@aws-sdk/client-kms 3.32.0 → 3.36.0

package/dist/es/KMSClient.js

@@ -1,134 +0,0 @@
-import { __extends } from "tslib";
-import { getRuntimeConfig as __getRuntimeConfig } from "./runtimeConfig";
-import { resolveEndpointsConfig, resolveRegionConfig, } from "@aws-sdk/config-resolver";
-import { getContentLengthPlugin } from "@aws-sdk/middleware-content-length";
-import { getHostHeaderPlugin, resolveHostHeaderConfig, } from "@aws-sdk/middleware-host-header";
-import { getLoggerPlugin } from "@aws-sdk/middleware-logger";
-import { getRetryPlugin, resolveRetryConfig } from "@aws-sdk/middleware-retry";
-import { getAwsAuthPlugin, resolveAwsAuthConfig, } from "@aws-sdk/middleware-signing";
-import { getUserAgentPlugin, resolveUserAgentConfig, } from "@aws-sdk/middleware-user-agent";
-import { Client as __Client, } from "@aws-sdk/smithy-client";
-/**
- * <fullname>Key Management Service</fullname>
- *          <p>Key Management Service (KMS) is an encryption and key management web service. This guide describes
- *       the KMS operations that you can call programmatically. For general information about KMS,
- *       see the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/">
- *                <i>Key Management Service Developer Guide</i>
- *             </a>.</p>
- *          <note>
- *             <p>KMS is replacing the term <i>customer master key (CMK)</i> with <i>KMS key</i> and <i>KMS key</i>. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.</p>
- *             <p>Amazon Web Services provides SDKs that consist of libraries and sample code for various programming
- *         languages and platforms (Java, Ruby, .Net, macOS, Android, etc.). The SDKs provide a
- *         convenient way to create programmatic access to KMS and other Amazon Web Services services. For example,
- *         the SDKs take care of tasks such as signing requests (see below), managing errors, and
- *         retrying requests automatically. For more information about the Amazon Web Services SDKs, including how to
- *         download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web
- *           Services</a>.</p>
- *          </note>
- *          <p>We recommend that you use the Amazon Web Services SDKs to make programmatic API calls to KMS.</p>
- *          <p>Clients must support TLS (Transport Layer Security) 1.0. We recommend TLS 1.2. Clients
- *       must also support cipher suites with Perfect Forward Secrecy (PFS) such as Ephemeral
- *       Diffie-Hellman (DHE) or Elliptic Curve Ephemeral Diffie-Hellman (ECDHE). Most modern systems
- *       such as Java 7 and later support these modes.</p>
- *          <p>
- *             <b>Signing Requests</b>
- *          </p>
- *          <p>Requests must be signed by using an access key ID and a secret access key. We strongly
- *       recommend that you <i>do not</i> use your Amazon Web Services account (root) access key ID and
- *       secret key for everyday work with KMS. Instead, use the access key ID and secret access key
- *       for an IAM user. You can also use the Amazon Web Services Security Token Service to generate temporary
- *       security credentials that you can use to sign requests.</p>
- *          <p>All KMS operations require <a href="https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html">Signature Version 4</a>.</p>
- *          <p>
- *             <b>Logging API Requests</b>
- *          </p>
- *          <p>KMS supports CloudTrail, a service that logs Amazon Web Services API calls and related events for your Amazon Web Services account and delivers them to an Amazon S3 bucket that you specify. By using the information
- *       collected by CloudTrail, you can determine what requests were made to KMS, who made the request,
- *       when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find
- *       your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/">CloudTrail User Guide</a>.</p>
- *          <p>
- *             <b>Additional Resources</b>
- *          </p>
- *          <p>For more information about credentials and request signing, see the following:</p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <a href="https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html">Amazon Web Services Security
- *             Credentials</a> - This topic provides general information about the types of
- *           credentials used to access Amazon Web Services.</p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html">Temporary
- *             Security Credentials</a> - This section of the <i>IAM User Guide</i>
- *           describes how to create and use temporary security credentials.</p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a href="https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html">Signature Version
- *             4 Signing Process</a> - This set of topics walks you through the process of signing
- *           a request using an access key ID and a secret access key.</p>
- *             </li>
- *          </ul>
- *          <p>
- *             <b>Commonly Used API Operations</b>
- *          </p>
- *          <p>Of the API operations discussed in this guide, the following will prove the most useful
- *       for most applications. You will likely perform operations other than these, such as creating
- *       keys and assigning policies, by using the console.</p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <a>Encrypt</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>Decrypt</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>GenerateDataKey</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>GenerateDataKeyWithoutPlaintext</a>
- *                </p>
- *             </li>
- *          </ul>
- */
-var KMSClient = /** @class */ (function (_super) {
-    __extends(KMSClient, _super);
-    function KMSClient(configuration) {
-        var _this = this;
-        var _config_0 = __getRuntimeConfig(configuration);
-        var _config_1 = resolveRegionConfig(_config_0);
-        var _config_2 = resolveEndpointsConfig(_config_1);
-        var _config_3 = resolveRetryConfig(_config_2);
-        var _config_4 = resolveHostHeaderConfig(_config_3);
-        var _config_5 = resolveAwsAuthConfig(_config_4);
-        var _config_6 = resolveUserAgentConfig(_config_5);
-        _this = _super.call(this, _config_6) || this;
-        _this.config = _config_6;
-        _this.middlewareStack.use(getRetryPlugin(_this.config));
-        _this.middlewareStack.use(getContentLengthPlugin(_this.config));
-        _this.middlewareStack.use(getHostHeaderPlugin(_this.config));
-        _this.middlewareStack.use(getLoggerPlugin(_this.config));
-        _this.middlewareStack.use(getAwsAuthPlugin(_this.config));
-        _this.middlewareStack.use(getUserAgentPlugin(_this.config));
-        return _this;
-    }
-    /**
-     * Destroy underlying resources, like sockets. It's usually not necessary to do this.
-     * However in Node.js, it's best to explicitly shut down the client's agent when it is no longer needed.
-     * Otherwise, sockets might stay open for quite a long time before the server terminates them.
-     */
-    KMSClient.prototype.destroy = function () {
-        _super.prototype.destroy.call(this);
-    };
-    return KMSClient;
-}(__Client));
-export { KMSClient };
-//# sourceMappingURL=KMSClient.js.map

