@aws-sdk/client-kms 3.577.0 → 3.583.0

package/dist-cjs/index.js

@@ -353,7 +353,8 @@ var AlgorithmSpec = {
   RSAES_OAEP_SHA_256: "RSAES_OAEP_SHA_256",
   RSAES_PKCS1_V1_5: "RSAES_PKCS1_V1_5",
   RSA_AES_KEY_WRAP_SHA_1: "RSA_AES_KEY_WRAP_SHA_1",
-  RSA_AES_KEY_WRAP_SHA_256: "RSA_AES_KEY_WRAP_SHA_256"
+  RSA_AES_KEY_WRAP_SHA_256: "RSA_AES_KEY_WRAP_SHA_256",
+  SM2PKE: "SM2PKE"
 };
 var _AlreadyExistsException = class _AlreadyExistsException extends KMSServiceException {
   /**
@@ -1246,7 +1247,8 @@ var ExpiredImportTokenException = _ExpiredImportTokenException;
 var WrappingKeySpec = {
   RSA_2048: "RSA_2048",
   RSA_3072: "RSA_3072",
-  RSA_4096: "RSA_4096"
+  RSA_4096: "RSA_4096",
+  SM2: "SM2"
 };
 var _IncorrectKeyMaterialException = class _IncorrectKeyMaterialException extends KMSServiceException {
   /**

package/dist-es/models/models_0.js

@@ -6,6 +6,7 @@ export const AlgorithmSpec = {
     RSAES_PKCS1_V1_5: "RSAES_PKCS1_V1_5",
     RSA_AES_KEY_WRAP_SHA_1: "RSA_AES_KEY_WRAP_SHA_1",
     RSA_AES_KEY_WRAP_SHA_256: "RSA_AES_KEY_WRAP_SHA_256",
+    SM2PKE: "SM2PKE",
 };
 export class AlreadyExistsException extends __BaseException {
     constructor(opts) {
@@ -684,6 +685,7 @@ export const WrappingKeySpec = {
     RSA_2048: "RSA_2048",
     RSA_3072: "RSA_3072",
     RSA_4096: "RSA_4096",
+    SM2: "SM2",
 };
 export class IncorrectKeyMaterialException extends __BaseException {
     constructor(opts) {

package/dist-types/commands/EnableKeyRotationCommand.d.ts

@@ -162,17 +162,6 @@ declare const EnableKeyRotationCommand_base: {
  * @public
  * @example To enable automatic rotation of key material
  * ```javascript
- * // The following example enables automatic annual rotation of the key material for the specified KMS key.
- * const input = {
- *   "KeyId": "1234abcd-12ab-34cd-56ef-1234567890ab"
- * };
- * const command = new EnableKeyRotationCommand(input);
- * await client.send(command);
- * // example id: to-enable-automatic-rotation-of-key-material-1478629109677
- * ```
- *
- * @example To enable automatic rotation of key material
- * ```javascript
  * // The following example enables automatic rotation with a rotation period of 365 days for the specified KMS key.
  * const input = {
  *   "KeyId": "1234abcd-12ab-34cd-56ef-1234567890ab",

package/dist-types/commands/GetKeyRotationStatusCommand.d.ts

@@ -167,22 +167,6 @@ declare const GetKeyRotationStatusCommand_base: {
  * @public
  * @example To retrieve the rotation status for a KMS key
  * ```javascript
- * // The following example retrieves the status of automatic annual rotation of the key material for the specified KMS key.
- * const input = {
- *   "KeyId": "1234abcd-12ab-34cd-56ef-1234567890ab"
- * };
- * const command = new GetKeyRotationStatusCommand(input);
- * const response = await client.send(command);
- * /* response ==
- * {
- *   "KeyRotationEnabled": true
- * }
- * *\/
- * // example id: to-retrieve-the-rotation-status-for-a-cmk-1479172287408
- * ```
- *
- * @example To retrieve the rotation status for a KMS key
- * ```javascript
  * // The following example retrieves detailed information about the rotation status for a KMS key, including whether automatic key rotation is enabled for the specified KMS key, the rotation period, and the next scheduled rotation date.
  * const input = {
  *   "KeyId": "1234abcd-12ab-34cd-56ef-1234567890ab"

