Skip to content

Commit 96ca293

Browse files
async-aws-botasync-aws-bot
committed
update generated code
1 parent f0521ca commit 96ca293

21 files changed

+207
-115
lines changed

‎manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"variables": {
3-
"${LATEST}": "3.344.0"
3+
"${LATEST}": "3.344.1"
44
},
55
"endpoints": "https://raw.githubusercontent.com/aws/aws-sdk-php/${LATEST}/src/data/endpoints.json",
66
"services": {

‎src/Service/Kms/CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,10 @@
22

33
## NOT RELEASED
44

5+
### Added
6+
7+
- AWS api-change: AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin).
8+
59
## 1.9.0
610

711
### Added

‎src/Service/Kms/composer.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@
2828
},
2929
"extra": {
3030
"branch-alias": {
31-
"dev-master": "1.9-dev"
31+
"dev-master": "1.10-dev"
3232
}
3333
}
3434
}

‎src/Service/Kms/src/Exception/LimitExceededException.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@
55
use AsyncAws\Core\Exception\Http\ClientException;
66

77
/**
8-
* The request was rejected because a quota was exceeded. For more information, see Quotas [^1] in the *Key Management
9-
* Service Developer Guide*.
8+
* The request was rejected because a length constraint or quota was exceeded. For more information, see Quotas [^1] in
9+
* the *Key Management Service Developer Guide*.
1010
*
1111
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/limits.html
1212
*/

‎src/Service/Kms/src/Input/CreateAliasRequest.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ final class CreateAliasRequest extends Input
3333
*
3434
* A valid key ID is required. If you supply a null or empty string value, this operation returns an error.
3535
*
36-
* For help finding the key ID and ARN, see Finding the Key ID and ARN [^2] in the **Key Management Service Developer
36+
* For help finding the key ID and ARN, see Find the key ID and key ARN [^2] in the **Key Management Service Developer
3737
* Guide**.
3838
*
3939
* Specify the key ID or key ARN of the KMS key.
@@ -46,7 +46,7 @@ final class CreateAliasRequest extends Input
4646
* To get the key ID and key ARN for a KMS key, use ListKeys or DescribeKey.
4747
*
4848
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk
49-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html#find-cmk-id-arn
49+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/find-cmk-id-arn.html
5050
*
5151
* @required
5252
*

