{
  "version":"2.0",
  "metadata":{
    "apiVersion":"2014-11-01",
    "endpointPrefix":"kms",
    "jsonVersion":"1.1",
    "protocol":"json",
    "protocols":["json"],
    "serviceAbbreviation":"KMS",
    "serviceFullName":"AWS Key Management Service",
    "serviceId":"KMS",
    "signatureVersion":"v4",
    "targetPrefix":"TrentService",
    "uid":"kms-2014-11-01",
    "auth":["aws.auth#sigv4"]
  },
  "operations":{
    "CancelKeyDeletion":{
      "name":"CancelKeyDeletion",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"CancelKeyDeletionRequest"},
      "output":{"shape":"CancelKeyDeletionResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "ConnectCustomKeyStore":{
      "name":"ConnectCustomKeyStore",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ConnectCustomKeyStoreRequest"},
      "output":{"shape":"ConnectCustomKeyStoreResponse"},
      "errors":[
        {"shape":"CloudHsmClusterNotActiveException"},
        {"shape":"CustomKeyStoreInvalidStateException"},
        {"shape":"CustomKeyStoreNotFoundException"},
        {"shape":"KMSInternalException"},
        {"shape":"CloudHsmClusterInvalidConfigurationException"}
      ]
    },
    "CreateAlias":{
      "name":"CreateAlias",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"CreateAliasRequest"},
      "errors":[
        {"shape":"DependencyTimeoutException"},
        {"shape":"AlreadyExistsException"},
        {"shape":"NotFoundException"},
        {"shape":"InvalidAliasNameException"},
        {"shape":"KMSInternalException"},
        {"shape":"LimitExceededException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "CreateCustomKeyStore":{
      "name":"CreateCustomKeyStore",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"CreateCustomKeyStoreRequest"},
      "output":{"shape":"CreateCustomKeyStoreResponse"},
      "errors":[
        {"shape":"CloudHsmClusterInUseException"},
        {"shape":"CustomKeyStoreNameInUseException"},
        {"shape":"CloudHsmClusterNotFoundException"},
        {"shape":"KMSInternalException"},
        {"shape":"CloudHsmClusterNotActiveException"},
        {"shape":"IncorrectTrustAnchorException"},
        {"shape":"CloudHsmClusterInvalidConfigurationException"},
        {"shape":"LimitExceededException"},
        {"shape":"XksProxyUriInUseException"},
        {"shape":"XksProxyUriEndpointInUseException"},
        {"shape":"XksProxyUriUnreachableException"},
        {"shape":"XksProxyIncorrectAuthenticationCredentialException"},
        {"shape":"XksProxyVpcEndpointServiceInUseException"},
        {"shape":"XksProxyVpcEndpointServiceNotFoundException"},
        {"shape":"XksProxyVpcEndpointServiceInvalidConfigurationException"},
        {"shape":"XksProxyInvalidResponseException"},
        {"shape":"XksProxyInvalidConfigurationException"}
      ]
    },
    "CreateGrant":{
      "name":"CreateGrant",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"CreateGrantRequest"},
      "output":{"shape":"CreateGrantResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidArnException"},
        {"shape":"KMSInternalException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"LimitExceededException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "CreateKey":{
      "name":"CreateKey",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"CreateKeyRequest"},
      "output":{"shape":"CreateKeyResponse"},
      "errors":[
        {"shape":"MalformedPolicyDocumentException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidArnException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"KMSInternalException"},
        {"shape":"LimitExceededException"},
        {"shape":"TagException"},
        {"shape":"CustomKeyStoreNotFoundException"},
        {"shape":"CustomKeyStoreInvalidStateException"},
        {"shape":"CloudHsmClusterInvalidConfigurationException"},
        {"shape":"XksKeyInvalidConfigurationException"},
        {"shape":"XksKeyAlreadyInUseException"},
        {"shape":"XksKeyNotFoundException"}
      ]
    },
    "Decrypt":{
      "name":"Decrypt",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DecryptRequest"},
      "output":{"shape":"DecryptResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"InvalidCiphertextException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"IncorrectKeyException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "DeleteAlias":{
      "name":"DeleteAlias",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DeleteAliasRequest"},
      "errors":[
        {"shape":"DependencyTimeoutException"},
        {"shape":"NotFoundException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "DeleteCustomKeyStore":{
      "name":"DeleteCustomKeyStore",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DeleteCustomKeyStoreRequest"},
      "output":{"shape":"DeleteCustomKeyStoreResponse"},
      "errors":[
        {"shape":"CustomKeyStoreHasCMKsException"},
        {"shape":"CustomKeyStoreInvalidStateException"},
        {"shape":"CustomKeyStoreNotFoundException"},
        {"shape":"KMSInternalException"}
      ]
    },
    "DeleteImportedKeyMaterial":{
      "name":"DeleteImportedKeyMaterial",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DeleteImportedKeyMaterialRequest"},
      "errors":[
        {"shape":"InvalidArnException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"NotFoundException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "DeriveSharedSecret":{
      "name":"DeriveSharedSecret",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DeriveSharedSecretRequest"},
      "output":{"shape":"DeriveSharedSecretResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "DescribeCustomKeyStores":{
      "name":"DescribeCustomKeyStores",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DescribeCustomKeyStoresRequest"},
      "output":{"shape":"DescribeCustomKeyStoresResponse"},
      "errors":[
        {"shape":"CustomKeyStoreNotFoundException"},
        {"shape":"InvalidMarkerException"},
        {"shape":"KMSInternalException"}
      ]
    },
    "DescribeKey":{
      "name":"DescribeKey",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DescribeKeyRequest"},
      "output":{"shape":"DescribeKeyResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"}
      ]
    },
    "DisableKey":{
      "name":"DisableKey",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DisableKeyRequest"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "DisableKeyRotation":{
      "name":"DisableKeyRotation",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DisableKeyRotationRequest"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"UnsupportedOperationException"}
      ]
    },
    "DisconnectCustomKeyStore":{
      "name":"DisconnectCustomKeyStore",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"DisconnectCustomKeyStoreRequest"},
      "output":{"shape":"DisconnectCustomKeyStoreResponse"},
      "errors":[
        {"shape":"CustomKeyStoreInvalidStateException"},
        {"shape":"CustomKeyStoreNotFoundException"},
        {"shape":"KMSInternalException"}
      ]
    },
    "EnableKey":{
      "name":"EnableKey",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"EnableKeyRequest"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"LimitExceededException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "EnableKeyRotation":{
      "name":"EnableKeyRotation",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"EnableKeyRotationRequest"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"UnsupportedOperationException"}
      ]
    },
    "Encrypt":{
      "name":"Encrypt",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"EncryptRequest"},
      "output":{"shape":"EncryptResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "GenerateDataKey":{
      "name":"GenerateDataKey",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GenerateDataKeyRequest"},
      "output":{"shape":"GenerateDataKeyResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "GenerateDataKeyPair":{
      "name":"GenerateDataKeyPair",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GenerateDataKeyPairRequest"},
      "output":{"shape":"GenerateDataKeyPairResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "GenerateDataKeyPairWithoutPlaintext":{
      "name":"GenerateDataKeyPairWithoutPlaintext",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GenerateDataKeyPairWithoutPlaintextRequest"},
      "output":{"shape":"GenerateDataKeyPairWithoutPlaintextResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "GenerateDataKeyWithoutPlaintext":{
