@aws-sdk/client-payment-cryptography-data 3.1137.0 → 3.1139.0

package/dist-cjs/index.js

@@ -69,7 +69,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1136.0";
+var version = "3.1138.0";
 var packageInfo = {
 	version: version};
 
@@ -525,10 +525,10 @@ const _p = "path";
 const _s = "smithy.ts.sdk.synthetic.com.amazonaws.paymentcryptographydata";
 const _se = "server";
 const n0 = "com.amazonaws.paymentcryptographydata";
-const _s_registry = TypeRegistry.for(_s);
+const _s_registry = new TypeRegistry(_s);
 var PaymentCryptographyDataServiceException$ = [-3, _s, "PaymentCryptographyDataServiceException", 0, [], []];
 _s_registry.registerError(PaymentCryptographyDataServiceException$, PaymentCryptographyDataServiceException);
-const n0_registry = TypeRegistry.for(n0);
+const n0_registry = new TypeRegistry(n0);
 var AccessDeniedException$ = [-3, n0, _ADE,
     { [_e]: _c, [_hE]: 403 },
     [_M],
@@ -1074,8 +1074,8 @@ var PinVerificationAttributes$ = [4, n0, _PVA,
 ];
 var ReEncryptionAttributes$ = [4, n0, _REA,
     0,
-    [_S, _D],
-    [[() => SymmetricEncryptionAttributes$, 0], [() => DukptEncryptionAttributes$, 0]]
+    [_S, _As, _D],
+    [[() => SymmetricEncryptionAttributes$, 0], () => AsymmetricEncryptionAttributes$, [() => DukptEncryptionAttributes$, 0]]
 ];
 var SessionKeyDerivation$ = [4, n0, _SKD,
     0,

package/dist-es/schemas/schemas_0.js

@@ -301,10 +301,10 @@ const n0 = "com.amazonaws.paymentcryptographydata";
 import { TypeRegistry } from "@smithy/core/schema";
 import { AccessDeniedException, InternalServerException, ResourceNotFoundException, ThrottlingException, ValidationException, VerificationFailedException, } from "../models/errors";
 import { PaymentCryptographyDataServiceException } from "../models/PaymentCryptographyDataServiceException";
-const _s_registry = TypeRegistry.for(_s);
+const _s_registry = new TypeRegistry(_s);
 export var PaymentCryptographyDataServiceException$ = [-3, _s, "PaymentCryptographyDataServiceException", 0, [], []];
 _s_registry.registerError(PaymentCryptographyDataServiceException$, PaymentCryptographyDataServiceException);
-const n0_registry = TypeRegistry.for(n0);
+const n0_registry = new TypeRegistry(n0);
 export var AccessDeniedException$ = [-3, n0, _ADE,
     { [_e]: _c, [_hE]: 403 },
     [_M],
@@ -850,8 +850,8 @@ export var PinVerificationAttributes$ = [4, n0, _PVA,
 ];
 export var ReEncryptionAttributes$ = [4, n0, _REA,
     0,
-    [_S, _D],
-    [[() => SymmetricEncryptionAttributes$, 0], [() => DukptEncryptionAttributes$, 0]]
+    [_S, _As, _D],
+    [[() => SymmetricEncryptionAttributes$, 0], () => AsymmetricEncryptionAttributes$, [() => DukptEncryptionAttributes$, 0]]
 ];
 export var SessionKeyDerivation$ = [4, n0, _SKD,
     0,