package/dist/es/KMSClient.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"KMSClient.js","sourceRoot":"","sources":["../../KMSClient.ts"],"names":[],"mappings":";AAgGA,OAAO,EAAE,gBAAgB,IAAI,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAKL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAGL,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAyC,cAAc,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACtH,OAAO,EAGL,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAGL,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,MAAM,IAAI,QAAQ,GAGnB,MAAM,wBAAwB,CAAC;AA+PhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0FG;AACH;IAA+B,6BAK9B;IAMC,mBAAY,aAA8B;QAA1C,iBAgBC;QAfC,IAAI,SAAS,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,SAAS,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,SAAS,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAClD,QAAA,kBAAM,SAAS,CAAC,SAAC;QACjB,KAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,KAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,KAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,KAAI,CAAC,eAAe,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,KAAI,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,KAAI,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,KAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACvD,KAAI,CAAC,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,KAAI,CAAC,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAI,CAAC,MAAM,CAAC,CAAC,CAAC;;IAC5D,CAAC;IAED;;;;OAIG;IACH,2BAAO,GAAP;QACE,iBAAM,OAAO,WAAE,CAAC;IAClB,CAAC;IACH,gBAAC;AAAD,CAAC,AArCD,CAA+B,QAAQ,GAqCtC"}