      "name":"GenerateDataKeyWithoutPlaintext",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GenerateDataKeyWithoutPlaintextRequest"},
      "output":{"shape":"GenerateDataKeyWithoutPlaintextResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "GenerateMac":{
      "name":"GenerateMac",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GenerateMacRequest"},
      "output":{"shape":"GenerateMacResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "GenerateRandom":{
      "name":"GenerateRandom",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GenerateRandomRequest"},
      "output":{"shape":"GenerateRandomResponse"},
      "errors":[
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"CustomKeyStoreNotFoundException"},
        {"shape":"CustomKeyStoreInvalidStateException"}
      ]
    },
    "GetKeyPolicy":{
      "name":"GetKeyPolicy",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GetKeyPolicyRequest"},
      "output":{"shape":"GetKeyPolicyResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "GetKeyRotationStatus":{
      "name":"GetKeyRotationStatus",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GetKeyRotationStatusRequest"},
      "output":{"shape":"GetKeyRotationStatusResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"UnsupportedOperationException"}
      ]
    },
    "GetParametersForImport":{
      "name":"GetParametersForImport",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GetParametersForImportRequest"},
      "output":{"shape":"GetParametersForImportResponse"},
      "errors":[
        {"shape":"InvalidArnException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"NotFoundException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "GetPublicKey":{
      "name":"GetPublicKey",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"GetPublicKeyRequest"},
      "output":{"shape":"GetPublicKeyResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"InvalidArnException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "ImportKeyMaterial":{
      "name":"ImportKeyMaterial",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ImportKeyMaterialRequest"},
      "output":{"shape":"ImportKeyMaterialResponse"},
      "errors":[
        {"shape":"InvalidArnException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"NotFoundException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"InvalidCiphertextException"},
        {"shape":"IncorrectKeyMaterialException"},
        {"shape":"ExpiredImportTokenException"},
        {"shape":"InvalidImportTokenException"}
      ]
    },
    "ListAliases":{
      "name":"ListAliases",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ListAliasesRequest"},
      "output":{"shape":"ListAliasesResponse"},
      "errors":[
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidMarkerException"},
        {"shape":"KMSInternalException"},
        {"shape":"InvalidArnException"},
        {"shape":"NotFoundException"}
      ]
    },
    "ListGrants":{
      "name":"ListGrants",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ListGrantsRequest"},
      "output":{"shape":"ListGrantsResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidMarkerException"},
        {"shape":"InvalidGrantIdException"},
        {"shape":"InvalidArnException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "ListKeyPolicies":{
      "name":"ListKeyPolicies",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ListKeyPoliciesRequest"},
      "output":{"shape":"ListKeyPoliciesResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "ListKeyRotations":{
      "name":"ListKeyRotations",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ListKeyRotationsRequest"},
      "output":{"shape":"ListKeyRotationsResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"InvalidMarkerException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"UnsupportedOperationException"}
      ]
    },
    "ListKeys":{
      "name":"ListKeys",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ListKeysRequest"},
      "output":{"shape":"ListKeysResponse"},
      "errors":[
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"InvalidMarkerException"}
      ]
    },
    "ListResourceTags":{
      "name":"ListResourceTags",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ListResourceTagsRequest"},
      "output":{"shape":"ListResourceTagsResponse"},
      "errors":[
        {"shape":"KMSInternalException"},
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"InvalidMarkerException"}
      ]
    },
    "ListRetirableGrants":{
      "name":"ListRetirableGrants",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ListRetirableGrantsRequest"},
      "output":{"shape":"ListGrantsResponse"},
      "errors":[
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidMarkerException"},
        {"shape":"InvalidArnException"},
        {"shape":"NotFoundException"},
        {"shape":"KMSInternalException"}
      ]
    },
    "PutKeyPolicy":{
      "name":"PutKeyPolicy",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"PutKeyPolicyRequest"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"MalformedPolicyDocumentException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"KMSInternalException"},
        {"shape":"LimitExceededException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "ReEncrypt":{
      "name":"ReEncrypt",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ReEncryptRequest"},
      "output":{"shape":"ReEncryptResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"InvalidCiphertextException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"IncorrectKeyException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "ReplicateKey":{
      "name":"ReplicateKey",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ReplicateKeyRequest"},
      "output":{"shape":"ReplicateKeyResponse"},
      "errors":[
        {"shape":"AlreadyExistsException"},
        {"shape":"DisabledException"},
        {"shape":"InvalidArnException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"KMSInternalException"},
        {"shape":"LimitExceededException"},
        {"shape":"MalformedPolicyDocumentException"},
        {"shape":"NotFoundException"},
        {"shape":"TagException"},
        {"shape":"UnsupportedOperationException"}
      ]
    },
    "RetireGrant":{
      "name":"RetireGrant",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"RetireGrantRequest"},
      "errors":[
        {"shape":"InvalidArnException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"InvalidGrantIdException"},
        {"shape":"NotFoundException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "RevokeGrant":{
      "name":"RevokeGrant",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"RevokeGrantRequest"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidArnException"},
        {"shape":"InvalidGrantIdException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "RotateKeyOnDemand":{
      "name":"RotateKeyOnDemand",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"RotateKeyOnDemandRequest"},
      "output":{"shape":"RotateKeyOnDemandResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"UnsupportedOperationException"},
        {"shape":"LimitExceededException"},
        {"shape":"ConflictException"}
      ]
    },
    "ScheduleKeyDeletion":{
      "name":"ScheduleKeyDeletion",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"ScheduleKeyDeletionRequest"},
      "output":{"shape":"ScheduleKeyDeletionResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "Sign":{
      "name":"Sign",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"SignRequest"},
      "output":{"shape":"SignResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "TagResource":{
      "name":"TagResource",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"TagResourceRequest"},
      "errors":[
        {"shape":"KMSInternalException"},
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"LimitExceededException"},
        {"shape":"TagException"}
      ]
    },
    "UntagResource":{
      "name":"UntagResource",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"UntagResourceRequest"},
      "errors":[
        {"shape":"KMSInternalException"},
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"TagException"}
      ]
    },
    "UpdateAlias":{
      "name":"UpdateAlias",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"UpdateAliasRequest"},
      "errors":[
        {"shape":"DependencyTimeoutException"},
        {"shape":"NotFoundException"},
        {"shape":"KMSInternalException"},