package/dist-types/PaymentCryptographyData.d.ts

@@ -1,4 +1,4 @@
-import type { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
+import type { HttpHandlerOptions as __HttpHandlerOptions, MetricsRecorder as __MetricsRecorder } from "@smithy/types";
 import { type DecryptDataCommandInput, type DecryptDataCommandOutput } from "./commands/DecryptDataCommand";
 import { type EncryptDataCommandInput, type EncryptDataCommandOutput } from "./commands/EncryptDataCommand";
 import { type GenerateAs2805KekValidationCommandInput, type GenerateAs2805KekValidationCommandOutput } from "./commands/GenerateAs2805KekValidationCommand";
@@ -15,97 +15,103 @@ import { type VerifyCardValidationDataCommandInput, type VerifyCardValidationDat
 import { type VerifyMacCommandInput, type VerifyMacCommandOutput } from "./commands/VerifyMacCommand";
 import { type VerifyPinDataCommandInput, type VerifyPinDataCommandOutput } from "./commands/VerifyPinDataCommand";
 import { PaymentCryptographyDataClient } from "./PaymentCryptographyDataClient";
+/**
+ * @public
+ */
+export interface PaymentCryptographyDataRequestOptions extends __HttpHandlerOptions {
+    metricsRecorder?: __MetricsRecorder<unknown>;
+}
 export interface PaymentCryptographyData {
     /**
      * @see {@link DecryptDataCommand}
      */
-    decryptData(args: DecryptDataCommandInput, options?: __HttpHandlerOptions): Promise<DecryptDataCommandOutput>;
+    decryptData(args: DecryptDataCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<DecryptDataCommandOutput>;
     decryptData(args: DecryptDataCommandInput, cb: (err: any, data?: DecryptDataCommandOutput) => void): void;
-    decryptData(args: DecryptDataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DecryptDataCommandOutput) => void): void;
+    decryptData(args: DecryptDataCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: DecryptDataCommandOutput) => void): void;
     /**
      * @see {@link EncryptDataCommand}
      */
-    encryptData(args: EncryptDataCommandInput, options?: __HttpHandlerOptions): Promise<EncryptDataCommandOutput>;
+    encryptData(args: EncryptDataCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<EncryptDataCommandOutput>;
     encryptData(args: EncryptDataCommandInput, cb: (err: any, data?: EncryptDataCommandOutput) => void): void;
-    encryptData(args: EncryptDataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EncryptDataCommandOutput) => void): void;
+    encryptData(args: EncryptDataCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: EncryptDataCommandOutput) => void): void;
     /**
      * @see {@link GenerateAs2805KekValidationCommand}
      */
-    generateAs2805KekValidation(args: GenerateAs2805KekValidationCommandInput, options?: __HttpHandlerOptions): Promise<GenerateAs2805KekValidationCommandOutput>;
+    generateAs2805KekValidation(args: GenerateAs2805KekValidationCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<GenerateAs2805KekValidationCommandOutput>;
     generateAs2805KekValidation(args: GenerateAs2805KekValidationCommandInput, cb: (err: any, data?: GenerateAs2805KekValidationCommandOutput) => void): void;
-    generateAs2805KekValidation(args: GenerateAs2805KekValidationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GenerateAs2805KekValidationCommandOutput) => void): void;
+    generateAs2805KekValidation(args: GenerateAs2805KekValidationCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: GenerateAs2805KekValidationCommandOutput) => void): void;
     /**
      * @see {@link GenerateAuthRequestCryptogramCommand}
      */
-    generateAuthRequestCryptogram(args: GenerateAuthRequestCryptogramCommandInput, options?: __HttpHandlerOptions): Promise<GenerateAuthRequestCryptogramCommandOutput>;
+    generateAuthRequestCryptogram(args: GenerateAuthRequestCryptogramCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<GenerateAuthRequestCryptogramCommandOutput>;
     generateAuthRequestCryptogram(args: GenerateAuthRequestCryptogramCommandInput, cb: (err: any, data?: GenerateAuthRequestCryptogramCommandOutput) => void): void;
-    generateAuthRequestCryptogram(args: GenerateAuthRequestCryptogramCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GenerateAuthRequestCryptogramCommandOutput) => void): void;
+    generateAuthRequestCryptogram(args: GenerateAuthRequestCryptogramCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: GenerateAuthRequestCryptogramCommandOutput) => void): void;
     /**
      * @see {@link GenerateCardValidationDataCommand}
      */
-    generateCardValidationData(args: GenerateCardValidationDataCommandInput, options?: __HttpHandlerOptions): Promise<GenerateCardValidationDataCommandOutput>;