package/dist/es/commands/CancelKeyDeletionCommand.js

@@ -1,76 +0,0 @@
-import { __extends } from "tslib";
-import { CancelKeyDeletionRequest, CancelKeyDeletionResponse } from "../models/models_0";
-import { deserializeAws_json1_1CancelKeyDeletionCommand, serializeAws_json1_1CancelKeyDeletionCommand, } from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-/**
- * <p>Cancels the deletion of a KMS key. When this operation succeeds, the key
- *       state of the KMS key is <code>Disabled</code>. To enable the KMS key, use <a>EnableKey</a>. </p>
- *          <p>For more information about scheduling and canceling deletion of a KMS key, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html">Deleting KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
- *          <p>The KMS key that you use for this operation must be in a compatible key state. For
- * details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key state: Effect on your KMS key</a> in the <i>Key Management Service Developer Guide</i>.</p>
- *          <p>
- *             <b>Cross-account use</b>: No. You cannot perform this operation on a KMS key in a different Amazon Web Services account.</p>
- *          <p>
- *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CancelKeyDeletion</a> (key policy)</p>
- *          <p>
- *             <b>Related operations</b>: <a>ScheduleKeyDeletion</a>
- *          </p>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { KMSClient, CancelKeyDeletionCommand } from "@aws-sdk/client-kms"; // ES Modules import
- * // const { KMSClient, CancelKeyDeletionCommand } = require("@aws-sdk/client-kms"); // CommonJS import
- * const client = new KMSClient(config);
- * const command = new CancelKeyDeletionCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link CancelKeyDeletionCommandInput} for command's `input` shape.
- * @see {@link CancelKeyDeletionCommandOutput} for command's `response` shape.
- * @see {@link KMSClientResolvedConfig | config} for command's `input` shape.
- *
- */
-var CancelKeyDeletionCommand = /** @class */ (function (_super) {
-    __extends(CancelKeyDeletionCommand, _super);
-    // Start section: command_properties
-    // End section: command_properties
-    function CancelKeyDeletionCommand(input) {
-        var _this = 
-        // Start section: command_constructor
-        _super.call(this) || this;
-        _this.input = input;
-        return _this;
-        // End section: command_constructor
-    }
-    /**
-     * @internal
-     */
-    CancelKeyDeletionCommand.prototype.resolveMiddleware = function (clientStack, configuration, options) {
-        this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-        var stack = clientStack.concat(this.middlewareStack);
-        var logger = configuration.logger;
-        var clientName = "KMSClient";
-        var commandName = "CancelKeyDeletionCommand";
-        var handlerExecutionContext = {
-            logger: logger,
-            clientName: clientName,
-            commandName: commandName,
-            inputFilterSensitiveLog: CancelKeyDeletionRequest.filterSensitiveLog,
-            outputFilterSensitiveLog: CancelKeyDeletionResponse.filterSensitiveLog,
-        };
-        var requestHandler = configuration.requestHandler;
-        return stack.resolve(function (request) {
-            return requestHandler.handle(request.request, options || {});
-        }, handlerExecutionContext);
-    };
-    CancelKeyDeletionCommand.prototype.serialize = function (input, context) {
-        return serializeAws_json1_1CancelKeyDeletionCommand(input, context);
-    };
-    CancelKeyDeletionCommand.prototype.deserialize = function (output, context) {
-        return deserializeAws_json1_1CancelKeyDeletionCommand(output, context);
-    };
-    return CancelKeyDeletionCommand;
-}($Command));
-export { CancelKeyDeletionCommand };
-//# sourceMappingURL=CancelKeyDeletionCommand.js.map

package/dist/es/commands/CancelKeyDeletionCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CancelKeyDeletionCommand.js","sourceRoot":"","sources":["../../../commands/CancelKeyDeletionCommand.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EACL,8CAA8C,EAC9C,4CAA4C,GAC7C,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH;IAA8C,4CAI7C;IACC,oCAAoC;IACpC,kCAAkC;IAElC,kCAAqB,KAAoC;QAAzD;QACE,qCAAqC;QACrC,iBAAO,SAER;QAJoB,WAAK,GAAL,KAAK,CAA+B;;QAGvD,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,oDAAiB,GAAjB,UACE,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAE1F,IAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE/C,IAAA,MAAM,GAAK,aAAa,OAAlB,CAAmB;QACjC,IAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,IAAM,WAAW,GAAG,0BAA0B,CAAC;QAC/C,IAAM,uBAAuB,GAA4B;YACvD,MAAM,QAAA;YACN,UAAU,YAAA;YACV,WAAW,aAAA;YACX,uBAAuB,EAAE,wBAAwB,CAAC,kBAAkB;YACpE,wBAAwB,EAAE,yBAAyB,CAAC,kBAAkB;SACvE,CAAC;QACM,IAAA,cAAc,GAAK,aAAa,eAAlB,CAAmB;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,UAAC,OAAsC;YACrC,OAAA,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC;QAAtE,CAAsE,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,4CAAS,GAAjB,UAAkB,KAAoC,EAAE,OAAuB;QAC7E,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAEO,8CAAW,GAAnB,UAAoB,MAAsB,EAAE,OAAuB;QACjE,OAAO,8CAA8C,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAIH,+BAAC;AAAD,CAAC,AAtDD,CAA8C,QAAQ,GAsDrD"}

