/** * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. * SPDX-License-Identifier: Apache-2.0. */ #pragma once #include #include #include #include #include #include #include #include namespace Aws { namespace KMS { namespace Model { /** */ class AWS_KMS_API SignRequest : public KMSRequest { public: SignRequest(); // Service request name is the Operation name which will send this request out, // each operation should has unique request name, so that we can get operation's name from this request. // Note: this is not true for response, multiple operations may have the same response name, // so we can not get operation's name from response. inline virtual const char* GetServiceRequestName() const override { return "Sign"; } Aws::String SerializePayload() const override; Aws::Http::HeaderValueCollection GetRequestSpecificHeaders() const override; /** *

Identifies an asymmetric CMK. AWS KMS uses the private key in the asymmetric * CMK to sign the message. The KeyUsage type of the CMK must be * SIGN_VERIFY. To find the KeyUsage of a CMK, use the * DescribeKey operation.

To specify a CMK, use its key ID, Amazon * Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix * it with "alias/". To specify a CMK in a different AWS account, you * must use the key ARN or alias ARN.

For example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline const Aws::String& GetKeyId() const{ return m_keyId; } /** *

Identifies an asymmetric CMK. AWS KMS uses the private key in the asymmetric * CMK to sign the message. The KeyUsage type of the CMK must be * SIGN_VERIFY. To find the KeyUsage of a CMK, use the * DescribeKey operation.

To specify a CMK, use its key ID, Amazon * Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix * it with "alias/". To specify a CMK in a different AWS account, you * must use the key ARN or alias ARN.

For example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline bool KeyIdHasBeenSet() const { return m_keyIdHasBeenSet; } /** *

Identifies an asymmetric CMK. AWS KMS uses the private key in the asymmetric * CMK to sign the message. The KeyUsage type of the CMK must be * SIGN_VERIFY. To find the KeyUsage of a CMK, use the * DescribeKey operation.

To specify a CMK, use its key ID, Amazon * Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix * it with "alias/". To specify a CMK in a different AWS account, you * must use the key ARN or alias ARN.

For example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline void SetKeyId(const Aws::String& value) { m_keyIdHasBeenSet = true; m_keyId = value; } /** *

Identifies an asymmetric CMK. AWS KMS uses the private key in the asymmetric * CMK to sign the message. The KeyUsage type of the CMK must be * SIGN_VERIFY. To find the KeyUsage of a CMK, use the * DescribeKey operation.

To specify a CMK, use its key ID, Amazon * Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix * it with "alias/". To specify a CMK in a different AWS account, you * must use the key ARN or alias ARN.

For example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline void SetKeyId(Aws::String&& value) { m_keyIdHasBeenSet = true; m_keyId = std::move(value); } /** *

Identifies an asymmetric CMK. AWS KMS uses the private key in the asymmetric * CMK to sign the message. The KeyUsage type of the CMK must be * SIGN_VERIFY. To find the KeyUsage of a CMK, use the * DescribeKey operation.

To specify a CMK, use its key ID, Amazon * Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix * it with "alias/". To specify a CMK in a different AWS account, you * must use the key ARN or alias ARN.

For example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline void SetKeyId(const char* value) { m_keyIdHasBeenSet = true; m_keyId.assign(value); } /** *

Identifies an asymmetric CMK. AWS KMS uses the private key in the asymmetric * CMK to sign the message. The KeyUsage type of the CMK must be * SIGN_VERIFY. To find the KeyUsage of a CMK, use the * DescribeKey operation.

To specify a CMK, use its key ID, Amazon * Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix * it with "alias/". To specify a CMK in a different AWS account, you * must use the key ARN or alias ARN.

For example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline SignRequest& WithKeyId(const Aws::String& value) { SetKeyId(value); return *this;} /** *

Identifies an asymmetric CMK. AWS KMS uses the private key in the asymmetric * CMK to sign the message. The KeyUsage type of the CMK must be * SIGN_VERIFY. To find the KeyUsage of a CMK, use the * DescribeKey operation.

