@aws-sdk/client-kms 3.474.0 → 3.476.0

package/dist-types/commands/CancelKeyDeletionCommand.d.ts

@@ -36,6 +36,9 @@ export interface CancelKeyDeletionCommandOutput extends CancelKeyDeletionRespons
  *          <p>
  *             <b>Related operations</b>: <a>ScheduleKeyDeletion</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ConnectCustomKeyStoreCommand.d.ts

@@ -110,6 +110,9 @@ export interface ConnectCustomKeyStoreCommandOutput extends ConnectCustomKeyStor
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/CreateAliasCommand.d.ts

@@ -80,6 +80,9 @@ export interface CreateAliasCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/CreateCustomKeyStoreCommand.d.ts

@@ -112,6 +112,9 @@ export interface CreateCustomKeyStoreCommandOutput extends CreateCustomKeyStoreR
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -262,8 +265,7 @@ export interface CreateCustomKeyStoreCommandOutput extends CreateCustomKeyStoreR
  * @throws {@link XksProxyVpcEndpointServiceInvalidConfigurationException} (client fault)
  *  <p>The request was rejected because the Amazon VPC endpoint service configuration does not fulfill
  *       the requirements for an external key store proxy. For details, see the exception message and
- *         <a href="kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements">review the
- *         requirements</a> for Amazon VPC endpoint service connectivity for an external key
+ *         <a href="https://docs.aws.amazon.com/kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements">review the requirements</a> for Amazon VPC endpoint service connectivity for an external key
  *       store.</p>
  *
  * @throws {@link XksProxyVpcEndpointServiceNotFoundException} (client fault)

package/dist-types/commands/CreateGrantCommand.d.ts

@@ -85,6 +85,9 @@ export interface CreateGrantCommandOutput extends CreateGrantResponse, __Metadat
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -135,9 +138,7 @@ export interface CreateGrantCommandOutput extends CreateGrantResponse, __Metadat
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidArnException} (client fault)
  *  <p>The request was rejected because a specified ARN, or an ARN in a key policy, is not

package/dist-types/commands/CreateKeyCommand.d.ts

@@ -187,6 +187,9 @@ export interface CreateKeyCommandOutput extends CreateKeyResponse, __MetadataBea
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DecryptCommand.d.ts

@@ -83,7 +83,7 @@ export interface DecryptCommandOutput extends DecryptResponse, __MetadataBearer
  *       the <a href="https://docs.aws.amazon.com/enclaves/latest/user/developing-applications.html#sdk">Amazon Web Services Nitro Enclaves SDK</a> or any Amazon Web Services SDK. Use the <code>Recipient</code> parameter to provide the
  *       attestation document for the enclave. Instead of the plaintext data, the response includes the
  *       plaintext data encrypted with the public key from the attestation document
- *         (<code>CiphertextForRecipient</code>).For information about the interaction between KMS and Amazon Web Services Nitro Enclaves, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/services-nitro-enclaves.html">How Amazon Web Services Nitro Enclaves uses KMS</a> in the <i>Key Management Service Developer Guide</i>..</p>
+ *         (<code>CiphertextForRecipient</code>). For information about the interaction between KMS and Amazon Web Services Nitro Enclaves, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/services-nitro-enclaves.html">How Amazon Web Services Nitro Enclaves uses KMS</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>The KMS key that you use for this operation must be in a compatible key state. For
  * details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key states of KMS keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>
@@ -117,6 +117,9 @@ export interface DecryptCommandOutput extends DecryptResponse, __MetadataBearer
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -164,9 +167,7 @@ export interface DecryptCommandOutput extends DecryptResponse, __MetadataBearer
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link IncorrectKeyException} (client fault)
  *  <p>The request was rejected because the specified KMS key cannot decrypt the data. The

package/dist-types/commands/DeleteAliasCommand.d.ts

@@ -71,6 +71,9 @@ export interface DeleteAliasCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DeleteCustomKeyStoreCommand.d.ts

@@ -82,6 +82,9 @@ export interface DeleteCustomKeyStoreCommandOutput extends DeleteCustomKeyStoreR
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DeleteImportedKeyMaterialCommand.d.ts

