@pulumi/aws 4.26.0 → 4.27.2

package/kms/replicaExternalKey.js

@@ -0,0 +1,119 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReplicaExternalKey = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages a KMS multi-Region replica key that uses external key material.
+ * See the [AWS KMS Developer Guide](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-import.html) for more information on importing key material into multi-Region keys.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const primary = new aws.Provider("primary", {region: "us-east-1"});
+ * const primaryExternalKey = new aws.kms.ExternalKey("primaryExternalKey", {
+ *     description: "Multi-Region primary key",
+ *     deletionWindowInDays: 30,
+ *     multiRegion: true,
+ *     enabled: true,
+ *     keyMaterialBase64: "...",
+ * }, {
+ *     provider: aws.primary,
+ * });
+ * const replica = new aws.kms.ReplicaExternalKey("replica", {
+ *     description: "Multi-Region replica key",
+ *     deletionWindowInDays: 7,
+ *     primaryKeyArn: aws_kms_external.primary.arn,
+ *     keyMaterialBase64: "...",
+ * });
+ * // Must be the same key material as the primary's.
+ * ```
+ *
+ * ## Import
+ *
+ * KMS multi-Region replica keys can be imported using the `id`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:kms/replicaExternalKey:ReplicaExternalKey example 1234abcd-12ab-34cd-56ef-1234567890ab
+ * ```
+ */
+class ReplicaExternalKey extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            inputs["arn"] = state ? state.arn : undefined;
+            inputs["bypassPolicyLockoutSafetyCheck"] = state ? state.bypassPolicyLockoutSafetyCheck : undefined;
+            inputs["deletionWindowInDays"] = state ? state.deletionWindowInDays : undefined;
+            inputs["description"] = state ? state.description : undefined;
+            inputs["enabled"] = state ? state.enabled : undefined;
+            inputs["expirationModel"] = state ? state.expirationModel : undefined;
+            inputs["keyId"] = state ? state.keyId : undefined;
+            inputs["keyMaterialBase64"] = state ? state.keyMaterialBase64 : undefined;
+            inputs["keyState"] = state ? state.keyState : undefined;
+            inputs["keyUsage"] = state ? state.keyUsage : undefined;
+            inputs["policy"] = state ? state.policy : undefined;
+            inputs["primaryKeyArn"] = state ? state.primaryKeyArn : undefined;
+            inputs["tags"] = state ? state.tags : undefined;
+            inputs["tagsAll"] = state ? state.tagsAll : undefined;
+            inputs["validTo"] = state ? state.validTo : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.primaryKeyArn === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'primaryKeyArn'");
+            }
+            inputs["bypassPolicyLockoutSafetyCheck"] = args ? args.bypassPolicyLockoutSafetyCheck : undefined;
+            inputs["deletionWindowInDays"] = args ? args.deletionWindowInDays : undefined;
+            inputs["description"] = args ? args.description : undefined;
+            inputs["enabled"] = args ? args.enabled : undefined;
+            inputs["keyMaterialBase64"] = args ? args.keyMaterialBase64 : undefined;
+            inputs["policy"] = args ? args.policy : undefined;
+            inputs["primaryKeyArn"] = args ? args.primaryKeyArn : undefined;
+            inputs["tags"] = args ? args.tags : undefined;
+            inputs["validTo"] = args ? args.validTo : undefined;
+            inputs["arn"] = undefined /*out*/;
+            inputs["expirationModel"] = undefined /*out*/;
+            inputs["keyId"] = undefined /*out*/;
+            inputs["keyState"] = undefined /*out*/;
+            inputs["keyUsage"] = undefined /*out*/;
+            inputs["tagsAll"] = undefined /*out*/;
+        }
+        if (!opts.version) {
+            opts = pulumi.mergeOptions(opts, { version: utilities.getVersion() });
+        }
+        super(ReplicaExternalKey.__pulumiType, name, inputs, opts);
+    }
+    /**
+     * Get an existing ReplicaExternalKey resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ReplicaExternalKey(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ReplicaExternalKey.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ReplicaExternalKey.__pulumiType;
+    }
+}
+exports.ReplicaExternalKey = ReplicaExternalKey;
+/** @internal */
+ReplicaExternalKey.__pulumiType = 'aws:kms/replicaExternalKey:ReplicaExternalKey';
+//# sourceMappingURL=replicaExternalKey.js.map