package/dist-types/commands/GetParametersForImportCommand.d.ts

@@ -47,7 +47,7 @@ declare const GetParametersForImportCommand_base: {
  *       material.</p>
  *          <ul>
  *             <li>
- *                <p>The public key (or "wrapping key") of an RSA key pair that KMS generates.</p>
+ *                <p>The public key (or "wrapping key") of an asymmetric key pair that KMS generates.</p>
  *                <p>You will use this public key to encrypt ("wrap") your key material while it's in
  *           transit to KMS. </p>
  *             </li>
@@ -111,8 +111,8 @@ declare const GetParametersForImportCommand_base: {
  * const client = new KMSClient(config);
  * const input = { // GetParametersForImportRequest
  *   KeyId: "STRING_VALUE", // required
- *   WrappingAlgorithm: "RSAES_PKCS1_V1_5" || "RSAES_OAEP_SHA_1" || "RSAES_OAEP_SHA_256" || "RSA_AES_KEY_WRAP_SHA_1" || "RSA_AES_KEY_WRAP_SHA_256", // required
- *   WrappingKeySpec: "RSA_2048" || "RSA_3072" || "RSA_4096", // required
+ *   WrappingAlgorithm: "RSAES_PKCS1_V1_5" || "RSAES_OAEP_SHA_1" || "RSAES_OAEP_SHA_256" || "RSA_AES_KEY_WRAP_SHA_1" || "RSA_AES_KEY_WRAP_SHA_256" || "SM2PKE", // required
+ *   WrappingKeySpec: "RSA_2048" || "RSA_3072" || "RSA_4096" || "SM2", // required
  * };
  * const command = new GetParametersForImportCommand(input);
  * const response = await client.send(command);

package/dist-types/models/models_0.d.ts

@@ -10,6 +10,7 @@ export declare const AlgorithmSpec: {
     readonly RSAES_PKCS1_V1_5: "RSAES_PKCS1_V1_5";
     readonly RSA_AES_KEY_WRAP_SHA_1: "RSA_AES_KEY_WRAP_SHA_1";
     readonly RSA_AES_KEY_WRAP_SHA_256: "RSA_AES_KEY_WRAP_SHA_256";
+    readonly SM2PKE: "SM2PKE";
 };
 /**
  * @public
@@ -3625,6 +3626,7 @@ export declare const WrappingKeySpec: {
     readonly RSA_2048: "RSA_2048";
     readonly RSA_3072: "RSA_3072";
     readonly RSA_4096: "RSA_4096";
+    readonly SM2: "SM2";
 };
 /**
  * @public
@@ -3656,13 +3658,19 @@ export interface GetParametersForImportRequest {
      */
     KeyId: string | undefined;
     /**
-     * <p>The algorithm you will use with the RSA public key (<code>PublicKey</code>) in the
+     * <p>The algorithm you will use with the asymmetric public key (<code>PublicKey</code>) in the
      *       response to protect your key material during import. For more information, see <a href="kms/latest/developerguide/importing-keys-get-public-key-and-token.html#select-wrapping-algorithm">Select a wrapping algorithm</a> in the <i>Key Management Service Developer Guide</i>.</p>
      *          <p>For RSA_AES wrapping algorithms, you encrypt your key material with an AES key that you
      *       generate, then encrypt your AES key with the RSA public key from KMS. For RSAES wrapping
-     *       algorithms, you encrypt your key material directly with the RSA public key from KMS.</p>
+     *       algorithms, you encrypt your key material directly with the RSA public key from KMS.
+     *       For SM2PKE wrapping algorithms, you encrypt your key material directly with the SM2 public key
+     *       from KMS.</p>
      *          <p>The wrapping algorithms that you can use depend on the type of key material that you are
-     *       importing. To import an RSA private key, you must use an RSA_AES wrapping algorithm.</p>
+     *       importing. To import an RSA private key, you must use an RSA_AES wrapping algorithm, except
+     *       in China Regions, where you must use the SM2PKE wrapping algorithm to import an RSA private key.</p>
+     *          <p>The SM2PKE wrapping algorithm is available only in China Regions. The
+     *       <code>RSA_AES_KEY_WRAP_SHA_256</code> and <code>RSA_AES_KEY_WRAP_SHA_1</code>
+     *       wrapping algorithms are not supported in China Regions.</p>
      *          <ul>
      *             <li>
      *                <p>
@@ -3693,16 +3701,22 @@ export interface GetParametersForImportRequest {
      *                   <b>RSAES_PKCS1_V1_5</b> (Deprecated) — As of October
      *           10, 2023, KMS does not support the RSAES_PKCS1_V1_5 wrapping algorithm.</p>
      *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>SM2PKE</b> (China Regions only) — supported for
+     *           wrapping RSA, ECC, and SM2 key material.</p>
+     *             </li>
      *          </ul>
      * @public
      */
     WrappingAlgorithm: AlgorithmSpec | undefined;
     /**
-     * <p>The type of RSA public key to return in the response. You will use this wrapping key with
+     * <p>The type of public key to return in the response. You will use this wrapping key with
      *       the specified wrapping algorithm to protect your key material during import. </p>
-     *          <p>Use the longest RSA wrapping key that is practical. </p>
+     *          <p>Use the longest wrapping key that is practical. </p>
      *          <p>You cannot use an RSA_2048 public key to directly wrap an ECC_NIST_P521 private key.
      *       Instead, use an RSA_AES wrapping algorithm or choose a longer RSA public key.</p>
+     *          <p>The SM2 wrapping key spec is available only in China Regions.</p>
      * @public
      */
     WrappingKeySpec: WrappingKeySpec | undefined;

