type AlgorithmSpec string

const (
	AlgorithmSpecRsaesPkcs1V15   AlgorithmSpec = "RSAES_PKCS1_V1_5"
	AlgorithmSpecRsaesOaepSha1   AlgorithmSpec = "RSAES_OAEP_SHA_1"
	AlgorithmSpecRsaesOaepSha256 AlgorithmSpec = "RSAES_OAEP_SHA_256"
)

type AliasListEntry struct {

	// String that contains the key ARN.
	AliasArn *string

	// String that contains the alias. This value begins with alias/.
	AliasName *string

	// Date and time that the alias was most recently created in the account and
	// Region. Formatted as Unix time.
	CreationDate *time.Time

	// Date and time that the alias was most recently associated with a CMK in the
	// account and Region. Formatted as Unix time.
	LastUpdatedDate *time.Time

	// String that contains the key identifier of the CMK associated with the alias.
	TargetKeyId *string
	// contains filtered or unexported fields
}

type AlreadyExistsException struct {
	Message *string
	// contains filtered or unexported fields
}

type CloudHsmClusterInUseException struct {
	Message *string
	// contains filtered or unexported fields
}

type CloudHsmClusterInvalidConfigurationException struct {
	Message *string
	// contains filtered or unexported fields
}

type CloudHsmClusterNotActiveException struct {
	Message *string
	// contains filtered or unexported fields
}

type CloudHsmClusterNotFoundException struct {
	Message *string
	// contains filtered or unexported fields
}

type CloudHsmClusterNotRelatedException struct {
	Message *string
	// contains filtered or unexported fields
}

type ConnectionErrorCodeType string

const (
	ConnectionErrorCodeTypeInvalidCredentials       ConnectionErrorCodeType = "INVALID_CREDENTIALS"
	ConnectionErrorCodeTypeClusterNotFound          ConnectionErrorCodeType = "CLUSTER_NOT_FOUND"
	ConnectionErrorCodeTypeNetworkErrors            ConnectionErrorCodeType = "NETWORK_ERRORS"
	ConnectionErrorCodeTypeInternalError            ConnectionErrorCodeType = "INTERNAL_ERROR"
	ConnectionErrorCodeTypeInsufficientCloudhsmHsms ConnectionErrorCodeType = "INSUFFICIENT_CLOUDHSM_HSMS"
	ConnectionErrorCodeTypeUserLockedOut            ConnectionErrorCodeType = "USER_LOCKED_OUT"
	ConnectionErrorCodeTypeUserNotFound             ConnectionErrorCodeType = "USER_NOT_FOUND"
	ConnectionErrorCodeTypeUserLoggedIn             ConnectionErrorCodeType = "USER_LOGGED_IN"
	ConnectionErrorCodeTypeSubnetNotFound           ConnectionErrorCodeType = "SUBNET_NOT_FOUND"
)

type ConnectionStateType string

const (
	ConnectionStateTypeConnected     ConnectionStateType = "CONNECTED"
	ConnectionStateTypeConnecting    ConnectionStateType = "CONNECTING"
	ConnectionStateTypeFailed        ConnectionStateType = "FAILED"
	ConnectionStateTypeDisconnected  ConnectionStateType = "DISCONNECTED"
	ConnectionStateTypeDisconnecting ConnectionStateType = "DISCONNECTING"
)

type CustomKeyStoreHasCMKsException struct {
	Message *string
	// contains filtered or unexported fields
}

type CustomKeyStoreInvalidStateException struct {
	Message *string
	// contains filtered or unexported fields
}

type CustomKeyStoreNameInUseException struct {
	Message *string
	// contains filtered or unexported fields
}

type CustomKeyStoreNotFoundException struct {
	Message *string
	// contains filtered or unexported fields
}

type CustomKeyStoresListEntry struct {

	// A unique identifier for the AWS CloudHSM cluster that is associated with the
	// custom key store.
	CloudHsmClusterId *string