‎src/Service/Kms/src/Input/CreateKeyRequest.php

Lines changed: 30 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -28,18 +28,27 @@ final class CreateKeyRequest extends Input
2828
* KMS. For more information, see Changes that I make are not always immediately visible [^2] in the *Amazon Web
2929
* Services Identity and Access Management User Guide*.
3030
*
31+
* > If either of the required `Resource` or `Action` elements are missing from a key policy statement, the policy
32+
* > statement has no effect. When a key policy statement is missing one of these elements, the KMS console correctly
33+
* > reports an error, but the `CreateKey` and `PutKeyPolicy` API requests succeed, even though the policy statement is
34+
* > ineffective.
35+
* >
36+
* > For more information on required key policy elements, see Elements in a key policy [^3] in the *Key Management
37+
* > Service Developer Guide*.
38+
*
3139
* If you do not provide a key policy, KMS attaches a default key policy to the KMS key. For more information, see
32-
* Default key policy [^3] in the *Key Management Service Developer Guide*.
40+
* Default key policy [^4] in the *Key Management Service Developer Guide*.
3341
*
34-
* The key policy size quota is 32 kilobytes (32768 bytes).
42+
* > If the key policy exceeds the length constraint, KMS returns a `LimitExceededException`.
3543
*
36-
* For help writing and formatting a JSON policy document, see the IAM JSON Policy Reference [^4] in the **Identity and
44+
* For help writing and formatting a JSON policy document, see the IAM JSON Policy Reference [^5] in the **Identity and
3745
* Access Management User Guide**.
3846
*
3947
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key
4048
* [^2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_general.html#troubleshoot_general_eventual-consistency
41-
* [^3]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default
42-
* [^4]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html
49+
* [^3]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-overview.html#key-policy-elements
50+
* [^4]: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html
51+
* [^5]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html
4352
*
4453
* @var string|null
4554
*/
@@ -73,7 +82,7 @@ final class CreateKeyRequest extends Input
7382
* - For asymmetric KMS keys with SM2 key pairs (China Regions only), specify `ENCRYPT_DECRYPT`, `SIGN_VERIFY`, or
7483
* `KEY_AGREEMENT`.
7584
*
76-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations
85+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/kms-cryptography.html#cryptographic-operations
7786
*
7887
* @var KeyUsageType::*|null
7988
*/
@@ -92,16 +101,16 @@ final class CreateKeyRequest extends Input
92101
/**
93102
* Specifies the type of KMS key to create. The default value, `SYMMETRIC_DEFAULT`, creates a KMS key with a 256-bit
94103
* AES-GCM key that is used for encryption and decryption, except in China Regions, where it creates a 128-bit symmetric
95-
* key that uses SM4 encryption. For help choosing a key spec for your KMS key, see Choosing a KMS key type [^1] in the
96-
* **Key Management Service Developer Guide**.
104+
* key that uses SM4 encryption. For a detailed description of all supported key specs, see Key spec reference [^1] in
105+
* the **Key Management Service Developer Guide**.
97106
*
98107
* The `KeySpec` determines whether the KMS key contains a symmetric key or an asymmetric key pair. It also determines
99108
* the algorithms that the KMS key supports. You can't change the `KeySpec` after the KMS key is created. To further
100109
* restrict the algorithms that can be used with the KMS key, use a condition key in its key policy or IAM policy. For
101-
* more information, see kms:EncryptionAlgorithm [^2], kms:MacAlgorithm [^3] or kms:Signing Algorithm [^4] in the **Key
102-
* Management Service Developer Guide**.
110+
* more information, see kms:EncryptionAlgorithm [^2], kms:MacAlgorithm [^3], kms:KeyAgreementAlgorithm [^4], or
111+
* kms:SigningAlgorithm [^5] in the **Key Management Service Developer Guide**.
103112
*
104-
* ! Amazon Web Services services that are integrated with KMS [^5] use symmetric encryption KMS keys to protect your
113+
* ! Amazon Web Services services that are integrated with KMS [^6] use symmetric encryption KMS keys to protect your
105114
* ! data. These services do not support asymmetric KMS keys or HMAC KMS keys.
106115
*
107116
* KMS supports the following key specs for KMS keys:
@@ -137,11 +146,12 @@ final class CreateKeyRequest extends Input
137146
*
138147
* - `SM2` (China Regions only)
139148
*
140-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-types.html#symm-asymm-choose
141-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms-encryption-algorithm
142-
* [^3]: https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms-mac-algorithm
143-
* [^4]: https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms-signing-algorithm
144-
* [^5]: http://aws.amazon.com/kms/features/#AWS_Service_Integration
149+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose-key-spec.html
150+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-encryption-algorithm
151+
* [^3]: https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-mac-algorithm
152+
* [^4]: https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-agreement-algorithm
153+
* [^5]: https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-signing-algorithm
154+
* [^6]: http://aws.amazon.com/kms/features/#AWS_Service_Integration
145155
*
146156
* @var KeySpec::*|null
147157
*/
@@ -183,7 +193,7 @@ final class CreateKeyRequest extends Input
183193
* associated CloudHSM cluster and associates it with the KMS key. When you create a KMS key in an external key store,
184194
* you must use the `XksKeyId` parameter to specify an external key that serves as key material for the KMS key.
185195
*
186-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html
196+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/key-store-overview.html
187197
*
188198
* @var string|null
189199
*/
@@ -224,8 +234,8 @@ final class CreateKeyRequest extends Input
224234
* an existing tag key with a different tag value, KMS replaces the current tag value with the specified one.
225235
*
226236
* When you add tags to an Amazon Web Services resource, Amazon Web Services generates a cost allocation report with
227-
* usage and costs aggregated by tags. Tags can also be used to control access to a KMS key. For details, see Tagging
228-
* Keys [^3].
237+
* usage and costs aggregated by tags. Tags can also be used to control access to a KMS key. For details, see Tags in
238+
* KMS [^3].
229239
*
230240
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/abac.html
231241
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html
@@ -282,7 +292,7 @@ final class CreateKeyRequest extends Input
282292
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/keystore-external.html#concept-external-key
283293
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/keystore-external.html
284294
* [^3]: https://docs.aws.amazon.com/kms/latest/developerguide/keystore-external.html#concept-xks-proxy
285-
* [^4]: https://docs.aws.amazon.com/create-xks-keys.html#xks-key-requirements
295+
* [^4]: https://docs.aws.amazon.com/kms/latest/developerguide/create-xks-keys.html#xks-key-requirements
286296
* [^5]: https://docs.aws.amazon.com/kms/latest/developerguide/keystore-external.html#concept-double-encryption
287297
*
288298
* @var string|null

‎src/Service/Kms/src/Input/DecryptRequest.php

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -33,8 +33,8 @@ final class DecryptRequest extends Input
3333
*
3434
* For more information, see Encryption context [^2] in the *Key Management Service Developer Guide*.
3535
*
36-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations
37-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context
36+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/kms-cryptography.html#cryptographic-operations
37+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html
3838
*
3939
* @var array<string, string>|null
4040
*/
@@ -48,7 +48,7 @@ final class DecryptRequest extends Input
4848
* Management Service Developer Guide*.
4949
*
5050
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token
51-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token
51+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/using-grant-token.html
5252
*
5353
* @var string[]|null
5454
*/
@@ -118,10 +118,10 @@ final class DecryptRequest extends Input
118118
/**
119119
* Checks if your request will succeed. `DryRun` is an optional parameter.
120120
*
121-
* To learn more about how to use this parameter, see Testing your KMS API calls [^1] in the *Key Management Service
121+
* To learn more about how to use this parameter, see Testing your permissions [^1] in the *Key Management Service
122122
* Developer Guide*.
123123
*
124-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/programming-dryrun.html
124+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/testing-permissions.html
125125
*
126126
* @var bool|null
127127
*/

‎src/Service/Kms/src/Input/EncryptRequest.php

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -58,8 +58,8 @@ final class EncryptRequest extends Input
5858
*
5959
* For more information, see Encryption context [^2] in the *Key Management Service Developer Guide*.
6060
*
61-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations
62-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context
61+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/kms-cryptography.html#cryptographic-operations
62+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html
6363
*
6464
* @var array<string, string>|null
6565
*/
@@ -73,7 +73,7 @@ final class EncryptRequest extends Input
7373
* Management Service Developer Guide*.
7474
*
7575
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token
76-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token
76+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/using-grant-token.html
7777
*
7878
* @var string[]|null
7979
*/
@@ -95,10 +95,10 @@ final class EncryptRequest extends Input
9595
/**
9696
* Checks if your request will succeed. `DryRun` is an optional parameter.
9797
*
98-
* To learn more about how to use this parameter, see Testing your KMS API calls [^1] in the *Key Management Service
98+
* To learn more about how to use this parameter, see Testing your permissions [^1] in the *Key Management Service
9999
* Developer Guide*.
100100
*
101-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/programming-dryrun.html
101+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/testing-permissions.html
102102
*
103103
* @var bool|null
104104
*/