+    generateCardValidationData(args: GenerateCardValidationDataCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<GenerateCardValidationDataCommandOutput>;
     generateCardValidationData(args: GenerateCardValidationDataCommandInput, cb: (err: any, data?: GenerateCardValidationDataCommandOutput) => void): void;
-    generateCardValidationData(args: GenerateCardValidationDataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GenerateCardValidationDataCommandOutput) => void): void;
+    generateCardValidationData(args: GenerateCardValidationDataCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: GenerateCardValidationDataCommandOutput) => void): void;
     /**
      * @see {@link GenerateMacCommand}
      */
-    generateMac(args: GenerateMacCommandInput, options?: __HttpHandlerOptions): Promise<GenerateMacCommandOutput>;
+    generateMac(args: GenerateMacCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<GenerateMacCommandOutput>;
     generateMac(args: GenerateMacCommandInput, cb: (err: any, data?: GenerateMacCommandOutput) => void): void;
-    generateMac(args: GenerateMacCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GenerateMacCommandOutput) => void): void;
+    generateMac(args: GenerateMacCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: GenerateMacCommandOutput) => void): void;
     /**
      * @see {@link GenerateMacEmvPinChangeCommand}
      */
-    generateMacEmvPinChange(args: GenerateMacEmvPinChangeCommandInput, options?: __HttpHandlerOptions): Promise<GenerateMacEmvPinChangeCommandOutput>;
+    generateMacEmvPinChange(args: GenerateMacEmvPinChangeCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<GenerateMacEmvPinChangeCommandOutput>;
     generateMacEmvPinChange(args: GenerateMacEmvPinChangeCommandInput, cb: (err: any, data?: GenerateMacEmvPinChangeCommandOutput) => void): void;
-    generateMacEmvPinChange(args: GenerateMacEmvPinChangeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GenerateMacEmvPinChangeCommandOutput) => void): void;
+    generateMacEmvPinChange(args: GenerateMacEmvPinChangeCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: GenerateMacEmvPinChangeCommandOutput) => void): void;
     /**
      * @see {@link GeneratePinDataCommand}
      */
-    generatePinData(args: GeneratePinDataCommandInput, options?: __HttpHandlerOptions): Promise<GeneratePinDataCommandOutput>;
+    generatePinData(args: GeneratePinDataCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<GeneratePinDataCommandOutput>;
     generatePinData(args: GeneratePinDataCommandInput, cb: (err: any, data?: GeneratePinDataCommandOutput) => void): void;
-    generatePinData(args: GeneratePinDataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GeneratePinDataCommandOutput) => void): void;
+    generatePinData(args: GeneratePinDataCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: GeneratePinDataCommandOutput) => void): void;
     /**
      * @see {@link ReEncryptDataCommand}
      */
-    reEncryptData(args: ReEncryptDataCommandInput, options?: __HttpHandlerOptions): Promise<ReEncryptDataCommandOutput>;
+    reEncryptData(args: ReEncryptDataCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<ReEncryptDataCommandOutput>;
     reEncryptData(args: ReEncryptDataCommandInput, cb: (err: any, data?: ReEncryptDataCommandOutput) => void): void;
-    reEncryptData(args: ReEncryptDataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ReEncryptDataCommandOutput) => void): void;
+    reEncryptData(args: ReEncryptDataCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: ReEncryptDataCommandOutput) => void): void;
     /**
      * @see {@link TranslateKeyMaterialCommand}
      */
-    translateKeyMaterial(args: TranslateKeyMaterialCommandInput, options?: __HttpHandlerOptions): Promise<TranslateKeyMaterialCommandOutput>;
+    translateKeyMaterial(args: TranslateKeyMaterialCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<TranslateKeyMaterialCommandOutput>;
     translateKeyMaterial(args: TranslateKeyMaterialCommandInput, cb: (err: any, data?: TranslateKeyMaterialCommandOutput) => void): void;
-    translateKeyMaterial(args: TranslateKeyMaterialCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TranslateKeyMaterialCommandOutput) => void): void;
+    translateKeyMaterial(args: TranslateKeyMaterialCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: TranslateKeyMaterialCommandOutput) => void): void;
     /**
      * @see {@link TranslatePinDataCommand}
      */