package/dist/es/commands/ConnectCustomKeyStoreCommand.js

@@ -1,126 +0,0 @@
-import { __extends } from "tslib";
-import { ConnectCustomKeyStoreRequest, ConnectCustomKeyStoreResponse } from "../models/models_0";
-import { deserializeAws_json1_1ConnectCustomKeyStoreCommand, serializeAws_json1_1ConnectCustomKeyStoreCommand, } from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-/**
- * <p>Connects or reconnects a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html">custom key store</a> to its associated CloudHSM cluster.</p>
- *          <p>The custom key store must be connected before you can create KMS keys
- *       in the key store or use the KMS keys it contains. You can disconnect and reconnect a custom key
- *       store at any time.</p>
- *          <p>To connect a custom key store, its associated CloudHSM cluster must have at least one active
- *       HSM. To get the number of active HSMs in a cluster, use the <a href="https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DescribeClusters.html">DescribeClusters</a> operation. To add HSMs
- *       to the cluster, use the <a href="https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_CreateHsm.html">CreateHsm</a> operation. Also, the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-store-concepts.html#concept-kmsuser">
- *                <code>kmsuser</code> crypto
- *         user</a> (CU) must not be logged into the cluster. This prevents KMS from using this
- *       account to log in.</p>
- *          <p>The connection process can take an extended amount of time to complete; up to 20 minutes.
- *       This operation starts the connection process, but it does not wait for it to complete. When it
- *       succeeds, this operation quickly returns an HTTP 200 response and a JSON object with no
- *       properties. However, this response does not indicate that the custom key store is connected.
- *       To get the connection state of the custom key store, use the <a>DescribeCustomKeyStores</a> operation.</p>
- *          <p>During the connection process, KMS finds the CloudHSM cluster that is associated with the
- *       custom key store, creates the connection infrastructure, connects to the cluster, logs into
- *       the CloudHSM client as the <code>kmsuser</code> CU, and rotates its password.</p>
- *          <p>The <code>ConnectCustomKeyStore</code> operation might fail for various reasons. To find
- *       the reason, use the <a>DescribeCustomKeyStores</a> operation and see the
- *         <code>ConnectionErrorCode</code> in the response. For help interpreting the
- *         <code>ConnectionErrorCode</code>, see <a>CustomKeyStoresListEntry</a>.</p>
- *          <p>To fix the failure, use the <a>DisconnectCustomKeyStore</a> operation to
- *       disconnect the custom key store, correct the error, use the <a>UpdateCustomKeyStore</a> operation if necessary, and then use
- *         <code>ConnectCustomKeyStore</code> again.</p>
- *          <p>If you are having trouble connecting or disconnecting a custom key store, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html">Troubleshooting a Custom Key
- *         Store</a> in the <i>Key Management Service Developer Guide</i>.</p>
- *          <p>
- *             <b>Cross-account use</b>: No. You cannot perform this operation on a custom key store in a different Amazon Web Services account.</p>
- *
- *          <p>
- *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:ConnectCustomKeyStore</a> (IAM policy)</p>
- *          <p>
- *             <b>Related operations</b>
- *          </p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <a>CreateCustomKeyStore</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>DeleteCustomKeyStore</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>DescribeCustomKeyStores</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>DisconnectCustomKeyStore</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>UpdateCustomKeyStore</a>
- *                </p>
- *             </li>
- *          </ul>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { KMSClient, ConnectCustomKeyStoreCommand } from "@aws-sdk/client-kms"; // ES Modules import
- * // const { KMSClient, ConnectCustomKeyStoreCommand } = require("@aws-sdk/client-kms"); // CommonJS import
- * const client = new KMSClient(config);
- * const command = new ConnectCustomKeyStoreCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link ConnectCustomKeyStoreCommandInput} for command's `input` shape.
- * @see {@link ConnectCustomKeyStoreCommandOutput} for command's `response` shape.
- * @see {@link KMSClientResolvedConfig | config} for command's `input` shape.
- *
- */
-var ConnectCustomKeyStoreCommand = /** @class */ (function (_super) {
-    __extends(ConnectCustomKeyStoreCommand, _super);
-    // Start section: command_properties
-    // End section: command_properties
-    function ConnectCustomKeyStoreCommand(input) {
-        var _this = 
-        // Start section: command_constructor
-        _super.call(this) || this;
-        _this.input = input;
-        return _this;
-        // End section: command_constructor
-    }
-    /**
-     * @internal
-     */
-    ConnectCustomKeyStoreCommand.prototype.resolveMiddleware = function (clientStack, configuration, options) {
-        this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-        var stack = clientStack.concat(this.middlewareStack);
-        var logger = configuration.logger;
-        var clientName = "KMSClient";
-        var commandName = "ConnectCustomKeyStoreCommand";
-        var handlerExecutionContext = {
-            logger: logger,
-            clientName: clientName,
-            commandName: commandName,
-            inputFilterSensitiveLog: ConnectCustomKeyStoreRequest.filterSensitiveLog,
-            outputFilterSensitiveLog: ConnectCustomKeyStoreResponse.filterSensitiveLog,
-        };
-        var requestHandler = configuration.requestHandler;
-        return stack.resolve(function (request) {
-            return requestHandler.handle(request.request, options || {});
-        }, handlerExecutionContext);
-    };
-    ConnectCustomKeyStoreCommand.prototype.serialize = function (input, context) {
-        return serializeAws_json1_1ConnectCustomKeyStoreCommand(input, context);
-    };
-    ConnectCustomKeyStoreCommand.prototype.deserialize = function (output, context) {
-        return deserializeAws_json1_1ConnectCustomKeyStoreCommand(output, context);
-    };
-    return ConnectCustomKeyStoreCommand;
-}($Command));
-export { ConnectCustomKeyStoreCommand };
-//# sourceMappingURL=ConnectCustomKeyStoreCommand.js.map

