@aws-sdk/client-kms 3.363.0 → 3.366.0

package/dist-cjs/models/models_0.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.XksKeyInvalidConfigurationException = exports.XksKeyAlreadyInUseException = exports.UnsupportedOperationException = exports.TagException = exports.MalformedPolicyDocumentException = exports.SigningAlgorithmSpec = exports.MultiRegionKeyType = exports.MacAlgorithmSpec = exports.KeyState = exports.KeyManagerType = exports.ExpirationModelType = exports.EncryptionAlgorithmSpec = exports.OriginType = exports.KeyUsageType = exports.KeySpec = exports.CustomerMasterKeySpec = exports.InvalidGrantTokenException = exports.DisabledException = exports.GrantOperation = exports.XksProxyVpcEndpointServiceNotFoundException = exports.XksProxyVpcEndpointServiceInvalidConfigurationException = exports.XksProxyVpcEndpointServiceInUseException = exports.XksProxyUriUnreachableException = exports.XksProxyUriInUseException = exports.XksProxyUriEndpointInUseException = exports.XksProxyInvalidResponseException = exports.XksProxyInvalidConfigurationException = exports.XksProxyIncorrectAuthenticationCredentialException = exports.IncorrectTrustAnchorException = exports.CustomKeyStoreNameInUseException = exports.XksProxyConnectivityType = exports.CustomKeyStoreType = exports.LimitExceededException = exports.InvalidAliasNameException = exports.ConnectionStateType = exports.ConnectionErrorCodeType = exports.CustomKeyStoreNotFoundException = exports.CustomKeyStoreInvalidStateException = exports.CloudHsmClusterNotRelatedException = exports.CloudHsmClusterNotFoundException = exports.CloudHsmClusterNotActiveException = exports.CloudHsmClusterInvalidConfigurationException = exports.CloudHsmClusterInUseException = exports.NotFoundException = exports.KMSInvalidStateException = exports.KMSInternalException = exports.InvalidArnException = exports.DependencyTimeoutException = exports.AlreadyExistsException = exports.AlgorithmSpec = void 0;
-exports.VerifyMacRequestFilterSensitiveLog = exports.VerifyRequestFilterSensitiveLog = exports.UpdateCustomKeyStoreRequestFilterSensitiveLog = exports.SignRequestFilterSensitiveLog = exports.GetParametersForImportResponseFilterSensitiveLog = exports.GenerateRandomResponseFilterSensitiveLog = exports.GenerateMacRequestFilterSensitiveLog = exports.GenerateDataKeyPairResponseFilterSensitiveLog = exports.GenerateDataKeyResponseFilterSensitiveLog = exports.EncryptRequestFilterSensitiveLog = exports.DescribeCustomKeyStoresResponseFilterSensitiveLog = exports.DecryptResponseFilterSensitiveLog = exports.CustomKeyStoresListEntryFilterSensitiveLog = exports.XksProxyConfigurationTypeFilterSensitiveLog = exports.CreateCustomKeyStoreRequestFilterSensitiveLog = exports.XksProxyAuthenticationCredentialTypeFilterSensitiveLog = exports.MessageType = exports.KMSInvalidSignatureException = exports.KMSInvalidMacException = exports.InvalidGrantIdException = exports.InvalidImportTokenException = exports.IncorrectKeyMaterialException = exports.WrappingKeySpec = exports.ExpiredImportTokenException = exports.InvalidMarkerException = exports.KeyUnavailableException = exports.InvalidKeyUsageException = exports.InvalidCiphertextException = exports.IncorrectKeyException = exports.KeyEncryptionMechanism = exports.DataKeySpec = exports.DataKeyPairSpec = exports.CustomKeyStoreHasCMKsException = exports.XksKeyNotFoundException = void 0;