@@ -51,6 +51,9 @@ export interface DeleteImportedKeyMaterialCommandOutput extends __MetadataBearer
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DescribeCustomKeyStoresCommand.d.ts

@@ -82,6 +82,9 @@ export interface DescribeCustomKeyStoresCommandOutput extends DescribeCustomKeyS
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DescribeKeyCommand.d.ts

@@ -31,12 +31,10 @@ export interface DescribeKeyCommandOutput extends DescribeKeyResponse, __Metadat
  *       It includes fields, like <code>KeySpec</code>, that help you distinguish different types of
  *       KMS keys. It also displays the key usage (encryption, signing, or generating and verifying
  *       MACs) and the algorithms that the KMS key supports. </p>
- *          <p>For <a href="kms/latest/developerguide/multi-region-keys-overview.html">multi-Region keys</a>,
- *         <code>DescribeKey</code> displays the primary key and all related replica keys. For KMS keys
- *       in <a href="kms/latest/developerguide/keystore-cloudhsm.html">CloudHSM key stores</a>, it includes
- *       information about the key store, such as the key store ID and the CloudHSM cluster ID. For KMS
- *       keys in <a href="kms/latest/developerguide/keystore-external.html">external key stores</a>, it
- *       includes the custom key store ID and the ID of the external key.</p>
+ *          <p>For <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html">multi-Region keys</a>, <code>DescribeKey</code> displays the primary key and all
+ *       related replica keys. For KMS keys in <a href="https://docs.aws.amazon.com/kms/latest/developerguide/keystore-cloudhsm.html">CloudHSM key stores</a>, it includes information
+ *       about the key store, such as the key store ID and the CloudHSM cluster ID. For KMS keys in <a href="https://docs.aws.amazon.com/kms/latest/developerguide/keystore-external.html">external key stores</a>,
+ *       it includes the custom key store ID and the ID of the external key.</p>
  *          <p>
  *             <code>DescribeKey</code> does not return the following information:</p>
  *          <ul>
@@ -106,6 +104,9 @@ export interface DescribeKeyCommandOutput extends DescribeKeyResponse, __Metadat
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DisableKeyCommand.d.ts

@@ -38,6 +38,9 @@ export interface DisableKeyCommandOutput extends __MetadataBearer {
  *          <p>
  *             <b>Related operations</b>: <a>EnableKey</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DisableKeyRotationCommand.d.ts

@@ -56,6 +56,9 @@ export interface DisableKeyRotationCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DisconnectCustomKeyStoreCommand.d.ts

@@ -75,6 +75,9 @@ export interface DisconnectCustomKeyStoreCommandOutput extends DisconnectCustomK
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/EnableKeyCommand.d.ts

@@ -34,6 +34,9 @@ export interface EnableKeyCommandOutput extends __MetadataBearer {
  *          <p>
  *             <b>Related operations</b>: <a>DisableKey</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/EnableKeyRotationCommand.d.ts

@@ -25,7 +25,7 @@ export interface EnableKeyRotationCommandOutput extends __MetadataBearer {
  * @public
  * <p>Enables <a href="https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html">automatic rotation
  *         of the key material</a> of the specified symmetric encryption KMS key. </p>
- *          <p>When you enable automatic rotation of a<a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk">customer managed KMS key</a>, KMS
+ *          <p>When you enable automatic rotation of a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk">customer managed KMS key</a>, KMS
  *       rotates the key material of the KMS key one year (approximately 365 days) from the enable date
  *       and every year thereafter. You can monitor rotation of the key material for your KMS keys in
  *       CloudTrail and Amazon CloudWatch. To disable rotation of the key material in a customer
@@ -64,6 +64,9 @@ export interface EnableKeyRotationCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/EncryptCommand.d.ts

@@ -132,6 +132,9 @@ export interface EncryptCommandOutput extends EncryptResponse, __MetadataBearer
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -174,9 +177,7 @@ export interface EncryptCommandOutput extends EncryptResponse, __MetadataBearer
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/commands/GenerateDataKeyCommand.d.ts

