateCustomKeyStoreResponseFilterSensitiveLog = exports.CreateCustomKeyStoreRequestFilterSensitiveLog = exports.XksProxyAuthenticationCredentialTypeFilterSensitiveLog = exports.CreateAliasRequestFilterSensitiveLog = exports.ConnectCustomKeyStoreResponseFilterSensitiveLog = exports.ConnectCustomKeyStoreRequestFilterSensitiveLog = exports.CancelKeyDeletionResponseFilterSensitiveLog = exports.CancelKeyDeletionRequestFilterSensitiveLog = exports.AliasListEntryFilterSensitiveLog = exports.MessageType = exports.KMSInvalidSignatureException = exports.KMSInvalidMacException = exports.InvalidGrantIdException = exports.InvalidImportTokenException = exports.IncorrectKeyMaterialException = exports.WrappingKeySpec = exports.ExpiredImportTokenException = exports.InvalidMarkerException = exports.KeyUnavailableException = exports.InvalidKeyUsageException = exports.InvalidCiphertextException = exports.IncorrectKeyException = exports.DataKeySpec = exports.DataKeyPairSpec = exports.CustomKeyStoreHasCMKsException = exports.XksKeyNotFoundException = void 0;
+exports.ScheduleKeyDeletionResponseFilterSensitiveLog = exports.ScheduleKeyDeletionRequestFilterSensitiveLog = exports.RevokeGrantRequestFilterSensitiveLog = exports.RetireGrantRequestFilterSensitiveLog = exports.ReplicateKeyResponseFilterSensitiveLog = exports.ReplicateKeyRequestFilterSensitiveLog = exports.ReEncryptResponseFilterSensitiveLog = exports.ReEncryptRequestFilterSensitiveLog = exports.PutKeyPolicyRequestFilterSensitiveLog = exports.ListRetirableGrantsRequestFilterSensitiveLog = exports.ListResourceTagsResponseFilterSensitiveLog = exports.ListResourceTagsRequestFilterSensitiveLog = exports.ListKeysResponseFilterSensitiveLog = exports.ListKeysRequestFilterSensitiveLog = exports.ListKeyPoliciesResponseFilterSensitiveLog = exports.ListKeyPoliciesRequestFilterSensitiveLog = exports.ListGrantsResponseFilterSensitiveLog = exports.ListGrantsRequestFilterSensitiveLog = exports.ListAliasesResponseFilterSensitiveLog = exports.ListAliasesRequestFilterSensitiveLog = exports.KeyListEntryFilterSensitiveLog = exports.ImportKeyMaterialResponseFilterSensitiveLog = exports.ImportKeyMaterialRequestFilterSensitiveLog = exports.GrantListEntryFilterSensitiveLog = exports.GetPublicKeyResponseFilterSensitiveLog = exports.GetPublicKeyRequestFilterSensitiveLog = exports.GetParametersForImportResponseFilterSensitiveLog = exports.GetParametersForImportRequestFilterSensitiveLog = exports.GetKeyRotationStatusResponseFilterSensitiveLog = exports.GetKeyRotationStatusRequestFilterSensitiveLog = exports.GetKeyPolicyResponseFilterSensitiveLog = exports.GetKeyPolicyRequestFilterSensitiveLog = exports.GenerateRandomResponseFilterSensitiveLog = exports.GenerateRandomRequestFilterSensitiveLog = exports.GenerateMacResponseFilterSensitiveLog = exports.GenerateMacRequestFilterSensitiveLog = exports.GenerateDataKeyWithoutPlaintextResponseFilterSensitiveLog = exports.GenerateDataKeyWithoutPlaintextRequestFilterSensitiveLog = exports.GenerateDataKeyPairWithoutPlaintextResponseFilterSensitiveLog = exports.GenerateDataKeyPairWithoutPlaintextRequestFilterSensitiveLog = exports.GenerateDataKeyPairResponseFilterSensitiveLog = exports.GenerateDataKeyPairRequestFilterSensitiveLog = exports.GenerateDataKeyResponseFilterSensitiveLog = exports.GenerateDataKeyRequestFilterSensitiveLog = exports.EncryptResponseFilterSensitiveLog = exports.EncryptRequestFilterSensitiveLog = exports.EnableKeyRotationRequestFilterSensitiveLog = exports.EnableKeyRequestFilterSensitiveLog = exports.DisconnectCustomKeyStoreResponseFilterSensitiveLog = exports.DisconnectCustomKeyStoreRequestFilterSensitiveLog = void 0;
+exports.VerifyMacResponseFilterSensitiveLog = exports.VerifyMacRequestFilterSensitiveLog = exports.VerifyResponseFilterSensitiveLog = exports.VerifyRequestFilterSensitiveLog = exports.UpdatePrimaryRegionRequestFilterSensitiveLog = exports.UpdateKeyDescriptionRequestFilterSensitiveLog = exports.UpdateCustomKeyStoreResponseFilterSensitiveLog = exports.UpdateCustomKeyStoreRequestFilterSensitiveLog = exports.UpdateAliasRequestFilterSensitiveLog = exports.UntagResourceRequestFilterSensitiveLog = exports.TagResourceRequestFilterSensitiveLog = exports.SignResponseFilterSensitiveLog = exports.SignRequestFilterSensitiveLog = void 0;
