/** * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. * SPDX-License-Identifier: Apache-2.0. */ #pragma once #include #include #include #include #include #include #include #include namespace Aws { namespace KMS { namespace Model { /** */ class AWS_KMS_API DecryptRequest : public KMSRequest { public: DecryptRequest(); // Service request name is the Operation name which will send this request out, // each operation should has unique request name, so that we can get operation's name from this request. // Note: this is not true for response, multiple operations may have the same response name, // so we can not get operation's name from response. inline virtual const char* GetServiceRequestName() const override { return "Decrypt"; } Aws::String SerializePayload() const override; Aws::Http::HeaderValueCollection GetRequestSpecificHeaders() const override; /** *

Ciphertext to be decrypted. The blob includes metadata.

*/ inline const Aws::Utils::ByteBuffer& GetCiphertextBlob() const{ return m_ciphertextBlob; } /** *

Ciphertext to be decrypted. The blob includes metadata.

*/ inline bool CiphertextBlobHasBeenSet() const { return m_ciphertextBlobHasBeenSet; } /** *

Ciphertext to be decrypted. The blob includes metadata.

*/ inline void SetCiphertextBlob(const Aws::Utils::ByteBuffer& value) { m_ciphertextBlobHasBeenSet = true; m_ciphertextBlob = value; } /** *

Ciphertext to be decrypted. The blob includes metadata.

*/ inline void SetCiphertextBlob(Aws::Utils::ByteBuffer&& value) { m_ciphertextBlobHasBeenSet = true; m_ciphertextBlob = std::move(value); } /** *

Ciphertext to be decrypted. The blob includes metadata.

*/ inline DecryptRequest& WithCiphertextBlob(const Aws::Utils::ByteBuffer& value) { SetCiphertextBlob(value); return *this;} /** *

Ciphertext to be decrypted. The blob includes metadata.

*/ inline DecryptRequest& WithCiphertextBlob(Aws::Utils::ByteBuffer&& value) { SetCiphertextBlob(std::move(value)); return *this;} /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline const Aws::Map& GetEncryptionContext() const{ return m_encryptionContext; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline bool EncryptionContextHasBeenSet() const { return m_encryptionContextHasBeenSet; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline void SetEncryptionContext(const Aws::Map& value) { m_encryptionContextHasBeenSet = true; m_encryptionContext = value; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline void SetEncryptionContext(Aws::Map&& value) { m_encryptionContextHasBeenSet = true; m_encryptionContext = std::move(value); } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& WithEncryptionContext(const Aws::Map& value) { SetEncryptionContext(value); return *this;} /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& WithEncryptionContext(Aws::Map&& value) { SetEncryptionContext(std::move(value)); return *this;} /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddEncryptionContext(const Aws::String& key, const Aws::String& value) { m_encryptionContextHasBeenSet = true; m_encryptionContext.emplace(key, value); return *this; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddEncryptionContext(Aws::String&& key, const Aws::String& value) { m_encryptionContextHasBeenSet = true; m_encryptionContext.emplace(std::move(key), value); return *this; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddEncryptionContext(const Aws::String& key, Aws::String&& value) { m_encryptionContextHasBeenSet = true; m_encryptionContext.emplace(key, std::move(value)); return *this; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddEncryptionContext(Aws::String&& key, Aws::String&& value) { m_encryptionContextHasBeenSet = true; m_encryptionContext.emplace(std::move(key), std::move(value)); return *this; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddEncryptionContext(const char* key, Aws::String&& value) { m_encryptionContextHasBeenSet = true; m_encryptionContext.emplace(key, std::move(value)); return *this; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddEncryptionContext(Aws::String&& key, const char* value) { m_encryptionContextHasBeenSet = true; m_encryptionContext.emplace(std::move(key), value); return *this; } /** *

Specifies the encryption context to use when decrypting the data. An * encryption context is valid only for cryptographic * operations with a symmetric CMK. The standard asymmetric encryption * algorithms that AWS KMS uses do not support an encryption context.

An * encryption context is a collection of non-secret key-value pairs that * represents additional authenticated data. When you use an encryption context to * encrypt data, you must specify the same (an exact case-sensitive match) * encryption context to decrypt the data. An encryption context is optional when * encrypting with a symmetric CMK, but it is highly recommended.

For more * information, see Encryption * Context in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddEncryptionContext(const char* key, const char* value) { m_encryptionContextHasBeenSet = true; m_encryptionContext.emplace(key, value); return *this; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline const Aws::Vector& GetGrantTokens() const{ return m_grantTokens; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline bool GrantTokensHasBeenSet() const { return m_grantTokensHasBeenSet; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline void SetGrantTokens(const Aws::Vector& value) { m_grantTokensHasBeenSet = true; m_grantTokens = value; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline void SetGrantTokens(Aws::Vector&& value) { m_grantTokensHasBeenSet = true; m_grantTokens = std::move(value); } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& WithGrantTokens(const Aws::Vector& value) { SetGrantTokens(value); return *this;} /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& WithGrantTokens(Aws::Vector&& value) { SetGrantTokens(std::move(value)); return *this;} /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddGrantTokens(const Aws::String& value) { m_grantTokensHasBeenSet = true; m_grantTokens.push_back(value); return *this; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddGrantTokens(Aws::String&& value) { m_grantTokensHasBeenSet = true; m_grantTokens.push_back(std::move(value)); return *this; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline DecryptRequest& AddGrantTokens(const char* value) { m_grantTokensHasBeenSet = true; m_grantTokens.push_back(value); return *this; } /** *

Specifies the customer master key (CMK) that AWS KMS will use to decrypt the * ciphertext. Enter a key ID of the CMK that was used to encrypt the * ciphertext.