        {"shape":"LimitExceededException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "UpdateCustomKeyStore":{
      "name":"UpdateCustomKeyStore",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"UpdateCustomKeyStoreRequest"},
      "output":{"shape":"UpdateCustomKeyStoreResponse"},
      "errors":[
        {"shape":"CustomKeyStoreNotFoundException"},
        {"shape":"CustomKeyStoreNameInUseException"},
        {"shape":"CloudHsmClusterNotFoundException"},
        {"shape":"CloudHsmClusterNotRelatedException"},
        {"shape":"CustomKeyStoreInvalidStateException"},
        {"shape":"KMSInternalException"},
        {"shape":"CloudHsmClusterNotActiveException"},
        {"shape":"CloudHsmClusterInvalidConfigurationException"},
        {"shape":"XksProxyUriInUseException"},
        {"shape":"XksProxyUriEndpointInUseException"},
        {"shape":"XksProxyUriUnreachableException"},
        {"shape":"XksProxyIncorrectAuthenticationCredentialException"},
        {"shape":"XksProxyVpcEndpointServiceInUseException"},
        {"shape":"XksProxyVpcEndpointServiceNotFoundException"},
        {"shape":"XksProxyVpcEndpointServiceInvalidConfigurationException"},
        {"shape":"XksProxyInvalidResponseException"},
        {"shape":"XksProxyInvalidConfigurationException"}
      ]
    },
    "UpdateKeyDescription":{
      "name":"UpdateKeyDescription",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"UpdateKeyDescriptionRequest"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"InvalidArnException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"}
      ]
    },
    "UpdatePrimaryRegion":{
      "name":"UpdatePrimaryRegion",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"UpdatePrimaryRegionRequest"},
      "errors":[
        {"shape":"DisabledException"},
        {"shape":"InvalidArnException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"KMSInternalException"},
        {"shape":"NotFoundException"},
        {"shape":"UnsupportedOperationException"}
      ]
    },
    "Verify":{
      "name":"Verify",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"VerifyRequest"},
      "output":{"shape":"VerifyResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"DependencyTimeoutException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"KMSInvalidSignatureException"},
        {"shape":"DryRunOperationException"}
      ]
    },
    "VerifyMac":{
      "name":"VerifyMac",
      "http":{
        "method":"POST",
        "requestUri":"/"
      },
      "input":{"shape":"VerifyMacRequest"},
      "output":{"shape":"VerifyMacResponse"},
      "errors":[
        {"shape":"NotFoundException"},
        {"shape":"DisabledException"},
        {"shape":"KeyUnavailableException"},
        {"shape":"InvalidKeyUsageException"},
        {"shape":"InvalidGrantTokenException"},
        {"shape":"KMSInternalException"},
        {"shape":"KMSInvalidMacException"},
        {"shape":"KMSInvalidStateException"},
        {"shape":"DryRunOperationException"}
      ]
    }
  },
  "shapes":{
    "AWSAccountIdType":{"type":"string"},
    "AlgorithmSpec":{
      "type":"string",
      "enum":[
        "RSAES_PKCS1_V1_5",
        "RSAES_OAEP_SHA_1",
        "RSAES_OAEP_SHA_256",
        "RSA_AES_KEY_WRAP_SHA_1",
        "RSA_AES_KEY_WRAP_SHA_256",
        "SM2PKE"
      ]
    },
    "AliasList":{
      "type":"list",
      "member":{"shape":"AliasListEntry"}
    },
    "AliasListEntry":{
      "type":"structure",
      "members":{
        "AliasName":{"shape":"AliasNameType"},
        "AliasArn":{"shape":"ArnType"},
        "TargetKeyId":{"shape":"KeyIdType"},
        "CreationDate":{"shape":"DateType"},
        "LastUpdatedDate":{"shape":"DateType"}
      }
    },
    "AliasNameType":{
      "type":"string",
      "max":256,
      "min":1,
      "pattern":"^[a-zA-Z0-9:/_-]+$"
    },
    "AlreadyExistsException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "ArnType":{
      "type":"string",
      "max":2048,
      "min":20
    },
    "AttestationDocumentType":{
      "type":"blob",
      "max":262144,
      "min":1
    },
    "BooleanType":{"type":"boolean"},
    "CancelKeyDeletionRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "CancelKeyDeletionResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "CiphertextType":{
      "type":"blob",
      "max":6144,
      "min":1
    },
    "CloudHsmClusterIdType":{
      "type":"string",
      "max":24,
      "min":19,
      "pattern":"cluster-[2-7a-zA-Z]{11,16}"
    },
    "CloudHsmClusterInUseException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "CloudHsmClusterInvalidConfigurationException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "CloudHsmClusterNotActiveException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "CloudHsmClusterNotFoundException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "CloudHsmClusterNotRelatedException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "ConflictException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "ConnectCustomKeyStoreRequest":{
      "type":"structure",
      "required":["CustomKeyStoreId"],
      "members":{
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"}
      }
    },
    "ConnectCustomKeyStoreResponse":{
      "type":"structure",
      "members":{
      }
    },
    "ConnectionErrorCodeType":{
      "type":"string",
      "enum":[
        "INVALID_CREDENTIALS",
        "CLUSTER_NOT_FOUND",
        "NETWORK_ERRORS",
        "INTERNAL_ERROR",
        "INSUFFICIENT_CLOUDHSM_HSMS",
        "USER_LOCKED_OUT",
        "USER_NOT_FOUND",
        "USER_LOGGED_IN",
        "SUBNET_NOT_FOUND",
        "INSUFFICIENT_FREE_ADDRESSES_IN_SUBNET",
        "XKS_PROXY_ACCESS_DENIED",
        "XKS_PROXY_NOT_REACHABLE",
        "XKS_VPC_ENDPOINT_SERVICE_NOT_FOUND",
        "XKS_PROXY_INVALID_RESPONSE",
        "XKS_PROXY_INVALID_CONFIGURATION",
        "XKS_VPC_ENDPOINT_SERVICE_INVALID_CONFIGURATION",
        "XKS_PROXY_TIMED_OUT",
        "XKS_PROXY_INVALID_TLS_CONFIGURATION"
      ]
    },
    "ConnectionStateType":{
      "type":"string",
      "enum":[
        "CONNECTED",
        "CONNECTING",
        "FAILED",
        "DISCONNECTED",
        "DISCONNECTING"
      ]
    },
    "CreateAliasRequest":{
      "type":"structure",
      "required":[
        "AliasName",
        "TargetKeyId"
      ],
      "members":{
        "AliasName":{"shape":"AliasNameType"},
        "TargetKeyId":{"shape":"KeyIdType"}
      }
    },
    "CreateCustomKeyStoreRequest":{
      "type":"structure",
      "required":["CustomKeyStoreName"],
      "members":{
        "CustomKeyStoreName":{"shape":"CustomKeyStoreNameType"},
        "CloudHsmClusterId":{"shape":"CloudHsmClusterIdType"},
        "TrustAnchorCertificate":{"shape":"TrustAnchorCertificateType"},
        "KeyStorePassword":{"shape":"KeyStorePasswordType"},
        "CustomKeyStoreType":{"shape":"CustomKeyStoreType"},
        "XksProxyUriEndpoint":{"shape":"XksProxyUriEndpointType"},
        "XksProxyUriPath":{"shape":"XksProxyUriPathType"},
        "XksProxyVpcEndpointServiceName":{"shape":"XksProxyVpcEndpointServiceNameType"},
        "XksProxyAuthenticationCredential":{"shape":"XksProxyAuthenticationCredentialType"},
        "XksProxyConnectivity":{"shape":"XksProxyConnectivityType"}
      }
    },
    "CreateCustomKeyStoreResponse":{
      "type":"structure",
      "members":{
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"}
      }
    },
    "CreateGrantRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "GranteePrincipal",
        "Operations"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "GranteePrincipal":{"shape":"PrincipalIdType"},
        "RetiringPrincipal":{"shape":"PrincipalIdType"},
        "Operations":{"shape":"GrantOperationList"},
        "Constraints":{"shape":"GrantConstraints"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "Name":{"shape":"GrantNameType"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "CreateGrantResponse":{
      "type":"structure",
      "members":{
        "GrantToken":{"shape":"GrantTokenType"},
        "GrantId":{"shape":"GrantIdType"}
      }
    },
    "CreateKeyRequest":{
      "type":"structure",
      "members":{
        "Policy":{"shape":"PolicyType"},
        "Description":{"shape":"DescriptionType"},
        "KeyUsage":{"shape":"KeyUsageType"},
        "CustomerMasterKeySpec":{
          "shape":"CustomerMasterKeySpec",
          "deprecated":true,
          "deprecatedMessage":"This parameter has been deprecated. Instead, use the KeySpec parameter."