package/dist/es/commands/ConnectCustomKeyStoreCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ConnectCustomKeyStoreCommand.js","sourceRoot":"","sources":["../../../commands/ConnectCustomKeyStoreCommand.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACjG,OAAO,EACL,kDAAkD,EAClD,gDAAgD,GACjD,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH;IAAkD,gDAIjD;IACC,oCAAoC;IACpC,kCAAkC;IAElC,sCAAqB,KAAwC;QAA7D;QACE,qCAAqC;QACrC,iBAAO,SAER;QAJoB,WAAK,GAAL,KAAK,CAAmC;;QAG3D,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,wDAAiB,GAAjB,UACE,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAE1F,IAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE/C,IAAA,MAAM,GAAK,aAAa,OAAlB,CAAmB;QACjC,IAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,IAAM,WAAW,GAAG,8BAA8B,CAAC;QACnD,IAAM,uBAAuB,GAA4B;YACvD,MAAM,QAAA;YACN,UAAU,YAAA;YACV,WAAW,aAAA;YACX,uBAAuB,EAAE,4BAA4B,CAAC,kBAAkB;YACxE,wBAAwB,EAAE,6BAA6B,CAAC,kBAAkB;SAC3E,CAAC;QACM,IAAA,cAAc,GAAK,aAAa,eAAlB,CAAmB;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,UAAC,OAAsC;YACrC,OAAA,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC;QAAtE,CAAsE,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,gDAAS,GAAjB,UAAkB,KAAwC,EAAE,OAAuB;QACjF,OAAO,gDAAgD,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAEO,kDAAW,GAAnB,UAAoB,MAAsB,EAAE,OAAuB;QACjE,OAAO,kDAAkD,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAIH,mCAAC;AAAD,CAAC,AAtDD,CAAkD,QAAQ,GAsDzD"}