package/kms/replicaExternalKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replicaExternalKey.js","sourceRoot":"","sources":["../../kms/replicaExternalKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IA+FzD,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,gCAAgC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,MAAM,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,MAAM,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,MAAM,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClC,MAAM,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpC,MAAM,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IA3ID;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACzE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;;AA1BL,gDA6IC;AA/HG,gBAAgB;AACO,+BAAY,GAAG,+CAA+C,CAAC"}

package/kms/replicaKey.d.ts

@@ -0,0 +1,204 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages a KMS multi-Region replica key.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const primary = new aws.Provider("primary", {region: "us-east-1"});
+ * const primaryKey = new aws.kms.Key("primaryKey", {
+ *     description: "Multi-Region primary key",
+ *     deletionWindowInDays: 30,
+ *     multiRegion: true,
+ * }, {
+ *     provider: aws.primary,
+ * });
+ * const replica = new aws.kms.ReplicaKey("replica", {
+ *     description: "Multi-Region replica key",
+ *     deletionWindowInDays: 7,
+ *     primaryKeyArn: primaryKey.arn,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * KMS multi-Region replica keys can be imported using the `id`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:kms/replicaKey:ReplicaKey example 1234abcd-12ab-34cd-56ef-1234567890ab
+ * ```
+ */
+export declare class ReplicaKey extends pulumi.CustomResource {
+    /**
+     * Get an existing ReplicaKey resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ReplicaKeyState, opts?: pulumi.CustomResourceOptions): ReplicaKey;
+    /**
+     * Returns true if the given object is an instance of ReplicaKey.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ReplicaKey;
+    /**
+     * The Amazon Resource Name (ARN) of the replica key. The key ARNs of related multi-Region keys differ only in the Region value.
+     */
+    readonly arn: pulumi.Output<string>;
+    /**
+     * A flag to indicate whether to bypass the key policy lockout safety check.
+     * Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately.
+     * For more information, refer to the scenario in the [Default Key Policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) section in the _AWS Key Management Service Developer Guide_.
+     * The default value is `false`.
+     */
+    readonly bypassPolicyLockoutSafetyCheck: pulumi.Output<boolean | undefined>;
+    /**
+     * The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key.
+     * If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
+     */
+    readonly deletionWindowInDays: pulumi.Output<number | undefined>;
+    /**
+     * A description of the KMS key.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * Specifies whether the replica key is enabled. Disabled KMS keys cannot be used in cryptographic operations. The default value is `true`.
+     */
+    readonly enabled: pulumi.Output<boolean | undefined>;
+    /**
+     * The key ID of the replica key. Related multi-Region keys have the same key ID.
+     */
+    readonly keyId: pulumi.Output<string>;
+    /**
+     * A Boolean value that specifies whether key rotation is enabled. This is a shared property of multi-Region keys.
+     */
+    readonly keyRotationEnabled: pulumi.Output<boolean>;
+    /**
+     * The type of key material in the KMS key. This is a shared property of multi-Region keys.
+     */
+    readonly keySpec: pulumi.Output<string>;
+    /**
+     * The [cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) for which you can use the KMS key. This is a shared property of multi-Region keys.
+     */
+    readonly keyUsage: pulumi.Output<string>;
+    readonly policy: pulumi.Output<string>;
+    /**
+     * The ARN of the multi-Region primary key to replicate. The primary key must be in a different AWS Region of the same AWS Partition. You can create only one replica of a given primary key in each AWS Region.
+     */
+    readonly primaryKeyArn: pulumi.Output<string>;
+    readonly tags: pulumi.Output<{
+        [key: string]: string;
+    } | undefined>;
+    /**
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
+     */
+    readonly tagsAll: pulumi.Output<{
+        [key: string]: string;
+    }>;
+    /**
+     * Create a ReplicaKey resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ReplicaKeyArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ReplicaKey resources.
+ */
+export interface ReplicaKeyState {
+    /**
+     * The Amazon Resource Name (ARN) of the replica key. The key ARNs of related multi-Region keys differ only in the Region value.
+     */
+    arn?: pulumi.Input<string>;
+    /**
+     * A flag to indicate whether to bypass the key policy lockout safety check.
+     * Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately.
+     * For more information, refer to the scenario in the [Default Key Policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) section in the _AWS Key Management Service Developer Guide_.
+     * The default value is `false`.
+     */
+    bypassPolicyLockoutSafetyCheck?: pulumi.Input<boolean>;
+    /**
+     * The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key.
+     * If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
+     */
+    deletionWindowInDays?: pulumi.Input<number>;
+    /**
+     * A description of the KMS key.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Specifies whether the replica key is enabled. Disabled KMS keys cannot be used in cryptographic operations. The default value is `true`.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * The key ID of the replica key. Related multi-Region keys have the same key ID.
+     */
+    keyId?: pulumi.Input<string>;
+    /**
+     * A Boolean value that specifies whether key rotation is enabled. This is a shared property of multi-Region keys.
+     */
+    keyRotationEnabled?: pulumi.Input<boolean>;
+    /**
+     * The type of key material in the KMS key. This is a shared property of multi-Region keys.
+     */
+    keySpec?: pulumi.Input<string>;
+    /**
+     * The [cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) for which you can use the KMS key. This is a shared property of multi-Region keys.
+     */
+    keyUsage?: pulumi.Input<string>;
+    policy?: pulumi.Input<string>;
+    /**
+     * The ARN of the multi-Region primary key to replicate. The primary key must be in a different AWS Region of the same AWS Partition. You can create only one replica of a given primary key in each AWS Region.
+     */
+    primaryKeyArn?: pulumi.Input<string>;
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
+     */
+    tagsAll?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+}
+/**
+ * The set of arguments for constructing a ReplicaKey resource.
+ */
+export interface ReplicaKeyArgs {
+    /**
+     * A flag to indicate whether to bypass the key policy lockout safety check.
+     * Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately.
+     * For more information, refer to the scenario in the [Default Key Policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) section in the _AWS Key Management Service Developer Guide_.
+     * The default value is `false`.
+     */
+    bypassPolicyLockoutSafetyCheck?: pulumi.Input<boolean>;
+    /**
+     * The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key.
+     * If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
+     */
+    deletionWindowInDays?: pulumi.Input<number>;
+    /**
+     * A description of the KMS key.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Specifies whether the replica key is enabled. Disabled KMS keys cannot be used in cryptographic operations. The default value is `true`.
+     */
+    enabled?: pulumi.Input<boolean>;
+    policy?: pulumi.Input<string>;
+    /**
+     * The ARN of the multi-Region primary key to replicate. The primary key must be in a different AWS Region of the same AWS Partition. You can create only one replica of a given primary key in each AWS Region.
+     */
+    primaryKeyArn: pulumi.Input<string>;
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+}