        },
        "KeySpec":{"shape":"KeySpec"},
        "Origin":{"shape":"OriginType"},
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"},
        "BypassPolicyLockoutSafetyCheck":{"shape":"BooleanType"},
        "Tags":{"shape":"TagList"},
        "MultiRegion":{"shape":"NullableBooleanType"},
        "XksKeyId":{"shape":"XksKeyIdType"}
      }
    },
    "CreateKeyResponse":{
      "type":"structure",
      "members":{
        "KeyMetadata":{"shape":"KeyMetadata"}
      }
    },
    "CustomKeyStoreHasCMKsException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "CustomKeyStoreIdType":{
      "type":"string",
      "max":64,
      "min":1
    },
    "CustomKeyStoreInvalidStateException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "CustomKeyStoreNameInUseException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "CustomKeyStoreNameType":{
      "type":"string",
      "max":256,
      "min":1
    },
    "CustomKeyStoreNotFoundException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "CustomKeyStoreType":{
      "type":"string",
      "enum":[
        "AWS_CLOUDHSM",
        "EXTERNAL_KEY_STORE"
      ]
    },
    "CustomKeyStoresList":{
      "type":"list",
      "member":{"shape":"CustomKeyStoresListEntry"}
    },
    "CustomKeyStoresListEntry":{
      "type":"structure",
      "members":{
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"},
        "CustomKeyStoreName":{"shape":"CustomKeyStoreNameType"},
        "CloudHsmClusterId":{"shape":"CloudHsmClusterIdType"},
        "TrustAnchorCertificate":{"shape":"TrustAnchorCertificateType"},
        "ConnectionState":{"shape":"ConnectionStateType"},
        "ConnectionErrorCode":{"shape":"ConnectionErrorCodeType"},
        "CreationDate":{"shape":"DateType"},
        "CustomKeyStoreType":{"shape":"CustomKeyStoreType"},
        "XksProxyConfiguration":{"shape":"XksProxyConfigurationType"}
      }
    },
    "CustomerMasterKeySpec":{
      "type":"string",
      "deprecated":true,
      "deprecatedMessage":"This enum has been deprecated. Instead, use the KeySpec enum.",
      "enum":[
        "RSA_2048",
        "RSA_3072",
        "RSA_4096",
        "ECC_NIST_P256",
        "ECC_NIST_P384",
        "ECC_NIST_P521",
        "ECC_SECG_P256K1",
        "SYMMETRIC_DEFAULT",
        "HMAC_224",
        "HMAC_256",
        "HMAC_384",
        "HMAC_512",
        "SM2"
      ]
    },
    "DataKeyPairSpec":{
      "type":"string",
      "enum":[
        "RSA_2048",
        "RSA_3072",
        "RSA_4096",
        "ECC_NIST_P256",
        "ECC_NIST_P384",
        "ECC_NIST_P521",
        "ECC_SECG_P256K1",
        "SM2"
      ]
    },
    "DataKeySpec":{
      "type":"string",
      "enum":[
        "AES_256",
        "AES_128"
      ]
    },
    "DateType":{"type":"timestamp"},
    "DecryptRequest":{
      "type":"structure",
      "required":["CiphertextBlob"],
      "members":{
        "CiphertextBlob":{"shape":"CiphertextType"},
        "EncryptionContext":{"shape":"EncryptionContextType"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "KeyId":{"shape":"KeyIdType"},
        "EncryptionAlgorithm":{"shape":"EncryptionAlgorithmSpec"},
        "Recipient":{"shape":"RecipientInfo"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "DecryptResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Plaintext":{"shape":"PlaintextType"},
        "EncryptionAlgorithm":{"shape":"EncryptionAlgorithmSpec"},
        "CiphertextForRecipient":{"shape":"CiphertextType"}
      }
    },
    "DeleteAliasRequest":{
      "type":"structure",
      "required":["AliasName"],
      "members":{
        "AliasName":{"shape":"AliasNameType"}
      }
    },
    "DeleteCustomKeyStoreRequest":{
      "type":"structure",
      "required":["CustomKeyStoreId"],
      "members":{
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"}
      }
    },
    "DeleteCustomKeyStoreResponse":{
      "type":"structure",
      "members":{
      }
    },
    "DeleteImportedKeyMaterialRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "DependencyTimeoutException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true,
      "fault":true
    },
    "DeriveSharedSecretRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "KeyAgreementAlgorithm",
        "PublicKey"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "KeyAgreementAlgorithm":{"shape":"KeyAgreementAlgorithmSpec"},
        "PublicKey":{"shape":"PublicKeyType"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "DryRun":{"shape":"NullableBooleanType"},
        "Recipient":{"shape":"RecipientInfo"}
      }
    },
    "DeriveSharedSecretResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "SharedSecret":{"shape":"PlaintextType"},
        "CiphertextForRecipient":{"shape":"CiphertextType"},
        "KeyAgreementAlgorithm":{"shape":"KeyAgreementAlgorithmSpec"},
        "KeyOrigin":{"shape":"OriginType"}
      }
    },
    "DescribeCustomKeyStoresRequest":{
      "type":"structure",
      "members":{
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"},
        "CustomKeyStoreName":{"shape":"CustomKeyStoreNameType"},
        "Limit":{"shape":"LimitType"},
        "Marker":{"shape":"MarkerType"}
      }
    },
    "DescribeCustomKeyStoresResponse":{
      "type":"structure",
      "members":{
        "CustomKeyStores":{"shape":"CustomKeyStoresList"},
        "NextMarker":{"shape":"MarkerType"},
        "Truncated":{"shape":"BooleanType"}
      }
    },
    "DescribeKeyRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "GrantTokens":{"shape":"GrantTokenList"}
      }
    },
    "DescribeKeyResponse":{
      "type":"structure",
      "members":{
        "KeyMetadata":{"shape":"KeyMetadata"}
      }
    },
    "DescriptionType":{
      "type":"string",
      "max":8192,
      "min":0
    },
    "DisableKeyRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "DisableKeyRotationRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "DisabledException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "DisconnectCustomKeyStoreRequest":{
      "type":"structure",
      "required":["CustomKeyStoreId"],
      "members":{
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"}
      }
    },
    "DisconnectCustomKeyStoreResponse":{
      "type":"structure",
      "members":{
      }
    },
    "DryRunOperationException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "EnableKeyRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "EnableKeyRotationRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "RotationPeriodInDays":{"shape":"RotationPeriodInDaysType"}
      }
    },
    "EncryptRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "Plaintext"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Plaintext":{"shape":"PlaintextType"},