package/dist-types/ts3.4/models/models_0.d.ts

@@ -6,6 +6,7 @@ export declare const AlgorithmSpec: {
   readonly RSAES_PKCS1_V1_5: "RSAES_PKCS1_V1_5";
   readonly RSA_AES_KEY_WRAP_SHA_1: "RSA_AES_KEY_WRAP_SHA_1";
   readonly RSA_AES_KEY_WRAP_SHA_256: "RSA_AES_KEY_WRAP_SHA_256";
+  readonly SM2PKE: "SM2PKE";
 };
 export type AlgorithmSpec = (typeof AlgorithmSpec)[keyof typeof AlgorithmSpec];
 export interface AliasListEntry {
@@ -852,6 +853,7 @@ export declare const WrappingKeySpec: {
   readonly RSA_2048: "RSA_2048";
   readonly RSA_3072: "RSA_3072";
   readonly RSA_4096: "RSA_4096";
+  readonly SM2: "SM2";
 };
 export type WrappingKeySpec =
   (typeof WrappingKeySpec)[keyof typeof WrappingKeySpec];

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-kms",
   "description": "AWS SDK for JavaScript Kms Client for Node.js, Browser and React Native",
-  "version": "3.577.0",
+  "version": "3.583.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-kms",
@@ -20,40 +20,40 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sso-oidc": "3.577.0",
-    "@aws-sdk/client-sts": "3.577.0",
-    "@aws-sdk/core": "3.576.0",
-    "@aws-sdk/credential-provider-node": "3.577.0",
+    "@aws-sdk/client-sso-oidc": "3.583.0",
+    "@aws-sdk/client-sts": "3.583.0",
+    "@aws-sdk/core": "3.582.0",
+    "@aws-sdk/credential-provider-node": "3.583.0",
     "@aws-sdk/middleware-host-header": "3.577.0",
     "@aws-sdk/middleware-logger": "3.577.0",
     "@aws-sdk/middleware-recursion-detection": "3.577.0",
-    "@aws-sdk/middleware-user-agent": "3.577.0",
+    "@aws-sdk/middleware-user-agent": "3.583.0",
     "@aws-sdk/region-config-resolver": "3.577.0",
     "@aws-sdk/types": "3.577.0",
-    "@aws-sdk/util-endpoints": "3.577.0",
+    "@aws-sdk/util-endpoints": "3.583.0",
     "@aws-sdk/util-user-agent-browser": "3.577.0",
     "@aws-sdk/util-user-agent-node": "3.577.0",
     "@smithy/config-resolver": "^3.0.0",
-    "@smithy/core": "^2.0.0",
-    "@smithy/fetch-http-handler": "^3.0.0",
+    "@smithy/core": "^2.0.1",
+    "@smithy/fetch-http-handler": "^3.0.1",
     "@smithy/hash-node": "^3.0.0",
     "@smithy/invalid-dependency": "^3.0.0",
     "@smithy/middleware-content-length": "^3.0.0",
     "@smithy/middleware-endpoint": "^3.0.0",
-    "@smithy/middleware-retry": "^3.0.0",
+    "@smithy/middleware-retry": "^3.0.1",
     "@smithy/middleware-serde": "^3.0.0",
     "@smithy/middleware-stack": "^3.0.0",
     "@smithy/node-config-provider": "^3.0.0",
     "@smithy/node-http-handler": "^3.0.0",
     "@smithy/protocol-http": "^4.0.0",
-    "@smithy/smithy-client": "^3.0.0",
+    "@smithy/smithy-client": "^3.0.1",
     "@smithy/types": "^3.0.0",
     "@smithy/url-parser": "^3.0.0",
     "@smithy/util-base64": "^3.0.0",
     "@smithy/util-body-length-browser": "^3.0.0",
     "@smithy/util-body-length-node": "^3.0.0",
-    "@smithy/util-defaults-mode-browser": "^3.0.0",
-    "@smithy/util-defaults-mode-node": "^3.0.0",
+    "@smithy/util-defaults-mode-browser": "^3.0.1",
+    "@smithy/util-defaults-mode-node": "^3.0.1",
     "@smithy/util-endpoints": "^2.0.0",
     "@smithy/util-middleware": "^3.0.0",
     "@smithy/util-retry": "^3.0.0",