@@ -126,6 +126,9 @@ export interface GenerateDataKeyCommandOutput extends GenerateDataKeyResponse, _
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -173,9 +176,7 @@ export interface GenerateDataKeyCommandOutput extends GenerateDataKeyResponse, _
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/commands/GenerateDataKeyPairCommand.d.ts

@@ -27,7 +27,7 @@ export interface GenerateDataKeyPairCommandOutput extends GenerateDataKeyPairRes
  *       a plaintext public key, a plaintext private key, and a copy of the private key that is
  *       encrypted under the symmetric encryption KMS key you specify. You can use the data key pair to
  *       perform asymmetric cryptography and implement digital signatures outside of KMS. The bytes
- *       in the keys are random; they not related to the caller or to the KMS key that is used to
+ *       in the keys are random; they are not related to the caller or to the KMS key that is used to
  *       encrypt the private key. </p>
  *          <p>You can use the public key that <code>GenerateDataKeyPair</code> returns to encrypt data
  *       or verify a signature outside of KMS. Then, store the encrypted private key with the data.
@@ -105,6 +105,9 @@ export interface GenerateDataKeyPairCommandOutput extends GenerateDataKeyPairRes
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -153,9 +156,7 @@ export interface GenerateDataKeyPairCommandOutput extends GenerateDataKeyPairRes
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/commands/GenerateDataKeyPairWithoutPlaintextCommand.d.ts

@@ -87,6 +87,9 @@ export interface GenerateDataKeyPairWithoutPlaintextCommandOutput extends Genera
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -129,9 +132,7 @@ export interface GenerateDataKeyPairWithoutPlaintextCommandOutput extends Genera
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/commands/GenerateDataKeyWithoutPlaintextCommand.d.ts

@@ -96,6 +96,9 @@ export interface GenerateDataKeyWithoutPlaintextCommandOutput extends GenerateDa
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -137,9 +140,7 @@ export interface GenerateDataKeyWithoutPlaintextCommandOutput extends GenerateDa
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/commands/GenerateMacCommand.d.ts

@@ -52,6 +52,9 @@ export interface GenerateMacCommandOutput extends GenerateMacResponse, __Metadat
  *          <p>
  *             <b>Related operations</b>: <a>VerifyMac</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -87,9 +90,7 @@ export interface GenerateMacCommandOutput extends GenerateMacResponse, __Metadat
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/commands/GenerateRandomCommand.d.ts

@@ -44,6 +44,9 @@ export interface GenerateRandomCommandOutput extends GenerateRandomResponse, __M
  *       keys.</p>
  *          <p>
  *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:GenerateRandom</a> (IAM policy)</p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/GetKeyPolicyCommand.d.ts

@@ -29,8 +29,11 @@ export interface GetKeyPolicyCommandOutput extends GetKeyPolicyResponse, __Metad
  *          <p>
  *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:GetKeyPolicy</a> (key policy)</p>
  *          <p>
- *             <b>Related operations</b>: <a>PutKeyPolicy</a>
+ *             <b>Related operations</b>: <a href="https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html">PutKeyPolicy</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/GetKeyRotationStatusCommand.d.ts

@@ -76,6 +76,9 @@ export interface GetKeyRotationStatusCommandOutput extends GetKeyRotationStatusR
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/GetParametersForImportCommand.d.ts

@@ -35,10 +35,12 @@ export interface GetParametersForImportCommandOutput extends GetParametersForImp
  *       operation with an <code>Origin</code> value of <code>EXTERNAL</code> to create a KMS key with
  *       no key material. You can import key material for a symmetric encryption KMS key, HMAC KMS key,
  *       asymmetric encryption KMS key, or asymmetric signing KMS key. You can also import key material
- *       into a <a href="kms/latest/developerguide/multi-region-keys-overview.html">multi-Region key</a> of
- *       any supported type. However, you can't import key material into a KMS key in a <a href="kms/latest/developerguide/custom-key-store-overview.html">custom key store</a>. You can also use
- *         <code>GetParametersForImport</code> to get a public key and import token to <a href="kms/latest/developerguide/importing-keys.html#reimport-key-material">reimport the original key
- *         material</a> into a KMS key whose key material expired or was deleted.</p>
+ *       into a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html">multi-Region key</a> of
+ *       any supported type. However, you can't import key material into a KMS key in a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html">custom key
+ *         store</a>. You can also use <code>GetParametersForImport</code> to get a public key and
+ *       import token to <a href="https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html#reimport-key-material">reimport
+ *         the original key material</a> into a KMS key whose key material expired or was
+ *       deleted.</p>
  *          <p>
  *             <code>GetParametersForImport</code> returns the items that you need to import your key
  *       material.</p>
@@ -97,6 +99,9 @@ export interface GetParametersForImportCommandOutput extends GetParametersForImp
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/GetPublicKeyCommand.d.ts

