@aws-sdk/client-kms 3.554.0 → 3.556.0

package/dist-types/commands/UpdateCustomKeyStoreCommand.d.ts

@@ -275,8 +275,8 @@ declare const UpdateCustomKeyStoreCommand_base: {
  *
  * @throws {@link XksProxyUriEndpointInUseException} (client fault)
  *  <p>The request was rejected because the <code>XksProxyUriEndpoint</code> is already
- *       associated with another external key store in this Amazon Web Services Region. To identify the cause,
- *       see the error message that accompanies the exception. </p>
+ *       associated with another external key store in this Amazon Web Services Region. To identify the cause, see
+ *       the error message that accompanies the exception. </p>
  *
  * @throws {@link XksProxyUriInUseException} (client fault)
  *  <p>The request was rejected because the concatenation of the <code>XksProxyUriEndpoint</code>

package/dist-types/commands/index.d.ts

@@ -30,6 +30,7 @@ export * from "./ImportKeyMaterialCommand";
 export * from "./ListAliasesCommand";
 export * from "./ListGrantsCommand";
 export * from "./ListKeyPoliciesCommand";
+export * from "./ListKeyRotationsCommand";
 export * from "./ListKeysCommand";
 export * from "./ListResourceTagsCommand";
 export * from "./ListRetirableGrantsCommand";
@@ -38,6 +39,7 @@ export * from "./ReEncryptCommand";
 export * from "./ReplicateKeyCommand";
 export * from "./RetireGrantCommand";
 export * from "./RevokeGrantCommand";
+export * from "./RotateKeyOnDemandCommand";
 export * from "./ScheduleKeyDeletionCommand";
 export * from "./SignCommand";
 export * from "./TagResourceCommand";