To specify a CMK, use its key ID, Amazon * Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix * it with "alias/". To specify a CMK in a different AWS account, you * must use the key ARN or alias ARN.

For example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline SignRequest& WithKeyId(Aws::String&& value) { SetKeyId(std::move(value)); return *this;} /** *

Identifies an asymmetric CMK. AWS KMS uses the private key in the asymmetric * CMK to sign the message. The KeyUsage type of the CMK must be * SIGN_VERIFY. To find the KeyUsage of a CMK, use the * DescribeKey operation.

To specify a CMK, use its key ID, Amazon * Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix * it with "alias/". To specify a CMK in a different AWS account, you * must use the key ARN or alias ARN.

For example:

  • Key ID: * 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: * arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab *

  • Alias name: alias/ExampleAlias

  • *

    Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias *

To get the key ID and key ARN for a CMK, use ListKeys * or DescribeKey. To get the alias name and alias ARN, use * ListAliases.

*/ inline SignRequest& WithKeyId(const char* value) { SetKeyId(value); return *this;} /** *

Specifies the message or message digest to sign. Messages can be 0-4096 * bytes. To sign a larger message, provide the message digest.

If you * provide a message, AWS KMS generates a hash digest of the message and then signs * it.

*/ inline const Aws::Utils::CryptoBuffer& GetMessage() const{ return m_message; } /** *

Specifies the message or message digest to sign. Messages can be 0-4096 * bytes. To sign a larger message, provide the message digest.

If you * provide a message, AWS KMS generates a hash digest of the message and then signs * it.

*/ inline bool MessageHasBeenSet() const { return m_messageHasBeenSet; } /** *

Specifies the message or message digest to sign. Messages can be 0-4096 * bytes. To sign a larger message, provide the message digest.

If you * provide a message, AWS KMS generates a hash digest of the message and then signs * it.

*/ inline void SetMessage(const Aws::Utils::CryptoBuffer& value) { m_messageHasBeenSet = true; m_message = value; } /** *

Specifies the message or message digest to sign. Messages can be 0-4096 * bytes. To sign a larger message, provide the message digest.

If you * provide a message, AWS KMS generates a hash digest of the message and then signs * it.

*/ inline void SetMessage(Aws::Utils::CryptoBuffer&& value) { m_messageHasBeenSet = true; m_message = std::move(value); } /** *

Specifies the message or message digest to sign. Messages can be 0-4096 * bytes. To sign a larger message, provide the message digest.

If you * provide a message, AWS KMS generates a hash digest of the message and then signs * it.

*/ inline SignRequest& WithMessage(const Aws::Utils::CryptoBuffer& value) { SetMessage(value); return *this;} /** *

Specifies the message or message digest to sign. Messages can be 0-4096 * bytes. To sign a larger message, provide the message digest.

If you * provide a message, AWS KMS generates a hash digest of the message and then signs * it.

*/ inline SignRequest& WithMessage(Aws::Utils::CryptoBuffer&& value) { SetMessage(std::move(value)); return *this;} /** *

Tells AWS KMS whether the value of the Message parameter is a * message or message digest. The default value, RAW, indicates a message. To * indicate a message digest, enter DIGEST.

*/ inline const MessageType& GetMessageType() const{ return m_messageType; } /** *

Tells AWS KMS whether the value of the Message parameter is a * message or message digest. The default value, RAW, indicates a message. To * indicate a message digest, enter DIGEST.

*/ inline bool MessageTypeHasBeenSet() const { return m_messageTypeHasBeenSet; } /** *

Tells AWS KMS whether the value of the Message parameter is a * message or message digest. The default value, RAW, indicates a message. To * indicate a message digest, enter DIGEST.

*/ inline void SetMessageType(const MessageType& value) { m_messageTypeHasBeenSet = true; m_messageType = value; } /** *

Tells AWS KMS whether the value of the Message parameter is a * message or message digest. The default value, RAW, indicates a message. To * indicate a message digest, enter DIGEST.

*/ inline void SetMessageType(MessageType&& value) { m_messageTypeHasBeenSet = true; m_messageType = std::move(value); } /** *

Tells AWS KMS whether the value of the Message parameter is a * message or message digest. The default value, RAW, indicates a message. To * indicate a message digest, enter DIGEST.