	// Describes the connection error. This field appears in the response only when the
	// ConnectionState is FAILED. For help resolving these errors, see How to Fix a
	// Connection Failure
	// (https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html#fix-keystore-failed)
	// in AWS Key Management Service Developer Guide. Valid values are:
	//
	// *
	// CLUSTER_NOT_FOUND - AWS KMS cannot find the AWS CloudHSM cluster with the
	// specified cluster ID.
	//
	// * INSUFFICIENT_CLOUDHSM_HSMS - The associated AWS
	// CloudHSM cluster does not contain any active HSMs. To connect a custom key store
	// to its AWS CloudHSM cluster, the cluster must contain at least one active
	// HSM.
	//
	// * INTERNAL_ERROR - AWS KMS could not complete the request due to an
	// internal error. Retry the request. For ConnectCustomKeyStore requests,
	// disconnect the custom key store before trying to connect again.
	//
	// *
	// INVALID_CREDENTIALS - AWS KMS does not have the correct password for the kmsuser
	// crypto user in the AWS CloudHSM cluster. Before you can connect your custom key
	// store to its AWS CloudHSM cluster, you must change the kmsuser account password
	// and update the key store password value for the custom key store.
	//
	// *
	// NETWORK_ERRORS - Network errors are preventing AWS KMS from connecting to the
	// custom key store.
	//
	// * SUBNET_NOT_FOUND - A subnet in the AWS CloudHSM cluster
	// configuration was deleted. If AWS KMS cannot find all of the subnets in the
	// cluster configuration, attempts to connect the custom key store to the AWS
	// CloudHSM cluster fail. To fix this error, create a cluster from a recent backup
	// and associate it with your custom key store. (This process creates a new cluster
	// configuration with a VPC and private subnets.) For details, see How to Fix a
	// Connection Failure
	// (https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html#fix-keystore-failed)
	// in the AWS Key Management Service Developer Guide.
	//
	// * USER_LOCKED_OUT - The
	// kmsuser CU account is locked out of the associated AWS CloudHSM cluster due to
	// too many failed password attempts. Before you can connect your custom key store
	// to its AWS CloudHSM cluster, you must change the kmsuser account password and
	// update the key store password value for the custom key store.
	//
	// * USER_LOGGED_IN
	// - The kmsuser CU account is logged into the the associated AWS CloudHSM cluster.
	// This prevents AWS KMS from rotating the kmsuser account password and logging
	// into the cluster. Before you can connect your custom key store to its AWS
	// CloudHSM cluster, you must log the kmsuser CU out of the cluster. If you changed
	// the kmsuser password to log into the cluster, you must also and update the key
	// store password value for the custom key store. For help, see How to Log Out and
	// Reconnect
	// (https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html#login-kmsuser-2)
	// in the AWS Key Management Service Developer Guide.
	//
	// * USER_NOT_FOUND - AWS KMS
	// cannot find a kmsuser CU account in the associated AWS CloudHSM cluster. Before
	// you can connect your custom key store to its AWS CloudHSM cluster, you must
	// create a kmsuser CU account in the cluster, and then update the key store
	// password value for the custom key store.
	ConnectionErrorCode ConnectionErrorCodeType

	// Indicates whether the custom key store is connected to its AWS CloudHSM cluster.
	// You can create and use CMKs in your custom key stores only when its connection
	// state is CONNECTED. The value is DISCONNECTED if the key store has never been
	// connected or you use the DisconnectCustomKeyStore operation to disconnect it. If
	// the value is CONNECTED but you are having trouble using the custom key store,
	// make sure that its associated AWS CloudHSM cluster is active and contains at
	// least one active HSM. A value of FAILED indicates that an attempt to connect was
	// unsuccessful. The ConnectionErrorCode field in the response indicates the cause
	// of the failure. For help resolving a connection failure, see Troubleshooting a
	// Custom Key Store
	// (https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html) in the
	// AWS Key Management Service Developer Guide.
	ConnectionState ConnectionStateType