-    translatePinData(args: TranslatePinDataCommandInput, options?: __HttpHandlerOptions): Promise<TranslatePinDataCommandOutput>;
+    translatePinData(args: TranslatePinDataCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<TranslatePinDataCommandOutput>;
     translatePinData(args: TranslatePinDataCommandInput, cb: (err: any, data?: TranslatePinDataCommandOutput) => void): void;
-    translatePinData(args: TranslatePinDataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TranslatePinDataCommandOutput) => void): void;
+    translatePinData(args: TranslatePinDataCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: TranslatePinDataCommandOutput) => void): void;
     /**
      * @see {@link VerifyAuthRequestCryptogramCommand}
      */
-    verifyAuthRequestCryptogram(args: VerifyAuthRequestCryptogramCommandInput, options?: __HttpHandlerOptions): Promise<VerifyAuthRequestCryptogramCommandOutput>;
+    verifyAuthRequestCryptogram(args: VerifyAuthRequestCryptogramCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<VerifyAuthRequestCryptogramCommandOutput>;
     verifyAuthRequestCryptogram(args: VerifyAuthRequestCryptogramCommandInput, cb: (err: any, data?: VerifyAuthRequestCryptogramCommandOutput) => void): void;
-    verifyAuthRequestCryptogram(args: VerifyAuthRequestCryptogramCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: VerifyAuthRequestCryptogramCommandOutput) => void): void;
+    verifyAuthRequestCryptogram(args: VerifyAuthRequestCryptogramCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: VerifyAuthRequestCryptogramCommandOutput) => void): void;
     /**
      * @see {@link VerifyCardValidationDataCommand}
      */
-    verifyCardValidationData(args: VerifyCardValidationDataCommandInput, options?: __HttpHandlerOptions): Promise<VerifyCardValidationDataCommandOutput>;
+    verifyCardValidationData(args: VerifyCardValidationDataCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<VerifyCardValidationDataCommandOutput>;
     verifyCardValidationData(args: VerifyCardValidationDataCommandInput, cb: (err: any, data?: VerifyCardValidationDataCommandOutput) => void): void;
-    verifyCardValidationData(args: VerifyCardValidationDataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: VerifyCardValidationDataCommandOutput) => void): void;
+    verifyCardValidationData(args: VerifyCardValidationDataCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: VerifyCardValidationDataCommandOutput) => void): void;
     /**
      * @see {@link VerifyMacCommand}
      */
-    verifyMac(args: VerifyMacCommandInput, options?: __HttpHandlerOptions): Promise<VerifyMacCommandOutput>;
+    verifyMac(args: VerifyMacCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<VerifyMacCommandOutput>;
     verifyMac(args: VerifyMacCommandInput, cb: (err: any, data?: VerifyMacCommandOutput) => void): void;
-    verifyMac(args: VerifyMacCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: VerifyMacCommandOutput) => void): void;
+    verifyMac(args: VerifyMacCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: VerifyMacCommandOutput) => void): void;
     /**
      * @see {@link VerifyPinDataCommand}
      */
-    verifyPinData(args: VerifyPinDataCommandInput, options?: __HttpHandlerOptions): Promise<VerifyPinDataCommandOutput>;
+    verifyPinData(args: VerifyPinDataCommandInput, options?: PaymentCryptographyDataRequestOptions): Promise<VerifyPinDataCommandOutput>;
     verifyPinData(args: VerifyPinDataCommandInput, cb: (err: any, data?: VerifyPinDataCommandOutput) => void): void;
-    verifyPinData(args: VerifyPinDataCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: VerifyPinDataCommandOutput) => void): void;
+    verifyPinData(args: VerifyPinDataCommandInput, options: PaymentCryptographyDataRequestOptions, cb: (err: any, data?: VerifyPinDataCommandOutput) => void): void;
 }
 /**
  * <p>You use the Amazon Web Services Payment Cryptography Data Plane to manage how encryption keys are used for payment-related transaction processing and associated cryptographic operations. You can encrypt, decrypt, generate, verify, and translate payment-related cryptographic operations in Amazon Web Services Payment Cryptography. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/data-operations.html">Data operations</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>.</p> <p>To manage your encryption keys, you use the <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/Welcome.html">Amazon Web Services Payment Cryptography Control Plane</a>. You can create, import, export, share, manage, and delete keys. You can also manage Identity and Access Management (IAM) policies for keys. </p>

