@aws-sdk/client-kms 3.28.0 → 3.32.0

package/dist/types/ts3.4/commands/UpdatePrimaryRegionCommand.d.ts

@@ -13,19 +13,19 @@ export interface UpdatePrimaryRegionCommandOutput extends __MetadataBearer {
  *       in <code>us-east-1</code> and a replica key in <code>eu-west-2</code>. If you run
  *         <code>UpdatePrimaryRegion</code> with a <code>PrimaryRegion</code> value of
  *         <code>eu-west-2</code>, the primary key is now the key in <code>eu-west-2</code>, and the
- *       key in <code>us-east-1</code> becomes a replica key. For details, see </p>
- *          <p>This operation supports <i>multi-Region keys</i>, an AWS KMS feature that lets you create multiple
- *       interoperable CMKs in different AWS Regions. Because these CMKs have the same key ID, key
- *       material, and other metadata, you can use them to encrypt data in one AWS Region and decrypt
- *       it in a different AWS Region without making a cross-Region call or exposing the plaintext data. For more information about multi-Region keys, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html">Using multi-Region keys</a> in the <i>AWS Key Management Service Developer Guide</i>.</p>
+ *       key in <code>us-east-1</code> becomes a replica key. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-manage.html#multi-region-update">Updating the primary Region</a> in the <i>Key Management Service Developer Guide</i>.</p>
+ *          <p>This operation supports <i>multi-Region keys</i>, an KMS feature that lets you create multiple
+ *       interoperable KMS keys in different Amazon Web Services Regions. Because these KMS keys have the same key ID, key
+ *       material, and other metadata, you can use them interchangeably to encrypt data in one Amazon Web Services Region and decrypt
+ *       it in a different Amazon Web Services Region without re-encrypting the data or making a cross-Region call. For more information about multi-Region keys, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html">Using multi-Region keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>The <i>primary key</i> of a multi-Region key is the source for properties
  *       that are always shared by primary and replica keys, including the key material, <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-id">key ID</a>, <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-spec">key spec</a>, <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-usage">key usage</a>, <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-origin">key material
  *       origin</a>, and <a href="https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html">automatic
  *         key rotation</a>. It's the only key that can be replicated. You cannot <a href="https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html">delete the primary
- *         key</a> until all replicas are deleted.</p>
+ *           key</a> until all replica keys are deleted.</p>
  *          <p>The key ID and primary Region that you specify uniquely identify the replica key that will
  *       become the primary key. The primary Region must already have a replica key. This operation
- *       does not create a CMK in the specified Region. To find the replica keys, use the <a>DescribeKey</a> operation on the primary key or any replica key. To create a replica
+ *       does not create a KMS key in the specified Region. To find the replica keys, use the <a>DescribeKey</a> operation on the primary key or any replica key. To create a replica
  *       key, use the <a>ReplicateKey</a> operation.</p>
  *          <p>You can run this operation while using the affected multi-Region keys in cryptographic
  *       operations. This operation should not delay, interrupt, or cause failures in cryptographic
@@ -38,24 +38,24 @@ export interface UpdatePrimaryRegionCommandOutput extends __MetadataBearer {
  *       cryptographic operations, but you cannot replicate the new primary key or perform certain
  *       management operations, such as enabling or disabling these keys. For details about the
  *         <code>Updating</code> key state, see <a href="kms/latest/developerguide/key-state.html">Key state:
- *         Effect on your CMK</a> in the <i>AWS Key Management Service Developer Guide</i>.</p>
+ *         Effect on your KMS key</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>This operation does not return any output. To verify that primary key is changed, use the
  *         <a>DescribeKey</a> operation.</p>
  *          <p>
  *             <b>Cross-account use</b>: No. You cannot use this operation in a
- *       different AWS account. </p>
+ *       different Amazon Web Services account. </p>
  *          <p>
  *             <b>Required permissions</b>: </p>
  *          <ul>
  *             <li>
  *                <p>
- *                   <code>kms:UpdatePrimaryRegion</code> on the current primary CMK (in the primary CMK's
- *           Region). Include this permission primary CMK's key policy.</p>
+ *                   <code>kms:UpdatePrimaryRegion</code> on the current primary key (in the primary key's
+ *           Region). Include this permission primary key's key policy.</p>
  *             </li>
  *             <li>
  *                <p>
- *                   <code>kms:UpdatePrimaryRegion</code> on the current replica CMK (in the replica CMK's
- *           Region). Include this permission in the replica CMK's key policy.</p>
+ *                   <code>kms:UpdatePrimaryRegion</code> on the current replica key (in the replica key's
+ *           Region). Include this permission in the replica key's key policy.</p>
  *             </li>
  *          </ul>
  *          <p>

