Update generated code (#2039)

update generated code

Author: async-aws-bot

manifest.json

@@ -1,6 +1,6 @@
 {
     "variables": {
-        "${LATEST}": "3.369.28"
+        "${LATEST}": "3.369.35"
     },
     "endpoints": "https://raw.githubusercontent.com/aws/aws-sdk-php/${LATEST}/src/data/endpoints.json",
     "services": {

src/Service/Kms/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## NOT RELEASED
 
+### Added
+
+- AWS api-change: Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation
+
 ## 1.11.1
 
 ### Changed

src/Service/Kms/composer.json

@@ -32,7 +32,7 @@
     },
     "extra": {
         "branch-alias": {
-            "dev-master": "1.11-dev"
+            "dev-master": "1.12-dev"
         }
     }
 }

src/Service/Kms/src/Enum/DryRunModifierType.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace AsyncAws\Kms\Enum;
+
+final class DryRunModifierType
+{
+    public const IGNORE_CIPHERTEXT = 'IGNORE_CIPHERTEXT';
+
+    /**
+     * @psalm-assert-if-true self::* $value
+     */
+    public static function exists(string $value): bool
+    {
+        return isset([
+            self::IGNORE_CIPHERTEXT => true,
+        ][$value]);
+    }
+}

src/Service/Kms/src/Input/DecryptRequest.php

@@ -6,6 +6,7 @@
 use AsyncAws\Core\Input;
 use AsyncAws\Core\Request;
 use AsyncAws\Core\Stream\StreamFactory;
+use AsyncAws\Kms\Enum\DryRunModifierType;
 use AsyncAws\Kms\Enum\EncryptionAlgorithmSpec;
 use AsyncAws\Kms\ValueObject\RecipientInfo;
 
@@ -14,7 +15,8 @@ final class DecryptRequest extends Input
     /**
      * Ciphertext to be decrypted. The blob includes metadata.
      *
-     * @required
+     * This parameter is required in all cases except when `DryRun` is `true` and `DryRunModifiers` is set to
+     * `IGNORE_CIPHERTEXT`.
      *
      * @var string|null
      */
@@ -60,9 +62,10 @@ final class DecryptRequest extends Input
      * Enter a key ID of the KMS key that was used to encrypt the ciphertext. If you identify a different KMS key, the
      * `Decrypt` operation throws an `IncorrectKeyException`.
      *
-     * This parameter is required only when the ciphertext was encrypted under an asymmetric KMS key. If you used a
-     * symmetric encryption KMS key, KMS can get the KMS key from metadata that it adds to the symmetric ciphertext blob.
-     * However, it is always recommended as a best practice. This practice ensures that you use the KMS key that you intend.
+     * This parameter is required only when the ciphertext was encrypted under an asymmetric KMS key or when `DryRun` is
+     * `true` and `DryRunModifiers` is set to `IGNORE_CIPHERTEXT`. If you used a symmetric encryption KMS key, KMS can get
+     * the KMS key from metadata that it adds to the symmetric ciphertext blob. However, it is always recommended as a best
+     * practice. This practice ensures that you use the KMS key that you intend.
      *
      * To specify a KMS key, use its key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix it with
      * `"alias/"`. To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.
@@ -128,15 +131,32 @@ final class DecryptRequest extends Input
      */
     private $dryRun;
 
+    /**
+     * Specifies the modifiers to apply to the dry run operation. `DryRunModifiers` is an optional parameter that only
+     * applies when `DryRun` is set to `true`.
+     *
+     * When set to `IGNORE_CIPHERTEXT`, KMS performs only authorization validation without ciphertext validation. This
+     * allows you to test permissions without requiring a valid ciphertext blob.
+     *
+     * To learn more about how to use this parameter, see Testing your permissions [^1] in the *Key Management Service
+     * Developer Guide*.
+     *
+     * [^1]: https://docs.aws.amazon.com/kms/latest/developerguide/testing-permissions.html
+     *
+     * @var list<DryRunModifierType::*>|null
+     */
+    private $dryRunModifiers;
+
     /**
      * @param array{
-     *   CiphertextBlob?: string,
+     *   CiphertextBlob?: string|null,
      *   EncryptionContext?: array<string, string>|null,
      *   GrantTokens?: string[]|null,
      *   KeyId?: string|null,
      *   EncryptionAlgorithm?: EncryptionAlgorithmSpec::*|null,
      *   Recipient?: RecipientInfo|array|null,
      *   DryRun?: bool|null,
+     *   DryRunModifiers?: array<DryRunModifierType::*>|null,
      *   '@region'?: string|null,
      * } $input
      */
@@ -149,18 +169,20 @@ public function __construct(array $input = [])
         $this->encryptionAlgorithm = $input['EncryptionAlgorithm'] ?? null;
         $this->recipient = isset($input['Recipient']) ? RecipientInfo::create($input['Recipient']) : null;
         $this->dryRun = $input['DryRun'] ?? null;
+        $this->dryRunModifiers = $input['DryRunModifiers'] ?? null;
         parent::__construct($input);
     }
 
     /**
      * @param array{
-     *   CiphertextBlob?: string,
+     *   CiphertextBlob?: string|null,
      *   EncryptionContext?: array<string, string>|null,
      *   GrantTokens?: string[]|null,
      *   KeyId?: string|null,
      *   EncryptionAlgorithm?: EncryptionAlgorithmSpec::*|null,
      *   Recipient?: RecipientInfo|array|null,
      *   DryRun?: bool|null,
+     *   DryRunModifiers?: array<DryRunModifierType::*>|null,
      *   '@region'?: string|null,
      * }|DecryptRequest $input
      */
@@ -179,6 +201,14 @@ public function getDryRun(): ?bool
         return $this->dryRun;
     }
 