package/dist-types/models/models_0.d.ts

@@ -282,6 +282,19 @@ export declare class CloudHsmClusterNotRelatedException extends __BaseException
      */
     constructor(opts: __ExceptionOptionType<CloudHsmClusterNotRelatedException, __BaseException>);
 }
+/**
+ * <p>The request was rejected because an automatic rotation of this key is currently in
+ *       progress or scheduled to begin within the next 20 minutes. </p>
+ * @public
+ */
+export declare class ConflictException extends __BaseException {
+    readonly name: "ConflictException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
+}
 /**
  * @public
  */
@@ -768,8 +781,8 @@ export declare class XksProxyInvalidResponseException extends __BaseException {
 }
 /**
  * <p>The request was rejected because the <code>XksProxyUriEndpoint</code> is already
- *       associated with another external key store in this Amazon Web Services Region. To identify the cause,
- *       see the error message that accompanies the exception. </p>
+ *       associated with another external key store in this Amazon Web Services Region. To identify the cause, see
+ *       the error message that accompanies the exception. </p>
  * @public
  */
 export declare class XksProxyUriEndpointInUseException extends __BaseException {
@@ -2652,7 +2665,7 @@ export interface DescribeCustomKeyStoresResponse {
     /**
      * <p>A flag that indicates whether there are more items in the list. When this
      *     value is true, the list in this response is truncated. To get more items, pass the value of
-     *     the <code>NextMarker</code> element in thisresponse to the <code>Marker</code> parameter in a
+     *     the <code>NextMarker</code> element in this response to the <code>Marker</code> parameter in a
      *     subsequent request.</p>
      * @public
      */
@@ -2831,6 +2844,20 @@ export interface EnableKeyRotationRequest {
      * @public
      */
     KeyId: string | undefined;
+    /**
+     * <p>Use this parameter to specify a custom period of time between each rotation date. If no
+     *       value is specified, the default value is 365 days.</p>
+     *          <p>The rotation period defines the number of days after you enable automatic key rotation
+     *       that KMS will rotate your key material, and the number of days between each automatic
+     *       rotation thereafter.</p>
+     *          <p>You can use the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-rotation-period-in-days">
+     *                <code>kms:RotationPeriodInDays</code>
+     *             </a> condition key to further constrain the
+     *       values that principals can specify in the <code>RotationPeriodInDays</code> parameter.</p>
+     *          <p> </p>
+     * @public
+     */
+    RotationPeriodInDays?: number;
 }
 /**
  * @public
@@ -3564,6 +3591,31 @@ export interface GetKeyRotationStatusResponse {
      * @public
      */
     KeyRotationEnabled?: boolean;
+    /**
+     * <p>Identifies the specified symmetric encryption KMS key.</p>
+     * @public
+     */
+    KeyId?: string;
+    /**
+     * <p>The number of days between each automatic rotation. The default value is 365 days.</p>
+     * @public
+     */
+    RotationPeriodInDays?: number;
+    /**
+     * <p>The next date that KMS will automatically rotate the key material.</p>
+     * @public
+     */
+    NextRotationDate?: Date;
+    /**
+     * <p>Identifies the date and time that an in progress on-demand rotation was initiated.</p>
+     *          <p>The KMS API follows an <a href="https://docs.aws.amazon.com/kms/latest/developerguide/programming-eventual-consistency.html">eventual consistency</a> model
+     *       due to the distributed nature of the system. As a result, there might be a slight delay
+     *       between initiating on-demand key rotation and the rotation's completion. Once the on-demand
+     *       rotation is complete, use <a>ListKeyRotations</a> to view the details of the
+     *       on-demand rotation.</p>
+     * @public
+     */
+    OnDemandRotationStartDate?: Date;
 }
 /**
  * @public
@@ -4056,7 +4108,7 @@ export interface ListAliasesResponse {
     /**
      * <p>A flag that indicates whether there are more items in the list. When this
      *     value is true, the list in this response is truncated. To get more items, pass the value of
-     *     the <code>NextMarker</code> element in thisresponse to the <code>Marker</code> parameter in a
+     *     the <code>NextMarker</code> element in this response to the <code>Marker</code> parameter in a
      *     subsequent request.</p>
      * @public
      */
@@ -4132,7 +4184,7 @@ export interface ListGrantsResponse {
     /**
      * <p>A flag that indicates whether there are more items in the list. When this
      *     value is true, the list in this response is truncated. To get more items, pass the value of
-     *     the <code>NextMarker</code> element in thisresponse to the <code>Marker</code> parameter in a
+     *     the <code>NextMarker</code> element in this response to the <code>Marker</code> parameter in a
      *     subsequent request.</p>
      * @public
      */
@@ -4196,7 +4248,103 @@ export interface ListKeyPoliciesResponse {
     /**
      * <p>A flag that indicates whether there are more items in the list. When this
      *     value is true, the list in this response is truncated. To get more items, pass the value of
-     *     the <code>NextMarker</code> element in thisresponse to the <code>Marker</code> parameter in a
+     *     the <code>NextMarker</code> element in this response to the <code>Marker</code> parameter in a
+     *     subsequent request.</p>
+     * @public
+     */
+    Truncated?: boolean;
+}
+/**
+ * @public
+ */
+export interface ListKeyRotationsRequest {
+    /**
+     * <p>Gets the key rotations for the specified KMS key.</p>