package/kms/replicaKey.js

@@ -0,0 +1,110 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReplicaKey = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages a KMS multi-Region replica key.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const primary = new aws.Provider("primary", {region: "us-east-1"});
+ * const primaryKey = new aws.kms.Key("primaryKey", {
+ *     description: "Multi-Region primary key",
+ *     deletionWindowInDays: 30,
+ *     multiRegion: true,
+ * }, {
+ *     provider: aws.primary,
+ * });
+ * const replica = new aws.kms.ReplicaKey("replica", {
+ *     description: "Multi-Region replica key",
+ *     deletionWindowInDays: 7,
+ *     primaryKeyArn: primaryKey.arn,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * KMS multi-Region replica keys can be imported using the `id`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:kms/replicaKey:ReplicaKey example 1234abcd-12ab-34cd-56ef-1234567890ab
+ * ```
+ */
+class ReplicaKey extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            inputs["arn"] = state ? state.arn : undefined;
+            inputs["bypassPolicyLockoutSafetyCheck"] = state ? state.bypassPolicyLockoutSafetyCheck : undefined;
+            inputs["deletionWindowInDays"] = state ? state.deletionWindowInDays : undefined;
+            inputs["description"] = state ? state.description : undefined;
+            inputs["enabled"] = state ? state.enabled : undefined;
+            inputs["keyId"] = state ? state.keyId : undefined;
+            inputs["keyRotationEnabled"] = state ? state.keyRotationEnabled : undefined;
+            inputs["keySpec"] = state ? state.keySpec : undefined;
+            inputs["keyUsage"] = state ? state.keyUsage : undefined;
+            inputs["policy"] = state ? state.policy : undefined;
+            inputs["primaryKeyArn"] = state ? state.primaryKeyArn : undefined;
+            inputs["tags"] = state ? state.tags : undefined;
+            inputs["tagsAll"] = state ? state.tagsAll : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.primaryKeyArn === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'primaryKeyArn'");
+            }
+            inputs["bypassPolicyLockoutSafetyCheck"] = args ? args.bypassPolicyLockoutSafetyCheck : undefined;
+            inputs["deletionWindowInDays"] = args ? args.deletionWindowInDays : undefined;
+            inputs["description"] = args ? args.description : undefined;
+            inputs["enabled"] = args ? args.enabled : undefined;
+            inputs["policy"] = args ? args.policy : undefined;
+            inputs["primaryKeyArn"] = args ? args.primaryKeyArn : undefined;
+            inputs["tags"] = args ? args.tags : undefined;
+            inputs["arn"] = undefined /*out*/;
+            inputs["keyId"] = undefined /*out*/;
+            inputs["keyRotationEnabled"] = undefined /*out*/;
+            inputs["keySpec"] = undefined /*out*/;
+            inputs["keyUsage"] = undefined /*out*/;
+            inputs["tagsAll"] = undefined /*out*/;
+        }
+        if (!opts.version) {
+            opts = pulumi.mergeOptions(opts, { version: utilities.getVersion() });
+        }
+        super(ReplicaKey.__pulumiType, name, inputs, opts);
+    }
+    /**
+     * Get an existing ReplicaKey resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ReplicaKey(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ReplicaKey.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ReplicaKey.__pulumiType;
+    }
+}
+exports.ReplicaKey = ReplicaKey;
+/** @internal */
+ReplicaKey.__pulumiType = 'aws:kms/replicaKey:ReplicaKey';
+//# sourceMappingURL=replicaKey.js.map