+    /**
+     * @return list<DryRunModifierType::*>
+     */
+    public function getDryRunModifiers(): array
+    {
+        return $this->dryRunModifiers ?? [];
+    }
+
     /**
      * @return EncryptionAlgorithmSpec::*|null
      */
@@ -253,6 +283,16 @@ public function setDryRun(?bool $value): self
         return $this;
     }
 
+    /**
+     * @param list<DryRunModifierType::*> $value
+     */
+    public function setDryRunModifiers(array $value): self
+    {
+        $this->dryRunModifiers = $value;
+
+        return $this;
+    }
+
     /**
      * @param EncryptionAlgorithmSpec::*|null $value
      */
@@ -300,10 +340,9 @@ public function setRecipient(?RecipientInfo $value): self
     private function requestBody(): array
     {
         $payload = [];
-        if (null === $v = $this->ciphertextBlob) {
-            throw new InvalidArgument(\sprintf('Missing parameter "CiphertextBlob" for "%s". The value cannot be null.', __CLASS__));
+        if (null !== $v = $this->ciphertextBlob) {
+            $payload['CiphertextBlob'] = base64_encode($v);
         }
-        $payload['CiphertextBlob'] = base64_encode($v);
         if (null !== $v = $this->encryptionContext) {
             if (empty($v)) {
                 $payload['EncryptionContext'] = new \stdClass();
@@ -338,6 +377,18 @@ private function requestBody(): array
         if (null !== $v = $this->dryRun) {
             $payload['DryRun'] = (bool) $v;
         }
+        if (null !== $v = $this->dryRunModifiers) {
+            $index = -1;
+            $payload['DryRunModifiers'] = [];
+            foreach ($v as $listValue) {
+                ++$index;
+                if (!DryRunModifierType::exists($listValue)) {
+                    /** @psalm-suppress NoValue */
+                    throw new InvalidArgument(\sprintf('Invalid parameter "DryRunModifiers" for "%s". The value "%s" is not a valid "DryRunModifierType".', __CLASS__, $listValue));
+                }
+                $payload['DryRunModifiers'][$index] = $listValue;
+            }
+        }
 
         return $payload;
     }

src/Service/Kms/src/KmsClient.php

@@ -10,6 +10,7 @@
 use AsyncAws\Core\Result;
 use AsyncAws\Kms\Enum\CustomerMasterKeySpec;
 use AsyncAws\Kms\Enum\DataKeySpec;
+use AsyncAws\Kms\Enum\DryRunModifierType;
 use AsyncAws\Kms\Enum\EncryptionAlgorithmSpec;
 use AsyncAws\Kms\Enum\KeySpec;
 use AsyncAws\Kms\Enum\KeyUsageType;
@@ -204,8 +205,7 @@ public function createAlias($input): Result
      *   HMAC KMS keys are symmetric keys that never leave KMS unencrypted. You can use HMAC keys to generate (GenerateMac)
      *   and verify (VerifyMac) HMAC codes for messages up to 4096 bytes.
      *
-     * - `Multi-Region primary keys`
-     * - `Imported key material`:
+     * - `Multi-Region primary keys`:
      *
      *   To create a multi-Region *primary key* in the local Amazon Web Services Region, use the `MultiRegion` parameter
      *   with a value of `True`. To create a multi-Region *replica key*, that is, a KMS key with the same key ID and key
@@ -223,7 +223,9 @@ public function createAlias($input): Result
      *   information about multi-Region keys, see Multi-Region keys in KMS [^3] in the *Key Management Service Developer
      *   Guide*.
      *
-     * - To import your own key material into a KMS key, begin by creating a KMS key with no key material. To do this, use
+     * - `Imported key material`:
+     *
+     *   To import your own key material into a KMS key, begin by creating a KMS key with no key material. To do this, use
      *   the `Origin` parameter of `CreateKey` with a value of `EXTERNAL`. Next, use GetParametersForImport operation to get
      *   a public key and import token. Use the wrapping public key to encrypt your key material. Then, use
      *   ImportKeyMaterial with your import token to import the key material. For step-by-step instructions, see Importing
@@ -433,13 +435,14 @@ public function createKey($input = []): CreateKeyResponse
      * @see https://docs.aws.amazon.com/aws-sdk-php/v3/api/api-kms-2014-11-01.html#decrypt
      *
      * @param array{
-     *   CiphertextBlob: string,
+     *   CiphertextBlob?: string|null,
      *   EncryptionContext?: array<string, string>|null,
      *   GrantTokens?: string[]|null,
      *   KeyId?: string|null,
      *   EncryptionAlgorithm?: EncryptionAlgorithmSpec::*|null,
      *   Recipient?: RecipientInfo|array|null,
      *   DryRun?: bool|null,
+     *   DryRunModifiers?: array<DryRunModifierType::*>|null,
      *   '@region'?: string|null,
      * }|DecryptRequest $input
      *
@@ -455,7 +458,7 @@ public function createKey($input = []): CreateKeyResponse
      * @throws KeyUnavailableException
      * @throws NotFoundException
      */
-    public function decrypt($input): DecryptResponse
+    public function decrypt($input = []): DecryptResponse
     {
         $input = DecryptRequest::create($input);
         $response = $this->getResponse($input->request(), new RequestContext(['operation' => 'Decrypt', 'region' => $input->getRegion(), 'exceptionMapping' => [