package/dist/es/commands/CreateAliasCommand.js

@@ -1,118 +0,0 @@
-import { __extends } from "tslib";
-import { CreateAliasRequest } from "../models/models_0";
-import { deserializeAws_json1_1CreateAliasCommand, serializeAws_json1_1CreateAliasCommand, } from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-/**
- * <p>Creates a friendly name for a KMS key. </p>
- *          <note>
- *             <p>Adding, deleting, or updating an alias can allow or deny permission to the KMS key. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/abac.html">Using ABAC in KMS</a> in the <i>Key Management Service Developer Guide</i>.</p>
- *          </note>
- *          <p>You can use an alias to identify a KMS key in the KMS console, in the <a>DescribeKey</a> operation and in <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations">cryptographic operations</a>, such as <a>Encrypt</a> and
- *         <a>GenerateDataKey</a>. You can also change the KMS key that's associated with the
- *       alias (<a>UpdateAlias</a>) or delete the alias (<a>DeleteAlias</a>) at
- *       any time. These operations don't affect the underlying KMS key. </p>
- *          <p>You can associate the alias with any customer managed key in the same Amazon Web Services Region. Each
- *       alias is associated with only one KMS key at a time, but a KMS key can have multiple aliases. A valid KMS key is required. You can't create an alias without a KMS key.</p>
- *          <p>The alias must be unique in the account and Region, but you can have aliases with the same
- *       name in different Regions. For detailed information about aliases, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html">Using aliases</a> in the
- *       <i>Key Management Service Developer Guide</i>.</p>
- *          <p>This operation does not return a response. To get the alias that you created, use the
- *         <a>ListAliases</a> operation.</p>
- *          <p>The KMS key that you use for this operation must be in a compatible key state. For
- * details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key state: Effect on your KMS key</a> in the <i>Key Management Service Developer Guide</i>.</p>
- *          <p>
- *             <b>Cross-account use</b>: No. You cannot perform this operation on an alias in a different Amazon Web Services account.</p>
- *
- *          <p>
- *             <b>Required permissions</b>
- *          </p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateAlias</a> on the alias (IAM policy).</p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateAlias</a> on the KMS key (key policy).</p>
- *             </li>
- *          </ul>
- *          <p>For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html#alias-access">Controlling access to aliases</a> in the <i>Key Management Service Developer Guide</i>.</p>
- *          <p>
- *             <b>Related operations:</b>
- *          </p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <a>DeleteAlias</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>ListAliases</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>UpdateAlias</a>
- *                </p>
- *             </li>
- *          </ul>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { KMSClient, CreateAliasCommand } from "@aws-sdk/client-kms"; // ES Modules import
- * // const { KMSClient, CreateAliasCommand } = require("@aws-sdk/client-kms"); // CommonJS import
- * const client = new KMSClient(config);
- * const command = new CreateAliasCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link CreateAliasCommandInput} for command's `input` shape.
- * @see {@link CreateAliasCommandOutput} for command's `response` shape.
- * @see {@link KMSClientResolvedConfig | config} for command's `input` shape.
- *
- */
-var CreateAliasCommand = /** @class */ (function (_super) {
-    __extends(CreateAliasCommand, _super);
-    // Start section: command_properties
-    // End section: command_properties
-    function CreateAliasCommand(input) {
-        var _this = 
-        // Start section: command_constructor
-        _super.call(this) || this;
-        _this.input = input;
-        return _this;
-        // End section: command_constructor
-    }
-    /**
-     * @internal
-     */
-    CreateAliasCommand.prototype.resolveMiddleware = function (clientStack, configuration, options) {
-        this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-        var stack = clientStack.concat(this.middlewareStack);
-        var logger = configuration.logger;
-        var clientName = "KMSClient";
-        var commandName = "CreateAliasCommand";
-        var handlerExecutionContext = {
-            logger: logger,
-            clientName: clientName,
-            commandName: commandName,
-            inputFilterSensitiveLog: CreateAliasRequest.filterSensitiveLog,
-            outputFilterSensitiveLog: function (output) { return output; },
-        };
-        var requestHandler = configuration.requestHandler;
-        return stack.resolve(function (request) {
-            return requestHandler.handle(request.request, options || {});
-        }, handlerExecutionContext);
-    };
-    CreateAliasCommand.prototype.serialize = function (input, context) {
-        return serializeAws_json1_1CreateAliasCommand(input, context);
-    };
-    CreateAliasCommand.prototype.deserialize = function (output, context) {
-        return deserializeAws_json1_1CreateAliasCommand(output, context);
-    };
-    return CreateAliasCommand;
-}($Command));
-export { CreateAliasCommand };
-//# sourceMappingURL=CreateAliasCommand.js.map