@@ -71,6 +71,9 @@ export interface GetPublicKeyCommandOutput extends GetPublicKeyResponse, __Metad
  *          <p>
  *             <b>Related operations</b>: <a>CreateKey</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ImportKeyMaterialCommand.d.ts

@@ -125,6 +125,9 @@ export interface ImportKeyMaterialCommandOutput extends ImportKeyMaterialRespons
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ListAliasesCommand.d.ts

@@ -64,6 +64,9 @@ export interface ListAliasesCommandOutput extends ListAliasesResponse, __Metadat
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ListGrantsCommand.d.ts

@@ -68,6 +68,9 @@ export interface ListGrantsCommandOutput extends ListGrantsResponse, __MetadataB
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ListKeyPoliciesCommand.d.ts

@@ -41,10 +41,13 @@ export interface ListKeyPoliciesCommandOutput extends ListKeyPoliciesResponse, _
  *             </li>
  *             <li>
  *                <p>
- *                   <a>PutKeyPolicy</a>
+ *                   <a href="https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html">PutKeyPolicy</a>
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ListKeysCommand.d.ts

@@ -53,6 +53,9 @@ export interface ListKeysCommandOutput extends ListKeysResponse, __MetadataBeare
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ListResourceTagsCommand.d.ts

@@ -57,6 +57,9 @@ export interface ListResourceTagsCommandOutput extends ListResourceTagsResponse,
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ListRetirableGrantsCommand.d.ts

@@ -35,12 +35,21 @@ export interface ListRetirableGrantsCommandOutput extends ListGrantsResponse, __
  *       programming languages, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-grants.html">Programming grants</a>. </p>
  *          <p>
  *             <b>Cross-account use</b>: You must specify a principal in your
- *       Amazon Web Services account. However, this operation can return grants in any Amazon Web Services account. You do not need
+ *       Amazon Web Services account. This operation returns a list of grants where the retiring principal specified
+ *       in the <code>ListRetirableGrants</code> request is the same retiring principal on the grant.
+ *       This can include grants on KMS keys owned by other Amazon Web Services accounts, but you do not need
  *         <code>kms:ListRetirableGrants</code> permission (or any other additional permission) in any
  *       Amazon Web Services account other than your own.</p>
  *          <p>
  *             <b>Required permissions</b>: <a href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html">kms:ListRetirableGrants</a> (IAM policy) in your
  *       Amazon Web Services account.</p>
+ *          <note>
+ *             <p>KMS authorizes <code>ListRetirableGrants</code> requests by evaluating the caller
+ *         account's kms:ListRetirableGrants permissions. The authorized resource in
+ *           <code>ListRetirableGrants</code> calls is the retiring principal specified in the request.
+ *         KMS does not evaluate the caller's permissions to verify their access to any KMS keys or
+ *         grants that might be returned by the <code>ListRetirableGrants</code> call.</p>
+ *          </note>
  *          <p>
  *             <b>Related operations:</b>
  *          </p>
@@ -66,6 +75,9 @@ export interface ListRetirableGrantsCommandOutput extends ListGrantsResponse, __
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/PutKeyPolicyCommand.d.ts

@@ -36,6 +36,9 @@ export interface PutKeyPolicyCommandOutput extends __MetadataBearer {
  *          <p>
  *             <b>Related operations</b>: <a>GetKeyPolicy</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ReEncryptCommand.d.ts

