@aws-sdk/client-kms 3.32.0 → 3.36.0

package/CHANGELOG.md

@@ -3,6 +3,51 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.36.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.35.0...v3.36.0) (2021-10-08)
+
+
+### Features
+
+* **clients:** update clients as of 10/07/2021 ([#2879](https://github.com/aws/aws-sdk-js-v3/issues/2879)) ([1f4441e](https://github.com/aws/aws-sdk-js-v3/commit/1f4441e46b63ae6ff01067780b26d49916c267a0))
+* publish files in dist-* only ([#2873](https://github.com/aws/aws-sdk-js-v3/issues/2873)) ([53b4243](https://github.com/aws/aws-sdk-js-v3/commit/53b4243b066f25ff2412d5f0dea1036054b2df32))
+* **codegen:** ts-ignore packageInfo imports in codegen ([#2875](https://github.com/aws/aws-sdk-js-v3/issues/2875)) ([99d9267](https://github.com/aws/aws-sdk-js-v3/commit/99d926762193e83a354edec6e9de2b0543449704))
+* **tsconfig:** remove sourceMap ([#2867](https://github.com/aws/aws-sdk-js-v3/issues/2867)) ([d25f526](https://github.com/aws/aws-sdk-js-v3/commit/d25f526627a02a2ca28675fecce66c76b6c97966))
+
+
+
+
+
+# [3.35.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.34.0...v3.35.0) (2021-10-04)
+
+
+### Features
+
+* **clients:** eslint --fix using esprint ([#2849](https://github.com/aws/aws-sdk-js-v3/issues/2849)) ([94d0a2d](https://github.com/aws/aws-sdk-js-v3/commit/94d0a2d8a0579ee0a742337937ad05735cfbc1ba))
+* **clients:** move source files to 'src' folder ([#2845](https://github.com/aws/aws-sdk-js-v3/issues/2845)) ([e0025cd](https://github.com/aws/aws-sdk-js-v3/commit/e0025cddbba244a41ddf1fd1adb761142e15c22d))
+
+
+
+
+
+# [3.34.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.33.0...v3.34.0) (2021-09-24)
+
+
+### Features
+
+* **clients:** remove comments from transpiled JS files ([#2817](https://github.com/aws/aws-sdk-js-v3/issues/2817)) ([d01420b](https://github.com/aws/aws-sdk-js-v3/commit/d01420b247966c8ec84c1dd0a1b42512ede10c90))
+
+
+
+
+
+# [3.33.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.32.0...v3.33.0) (2021-09-21)
+
+**Note:** Version bump only for package @aws-sdk/client-kms
+
+
+
+
+
 # [3.32.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.31.0...v3.32.0) (2021-09-17)
 
 **Note:** Version bump only for package @aws-sdk/client-kms

package/README.md

@@ -41,10 +41,11 @@ security credentials that you can use to sign requests.</p>
 <p>
 <b>Logging API Requests</b>
 </p>
-<p>KMS supports CloudTrail, a service that logs Amazon Web Services API calls and related events for your Amazon Web Services account and delivers them to an Amazon S3 bucket that you specify. By using the information
-collected by CloudTrail, you can determine what requests were made to KMS, who made the request,
-when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find
-your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/">CloudTrail User Guide</a>.</p>
+<p>KMS supports CloudTrail, a service that logs Amazon Web Services API calls and related events for your
+Amazon Web Services account and delivers them to an Amazon S3 bucket that you specify. By using the
+information collected by CloudTrail, you can determine what requests were made to KMS, who made
+the request, when it was made, and so on. To learn more about CloudTrail, including how to turn it
+on and find your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/">CloudTrail User Guide</a>.</p>
 <p>
 <b>Additional Resources</b>
 </p>
@@ -52,9 +53,9 @@ your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/lates
 <ul>
 <li>
 <p>
-<a href="https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html">Amazon Web Services Security
-Credentials</a> - This topic provides general information about the types of
-credentials used to access Amazon Web Services.</p>
+<a href="https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html">Amazon Web Services
+Security Credentials</a> - This topic provides general information about the types
+of credentials used to access Amazon Web Services.</p>
 </li>
 <li>
 <p>