package/kms/replicaKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replicaKey.js","sourceRoot":"","sources":["../../kms/replicaKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IAuFjD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,gCAAgC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,MAAM,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,MAAM,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,MAAM,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClC,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpC,MAAM,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IA/HD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;;AA1BL,gCAiIC;AAnHG,gBAAgB;AACO,uBAAY,GAAG,+BAA+B,CAAC"}

package/lakeformation/resource.d.ts

@@ -1,6 +1,6 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * Registers a Lake Formation resource (e.g. S3 bucket) as managed by the Data Catalog. In other words, the S3 path is added to the data lake.
+ * Registers a Lake Formation resource (e.g., S3 bucket) as managed by the Data Catalog. In other words, the S3 path is added to the data lake.
  *
  * Choose a role that has read/write access to the chosen Amazon S3 path or use the service-linked role. When you register the S3 path, the service-linked role and a new inline policy are created on your behalf. Lake Formation adds the first path to the inline policy and attaches it to the service-linked role. When you register subsequent paths, Lake Formation adds the path to the existing policy.
  *

package/lakeformation/resource.js

@@ -6,7 +6,7 @@ exports.Resource = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 /**
- * Registers a Lake Formation resource (e.g. S3 bucket) as managed by the Data Catalog. In other words, the S3 path is added to the data lake.
+ * Registers a Lake Formation resource (e.g., S3 bucket) as managed by the Data Catalog. In other words, the S3 path is added to the data lake.
  *
  * Choose a role that has read/write access to the chosen Amazon S3 path or use the service-linked role. When you register the S3 path, the service-linked role and a new inline policy are created on your behalf. Lake Formation adds the first path to the inline policy and attaches it to the service-linked role. When you register subsequent paths, Lake Formation adds the path to the existing policy.
  *

package/lambda/alias.d.ts

@@ -26,7 +26,7 @@ import { input as inputs, output as outputs } from "../types";
  *
  * ## Import
  *
- * Lambda Function Aliases can be imported using the `function_name/alias`, e.g.
+ * Lambda Function Aliases can be imported using the `function_name/alias`, e.g.,
  *
  * ```sh
  *  $ pulumi import aws:lambda/alias:Alias test_lambda_alias my_test_lambda_function/my_alias

package/lambda/alias.js

@@ -31,7 +31,7 @@ const utilities = require("../utilities");
  *
  * ## Import
  *
- * Lambda Function Aliases can be imported using the `function_name/alias`, e.g.
+ * Lambda Function Aliases can be imported using the `function_name/alias`, e.g.,
  *
  * ```sh
  *  $ pulumi import aws:lambda/alias:Alias test_lambda_alias my_test_lambda_function/my_alias

package/lambda/codeSigningConfig.d.ts

@@ -27,7 +27,7 @@ import { input as inputs, output as outputs } from "../types";
  *
  * ## Import
  *
- * Code Signing Configs can be imported using their ARN, e.g.
+ * Code Signing Configs can be imported using their ARN, e.g.,
  *
  * ```sh
  *  $ pulumi import aws:lambda/codeSigningConfig:CodeSigningConfig imported_csc arn:aws:lambda:us-west-2:123456789012:code-signing-config:csc-0f6c334abcdea4d8b

package/lambda/codeSigningConfig.js

@@ -32,7 +32,7 @@ const utilities = require("../utilities");
  *
  * ## Import
  *
- * Code Signing Configs can be imported using their ARN, e.g.
+ * Code Signing Configs can be imported using their ARN, e.g.,
  *
  * ```sh
  *  $ pulumi import aws:lambda/codeSigningConfig:CodeSigningConfig imported_csc arn:aws:lambda:us-west-2:123456789012:code-signing-config:csc-0f6c334abcdea4d8b