+exports.XksKeyAlreadyInUseException = exports.UnsupportedOperationException = exports.TagException = exports.MalformedPolicyDocumentException = exports.SigningAlgorithmSpec = exports.MultiRegionKeyType = exports.MacAlgorithmSpec = exports.KeyState = exports.KeyManagerType = exports.ExpirationModelType = exports.EncryptionAlgorithmSpec = exports.OriginType = exports.KeyUsageType = exports.KeySpec = exports.CustomerMasterKeySpec = exports.InvalidGrantTokenException = exports.DryRunOperationException = exports.DisabledException = exports.GrantOperation = exports.XksProxyVpcEndpointServiceNotFoundException = exports.XksProxyVpcEndpointServiceInvalidConfigurationException = exports.XksProxyVpcEndpointServiceInUseException = exports.XksProxyUriUnreachableException = exports.XksProxyUriInUseException = exports.XksProxyUriEndpointInUseException = exports.XksProxyInvalidResponseException = exports.XksProxyInvalidConfigurationException = exports.XksProxyIncorrectAuthenticationCredentialException = exports.IncorrectTrustAnchorException = exports.CustomKeyStoreNameInUseException = exports.XksProxyConnectivityType = exports.CustomKeyStoreType = exports.LimitExceededException = exports.InvalidAliasNameException = exports.ConnectionStateType = exports.ConnectionErrorCodeType = exports.CustomKeyStoreNotFoundException = exports.CustomKeyStoreInvalidStateException = exports.CloudHsmClusterNotRelatedException = exports.CloudHsmClusterNotFoundException = exports.CloudHsmClusterNotActiveException = exports.CloudHsmClusterInvalidConfigurationException = exports.CloudHsmClusterInUseException = exports.NotFoundException = exports.KMSInvalidStateException = exports.KMSInternalException = exports.InvalidArnException = exports.DependencyTimeoutException = exports.AlreadyExistsException = exports.AlgorithmSpec = void 0;
+exports.VerifyMacRequestFilterSensitiveLog = exports.VerifyRequestFilterSensitiveLog = exports.UpdateCustomKeyStoreRequestFilterSensitiveLog = exports.SignRequestFilterSensitiveLog = exports.GetParametersForImportResponseFilterSensitiveLog = exports.GenerateRandomResponseFilterSensitiveLog = exports.GenerateMacRequestFilterSensitiveLog = exports.GenerateDataKeyPairResponseFilterSensitiveLog = exports.GenerateDataKeyResponseFilterSensitiveLog = exports.EncryptRequestFilterSensitiveLog = exports.DescribeCustomKeyStoresResponseFilterSensitiveLog = exports.DecryptResponseFilterSensitiveLog = exports.CustomKeyStoresListEntryFilterSensitiveLog = exports.XksProxyConfigurationTypeFilterSensitiveLog = exports.CreateCustomKeyStoreRequestFilterSensitiveLog = exports.XksProxyAuthenticationCredentialTypeFilterSensitiveLog = exports.MessageType = exports.KMSInvalidSignatureException = exports.KMSInvalidMacException = exports.InvalidGrantIdException = exports.InvalidImportTokenException = exports.IncorrectKeyMaterialException = exports.WrappingKeySpec = exports.ExpiredImportTokenException = exports.InvalidMarkerException = exports.KeyUnavailableException = exports.InvalidKeyUsageException = exports.InvalidCiphertextException = exports.IncorrectKeyException = exports.KeyEncryptionMechanism = exports.DataKeySpec = exports.DataKeyPairSpec = exports.CustomKeyStoreHasCMKsException = exports.XksKeyNotFoundException = exports.XksKeyInvalidConfigurationException = void 0;
 const smithy_client_1 = require("@smithy/smithy-client");
 const KMSServiceException_1 = require("./KMSServiceException");
 exports.AlgorithmSpec = {
@@ -415,6 +415,19 @@ class DisabledException extends KMSServiceException_1.KMSServiceException {
     }
 }
 exports.DisabledException = DisabledException;
+class DryRunOperationException extends KMSServiceException_1.KMSServiceException {
+    constructor(opts) {
+        super({
+            name: "DryRunOperationException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "DryRunOperationException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, DryRunOperationException.prototype);
+    }
+}
+exports.DryRunOperationException = DryRunOperationException;
 class InvalidGrantTokenException extends KMSServiceException_1.KMSServiceException {
     constructor(opts) {
         super({