package/{dist/cjs → dist-cjs}/KMS.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KMS = void 0;
-const KMSClient_1 = require("./KMSClient");
 const CancelKeyDeletionCommand_1 = require("./commands/CancelKeyDeletionCommand");
 const ConnectCustomKeyStoreCommand_1 = require("./commands/ConnectCustomKeyStoreCommand");
 const CreateAliasCommand_1 = require("./commands/CreateAliasCommand");
@@ -50,6 +49,7 @@ const UpdateCustomKeyStoreCommand_1 = require("./commands/UpdateCustomKeyStoreCo
 const UpdateKeyDescriptionCommand_1 = require("./commands/UpdateKeyDescriptionCommand");
 const UpdatePrimaryRegionCommand_1 = require("./commands/UpdatePrimaryRegionCommand");
 const VerifyCommand_1 = require("./commands/VerifyCommand");
+const KMSClient_1 = require("./KMSClient");
 /**
  * <fullname>Key Management Service</fullname>
  *          <p>Key Management Service (KMS) is an encryption and key management web service. This guide describes
@@ -84,10 +84,11 @@ const VerifyCommand_1 = require("./commands/VerifyCommand");
  *          <p>
  *             <b>Logging API Requests</b>
  *          </p>
- *          <p>KMS supports CloudTrail, a service that logs Amazon Web Services API calls and related events for your Amazon Web Services account and delivers them to an Amazon S3 bucket that you specify. By using the information
- *       collected by CloudTrail, you can determine what requests were made to KMS, who made the request,
- *       when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find
- *       your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/">CloudTrail User Guide</a>.</p>
+ *          <p>KMS supports CloudTrail, a service that logs Amazon Web Services API calls and related events for your
+ *       Amazon Web Services account and delivers them to an Amazon S3 bucket that you specify. By using the
+ *       information collected by CloudTrail, you can determine what requests were made to KMS, who made
+ *       the request, when it was made, and so on. To learn more about CloudTrail, including how to turn it
+ *       on and find your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/">CloudTrail User Guide</a>.</p>
  *          <p>
  *             <b>Additional Resources</b>
  *          </p>
@@ -95,9 +96,9 @@ const VerifyCommand_1 = require("./commands/VerifyCommand");
  *          <ul>
  *             <li>
  *                <p>
- *                   <a href="https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html">Amazon Web Services Security
- *             Credentials</a> - This topic provides general information about the types of
- *           credentials used to access Amazon Web Services.</p>
+ *                   <a href="https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html">Amazon Web Services
+ *             Security Credentials</a> - This topic provides general information about the types
+ *           of credentials used to access Amazon Web Services.</p>
  *             </li>
  *             <li>
  *                <p>
@@ -816,4 +817,3 @@ class KMS extends KMSClient_1.KMSClient {
     }
 }
 exports.KMS = KMS;
-//# sourceMappingURL=KMS.js.map