If you specify a KeyId value, the * Decrypt operation succeeds only if the specified CMK was used to * encrypt the ciphertext.

This parameter is required only when the * ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the * metadata that it adds to the ciphertext blob to determine which CMK was used to * encrypt the ciphertext. However, you can use this parameter to ensure that a * particular CMK (of any kind) is used to decrypt the ciphertext.

To * specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias * ARN. When using an alias name, prefix it with "alias/".

For * example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline const Aws::String& GetKeyId() const{ return m_keyId; } /** *

Specifies the customer master key (CMK) that AWS KMS will use to decrypt the * ciphertext. Enter a key ID of the CMK that was used to encrypt the * ciphertext.

If you specify a KeyId value, the * Decrypt operation succeeds only if the specified CMK was used to * encrypt the ciphertext.

This parameter is required only when the * ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the * metadata that it adds to the ciphertext blob to determine which CMK was used to * encrypt the ciphertext. However, you can use this parameter to ensure that a * particular CMK (of any kind) is used to decrypt the ciphertext.

To * specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias * ARN. When using an alias name, prefix it with "alias/".

For * example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline bool KeyIdHasBeenSet() const { return m_keyIdHasBeenSet; } /** *

Specifies the customer master key (CMK) that AWS KMS will use to decrypt the * ciphertext. Enter a key ID of the CMK that was used to encrypt the * ciphertext.

If you specify a KeyId value, the * Decrypt operation succeeds only if the specified CMK was used to * encrypt the ciphertext.

This parameter is required only when the * ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the * metadata that it adds to the ciphertext blob to determine which CMK was used to * encrypt the ciphertext. However, you can use this parameter to ensure that a * particular CMK (of any kind) is used to decrypt the ciphertext.

To * specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias * ARN. When using an alias name, prefix it with "alias/".

For * example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline void SetKeyId(const Aws::String& value) { m_keyIdHasBeenSet = true; m_keyId = value; } /** *

Specifies the customer master key (CMK) that AWS KMS will use to decrypt the * ciphertext. Enter a key ID of the CMK that was used to encrypt the * ciphertext.

If you specify a KeyId value, the * Decrypt operation succeeds only if the specified CMK was used to * encrypt the ciphertext.

This parameter is required only when the * ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the * metadata that it adds to the ciphertext blob to determine which CMK was used to * encrypt the ciphertext. However, you can use this parameter to ensure that a * particular CMK (of any kind) is used to decrypt the ciphertext.

To * specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias * ARN. When using an alias name, prefix it with "alias/".

For * example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline void SetKeyId(Aws::String&& value) { m_keyIdHasBeenSet = true; m_keyId = std::move(value); } /** *

Specifies the customer master key (CMK) that AWS KMS will use to decrypt the * ciphertext. Enter a key ID of the CMK that was used to encrypt the * ciphertext.

If you specify a KeyId value, the * Decrypt operation succeeds only if the specified CMK was used to * encrypt the ciphertext.

This parameter is required only when the * ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the * metadata that it adds to the ciphertext blob to determine which CMK was used to * encrypt the ciphertext. However, you can use this parameter to ensure that a * particular CMK (of any kind) is used to decrypt the ciphertext.

To * specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias * ARN. When using an alias name, prefix it with "alias/".

For * example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline void SetKeyId(const char* value) { m_keyIdHasBeenSet = true; m_keyId.assign(value); } /** *

Specifies the customer master key (CMK) that AWS KMS will use to decrypt the * ciphertext. Enter a key ID of the CMK that was used to encrypt the * ciphertext.

If you specify a KeyId value, the * Decrypt operation succeeds only if the specified CMK was used to * encrypt the ciphertext.

This parameter is required only when the * ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the * metadata that it adds to the ciphertext blob to determine which CMK was used to * encrypt the ciphertext. However, you can use this parameter to ensure that a * particular CMK (of any kind) is used to decrypt the ciphertext.

To * specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias * ARN. When using an alias name, prefix it with "alias/".

For * example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline DecryptRequest& WithKeyId(const Aws::String& value) { SetKeyId(value); return *this;} /** *

Specifies the customer master key (CMK) that AWS KMS will use to decrypt the * ciphertext. Enter a key ID of the CMK that was used to encrypt the * ciphertext.

If you specify a KeyId value, the * Decrypt operation succeeds only if the specified CMK was used to * encrypt the ciphertext.