        "EncryptionContext":{"shape":"EncryptionContextType"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "EncryptionAlgorithm":{"shape":"EncryptionAlgorithmSpec"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "EncryptResponse":{
      "type":"structure",
      "members":{
        "CiphertextBlob":{"shape":"CiphertextType"},
        "KeyId":{"shape":"KeyIdType"},
        "EncryptionAlgorithm":{"shape":"EncryptionAlgorithmSpec"}
      }
    },
    "EncryptionAlgorithmSpec":{
      "type":"string",
      "enum":[
        "SYMMETRIC_DEFAULT",
        "RSAES_OAEP_SHA_1",
        "RSAES_OAEP_SHA_256",
        "SM2PKE"
      ]
    },
    "EncryptionAlgorithmSpecList":{
      "type":"list",
      "member":{"shape":"EncryptionAlgorithmSpec"}
    },
    "EncryptionContextKey":{"type":"string"},
    "EncryptionContextType":{
      "type":"map",
      "key":{"shape":"EncryptionContextKey"},
      "value":{"shape":"EncryptionContextValue"}
    },
    "EncryptionContextValue":{"type":"string"},
    "ErrorMessageType":{"type":"string"},
    "ExpirationModelType":{
      "type":"string",
      "enum":[
        "KEY_MATERIAL_EXPIRES",
        "KEY_MATERIAL_DOES_NOT_EXPIRE"
      ]
    },
    "ExpiredImportTokenException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "GenerateDataKeyPairRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "KeyPairSpec"
      ],
      "members":{
        "EncryptionContext":{"shape":"EncryptionContextType"},
        "KeyId":{"shape":"KeyIdType"},
        "KeyPairSpec":{"shape":"DataKeyPairSpec"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "Recipient":{"shape":"RecipientInfo"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "GenerateDataKeyPairResponse":{
      "type":"structure",
      "members":{
        "PrivateKeyCiphertextBlob":{"shape":"CiphertextType"},
        "PrivateKeyPlaintext":{"shape":"PlaintextType"},
        "PublicKey":{"shape":"PublicKeyType"},
        "KeyId":{"shape":"KeyIdType"},
        "KeyPairSpec":{"shape":"DataKeyPairSpec"},
        "CiphertextForRecipient":{"shape":"CiphertextType"}
      }
    },
    "GenerateDataKeyPairWithoutPlaintextRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "KeyPairSpec"
      ],
      "members":{
        "EncryptionContext":{"shape":"EncryptionContextType"},
        "KeyId":{"shape":"KeyIdType"},
        "KeyPairSpec":{"shape":"DataKeyPairSpec"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "GenerateDataKeyPairWithoutPlaintextResponse":{
      "type":"structure",
      "members":{
        "PrivateKeyCiphertextBlob":{"shape":"CiphertextType"},
        "PublicKey":{"shape":"PublicKeyType"},
        "KeyId":{"shape":"KeyIdType"},
        "KeyPairSpec":{"shape":"DataKeyPairSpec"}
      }
    },
    "GenerateDataKeyRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "EncryptionContext":{"shape":"EncryptionContextType"},
        "NumberOfBytes":{"shape":"NumberOfBytesType"},
        "KeySpec":{"shape":"DataKeySpec"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "Recipient":{"shape":"RecipientInfo"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "GenerateDataKeyResponse":{
      "type":"structure",
      "members":{
        "CiphertextBlob":{"shape":"CiphertextType"},
        "Plaintext":{"shape":"PlaintextType"},
        "KeyId":{"shape":"KeyIdType"},
        "CiphertextForRecipient":{"shape":"CiphertextType"}
      }
    },
    "GenerateDataKeyWithoutPlaintextRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "EncryptionContext":{"shape":"EncryptionContextType"},
        "KeySpec":{"shape":"DataKeySpec"},
        "NumberOfBytes":{"shape":"NumberOfBytesType"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "GenerateDataKeyWithoutPlaintextResponse":{
      "type":"structure",
      "members":{
        "CiphertextBlob":{"shape":"CiphertextType"},
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "GenerateMacRequest":{
      "type":"structure",
      "required":[
        "Message",
        "KeyId",
        "MacAlgorithm"
      ],
      "members":{
        "Message":{"shape":"PlaintextType"},
        "KeyId":{"shape":"KeyIdType"},
        "MacAlgorithm":{"shape":"MacAlgorithmSpec"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "GenerateMacResponse":{
      "type":"structure",
      "members":{
        "Mac":{"shape":"CiphertextType"},
        "MacAlgorithm":{"shape":"MacAlgorithmSpec"},
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "GenerateRandomRequest":{
      "type":"structure",
      "members":{
        "NumberOfBytes":{"shape":"NumberOfBytesType"},
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"},
        "Recipient":{"shape":"RecipientInfo"}
      }
    },
    "GenerateRandomResponse":{
      "type":"structure",
      "members":{
        "Plaintext":{"shape":"PlaintextType"},
        "CiphertextForRecipient":{"shape":"CiphertextType"}
      }
    },
    "GetKeyPolicyRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "PolicyName":{"shape":"PolicyNameType"}
      }
    },
    "GetKeyPolicyResponse":{
      "type":"structure",
      "members":{
        "Policy":{"shape":"PolicyType"},
        "PolicyName":{"shape":"PolicyNameType"}
      }
    },
    "GetKeyRotationStatusRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "GetKeyRotationStatusResponse":{
      "type":"structure",
      "members":{
        "KeyRotationEnabled":{"shape":"BooleanType"},
        "KeyId":{"shape":"KeyIdType"},
        "RotationPeriodInDays":{"shape":"RotationPeriodInDaysType"},
        "NextRotationDate":{"shape":"DateType"},
        "OnDemandRotationStartDate":{"shape":"DateType"}
      }
    },
    "GetParametersForImportRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "WrappingAlgorithm",
        "WrappingKeySpec"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "WrappingAlgorithm":{"shape":"AlgorithmSpec"},
        "WrappingKeySpec":{"shape":"WrappingKeySpec"}
      }
    },
    "GetParametersForImportResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "ImportToken":{"shape":"CiphertextType"},
        "PublicKey":{"shape":"PlaintextType"},
        "ParametersValidTo":{"shape":"DateType"}
      }
    },
    "GetPublicKeyRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "GrantTokens":{"shape":"GrantTokenList"}
      }
    },
    "GetPublicKeyResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "PublicKey":{"shape":"PublicKeyType"},
        "CustomerMasterKeySpec":{
          "shape":"CustomerMasterKeySpec",
          "deprecated":true,
          "deprecatedMessage":"This field has been deprecated. Instead, use the KeySpec field."