	// The date and time when the custom key store was created.
	CreationDate *time.Time

	// A unique identifier for the custom key store.
	CustomKeyStoreId *string

	// The user-specified friendly name for the custom key store.
	CustomKeyStoreName *string

	// The trust anchor certificate of the associated AWS CloudHSM cluster. When you
	// initialize the cluster
	// (https://docs.aws.amazon.com/cloudhsm/latest/userguide/initialize-cluster.html#sign-csr),
	// you create this certificate and save it in the customerCA.crt file.
	TrustAnchorCertificate *string
	// contains filtered or unexported fields
}

type CustomerMasterKeySpec string

const (
	CustomerMasterKeySpecRsa2048          CustomerMasterKeySpec = "RSA_2048"
	CustomerMasterKeySpecRsa3072          CustomerMasterKeySpec = "RSA_3072"
	CustomerMasterKeySpecRsa4096          CustomerMasterKeySpec = "RSA_4096"
	CustomerMasterKeySpecEccNistP256      CustomerMasterKeySpec = "ECC_NIST_P256"
	CustomerMasterKeySpecEccNistP384      CustomerMasterKeySpec = "ECC_NIST_P384"
	CustomerMasterKeySpecEccNistP521      CustomerMasterKeySpec = "ECC_NIST_P521"
	CustomerMasterKeySpecEccSecgP256k1    CustomerMasterKeySpec = "ECC_SECG_P256K1"
	CustomerMasterKeySpecSymmetricDefault CustomerMasterKeySpec = "SYMMETRIC_DEFAULT"
)

type DataKeyPairSpec string

const (
	DataKeyPairSpecRsa2048       DataKeyPairSpec = "RSA_2048"
	DataKeyPairSpecRsa3072       DataKeyPairSpec = "RSA_3072"
	DataKeyPairSpecRsa4096       DataKeyPairSpec = "RSA_4096"
	DataKeyPairSpecEccNistP256   DataKeyPairSpec = "ECC_NIST_P256"
	DataKeyPairSpecEccNistP384   DataKeyPairSpec = "ECC_NIST_P384"
	DataKeyPairSpecEccNistP521   DataKeyPairSpec = "ECC_NIST_P521"
	DataKeyPairSpecEccSecgP256k1 DataKeyPairSpec = "ECC_SECG_P256K1"
)

type DataKeySpec string

const (
	DataKeySpecAes256 DataKeySpec = "AES_256"
	DataKeySpecAes128 DataKeySpec = "AES_128"
)

type DependencyTimeoutException struct {
	Message *string
	// contains filtered or unexported fields
}

type DisabledException struct {
	Message *string
	// contains filtered or unexported fields
}

type EncryptionAlgorithmSpec string

const (
	EncryptionAlgorithmSpecSymmetricDefault EncryptionAlgorithmSpec = "SYMMETRIC_DEFAULT"
	EncryptionAlgorithmSpecRsaesOaepSha1    EncryptionAlgorithmSpec = "RSAES_OAEP_SHA_1"
	EncryptionAlgorithmSpecRsaesOaepSha256  EncryptionAlgorithmSpec = "RSAES_OAEP_SHA_256"
)

type ExpirationModelType string

const (
	ExpirationModelTypeKeyMaterialExpires       ExpirationModelType = "KEY_MATERIAL_EXPIRES"
	ExpirationModelTypeKeyMaterialDoesNotExpire ExpirationModelType = "KEY_MATERIAL_DOES_NOT_EXPIRE"
)

type ExpiredImportTokenException struct {
	Message *string
	// contains filtered or unexported fields
}

type GrantConstraints struct {

	// A list of key-value pairs that must match the encryption context in the
	// cryptographic operation
	// (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations)
	// request. The grant allows the operation only when the encryption context in the
	// request is the same as the encryption context specified in this constraint.
	EncryptionContextEquals map[string]string