package/dist-cjs/protocols/Aws_json1_1.js

@@ -602,6 +602,9 @@ const de_CreateGrantCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidArnException":
         case "com.amazonaws.kms#InvalidArnException":
             throw await de_InvalidArnExceptionRes(parsedOutput, context);
@@ -725,6 +728,9 @@ const de_DecryptCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "IncorrectKeyException":
         case "com.amazonaws.kms#IncorrectKeyException":
             throw await de_IncorrectKeyExceptionRes(parsedOutput, context);
@@ -1214,6 +1220,9 @@ const de_EncryptCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1268,6 +1277,9 @@ const de_GenerateDataKeyCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1322,6 +1334,9 @@ const de_GenerateDataKeyPairCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1379,6 +1394,9 @@ const de_GenerateDataKeyPairWithoutPlaintextCommandError = async (output, contex
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1436,6 +1454,9 @@ const de_GenerateDataKeyWithoutPlaintextCommandError = async (output, context) =
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1487,6 +1508,9 @@ const de_GenerateMacCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -2165,6 +2189,9 @@ const de_ReEncryptCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "IncorrectKeyException":
         case "com.amazonaws.kms#IncorrectKeyException":
             throw await de_IncorrectKeyExceptionRes(parsedOutput, context);
@@ -2279,6 +2306,9 @@ const de_RetireGrantCommandError = async (output, context) => {
         case "DependencyTimeoutException":
         case "com.amazonaws.kms#DependencyTimeoutException":
             throw await de_DependencyTimeoutExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidArnException":
         case "com.amazonaws.kms#InvalidArnException":
             throw await de_InvalidArnExceptionRes(parsedOutput, context);
@@ -2327,6 +2357,9 @@ const de_RevokeGrantCommandError = async (output, context) => {
         case "DependencyTimeoutException":
         case "com.amazonaws.kms#DependencyTimeoutException":
             throw await de_DependencyTimeoutExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidArnException":
         case "com.amazonaws.kms#InvalidArnException":
             throw await de_InvalidArnExceptionRes(parsedOutput, context);
@@ -2423,6 +2456,9 @@ const de_SignCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -2774,6 +2810,9 @@ const de_VerifyCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -2828,6 +2867,9 @@ const de_VerifyMacCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -2966,6 +3008,15 @@ const de_DisabledExceptionRes = async (parsedOutput, context) => {
     });
     return (0, smithy_client_1.decorateServiceException)(exception, body);
 };
+const de_DryRunOperationExceptionRes = async (parsedOutput, context) => {
+    const body = parsedOutput.body;
+    const deserialized = (0, smithy_client_1._json)(body);
+    const exception = new models_0_1.DryRunOperationException({
+        $metadata: deserializeMetadata(parsedOutput),
+        ...deserialized,
+    });
+    return (0, smithy_client_1.decorateServiceException)(exception, body);
+};
 const de_ExpiredImportTokenExceptionRes = async (parsedOutput, context) => {
     const body = parsedOutput.body;
     const deserialized = (0, smithy_client_1._json)(body);
@@ -3275,6 +3326,7 @@ const de_XksProxyVpcEndpointServiceNotFoundExceptionRes = async (parsedOutput, c
 const se_DecryptRequest = (input, context) => {
     return (0, smithy_client_1.take)(input, {
         CiphertextBlob: context.base64Encoder,
+        DryRun: [],
         EncryptionAlgorithm: [],
         EncryptionContext: smithy_client_1._json,
         GrantTokens: smithy_client_1._json,
@@ -3284,6 +3336,7 @@ const se_DecryptRequest = (input, context) => {
 };
 const se_EncryptRequest = (input, context) => {
     return (0, smithy_client_1.take)(input, {
+        DryRun: [],
         EncryptionAlgorithm: [],
         EncryptionContext: smithy_client_1._json,
         GrantTokens: smithy_client_1._json,
@@ -3293,6 +3346,7 @@ const se_EncryptRequest = (input, context) => {
 };
 const se_GenerateDataKeyPairRequest = (input, context) => {
     return (0, smithy_client_1.take)(input, {
+        DryRun: [],
         EncryptionContext: smithy_client_1._json,
         GrantTokens: smithy_client_1._json,
         KeyId: [],
@@ -3302,6 +3356,7 @@ const se_GenerateDataKeyPairRequest = (input, context) => {
 };
 const se_GenerateDataKeyRequest = (input, context) => {
     return (0, smithy_client_1.take)(input, {
+        DryRun: [],
         EncryptionContext: smithy_client_1._json,
         GrantTokens: smithy_client_1._json,
         KeyId: [],
@@ -3312,6 +3367,7 @@ const se_GenerateDataKeyRequest = (input, context) => {
 };
 const se_GenerateMacRequest = (input, context) => {
     return (0, smithy_client_1.take)(input, {
+        DryRun: [],
         GrantTokens: smithy_client_1._json,
         KeyId: [],
         MacAlgorithm: [],
@@ -3346,6 +3402,7 @@ const se_ReEncryptRequest = (input, context) => {
         DestinationEncryptionAlgorithm: [],
         DestinationEncryptionContext: smithy_client_1._json,
         DestinationKeyId: [],
+        DryRun: [],
         GrantTokens: smithy_client_1._json,
         SourceEncryptionAlgorithm: [],
         SourceEncryptionContext: smithy_client_1._json,
@@ -3354,6 +3411,7 @@ const se_ReEncryptRequest = (input, context) => {
 };
 const se_SignRequest = (input, context) => {
     return (0, smithy_client_1.take)(input, {
+        DryRun: [],
         GrantTokens: smithy_client_1._json,
         KeyId: [],
         Message: context.base64Encoder,
@@ -3363,6 +3421,7 @@ const se_SignRequest = (input, context) => {
 };
 const se_VerifyMacRequest = (input, context) => {
     return (0, smithy_client_1.take)(input, {
+        DryRun: [],
         GrantTokens: smithy_client_1._json,
         KeyId: [],
         Mac: context.base64Encoder,
@@ -3372,6 +3431,7 @@ const se_VerifyMacRequest = (input, context) => {
 };
 const se_VerifyRequest = (input, context) => {
     return (0, smithy_client_1.take)(input, {
+        DryRun: [],
         GrantTokens: smithy_client_1._json,
         KeyId: [],
         Message: context.base64Encoder,