@@ -118,6 +118,9 @@ export interface ReEncryptCommandOutput extends ReEncryptResponse, __MetadataBea
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -167,9 +170,7 @@ export interface ReEncryptCommandOutput extends ReEncryptResponse, __MetadataBea
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link IncorrectKeyException} (client fault)
  *  <p>The request was rejected because the specified KMS key cannot decrypt the data. The

package/dist-types/commands/ReplicateKeyCommand.d.ts

@@ -62,7 +62,7 @@ export interface ReplicateKeyCommandOutput extends ReplicateKeyResponse, __Metad
  *         <code>ReplicateKey</code> operation in the primary key's Region and a <a>CreateKey</a> operation in the replica key's Region.</p>
  *          <p>If you replicate a multi-Region primary key with imported key material, the replica key is
  *       created with no key material. You must import the same key material that you imported into the
- *       primary key. For details, see <a href="kms/latest/developerguide/multi-region-keys-import.html">Importing key material into multi-Region keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
+ *       primary key. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-import.html">Importing key material into multi-Region keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>To convert a replica key to a primary key, use the <a>UpdatePrimaryRegion</a>
  *       operation.</p>
  *          <note>
@@ -106,6 +106,9 @@ export interface ReplicateKeyCommandOutput extends ReplicateKeyResponse, __Metad
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/RetireGrantCommand.d.ts

@@ -41,7 +41,7 @@ export interface RetireGrantCommandOutput extends __MetadataBearer {
  *             <b>Cross-account use</b>: Yes. You can retire a grant on a KMS
  *       key in a different Amazon Web Services account.</p>
  *          <p>
- *             <b>Required permissions:</b>:Permission to retire a grant is
+ *             <b>Required permissions</b>: Permission to retire a grant is
  *       determined primarily by the grant. For details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#grant-delete">Retiring and revoking grants</a> in
  *       the <i>Key Management Service Developer Guide</i>.</p>
  *          <p>
@@ -69,6 +69,9 @@ export interface RetireGrantCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -98,9 +101,7 @@ export interface RetireGrantCommandOutput extends __MetadataBearer {
  *       request.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidArnException} (client fault)
  *  <p>The request was rejected because a specified ARN, or an ARN in a key policy, is not

package/dist-types/commands/RevokeGrantCommand.d.ts

@@ -67,6 +67,9 @@ export interface RevokeGrantCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -95,9 +98,7 @@ export interface RevokeGrantCommandOutput extends __MetadataBearer {
  *       request.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidArnException} (client fault)
  *  <p>The request was rejected because a specified ARN, or an ARN in a key policy, is not

package/dist-types/commands/ScheduleKeyDeletionCommand.d.ts

@@ -34,8 +34,7 @@ export interface ScheduleKeyDeletionCommandOutput extends ScheduleKeyDeletionRes
  *          <important>
  *             <p>Deleting a KMS key is a destructive and potentially dangerous operation. When a KMS key
  *         is deleted, all data that was encrypted under the KMS key is unrecoverable. (The only
- *         exception is a <a href="kms/latest/developerguide/multi-region-keys-delete.html">multi-Region replica
- *           key</a>, or an <a href="kms/latest/developerguide/importing-keys-managing.html#import-delete-key">asymmetric or HMAC KMS
+ *         exception is a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-delete.html">multi-Region replica key</a>, or an <a href="kms/latest/developerguide/importing-keys-managing.html#import-delete-key">asymmetric or HMAC KMS
  *           key with imported key material</a>.) To prevent the use of a KMS key without deleting
  *         it, use <a>DisableKey</a>. </p>
  *          </important>
@@ -81,6 +80,9 @@ export interface ScheduleKeyDeletionCommandOutput extends ScheduleKeyDeletionRes
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/SignCommand.d.ts

@@ -75,6 +75,9 @@ export interface SignCommandOutput extends SignResponse, __MetadataBearer {
  *          <p>
  *             <b>Related operations</b>: <a>Verify</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -115,9 +118,7 @@ export interface SignCommandOutput extends SignResponse, __MetadataBearer {
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/commands/TagResourceCommand.d.ts