package/dist-types/commands/ReEncryptDataCommand.d.ts

@@ -24,7 +24,7 @@ declare const ReEncryptDataCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
 };
 /**
- * <p>Re-encrypt ciphertext using DUKPT or Symmetric data encryption keys. </p> <p>You can either generate an encryption key within Amazon Web Services Payment Cryptography by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html">CreateKey</a> or import your own encryption key by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html">ImportKey</a>. The <code>KeyArn</code> for use with this operation must be in a compatible key state with <code>KeyModesOfUse</code> set to <code>Encrypt</code>. </p> <p>This operation also supports dynamic keys, allowing you to pass a dynamic encryption key as a TR-31 WrappedKeyBlock. This can be used when key material is frequently rotated, such as during every card transaction, and there is need to avoid importing short-lived keys into Amazon Web Services Payment Cryptography. To re-encrypt using dynamic keys, the <code>keyARN</code> is the Key Encryption Key (KEK) of the TR-31 wrapped encryption key material. The incoming wrapped key shall have a key purpose of D0 with a mode of use of B or D. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.html">Using Dynamic Keys</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>.</p> <p>For symmetric and DUKPT encryption, Amazon Web Services Payment Cryptography supports <code>TDES</code> and <code>AES</code> algorithms. To encrypt using DUKPT, a DUKPT key must already exist within your account with <code>KeyModesOfUse</code> set to <code>DeriveKey</code> or a new DUKPT can be generated by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html">CreateKey</a>.</p> <p>For information about valid keys for this operation, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-validattributes.html">Understanding key attributes</a> and <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html">Key types for specific data operations</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>. </p> <p> <b>Cross-account use</b>: This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html">Resource-based policies</a>.</p> <p> <b>Related operations:</b> </p> <ul> <li> <p> <a>DecryptData</a> </p> </li> <li> <p> <a>EncryptData</a> </p> </li> <li> <p> <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetPublicKeyCertificate.html">GetPublicCertificate</a> </p> </li> <li> <p> <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html">ImportKey</a> </p> </li> </ul>
+ * <p>Re-encrypts ciphertext using DUKPT, symmetric, or asymmetric data encryption keys. </p> <p>You can either generate an encryption key within Amazon Web Services Payment Cryptography by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html">CreateKey</a> or import your own encryption key by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html">ImportKey</a>. The <code>KeyArn</code> for use with this operation must be in a compatible key state with <code>KeyModesOfUse</code> set to <code>Encrypt</code>. </p> <p>This operation also supports dynamic keys, allowing you to pass a dynamic encryption key as a TR-31 WrappedKeyBlock. This can be used when key material is frequently rotated, such as during every card transaction, and there is need to avoid importing short-lived keys into Amazon Web Services Payment Cryptography. To re-encrypt using dynamic keys, the <code>keyARN</code> is the Key Encryption Key (KEK) of the TR-31 wrapped encryption key material. The incoming wrapped key shall have a key purpose of D0 with a mode of use of B or D. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.html">Using Dynamic Keys</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>.</p> <p>Amazon Web Services Payment Cryptography supports the following encryption key schemes:</p> <ul> <li> <p> <b>DUKPT</b>: <code>TDES</code> and <code>AES</code> algorithms. To encrypt using DUKPT, a DUKPT key must already exist within your account with <code>KeyModesOfUse</code> set to <code>DeriveKey</code> or a new DUKPT can be generated by calling <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_CreateKey.html">CreateKey</a>.</p> </li> <li> <p> <b>Symmetric</b>: <code>TDES</code> and <code>AES</code> algorithms.</p> </li> <li> <p> <b>Asymmetric</b>: <code>RSA</code>. You can use an <code>RSA</code> key on either the incoming or the outgoing side, paired with a symmetric key on the other side.</p> </li> </ul> <p>For information about valid keys for this operation, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-validattributes.html">Understanding key attributes</a> and <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html">Key types for specific data operations</a> in the <i>Amazon Web Services Payment Cryptography User Guide</i>. </p> <p> <b>Cross-account use</b>: This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see <a href="https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html">Resource-based policies</a>.</p> <p> <b>Related operations:</b> </p> <ul> <li> <p> <a>DecryptData</a> </p> </li> <li> <p> <a>EncryptData</a> </p> </li> <li> <p> <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetPublicKeyCertificate.html">GetPublicCertificate</a> </p> </li> <li> <p> <a href="https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_ImportKey.html">ImportKey</a> </p> </li> </ul>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -43,6 +43,9 @@ declare const ReEncryptDataCommand_base: {
  *       InitializationVector: "STRING_VALUE",
  *       PaddingType: "PKCS1" || "OAEP_SHA1" || "OAEP_SHA256" || "OAEP_SHA512",
  *     },
+ *     Asymmetric: { // AsymmetricEncryptionAttributes
+ *       PaddingType: "PKCS1" || "OAEP_SHA1" || "OAEP_SHA256" || "OAEP_SHA512",
+ *     },
  *     Dukpt: { // DukptEncryptionAttributes
  *       KeySerialNumber: "STRING_VALUE", // required
  *       Mode: "ECB" || "CBC",
@@ -57,6 +60,9 @@ declare const ReEncryptDataCommand_base: {
  *       InitializationVector: "STRING_VALUE",
  *       PaddingType: "PKCS1" || "OAEP_SHA1" || "OAEP_SHA256" || "OAEP_SHA512",
  *     },
+ *     Asymmetric: {
+ *       PaddingType: "PKCS1" || "OAEP_SHA1" || "OAEP_SHA256" || "OAEP_SHA512",
+ *     },
  *     Dukpt: {
  *       KeySerialNumber: "STRING_VALUE", // required
  *       Mode: "ECB" || "CBC",