package/{dist/cjs → dist-cjs}/KMSClient.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KMSClient = void 0;
-const runtimeConfig_1 = require("./runtimeConfig");
 const config_resolver_1 = require("@aws-sdk/config-resolver");
 const middleware_content_length_1 = require("@aws-sdk/middleware-content-length");
 const middleware_host_header_1 = require("@aws-sdk/middleware-host-header");
@@ -10,6 +9,7 @@ const middleware_retry_1 = require("@aws-sdk/middleware-retry");
 const middleware_signing_1 = require("@aws-sdk/middleware-signing");
 const middleware_user_agent_1 = require("@aws-sdk/middleware-user-agent");
 const smithy_client_1 = require("@aws-sdk/smithy-client");
+const runtimeConfig_1 = require("./runtimeConfig");
 /**
  * <fullname>Key Management Service</fullname>
  *          <p>Key Management Service (KMS) is an encryption and key management web service. This guide describes
@@ -44,10 +44,11 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  *          <p>
  *             <b>Logging API Requests</b>
  *          </p>
- *          <p>KMS supports CloudTrail, a service that logs Amazon Web Services API calls and related events for your Amazon Web Services account and delivers them to an Amazon S3 bucket that you specify. By using the information
- *       collected by CloudTrail, you can determine what requests were made to KMS, who made the request,
- *       when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find
- *       your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/">CloudTrail User Guide</a>.</p>
+ *          <p>KMS supports CloudTrail, a service that logs Amazon Web Services API calls and related events for your
+ *       Amazon Web Services account and delivers them to an Amazon S3 bucket that you specify. By using the
+ *       information collected by CloudTrail, you can determine what requests were made to KMS, who made
+ *       the request, when it was made, and so on. To learn more about CloudTrail, including how to turn it
+ *       on and find your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/">CloudTrail User Guide</a>.</p>
  *          <p>
  *             <b>Additional Resources</b>
  *          </p>
@@ -55,9 +56,9 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  *          <ul>
  *             <li>
  *                <p>
- *                   <a href="https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html">Amazon Web Services Security
- *             Credentials</a> - This topic provides general information about the types of
- *           credentials used to access Amazon Web Services.</p>
+ *                   <a href="https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html">Amazon Web Services
+ *             Security Credentials</a> - This topic provides general information about the types
+ *           of credentials used to access Amazon Web Services.</p>
  *             </li>
  *             <li>
  *                <p>
@@ -103,13 +104,13 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  */
 class KMSClient extends smithy_client_1.Client {
     constructor(configuration) {
-        let _config_0 = runtimeConfig_1.getRuntimeConfig(configuration);
-        let _config_1 = config_resolver_1.resolveRegionConfig(_config_0);
-        let _config_2 = config_resolver_1.resolveEndpointsConfig(_config_1);