	// A list of key-value pairs that must be included in the encryption context of the
	// cryptographic operation
	// (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations)
	// request. The grant allows the cryptographic operation only when the encryption
	// context in the request includes the key-value pairs specified in this
	// constraint, although it can include additional key-value pairs.
	EncryptionContextSubset map[string]string
	// contains filtered or unexported fields
}

type GrantListEntry struct {

	// A list of key-value pairs that must be present in the encryption context of
	// certain subsequent operations that the grant allows.
	Constraints *GrantConstraints

	// The date and time when the grant was created.
	CreationDate *time.Time

	// The unique identifier for the grant.
	GrantId *string

	// The identity that gets the permissions in the grant. The GranteePrincipal field
	// in the ListGrants response usually contains the user or role designated as the
	// grantee principal in the grant. However, when the grantee principal in the grant
	// is an AWS service, the GranteePrincipal field contains the service principal
	// (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services),
	// which might represent several different grantee principals.
	GranteePrincipal *string

	// The AWS account under which the grant was issued.
	IssuingAccount *string

	// The unique identifier for the customer master key (CMK) to which the grant
	// applies.
	KeyId *string

	// The friendly name that identifies the grant. If a name was provided in the
	// CreateGrant request, that name is returned. Otherwise this value is null.
	Name *string

	// The list of operations permitted by the grant.
	Operations []GrantOperation

	// The principal that can retire the grant.
	RetiringPrincipal *string
	// contains filtered or unexported fields
}

type GrantOperation string

const (
	GrantOperationDecrypt                             GrantOperation = "Decrypt"
	GrantOperationEncrypt                             GrantOperation = "Encrypt"
	GrantOperationGenerateDataKey                     GrantOperation = "GenerateDataKey"
	GrantOperationGenerateDataKeyWithoutPlaintext     GrantOperation = "GenerateDataKeyWithoutPlaintext"
	GrantOperationReEncryptFrom                       GrantOperation = "ReEncryptFrom"
	GrantOperationReEncryptTo                         GrantOperation = "ReEncryptTo"
	GrantOperationSign                                GrantOperation = "Sign"
	GrantOperationVerify                              GrantOperation = "Verify"
	GrantOperationGetPublicKey                        GrantOperation = "GetPublicKey"
	GrantOperationCreateGrant                         GrantOperation = "CreateGrant"
	GrantOperationRetireGrant                         GrantOperation = "RetireGrant"
	GrantOperationDescribeKey                         GrantOperation = "DescribeKey"
	GrantOperationGenerateDataKeyPair                 GrantOperation = "GenerateDataKeyPair"
	GrantOperationGenerateDataKeyPairWithoutPlaintext GrantOperation = "GenerateDataKeyPairWithoutPlaintext"
)

type IncorrectKeyException struct {
	Message *string
	// contains filtered or unexported fields
}

type IncorrectKeyMaterialException struct {
	Message *string
	// contains filtered or unexported fields
}

type IncorrectTrustAnchorException struct {
	Message *string
	// contains filtered or unexported fields
}

type InvalidAliasNameException struct {
	Message *string
	// contains filtered or unexported fields
}

type InvalidArnException struct {
	Message *string
	// contains filtered or unexported fields
}

type InvalidCiphertextException struct {
	Message *string
	// contains filtered or unexported fields
}

type InvalidGrantIdException struct {
	Message *string
	// contains filtered or unexported fields
}

type InvalidGrantTokenException struct {
	Message *string
	// contains filtered or unexported fields
}

type InvalidImportTokenException struct {
	Message *string
	// contains filtered or unexported fields
}

type InvalidKeyUsageException struct {
	Message *string
	// contains filtered or unexported fields
}