package/dist/es/commands/CreateAliasCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CreateAliasCommand.js","sourceRoot":"","sources":["../../../commands/CreateAliasCommand.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,wCAAwC,EACxC,sCAAsC,GACvC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH;IAAwC,sCAIvC;IACC,oCAAoC;IACpC,kCAAkC;IAElC,4BAAqB,KAA8B;QAAnD;QACE,qCAAqC;QACrC,iBAAO,SAER;QAJoB,WAAK,GAAL,KAAK,CAAyB;;QAGjD,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,8CAAiB,GAAjB,UACE,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAE1F,IAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE/C,IAAA,MAAM,GAAK,aAAa,OAAlB,CAAmB;QACjC,IAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,IAAM,WAAW,GAAG,oBAAoB,CAAC;QACzC,IAAM,uBAAuB,GAA4B;YACvD,MAAM,QAAA;YACN,UAAU,YAAA;YACV,WAAW,aAAA;YACX,uBAAuB,EAAE,kBAAkB,CAAC,kBAAkB;YAC9D,wBAAwB,EAAE,UAAC,MAAW,IAAK,OAAA,MAAM,EAAN,CAAM;SAClD,CAAC;QACM,IAAA,cAAc,GAAK,aAAa,eAAlB,CAAmB;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,UAAC,OAAsC;YACrC,OAAA,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC;QAAtE,CAAsE,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,sCAAS,GAAjB,UAAkB,KAA8B,EAAE,OAAuB;QACvE,OAAO,sCAAsC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAEO,wCAAW,GAAnB,UAAoB,MAAsB,EAAE,OAAuB;QACjE,OAAO,wCAAwC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAIH,yBAAC;AAAD,CAAC,AAtDD,CAAwC,QAAQ,GAsD/C"}