package/dist-types/models/models_0.d.ts

@@ -2549,26 +2549,38 @@ export declare namespace OutgoingKeyMaterial {
  * <p>Parameters that are required to perform reencryption operation.</p>
  * @public
  */
-export type ReEncryptionAttributes = ReEncryptionAttributes.DukptMember | ReEncryptionAttributes.SymmetricMember | ReEncryptionAttributes.$UnknownMember;
+export type ReEncryptionAttributes = ReEncryptionAttributes.AsymmetricMember | ReEncryptionAttributes.DukptMember | ReEncryptionAttributes.SymmetricMember | ReEncryptionAttributes.$UnknownMember;
 /**
  * @public
  */
 export declare namespace ReEncryptionAttributes {
     /**
-     * <p>Parameters that are required to encrypt data using symmetric keys.</p>
+     * <p>Specifies the parameters required to encrypt data using symmetric keys.</p>
      * @public
      */
     interface SymmetricMember {
         Symmetric: SymmetricEncryptionAttributes;
+        Asymmetric?: never;
         Dukpt?: never;
         $unknown?: never;
     }
     /**
-     * <p>Parameters that are required to encrypt plaintext data using DUKPT.</p>
+     * <p>Specifies the parameters required to encrypt data using an asymmetric key pair. You must specify a <code>PaddingType</code>.</p>
+     * @public
+     */
+    interface AsymmetricMember {
+        Symmetric?: never;
+        Asymmetric: AsymmetricEncryptionAttributes;
+        Dukpt?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Specifies the parameters required to encrypt data using DUKPT.</p>
      * @public
      */
     interface DukptMember {
         Symmetric?: never;
+        Asymmetric?: never;
         Dukpt: DukptEncryptionAttributes;
         $unknown?: never;
     }
@@ -2577,6 +2589,7 @@ export declare namespace ReEncryptionAttributes {
      */
     interface $UnknownMember {
         Symmetric?: never;
+        Asymmetric?: never;
         Dukpt?: never;
         $unknown: [string, any];
     }
@@ -2586,6 +2599,7 @@ export declare namespace ReEncryptionAttributes {
      */
     interface Visitor<T> {
         Symmetric: (value: SymmetricEncryptionAttributes) => T;
+        Asymmetric: (value: AsymmetricEncryptionAttributes) => T;
         Dukpt: (value: DukptEncryptionAttributes) => T;
         _: (name: string, value: any) => T;
     }