+     *          <p>Specify the key ID or key ARN of the KMS key.</p>
+     *          <p>For example:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Key ID: <code>1234abcd-12ab-34cd-56ef-1234567890ab</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>Key ARN: <code>arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     *          <p>To get the key ID and key ARN for a KMS key, use <a>ListKeys</a> or <a>DescribeKey</a>.</p>
+     * @public
+     */
+    KeyId: string | undefined;
+    /**
+     * <p>Use this parameter to specify the maximum number of items to return. When this
+     *     value is present, KMS does not return more than the specified number of items, but it might
+     *     return fewer.</p>
+     *          <p>This value is optional. If you include a value, it must be between
+     *     1 and 1000, inclusive. If you do not include a value, it defaults to 100.</p>
+     * @public
+     */
+    Limit?: number;
+    /**
+     * <p>Use this parameter in a subsequent request after you receive a response with
+     *     truncated results. Set it to the value of <code>NextMarker</code> from the truncated response
+     *     you just received.</p>
+     * @public
+     */
+    Marker?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const RotationType: {
+    readonly AUTOMATIC: "AUTOMATIC";
+    readonly ON_DEMAND: "ON_DEMAND";
+};
+/**
+ * @public
+ */
+export type RotationType = (typeof RotationType)[keyof typeof RotationType];
+/**
+ * <p>Contains information about completed key material rotations.</p>
+ * @public
+ */
+export interface RotationsListEntry {
+    /**
+     * <p>Unique identifier of the key.</p>
+     * @public
+     */
+    KeyId?: string;
+    /**
+     * <p>Date and time that the key material rotation completed. Formatted as Unix time.</p>
+     * @public
+     */
+    RotationDate?: Date;
+    /**
+     * <p>Identifies whether the key material rotation was a scheduled <a href="https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html#rotating-keys-enable-disable">automatic rotation</a> or an <a href="https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html#rotating-keys-on-demand">on-demand rotation</a>.</p>
+     * @public
+     */
+    RotationType?: RotationType;
+}
+/**
+ * @public
+ */
+export interface ListKeyRotationsResponse {
+    /**
+     * <p>A list of completed key material rotations.</p>
+     * @public
+     */
+    Rotations?: RotationsListEntry[];
+    /**
+     * <p>When <code>Truncated</code> is true, this element is present and contains the
+     *     value to use for the <code>Marker</code> parameter in a subsequent request.</p>
+     * @public
+     */
+    NextMarker?: string;
+    /**
+     * <p>A flag that indicates whether there are more items in the list. When this
+     *     value is true, the list in this response is truncated. To get more items, pass the value of
+     *     the <code>NextMarker</code> element in this response to the <code>Marker</code> parameter in a
      *     subsequent request.</p>
      * @public
      */
@@ -4241,7 +4389,7 @@ export interface ListKeysResponse {
     /**
      * <p>A flag that indicates whether there are more items in the list. When this
      *     value is true, the list in this response is truncated. To get more items, pass the value of
-     *     the <code>NextMarker</code> element in thisresponse to the <code>Marker</code> parameter in a
+     *     the <code>NextMarker</code> element in this response to the <code>Marker</code> parameter in a
      *     subsequent request.</p>
      * @public
      */
@@ -4310,7 +4458,7 @@ export interface ListResourceTagsResponse {
     /**
      * <p>A flag that indicates whether there are more items in the list. When this
      *     value is true, the list in this response is truncated. To get more items, pass the value of
-     *     the <code>NextMarker</code> element in thisresponse to the <code>Marker</code> parameter in a
+     *     the <code>NextMarker</code> element in this response to the <code>Marker</code> parameter in a
      *     subsequent request.</p>
      * @public
      */
@@ -4842,6 +4990,44 @@ export interface RevokeGrantRequest {
      */
     DryRun?: boolean;
 }
+/**
+ * @public
+ */
+export interface RotateKeyOnDemandRequest {
+    /**
+     * <p>Identifies a symmetric encryption KMS key. You cannot perform on-demand rotation of <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">asymmetric KMS keys</a>,
+     *       <a href="https://docs.aws.amazon.com/kms/latest/developerguide/hmac.html">HMAC KMS keys</a>,
+     *       KMS keys with <a href="https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html">imported key material</a>, or KMS keys in a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html">custom key store</a>. To perform
+     *       on-demand rotation of a set of related <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-manage.html#multi-region-rotate">multi-Region keys</a>,
+     *       invoke the on-demand rotation on the primary key.</p>
+     *          <p>Specify the key ID or key ARN of the KMS key.</p>
+     *          <p>For example:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Key ID: <code>1234abcd-12ab-34cd-56ef-1234567890ab</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>Key ARN: <code>arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     *          <p>To get the key ID and key ARN for a KMS key, use <a>ListKeys</a> or <a>DescribeKey</a>.</p>
+     * @public
+     */
+    KeyId: string | undefined;
+}
+/**
+ * @public
+ */
+export interface RotateKeyOnDemandResponse {
+    /**
+     * <p>Identifies the symmetric encryption KMS key that you initiated on-demand rotation
+     *       on.</p>
+     * @public
+     */
+    KeyId?: string;
+}
 /**
  * @public
  */