@@ -70,6 +70,9 @@ export interface TagResourceCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UntagResourceCommand.d.ts

@@ -65,6 +65,9 @@ export interface UntagResourceCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdateAliasCommand.d.ts

@@ -86,6 +86,9 @@ export interface UpdateAliasCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdateCustomKeyStoreCommand.d.ts

@@ -116,6 +116,9 @@ export interface UpdateCustomKeyStoreCommandOutput extends UpdateCustomKeyStoreR
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -295,8 +298,7 @@ export interface UpdateCustomKeyStoreCommandOutput extends UpdateCustomKeyStoreR
  * @throws {@link XksProxyVpcEndpointServiceInvalidConfigurationException} (client fault)
  *  <p>The request was rejected because the Amazon VPC endpoint service configuration does not fulfill
  *       the requirements for an external key store proxy. For details, see the exception message and
- *         <a href="kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements">review the
- *         requirements</a> for Amazon VPC endpoint service connectivity for an external key
+ *         <a href="https://docs.aws.amazon.com/kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements">review the requirements</a> for Amazon VPC endpoint service connectivity for an external key
  *       store.</p>
  *
  * @throws {@link XksProxyVpcEndpointServiceNotFoundException} (client fault)

package/dist-types/commands/UpdateKeyDescriptionCommand.d.ts

@@ -45,6 +45,9 @@ export interface UpdateKeyDescriptionCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdatePrimaryRegionCommand.d.ts

@@ -88,6 +88,9 @@ export interface UpdatePrimaryRegionCommandOutput extends __MetadataBearer {
  *                </p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/VerifyCommand.d.ts

@@ -58,6 +58,9 @@ export interface VerifyCommandOutput extends VerifyResponse, __MetadataBearer {
  *          <p>
  *             <b>Related operations</b>: <a>Sign</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -99,9 +102,7 @@ export interface VerifyCommandOutput extends VerifyResponse, __MetadataBearer {
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/commands/VerifyMacCommand.d.ts

@@ -44,6 +44,9 @@ export interface VerifyMacCommandOutput extends VerifyMacResponse, __MetadataBea
  *          <p>
  *             <b>Related operations</b>: <a>GenerateMac</a>
  *          </p>
+ *          <p>
+ *             <b>Eventual consistency</b>: The KMS API follows an eventual consistency model.
+ *   For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">KMS eventual consistency</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -80,9 +83,7 @@ export interface VerifyMacCommandOutput extends VerifyMacResponse, __MetadataBea
  *  <p>The request was rejected because the specified KMS key is not enabled.</p>
  *
  * @throws {@link DryRunOperationException} (client fault)
- *  <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ *  <p> The request was rejected because the DryRun parameter was specified. </p>
  *
  * @throws {@link InvalidGrantTokenException} (client fault)
  *  <p>The request was rejected because the specified grant token is not valid.</p>