 const smithy_client_1 = require("@aws-sdk/smithy-client");
 const KMSServiceException_1 = require("./KMSServiceException");
 var AlgorithmSpec;
@@ -192,6 +193,14 @@ var ConnectionErrorCodeType;
     ConnectionErrorCodeType["USER_LOCKED_OUT"] = "USER_LOCKED_OUT";
     ConnectionErrorCodeType["USER_LOGGED_IN"] = "USER_LOGGED_IN";
     ConnectionErrorCodeType["USER_NOT_FOUND"] = "USER_NOT_FOUND";
+    ConnectionErrorCodeType["XKS_PROXY_ACCESS_DENIED"] = "XKS_PROXY_ACCESS_DENIED";
+    ConnectionErrorCodeType["XKS_PROXY_INVALID_CONFIGURATION"] = "XKS_PROXY_INVALID_CONFIGURATION";
+    ConnectionErrorCodeType["XKS_PROXY_INVALID_RESPONSE"] = "XKS_PROXY_INVALID_RESPONSE";
+    ConnectionErrorCodeType["XKS_PROXY_INVALID_TLS_CONFIGURATION"] = "XKS_PROXY_INVALID_TLS_CONFIGURATION";
+    ConnectionErrorCodeType["XKS_PROXY_NOT_REACHABLE"] = "XKS_PROXY_NOT_REACHABLE";
+    ConnectionErrorCodeType["XKS_PROXY_TIMED_OUT"] = "XKS_PROXY_TIMED_OUT";
+    ConnectionErrorCodeType["XKS_VPC_ENDPOINT_SERVICE_INVALID_CONFIGURATION"] = "XKS_VPC_ENDPOINT_SERVICE_INVALID_CONFIGURATION";
+    ConnectionErrorCodeType["XKS_VPC_ENDPOINT_SERVICE_NOT_FOUND"] = "XKS_VPC_ENDPOINT_SERVICE_NOT_FOUND";
 })(ConnectionErrorCodeType = exports.ConnectionErrorCodeType || (exports.ConnectionErrorCodeType = {}));
 var ConnectionStateType;
 (function (ConnectionStateType) {
@@ -227,6 +236,16 @@ class LimitExceededException extends KMSServiceException_1.KMSServiceException {
     }
 }
 exports.LimitExceededException = LimitExceededException;
+var CustomKeyStoreType;
+(function (CustomKeyStoreType) {
+    CustomKeyStoreType["AWS_CLOUDHSM"] = "AWS_CLOUDHSM";
+    CustomKeyStoreType["EXTERNAL_KEY_STORE"] = "EXTERNAL_KEY_STORE";
+})(CustomKeyStoreType = exports.CustomKeyStoreType || (exports.CustomKeyStoreType = {}));
+var XksProxyConnectivityType;
+(function (XksProxyConnectivityType) {
+    XksProxyConnectivityType["PUBLIC_ENDPOINT"] = "PUBLIC_ENDPOINT";
+    XksProxyConnectivityType["VPC_ENDPOINT_SERVICE"] = "VPC_ENDPOINT_SERVICE";
+})(XksProxyConnectivityType = exports.XksProxyConnectivityType || (exports.XksProxyConnectivityType = {}));
 class CustomKeyStoreNameInUseException extends KMSServiceException_1.KMSServiceException {
     constructor(opts) {
         super({
@@ -253,6 +272,123 @@ class IncorrectTrustAnchorException extends KMSServiceException_1.KMSServiceExce
     }
 }
 exports.IncorrectTrustAnchorException = IncorrectTrustAnchorException;
+class XksProxyIncorrectAuthenticationCredentialException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyIncorrectAuthenticationCredentialException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyIncorrectAuthenticationCredentialException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyIncorrectAuthenticationCredentialException.prototype);
+    }
+}
+exports.XksProxyIncorrectAuthenticationCredentialException = XksProxyIncorrectAuthenticationCredentialException;
+class XksProxyInvalidConfigurationException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyInvalidConfigurationException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyInvalidConfigurationException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyInvalidConfigurationException.prototype);
+    }
+}
+exports.XksProxyInvalidConfigurationException = XksProxyInvalidConfigurationException;
+class XksProxyInvalidResponseException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyInvalidResponseException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyInvalidResponseException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyInvalidResponseException.prototype);
+    }
+}
+exports.XksProxyInvalidResponseException = XksProxyInvalidResponseException;