package/dist-es/models/models_0.js

@@ -384,6 +384,18 @@ export class DisabledException extends __BaseException {
         Object.setPrototypeOf(this, DisabledException.prototype);
     }
 }
+export class DryRunOperationException extends __BaseException {
+    constructor(opts) {
+        super({
+            name: "DryRunOperationException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "DryRunOperationException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, DryRunOperationException.prototype);
+    }
+}
 export class InvalidGrantTokenException extends __BaseException {
     constructor(opts) {
         super({

package/dist-es/protocols/Aws_json1_1.js

@@ -1,7 +1,7 @@
 import { HttpRequest as __HttpRequest } from "@smithy/protocol-http";
 import { _json, collectBody, decorateServiceException as __decorateServiceException, expectBoolean as __expectBoolean, expectInt32 as __expectInt32, expectNonNull as __expectNonNull, expectNumber as __expectNumber, expectString as __expectString, parseEpochTimestamp as __parseEpochTimestamp, take, withBaseException, } from "@smithy/smithy-client";
 import { KMSServiceException as __BaseException } from "../models/KMSServiceException";
-import { AlreadyExistsException, CloudHsmClusterInUseException, CloudHsmClusterInvalidConfigurationException, CloudHsmClusterNotActiveException, CloudHsmClusterNotFoundException, CloudHsmClusterNotRelatedException, CustomKeyStoreHasCMKsException, CustomKeyStoreInvalidStateException, CustomKeyStoreNameInUseException, CustomKeyStoreNotFoundException, DependencyTimeoutException, DisabledException, ExpiredImportTokenException, IncorrectKeyException, IncorrectKeyMaterialException, IncorrectTrustAnchorException, InvalidAliasNameException, InvalidArnException, InvalidCiphertextException, InvalidGrantIdException, InvalidGrantTokenException, InvalidImportTokenException, InvalidKeyUsageException, InvalidMarkerException, KeyUnavailableException, KMSInternalException, KMSInvalidMacException, KMSInvalidSignatureException, KMSInvalidStateException, LimitExceededException, MalformedPolicyDocumentException, NotFoundException, TagException, UnsupportedOperationException, XksKeyAlreadyInUseException, XksKeyInvalidConfigurationException, XksKeyNotFoundException, XksProxyIncorrectAuthenticationCredentialException, XksProxyInvalidConfigurationException, XksProxyInvalidResponseException, XksProxyUriEndpointInUseException, XksProxyUriInUseException, XksProxyUriUnreachableException, XksProxyVpcEndpointServiceInUseException, XksProxyVpcEndpointServiceInvalidConfigurationException, XksProxyVpcEndpointServiceNotFoundException, } from "../models/models_0";
+import { AlreadyExistsException, CloudHsmClusterInUseException, CloudHsmClusterInvalidConfigurationException, CloudHsmClusterNotActiveException, CloudHsmClusterNotFoundException, CloudHsmClusterNotRelatedException, CustomKeyStoreHasCMKsException, CustomKeyStoreInvalidStateException, CustomKeyStoreNameInUseException, CustomKeyStoreNotFoundException, DependencyTimeoutException, DisabledException, DryRunOperationException, ExpiredImportTokenException, IncorrectKeyException, IncorrectKeyMaterialException, IncorrectTrustAnchorException, InvalidAliasNameException, InvalidArnException, InvalidCiphertextException, InvalidGrantIdException, InvalidGrantTokenException, InvalidImportTokenException, InvalidKeyUsageException, InvalidMarkerException, KeyUnavailableException, KMSInternalException, KMSInvalidMacException, KMSInvalidSignatureException, KMSInvalidStateException, LimitExceededException, MalformedPolicyDocumentException, NotFoundException, TagException, UnsupportedOperationException, XksKeyAlreadyInUseException, XksKeyInvalidConfigurationException, XksKeyNotFoundException, XksProxyIncorrectAuthenticationCredentialException, XksProxyInvalidConfigurationException, XksProxyInvalidResponseException, XksProxyUriEndpointInUseException, XksProxyUriInUseException, XksProxyUriUnreachableException, XksProxyVpcEndpointServiceInUseException, XksProxyVpcEndpointServiceInvalidConfigurationException, XksProxyVpcEndpointServiceNotFoundException, } from "../models/models_0";
 export const se_CancelKeyDeletionCommand = async (input, context) => {
     const headers = sharedHeaders("CancelKeyDeletion");
     let body;
@@ -543,6 +543,9 @@ const de_CreateGrantCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidArnException":
         case "com.amazonaws.kms#InvalidArnException":
             throw await de_InvalidArnExceptionRes(parsedOutput, context);
@@ -664,6 +667,9 @@ const de_DecryptCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "IncorrectKeyException":
         case "com.amazonaws.kms#IncorrectKeyException":
             throw await de_IncorrectKeyExceptionRes(parsedOutput, context);
@@ -1142,6 +1148,9 @@ const de_EncryptCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1195,6 +1204,9 @@ const de_GenerateDataKeyCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1248,6 +1260,9 @@ const de_GenerateDataKeyPairCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1304,6 +1319,9 @@ const de_GenerateDataKeyPairWithoutPlaintextCommandError = async (output, contex
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1360,6 +1378,9 @@ const de_GenerateDataKeyWithoutPlaintextCommandError = async (output, context) =
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -1410,6 +1431,9 @@ const de_GenerateMacCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -2074,6 +2098,9 @@ const de_ReEncryptCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "IncorrectKeyException":
         case "com.amazonaws.kms#IncorrectKeyException":
             throw await de_IncorrectKeyExceptionRes(parsedOutput, context);
@@ -2186,6 +2213,9 @@ const de_RetireGrantCommandError = async (output, context) => {
         case "DependencyTimeoutException":
         case "com.amazonaws.kms#DependencyTimeoutException":
             throw await de_DependencyTimeoutExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidArnException":
         case "com.amazonaws.kms#InvalidArnException":
             throw await de_InvalidArnExceptionRes(parsedOutput, context);
@@ -2233,6 +2263,9 @@ const de_RevokeGrantCommandError = async (output, context) => {
         case "DependencyTimeoutException":
         case "com.amazonaws.kms#DependencyTimeoutException":
             throw await de_DependencyTimeoutExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidArnException":
         case "com.amazonaws.kms#InvalidArnException":
             throw await de_InvalidArnExceptionRes(parsedOutput, context);
@@ -2327,6 +2360,9 @@ const de_SignCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -2671,6 +2707,9 @@ const de_VerifyCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -2724,6 +2763,9 @@ const de_VerifyMacCommandError = async (output, context) => {
         case "DisabledException":
         case "com.amazonaws.kms#DisabledException":
             throw await de_DisabledExceptionRes(parsedOutput, context);
+        case "DryRunOperationException":