package/dist-types/pagination/ListKeyRotationsPaginator.d.ts

@@ -0,0 +1,7 @@
+import { Paginator } from "@smithy/types";
+import { ListKeyRotationsCommandInput, ListKeyRotationsCommandOutput } from "../commands/ListKeyRotationsCommand";
+import { KMSPaginationConfiguration } from "./Interfaces";
+/**
+ * @public
+ */
+export declare const paginateListKeyRotations: (config: KMSPaginationConfiguration, input: ListKeyRotationsCommandInput, ...rest: any[]) => Paginator<ListKeyRotationsCommandOutput>;

package/dist-types/pagination/index.d.ts

@@ -3,6 +3,7 @@ export * from "./Interfaces";
 export * from "./ListAliasesPaginator";
 export * from "./ListGrantsPaginator";
 export * from "./ListKeyPoliciesPaginator";
+export * from "./ListKeyRotationsPaginator";
 export * from "./ListKeysPaginator";
 export * from "./ListResourceTagsPaginator";
 export * from "./ListRetirableGrantsPaginator";

package/dist-types/protocols/Aws_json1_1.d.ts

@@ -32,6 +32,7 @@ import { ImportKeyMaterialCommandInput, ImportKeyMaterialCommandOutput } from ".
 import { ListAliasesCommandInput, ListAliasesCommandOutput } from "../commands/ListAliasesCommand";
 import { ListGrantsCommandInput, ListGrantsCommandOutput } from "../commands/ListGrantsCommand";
 import { ListKeyPoliciesCommandInput, ListKeyPoliciesCommandOutput } from "../commands/ListKeyPoliciesCommand";
+import { ListKeyRotationsCommandInput, ListKeyRotationsCommandOutput } from "../commands/ListKeyRotationsCommand";
 import { ListKeysCommandInput, ListKeysCommandOutput } from "../commands/ListKeysCommand";
 import { ListResourceTagsCommandInput, ListResourceTagsCommandOutput } from "../commands/ListResourceTagsCommand";
 import { ListRetirableGrantsCommandInput, ListRetirableGrantsCommandOutput } from "../commands/ListRetirableGrantsCommand";
@@ -40,6 +41,7 @@ import { ReEncryptCommandInput, ReEncryptCommandOutput } from "../commands/ReEnc
 import { ReplicateKeyCommandInput, ReplicateKeyCommandOutput } from "../commands/ReplicateKeyCommand";
 import { RetireGrantCommandInput, RetireGrantCommandOutput } from "../commands/RetireGrantCommand";
 import { RevokeGrantCommandInput, RevokeGrantCommandOutput } from "../commands/RevokeGrantCommand";
+import { RotateKeyOnDemandCommandInput, RotateKeyOnDemandCommandOutput } from "../commands/RotateKeyOnDemandCommand";
 import { ScheduleKeyDeletionCommandInput, ScheduleKeyDeletionCommandOutput } from "../commands/ScheduleKeyDeletionCommand";
 import { SignCommandInput, SignCommandOutput } from "../commands/SignCommand";
 import { TagResourceCommandInput, TagResourceCommandOutput } from "../commands/TagResourceCommand";
@@ -178,6 +180,10 @@ export declare const se_ListGrantsCommand: (input: ListGrantsCommandInput, conte
  * serializeAws_json1_1ListKeyPoliciesCommand
  */
 export declare const se_ListKeyPoliciesCommand: (input: ListKeyPoliciesCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+/**
+ * serializeAws_json1_1ListKeyRotationsCommand
+ */
+export declare const se_ListKeyRotationsCommand: (input: ListKeyRotationsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 /**
  * serializeAws_json1_1ListKeysCommand
  */
@@ -210,6 +216,10 @@ export declare const se_RetireGrantCommand: (input: RetireGrantCommandInput, con
  * serializeAws_json1_1RevokeGrantCommand
  */
 export declare const se_RevokeGrantCommand: (input: RevokeGrantCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+/**
+ * serializeAws_json1_1RotateKeyOnDemandCommand
+ */
+export declare const se_RotateKeyOnDemandCommand: (input: RotateKeyOnDemandCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 /**
  * serializeAws_json1_1ScheduleKeyDeletionCommand
  */
@@ -378,6 +388,10 @@ export declare const de_ListGrantsCommand: (output: __HttpResponse, context: __S
  * deserializeAws_json1_1ListKeyPoliciesCommand
  */
 export declare const de_ListKeyPoliciesCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListKeyPoliciesCommandOutput>;
+/**
+ * deserializeAws_json1_1ListKeyRotationsCommand
+ */
+export declare const de_ListKeyRotationsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListKeyRotationsCommandOutput>;
 /**
  * deserializeAws_json1_1ListKeysCommand
  */
@@ -410,6 +424,10 @@ export declare const de_RetireGrantCommand: (output: __HttpResponse, context: __
  * deserializeAws_json1_1RevokeGrantCommand
  */
 export declare const de_RevokeGrantCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RevokeGrantCommandOutput>;
+/**
+ * deserializeAws_json1_1RotateKeyOnDemandCommand
+ */
+export declare const de_RotateKeyOnDemandCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RotateKeyOnDemandCommandOutput>;
 /**
  * deserializeAws_json1_1ScheduleKeyDeletionCommand
  */