package/dist/es/commands/CreateCustomKeyStoreCommand.js

@@ -1,114 +0,0 @@
-import { __extends } from "tslib";
-import { CreateCustomKeyStoreRequest, CreateCustomKeyStoreResponse } from "../models/models_0";
-import { deserializeAws_json1_1CreateCustomKeyStoreCommand, serializeAws_json1_1CreateCustomKeyStoreCommand, } from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-/**
- * <p>Creates a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html">custom key store</a> that is associated with an <a href="https://docs.aws.amazon.com/cloudhsm/latest/userguide/clusters.html">CloudHSM cluster</a> that you own and
- *     manage.</p>
- *          <p>This operation is part of the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html">Custom Key Store feature</a> feature in KMS, which
- * combines the convenience and extensive integration of KMS with the isolation and control of a
- * single-tenant key store.</p>
- *          <p>Before you create the custom key store, you must assemble
- *       the required elements, including an CloudHSM cluster that fulfills the requirements for a custom
- *       key store. For details about the required elements, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/create-keystore.html#before-keystore">Assemble the Prerequisites</a>
- *       in the <i>Key Management Service Developer Guide</i>.</p>
- *          <p>When the operation completes successfully, it returns the ID of the new custom key store.
- *       Before you can use your new custom key store, you need to use the <a>ConnectCustomKeyStore</a> operation to connect the new key store to its CloudHSM
- *       cluster. Even if you are not going to use your custom key store immediately, you might want to
- *       connect it to verify that all settings are correct and then disconnect it until you are ready
- *       to use it.</p>
- *          <p>For help with failures, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html">Troubleshooting a Custom Key Store</a> in the
- *       <i>Key Management Service Developer Guide</i>.</p>
- *          <p>
- *             <b>Cross-account use</b>: No. You cannot perform this operation on a custom key store in a different Amazon Web Services account.</p>
- *          <p>
- *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:CreateCustomKeyStore</a> (IAM policy).</p>
- *          <p>
- *             <b>Related operations:</b>
- *          </p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <a>ConnectCustomKeyStore</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>DeleteCustomKeyStore</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>DescribeCustomKeyStores</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>DisconnectCustomKeyStore</a>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <a>UpdateCustomKeyStore</a>
- *                </p>
- *             </li>
- *          </ul>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { KMSClient, CreateCustomKeyStoreCommand } from "@aws-sdk/client-kms"; // ES Modules import
- * // const { KMSClient, CreateCustomKeyStoreCommand } = require("@aws-sdk/client-kms"); // CommonJS import
- * const client = new KMSClient(config);
- * const command = new CreateCustomKeyStoreCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link CreateCustomKeyStoreCommandInput} for command's `input` shape.
- * @see {@link CreateCustomKeyStoreCommandOutput} for command's `response` shape.
- * @see {@link KMSClientResolvedConfig | config} for command's `input` shape.
- *
- */
-var CreateCustomKeyStoreCommand = /** @class */ (function (_super) {
-    __extends(CreateCustomKeyStoreCommand, _super);
-    // Start section: command_properties
-    // End section: command_properties
-    function CreateCustomKeyStoreCommand(input) {
-        var _this = 
-        // Start section: command_constructor
-        _super.call(this) || this;
-        _this.input = input;
-        return _this;
-        // End section: command_constructor
-    }
-    /**
-     * @internal
-     */
-    CreateCustomKeyStoreCommand.prototype.resolveMiddleware = function (clientStack, configuration, options) {
-        this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-        var stack = clientStack.concat(this.middlewareStack);
-        var logger = configuration.logger;
-        var clientName = "KMSClient";
-        var commandName = "CreateCustomKeyStoreCommand";
-        var handlerExecutionContext = {
-            logger: logger,
-            clientName: clientName,
-            commandName: commandName,
-            inputFilterSensitiveLog: CreateCustomKeyStoreRequest.filterSensitiveLog,
-            outputFilterSensitiveLog: CreateCustomKeyStoreResponse.filterSensitiveLog,
-        };
-        var requestHandler = configuration.requestHandler;
-        return stack.resolve(function (request) {
-            return requestHandler.handle(request.request, options || {});
-        }, handlerExecutionContext);
-    };
-    CreateCustomKeyStoreCommand.prototype.serialize = function (input, context) {
-        return serializeAws_json1_1CreateCustomKeyStoreCommand(input, context);
-    };
-    CreateCustomKeyStoreCommand.prototype.deserialize = function (output, context) {
-        return deserializeAws_json1_1CreateCustomKeyStoreCommand(output, context);
-    };
-    return CreateCustomKeyStoreCommand;
-}($Command));
-export { CreateCustomKeyStoreCommand };
-//# sourceMappingURL=CreateCustomKeyStoreCommand.js.map

package/dist/es/commands/CreateCustomKeyStoreCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CreateCustomKeyStoreCommand.js","sourceRoot":"","sources":["../../../commands/CreateCustomKeyStoreCommand.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EACL,iDAAiD,EACjD,+CAA+C,GAChD,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH;IAAiD,+CAIhD;IACC,oCAAoC;IACpC,kCAAkC;IAElC,qCAAqB,KAAuC;QAA5D;QACE,qCAAqC;QACrC,iBAAO,SAER;QAJoB,WAAK,GAAL,KAAK,CAAkC;;QAG1D,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,uDAAiB,GAAjB,UACE,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAE1F,IAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE/C,IAAA,MAAM,GAAK,aAAa,OAAlB,CAAmB;QACjC,IAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,IAAM,WAAW,GAAG,6BAA6B,CAAC;QAClD,IAAM,uBAAuB,GAA4B;YACvD,MAAM,QAAA;YACN,UAAU,YAAA;YACV,WAAW,aAAA;YACX,uBAAuB,EAAE,2BAA2B,CAAC,kBAAkB;YACvE,wBAAwB,EAAE,4BAA4B,CAAC,kBAAkB;SAC1E,CAAC;QACM,IAAA,cAAc,GAAK,aAAa,eAAlB,CAAmB;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,UAAC,OAAsC;YACrC,OAAA,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC;QAAtE,CAAsE,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,+CAAS,GAAjB,UAAkB,KAAuC,EAAE,OAAuB;QAChF,OAAO,+CAA+C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAEO,iDAAW,GAAnB,UAAoB,MAAsB,EAAE,OAAuB;QACjE,OAAO,iDAAiD,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAIH,kCAAC;AAAD,CAAC,AAtDD,CAAiD,QAAQ,GAsDxD"}