*/ inline SignRequest& WithMessageType(const MessageType& value) { SetMessageType(value); return *this;} /** *

Tells AWS KMS whether the value of the Message parameter is a * message or message digest. The default value, RAW, indicates a message. To * indicate a message digest, enter DIGEST.

*/ inline SignRequest& WithMessageType(MessageType&& value) { SetMessageType(std::move(value)); return *this;} /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline const Aws::Vector& GetGrantTokens() const{ return m_grantTokens; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline bool GrantTokensHasBeenSet() const { return m_grantTokensHasBeenSet; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline void SetGrantTokens(const Aws::Vector& value) { m_grantTokensHasBeenSet = true; m_grantTokens = value; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline void SetGrantTokens(Aws::Vector&& value) { m_grantTokensHasBeenSet = true; m_grantTokens = std::move(value); } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline SignRequest& WithGrantTokens(const Aws::Vector& value) { SetGrantTokens(value); return *this;} /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline SignRequest& WithGrantTokens(Aws::Vector&& value) { SetGrantTokens(std::move(value)); return *this;} /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline SignRequest& AddGrantTokens(const Aws::String& value) { m_grantTokensHasBeenSet = true; m_grantTokens.push_back(value); return *this; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline SignRequest& AddGrantTokens(Aws::String&& value) { m_grantTokensHasBeenSet = true; m_grantTokens.push_back(std::move(value)); return *this; } /** *

A list of grant tokens.

For more information, see Grant * Tokens in the AWS Key Management Service Developer Guide.

*/ inline SignRequest& AddGrantTokens(const char* value) { m_grantTokensHasBeenSet = true; m_grantTokens.push_back(value); return *this; } /** *

Specifies the signing algorithm to use when signing the message.

*

Choose an algorithm that is compatible with the type and size of the * specified asymmetric CMK.

*/ inline const SigningAlgorithmSpec& GetSigningAlgorithm() const{ return m_signingAlgorithm; } /** *

Specifies the signing algorithm to use when signing the message.

*

Choose an algorithm that is compatible with the type and size of the * specified asymmetric CMK.

*/ inline bool SigningAlgorithmHasBeenSet() const { return m_signingAlgorithmHasBeenSet; } /** *

Specifies the signing algorithm to use when signing the message.

*

Choose an algorithm that is compatible with the type and size of the * specified asymmetric CMK.

*/ inline void SetSigningAlgorithm(const SigningAlgorithmSpec& value) { m_signingAlgorithmHasBeenSet = true; m_signingAlgorithm = value; } /** *

Specifies the signing algorithm to use when signing the message.

*

Choose an algorithm that is compatible with the type and size of the * specified asymmetric CMK.

*/ inline void SetSigningAlgorithm(SigningAlgorithmSpec&& value) { m_signingAlgorithmHasBeenSet = true; m_signingAlgorithm = std::move(value); } /** *

Specifies the signing algorithm to use when signing the message.

*

Choose an algorithm that is compatible with the type and size of the * specified asymmetric CMK.

*/ inline SignRequest& WithSigningAlgorithm(const SigningAlgorithmSpec& value) { SetSigningAlgorithm(value); return *this;} /** *

Specifies the signing algorithm to use when signing the message.

*

Choose an algorithm that is compatible with the type and size of the * specified asymmetric CMK.

*/ inline SignRequest& WithSigningAlgorithm(SigningAlgorithmSpec&& value) { SetSigningAlgorithm(std::move(value)); return *this;} private: Aws::String m_keyId; bool m_keyIdHasBeenSet; Aws::Utils::CryptoBuffer m_message; bool m_messageHasBeenSet; MessageType m_messageType; bool m_messageTypeHasBeenSet; Aws::Vector m_grantTokens; bool m_grantTokensHasBeenSet; SigningAlgorithmSpec m_signingAlgorithm; bool m_signingAlgorithmHasBeenSet; }; } // namespace Model } // namespace KMS } // namespace Aws