-        let _config_3 = middleware_retry_1.resolveRetryConfig(_config_2);
-        let _config_4 = middleware_host_header_1.resolveHostHeaderConfig(_config_3);
-        let _config_5 = middleware_signing_1.resolveAwsAuthConfig(_config_4);
-        let _config_6 = middleware_user_agent_1.resolveUserAgentConfig(_config_5);
+        const _config_0 = runtimeConfig_1.getRuntimeConfig(configuration);
+        const _config_1 = config_resolver_1.resolveRegionConfig(_config_0);
+        const _config_2 = config_resolver_1.resolveEndpointsConfig(_config_1);
+        const _config_3 = middleware_retry_1.resolveRetryConfig(_config_2);
+        const _config_4 = middleware_host_header_1.resolveHostHeaderConfig(_config_3);
+        const _config_5 = middleware_signing_1.resolveAwsAuthConfig(_config_4);
+        const _config_6 = middleware_user_agent_1.resolveUserAgentConfig(_config_5);
         super(_config_6);
         this.config = _config_6;
         this.middlewareStack.use(middleware_retry_1.getRetryPlugin(this.config));
@@ -129,4 +130,3 @@ class KMSClient extends smithy_client_1.Client {
     }
 }
 exports.KMSClient = KMSClient;
-//# sourceMappingURL=KMSClient.js.map

package/{dist/cjs → dist-cjs}/commands/CancelKeyDeletionCommand.js

@@ -1,18 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CancelKeyDeletionCommand = void 0;
-const models_0_1 = require("../models/models_0");
-const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 const middleware_serde_1 = require("@aws-sdk/middleware-serde");
 const smithy_client_1 = require("@aws-sdk/smithy-client");
+const models_0_1 = require("../models/models_0");
+const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 /**
- * <p>Cancels the deletion of a KMS key. When this operation succeeds, the key
- *       state of the KMS key is <code>Disabled</code>. To enable the KMS key, use <a>EnableKey</a>. </p>
- *          <p>For more information about scheduling and canceling deletion of a KMS key, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html">Deleting KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
+ * <p>Cancels the deletion of a KMS key. When this operation succeeds, the key state of the KMS
+ *       key is <code>Disabled</code>. To enable the KMS key, use <a>EnableKey</a>. </p>
+ *          <p>For more information about scheduling and canceling deletion of a KMS key, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html">Deleting KMS keys</a> in the
+ *       <i>Key Management Service Developer Guide</i>.</p>
  *          <p>The KMS key that you use for this operation must be in a compatible key state. For
  * details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key state: Effect on your KMS key</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>
- *             <b>Cross-account use</b>: No. You cannot perform this operation on a KMS key in a different Amazon Web Services account.</p>
+ *             <b>Cross-account
+ *         use</b>: No. You cannot perform this operation on a KMS key in a different Amazon Web Services account.</p>
  *          <p>
  *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CancelKeyDeletion</a> (key policy)</p>
  *          <p>
@@ -69,4 +71,3 @@ class CancelKeyDeletionCommand extends smithy_client_1.Command {
     }
 }
 exports.CancelKeyDeletionCommand = CancelKeyDeletionCommand;
-//# sourceMappingURL=CancelKeyDeletionCommand.js.map