This parameter is required only when the * ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the * metadata that it adds to the ciphertext blob to determine which CMK was used to * encrypt the ciphertext. However, you can use this parameter to ensure that a * particular CMK (of any kind) is used to decrypt the ciphertext.

To * specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias * ARN. When using an alias name, prefix it with "alias/".

For * example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline DecryptRequest& WithKeyId(Aws::String&& value) { SetKeyId(std::move(value)); return *this;} /** *

Specifies the customer master key (CMK) that AWS KMS will use to decrypt the * ciphertext. Enter a key ID of the CMK that was used to encrypt the * ciphertext.

If you specify a KeyId value, the * Decrypt operation succeeds only if the specified CMK was used to * encrypt the ciphertext.

This parameter is required only when the * ciphertext was encrypted under an asymmetric CMK. Otherwise, AWS KMS uses the * metadata that it adds to the ciphertext blob to determine which CMK was used to * encrypt the ciphertext. However, you can use this parameter to ensure that a * particular CMK (of any kind) is used to decrypt the ciphertext.

To * specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias * ARN. When using an alias name, prefix it with "alias/".

For * example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline DecryptRequest& WithKeyId(const char* value) { SetKeyId(value); return *this;} /** *

Specifies the encryption algorithm that will be used to decrypt the * ciphertext. Specify the same algorithm that was used to encrypt the data. If you * specify a different algorithm, the Decrypt operation fails.

*

This parameter is required only when the ciphertext was encrypted under an * asymmetric CMK. The default value, SYMMETRIC_DEFAULT, represents * the only supported algorithm that is valid for symmetric CMKs.

*/ inline const EncryptionAlgorithmSpec& GetEncryptionAlgorithm() const{ return m_encryptionAlgorithm; } /** *

Specifies the encryption algorithm that will be used to decrypt the * ciphertext. Specify the same algorithm that was used to encrypt the data. If you * specify a different algorithm, the Decrypt operation fails.

*

This parameter is required only when the ciphertext was encrypted under an * asymmetric CMK. The default value, SYMMETRIC_DEFAULT, represents * the only supported algorithm that is valid for symmetric CMKs.

*/ inline bool EncryptionAlgorithmHasBeenSet() const { return m_encryptionAlgorithmHasBeenSet; } /** *

Specifies the encryption algorithm that will be used to decrypt the * ciphertext. Specify the same algorithm that was used to encrypt the data. If you * specify a different algorithm, the Decrypt operation fails.

*

This parameter is required only when the ciphertext was encrypted under an * asymmetric CMK. The default value, SYMMETRIC_DEFAULT, represents * the only supported algorithm that is valid for symmetric CMKs.

*/ inline void SetEncryptionAlgorithm(const EncryptionAlgorithmSpec& value) { m_encryptionAlgorithmHasBeenSet = true; m_encryptionAlgorithm = value; } /** *

Specifies the encryption algorithm that will be used to decrypt the * ciphertext. Specify the same algorithm that was used to encrypt the data. If you * specify a different algorithm, the Decrypt operation fails.

*

This parameter is required only when the ciphertext was encrypted under an * asymmetric CMK. The default value, SYMMETRIC_DEFAULT, represents * the only supported algorithm that is valid for symmetric CMKs.

*/ inline void SetEncryptionAlgorithm(EncryptionAlgorithmSpec&& value) { m_encryptionAlgorithmHasBeenSet = true; m_encryptionAlgorithm = std::move(value); } /** *

Specifies the encryption algorithm that will be used to decrypt the * ciphertext. Specify the same algorithm that was used to encrypt the data. If you * specify a different algorithm, the Decrypt operation fails.

*

This parameter is required only when the ciphertext was encrypted under an * asymmetric CMK. The default value, SYMMETRIC_DEFAULT, represents * the only supported algorithm that is valid for symmetric CMKs.

*/ inline DecryptRequest& WithEncryptionAlgorithm(const EncryptionAlgorithmSpec& value) { SetEncryptionAlgorithm(value); return *this;} /** *

Specifies the encryption algorithm that will be used to decrypt the * ciphertext. Specify the same algorithm that was used to encrypt the data. If you * specify a different algorithm, the Decrypt operation fails.

*

This parameter is required only when the ciphertext was encrypted under an * asymmetric CMK. The default value, SYMMETRIC_DEFAULT, represents * the only supported algorithm that is valid for symmetric CMKs.

*/ inline DecryptRequest& WithEncryptionAlgorithm(EncryptionAlgorithmSpec&& value) { SetEncryptionAlgorithm(std::move(value)); return *this;} private: Aws::Utils::ByteBuffer m_ciphertextBlob; bool m_ciphertextBlobHasBeenSet; Aws::Map m_encryptionContext; bool m_encryptionContextHasBeenSet; Aws::Vector m_grantTokens; bool m_grantTokensHasBeenSet; Aws::String m_keyId; bool m_keyIdHasBeenSet; EncryptionAlgorithmSpec m_encryptionAlgorithm; bool m_encryptionAlgorithmHasBeenSet; }; } // namespace Model } // namespace KMS } // namespace Aws