package/dist-types/ts3.4/KMS.d.ts

@@ -127,6 +127,10 @@ import {
   ListKeyPoliciesCommandInput,
   ListKeyPoliciesCommandOutput,
 } from "./commands/ListKeyPoliciesCommand";
+import {
+  ListKeyRotationsCommandInput,
+  ListKeyRotationsCommandOutput,
+} from "./commands/ListKeyRotationsCommand";
 import {
   ListKeysCommandInput,
   ListKeysCommandOutput,
@@ -159,6 +163,10 @@ import {
   RevokeGrantCommandInput,
   RevokeGrantCommandOutput,
 } from "./commands/RevokeGrantCommand";
+import {
+  RotateKeyOnDemandCommandInput,
+  RotateKeyOnDemandCommandOutput,
+} from "./commands/RotateKeyOnDemandCommand";
 import {
   ScheduleKeyDeletionCommandInput,
   ScheduleKeyDeletionCommandOutput,
@@ -624,6 +632,19 @@ export interface KMS {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: ListKeyPoliciesCommandOutput) => void
   ): void;
+  listKeyRotations(
+    args: ListKeyRotationsCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<ListKeyRotationsCommandOutput>;
+  listKeyRotations(
+    args: ListKeyRotationsCommandInput,
+    cb: (err: any, data?: ListKeyRotationsCommandOutput) => void
+  ): void;
+  listKeyRotations(
+    args: ListKeyRotationsCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: ListKeyRotationsCommandOutput) => void
+  ): void;
   listKeys(): Promise<ListKeysCommandOutput>;
   listKeys(
     args: ListKeysCommandInput,
@@ -730,6 +751,19 @@ export interface KMS {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: RevokeGrantCommandOutput) => void
   ): void;
+  rotateKeyOnDemand(
+    args: RotateKeyOnDemandCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<RotateKeyOnDemandCommandOutput>;
+  rotateKeyOnDemand(
+    args: RotateKeyOnDemandCommandInput,
+    cb: (err: any, data?: RotateKeyOnDemandCommandOutput) => void
+  ): void;
+  rotateKeyOnDemand(
+    args: RotateKeyOnDemandCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: RotateKeyOnDemandCommandOutput) => void
+  ): void;
   scheduleKeyDeletion(
     args: ScheduleKeyDeletionCommandInput,
     options?: __HttpHandlerOptions