package/lambda/eventSourceMapping.d.ts

@@ -144,7 +144,7 @@ import { input as inputs, output as outputs } from "../types";
  *
  * ## Import
  *
- * Lambda event source mappings can be imported using the `UUID` (event source mapping identifier), e.g.
+ * Lambda event source mappings can be imported using the `UUID` (event source mapping identifier), e.g.,
  *
  * ```sh
  *  $ pulumi import aws:lambda/eventSourceMapping:EventSourceMapping event_source_mapping 12345kxodurf3443

package/lambda/eventSourceMapping.js

@@ -149,7 +149,7 @@ const utilities = require("../utilities");
  *
  * ## Import
  *
- * Lambda event source mappings can be imported using the `UUID` (event source mapping identifier), e.g.
+ * Lambda event source mappings can be imported using the `UUID` (event source mapping identifier), e.g.,
  *
  * ```sh
  *  $ pulumi import aws:lambda/eventSourceMapping:EventSourceMapping event_source_mapping 12345kxodurf3443

package/lambda/function.d.ts

@@ -184,7 +184,7 @@ import { ARN } from "..";
  *
  * ## Import
  *
- * Lambda Functions can be imported using the `function_name`, e.g.
+ * Lambda Functions can be imported using the `function_name`, e.g.,
  *
  * ```sh
  *  $ pulumi import aws:lambda/function:Function test_lambda my_test_lambda_function

package/lambda/function.js

@@ -188,7 +188,7 @@ const utilities = require("../utilities");
  *
  * ## Import
  *
- * Lambda Functions can be imported using the `function_name`, e.g.
+ * Lambda Functions can be imported using the `function_name`, e.g.,
  *
  * ```sh
  *  $ pulumi import aws:lambda/function:Function test_lambda my_test_lambda_function

package/lambda/functionEventInvokeConfig.d.ts

@@ -75,7 +75,7 @@ import { input as inputs, output as outputs } from "../types";
  *
  * ## Import
  *
- * Lambda Function Event Invoke Configs can be imported using the fully qualified Function name or Amazon Resource Name (ARN), e.g. ARN without qualifier (all versions and aliases)
+ * Lambda Function Event Invoke Configs can be imported using the fully qualified Function name or Amazon Resource Name (ARN), e.g., ARN without qualifier (all versions and aliases)
  *
  * ```sh
  *  $ pulumi import aws:lambda/functionEventInvokeConfig:FunctionEventInvokeConfig example arn:aws:us-east-1:123456789012:function:my_function

package/lambda/functionEventInvokeConfig.js

@@ -80,7 +80,7 @@ const utilities = require("../utilities");
  *
  * ## Import
  *
- * Lambda Function Event Invoke Configs can be imported using the fully qualified Function name or Amazon Resource Name (ARN), e.g. ARN without qualifier (all versions and aliases)
+ * Lambda Function Event Invoke Configs can be imported using the fully qualified Function name or Amazon Resource Name (ARN), e.g., ARN without qualifier (all versions and aliases)
  *
  * ```sh
  *  $ pulumi import aws:lambda/functionEventInvokeConfig:FunctionEventInvokeConfig example arn:aws:us-east-1:123456789012:function:my_function

package/lambda/getFunction.d.ts

@@ -26,7 +26,7 @@ export interface GetFunctionArgs {
      */
     functionName: string;
     /**
-     * Alias name or version number of the lambda function. e.g. `$LATEST`, `my-alias`, or `1`
+     * Alias name or version number of the lambda functionE.g., `$LATEST`, `my-alias`, or `1`
      */
     qualifier?: string;
     tags?: {
@@ -157,7 +157,7 @@ export interface GetFunctionOutputArgs {
      */
     functionName: pulumi.Input<string>;
     /**
-     * Alias name or version number of the lambda function. e.g. `$LATEST`, `my-alias`, or `1`
+     * Alias name or version number of the lambda functionE.g., `$LATEST`, `my-alias`, or `1`
      */
     qualifier?: pulumi.Input<string>;
     tags?: pulumi.Input<{