package/dist-types/ts3.4/PaymentCryptographyData.d.ts

@@ -1,4 +1,7 @@
-import { HttpHandlerOptions as __HttpHandlerOptions } from "@smithy/types";
+import {
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetricsRecorder as __MetricsRecorder,
+} from "@smithy/types";
 import { DecryptDataCommandInput, DecryptDataCommandOutput } from "./commands/DecryptDataCommand";
 import { EncryptDataCommandInput, EncryptDataCommandOutput } from "./commands/EncryptDataCommand";
 import {
@@ -48,10 +51,13 @@ import {
   VerifyPinDataCommandOutput,
 } from "./commands/VerifyPinDataCommand";
 import { PaymentCryptographyDataClient } from "./PaymentCryptographyDataClient";
+export interface PaymentCryptographyDataRequestOptions extends __HttpHandlerOptions {
+  metricsRecorder?: __MetricsRecorder<unknown>;
+}
 export interface PaymentCryptographyData {
   decryptData(
     args: DecryptDataCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<DecryptDataCommandOutput>;
   decryptData(
     args: DecryptDataCommandInput,
@@ -59,12 +65,12 @@ export interface PaymentCryptographyData {
   ): void;
   decryptData(
     args: DecryptDataCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: DecryptDataCommandOutput) => void,
   ): void;
   encryptData(
     args: EncryptDataCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<EncryptDataCommandOutput>;
   encryptData(
     args: EncryptDataCommandInput,
@@ -72,12 +78,12 @@ export interface PaymentCryptographyData {
   ): void;
   encryptData(
     args: EncryptDataCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: EncryptDataCommandOutput) => void,
   ): void;
   generateAs2805KekValidation(
     args: GenerateAs2805KekValidationCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<GenerateAs2805KekValidationCommandOutput>;
   generateAs2805KekValidation(
     args: GenerateAs2805KekValidationCommandInput,
@@ -85,12 +91,12 @@ export interface PaymentCryptographyData {
   ): void;
   generateAs2805KekValidation(
     args: GenerateAs2805KekValidationCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: GenerateAs2805KekValidationCommandOutput) => void,
   ): void;
   generateAuthRequestCryptogram(
     args: GenerateAuthRequestCryptogramCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<GenerateAuthRequestCryptogramCommandOutput>;
   generateAuthRequestCryptogram(
     args: GenerateAuthRequestCryptogramCommandInput,
@@ -98,12 +104,12 @@ export interface PaymentCryptographyData {
   ): void;
   generateAuthRequestCryptogram(
     args: GenerateAuthRequestCryptogramCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: GenerateAuthRequestCryptogramCommandOutput) => void,
   ): void;
   generateCardValidationData(
     args: GenerateCardValidationDataCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<GenerateCardValidationDataCommandOutput>;
   generateCardValidationData(
     args: GenerateCardValidationDataCommandInput,
@@ -111,12 +117,12 @@ export interface PaymentCryptographyData {
   ): void;
   generateCardValidationData(
     args: GenerateCardValidationDataCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: GenerateCardValidationDataCommandOutput) => void,
   ): void;
   generateMac(
     args: GenerateMacCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<GenerateMacCommandOutput>;
   generateMac(
     args: GenerateMacCommandInput,
@@ -124,12 +130,12 @@ export interface PaymentCryptographyData {
   ): void;
   generateMac(
     args: GenerateMacCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: GenerateMacCommandOutput) => void,
   ): void;
   generateMacEmvPinChange(
     args: GenerateMacEmvPinChangeCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<GenerateMacEmvPinChangeCommandOutput>;
   generateMacEmvPinChange(
     args: GenerateMacEmvPinChangeCommandInput,
@@ -137,12 +143,12 @@ export interface PaymentCryptographyData {
   ): void;
   generateMacEmvPinChange(
     args: GenerateMacEmvPinChangeCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: GenerateMacEmvPinChangeCommandOutput) => void,
   ): void;
   generatePinData(
     args: GeneratePinDataCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<GeneratePinDataCommandOutput>;
   generatePinData(
     args: GeneratePinDataCommandInput,
@@ -150,12 +156,12 @@ export interface PaymentCryptographyData {
   ): void;
   generatePinData(
     args: GeneratePinDataCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: GeneratePinDataCommandOutput) => void,
   ): void;
   reEncryptData(
     args: ReEncryptDataCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<ReEncryptDataCommandOutput>;
   reEncryptData(
     args: ReEncryptDataCommandInput,
@@ -163,12 +169,12 @@ export interface PaymentCryptographyData {
   ): void;
   reEncryptData(
     args: ReEncryptDataCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: ReEncryptDataCommandOutput) => void,
   ): void;
   translateKeyMaterial(
     args: TranslateKeyMaterialCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<TranslateKeyMaterialCommandOutput>;
   translateKeyMaterial(
     args: TranslateKeyMaterialCommandInput,
@@ -176,12 +182,12 @@ export interface PaymentCryptographyData {
   ): void;
   translateKeyMaterial(
     args: TranslateKeyMaterialCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: TranslateKeyMaterialCommandOutput) => void,
   ): void;
   translatePinData(
     args: TranslatePinDataCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<TranslatePinDataCommandOutput>;
   translatePinData(
     args: TranslatePinDataCommandInput,
@@ -189,12 +195,12 @@ export interface PaymentCryptographyData {
   ): void;
   translatePinData(
     args: TranslatePinDataCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: TranslatePinDataCommandOutput) => void,
   ): void;
   verifyAuthRequestCryptogram(
     args: VerifyAuthRequestCryptogramCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<VerifyAuthRequestCryptogramCommandOutput>;
   verifyAuthRequestCryptogram(
     args: VerifyAuthRequestCryptogramCommandInput,
@@ -202,12 +208,12 @@ export interface PaymentCryptographyData {
   ): void;
   verifyAuthRequestCryptogram(
     args: VerifyAuthRequestCryptogramCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: VerifyAuthRequestCryptogramCommandOutput) => void,
   ): void;
   verifyCardValidationData(
     args: VerifyCardValidationDataCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<VerifyCardValidationDataCommandOutput>;
   verifyCardValidationData(
     args: VerifyCardValidationDataCommandInput,
@@ -215,12 +221,12 @@ export interface PaymentCryptographyData {
   ): void;
   verifyCardValidationData(
     args: VerifyCardValidationDataCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: VerifyCardValidationDataCommandOutput) => void,
   ): void;
   verifyMac(
     args: VerifyMacCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<VerifyMacCommandOutput>;
   verifyMac(
     args: VerifyMacCommandInput,
@@ -228,12 +234,12 @@ export interface PaymentCryptographyData {
   ): void;
   verifyMac(
     args: VerifyMacCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: VerifyMacCommandOutput) => void,
   ): void;
   verifyPinData(
     args: VerifyPinDataCommandInput,
-    options?: __HttpHandlerOptions,
+    options?: PaymentCryptographyDataRequestOptions,
   ): Promise<VerifyPinDataCommandOutput>;
   verifyPinData(
     args: VerifyPinDataCommandInput,
@@ -241,7 +247,7 @@ export interface PaymentCryptographyData {
   ): void;
   verifyPinData(
     args: VerifyPinDataCommandInput,
-    options: __HttpHandlerOptions,
+    options: PaymentCryptographyDataRequestOptions,
     cb: (err: any, data?: VerifyPinDataCommandOutput) => void,
   ): void;
 }