package/dist-types/ts3.4/KMSClient.d.ts

@@ -173,6 +173,10 @@ import {
   ListKeyPoliciesCommandInput,
   ListKeyPoliciesCommandOutput,
 } from "./commands/ListKeyPoliciesCommand";
+import {
+  ListKeyRotationsCommandInput,
+  ListKeyRotationsCommandOutput,
+} from "./commands/ListKeyRotationsCommand";
 import {
   ListKeysCommandInput,
   ListKeysCommandOutput,
@@ -205,6 +209,10 @@ import {
   RevokeGrantCommandInput,
   RevokeGrantCommandOutput,
 } from "./commands/RevokeGrantCommand";
+import {
+  RotateKeyOnDemandCommandInput,
+  RotateKeyOnDemandCommandOutput,
+} from "./commands/RotateKeyOnDemandCommand";
 import {
   ScheduleKeyDeletionCommandInput,
   ScheduleKeyDeletionCommandOutput,
@@ -282,6 +290,7 @@ export type ServiceInputTypes =
   | ListAliasesCommandInput
   | ListGrantsCommandInput
   | ListKeyPoliciesCommandInput
+  | ListKeyRotationsCommandInput
   | ListKeysCommandInput
   | ListResourceTagsCommandInput
   | ListRetirableGrantsCommandInput
@@ -290,6 +299,7 @@ export type ServiceInputTypes =
   | ReplicateKeyCommandInput
   | RetireGrantCommandInput
   | RevokeGrantCommandInput
+  | RotateKeyOnDemandCommandInput
   | ScheduleKeyDeletionCommandInput
   | SignCommandInput
   | TagResourceCommandInput
@@ -333,6 +343,7 @@ export type ServiceOutputTypes =
   | ListAliasesCommandOutput
   | ListGrantsCommandOutput
   | ListKeyPoliciesCommandOutput
+  | ListKeyRotationsCommandOutput
   | ListKeysCommandOutput
   | ListResourceTagsCommandOutput
   | ListRetirableGrantsCommandOutput
@@ -341,6 +352,7 @@ export type ServiceOutputTypes =
   | ReplicateKeyCommandOutput
   | RetireGrantCommandOutput
   | RevokeGrantCommandOutput
+  | RotateKeyOnDemandCommandOutput
   | ScheduleKeyDeletionCommandOutput
   | SignCommandOutput
   | TagResourceCommandOutput

package/dist-types/ts3.4/commands/ListKeyRotationsCommand.d.ts

@@ -0,0 +1,38 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import {
+  KMSClientResolvedConfig,
+  ServiceInputTypes,
+  ServiceOutputTypes,
+} from "../KMSClient";
+import {
+  ListKeyRotationsRequest,
+  ListKeyRotationsResponse,
+} from "../models/models_0";
+export { __MetadataBearer, $Command };
+export interface ListKeyRotationsCommandInput extends ListKeyRotationsRequest {}
+export interface ListKeyRotationsCommandOutput
+  extends ListKeyRotationsResponse,
+    __MetadataBearer {}
+declare const ListKeyRotationsCommand_base: {
+  new (
+    input: ListKeyRotationsCommandInput
+  ): import("@smithy/smithy-client").CommandImpl<
+    ListKeyRotationsCommandInput,
+    ListKeyRotationsCommandOutput,
+    KMSClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >;
+  new (
+    __0_0: ListKeyRotationsCommandInput
+  ): import("@smithy/smithy-client").CommandImpl<
+    ListKeyRotationsCommandInput,
+    ListKeyRotationsCommandOutput,
+    KMSClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >;
+  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+export declare class ListKeyRotationsCommand extends ListKeyRotationsCommand_base {}

package/dist-types/ts3.4/commands/RotateKeyOnDemandCommand.d.ts

@@ -0,0 +1,39 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import {
+  KMSClientResolvedConfig,
+  ServiceInputTypes,
+  ServiceOutputTypes,
+} from "../KMSClient";
+import {
+  RotateKeyOnDemandRequest,
+  RotateKeyOnDemandResponse,
+} from "../models/models_0";
+export { __MetadataBearer, $Command };
+export interface RotateKeyOnDemandCommandInput
+  extends RotateKeyOnDemandRequest {}
+export interface RotateKeyOnDemandCommandOutput
+  extends RotateKeyOnDemandResponse,
+    __MetadataBearer {}
+declare const RotateKeyOnDemandCommand_base: {
+  new (
+    input: RotateKeyOnDemandCommandInput
+  ): import("@smithy/smithy-client").CommandImpl<
+    RotateKeyOnDemandCommandInput,
+    RotateKeyOnDemandCommandOutput,
+    KMSClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >;
+  new (
+    __0_0: RotateKeyOnDemandCommandInput
+  ): import("@smithy/smithy-client").CommandImpl<
+    RotateKeyOnDemandCommandInput,
+    RotateKeyOnDemandCommandOutput,
+    KMSClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >;
+  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+export declare class RotateKeyOnDemandCommand extends RotateKeyOnDemandCommand_base {}