package/{dist/cjs → dist-cjs}/commands/ConnectCustomKeyStoreCommand.js

@@ -1,15 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ConnectCustomKeyStoreCommand = void 0;
-const models_0_1 = require("../models/models_0");
-const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 const middleware_serde_1 = require("@aws-sdk/middleware-serde");
 const smithy_client_1 = require("@aws-sdk/smithy-client");
+const models_0_1 = require("../models/models_0");
+const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 /**
  * <p>Connects or reconnects a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html">custom key store</a> to its associated CloudHSM cluster.</p>
- *          <p>The custom key store must be connected before you can create KMS keys
- *       in the key store or use the KMS keys it contains. You can disconnect and reconnect a custom key
- *       store at any time.</p>
+ *          <p>The custom key store must be connected before you can create KMS keys in the key store or
+ *       use the KMS keys it contains. You can disconnect and reconnect a custom key store at any
+ *       time.</p>
  *          <p>To connect a custom key store, its associated CloudHSM cluster must have at least one active
  *       HSM. To get the number of active HSMs in a cluster, use the <a href="https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DescribeClusters.html">DescribeClusters</a> operation. To add HSMs
  *       to the cluster, use the <a href="https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_CreateHsm.html">CreateHsm</a> operation. Also, the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-store-concepts.html#concept-kmsuser">
@@ -119,4 +119,3 @@ class ConnectCustomKeyStoreCommand extends smithy_client_1.Command {
     }
 }
 exports.ConnectCustomKeyStoreCommand = ConnectCustomKeyStoreCommand;
-//# sourceMappingURL=ConnectCustomKeyStoreCommand.js.map

package/{dist/cjs → dist-cjs}/commands/CreateAliasCommand.js

@@ -1,21 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CreateAliasCommand = void 0;
-const models_0_1 = require("../models/models_0");
-const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 const middleware_serde_1 = require("@aws-sdk/middleware-serde");
 const smithy_client_1 = require("@aws-sdk/smithy-client");
+const models_0_1 = require("../models/models_0");
+const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 /**
  * <p>Creates a friendly name for a KMS key. </p>
  *          <note>
  *             <p>Adding, deleting, or updating an alias can allow or deny permission to the KMS key. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/abac.html">Using ABAC in KMS</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          </note>
  *          <p>You can use an alias to identify a KMS key in the KMS console, in the <a>DescribeKey</a> operation and in <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations">cryptographic operations</a>, such as <a>Encrypt</a> and
- *         <a>GenerateDataKey</a>. You can also change the KMS key that's associated with the
- *       alias (<a>UpdateAlias</a>) or delete the alias (<a>DeleteAlias</a>) at
- *       any time. These operations don't affect the underlying KMS key. </p>
+ *         <a>GenerateDataKey</a>. You can also change the KMS key that's associated with
+ *       the alias (<a>UpdateAlias</a>) or delete the alias (<a>DeleteAlias</a>)
+ *       at any time. These operations don't affect the underlying KMS key. </p>
  *          <p>You can associate the alias with any customer managed key in the same Amazon Web Services Region. Each
- *       alias is associated with only one KMS key at a time, but a KMS key can have multiple aliases. A valid KMS key is required. You can't create an alias without a KMS key.</p>
+ *       alias is associated with only one KMS key at a time, but a KMS key can have multiple aliases.
+ *       A valid KMS key is required. You can't create an alias without a KMS key.</p>
  *          <p>The alias must be unique in the account and Region, but you can have aliases with the same
  *       name in different Regions. For detailed information about aliases, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html">Using aliases</a> in the
  *       <i>Key Management Service Developer Guide</i>.</p>
@@ -32,14 +33,17 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  *          <ul>
  *             <li>
  *                <p>
- *                   <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateAlias</a> on the alias (IAM policy).</p>
+ *                   <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateAlias</a> on
+ *           the alias (IAM policy).</p>
  *             </li>
  *             <li>
  *                <p>
- *                   <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateAlias</a> on the KMS key (key policy).</p>
+ *                   <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateAlias</a> on
+ *           the KMS key (key policy).</p>
  *             </li>
  *          </ul>
- *          <p>For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html#alias-access">Controlling access to aliases</a> in the <i>Key Management Service Developer Guide</i>.</p>
+ *          <p>For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html#alias-access">Controlling access to aliases</a> in the
+ *       <i>Key Management Service Developer Guide</i>.</p>
  *          <p>
  *             <b>Related operations:</b>
  *          </p>
@@ -111,4 +115,3 @@ class CreateAliasCommand extends smithy_client_1.Command {
     }
 }
 exports.CreateAliasCommand = CreateAliasCommand;
-//# sourceMappingURL=CreateAliasCommand.js.map