+        case "com.amazonaws.kms#DryRunOperationException":
+            throw await de_DryRunOperationExceptionRes(parsedOutput, context);
         case "InvalidGrantTokenException":
         case "com.amazonaws.kms#InvalidGrantTokenException":
             throw await de_InvalidGrantTokenExceptionRes(parsedOutput, context);
@@ -2862,6 +2904,15 @@ const de_DisabledExceptionRes = async (parsedOutput, context) => {
     });
     return __decorateServiceException(exception, body);
 };
+const de_DryRunOperationExceptionRes = async (parsedOutput, context) => {
+    const body = parsedOutput.body;
+    const deserialized = _json(body);
+    const exception = new DryRunOperationException({
+        $metadata: deserializeMetadata(parsedOutput),
+        ...deserialized,
+    });
+    return __decorateServiceException(exception, body);
+};
 const de_ExpiredImportTokenExceptionRes = async (parsedOutput, context) => {
     const body = parsedOutput.body;
     const deserialized = _json(body);
@@ -3171,6 +3222,7 @@ const de_XksProxyVpcEndpointServiceNotFoundExceptionRes = async (parsedOutput, c
 const se_DecryptRequest = (input, context) => {
     return take(input, {
         CiphertextBlob: context.base64Encoder,
+        DryRun: [],
         EncryptionAlgorithm: [],
         EncryptionContext: _json,
         GrantTokens: _json,
@@ -3180,6 +3232,7 @@ const se_DecryptRequest = (input, context) => {
 };
 const se_EncryptRequest = (input, context) => {
     return take(input, {
+        DryRun: [],
         EncryptionAlgorithm: [],
         EncryptionContext: _json,
         GrantTokens: _json,
@@ -3189,6 +3242,7 @@ const se_EncryptRequest = (input, context) => {
 };
 const se_GenerateDataKeyPairRequest = (input, context) => {
     return take(input, {
+        DryRun: [],
         EncryptionContext: _json,
         GrantTokens: _json,
         KeyId: [],
@@ -3198,6 +3252,7 @@ const se_GenerateDataKeyPairRequest = (input, context) => {
 };
 const se_GenerateDataKeyRequest = (input, context) => {
     return take(input, {
+        DryRun: [],
         EncryptionContext: _json,
         GrantTokens: _json,
         KeyId: [],
@@ -3208,6 +3263,7 @@ const se_GenerateDataKeyRequest = (input, context) => {
 };
 const se_GenerateMacRequest = (input, context) => {
     return take(input, {
+        DryRun: [],
         GrantTokens: _json,
         KeyId: [],
         MacAlgorithm: [],
@@ -3242,6 +3298,7 @@ const se_ReEncryptRequest = (input, context) => {
         DestinationEncryptionAlgorithm: [],
         DestinationEncryptionContext: _json,
         DestinationKeyId: [],
+        DryRun: [],
         GrantTokens: _json,
         SourceEncryptionAlgorithm: [],
         SourceEncryptionContext: _json,
@@ -3250,6 +3307,7 @@ const se_ReEncryptRequest = (input, context) => {
 };
 const se_SignRequest = (input, context) => {
     return take(input, {
+        DryRun: [],
         GrantTokens: _json,
         KeyId: [],
         Message: context.base64Encoder,
@@ -3259,6 +3317,7 @@ const se_SignRequest = (input, context) => {
 };
 const se_VerifyMacRequest = (input, context) => {
     return take(input, {
+        DryRun: [],
         GrantTokens: _json,
         KeyId: [],
         Mac: context.base64Encoder,
@@ -3268,6 +3327,7 @@ const se_VerifyMacRequest = (input, context) => {
 };
 const se_VerifyRequest = (input, context) => {
     return take(input, {
+        DryRun: [],
         GrantTokens: _json,
         KeyId: [],
         Message: context.base64Encoder,