package/dist/types/ts3.4/commands/VerifyCommand.d.ts

@@ -9,28 +9,28 @@ export interface VerifyCommandOutput extends VerifyResponse, __MetadataBearer {
 /**
  * <p>Verifies a digital signature that was generated by the <a>Sign</a> operation. </p>
  *          <p></p>
- *          <p>Verification confirms that an authorized user signed the message with the specified CMK
+ *          <p>Verification confirms that an authorized user signed the message with the specified KMS key
  *       and signing algorithm, and the message hasn't changed since it was signed. If the signature is
  *       verified, the value of the <code>SignatureValid</code> field in the response is
  *         <code>True</code>. If the signature verification fails, the <code>Verify</code> operation
  *       fails with an <code>KMSInvalidSignatureException</code> exception.</p>
- *          <p>A digital signature is generated by using the private key in an asymmetric CMK. The
- *       signature is verified by using the public key in the same asymmetric CMK.
- *       For information about symmetric and asymmetric CMKs, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric CMKs</a> in the <i>AWS Key Management Service Developer Guide</i>.</p>
+ *          <p>A digital signature is generated by using the private key in an asymmetric KMS key. The
+ *       signature is verified by using the public key in the same asymmetric KMS key.
+ *       For information about symmetric and asymmetric KMS keys, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>To verify a digital signature, you can use the <code>Verify</code> operation. Specify the
- *       same asymmetric CMK, message, and signing algorithm that were used to produce the
+ *       same asymmetric KMS key, message, and signing algorithm that were used to produce the
  *       signature.</p>
- *          <p>You can also verify the digital signature by using the public key of the CMK outside of
- *       AWS KMS. Use the <a>GetPublicKey</a> operation to download the public key in the
- *       asymmetric CMK and then use the public key to verify the signature outside of AWS KMS. The
- *       advantage of using the <code>Verify</code> operation is that it is performed within AWS KMS. As
+ *          <p>You can also verify the digital signature by using the public key of the KMS key outside of
+ *       KMS. Use the <a>GetPublicKey</a> operation to download the public key in the
+ *       asymmetric KMS key and then use the public key to verify the signature outside of KMS. The
+ *       advantage of using the <code>Verify</code> operation is that it is performed within KMS. As
  *       a result, it's easy to call, the operation is performed within the FIPS boundary, it is logged
- *       in AWS CloudTrail, and you can use key policy and IAM policy to determine who is authorized to use
- *       the CMK to verify signatures.</p>
- *          <p>The CMK that you use for this operation must be in a compatible key state. For
- * details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key state: Effect on your CMK</a> in the <i>AWS Key Management Service Developer Guide</i>.</p>
+ *       in CloudTrail, and you can use key policy and IAM policy to determine who is authorized to use
+ *       the KMS key to verify signatures.</p>
+ *          <p>The KMS key that you use for this operation must be in a compatible key state. For
+ * details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key state: Effect on your KMS key</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>
- *             <b>Cross-account use</b>: Yes. To perform this operation with a CMK in a different AWS account, specify
+ *             <b>Cross-account use</b>: Yes. To perform this operation with a KMS key in a different Amazon Web Services account, specify
  *   the key ARN or alias ARN in the value of the <code>KeyId</code> parameter. </p>
  *
  *          <p>