package/{dist/cjs → dist-cjs}/commands/CreateCustomKeyStoreCommand.js

@@ -1,10 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CreateCustomKeyStoreCommand = void 0;
-const models_0_1 = require("../models/models_0");
-const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 const middleware_serde_1 = require("@aws-sdk/middleware-serde");
 const smithy_client_1 = require("@aws-sdk/smithy-client");
+const models_0_1 = require("../models/models_0");
+const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 /**
  * <p>Creates a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html">custom key store</a> that is associated with an <a href="https://docs.aws.amazon.com/cloudhsm/latest/userguide/clusters.html">CloudHSM cluster</a> that you own and
  *     manage.</p>
@@ -107,4 +107,3 @@ class CreateCustomKeyStoreCommand extends smithy_client_1.Command {
     }
 }
 exports.CreateCustomKeyStoreCommand = CreateCustomKeyStoreCommand;
-//# sourceMappingURL=CreateCustomKeyStoreCommand.js.map

package/{dist/cjs → dist-cjs}/commands/CreateGrantCommand.js

@@ -1,13 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CreateGrantCommand = void 0;
-const models_0_1 = require("../models/models_0");
-const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 const middleware_serde_1 = require("@aws-sdk/middleware-serde");
 const smithy_client_1 = require("@aws-sdk/smithy-client");
+const models_0_1 = require("../models/models_0");
+const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 /**
  * <p>Adds a grant to a KMS key. </p>
- *          <p>A <i>grant</i> is a policy instrument that allows Amazon Web Services principals to use KMS keys in cryptographic operations. It also can allow them to view a KMS key (<a>DescribeKey</a>) and create and manage grants. When authorizing access to a KMS key, grants are considered along with key policies and IAM policies. Grants are often used for
+ *          <p>A <i>grant</i> is a policy instrument that allows Amazon Web Services principals to use
+ *       KMS keys in cryptographic operations. It also can allow them to view a KMS key (<a>DescribeKey</a>) and create and manage grants. When authorizing access to a KMS key,
+ *       grants are considered along with key policies and IAM policies. Grants are often used for
  *       temporary permissions because you can create one, use its permissions, and delete it without
  *       changing your key policies or IAM policies. </p>
  *          <p>For detailed information about grants, including grant terminology, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/grants.html">Using grants</a> in the
@@ -16,28 +18,29 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  *             </i>. For examples of working with grants in several
  *       programming languages, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-grants.html">Programming grants</a>. </p>
  *          <p>The <code>CreateGrant</code> operation returns a <code>GrantToken</code> and a
- *       <code>GrantId</code>.</p>
+ *         <code>GrantId</code>.</p>
  *          <ul>
  *             <li>
- *                <p>When you create, retire, or revoke a grant, there might be a brief delay, usually less than five minutes, until the grant is available throughout KMS. This state is known as <i>eventual consistency</i>. Once the grant has achieved eventual consistency, the grantee principal
- *         can use the permissions in the grant without identifying the grant. </p>
+ *                <p>When you create, retire, or revoke a grant, there might be a brief delay, usually less than five minutes, until the grant is available throughout KMS. This state is known as <i>eventual consistency</i>. Once the grant has achieved eventual consistency, the grantee
+ *           principal can use the permissions in the grant without identifying the grant. </p>
  *                <p>However, to use the permissions in the grant immediately, use the
- *           <code>GrantToken</code> that <code>CreateGrant</code> returns. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token">Using a grant
- *             token</a> in the <i>
+ *             <code>GrantToken</code> that <code>CreateGrant</code> returns. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token">Using a
+ *             grant token</a> in the <i>
  *                      <i>Key Management Service Developer Guide</i>
  *                   </i>.</p>
  *             </li>
  *             <li>
- *                <p>The <code>CreateGrant</code> operation also returns a <code>GrantId</code>. You can use the
- *         <code>GrantId</code> and a key identifier to identify the grant in the <a>RetireGrant</a> and <a>RevokeGrant</a> operations. To find the grant
- *         ID, use the <a>ListGrants</a> or <a>ListRetirableGrants</a>
- *         operations.</p>
+ *                <p>The <code>CreateGrant</code> operation also returns a <code>GrantId</code>. You can
+ *           use the <code>GrantId</code> and a key identifier to identify the grant in the <a>RetireGrant</a> and <a>RevokeGrant</a> operations. To find the grant
+ *           ID, use the <a>ListGrants</a> or <a>ListRetirableGrants</a>
+ *           operations.</p>
  *             </li>
  *          </ul>
  *          <p>The KMS key that you use for this operation must be in a compatible key state. For
  * details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key state: Effect on your KMS key</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>
- *             <b>Cross-account use</b>: Yes. To perform this operation on a KMS key in a different Amazon Web Services account, specify the key
+ *             <b>Cross-account use</b>: Yes.
+ *       To perform this operation on a KMS key in a different Amazon Web Services account, specify the key
  *   ARN in the value of the <code>KeyId</code> parameter. </p>
  *          <p>
  *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateGrant</a> (key policy)</p>
@@ -117,4 +120,3 @@ class CreateGrantCommand extends smithy_client_1.Command {
     }
 }
 exports.CreateGrantCommand = CreateGrantCommand;
-//# sourceMappingURL=CreateGrantCommand.js.map