package/dist-types/commands/CancelKeyDeletionCommand.d.ts

@@ -85,7 +85,9 @@ export interface CancelKeyDeletionCommandOutput extends CancelKeyDeletionRespons
  *                   </i>.</p>
  *             </li>
  *             <li>
- *                <p>For cryptographic operations on KMS keys in custom key stores, this exception represents a general failure with many possible causes. To identify the cause, see the error message that accompanies the exception.</p>
+ *                <p>For cryptographic operations on KMS keys in custom key stores, this exception
+ *           represents a general failure with many possible causes. To identify the cause, see the
+ *           error message that accompanies the exception.</p>
  *             </li>
  *          </ul>
  *

package/dist-types/commands/CreateAliasCommand.d.ts

@@ -131,7 +131,9 @@ export interface CreateAliasCommandOutput extends __MetadataBearer {
  *                   </i>.</p>
  *             </li>
  *             <li>
- *                <p>For cryptographic operations on KMS keys in custom key stores, this exception represents a general failure with many possible causes. To identify the cause, see the error message that accompanies the exception.</p>
+ *                <p>For cryptographic operations on KMS keys in custom key stores, this exception
+ *           represents a general failure with many possible causes. To identify the cause, see the
+ *           error message that accompanies the exception.</p>
  *             </li>
  *          </ul>
  *