package/dist-types/ts3.4/models/models_0.d.ts

@@ -1111,27 +1111,38 @@ export declare namespace OutgoingKeyMaterial {
   }
 }
 export type ReEncryptionAttributes =
+  | ReEncryptionAttributes.AsymmetricMember
   | ReEncryptionAttributes.DukptMember
   | ReEncryptionAttributes.SymmetricMember
   | ReEncryptionAttributes.$UnknownMember;
 export declare namespace ReEncryptionAttributes {
   interface SymmetricMember {
     Symmetric: SymmetricEncryptionAttributes;
+    Asymmetric?: never;
+    Dukpt?: never;
+    $unknown?: never;
+  }
+  interface AsymmetricMember {
+    Symmetric?: never;
+    Asymmetric: AsymmetricEncryptionAttributes;
     Dukpt?: never;
     $unknown?: never;
   }
   interface DukptMember {
     Symmetric?: never;
+    Asymmetric?: never;
     Dukpt: DukptEncryptionAttributes;
     $unknown?: never;
   }
   interface $UnknownMember {
     Symmetric?: never;
+    Asymmetric?: never;
     Dukpt?: never;
     $unknown: [string, any];
   }
   interface Visitor<T> {
     Symmetric: (value: SymmetricEncryptionAttributes) => T;
+    Asymmetric: (value: AsymmetricEncryptionAttributes) => T;
     Dukpt: (value: DukptEncryptionAttributes) => T;
     _: (name: string, value: any) => T;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-payment-cryptography-data",
-  "version": "3.1137.0",
+  "version": "3.1139.0",
   "description": "AWS SDK for JavaScript Payment Cryptography Data Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-payment-cryptography-data",
   "license": "Apache-2.0",
@@ -46,13 +46,13 @@
     "test:index": "tsc -p tsconfig.test.json && node ./test/index-objects.spec.mjs"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.978.0",
-    "@aws-sdk/credential-provider-node": "^3.972.83",
-    "@aws-sdk/types": "^3.974.5",
-    "@smithy/core": "^3.33.3",
-    "@smithy/fetch-http-handler": "^5.7.2",
-    "@smithy/node-http-handler": "^4.11.3",
-    "@smithy/types": "^4.17.2",
+    "@aws-sdk/core": "^3.978.1",
+    "@aws-sdk/credential-provider-node": "^3.972.84",
+    "@aws-sdk/types": "^3.974.6",
+    "@smithy/core": "^3.35.0",
+    "@smithy/fetch-http-handler": "^5.8.0",
+    "@smithy/node-http-handler": "^4.12.1",
+    "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {