amazonka-kms 1.6.1 → 2.0

raw patch · 200 files changed

+28052/−7676 lines, 200 filesdep +case-insensitivedep ~amazonka-coredep ~amazonka-testdep ~basesetup-changedPVP ok

version bump matches the API change (PVP)

Dependencies added: case-insensitive

Dependency ranges changed: amazonka-core, amazonka-test, base

API changes (from Hackage documentation)

Files

• README.md +3/−4
• Setup.hs +0/−2
• amazonka-kms.cabal +156/−109
• fixture/CancelKeyDeletion.yaml +10/−0
• fixture/ConnectCustomKeyStore.yaml +10/−0
• fixture/ConnectCustomKeyStoreResponse.proto +0/−0
• fixture/CreateAlias.yaml +10/−0
• fixture/CreateCustomKeyStore.yaml +10/−0
• fixture/CreateCustomKeyStoreResponse.proto +0/−0
• fixture/CreateGrant.yaml +10/−0
• fixture/CreateKey.yaml +10/−0
• fixture/Decrypt.yaml +10/−0
• fixture/DeleteAlias.yaml +10/−0
• fixture/DeleteCustomKeyStore.yaml +10/−0
• fixture/DeleteCustomKeyStoreResponse.proto +0/−0
• fixture/DeleteImportedKeyMaterial.yaml +10/−0
• fixture/DescribeCustomKeyStores.yaml +10/−0
• fixture/DescribeCustomKeyStoresResponse.proto +0/−0
• fixture/DescribeKey.yaml +10/−0
• fixture/DisableKey.yaml +10/−0
• fixture/DisableKeyRotation.yaml +10/−0
• fixture/DisconnectCustomKeyStore.yaml +10/−0
• fixture/DisconnectCustomKeyStoreResponse.proto +0/−0
• fixture/EnableKey.yaml +10/−0
• fixture/EnableKeyRotation.yaml +10/−0
• fixture/Encrypt.yaml +10/−0
• fixture/GenerateDataKey.yaml +10/−0
• fixture/GenerateDataKeyPair.yaml +10/−0
• fixture/GenerateDataKeyPairResponse.proto +0/−0
• fixture/GenerateDataKeyPairWithoutPlaintext.yaml +10/−0
• fixture/GenerateDataKeyPairWithoutPlaintextResponse.proto +0/−0
• fixture/GenerateDataKeyWithoutPlaintext.yaml +10/−0
• fixture/GenerateMac.yaml +10/−0
• fixture/GenerateMacResponse.proto +0/−0
• fixture/GenerateRandom.yaml +10/−0
• fixture/GetKeyPolicy.yaml +10/−0
• fixture/GetKeyRotationStatus.yaml +10/−0
• fixture/GetParametersForImport.yaml +10/−0
• fixture/GetPublicKey.yaml +10/−0
• fixture/GetPublicKeyResponse.proto +0/−0
• fixture/ImportKeyMaterial.yaml +10/−0
• fixture/ListAliases.yaml +10/−0
• fixture/ListGrants.yaml +10/−0
• fixture/ListKeyPolicies.yaml +10/−0
• fixture/ListKeys.yaml +10/−0
• fixture/ListRetirableGrants.yaml +10/−0
• fixture/PutKeyPolicy.yaml +10/−0
• fixture/ReEncrypt.yaml +10/−0
• fixture/ReplicateKey.yaml +10/−0
• fixture/ReplicateKeyResponse.proto +0/−0
• fixture/RetireGrant.yaml +10/−0
• fixture/RevokeGrant.yaml +10/−0
• fixture/ScheduleKeyDeletion.yaml +10/−0
• fixture/Sign.yaml +10/−0
• fixture/SignResponse.proto +0/−0
• fixture/UpdateAlias.yaml +10/−0
• fixture/UpdateCustomKeyStore.yaml +10/−0
• fixture/UpdateCustomKeyStoreResponse.proto +0/−0
• fixture/UpdateKeyDescription.yaml +10/−0
• fixture/UpdatePrimaryRegion.yaml +10/−0
• fixture/UpdatePrimaryRegionResponse.proto +0/−0
• fixture/Verify.yaml +10/−0
• fixture/VerifyMac.yaml +10/−0
• fixture/VerifyMacResponse.proto +0/−0
• fixture/VerifyResponse.proto +0/−0
• gen/Amazonka/KMS.hs +758/−0
• gen/Amazonka/KMS/CancelKeyDeletion.hs +230/−0
• gen/Amazonka/KMS/ConnectCustomKeyStore.hs +267/−0
• gen/Amazonka/KMS/CreateAlias.hs +286/−0
• gen/Amazonka/KMS/CreateCustomKeyStore.hs +800/−0
• gen/Amazonka/KMS/CreateGrant.hs +650/−0
• gen/Amazonka/KMS/CreateKey.hs +1273/−0
• gen/Amazonka/KMS/Decrypt.hs +545/−0
• gen/Amazonka/KMS/DeleteAlias.hs +168/−0
• gen/Amazonka/KMS/DeleteCustomKeyStore.hs +224/−0
• gen/Amazonka/KMS/DeleteImportedKeyMaterial.hs +206/−0
• gen/Amazonka/KMS/DescribeCustomKeyStores.hs +383/−0
• gen/Amazonka/KMS/DescribeKey.hs +344/−0
• gen/Amazonka/KMS/DisableKey.hs +183/−0
• gen/Amazonka/KMS/DisableKeyRotation.hs +236/−0
• gen/Amazonka/KMS/DisconnectCustomKeyStore.hs +215/−0
• gen/Amazonka/KMS/EnableKey.hs +178/−0
• gen/Amazonka/KMS/EnableKeyRotation.hs +257/−0
• gen/Amazonka/KMS/Encrypt.hs +524/−0
• gen/Amazonka/KMS/GenerateDataKey.hs +558/−0
• gen/Amazonka/KMS/GenerateDataKeyPair.hs +534/−0
• gen/Amazonka/KMS/GenerateDataKeyPairWithoutPlaintext.hs +526/−0
• gen/Amazonka/KMS/GenerateDataKeyWithoutPlaintext.hs +492/−0
• gen/Amazonka/KMS/GenerateMac.hs +368/−0
• gen/Amazonka/KMS/GenerateRandom.hs +241/−0
• gen/Amazonka/KMS/GetKeyPolicy.hs +231/−0
• gen/Amazonka/KMS/GetKeyRotationStatus.hs +274/−0
• gen/Amazonka/KMS/GetParametersForImport.hs +375/−0
• gen/Amazonka/KMS/GetPublicKey.hs +488/−0
• gen/Amazonka/KMS/ImportKeyMaterial.hs +449/−0
• gen/Amazonka/KMS/Lens.hs +568/−0
• gen/Amazonka/KMS/ListAliases.hs +359/−0
• gen/Amazonka/KMS/ListGrants.hs +302/−0
• gen/Amazonka/KMS/ListKeyPolicies.hs +338/−0
• gen/Amazonka/KMS/ListKeys.hs +277/−0
• gen/Amazonka/KMS/ListResourceTags.hs +369/−0
• gen/Amazonka/KMS/ListRetirableGrants.hs +264/−0
• gen/Amazonka/KMS/PutKeyPolicy.hs +391/−0
• gen/Amazonka/KMS/ReEncrypt.hs +760/−0
• gen/Amazonka/KMS/ReplicateKey.hs +784/−0
• gen/Amazonka/KMS/RetireGrant.hs +237/−0
• gen/Amazonka/KMS/RevokeGrant.hs +222/−0
• gen/Amazonka/KMS/ScheduleKeyDeletion.hs +388/−0
• gen/Amazonka/KMS/Sign.hs +492/−0
• gen/Amazonka/KMS/TagResource.hs +254/−0
• gen/Amazonka/KMS/Types.hs +907/−0
• gen/Amazonka/KMS/Types/AlgorithmSpec.hs +76/−0
• gen/Amazonka/KMS/Types/AliasListEntry.hs +129/−0
• gen/Amazonka/KMS/Types/ConnectionErrorCodeType.hs +151/−0
• gen/Amazonka/KMS/Types/ConnectionStateType.hs +86/−0
• gen/Amazonka/KMS/Types/CustomKeyStoreType.hs +71/−0
• gen/Amazonka/KMS/Types/CustomKeyStoresListEntry.hs +756/−0
• gen/Amazonka/KMS/Types/CustomerMasterKeySpec.hs +126/−0
• gen/Amazonka/KMS/Types/DataKeyPairSpec.hs +101/−0
• gen/Amazonka/KMS/Types/DataKeySpec.hs +71/−0
• gen/Amazonka/KMS/Types/EncryptionAlgorithmSpec.hs +81/−0
• gen/Amazonka/KMS/Types/ExpirationModelType.hs +71/−0
• gen/Amazonka/KMS/Types/GrantConstraints.hs +156/−0
• gen/Amazonka/KMS/Types/GrantListEntry.hs +200/−0
• gen/Amazonka/KMS/Types/GrantOperation.hs +141/−0
• gen/Amazonka/KMS/Types/KeyListEntry.hs +83/−0
• gen/Amazonka/KMS/Types/KeyManagerType.hs +71/−0
• gen/Amazonka/KMS/Types/KeyMetadata.hs +663/−0
• gen/Amazonka/KMS/Types/KeySpec.hs +123/−0
• gen/Amazonka/KMS/Types/KeyState.hs +101/−0
• gen/Amazonka/KMS/Types/KeyUsageType.hs +76/−0
• gen/Amazonka/KMS/Types/ListGrantsResponse.hs +107/−0
• gen/Amazonka/KMS/Types/MacAlgorithmSpec.hs +81/−0
• gen/Amazonka/KMS/Types/MessageType.hs +71/−0
• gen/Amazonka/KMS/Types/MultiRegionConfiguration.hs +109/−0
• gen/Amazonka/KMS/Types/MultiRegionKey.hs +86/−0
• gen/Amazonka/KMS/Types/MultiRegionKeyType.hs +71/−0
• gen/Amazonka/KMS/Types/OriginType.hs +81/−0
• gen/Amazonka/KMS/Types/SigningAlgorithmSpec.hs +111/−0
• gen/Amazonka/KMS/Types/Tag.hs +101/−0
• gen/Amazonka/KMS/Types/WrappingKeySpec.hs +66/−0
• gen/Amazonka/KMS/Types/XksKeyConfigurationType.hs +84/−0
• gen/Amazonka/KMS/Types/XksProxyAuthenticationCredentialType.hs +113/−0
• gen/Amazonka/KMS/Types/XksProxyConfigurationType.hs +162/−0
• gen/Amazonka/KMS/Types/XksProxyConnectivityType.hs +71/−0
• gen/Amazonka/KMS/UntagResource.hs +223/−0
• gen/Amazonka/KMS/UpdateAlias.hs +283/−0
• gen/Amazonka/KMS/UpdateCustomKeyStore.hs +641/−0
• gen/Amazonka/KMS/UpdateKeyDescription.hs +208/−0
• gen/Amazonka/KMS/UpdatePrimaryRegion.hs +285/−0
• gen/Amazonka/KMS/Verify.hs +482/−0
• gen/Amazonka/KMS/VerifyMac.hs +378/−0
• gen/Amazonka/KMS/Waiters.hs +24/−0
• gen/Network/AWS/KMS.hs +0/−398
• gen/Network/AWS/KMS/CancelKeyDeletion.hs +0/−132
• gen/Network/AWS/KMS/CreateAlias.hs +0/−129
• gen/Network/AWS/KMS/CreateGrant.hs +0/−209
• gen/Network/AWS/KMS/CreateKey.hs +0/−195
• gen/Network/AWS/KMS/Decrypt.hs +0/−177
• gen/Network/AWS/KMS/DeleteAlias.hs +0/−111
• gen/Network/AWS/KMS/DeleteImportedKeyMaterial.hs +0/−115
• gen/Network/AWS/KMS/DescribeKey.hs +0/−143
• gen/Network/AWS/KMS/DisableKey.hs +0/−108
• gen/Network/AWS/KMS/DisableKeyRotation.hs +0/−107
• gen/Network/AWS/KMS/EnableKey.hs +0/−106
• gen/Network/AWS/KMS/EnableKeyRotation.hs +0/−106
• gen/Network/AWS/KMS/Encrypt.hs +0/−190
• gen/Network/AWS/KMS/GenerateDataKey.hs +0/−226
• gen/Network/AWS/KMS/GenerateDataKeyWithoutPlaintext.hs +0/−199
• gen/Network/AWS/KMS/GenerateRandom.hs +0/−133
• gen/Network/AWS/KMS/GetKeyPolicy.hs +0/−143
• gen/Network/AWS/KMS/GetKeyRotationStatus.hs +0/−135
• gen/Network/AWS/KMS/GetParametersForImport.hs +0/−195
• gen/Network/AWS/KMS/ImportKeyMaterial.hs +0/−187
• gen/Network/AWS/KMS/ListAliases.hs +0/−174
• gen/Network/AWS/KMS/ListGrants.hs +0/−128
• gen/Network/AWS/KMS/ListKeyPolicies.hs +0/−185
• gen/Network/AWS/KMS/ListKeys.hs +0/−172
• gen/Network/AWS/KMS/ListResourceTags.hs +0/−176
• gen/Network/AWS/KMS/ListRetirableGrants.hs +0/−122
• gen/Network/AWS/KMS/PutKeyPolicy.hs +0/−146
• gen/Network/AWS/KMS/ReEncrypt.hs +0/−204
• gen/Network/AWS/KMS/RetireGrant.hs +0/−137
• gen/Network/AWS/KMS/RevokeGrant.hs +0/−121
• gen/Network/AWS/KMS/ScheduleKeyDeletion.hs +0/−162
• gen/Network/AWS/KMS/TagResource.hs +0/−123
• gen/Network/AWS/KMS/Types.hs +0/−331
• gen/Network/AWS/KMS/Types/Product.hs +0/−530
• gen/Network/AWS/KMS/Types/Sum.hs +0/−299
• gen/Network/AWS/KMS/UntagResource.hs +0/−119
• gen/Network/AWS/KMS/UpdateAlias.hs +0/−125
• gen/Network/AWS/KMS/UpdateKeyDescription.hs +0/−122
• gen/Network/AWS/KMS/Waiters.hs +0/−21
• test/Main.hs +11/−9
• test/Test/AWS/Gen/KMS.hs +0/−669
• test/Test/AWS/KMS.hs +0/−26
• test/Test/AWS/KMS/Internal.hs +0/−16
• test/Test/Amazonka/Gen/KMS.hs +1038/−0
• test/Test/Amazonka/KMS.hs +20/−0
• test/Test/Amazonka/KMS/Internal.hs +8/−0

@@ -7,9 +7,8 @@   ## Version--`1.6.1`-+ +`2.0` - Derived from API version @2014-11-01@ of the AWS service descriptions, licensed under Apache 2.0.  ## Description @@ -26,7 +25,7 @@ The provided lenses should be compatible with any of the major lens libraries [lens](http://hackage.haskell.org/package/lens) or [lens-family-core](http://hackage.haskell.org/package/lens-family-core). -See [Network.AWS.KMS](http://hackage.haskell.org/package/amazonka-kms/docs/Network-AWS-KMS.html)+See [Amazonka.KMS](http://hackage.haskell.org/package/amazonka-kms/docs/Amazonka-KMS.html) or [the AWS documentation](https://aws.amazon.com/documentation/) to get started.  

@@ -1,2 +0,0 @@-import           Distribution.Simple-main = defaultMain

@@ -1,120 +1,167 @@-name:                  amazonka-kms-version:               1.6.1-synopsis:              Amazon Key Management Service SDK.-homepage:              https://github.com/brendanhay/amazonka-bug-reports:           https://github.com/brendanhay/amazonka/issues-license:               MPL-2.0-license-file:          LICENSE-author:                Brendan Hay-maintainer:            Brendan Hay <brendan.g.hay+amazonka@gmail.com>-copyright:             Copyright (c) 2013-2018 Brendan Hay-category:              Network, AWS, Cloud, Distributed Computing-build-type:            Simple-cabal-version:         >= 1.10-extra-source-files:    README.md fixture/*.yaml fixture/*.proto src/.gitkeep+cabal-version:      2.2+name:               amazonka-kms+version:            2.0+synopsis:           Amazon Key Management Service SDK.+homepage:           https://github.com/brendanhay/amazonka+bug-reports:        https://github.com/brendanhay/amazonka/issues+license:            MPL-2.0+license-file:       LICENSE+author:             Brendan Hay+maintainer:+  Brendan Hay <brendan.g.hay+amazonka@gmail.com>, Jack Kelly <jack@jackkelly.name>++copyright:          Copyright (c) 2013-2023 Brendan Hay+category:           AWS+build-type:         Simple+extra-source-files:+  fixture/*.proto+  fixture/*.yaml+  README.md+  src/.gitkeep+ description:-    The types from this library are intended to be used with-    <http://hackage.haskell.org/package/amazonka amazonka>, which provides-    mechanisms for specifying AuthN/AuthZ information, sending requests,-    and receiving responses.-    .-    Lenses are used for constructing and manipulating types,-    due to the depth of nesting of AWS types and transparency regarding-    de/serialisation into more palatable Haskell values.-    The provided lenses should be compatible with any of the major lens libraries-    such as <http://hackage.haskell.org/package/lens lens> or-    <http://hackage.haskell.org/package/lens-family-core lens-family-core>.-    .-    See "Network.AWS.KMS" or <https://aws.amazon.com/documentation/ the AWS documentation>-    to get started.+  Derived from API version @2014-11-01@ of the AWS service descriptions, licensed under Apache 2.0.+  .+  The types from this library are intended to be used with <http://hackage.haskell.org/package/amazonka amazonka>,+  which provides mechanisms for specifying AuthN/AuthZ information, sending requests, and receiving responses.+  .+  It is recommended to use generic lenses or optics from packages such as <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify optional fields and deconstruct responses.+  .+  Generated lenses can be found in "Amazonka.KMS.Lens" and are+  suitable for use with a lens package such as <http://hackage.haskell.org/package/lens lens> or <http://hackage.haskell.org/package/lens-family-core lens-family-core>.+  .+  See "Amazonka.KMS" and the <https://aws.amazon.com/documentation/ AWS documentation> to get started.  source-repository head-    type:              git-    location:          git://github.com/brendanhay/amazonka.git-    subdir:            amazonka-kms+  type:     git+  location: git://github.com/brendanhay/amazonka.git+  subdir:   amazonka-kms  library-    default-language:  Haskell2010-    hs-source-dirs:    src gen--    ghc-options:-        -Wall-        -fwarn-incomplete-uni-patterns-        -fwarn-incomplete-record-updates-        -funbox-strict-fields--    exposed-modules:-          Network.AWS.KMS-        , Network.AWS.KMS.CancelKeyDeletion-        , Network.AWS.KMS.CreateAlias-        , Network.AWS.KMS.CreateGrant-        , Network.AWS.KMS.CreateKey-        , Network.AWS.KMS.Decrypt-        , Network.AWS.KMS.DeleteAlias-        , Network.AWS.KMS.DeleteImportedKeyMaterial-        , Network.AWS.KMS.DescribeKey-        , Network.AWS.KMS.DisableKey-        , Network.AWS.KMS.DisableKeyRotation-        , Network.AWS.KMS.EnableKey-        , Network.AWS.KMS.EnableKeyRotation-        , Network.AWS.KMS.Encrypt-        , Network.AWS.KMS.GenerateDataKey-        , Network.AWS.KMS.GenerateDataKeyWithoutPlaintext-        , Network.AWS.KMS.GenerateRandom-        , Network.AWS.KMS.GetKeyPolicy-        , Network.AWS.KMS.GetKeyRotationStatus-        , Network.AWS.KMS.GetParametersForImport-        , Network.AWS.KMS.ImportKeyMaterial-        , Network.AWS.KMS.ListAliases-        , Network.AWS.KMS.ListGrants-        , Network.AWS.KMS.ListKeyPolicies-        , Network.AWS.KMS.ListKeys-        , Network.AWS.KMS.ListResourceTags-        , Network.AWS.KMS.ListRetirableGrants-        , Network.AWS.KMS.PutKeyPolicy-        , Network.AWS.KMS.ReEncrypt-        , Network.AWS.KMS.RetireGrant-        , Network.AWS.KMS.RevokeGrant-        , Network.AWS.KMS.ScheduleKeyDeletion-        , Network.AWS.KMS.TagResource-        , Network.AWS.KMS.Types-        , Network.AWS.KMS.UntagResource-        , Network.AWS.KMS.UpdateAlias-        , Network.AWS.KMS.UpdateKeyDescription-        , Network.AWS.KMS.Waiters+  default-language: Haskell2010+  hs-source-dirs:   src gen+  ghc-options:+    -Wall -fwarn-incomplete-uni-patterns+    -fwarn-incomplete-record-updates -funbox-strict-fields -    other-modules:-          Network.AWS.KMS.Types.Product-        , Network.AWS.KMS.Types.Sum+  exposed-modules:+    Amazonka.KMS+    Amazonka.KMS.CancelKeyDeletion+    Amazonka.KMS.ConnectCustomKeyStore+    Amazonka.KMS.CreateAlias+    Amazonka.KMS.CreateCustomKeyStore+    Amazonka.KMS.CreateGrant+    Amazonka.KMS.CreateKey+    Amazonka.KMS.Decrypt+    Amazonka.KMS.DeleteAlias+    Amazonka.KMS.DeleteCustomKeyStore+    Amazonka.KMS.DeleteImportedKeyMaterial+    Amazonka.KMS.DescribeCustomKeyStores+    Amazonka.KMS.DescribeKey+    Amazonka.KMS.DisableKey+    Amazonka.KMS.DisableKeyRotation+    Amazonka.KMS.DisconnectCustomKeyStore+    Amazonka.KMS.EnableKey+    Amazonka.KMS.EnableKeyRotation+    Amazonka.KMS.Encrypt+    Amazonka.KMS.GenerateDataKey+    Amazonka.KMS.GenerateDataKeyPair+    Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext+    Amazonka.KMS.GenerateDataKeyWithoutPlaintext+    Amazonka.KMS.GenerateMac+    Amazonka.KMS.GenerateRandom+    Amazonka.KMS.GetKeyPolicy+    Amazonka.KMS.GetKeyRotationStatus+    Amazonka.KMS.GetParametersForImport+    Amazonka.KMS.GetPublicKey+    Amazonka.KMS.ImportKeyMaterial+    Amazonka.KMS.Lens+    Amazonka.KMS.ListAliases+    Amazonka.KMS.ListGrants+    Amazonka.KMS.ListKeyPolicies+    Amazonka.KMS.ListKeys+    Amazonka.KMS.ListResourceTags+    Amazonka.KMS.ListRetirableGrants+    Amazonka.KMS.PutKeyPolicy+    Amazonka.KMS.ReEncrypt+    Amazonka.KMS.ReplicateKey+    Amazonka.KMS.RetireGrant+    Amazonka.KMS.RevokeGrant+    Amazonka.KMS.ScheduleKeyDeletion+    Amazonka.KMS.Sign+    Amazonka.KMS.TagResource+    Amazonka.KMS.Types+    Amazonka.KMS.Types.AlgorithmSpec+    Amazonka.KMS.Types.AliasListEntry+    Amazonka.KMS.Types.ConnectionErrorCodeType+    Amazonka.KMS.Types.ConnectionStateType+    Amazonka.KMS.Types.CustomerMasterKeySpec+    Amazonka.KMS.Types.CustomKeyStoresListEntry+    Amazonka.KMS.Types.CustomKeyStoreType+    Amazonka.KMS.Types.DataKeyPairSpec+    Amazonka.KMS.Types.DataKeySpec+    Amazonka.KMS.Types.EncryptionAlgorithmSpec+    Amazonka.KMS.Types.ExpirationModelType+    Amazonka.KMS.Types.GrantConstraints+    Amazonka.KMS.Types.GrantListEntry+    Amazonka.KMS.Types.GrantOperation+    Amazonka.KMS.Types.KeyListEntry+    Amazonka.KMS.Types.KeyManagerType+    Amazonka.KMS.Types.KeyMetadata+    Amazonka.KMS.Types.KeySpec+    Amazonka.KMS.Types.KeyState+    Amazonka.KMS.Types.KeyUsageType+    Amazonka.KMS.Types.ListGrantsResponse+    Amazonka.KMS.Types.MacAlgorithmSpec+    Amazonka.KMS.Types.MessageType+    Amazonka.KMS.Types.MultiRegionConfiguration+    Amazonka.KMS.Types.MultiRegionKey+    Amazonka.KMS.Types.MultiRegionKeyType+    Amazonka.KMS.Types.OriginType+    Amazonka.KMS.Types.SigningAlgorithmSpec+    Amazonka.KMS.Types.Tag+    Amazonka.KMS.Types.WrappingKeySpec+    Amazonka.KMS.Types.XksKeyConfigurationType+    Amazonka.KMS.Types.XksProxyAuthenticationCredentialType+    Amazonka.KMS.Types.XksProxyConfigurationType+    Amazonka.KMS.Types.XksProxyConnectivityType+    Amazonka.KMS.UntagResource+    Amazonka.KMS.UpdateAlias+    Amazonka.KMS.UpdateCustomKeyStore+    Amazonka.KMS.UpdateKeyDescription+    Amazonka.KMS.UpdatePrimaryRegion+    Amazonka.KMS.Verify+    Amazonka.KMS.VerifyMac+    Amazonka.KMS.Waiters -    build-depends:-          amazonka-core == 1.6.1.*-        , base          >= 4.7     && < 5+  build-depends:+    , amazonka-core  >=2.0  && <2.1+    , base           >=4.12 && <5  test-suite amazonka-kms-test-    type:              exitcode-stdio-1.0-    default-language:  Haskell2010-    hs-source-dirs:    test-    main-is:           Main.hs--    ghc-options:       -Wall -threaded+  type:             exitcode-stdio-1.0+  default-language: Haskell2010+  hs-source-dirs:   test+  main-is:          Main.hs+  ghc-options:      -Wall -threaded -    -- This section is encoded by the template and any modules added by-    -- hand outside these namespaces will not correctly be added to the-    -- distribution package.-    other-modules:-          Test.AWS.KMS-        , Test.AWS.Gen.KMS-        , Test.AWS.KMS.Internal+  -- This section is encoded by the template and any modules added by+  -- hand outside these namespaces will not correctly be added to the+  -- distribution package.+  other-modules:+    Test.Amazonka.Gen.KMS+    Test.Amazonka.KMS+    Test.Amazonka.KMS.Internal -    build-depends:-          amazonka-core == 1.6.1.*-        , amazonka-test == 1.6.1.*-        , amazonka-kms-        , base-        , bytestring-        , tasty-        , tasty-hunit-        , text-        , time-        , unordered-containers+  build-depends:+    , amazonka-core         >=2.0 && <2.1+    , amazonka-kms+    , amazonka-test         >=2.0 && <2.1+    , base+    , bytestring+    , case-insensitive+    , tasty+    , tasty-hunit+    , text+    , time+    , unordered-containers

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/kms/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  kms.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,758 @@+{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- |+-- Module      : Amazonka.KMS+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Derived from API version @2014-11-01@ of the AWS service descriptions, licensed under Apache 2.0.+--+-- Key Management Service+--+-- Key Management Service (KMS) is an encryption and key management web+-- service. This guide describes the KMS operations that you can call+-- programmatically. For general information about KMS, see the+-- <https://docs.aws.amazon.com/kms/latest/developerguide/ Key Management Service Developer Guide>+-- .+--+-- KMS has replaced the term /customer master key (CMK)/ with /KMS key/ and+-- /KMS key/. The concept has not changed. To prevent breaking changes, KMS+-- is keeping some variations of this term.+--+-- Amazon Web Services provides SDKs that consist of libraries and sample+-- code for various programming languages and platforms (Java, Ruby, .Net,+-- macOS, Android, etc.). The SDKs provide a convenient way to create+-- programmatic access to KMS and other Amazon Web Services services. For+-- example, the SDKs take care of tasks such as signing requests (see+-- below), managing errors, and retrying requests automatically. For more+-- information about the Amazon Web Services SDKs, including how to+-- download and install them, see+-- <http://aws.amazon.com/tools/ Tools for Amazon Web Services>.+--+-- We recommend that you use the Amazon Web Services SDKs to make+-- programmatic API calls to KMS.+--+-- If you need to use FIPS 140-2 validated cryptographic modules when+-- communicating with Amazon Web Services, use the FIPS endpoint in your+-- preferred Amazon Web Services Region. For more information about the+-- available FIPS endpoints, see+-- <https://docs.aws.amazon.com/general/latest/gr/kms.html#kms_region Service endpoints>+-- in the Key Management Service topic of the /Amazon Web Services General+-- Reference/.+--+-- All KMS API calls must be signed and be transmitted using Transport+-- Layer Security (TLS). KMS recommends you always use the latest supported+-- TLS version. Clients must also support cipher suites with Perfect+-- Forward Secrecy (PFS) such as Ephemeral Diffie-Hellman (DHE) or Elliptic+-- Curve Ephemeral Diffie-Hellman (ECDHE). Most modern systems such as Java+-- 7 and later support these modes.+--+-- __Signing Requests__+--+-- Requests must be signed by using an access key ID and a secret access+-- key. We strongly recommend that you /do not/ use your Amazon Web+-- Services account (root) access key ID and secret access key for everyday+-- work with KMS. Instead, use the access key ID and secret access key for+-- an IAM user. You can also use the Amazon Web Services Security Token+-- Service to generate temporary security credentials that you can use to+-- sign requests.+--+-- All KMS operations require+-- <https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html Signature Version 4>.+--+-- __Logging API Requests__+--+-- KMS supports CloudTrail, a service that logs Amazon Web Services API+-- calls and related events for your Amazon Web Services account and+-- delivers them to an Amazon S3 bucket that you specify. By using the+-- information collected by CloudTrail, you can determine what requests+-- were made to KMS, who made the request, when it was made, and so on. To+-- learn more about CloudTrail, including how to turn it on and find your+-- log files, see the+-- <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/ CloudTrail User Guide>.+--+-- __Additional Resources__+--+-- For more information about credentials and request signing, see the+-- following:+--+-- -   <https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html Amazon Web Services Security Credentials>+--     - This topic provides general information about the types of+--     credentials used to access Amazon Web Services.+--+-- -   <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html Temporary Security Credentials>+--     - This section of the /IAM User Guide/ describes how to create and+--     use temporary security credentials.+--+-- -   <https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html Signature Version 4 Signing Process>+--     - This set of topics walks you through the process of signing a+--     request using an access key ID and a secret access key.+--+-- __Commonly Used API Operations__+--+-- Of the API operations discussed in this guide, the following will prove+-- the most useful for most applications. You will likely perform+-- operations other than these, such as creating keys and assigning+-- policies, by using the console.+--+-- -   Encrypt+--+-- -   Decrypt+--+-- -   GenerateDataKey+--+-- -   GenerateDataKeyWithoutPlaintext+module Amazonka.KMS+  ( -- * Service Configuration+    defaultService,++    -- * Errors+    -- $errors++    -- ** AlreadyExistsException+    _AlreadyExistsException,++    -- ** CloudHsmClusterInUseException+    _CloudHsmClusterInUseException,++    -- ** CloudHsmClusterInvalidConfigurationException+    _CloudHsmClusterInvalidConfigurationException,++    -- ** CloudHsmClusterNotActiveException+    _CloudHsmClusterNotActiveException,++    -- ** CloudHsmClusterNotFoundException+    _CloudHsmClusterNotFoundException,++    -- ** CloudHsmClusterNotRelatedException+    _CloudHsmClusterNotRelatedException,++    -- ** CustomKeyStoreHasCMKsException+    _CustomKeyStoreHasCMKsException,++    -- ** CustomKeyStoreInvalidStateException+    _CustomKeyStoreInvalidStateException,++    -- ** CustomKeyStoreNameInUseException+    _CustomKeyStoreNameInUseException,++    -- ** CustomKeyStoreNotFoundException+    _CustomKeyStoreNotFoundException,++    -- ** DependencyTimeoutException+    _DependencyTimeoutException,++    -- ** DisabledException+    _DisabledException,++    -- ** ExpiredImportTokenException+    _ExpiredImportTokenException,++    -- ** IncorrectKeyException+    _IncorrectKeyException,++    -- ** IncorrectKeyMaterialException+    _IncorrectKeyMaterialException,++    -- ** IncorrectTrustAnchorException+    _IncorrectTrustAnchorException,++    -- ** InvalidAliasNameException+    _InvalidAliasNameException,++    -- ** InvalidArnException+    _InvalidArnException,++    -- ** InvalidCiphertextException+    _InvalidCiphertextException,++    -- ** InvalidGrantIdException+    _InvalidGrantIdException,++    -- ** InvalidGrantTokenException+    _InvalidGrantTokenException,++    -- ** InvalidImportTokenException+    _InvalidImportTokenException,++    -- ** InvalidKeyUsageException+    _InvalidKeyUsageException,++    -- ** InvalidMarkerException+    _InvalidMarkerException,++    -- ** KMSInternalException+    _KMSInternalException,++    -- ** KMSInvalidMacException+    _KMSInvalidMacException,++    -- ** KMSInvalidSignatureException+    _KMSInvalidSignatureException,++    -- ** KMSInvalidStateException+    _KMSInvalidStateException,++    -- ** KeyUnavailableException+    _KeyUnavailableException,++    -- ** LimitExceededException+    _LimitExceededException,++    -- ** MalformedPolicyDocumentException+    _MalformedPolicyDocumentException,++    -- ** NotFoundException+    _NotFoundException,++    -- ** TagException+    _TagException,++    -- ** UnsupportedOperationException+    _UnsupportedOperationException,++    -- ** XksKeyAlreadyInUseException+    _XksKeyAlreadyInUseException,++    -- ** XksKeyInvalidConfigurationException+    _XksKeyInvalidConfigurationException,++    -- ** XksKeyNotFoundException+    _XksKeyNotFoundException,++    -- ** XksProxyIncorrectAuthenticationCredentialException+    _XksProxyIncorrectAuthenticationCredentialException,++    -- ** XksProxyInvalidConfigurationException+    _XksProxyInvalidConfigurationException,++    -- ** XksProxyInvalidResponseException+    _XksProxyInvalidResponseException,++    -- ** XksProxyUriEndpointInUseException+    _XksProxyUriEndpointInUseException,++    -- ** XksProxyUriInUseException+    _XksProxyUriInUseException,++    -- ** XksProxyUriUnreachableException+    _XksProxyUriUnreachableException,++    -- ** XksProxyVpcEndpointServiceInUseException+    _XksProxyVpcEndpointServiceInUseException,++    -- ** XksProxyVpcEndpointServiceInvalidConfigurationException+    _XksProxyVpcEndpointServiceInvalidConfigurationException,++    -- ** XksProxyVpcEndpointServiceNotFoundException+    _XksProxyVpcEndpointServiceNotFoundException,++    -- * Waiters+    -- $waiters++    -- * Operations+    -- $operations++    -- ** CancelKeyDeletion+    CancelKeyDeletion (CancelKeyDeletion'),+    newCancelKeyDeletion,+    CancelKeyDeletionResponse (CancelKeyDeletionResponse'),+    newCancelKeyDeletionResponse,++    -- ** ConnectCustomKeyStore+    ConnectCustomKeyStore (ConnectCustomKeyStore'),+    newConnectCustomKeyStore,+    ConnectCustomKeyStoreResponse (ConnectCustomKeyStoreResponse'),+    newConnectCustomKeyStoreResponse,++    -- ** CreateAlias+    CreateAlias (CreateAlias'),+    newCreateAlias,+    CreateAliasResponse (CreateAliasResponse'),+    newCreateAliasResponse,++    -- ** CreateCustomKeyStore+    CreateCustomKeyStore (CreateCustomKeyStore'),+    newCreateCustomKeyStore,+    CreateCustomKeyStoreResponse (CreateCustomKeyStoreResponse'),+    newCreateCustomKeyStoreResponse,++    -- ** CreateGrant+    CreateGrant (CreateGrant'),+    newCreateGrant,+    CreateGrantResponse (CreateGrantResponse'),+    newCreateGrantResponse,++    -- ** CreateKey+    CreateKey (CreateKey'),+    newCreateKey,+    CreateKeyResponse (CreateKeyResponse'),+    newCreateKeyResponse,++    -- ** Decrypt+    Decrypt (Decrypt'),+    newDecrypt,+    DecryptResponse (DecryptResponse'),+    newDecryptResponse,++    -- ** DeleteAlias+    DeleteAlias (DeleteAlias'),+    newDeleteAlias,+    DeleteAliasResponse (DeleteAliasResponse'),+    newDeleteAliasResponse,++    -- ** DeleteCustomKeyStore+    DeleteCustomKeyStore (DeleteCustomKeyStore'),+    newDeleteCustomKeyStore,+    DeleteCustomKeyStoreResponse (DeleteCustomKeyStoreResponse'),+    newDeleteCustomKeyStoreResponse,++    -- ** DeleteImportedKeyMaterial+    DeleteImportedKeyMaterial (DeleteImportedKeyMaterial'),+    newDeleteImportedKeyMaterial,+    DeleteImportedKeyMaterialResponse (DeleteImportedKeyMaterialResponse'),+    newDeleteImportedKeyMaterialResponse,++    -- ** DescribeCustomKeyStores (Paginated)+    DescribeCustomKeyStores (DescribeCustomKeyStores'),+    newDescribeCustomKeyStores,+    DescribeCustomKeyStoresResponse (DescribeCustomKeyStoresResponse'),+    newDescribeCustomKeyStoresResponse,++    -- ** DescribeKey+    DescribeKey (DescribeKey'),+    newDescribeKey,+    DescribeKeyResponse (DescribeKeyResponse'),+    newDescribeKeyResponse,++    -- ** DisableKey+    DisableKey (DisableKey'),+    newDisableKey,+    DisableKeyResponse (DisableKeyResponse'),+    newDisableKeyResponse,++    -- ** DisableKeyRotation+    DisableKeyRotation (DisableKeyRotation'),+    newDisableKeyRotation,+    DisableKeyRotationResponse (DisableKeyRotationResponse'),+    newDisableKeyRotationResponse,++    -- ** DisconnectCustomKeyStore+    DisconnectCustomKeyStore (DisconnectCustomKeyStore'),+    newDisconnectCustomKeyStore,+    DisconnectCustomKeyStoreResponse (DisconnectCustomKeyStoreResponse'),+    newDisconnectCustomKeyStoreResponse,++    -- ** EnableKey+    EnableKey (EnableKey'),+    newEnableKey,+    EnableKeyResponse (EnableKeyResponse'),+    newEnableKeyResponse,++    -- ** EnableKeyRotation+    EnableKeyRotation (EnableKeyRotation'),+    newEnableKeyRotation,+    EnableKeyRotationResponse (EnableKeyRotationResponse'),+    newEnableKeyRotationResponse,++    -- ** Encrypt+    Encrypt (Encrypt'),+    newEncrypt,+    EncryptResponse (EncryptResponse'),+    newEncryptResponse,++    -- ** GenerateDataKey+    GenerateDataKey (GenerateDataKey'),+    newGenerateDataKey,+    GenerateDataKeyResponse (GenerateDataKeyResponse'),+    newGenerateDataKeyResponse,++    -- ** GenerateDataKeyPair+    GenerateDataKeyPair (GenerateDataKeyPair'),+    newGenerateDataKeyPair,+    GenerateDataKeyPairResponse (GenerateDataKeyPairResponse'),+    newGenerateDataKeyPairResponse,++    -- ** GenerateDataKeyPairWithoutPlaintext+    GenerateDataKeyPairWithoutPlaintext (GenerateDataKeyPairWithoutPlaintext'),+    newGenerateDataKeyPairWithoutPlaintext,+    GenerateDataKeyPairWithoutPlaintextResponse (GenerateDataKeyPairWithoutPlaintextResponse'),+    newGenerateDataKeyPairWithoutPlaintextResponse,++    -- ** GenerateDataKeyWithoutPlaintext+    GenerateDataKeyWithoutPlaintext (GenerateDataKeyWithoutPlaintext'),+    newGenerateDataKeyWithoutPlaintext,+    GenerateDataKeyWithoutPlaintextResponse (GenerateDataKeyWithoutPlaintextResponse'),+    newGenerateDataKeyWithoutPlaintextResponse,++    -- ** GenerateMac+    GenerateMac (GenerateMac'),+    newGenerateMac,+    GenerateMacResponse (GenerateMacResponse'),+    newGenerateMacResponse,++    -- ** GenerateRandom+    GenerateRandom (GenerateRandom'),+    newGenerateRandom,+    GenerateRandomResponse (GenerateRandomResponse'),+    newGenerateRandomResponse,++    -- ** GetKeyPolicy+    GetKeyPolicy (GetKeyPolicy'),+    newGetKeyPolicy,+    GetKeyPolicyResponse (GetKeyPolicyResponse'),+    newGetKeyPolicyResponse,++    -- ** GetKeyRotationStatus+    GetKeyRotationStatus (GetKeyRotationStatus'),+    newGetKeyRotationStatus,+    GetKeyRotationStatusResponse (GetKeyRotationStatusResponse'),+    newGetKeyRotationStatusResponse,++    -- ** GetParametersForImport+    GetParametersForImport (GetParametersForImport'),+    newGetParametersForImport,+    GetParametersForImportResponse (GetParametersForImportResponse'),+    newGetParametersForImportResponse,++    -- ** GetPublicKey+    GetPublicKey (GetPublicKey'),+    newGetPublicKey,+    GetPublicKeyResponse (GetPublicKeyResponse'),+    newGetPublicKeyResponse,++    -- ** ImportKeyMaterial+    ImportKeyMaterial (ImportKeyMaterial'),+    newImportKeyMaterial,+    ImportKeyMaterialResponse (ImportKeyMaterialResponse'),+    newImportKeyMaterialResponse,++    -- ** ListAliases (Paginated)+    ListAliases (ListAliases'),+    newListAliases,+    ListAliasesResponse (ListAliasesResponse'),+    newListAliasesResponse,++    -- ** ListGrants (Paginated)+    ListGrants (ListGrants'),+    newListGrants,+    ListGrantsResponse (ListGrantsResponse'),+    newListGrantsResponse,++    -- ** ListKeyPolicies (Paginated)+    ListKeyPolicies (ListKeyPolicies'),+    newListKeyPolicies,+    ListKeyPoliciesResponse (ListKeyPoliciesResponse'),+    newListKeyPoliciesResponse,++    -- ** ListKeys (Paginated)+    ListKeys (ListKeys'),+    newListKeys,+    ListKeysResponse (ListKeysResponse'),+    newListKeysResponse,++    -- ** ListResourceTags (Paginated)+    ListResourceTags (ListResourceTags'),+    newListResourceTags,+    ListResourceTagsResponse (ListResourceTagsResponse'),+    newListResourceTagsResponse,++    -- ** ListRetirableGrants (Paginated)+    ListRetirableGrants (ListRetirableGrants'),+    newListRetirableGrants,+    ListGrantsResponse (ListGrantsResponse'),+    newListGrantsResponse,++    -- ** PutKeyPolicy+    PutKeyPolicy (PutKeyPolicy'),+    newPutKeyPolicy,+    PutKeyPolicyResponse (PutKeyPolicyResponse'),+    newPutKeyPolicyResponse,++    -- ** ReEncrypt+    ReEncrypt (ReEncrypt'),+    newReEncrypt,+    ReEncryptResponse (ReEncryptResponse'),+    newReEncryptResponse,++    -- ** ReplicateKey+    ReplicateKey (ReplicateKey'),+    newReplicateKey,+    ReplicateKeyResponse (ReplicateKeyResponse'),+    newReplicateKeyResponse,++    -- ** RetireGrant+    RetireGrant (RetireGrant'),+    newRetireGrant,+    RetireGrantResponse (RetireGrantResponse'),+    newRetireGrantResponse,++    -- ** RevokeGrant+    RevokeGrant (RevokeGrant'),+    newRevokeGrant,+    RevokeGrantResponse (RevokeGrantResponse'),+    newRevokeGrantResponse,++    -- ** ScheduleKeyDeletion+    ScheduleKeyDeletion (ScheduleKeyDeletion'),+    newScheduleKeyDeletion,+    ScheduleKeyDeletionResponse (ScheduleKeyDeletionResponse'),+    newScheduleKeyDeletionResponse,++    -- ** Sign+    Sign (Sign'),+    newSign,+    SignResponse (SignResponse'),+    newSignResponse,++    -- ** TagResource+    TagResource (TagResource'),+    newTagResource,+    TagResourceResponse (TagResourceResponse'),+    newTagResourceResponse,++    -- ** UntagResource+    UntagResource (UntagResource'),+    newUntagResource,+    UntagResourceResponse (UntagResourceResponse'),+    newUntagResourceResponse,++    -- ** UpdateAlias+    UpdateAlias (UpdateAlias'),+    newUpdateAlias,+    UpdateAliasResponse (UpdateAliasResponse'),+    newUpdateAliasResponse,++    -- ** UpdateCustomKeyStore+    UpdateCustomKeyStore (UpdateCustomKeyStore'),+    newUpdateCustomKeyStore,+    UpdateCustomKeyStoreResponse (UpdateCustomKeyStoreResponse'),+    newUpdateCustomKeyStoreResponse,++    -- ** UpdateKeyDescription+    UpdateKeyDescription (UpdateKeyDescription'),+    newUpdateKeyDescription,+    UpdateKeyDescriptionResponse (UpdateKeyDescriptionResponse'),+    newUpdateKeyDescriptionResponse,++    -- ** UpdatePrimaryRegion+    UpdatePrimaryRegion (UpdatePrimaryRegion'),+    newUpdatePrimaryRegion,+    UpdatePrimaryRegionResponse (UpdatePrimaryRegionResponse'),+    newUpdatePrimaryRegionResponse,++    -- ** Verify+    Verify (Verify'),+    newVerify,+    VerifyResponse (VerifyResponse'),+    newVerifyResponse,++    -- ** VerifyMac+    VerifyMac (VerifyMac'),+    newVerifyMac,+    VerifyMacResponse (VerifyMacResponse'),+    newVerifyMacResponse,++    -- * Types++    -- ** AlgorithmSpec+    AlgorithmSpec (..),++    -- ** ConnectionErrorCodeType+    ConnectionErrorCodeType (..),++    -- ** ConnectionStateType+    ConnectionStateType (..),++    -- ** CustomKeyStoreType+    CustomKeyStoreType (..),++    -- ** CustomerMasterKeySpec+    CustomerMasterKeySpec (..),++    -- ** DataKeyPairSpec+    DataKeyPairSpec (..),++    -- ** DataKeySpec+    DataKeySpec (..),++    -- ** EncryptionAlgorithmSpec+    EncryptionAlgorithmSpec (..),++    -- ** ExpirationModelType+    ExpirationModelType (..),++    -- ** GrantOperation+    GrantOperation (..),++    -- ** KeyManagerType+    KeyManagerType (..),++    -- ** KeySpec+    KeySpec (..),++    -- ** KeyState+    KeyState (..),++    -- ** KeyUsageType+    KeyUsageType (..),++    -- ** MacAlgorithmSpec+    MacAlgorithmSpec (..),++    -- ** MessageType+    MessageType (..),++    -- ** MultiRegionKeyType+    MultiRegionKeyType (..),++    -- ** OriginType+    OriginType (..),++    -- ** SigningAlgorithmSpec+    SigningAlgorithmSpec (..),++    -- ** WrappingKeySpec+    WrappingKeySpec (..),++    -- ** XksProxyConnectivityType+    XksProxyConnectivityType (..),++    -- ** AliasListEntry+    AliasListEntry (AliasListEntry'),+    newAliasListEntry,++    -- ** CustomKeyStoresListEntry+    CustomKeyStoresListEntry (CustomKeyStoresListEntry'),+    newCustomKeyStoresListEntry,++    -- ** GrantConstraints+    GrantConstraints (GrantConstraints'),+    newGrantConstraints,++    -- ** GrantListEntry+    GrantListEntry (GrantListEntry'),+    newGrantListEntry,++    -- ** KeyListEntry+    KeyListEntry (KeyListEntry'),+    newKeyListEntry,++    -- ** KeyMetadata+    KeyMetadata (KeyMetadata'),+    newKeyMetadata,++    -- ** ListGrantsResponse+    ListGrantsResponse (ListGrantsResponse'),+    newListGrantsResponse,++    -- ** MultiRegionConfiguration+    MultiRegionConfiguration (MultiRegionConfiguration'),+    newMultiRegionConfiguration,++    -- ** MultiRegionKey+    MultiRegionKey (MultiRegionKey'),+    newMultiRegionKey,++    -- ** Tag+    Tag (Tag'),+    newTag,++    -- ** XksKeyConfigurationType+    XksKeyConfigurationType (XksKeyConfigurationType'),+    newXksKeyConfigurationType,++    -- ** XksProxyAuthenticationCredentialType+    XksProxyAuthenticationCredentialType (XksProxyAuthenticationCredentialType'),+    newXksProxyAuthenticationCredentialType,++    -- ** XksProxyConfigurationType+    XksProxyConfigurationType (XksProxyConfigurationType'),+    newXksProxyConfigurationType,+  )+where++import Amazonka.KMS.CancelKeyDeletion+import Amazonka.KMS.ConnectCustomKeyStore+import Amazonka.KMS.CreateAlias+import Amazonka.KMS.CreateCustomKeyStore+import Amazonka.KMS.CreateGrant+import Amazonka.KMS.CreateKey+import Amazonka.KMS.Decrypt+import Amazonka.KMS.DeleteAlias+import Amazonka.KMS.DeleteCustomKeyStore+import Amazonka.KMS.DeleteImportedKeyMaterial+import Amazonka.KMS.DescribeCustomKeyStores+import Amazonka.KMS.DescribeKey+import Amazonka.KMS.DisableKey+import Amazonka.KMS.DisableKeyRotation+import Amazonka.KMS.DisconnectCustomKeyStore+import Amazonka.KMS.EnableKey+import Amazonka.KMS.EnableKeyRotation+import Amazonka.KMS.Encrypt+import Amazonka.KMS.GenerateDataKey+import Amazonka.KMS.GenerateDataKeyPair+import Amazonka.KMS.GenerateDataKeyPairWithoutPlaintext+import Amazonka.KMS.GenerateDataKeyWithoutPlaintext+import Amazonka.KMS.GenerateMac+import Amazonka.KMS.GenerateRandom+import Amazonka.KMS.GetKeyPolicy+import Amazonka.KMS.GetKeyRotationStatus+import Amazonka.KMS.GetParametersForImport+import Amazonka.KMS.GetPublicKey+import Amazonka.KMS.ImportKeyMaterial+import Amazonka.KMS.Lens+import Amazonka.KMS.ListAliases+import Amazonka.KMS.ListGrants+import Amazonka.KMS.ListKeyPolicies+import Amazonka.KMS.ListKeys+import Amazonka.KMS.ListResourceTags+import Amazonka.KMS.ListRetirableGrants+import Amazonka.KMS.PutKeyPolicy+import Amazonka.KMS.ReEncrypt+import Amazonka.KMS.ReplicateKey+import Amazonka.KMS.RetireGrant+import Amazonka.KMS.RevokeGrant+import Amazonka.KMS.ScheduleKeyDeletion+import Amazonka.KMS.Sign+import Amazonka.KMS.TagResource+import Amazonka.KMS.Types+import Amazonka.KMS.UntagResource+import Amazonka.KMS.UpdateAlias+import Amazonka.KMS.UpdateCustomKeyStore+import Amazonka.KMS.UpdateKeyDescription+import Amazonka.KMS.UpdatePrimaryRegion+import Amazonka.KMS.Verify+import Amazonka.KMS.VerifyMac+import Amazonka.KMS.Waiters++-- $errors+-- Error matchers are designed for use with the functions provided by+-- <http://hackage.haskell.org/package/lens/docs/Control-Exception-Lens.html Control.Exception.Lens>.+-- This allows catching (and rethrowing) service specific errors returned+-- by 'KMS'.++-- $operations+-- Some AWS operations return results that are incomplete and require subsequent+-- requests in order to obtain the entire result set. The process of sending+-- subsequent requests to continue where a previous request left off is called+-- pagination. For example, the 'ListObjects' operation of Amazon S3 returns up to+-- 1000 objects at a time, and you must send subsequent requests with the+-- appropriate Marker in order to retrieve the next page of results.+--+-- Operations that have an 'AWSPager' instance can transparently perform subsequent+-- requests, correctly setting Markers and other request facets to iterate through+-- the entire result set of a truncated API operation. Operations which support+-- this have an additional note in the documentation.+--+-- Many operations have the ability to filter results on the server side. See the+-- individual operation parameters for details.++-- $waiters+-- Waiters poll by repeatedly sending a request until some remote success condition+-- configured by the 'Wait' specification is fulfilled. The 'Wait' specification+-- determines how many attempts should be made, in addition to delay and retry strategies.

@@ -0,0 +1,230 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.KMS.CancelKeyDeletion+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Cancels the deletion of a KMS key. When this operation succeeds, the key+-- state of the KMS key is @Disabled@. To enable the KMS key, use+-- EnableKey.+--+-- For more information about scheduling and canceling deletion of a KMS+-- key, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html Deleting KMS keys>+-- in the /Key Management Service Developer Guide/.+--+-- The KMS key that you use for this operation must be in a compatible key+-- state. For details, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html Key states of KMS keys>+-- in the /Key Management Service Developer Guide/.+--+-- __Cross-account use__: No. You cannot perform this operation on a KMS+-- key in a different Amazon Web Services account.+--+-- __Required permissions__:+-- <https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html kms:CancelKeyDeletion>+-- (key policy)+--+-- __Related operations__: ScheduleKeyDeletion+module Amazonka.KMS.CancelKeyDeletion+  ( -- * Creating a Request+    CancelKeyDeletion (..),+    newCancelKeyDeletion,++    -- * Request Lenses+    cancelKeyDeletion_keyId,++    -- * Destructuring the Response+    CancelKeyDeletionResponse (..),+    newCancelKeyDeletionResponse,++    -- * Response Lenses+    cancelKeyDeletionResponse_keyId,+    cancelKeyDeletionResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import Amazonka.KMS.Types+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newCancelKeyDeletion' smart constructor.+data CancelKeyDeletion = CancelKeyDeletion'+  { -- | Identifies the KMS key whose deletion is being canceled.+    --+    -- Specify the key ID or key ARN of the KMS key.+    --+    -- For example:+    --+    -- -   Key ID: @1234abcd-12ab-34cd-56ef-1234567890ab@+    --+    -- -   Key ARN:+    --     @arn:aws:kms:us-east-2:111122223333:key\/1234abcd-12ab-34cd-56ef-1234567890ab@+    --+    -- To get the key ID and key ARN for a KMS key, use ListKeys or+    -- DescribeKey.+    keyId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CancelKeyDeletion' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'keyId', 'cancelKeyDeletion_keyId' - Identifies the KMS key whose deletion is being canceled.+--+-- Specify the key ID or key ARN of the KMS key.+--+-- For example:+--+-- -   Key ID: @1234abcd-12ab-34cd-56ef-1234567890ab@+--+-- -   Key ARN:+--     @arn:aws:kms:us-east-2:111122223333:key\/1234abcd-12ab-34cd-56ef-1234567890ab@+--+-- To get the key ID and key ARN for a KMS key, use ListKeys or+-- DescribeKey.+newCancelKeyDeletion ::+  -- | 'keyId'+  Prelude.Text ->+  CancelKeyDeletion+newCancelKeyDeletion pKeyId_ =+  CancelKeyDeletion' {keyId = pKeyId_}++-- | Identifies the KMS key whose deletion is being canceled.+--+-- Specify the key ID or key ARN of the KMS key.+--+-- For example:+--+-- -   Key ID: @1234abcd-12ab-34cd-56ef-1234567890ab@+--+-- -   Key ARN:+--     @arn:aws:kms:us-east-2:111122223333:key\/1234abcd-12ab-34cd-56ef-1234567890ab@+--+-- To get the key ID and key ARN for a KMS key, use ListKeys or+-- DescribeKey.+cancelKeyDeletion_keyId :: Lens.Lens' CancelKeyDeletion Prelude.Text+cancelKeyDeletion_keyId = Lens.lens (\CancelKeyDeletion' {keyId} -> keyId) (\s@CancelKeyDeletion' {} a -> s {keyId = a} :: CancelKeyDeletion)++instance Core.AWSRequest CancelKeyDeletion where+  type+    AWSResponse CancelKeyDeletion =+      CancelKeyDeletionResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          CancelKeyDeletionResponse'+            Prelude.<$> (x Data..?> "KeyId")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable CancelKeyDeletion where+  hashWithSalt _salt CancelKeyDeletion' {..} =+    _salt `Prelude.hashWithSalt` keyId++instance Prelude.NFData CancelKeyDeletion where+  rnf CancelKeyDeletion' {..} = Prelude.rnf keyId++instance Data.ToHeaders CancelKeyDeletion where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "TrentService.CancelKeyDeletion" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON CancelKeyDeletion where+  toJSON CancelKeyDeletion' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("KeyId" Data..= keyId)]+      )++instance Data.ToPath CancelKeyDeletion where+  toPath = Prelude.const "/"++instance Data.ToQuery CancelKeyDeletion where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newCancelKeyDeletionResponse' smart constructor.+data CancelKeyDeletionResponse = CancelKeyDeletionResponse'+  { -- | The Amazon Resource Name+    -- (<https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN key ARN>)+    -- of the KMS key whose deletion is canceled.+    keyId :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CancelKeyDeletionResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'keyId', 'cancelKeyDeletionResponse_keyId' - The Amazon Resource Name+-- (<https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN key ARN>)+-- of the KMS key whose deletion is canceled.+--+-- 'httpStatus', 'cancelKeyDeletionResponse_httpStatus' - The response's http status code.+newCancelKeyDeletionResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  CancelKeyDeletionResponse+newCancelKeyDeletionResponse pHttpStatus_ =+  CancelKeyDeletionResponse'+    { keyId = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The Amazon Resource Name+-- (<https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN key ARN>)+-- of the KMS key whose deletion is canceled.+cancelKeyDeletionResponse_keyId :: Lens.Lens' CancelKeyDeletionResponse (Prelude.Maybe Prelude.Text)+cancelKeyDeletionResponse_keyId = Lens.lens (\CancelKeyDeletionResponse' {keyId} -> keyId) (\s@CancelKeyDeletionResponse' {} a -> s {keyId = a} :: CancelKeyDeletionResponse)++-- | The response's http status code.+cancelKeyDeletionResponse_httpStatus :: Lens.Lens' CancelKeyDeletionResponse Prelude.Int+cancelKeyDeletionResponse_httpStatus = Lens.lens (\CancelKeyDeletionResponse' {httpStatus} -> httpStatus) (\s@CancelKeyDeletionResponse' {} a -> s {httpStatus = a} :: CancelKeyDeletionResponse)++instance Prelude.NFData CancelKeyDeletionResponse where+  rnf CancelKeyDeletionResponse' {..} =+    Prelude.rnf keyId+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,267 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.KMS.ConnectCustomKeyStore+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Connects or reconnects a+-- <https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html custom key store>+-- to its backing key store. For an CloudHSM key store,+-- @ConnectCustomKeyStore@ connects the key store to its associated+-- CloudHSM cluster. For an external key store, @ConnectCustomKeyStore@+-- connects the key store to the external key store proxy that communicates+-- with your external key manager.+--+-- The custom key store must be connected before you can create KMS keys in+-- the key store or use the KMS keys it contains. You can disconnect and+-- reconnect a custom key store at any time.+--+-- The connection process for a custom key store can take an extended+-- amount of time to complete. This operation starts the connection+-- process, but it does not wait for it to complete. When it succeeds, this+-- operation quickly returns an HTTP 200 response and a JSON object with no+-- properties. However, this response does not indicate that the custom key+-- store is connected. To get the connection state of the custom key store,+-- use the DescribeCustomKeyStores operation.+--+-- This operation is part of the+-- <https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html custom key stores>+-- feature in KMS, which combines the convenience and extensive integration+-- of KMS with the isolation and control of a key store that you own and+-- manage.+--+-- The @ConnectCustomKeyStore@ operation might fail for various reasons. To+-- find the reason, use the DescribeCustomKeyStores operation and see the+-- @ConnectionErrorCode@ in the response. For help interpreting the+-- @ConnectionErrorCode@, see CustomKeyStoresListEntry.+--+-- To fix the failure, use the DisconnectCustomKeyStore operation to+-- disconnect the custom key store, correct the error, use the+-- UpdateCustomKeyStore operation if necessary, and then use+-- @ConnectCustomKeyStore@ again.+--+-- __CloudHSM key store__+--+-- During the connection process for an CloudHSM key store, KMS finds the+-- CloudHSM cluster that is associated with the custom key store, creates+-- the connection infrastructure, connects to the cluster, logs into the+-- CloudHSM client as the @kmsuser@ CU, and rotates its password.+--+-- To connect an CloudHSM key store, its associated CloudHSM cluster must+-- have at least one active HSM. To get the number of active HSMs in a+-- cluster, use the+-- <https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_DescribeClusters.html DescribeClusters>+-- operation. To add HSMs to the cluster, use the+-- <https://docs.aws.amazon.com/cloudhsm/latest/APIReference/API_CreateHsm.html CreateHsm>+-- operation. Also, the+-- <https://docs.aws.amazon.com/kms/latest/developerguide/key-store-concepts.html#concept-kmsuser kmsuser crypto user>+-- (CU) must not be logged into the cluster. This prevents KMS from using+-- this account to log in.+--+-- If you are having trouble connecting or disconnecting a CloudHSM key+-- store, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html Troubleshooting an CloudHSM key store>+-- in the /Key Management Service Developer Guide/.+--+-- __External key store__+--+-- When you connect an external key store that uses public endpoint+-- connectivity, KMS tests its ability to communicate with your external+-- key manager by sending a request via the external key store proxy.+--+-- When you connect to an external key store that uses VPC endpoint service+-- connectivity, KMS establishes the networking elements that it needs to+-- communicate with your external key manager via the external key store+-- proxy. This includes creating an interface endpoint to the VPC endpoint+-- service and a private hosted zone for traffic between KMS and the VPC+-- endpoint service.+--+-- To connect an external key store, KMS must be able to connect to the+-- external key store proxy, the external key store proxy must be able to+-- communicate with your external key manager, and the external key manager+-- must be available for cryptographic operations.+--+-- If you are having trouble connecting or disconnecting an external key+-- store, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/xks-troubleshooting.html Troubleshooting an external key store>+-- in the /Key Management Service Developer Guide/.+--+-- __Cross-account use__: No. You cannot perform this operation on a custom+-- key store in a different Amazon Web Services account.+--+-- __Required permissions__:+-- <https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html kms:ConnectCustomKeyStore>+-- (IAM policy)+--+-- __Related operations__+--+-- -   CreateCustomKeyStore+--+-- -   DeleteCustomKeyStore+--+-- -   DescribeCustomKeyStores+--+-- -   DisconnectCustomKeyStore+--+-- -   UpdateCustomKeyStore+module Amazonka.KMS.ConnectCustomKeyStore+  ( -- * Creating a Request+    ConnectCustomKeyStore (..),+    newConnectCustomKeyStore,++    -- * Request Lenses+    connectCustomKeyStore_customKeyStoreId,++    -- * Destructuring the Response+    ConnectCustomKeyStoreResponse (..),+    newConnectCustomKeyStoreResponse,++    -- * Response Lenses+    connectCustomKeyStoreResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import Amazonka.KMS.Types+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newConnectCustomKeyStore' smart constructor.+data ConnectCustomKeyStore = ConnectCustomKeyStore'+  { -- | Enter the key store ID of the custom key store that you want to connect.+    -- To find the ID of a custom key store, use the DescribeCustomKeyStores+    -- operation.+    customKeyStoreId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ConnectCustomKeyStore' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'customKeyStoreId', 'connectCustomKeyStore_customKeyStoreId' - Enter the key store ID of the custom key store that you want to connect.+-- To find the ID of a custom key store, use the DescribeCustomKeyStores+-- operation.+newConnectCustomKeyStore ::+  -- | 'customKeyStoreId'+  Prelude.Text ->+  ConnectCustomKeyStore+newConnectCustomKeyStore pCustomKeyStoreId_ =+  ConnectCustomKeyStore'+    { customKeyStoreId =+        pCustomKeyStoreId_+    }++-- | Enter the key store ID of the custom key store that you want to connect.+-- To find the ID of a custom key store, use the DescribeCustomKeyStores+-- operation.+connectCustomKeyStore_customKeyStoreId :: Lens.Lens' ConnectCustomKeyStore Prelude.Text+connectCustomKeyStore_customKeyStoreId = Lens.lens (\ConnectCustomKeyStore' {customKeyStoreId} -> customKeyStoreId) (\s@ConnectCustomKeyStore' {} a -> s {customKeyStoreId = a} :: ConnectCustomKeyStore)++instance Core.AWSRequest ConnectCustomKeyStore where+  type+    AWSResponse ConnectCustomKeyStore =+      ConnectCustomKeyStoreResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveEmpty+      ( \s h x ->+          ConnectCustomKeyStoreResponse'+            Prelude.<$> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ConnectCustomKeyStore where+  hashWithSalt _salt ConnectCustomKeyStore' {..} =+    _salt `Prelude.hashWithSalt` customKeyStoreId++instance Prelude.NFData ConnectCustomKeyStore where+  rnf ConnectCustomKeyStore' {..} =+    Prelude.rnf customKeyStoreId++instance Data.ToHeaders ConnectCustomKeyStore where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "TrentService.ConnectCustomKeyStore" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ConnectCustomKeyStore where+  toJSON ConnectCustomKeyStore' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CustomKeyStoreId" Data..= customKeyStoreId)+          ]+      )++instance Data.ToPath ConnectCustomKeyStore where+  toPath = Prelude.const "/"++instance Data.ToQuery ConnectCustomKeyStore where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newConnectCustomKeyStoreResponse' smart constructor.+data ConnectCustomKeyStoreResponse = ConnectCustomKeyStoreResponse'+  { -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ConnectCustomKeyStoreResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'httpStatus', 'connectCustomKeyStoreResponse_httpStatus' - The response's http status code.+newConnectCustomKeyStoreResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ConnectCustomKeyStoreResponse+newConnectCustomKeyStoreResponse pHttpStatus_ =+  ConnectCustomKeyStoreResponse'+    { httpStatus =+        pHttpStatus_+    }++-- | The response's http status code.+connectCustomKeyStoreResponse_httpStatus :: Lens.Lens' ConnectCustomKeyStoreResponse Prelude.Int+connectCustomKeyStoreResponse_httpStatus = Lens.lens (\ConnectCustomKeyStoreResponse' {httpStatus} -> httpStatus) (\s@ConnectCustomKeyStoreResponse' {} a -> s {httpStatus = a} :: ConnectCustomKeyStoreResponse)++instance Prelude.NFData ConnectCustomKeyStoreResponse where+  rnf ConnectCustomKeyStoreResponse' {..} =+    Prelude.rnf httpStatus

@@ -0,0 +1,286 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.KMS.CreateAlias+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates a friendly name for a KMS key.+--+-- Adding, deleting, or updating an alias can allow or deny permission to+-- the KMS key. For details, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/abac.html ABAC for KMS>+-- in the /Key Management Service Developer Guide/.+--+-- You can use an alias to identify a KMS key in the KMS console, in the+-- DescribeKey operation and in+-- <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations cryptographic operations>,+-- such as Encrypt and GenerateDataKey. You can also change the KMS key+-- that\'s associated with the alias (UpdateAlias) or delete the alias+-- (DeleteAlias) at any time. These operations don\'t affect the underlying+-- KMS key.+--+-- You can associate the alias with any customer managed key in the same+-- Amazon Web Services Region. Each alias is associated with only one KMS+-- key at a time, but a KMS key can have multiple aliases. A valid KMS key+-- is required. You can\'t create an alias without a KMS key.+--+-- The alias must be unique in the account and Region, but you can have+-- aliases with the same name in different Regions. For detailed+-- information about aliases, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html Using aliases>+-- in the /Key Management Service Developer Guide/.+--+-- This operation does not return a response. To get the alias that you+-- created, use the ListAliases operation.+--+-- The KMS key that you use for this operation must be in a compatible key+-- state. For details, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html Key states of KMS keys>+-- in the /Key Management Service Developer Guide/.+--+-- __Cross-account use__: No. You cannot perform this operation on an alias+-- in a different Amazon Web Services account.+--+-- __Required permissions__+--+-- -   <https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html kms:CreateAlias>+--     on the alias (IAM policy).+--+-- -   <https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html kms:CreateAlias>+--     on the KMS key (key policy).+--+-- For details, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html#alias-access Controlling access to aliases>+-- in the /Key Management Service Developer Guide/.+--+-- __Related operations:__+--+-- -   DeleteAlias+--+-- -   ListAliases+--+-- -   UpdateAlias+module Amazonka.KMS.CreateAlias+  ( -- * Creating a Request+    CreateAlias (..),+    newCreateAlias,++    -- * Request Lenses+    createAlias_aliasName,+    createAlias_targetKeyId,++    -- * Destructuring the Response+    CreateAliasResponse (..),+    newCreateAliasResponse,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import Amazonka.KMS.Types+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newCreateAlias' smart constructor.+data CreateAlias = CreateAlias'+  { -- | Specifies the alias name. This value must begin with @alias\/@ followed+    -- by a name, such as @alias\/ExampleAlias@.+    --+    -- The @AliasName@ value must be string of 1-256 characters. It can contain+    -- only alphanumeric characters, forward slashes (\/), underscores (_), and+    -- dashes (-). The alias name cannot begin with @alias\/aws\/@. The+    -- @alias\/aws\/@ prefix is reserved for+    -- <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk Amazon Web Services managed keys>.+    aliasName :: Prelude.Text,+    -- | Associates the alias with the specified+    -- <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk customer managed key>.+    -- The KMS key must be in the same Amazon Web Services Region.+    --+    -- A valid key ID is required. If you supply a null or empty string value,+    -- this operation returns an error.+    --+    -- For help finding the key ID and ARN, see+    -- <https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html#find-cmk-id-arn Finding the Key ID and ARN>+    -- in the //Key Management Service Developer Guide// .+    --+    -- Specify the key ID or key ARN of the KMS key.+    --+    -- For example:+    --+    -- -   Key ID: @1234abcd-12ab-34cd-56ef-1234567890ab@+    --+    -- -   Key ARN:+    --     @arn:aws:kms:us-east-2:111122223333:key\/1234abcd-12ab-34cd-56ef-1234567890ab@+    --+    -- To get the key ID and key ARN for a KMS key, use ListKeys or+    -- DescribeKey.+    targetKeyId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CreateAlias' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'aliasName', 'createAlias_aliasName' - Specifies the alias name. This value must begin with @alias\/@ followed+-- by a name, such as @alias\/ExampleAlias@.+--+-- The @AliasName@ value must be string of 1-256 characters. It can contain+-- only alphanumeric characters, forward slashes (\/), underscores (_), and+-- dashes (-). The alias name cannot begin with @alias\/aws\/@. The+-- @alias\/aws\/@ prefix is reserved for+-- <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk Amazon Web Services managed keys>.+--+-- 'targetKeyId', 'createAlias_targetKeyId' - Associates the alias with the specified+-- <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk customer managed key>.+-- The KMS key must be in the same Amazon Web Services Region.+--+-- A valid key ID is required. If you supply a null or empty string value,+-- this operation returns an error.+--+-- For help finding the key ID and ARN, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html#find-cmk-id-arn Finding the Key ID and ARN>+-- in the //Key Management Service Developer Guide// .+--+-- Specify the key ID or key ARN of the KMS key.+--+-- For example:+--+-- -   Key ID: @1234abcd-12ab-34cd-56ef-1234567890ab@+--+-- -   Key ARN:+--     @arn:aws:kms:us-east-2:111122223333:key\/1234abcd-12ab-34cd-56ef-1234567890ab@+--+-- To get the key ID and key ARN for a KMS key, use ListKeys or+-- DescribeKey.+newCreateAlias ::+  -- | 'aliasName'+  Prelude.Text ->+  -- | 'targetKeyId'+  Prelude.Text ->+  CreateAlias+newCreateAlias pAliasName_ pTargetKeyId_ =+  CreateAlias'+    { aliasName = pAliasName_,+      targetKeyId = pTargetKeyId_+    }++-- | Specifies the alias name. This value must begin with @alias\/@ followed+-- by a name, such as @alias\/ExampleAlias@.+--+-- The @AliasName@ value must be string of 1-256 characters. It can contain+-- only alphanumeric characters, forward slashes (\/), underscores (_), and+-- dashes (-). The alias name cannot begin with @alias\/aws\/@. The+-- @alias\/aws\/@ prefix is reserved for+-- <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk Amazon Web Services managed keys>.+createAlias_aliasName :: Lens.Lens' CreateAlias Prelude.Text+createAlias_aliasName = Lens.lens (\CreateAlias' {aliasName} -> aliasName) (\s@CreateAlias' {} a -> s {aliasName = a} :: CreateAlias)++-- | Associates the alias with the specified+-- <https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk customer managed key>.+-- The KMS key must be in the same Amazon Web Services Region.+--+-- A valid key ID is required. If you supply a null or empty string value,+-- this operation returns an error.+--+-- For help finding the key ID and ARN, see+-- <https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html#find-cmk-id-arn Finding the Key ID and ARN>+-- in the //Key Management Service Developer Guide// .+--+-- Specify the key ID or key ARN of the KMS key.+--+-- For example:+--+-- -   Key ID: @1234abcd-12ab-34cd-56ef-1234567890ab@+--+-- -   Key ARN:+--     @arn:aws:kms:us-east-2:111122223333:key\/1234abcd-12ab-34cd-56ef-1234567890ab@+--+-- To get the key ID and key ARN for a KMS key, use ListKeys or+-- DescribeKey.+createAlias_targetKeyId :: Lens.Lens' CreateAlias Prelude.Text+createAlias_targetKeyId = Lens.lens (\CreateAlias' {targetKeyId} -> targetKeyId) (\s@CreateAlias' {} a -> s {targetKeyId = a} :: CreateAlias)++instance Core.AWSRequest CreateAlias where+  type AWSResponse CreateAlias = CreateAliasResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response = Response.receiveNull CreateAliasResponse'++instance Prelude.Hashable CreateAlias where+  hashWithSalt _salt CreateAlias' {..} =+    _salt+      `Prelude.hashWithSalt` aliasName+      `Prelude.hashWithSalt` targetKeyId++instance Prelude.NFData CreateAlias where+  rnf CreateAlias' {..} =+    Prelude.rnf aliasName+      `Prelude.seq` Prelude.rnf targetKeyId++instance Data.ToHeaders CreateAlias where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ("TrentService.CreateAlias" :: Prelude.ByteString),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON CreateAlias where+  toJSON CreateAlias' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just ("AliasName" Data..= aliasName),+            Prelude.Just ("TargetKeyId" Data..= targetKeyId)+          ]+      )++instance Data.ToPath CreateAlias where+  toPath = Prelude.const "/"++instance Data.ToQuery CreateAlias where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newCreateAliasResponse' smart constructor.+data CreateAliasResponse = CreateAliasResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CreateAliasResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newCreateAliasResponse ::+  CreateAliasResponse+newCreateAliasResponse = CreateAliasResponse'++instance Prelude.NFData CreateAliasResponse where+  rnf _ = ()