package/dist-types/commands/CreateCustomKeyStoreCommand.d.ts

@@ -27,8 +27,9 @@ export interface CreateCustomKeyStoreCommandOutput extends CreateCustomKeyStoreR
  *       KMS key in a custom key store for a cryptographic operation, the cryptographic operation is
  *       actually performed in your key store using your keys. KMS supports <a href="https://docs.aws.amazon.com/kms/latest/developerguide/keystore-cloudhsm.html">CloudHSM key stores</a>
  *       backed by an <a href="https://docs.aws.amazon.com/cloudhsm/latest/userguide/clusters.html">CloudHSM cluster</a>
- *       and <a href="https://docs.aws.amazon.com/kms/latest/developerguide/keystore-external.html">external key stores</a> backed by an external key store proxy and
- *       external key manager outside of Amazon Web Services.</p>
+ *       and <a href="https://docs.aws.amazon.com/kms/latest/developerguide/keystore-external.html">external key
+ *         stores</a> backed by an external key store proxy and external key manager outside of
+ *       Amazon Web Services.</p>
  *          <p> This operation is part of the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html">custom key stores</a> feature in KMS, which
  * combines the convenience and extensive integration of KMS with the isolation and control of a
  * key store that you own and manage.</p>
@@ -64,9 +65,9 @@ export interface CreateCustomKeyStoreCommandOutput extends CreateCustomKeyStoreR
  *             <p>Some external key managers provide a simpler method for creating an external key store.
  *         For details, see your external key manager documentation.</p>
  *             <p>When creating an external key store in the KMS console, you can upload a JSON-based
- *         proxy configuration file with the desired values. You cannot use a proxy configuration
- *         with the <code>CreateCustomKeyStore</code> operation. However, you can use the values in
- *         the file to help you determine the correct values for the <code>CreateCustomKeyStore</code>
+ *         proxy configuration file with the desired values. You cannot use a proxy configuration with
+ *         the <code>CreateCustomKeyStore</code> operation. However, you can use the values in the file
+ *         to help you determine the correct values for the <code>CreateCustomKeyStore</code>
  *         parameters.</p>
  *          </note>
  *          <p>When the operation completes successfully, it returns the ID of the new custom key store.
@@ -249,8 +250,9 @@ export interface CreateCustomKeyStoreCommandOutput extends CreateCustomKeyStoreR
  * @throws {@link XksProxyUriUnreachableException} (client fault)
  *  <p>KMS was unable to reach the specified <code>XksProxyUriPath</code>. The path must be
  *       reachable before you create the external key store or update its settings.</p>
- *          <p>This exception is also thrown when the external key store proxy response to a <code>GetHealthStatus</code>
- *       request indicates that all external key manager instances are unavailable.</p>
+ *          <p>This exception is also thrown when the external key store proxy response to a
+ *         <code>GetHealthStatus</code> request indicates that all external key manager instances are
+ *       unavailable.</p>
  *
  * @throws {@link XksProxyVpcEndpointServiceInUseException} (client fault)
  *  <p>The request was rejected because the specified Amazon VPC endpoint service is already
@@ -260,7 +262,8 @@ export interface CreateCustomKeyStoreCommandOutput extends CreateCustomKeyStoreR
  * @throws {@link XksProxyVpcEndpointServiceInvalidConfigurationException} (client fault)
  *  <p>The request was rejected because the Amazon VPC endpoint service configuration does not fulfill
  *       the requirements for an external key store proxy. For details, see the exception message and
- *         <a href="kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements">review the requirements</a> for Amazon VPC endpoint service connectivity for an external key
+ *         <a href="kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements">review the
+ *         requirements</a> for Amazon VPC endpoint service connectivity for an external key
  *       store.</p>
  *
  * @throws {@link XksProxyVpcEndpointServiceNotFoundException} (client fault)

package/dist-types/commands/CreateGrantCommand.d.ts

@@ -110,6 +110,7 @@ export interface CreateGrantCommandOutput extends CreateGrantResponse, __Metadat
  *     "STRING_VALUE",
  *   ],
  *   Name: "STRING_VALUE",
+ *   DryRun: true || false,
  * };
  * const command = new CreateGrantCommand(input);
  * const response = await client.send(command);
@@ -133,6 +134,11 @@ export interface CreateGrantCommandOutput extends CreateGrantResponse, __Metadat
  * @throws {@link DisabledException} (client fault)
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
+ * @throws {@link DryRunOperationException} (client fault)
+ *  <p>
+ *       The request was rejected because the DryRun parameter was specified.
+ *     </p>
+ *
  * @throws {@link InvalidArnException} (client fault)
  *  <p>The request was rejected because a specified ARN, or an ARN in a key policy, is not
  *       valid.</p>
@@ -158,7 +164,9 @@ export interface CreateGrantCommandOutput extends CreateGrantResponse, __Metadat
  *                   </i>.</p>
  *             </li>
  *             <li>
- *                <p>For cryptographic operations on KMS keys in custom key stores, this exception represents a general failure with many possible causes. To identify the cause, see the error message that accompanies the exception.</p>
+ *                <p>For cryptographic operations on KMS keys in custom key stores, this exception
+ *           represents a general failure with many possible causes. To identify the cause, see the
+ *           error message that accompanies the exception.</p>
  *             </li>
  *          </ul>
  *