package/{dist/cjs → dist-cjs}/commands/CreateKeyCommand.js

@@ -1,25 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CreateKeyCommand = void 0;
-const models_0_1 = require("../models/models_0");
-const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 const middleware_serde_1 = require("@aws-sdk/middleware-serde");
 const smithy_client_1 = require("@aws-sdk/smithy-client");
+const models_0_1 = require("../models/models_0");
+const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 /**
- * <p>Creates a unique customer managed <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms-keys">KMS key</a> in your Amazon Web Services account and Region.</p>
+ * <p>Creates a unique customer managed <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms-keys">KMS key</a> in your Amazon Web Services account and
+ *       Region.</p>
  *          <note>
  *             <p>KMS is replacing the term <i>customer master key (CMK)</i> with <i>KMS key</i> and <i>KMS key</i>. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.</p>
  *          </note>
  *
- *          <p>You can use the <code>CreateKey</code> operation to create symmetric or asymmetric KMS keys.</p>
+ *          <p>You can use the <code>CreateKey</code> operation to create symmetric or asymmetric KMS
+ *       keys.</p>
  *          <ul>
  *             <li>
  *                <p>
- *                   <b>Symmetric KMS keys</b> contain a 256-bit symmetric key that
- *           never leaves KMS unencrypted. To use the KMS key, you must call KMS. You can use a
- *           symmetric KMS key to encrypt and decrypt small amounts of data, but they are typically used to
- *           generate <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#data-keys">data
- *             keys</a> and <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#data-key-pairs">data keys pairs</a>. For details,
+ *                   <b>Symmetric KMS keys</b> contain a 256-bit symmetric key
+ *           that never leaves KMS unencrypted. To use the KMS key, you must call KMS. You can use
+ *           a symmetric KMS key to encrypt and decrypt small amounts of data, but they are typically
+ *           used to generate <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#data-keys">data keys</a> and <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#data-key-pairs">data keys pairs</a>. For details,
  *           see <a>GenerateDataKey</a> and <a>GenerateDataKeyPair</a>.</p>
  *             </li>
  *             <li>
@@ -27,9 +28,9 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  *                   <b>Asymmetric KMS keys</b> can contain an RSA key pair or an
  *           Elliptic Curve (ECC) key pair. The private key in an asymmetric KMS key never leaves KMS
  *           unencrypted. However, you can use the <a>GetPublicKey</a> operation to download
- *           the public key so it can be used outside of KMS. KMS keys with RSA key pairs can be used to
- *           encrypt or decrypt data or sign and verify messages (but not both). KMS keys with ECC key
- *           pairs can be used only to sign and verify messages.</p>
+ *           the public key so it can be used outside of KMS. KMS keys with RSA key pairs can be used
+ *           to encrypt or decrypt data or sign and verify messages (but not both). KMS keys with ECC
+ *           key pairs can be used only to sign and verify messages.</p>
  *             </li>
  *          </ul>
  *          <p>For information about symmetric and asymmetric KMS keys, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
@@ -60,8 +61,8 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  *             <dd>
  *                <p>To create a multi-Region <i>primary key</i> in the local Amazon Web Services Region,
  *             use the <code>MultiRegion</code> parameter with a value of <code>True</code>. To create
- *             a multi-Region <i>replica key</i>, that is, a KMS key with the same key ID and
- *             key material as a primary key, but in a different Amazon Web Services Region, use the <a>ReplicateKey</a> operation. To change a replica key to a primary key, and its
+ *             a multi-Region <i>replica key</i>, that is, a KMS key with the same key ID
+ *             and key material as a primary key, but in a different Amazon Web Services Region, use the <a>ReplicateKey</a> operation. To change a replica key to a primary key, and its
  *             primary key to a replica key, use the <a>UpdatePrimaryRegion</a>
  *             operation.</p>
  *                <p>This operation supports <i>multi-Region keys</i>, an KMS feature that lets you create multiple
@@ -102,13 +103,14 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  *             </dd>
  *          </dl>
  *          <p>
- *             <b>Cross-account use</b>:  No. You cannot use this operation to
+ *             <b>Cross-account use</b>: No. You cannot use this operation to
  *       create a KMS key in a different Amazon Web Services account.</p>
  *
  *          <p>
  *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateKey</a> (IAM policy). To use the
  *         <code>Tags</code> parameter, <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:TagResource</a> (IAM policy). For examples and information about related
- *       permissions, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/iam-policies.html#iam-policy-example-create-key">Allow a user to create KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
+ *       permissions, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/iam-policies.html#iam-policy-example-create-key">Allow a user to create
+ *         KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>
  *             <b>Related operations:</b>
  *          </p>
@@ -180,4 +182,3 @@ class CreateKeyCommand extends smithy_client_1.Command {
     }
 }
 exports.CreateKeyCommand = CreateKeyCommand;
-//# sourceMappingURL=CreateKeyCommand.js.map