        },
        "KeySpec":{"shape":"KeySpec"},
        "KeyUsage":{"shape":"KeyUsageType"},
        "EncryptionAlgorithms":{"shape":"EncryptionAlgorithmSpecList"},
        "SigningAlgorithms":{"shape":"SigningAlgorithmSpecList"},
        "KeyAgreementAlgorithms":{"shape":"KeyAgreementAlgorithmSpecList"}
      }
    },
    "GrantConstraints":{
      "type":"structure",
      "members":{
        "EncryptionContextSubset":{"shape":"EncryptionContextType"},
        "EncryptionContextEquals":{"shape":"EncryptionContextType"}
      }
    },
    "GrantIdType":{
      "type":"string",
      "max":128,
      "min":1
    },
    "GrantList":{
      "type":"list",
      "member":{"shape":"GrantListEntry"}
    },
    "GrantListEntry":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "GrantId":{"shape":"GrantIdType"},
        "Name":{"shape":"GrantNameType"},
        "CreationDate":{"shape":"DateType"},
        "GranteePrincipal":{"shape":"PrincipalIdType"},
        "RetiringPrincipal":{"shape":"PrincipalIdType"},
        "IssuingAccount":{"shape":"PrincipalIdType"},
        "Operations":{"shape":"GrantOperationList"},
        "Constraints":{"shape":"GrantConstraints"}
      }
    },
    "GrantNameType":{
      "type":"string",
      "max":256,
      "min":1,
      "pattern":"^[a-zA-Z0-9:/_-]+$"
    },
    "GrantOperation":{
      "type":"string",
      "enum":[
        "Decrypt",
        "Encrypt",
        "GenerateDataKey",
        "GenerateDataKeyWithoutPlaintext",
        "ReEncryptFrom",
        "ReEncryptTo",
        "Sign",
        "Verify",
        "GetPublicKey",
        "CreateGrant",
        "RetireGrant",
        "DescribeKey",
        "GenerateDataKeyPair",
        "GenerateDataKeyPairWithoutPlaintext",
        "GenerateMac",
        "VerifyMac",
        "DeriveSharedSecret"
      ]
    },
    "GrantOperationList":{
      "type":"list",
      "member":{"shape":"GrantOperation"}
    },
    "GrantTokenList":{
      "type":"list",
      "member":{"shape":"GrantTokenType"},
      "max":10,
      "min":0
    },
    "GrantTokenType":{
      "type":"string",
      "max":8192,
      "min":1
    },
    "ImportKeyMaterialRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "ImportToken",
        "EncryptedKeyMaterial"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "ImportToken":{"shape":"CiphertextType"},
        "EncryptedKeyMaterial":{"shape":"CiphertextType"},
        "ValidTo":{"shape":"DateType"},
        "ExpirationModel":{"shape":"ExpirationModelType"}
      }
    },
    "ImportKeyMaterialResponse":{
      "type":"structure",
      "members":{
      }
    },
    "IncorrectKeyException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "IncorrectKeyMaterialException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "IncorrectTrustAnchorException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "InvalidAliasNameException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "InvalidArnException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "InvalidCiphertextException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "InvalidGrantIdException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "InvalidGrantTokenException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "InvalidImportTokenException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "InvalidKeyUsageException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "InvalidMarkerException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "KMSInternalException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true,
      "fault":true
    },
    "KMSInvalidMacException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "KMSInvalidSignatureException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "KMSInvalidStateException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "KeyAgreementAlgorithmSpec":{
      "type":"string",
      "enum":["ECDH"]
    },
    "KeyAgreementAlgorithmSpecList":{
      "type":"list",
      "member":{"shape":"KeyAgreementAlgorithmSpec"}
    },
    "KeyEncryptionMechanism":{
      "type":"string",
      "enum":["RSAES_OAEP_SHA_256"]
    },
    "KeyIdType":{
      "type":"string",
      "max":2048,
      "min":1
    },
    "KeyList":{
      "type":"list",
      "member":{"shape":"KeyListEntry"}
    },
    "KeyListEntry":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "KeyArn":{"shape":"ArnType"}
      }
    },
    "KeyManagerType":{
      "type":"string",
      "enum":[
        "AWS",
        "CUSTOMER"
      ]
    },
    "KeyMetadata":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "AWSAccountId":{"shape":"AWSAccountIdType"},
        "KeyId":{"shape":"KeyIdType"},
        "Arn":{"shape":"ArnType"},
        "CreationDate":{"shape":"DateType"},
        "Enabled":{"shape":"BooleanType"},
        "Description":{"shape":"DescriptionType"},
        "KeyUsage":{"shape":"KeyUsageType"},
        "KeyState":{"shape":"KeyState"},
        "DeletionDate":{"shape":"DateType"},
        "ValidTo":{"shape":"DateType"},
        "Origin":{"shape":"OriginType"},
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"},
        "CloudHsmClusterId":{"shape":"CloudHsmClusterIdType"},
        "ExpirationModel":{"shape":"ExpirationModelType"},
        "KeyManager":{"shape":"KeyManagerType"},
        "CustomerMasterKeySpec":{
          "shape":"CustomerMasterKeySpec",
          "deprecated":true,
          "deprecatedMessage":"This field has been deprecated. Instead, use the KeySpec field."
        },
        "KeySpec":{"shape":"KeySpec"},
        "EncryptionAlgorithms":{"shape":"EncryptionAlgorithmSpecList"},
        "SigningAlgorithms":{"shape":"SigningAlgorithmSpecList"},
        "KeyAgreementAlgorithms":{"shape":"KeyAgreementAlgorithmSpecList"},
        "MultiRegion":{"shape":"NullableBooleanType"},
        "MultiRegionConfiguration":{"shape":"MultiRegionConfiguration"},
        "PendingDeletionWindowInDays":{"shape":"PendingWindowInDaysType"},
        "MacAlgorithms":{"shape":"MacAlgorithmSpecList"},
        "XksKeyConfiguration":{"shape":"XksKeyConfigurationType"}
      }
    },
    "KeySpec":{
      "type":"string",
      "enum":[
        "RSA_2048",
        "RSA_3072",
        "RSA_4096",
        "ECC_NIST_P256",
        "ECC_NIST_P384",
        "ECC_NIST_P521",
        "ECC_SECG_P256K1",
        "SYMMETRIC_DEFAULT",
        "HMAC_224",
        "HMAC_256",
        "HMAC_384",
        "HMAC_512",
        "SM2"
      ]
    },
    "KeyState":{
      "type":"string",
      "enum":[
        "Creating",
        "Enabled",
        "Disabled",
        "PendingDeletion",
        "PendingImport",
        "PendingReplicaDeletion",
        "Unavailable",
        "Updating"
      ]
    },
    "KeyStorePasswordType":{
      "type":"string",
      "max":32,
      "min":7,
      "sensitive":true
    },
    "KeyUnavailableException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true,
      "fault":true
    },
    "KeyUsageType":{
      "type":"string",
      "enum":[
        "SIGN_VERIFY",
        "ENCRYPT_DECRYPT",
        "GENERATE_VERIFY_MAC",
        "KEY_AGREEMENT"
      ]
    },
    "LimitExceededException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "LimitType":{
      "type":"integer",
      "max":1000,
      "min":1
    },
    "ListAliasesRequest":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Limit":{"shape":"LimitType"},
        "Marker":{"shape":"MarkerType"}
      }
    },
    "ListAliasesResponse":{
      "type":"structure",
      "members":{
        "Aliases":{"shape":"AliasList"},
        "NextMarker":{"shape":"MarkerType"},
        "Truncated":{"shape":"BooleanType"}
      }
    },
    "ListGrantsRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "Limit":{"shape":"LimitType"},
        "Marker":{"shape":"MarkerType"},
        "KeyId":{"shape":"KeyIdType"},
        "GrantId":{"shape":"GrantIdType"},
        "GranteePrincipal":{"shape":"PrincipalIdType"}
      }
    },
    "ListGrantsResponse":{
      "type":"structure",
      "members":{
        "Grants":{"shape":"GrantList"},
        "NextMarker":{"shape":"MarkerType"},
        "Truncated":{"shape":"BooleanType"}