package/dist-types/ts3.4/commands/index.d.ts

@@ -30,6 +30,7 @@ export * from "./ImportKeyMaterialCommand";
 export * from "./ListAliasesCommand";
 export * from "./ListGrantsCommand";
 export * from "./ListKeyPoliciesCommand";
+export * from "./ListKeyRotationsCommand";
 export * from "./ListKeysCommand";
 export * from "./ListResourceTagsCommand";
 export * from "./ListRetirableGrantsCommand";
@@ -38,6 +39,7 @@ export * from "./ReEncryptCommand";
 export * from "./ReplicateKeyCommand";
 export * from "./RetireGrantCommand";
 export * from "./RevokeGrantCommand";
+export * from "./RotateKeyOnDemandCommand";
 export * from "./ScheduleKeyDeletionCommand";
 export * from "./SignCommand";
 export * from "./TagResourceCommand";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -108,6 +108,11 @@ export declare class CloudHsmClusterNotRelatedException extends __BaseException
     >
   );
 }
+export declare class ConflictException extends __BaseException {
+  readonly name: "ConflictException";
+  readonly $fault: "client";
+  constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
+}
 export interface ConnectCustomKeyStoreRequest {
   CustomKeyStoreId: string | undefined;
 }
@@ -726,6 +731,7 @@ export interface EnableKeyRequest {
 }
 export interface EnableKeyRotationRequest {
   KeyId: string | undefined;
+  RotationPeriodInDays?: number;
 }
 export interface EncryptRequest {
   KeyId: string | undefined;
@@ -837,6 +843,10 @@ export interface GetKeyRotationStatusRequest {
 }
 export interface GetKeyRotationStatusResponse {
   KeyRotationEnabled?: boolean;
+  KeyId?: string;
+  RotationPeriodInDays?: number;
+  NextRotationDate?: Date;
+  OnDemandRotationStartDate?: Date;
 }
 export declare const WrappingKeySpec: {
   readonly RSA_2048: "RSA_2048";
@@ -959,6 +969,26 @@ export interface ListKeyPoliciesResponse {
   NextMarker?: string;
   Truncated?: boolean;
 }
+export interface ListKeyRotationsRequest {
+  KeyId: string | undefined;
+  Limit?: number;
+  Marker?: string;
+}
+export declare const RotationType: {
+  readonly AUTOMATIC: "AUTOMATIC";
+  readonly ON_DEMAND: "ON_DEMAND";
+};
+export type RotationType = (typeof RotationType)[keyof typeof RotationType];
+export interface RotationsListEntry {
+  KeyId?: string;
+  RotationDate?: Date;
+  RotationType?: RotationType;
+}
+export interface ListKeyRotationsResponse {
+  Rotations?: RotationsListEntry[];
+  NextMarker?: string;
+  Truncated?: boolean;
+}
 export interface ListKeysRequest {
   Limit?: number;
   Marker?: string;
@@ -1036,6 +1066,12 @@ export interface RevokeGrantRequest {
   GrantId: string | undefined;
   DryRun?: boolean;
 }
+export interface RotateKeyOnDemandRequest {
+  KeyId: string | undefined;
+}
+export interface RotateKeyOnDemandResponse {
+  KeyId?: string;
+}
 export interface ScheduleKeyDeletionRequest {
   KeyId: string | undefined;
   PendingWindowInDays?: number;

package/dist-types/ts3.4/pagination/ListKeyRotationsPaginator.d.ts

@@ -0,0 +1,11 @@
+import { Paginator } from "@smithy/types";
+import {
+  ListKeyRotationsCommandInput,
+  ListKeyRotationsCommandOutput,
+} from "../commands/ListKeyRotationsCommand";
+import { KMSPaginationConfiguration } from "./Interfaces";
+export declare const paginateListKeyRotations: (
+  config: KMSPaginationConfiguration,
+  input: ListKeyRotationsCommandInput,
+  ...rest: any[]
+) => Paginator<ListKeyRotationsCommandOutput>;