package/{dist/cjs → dist-cjs}/commands/DecryptCommand.js

@@ -1,13 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DecryptCommand = void 0;
-const models_0_1 = require("../models/models_0");
-const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 const middleware_serde_1 = require("@aws-sdk/middleware-serde");
 const smithy_client_1 = require("@aws-sdk/smithy-client");
+const models_0_1 = require("../models/models_0");
+const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 /**
- * <p>Decrypts ciphertext that was encrypted by a KMS key using any of
- *       the following operations:</p>
+ * <p>Decrypts ciphertext that was encrypted by a KMS key using any of the following
+ *       operations:</p>
  *          <ul>
  *             <li>
  *                <p>
@@ -36,33 +36,36 @@ const smithy_client_1 = require("@aws-sdk/smithy-client");
  *             </li>
  *          </ul>
  *          <p>You can use this operation to decrypt ciphertext that was encrypted under a symmetric or
- *       asymmetric KMS key. When the KMS key is asymmetric, you must specify the KMS key and the encryption
- *       algorithm that was used to encrypt the ciphertext. For information about symmetric and asymmetric KMS keys, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
+ *       asymmetric KMS key. When the KMS key is asymmetric, you must specify the KMS key and the
+ *       encryption algorithm that was used to encrypt the ciphertext. For information about symmetric and asymmetric KMS keys, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>The Decrypt operation also decrypts ciphertext that was encrypted outside of KMS by the
- *       public key in an KMS asymmetric KMS key. However, it cannot decrypt ciphertext produced by other
- *       libraries, such as the <a href="https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/">Amazon Web Services Encryption
- *         SDK</a> or <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html">Amazon S3 client-side encryption</a>. These libraries return a ciphertext format that
- *       is incompatible with KMS.</p>
- *          <p>If the ciphertext was encrypted under a symmetric KMS key, the <code>KeyId</code> parameter is
- *       optional. KMS can get this information from metadata that it adds to the symmetric
- *       ciphertext blob. This feature adds durability to your implementation by ensuring that
- *       authorized users can decrypt ciphertext decades after it was encrypted, even if they've lost
- *       track of the key ID. However, specifying the KMS key is always recommended as a best practice.
- *       When you use the <code>KeyId</code> parameter to specify a KMS key, KMS only uses the KMS key you
- *       specify. If the ciphertext was encrypted under a different KMS key, the <code>Decrypt</code>
- *       operation fails. This practice ensures that you use the KMS key that you intend.</p>
+ *       public key in an KMS asymmetric KMS key. However, it cannot decrypt ciphertext produced by
+ *       other libraries, such as the <a href="https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/">Amazon Web Services
+ *         Encryption SDK</a> or <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html">Amazon S3 client-side encryption</a>.
+ *       These libraries return a ciphertext format that is incompatible with KMS.</p>
+ *          <p>If the ciphertext was encrypted under a symmetric KMS key, the <code>KeyId</code>
+ *       parameter is optional. KMS can get this information from metadata that it adds to the
+ *       symmetric ciphertext blob. This feature adds durability to your implementation by ensuring
+ *       that authorized users can decrypt ciphertext decades after it was encrypted, even if they've
+ *       lost track of the key ID. However, specifying the KMS key is always recommended as a best
+ *       practice. When you use the <code>KeyId</code> parameter to specify a KMS key, KMS only uses
+ *       the KMS key you specify. If the ciphertext was encrypted under a different KMS key, the
+ *         <code>Decrypt</code> operation fails. This practice ensures that you use the KMS key that
+ *       you intend.</p>
  *          <p>Whenever possible, use key policies to give users permission to call the
  *         <code>Decrypt</code> operation on a particular KMS key, instead of using IAM policies.
  *       Otherwise, you might create an IAM user policy that gives the user <code>Decrypt</code>
- *       permission on all KMS keys. This user could decrypt ciphertext that was encrypted by KMS keys in other
- *       accounts if the key policy for the cross-account KMS key permits it. If you must use an IAM policy
- *       for <code>Decrypt</code> permissions, limit the user to particular KMS keys or particular trusted
- *       accounts. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/iam-policies.html#iam-policies-best-practices">Best practices for IAM policies</a> in the <i>Key Management Service Developer Guide</i>.</p>
+ *       permission on all KMS keys. This user could decrypt ciphertext that was encrypted by KMS keys
+ *       in other accounts if the key policy for the cross-account KMS key permits it. If you must use
+ *       an IAM policy for <code>Decrypt</code> permissions, limit the user to particular KMS keys or
+ *       particular trusted accounts. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/iam-policies.html#iam-policies-best-practices">Best practices for IAM
+ *         policies</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>Applications in Amazon Web Services Nitro Enclaves can call this operation by using the <a href="https://github.com/aws/aws-nitro-enclaves-sdk-c">Amazon Web Services Nitro Enclaves Development Kit</a>. For information about the supporting parameters, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/services-nitro-enclaves.html">How Amazon Web Services Nitro Enclaves use KMS</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>The KMS key that you use for this operation must be in a compatible key state. For
  * details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key state: Effect on your KMS key</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>
- *             <b>Cross-account use</b>: Yes. To perform this operation with a KMS key in a different Amazon Web Services account, specify
+ *             <b>Cross-account
+ *         use</b>: Yes. To perform this operation with a KMS key in a different Amazon Web Services account, specify
  *   the key ARN or alias ARN in the value of the <code>KeyId</code> parameter. </p>
  *
  *          <p>
@@ -143,4 +146,3 @@ class DecryptCommand extends smithy_client_1.Command {
     }
 }
 exports.DecryptCommand = DecryptCommand;
-//# sourceMappingURL=DecryptCommand.js.map