package/dist-types/models/models_0.d.ts

@@ -831,8 +831,7 @@ export declare class XksProxyVpcEndpointServiceInUseException extends __BaseExce
  * @public
  * <p>The request was rejected because the Amazon VPC endpoint service configuration does not fulfill
  *       the requirements for an external key store proxy. For details, see the exception message and
- *         <a href="kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements">review the
- *         requirements</a> for Amazon VPC endpoint service connectivity for an external key
+ *         <a href="https://docs.aws.amazon.com/kms/latest/developerguide/vpc-connectivity.html#xks-vpc-requirements">review the requirements</a> for Amazon VPC endpoint service connectivity for an external key
  *       store.</p>
  */
 export declare class XksProxyVpcEndpointServiceInvalidConfigurationException extends __BaseException {
@@ -1079,9 +1078,7 @@ export declare class DisabledException extends __BaseException {
 }
 /**
  * @public
- * <p>
- *       The request was rejected because the DryRun parameter was specified.
- *     </p>
+ * <p> The request was rejected because the DryRun parameter was specified. </p>
  */
 export declare class DryRunOperationException extends __BaseException {
     readonly name: "DryRunOperationException";
@@ -1444,7 +1441,8 @@ export interface CreateKeyRequest {
      *             <p>For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key">Default key policy</a> in the <i>Key Management Service Developer Guide</i>.</p>
      *          </important>
      *          <p>Use this parameter only when you intend to prevent the principal that is making the
-     *       request from making a subsequent <a>PutKeyPolicy</a> request on the KMS key.</p>
+     *       request from making a subsequent <a href="https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html">PutKeyPolicy</a>
+     *       request on the KMS key.</p>
      */
     BypassPolicyLockoutSafetyCheck?: boolean;
     /**
@@ -2424,9 +2422,9 @@ export interface DecryptRequest {
     EncryptionAlgorithm?: EncryptionAlgorithmSpec;
     /**
      * @public
-     * <p>A signed <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitro-enclave-how.html#term-attestdoc">attestation document</a> from
-     *       an Amazon Web Services Nitro enclave and the encryption algorithm to use with the enclave's public key. The
-     *       only valid encryption algorithm is <code>RSAES_OAEP_SHA_256</code>. </p>
+     * <p>A signed <a href="https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave-concepts.html#term-attestdoc">attestation
+     *         document</a> from an Amazon Web Services Nitro enclave and the encryption algorithm to use with the
+     *       enclave's public key. The only valid encryption algorithm is <code>RSAES_OAEP_SHA_256</code>. </p>
      *          <p>This parameter only supports attestation documents for Amazon Web Services Nitro Enclaves. To include this
      *       parameter, use the <a href="https://docs.aws.amazon.com/enclaves/latest/user/developing-applications.html#sdk">Amazon Web Services Nitro Enclaves SDK</a> or any Amazon Web Services SDK.</p>
      *          <p>When you use this parameter, instead of returning the plaintext data, KMS encrypts the
@@ -3637,8 +3635,8 @@ export interface GetParametersForImportRequest {
      *             </li>
      *             <li>
      *                <p>
-     *                   <b>RSAES_PKCS1_V1_5</b> (Deprecated) — Supported only
-     *           for symmetric encryption key material (and only in legacy mode).</p>
+     *                   <b>RSAES_PKCS1_V1_5</b> (Deprecated) — As of October
+     *           10, 2023, KMS does not support the RSAES_PKCS1_V1_5 wrapping algorithm.</p>
      *             </li>
      *          </ul>
      */
@@ -4433,7 +4431,8 @@ export interface PutKeyPolicyRequest {
      *             <p>For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key">Default key policy</a> in the <i>Key Management Service Developer Guide</i>.</p>
      *          </important>
      *          <p>Use this parameter only when you intend to prevent the principal that is making the
-     *       request from making a subsequent <a>PutKeyPolicy</a> request on the KMS key.</p>
+     *       request from making a subsequent <a href="https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html">PutKeyPolicy</a>
+     *       request on the KMS key.</p>
      */
     BypassPolicyLockoutSafetyCheck?: boolean;
 }
@@ -4698,7 +4697,8 @@ export interface ReplicateKeyRequest {
      *             <p>For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key">Default key policy</a> in the <i>Key Management Service Developer Guide</i>.</p>
      *          </important>
      *          <p>Use this parameter only when you intend to prevent the principal that is making the
-     *       request from making a subsequent <a>PutKeyPolicy</a> request on the KMS key.</p>
+     *       request from making a subsequent <a href="https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html">PutKeyPolicy</a>
+     *       request on the KMS key.</p>
      */
     BypassPolicyLockoutSafetyCheck?: boolean;
     /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-kms",
   "description": "AWS SDK for JavaScript Kms Client for Node.js, Browser and React Native",
-  "version": "3.474.0",
+  "version": "3.476.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -20,9 +20,9 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.474.0",
-    "@aws-sdk/core": "3.474.0",
-    "@aws-sdk/credential-provider-node": "3.474.0",
+    "@aws-sdk/client-sts": "3.476.0",
+    "@aws-sdk/core": "3.476.0",
+    "@aws-sdk/credential-provider-node": "3.476.0",
     "@aws-sdk/middleware-host-header": "3.468.0",
     "@aws-sdk/middleware-logger": "3.468.0",
     "@aws-sdk/middleware-recursion-detection": "3.468.0",