+class XksProxyUriEndpointInUseException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyUriEndpointInUseException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyUriEndpointInUseException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyUriEndpointInUseException.prototype);
+    }
+}
+exports.XksProxyUriEndpointInUseException = XksProxyUriEndpointInUseException;
+class XksProxyUriInUseException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyUriInUseException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyUriInUseException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyUriInUseException.prototype);
+    }
+}
+exports.XksProxyUriInUseException = XksProxyUriInUseException;
+class XksProxyUriUnreachableException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyUriUnreachableException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyUriUnreachableException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyUriUnreachableException.prototype);
+    }
+}
+exports.XksProxyUriUnreachableException = XksProxyUriUnreachableException;
+class XksProxyVpcEndpointServiceInUseException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyVpcEndpointServiceInUseException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyVpcEndpointServiceInUseException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyVpcEndpointServiceInUseException.prototype);
+    }
+}
+exports.XksProxyVpcEndpointServiceInUseException = XksProxyVpcEndpointServiceInUseException;
+class XksProxyVpcEndpointServiceInvalidConfigurationException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyVpcEndpointServiceInvalidConfigurationException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyVpcEndpointServiceInvalidConfigurationException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyVpcEndpointServiceInvalidConfigurationException.prototype);
+    }
+}
+exports.XksProxyVpcEndpointServiceInvalidConfigurationException = XksProxyVpcEndpointServiceInvalidConfigurationException;
+class XksProxyVpcEndpointServiceNotFoundException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksProxyVpcEndpointServiceNotFoundException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksProxyVpcEndpointServiceNotFoundException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksProxyVpcEndpointServiceNotFoundException.prototype);
+    }
+}
+exports.XksProxyVpcEndpointServiceNotFoundException = XksProxyVpcEndpointServiceNotFoundException;
 var GrantOperation;
 (function (GrantOperation) {
     GrantOperation["CreateGrant"] = "CreateGrant";
@@ -341,6 +477,7 @@ var OriginType;
     OriginType["AWS_CLOUDHSM"] = "AWS_CLOUDHSM";
     OriginType["AWS_KMS"] = "AWS_KMS";
     OriginType["EXTERNAL"] = "EXTERNAL";
+    OriginType["EXTERNAL_KEY_STORE"] = "EXTERNAL_KEY_STORE";
 })(OriginType = exports.OriginType || (exports.OriginType = {}));
 var EncryptionAlgorithmSpec;
 (function (EncryptionAlgorithmSpec) {
@@ -434,6 +571,45 @@ class UnsupportedOperationException extends KMSServiceException_1.KMSServiceExce
     }
 }
 exports.UnsupportedOperationException = UnsupportedOperationException;
+class XksKeyAlreadyInUseException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksKeyAlreadyInUseException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksKeyAlreadyInUseException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksKeyAlreadyInUseException.prototype);
+    }
+}
+exports.XksKeyAlreadyInUseException = XksKeyAlreadyInUseException;
+class XksKeyInvalidConfigurationException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksKeyInvalidConfigurationException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksKeyInvalidConfigurationException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksKeyInvalidConfigurationException.prototype);
+    }
+}
+exports.XksKeyInvalidConfigurationException = XksKeyInvalidConfigurationException;
+class XksKeyNotFoundException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "XksKeyNotFoundException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "XksKeyNotFoundException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, XksKeyNotFoundException.prototype);