‎src/Service/Kms/src/Input/GenerateDataKeyRequest.php

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ final class GenerateDataKeyRequest extends Input
4848
*
4949
* For more information, see Encryption context [^1] in the *Key Management Service Developer Guide*.
5050
*
51-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context
51+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html
5252
*
5353
* @var array<string, string>|null
5454
*/
@@ -84,7 +84,7 @@ final class GenerateDataKeyRequest extends Input
8484
* Management Service Developer Guide*.
8585
*
8686
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token
87-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token
87+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/using-grant-token.html
8888
*
8989
* @var string[]|null
9090
*/
@@ -117,10 +117,10 @@ final class GenerateDataKeyRequest extends Input
117117
/**
118118
* Checks if your request will succeed. `DryRun` is an optional parameter.
119119
*
120-
* To learn more about how to use this parameter, see Testing your KMS API calls [^1] in the *Key Management Service
120+
* To learn more about how to use this parameter, see Testing your permissions [^1] in the *Key Management Service
121121
* Developer Guide*.
122122
*
123-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/programming-dryrun.html
123+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/testing-permissions.html
124124
*
125125
* @var bool|null
126126
*/

‎src/Service/Kms/src/Input/GetPublicKeyRequest.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ final class GetPublicKeyRequest extends Input
3939
* Management Service Developer Guide*.
4040
*
4141
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token
42-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token
42+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/using-grant-token.html
4343
*
4444
* @var string[]|null
4545
*/

‎src/Service/Kms/src/Input/SignRequest.php

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ final class SignRequest extends Input
7171
* - Signing algorithms that end in SHA_512 use the SHA_512 hashing algorithm.
7272
* - SM2DSA uses the SM3 hashing algorithm. For details, see Offline verification with SM2 key pairs [^1].
7373
*
74-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/asymmetric-key-specs.html#key-spec-sm-offline-verification
74+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/offline-operations.html#key-spec-sm-offline-verification
7575
*
7676
* @var MessageType::*|null
7777
*/
@@ -85,7 +85,7 @@ final class SignRequest extends Input
8585
* Management Service Developer Guide*.
8686
*
8787
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token
88-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token
88+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/using-grant-token.html
8989
*
9090
* @var string[]|null
9191
*/
@@ -107,10 +107,10 @@ final class SignRequest extends Input
107107
/**
108108
* Checks if your request will succeed. `DryRun` is an optional parameter.
109109
*
110-
* To learn more about how to use this parameter, see Testing your KMS API calls [^1] in the *Key Management Service
110+
* To learn more about how to use this parameter, see Testing your permissions [^1] in the *Key Management Service
111111
* Developer Guide*.
112112
*
113-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/programming-dryrun.html
113+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/testing-permissions.html
114114
*
115115
* @var bool|null
116116
*/

‎src/Service/Kms/src/Input/VerifyRequest.php

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ final class VerifyRequest extends Input
7171
* - Signing algorithms that end in SHA_512 use the SHA_512 hashing algorithm.
7272
* - SM2DSA uses the SM3 hashing algorithm. For details, see Offline verification with SM2 key pairs [^1].
7373
*
74-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/asymmetric-key-specs.html#key-spec-sm-offline-verification
74+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/offline-operations.html#key-spec-sm-offline-verification
7575
*
7676
* @var MessageType::*|null
7777
*/
@@ -104,7 +104,7 @@ final class VerifyRequest extends Input
104104
* Management Service Developer Guide*.
105105
*
106106
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token
107-
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/grant-manage.html#using-grant-token
107+
* [^2]: https://docs.aws.amazon.com/kms/latest/developerguide/using-grant-token.html
108108
*
109109
* @var string[]|null
110110
*/
@@ -113,10 +113,10 @@ final class VerifyRequest extends Input
113113
/**
114114
* Checks if your request will succeed. `DryRun` is an optional parameter.
115115
*
116-
* To learn more about how to use this parameter, see Testing your KMS API calls [^1] in the *Key Management Service
116+
* To learn more about how to use this parameter, see Testing your permissions [^1] in the *Key Management Service
117117
* Developer Guide*.
118118
*
119-
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/programming-dryrun.html
119+
* [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/testing-permissions.html
120120
*
121121
* @var bool|null
122122
*/

0 commit comments

Comments
 (0)