      }
    },
    "ListKeyPoliciesRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Limit":{"shape":"LimitType"},
        "Marker":{"shape":"MarkerType"}
      }
    },
    "ListKeyPoliciesResponse":{
      "type":"structure",
      "members":{
        "PolicyNames":{"shape":"PolicyNameList"},
        "NextMarker":{"shape":"MarkerType"},
        "Truncated":{"shape":"BooleanType"}
      }
    },
    "ListKeyRotationsRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Limit":{"shape":"LimitType"},
        "Marker":{"shape":"MarkerType"}
      }
    },
    "ListKeyRotationsResponse":{
      "type":"structure",
      "members":{
        "Rotations":{"shape":"RotationsList"},
        "NextMarker":{"shape":"MarkerType"},
        "Truncated":{"shape":"BooleanType"}
      }
    },
    "ListKeysRequest":{
      "type":"structure",
      "members":{
        "Limit":{"shape":"LimitType"},
        "Marker":{"shape":"MarkerType"}
      }
    },
    "ListKeysResponse":{
      "type":"structure",
      "members":{
        "Keys":{"shape":"KeyList"},
        "NextMarker":{"shape":"MarkerType"},
        "Truncated":{"shape":"BooleanType"}
      }
    },
    "ListResourceTagsRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Limit":{"shape":"LimitType"},
        "Marker":{"shape":"MarkerType"}
      }
    },
    "ListResourceTagsResponse":{
      "type":"structure",
      "members":{
        "Tags":{"shape":"TagList"},
        "NextMarker":{"shape":"MarkerType"},
        "Truncated":{"shape":"BooleanType"}
      }
    },
    "ListRetirableGrantsRequest":{
      "type":"structure",
      "required":["RetiringPrincipal"],
      "members":{
        "Limit":{"shape":"LimitType"},
        "Marker":{"shape":"MarkerType"},
        "RetiringPrincipal":{"shape":"PrincipalIdType"}
      }
    },
    "MacAlgorithmSpec":{
      "type":"string",
      "enum":[
        "HMAC_SHA_224",
        "HMAC_SHA_256",
        "HMAC_SHA_384",
        "HMAC_SHA_512"
      ]
    },
    "MacAlgorithmSpecList":{
      "type":"list",
      "member":{"shape":"MacAlgorithmSpec"}
    },
    "MalformedPolicyDocumentException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "MarkerType":{
      "type":"string",
      "max":1024,
      "min":1,
      "pattern":"[\\u0020-\\u00FF]*"
    },
    "MessageType":{
      "type":"string",
      "enum":[
        "RAW",
        "DIGEST"
      ]
    },
    "MultiRegionConfiguration":{
      "type":"structure",
      "members":{
        "MultiRegionKeyType":{"shape":"MultiRegionKeyType"},
        "PrimaryKey":{"shape":"MultiRegionKey"},
        "ReplicaKeys":{"shape":"MultiRegionKeyList"}
      }
    },
    "MultiRegionKey":{
      "type":"structure",
      "members":{
        "Arn":{"shape":"ArnType"},
        "Region":{"shape":"RegionType"}
      }
    },
    "MultiRegionKeyList":{
      "type":"list",
      "member":{"shape":"MultiRegionKey"}
    },
    "MultiRegionKeyType":{
      "type":"string",
      "enum":[
        "PRIMARY",
        "REPLICA"
      ]
    },
    "NotFoundException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "NullableBooleanType":{"type":"boolean"},
    "NumberOfBytesType":{
      "type":"integer",
      "max":1024,
      "min":1
    },
    "OriginType":{
      "type":"string",
      "enum":[
        "AWS_KMS",
        "EXTERNAL",
        "AWS_CLOUDHSM",
        "EXTERNAL_KEY_STORE"
      ]
    },
    "PendingWindowInDaysType":{
      "type":"integer",
      "max":365,
      "min":1
    },
    "PlaintextType":{
      "type":"blob",
      "max":4096,
      "min":1,
      "sensitive":true
    },
    "PolicyNameList":{
      "type":"list",
      "member":{"shape":"PolicyNameType"}
    },
    "PolicyNameType":{
      "type":"string",
      "max":128,
      "min":1,
      "pattern":"[\\w]+"
    },
    "PolicyType":{
      "type":"string",
      "max":131072,
      "min":1,
      "pattern":"[\\u0009\\u000A\\u000D\\u0020-\\u00FF]+"
    },
    "PrincipalIdType":{
      "type":"string",
      "max":256,
      "min":1,
      "pattern":"^[\\w+=,.@:/-]+$"
    },
    "PublicKeyType":{
      "type":"blob",
      "max":8192,
      "min":1
    },
    "PutKeyPolicyRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "Policy"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "PolicyName":{"shape":"PolicyNameType"},
        "Policy":{"shape":"PolicyType"},
        "BypassPolicyLockoutSafetyCheck":{"shape":"BooleanType"}
      }
    },
    "ReEncryptRequest":{
      "type":"structure",
      "required":[
        "CiphertextBlob",
        "DestinationKeyId"
      ],
      "members":{
        "CiphertextBlob":{"shape":"CiphertextType"},
        "SourceEncryptionContext":{"shape":"EncryptionContextType"},
        "SourceKeyId":{"shape":"KeyIdType"},
        "DestinationKeyId":{"shape":"KeyIdType"},
        "DestinationEncryptionContext":{"shape":"EncryptionContextType"},
        "SourceEncryptionAlgorithm":{"shape":"EncryptionAlgorithmSpec"},
        "DestinationEncryptionAlgorithm":{"shape":"EncryptionAlgorithmSpec"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "ReEncryptResponse":{
      "type":"structure",
      "members":{
        "CiphertextBlob":{"shape":"CiphertextType"},
        "SourceKeyId":{"shape":"KeyIdType"},
        "KeyId":{"shape":"KeyIdType"},
        "SourceEncryptionAlgorithm":{"shape":"EncryptionAlgorithmSpec"},
        "DestinationEncryptionAlgorithm":{"shape":"EncryptionAlgorithmSpec"}
      }
    },
    "RecipientInfo":{
      "type":"structure",
      "members":{
        "KeyEncryptionAlgorithm":{"shape":"KeyEncryptionMechanism"},
        "AttestationDocument":{"shape":"AttestationDocumentType"}
      }
    },
    "RegionType":{
      "type":"string",
      "max":32,
      "min":1,
      "pattern":"^([a-z]+-){2,3}\\d+$"
    },
    "ReplicateKeyRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "ReplicaRegion"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "ReplicaRegion":{"shape":"RegionType"},
        "Policy":{"shape":"PolicyType"},
        "BypassPolicyLockoutSafetyCheck":{"shape":"BooleanType"},
        "Description":{"shape":"DescriptionType"},
        "Tags":{"shape":"TagList"}
      }
    },
    "ReplicateKeyResponse":{
      "type":"structure",
      "members":{
        "ReplicaKeyMetadata":{"shape":"KeyMetadata"},
        "ReplicaPolicy":{"shape":"PolicyType"},
        "ReplicaTags":{"shape":"TagList"}
      }
    },
    "RetireGrantRequest":{
      "type":"structure",
      "members":{
        "GrantToken":{"shape":"GrantTokenType"},
        "KeyId":{"shape":"KeyIdType"},
        "GrantId":{"shape":"GrantIdType"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "RevokeGrantRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "GrantId"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "GrantId":{"shape":"GrantIdType"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "RotateKeyOnDemandRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "RotateKeyOnDemandResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"}
      }
    },
    "RotationPeriodInDaysType":{
      "type":"integer",
      "max":2560,
      "min":90
    },
    "RotationType":{
      "type":"string",
      "enum":[
        "AUTOMATIC",
        "ON_DEMAND"
      ]
    },
    "RotationsList":{
      "type":"list",
      "member":{"shape":"RotationsListEntry"}
    },
    "RotationsListEntry":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "RotationDate":{"shape":"DateType"},
        "RotationType":{"shape":"RotationType"}
      }
    },
    "ScheduleKeyDeletionRequest":{
      "type":"structure",
      "required":["KeyId"],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "PendingWindowInDays":{"shape":"PendingWindowInDaysType"}
      }
    },
    "ScheduleKeyDeletionResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "DeletionDate":{"shape":"DateType"},
        "KeyState":{"shape":"KeyState"},
        "PendingWindowInDays":{"shape":"PendingWindowInDaysType"}
      }
    },
    "SignRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "Message",
        "SigningAlgorithm"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Message":{"shape":"PlaintextType"},