+    }
+}
+exports.XksKeyNotFoundException = XksKeyNotFoundException;
 class CustomKeyStoreHasCMKsException extends KMSServiceException_1.KMSServiceException {
     constructor(opts) {
         super({
@@ -639,9 +815,18 @@ const CreateAliasRequestFilterSensitiveLog = (obj) => ({
     ...obj,
 });
 exports.CreateAliasRequestFilterSensitiveLog = CreateAliasRequestFilterSensitiveLog;
+const XksProxyAuthenticationCredentialTypeFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.AccessKeyId && { AccessKeyId: smithy_client_1.SENSITIVE_STRING }),
+    ...(obj.RawSecretAccessKey && { RawSecretAccessKey: smithy_client_1.SENSITIVE_STRING }),
+});
+exports.XksProxyAuthenticationCredentialTypeFilterSensitiveLog = XksProxyAuthenticationCredentialTypeFilterSensitiveLog;
 const CreateCustomKeyStoreRequestFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.KeyStorePassword && { KeyStorePassword: smithy_client_1.SENSITIVE_STRING }),
+    ...(obj.XksProxyAuthenticationCredential && {
+        XksProxyAuthenticationCredential: (0, exports.XksProxyAuthenticationCredentialTypeFilterSensitiveLog)(obj.XksProxyAuthenticationCredential),
+    }),
 });
 exports.CreateCustomKeyStoreRequestFilterSensitiveLog = CreateCustomKeyStoreRequestFilterSensitiveLog;
 const CreateCustomKeyStoreResponseFilterSensitiveLog = (obj) => ({
@@ -676,6 +861,10 @@ const MultiRegionConfigurationFilterSensitiveLog = (obj) => ({
     ...obj,
 });
 exports.MultiRegionConfigurationFilterSensitiveLog = MultiRegionConfigurationFilterSensitiveLog;
+const XksKeyConfigurationTypeFilterSensitiveLog = (obj) => ({
+    ...obj,
+});
+exports.XksKeyConfigurationTypeFilterSensitiveLog = XksKeyConfigurationTypeFilterSensitiveLog;
 const KeyMetadataFilterSensitiveLog = (obj) => ({
     ...obj,
 });
@@ -684,8 +873,16 @@ const CreateKeyResponseFilterSensitiveLog = (obj) => ({
     ...obj,
 });
 exports.CreateKeyResponseFilterSensitiveLog = CreateKeyResponseFilterSensitiveLog;
+const XksProxyConfigurationTypeFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.AccessKeyId && { AccessKeyId: smithy_client_1.SENSITIVE_STRING }),
+});
+exports.XksProxyConfigurationTypeFilterSensitiveLog = XksProxyConfigurationTypeFilterSensitiveLog;
 const CustomKeyStoresListEntryFilterSensitiveLog = (obj) => ({
     ...obj,
+    ...(obj.XksProxyConfiguration && {
+        XksProxyConfiguration: (0, exports.XksProxyConfigurationTypeFilterSensitiveLog)(obj.XksProxyConfiguration),
+    }),
 });
 exports.CustomKeyStoresListEntryFilterSensitiveLog = CustomKeyStoresListEntryFilterSensitiveLog;
 const DecryptRequestFilterSensitiveLog = (obj) => ({
@@ -719,6 +916,9 @@ const DescribeCustomKeyStoresRequestFilterSensitiveLog = (obj) => ({
 exports.DescribeCustomKeyStoresRequestFilterSensitiveLog = DescribeCustomKeyStoresRequestFilterSensitiveLog;
 const DescribeCustomKeyStoresResponseFilterSensitiveLog = (obj) => ({
     ...obj,
+    ...(obj.CustomKeyStores && {
+        CustomKeyStores: obj.CustomKeyStores.map((item) => (0, exports.CustomKeyStoresListEntryFilterSensitiveLog)(item)),
+    }),
 });
 exports.DescribeCustomKeyStoresResponseFilterSensitiveLog = DescribeCustomKeyStoresResponseFilterSensitiveLog;
 const DescribeKeyRequestFilterSensitiveLog = (obj) => ({
@@ -967,6 +1167,9 @@ exports.UpdateAliasRequestFilterSensitiveLog = UpdateAliasRequestFilterSensitive
 const UpdateCustomKeyStoreRequestFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.KeyStorePassword && { KeyStorePassword: smithy_client_1.SENSITIVE_STRING }),
+    ...(obj.XksProxyAuthenticationCredential && {
+        XksProxyAuthenticationCredential: (0, exports.XksProxyAuthenticationCredentialTypeFilterSensitiveLog)(obj.XksProxyAuthenticationCredential),
+    }),
 });
 exports.UpdateCustomKeyStoreRequestFilterSensitiveLog = UpdateCustomKeyStoreRequestFilterSensitiveLog;
 const UpdateCustomKeyStoreResponseFilterSensitiveLog = (obj) => ({