        "MessageType":{"shape":"MessageType"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "SigningAlgorithm":{"shape":"SigningAlgorithmSpec"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "SignResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Signature":{"shape":"CiphertextType"},
        "SigningAlgorithm":{"shape":"SigningAlgorithmSpec"}
      }
    },
    "SigningAlgorithmSpec":{
      "type":"string",
      "enum":[
        "RSASSA_PSS_SHA_256",
        "RSASSA_PSS_SHA_384",
        "RSASSA_PSS_SHA_512",
        "RSASSA_PKCS1_V1_5_SHA_256",
        "RSASSA_PKCS1_V1_5_SHA_384",
        "RSASSA_PKCS1_V1_5_SHA_512",
        "ECDSA_SHA_256",
        "ECDSA_SHA_384",
        "ECDSA_SHA_512",
        "SM2DSA"
      ]
    },
    "SigningAlgorithmSpecList":{
      "type":"list",
      "member":{"shape":"SigningAlgorithmSpec"}
    },
    "Tag":{
      "type":"structure",
      "required":[
        "TagKey",
        "TagValue"
      ],
      "members":{
        "TagKey":{"shape":"TagKeyType"},
        "TagValue":{"shape":"TagValueType"}
      }
    },
    "TagException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "TagKeyList":{
      "type":"list",
      "member":{"shape":"TagKeyType"}
    },
    "TagKeyType":{
      "type":"string",
      "max":128,
      "min":1
    },
    "TagList":{
      "type":"list",
      "member":{"shape":"Tag"}
    },
    "TagResourceRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "Tags"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Tags":{"shape":"TagList"}
      }
    },
    "TagValueType":{
      "type":"string",
      "max":256,
      "min":0
    },
    "TrustAnchorCertificateType":{
      "type":"string",
      "max":5000,
      "min":1
    },
    "UnsupportedOperationException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "UntagResourceRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "TagKeys"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "TagKeys":{"shape":"TagKeyList"}
      }
    },
    "UpdateAliasRequest":{
      "type":"structure",
      "required":[
        "AliasName",
        "TargetKeyId"
      ],
      "members":{
        "AliasName":{"shape":"AliasNameType"},
        "TargetKeyId":{"shape":"KeyIdType"}
      }
    },
    "UpdateCustomKeyStoreRequest":{
      "type":"structure",
      "required":["CustomKeyStoreId"],
      "members":{
        "CustomKeyStoreId":{"shape":"CustomKeyStoreIdType"},
        "NewCustomKeyStoreName":{"shape":"CustomKeyStoreNameType"},
        "KeyStorePassword":{"shape":"KeyStorePasswordType"},
        "CloudHsmClusterId":{"shape":"CloudHsmClusterIdType"},
        "XksProxyUriEndpoint":{"shape":"XksProxyUriEndpointType"},
        "XksProxyUriPath":{"shape":"XksProxyUriPathType"},
        "XksProxyVpcEndpointServiceName":{"shape":"XksProxyVpcEndpointServiceNameType"},
        "XksProxyAuthenticationCredential":{"shape":"XksProxyAuthenticationCredentialType"},
        "XksProxyConnectivity":{"shape":"XksProxyConnectivityType"}
      }
    },
    "UpdateCustomKeyStoreResponse":{
      "type":"structure",
      "members":{
      }
    },
    "UpdateKeyDescriptionRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "Description"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Description":{"shape":"DescriptionType"}
      }
    },
    "UpdatePrimaryRegionRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "PrimaryRegion"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "PrimaryRegion":{"shape":"RegionType"}
      }
    },
    "VerifyMacRequest":{
      "type":"structure",
      "required":[
        "Message",
        "KeyId",
        "MacAlgorithm",
        "Mac"
      ],
      "members":{
        "Message":{"shape":"PlaintextType"},
        "KeyId":{"shape":"KeyIdType"},
        "MacAlgorithm":{"shape":"MacAlgorithmSpec"},
        "Mac":{"shape":"CiphertextType"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "VerifyMacResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "MacValid":{"shape":"BooleanType"},
        "MacAlgorithm":{"shape":"MacAlgorithmSpec"}
      }
    },
    "VerifyRequest":{
      "type":"structure",
      "required":[
        "KeyId",
        "Message",
        "Signature",
        "SigningAlgorithm"
      ],
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "Message":{"shape":"PlaintextType"},
        "MessageType":{"shape":"MessageType"},
        "Signature":{"shape":"CiphertextType"},
        "SigningAlgorithm":{"shape":"SigningAlgorithmSpec"},
        "GrantTokens":{"shape":"GrantTokenList"},
        "DryRun":{"shape":"NullableBooleanType"}
      }
    },
    "VerifyResponse":{
      "type":"structure",
      "members":{
        "KeyId":{"shape":"KeyIdType"},
        "SignatureValid":{"shape":"BooleanType"},
        "SigningAlgorithm":{"shape":"SigningAlgorithmSpec"}
      }
    },
    "WrappingKeySpec":{
      "type":"string",
      "enum":[
        "RSA_2048",
        "RSA_3072",
        "RSA_4096",
        "SM2"
      ]
    },
    "XksKeyAlreadyInUseException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksKeyConfigurationType":{
      "type":"structure",
      "members":{
        "Id":{"shape":"XksKeyIdType"}
      }
    },
    "XksKeyIdType":{
      "type":"string",
      "max":128,
      "min":1,
      "pattern":"^[a-zA-Z0-9-_.]+$"
    },
    "XksKeyInvalidConfigurationException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksKeyNotFoundException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyAuthenticationAccessKeyIdType":{
      "type":"string",
      "max":30,
      "min":20,
      "pattern":"^[A-Z2-7]+$",
      "sensitive":true
    },
    "XksProxyAuthenticationCredentialType":{
      "type":"structure",
      "required":[
        "AccessKeyId",
        "RawSecretAccessKey"
      ],
      "members":{
        "AccessKeyId":{"shape":"XksProxyAuthenticationAccessKeyIdType"},
        "RawSecretAccessKey":{"shape":"XksProxyAuthenticationRawSecretAccessKeyType"}
      }
    },
    "XksProxyAuthenticationRawSecretAccessKeyType":{
      "type":"string",
      "max":64,
      "min":43,
      "pattern":"^[a-zA-Z0-9\\/+=]+$",
      "sensitive":true
    },
    "XksProxyConfigurationType":{
      "type":"structure",
      "members":{
        "Connectivity":{"shape":"XksProxyConnectivityType"},
        "AccessKeyId":{"shape":"XksProxyAuthenticationAccessKeyIdType"},
        "UriEndpoint":{"shape":"XksProxyUriEndpointType"},
        "UriPath":{"shape":"XksProxyUriPathType"},
        "VpcEndpointServiceName":{"shape":"XksProxyVpcEndpointServiceNameType"}
      }
    },
    "XksProxyConnectivityType":{
      "type":"string",
      "enum":[
        "PUBLIC_ENDPOINT",
        "VPC_ENDPOINT_SERVICE"
      ]
    },
    "XksProxyIncorrectAuthenticationCredentialException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyInvalidConfigurationException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyInvalidResponseException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyUriEndpointInUseException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyUriEndpointType":{
      "type":"string",
      "max":128,
      "min":10,
      "pattern":"^https://[a-zA-Z0-9.-]+$"
    },
    "XksProxyUriInUseException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyUriPathType":{
      "type":"string",
      "max":128,
      "min":10,
      "pattern":"^(/[a-zA-Z0-9\\/_-]+/kms/xks/v\\d{1,2})$|^(/kms/xks/v\\d{1,2})$"
    },
    "XksProxyUriUnreachableException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyVpcEndpointServiceInUseException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyVpcEndpointServiceInvalidConfigurationException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    },
    "XksProxyVpcEndpointServiceNameType":{
      "type":"string",
      "max":64,
      "min":20,
      "pattern":"^com\\.amazonaws\\.vpce\\.([a-z]+-){2,3}\\d+\\.vpce-svc-[0-9a-z]+$"
    },
    "XksProxyVpcEndpointServiceNotFoundException":{
      "type":"structure",
      "members":{
        "message":{"shape":"ErrorMessageType"}
      },
      "exception":true
    }
  }
}