type InvalidMarkerException struct {
	Message *string
	// contains filtered or unexported fields
}

type KMSInternalException struct {
	Message *string
	// contains filtered or unexported fields
}

type KMSInvalidSignatureException struct {
	Message *string
	// contains filtered or unexported fields
}

type KMSInvalidStateException struct {
	Message *string
	// contains filtered or unexported fields
}

type KeyListEntry struct {

	// ARN of the key.
	KeyArn *string

	// Unique identifier of the key.
	KeyId *string
	// contains filtered or unexported fields
}

type KeyManagerType string

const (
	KeyManagerTypeAws      KeyManagerType = "AWS"
	KeyManagerTypeCustomer KeyManagerType = "CUSTOMER"
)

type KeyMetadata struct {

	// The globally unique identifier for the CMK.
	//
	// This member is required.
	KeyId *string

	// The twelve-digit account ID of the AWS account that owns the CMK.
	AWSAccountId *string

	// The Amazon Resource Name (ARN) of the CMK. For examples, see AWS Key Management
	// Service (AWS KMS)
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html#arn-syntax-kms)
	// in the Example ARNs section of the AWS General Reference.
	Arn *string

	// The cluster ID of the AWS CloudHSM cluster that contains the key material for
	// the CMK. When you create a CMK in a custom key store
	// (https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html),
	// AWS KMS creates the key material for the CMK in the associated AWS CloudHSM
	// cluster. This value is present only when the CMK is created in a custom key
	// store.
	CloudHsmClusterId *string

	// The date and time when the CMK was created.
	CreationDate *time.Time

	// A unique identifier for the custom key store
	// (https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html)
	// that contains the CMK. This value is present only when the CMK is created in a
	// custom key store.
	CustomKeyStoreId *string

	// Describes the type of key material in the CMK.
	CustomerMasterKeySpec CustomerMasterKeySpec

	// The date and time after which AWS KMS deletes this CMK. This value is present
	// only when the CMK is scheduled for deletion, that is, when its KeyState is
	// PendingDeletion. When the primary key in a multi-Region key is scheduled for
	// deletion but still has replica keys, its key state is PendingReplicaDeletion and
	// the length of its waiting period is displayed in the PendingDeletionWindowInDays
	// field.
	DeletionDate *time.Time

	// The description of the CMK.
	Description *string

	// Specifies whether the CMK is enabled. When KeyState is Enabled this value is
	// true, otherwise it is false.
	Enabled bool

	// The encryption algorithms that the CMK supports. You cannot use the CMK with
	// other encryption algorithms within AWS KMS. This value is present only when the
	// KeyUsage of the CMK is ENCRYPT_DECRYPT.
	EncryptionAlgorithms []EncryptionAlgorithmSpec

	// Specifies whether the CMK's key material expires. This value is present only
	// when Origin is EXTERNAL, otherwise this value is omitted.
	ExpirationModel ExpirationModelType

	// The manager of the CMK. CMKs in your AWS account are either customer managed or
	// AWS managed. For more information about the difference, see Customer Master Keys
	// (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#master_keys)
	// in the AWS Key Management Service Developer Guide.
	KeyManager KeyManagerType

	// The current status of the CMK. For more information about how key state affects
	// the use of a CMK, see Key state: Effect on your CMK
	// (https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html) in the
	// AWS Key Management Service Developer Guide.
	KeyState KeyState

	// The cryptographic operations
	// (https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations)
	// for which you can use the CMK.
	KeyUsage KeyUsageType

	// Indicates whether the CMK is a multi-Region (True) or regional (False) key. This
	// value is True for multi-Region primary and replica CMKs and False for regional
	// CMKs. For more information about multi-Region keys, see Using multi-Region keys
	// (https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html)
	// in the AWS Key Management Service Developer Guide.
	MultiRegion *bool

	// Lists the primary and replica CMKs in same multi-Region CMK. This field is
	// present only when the value of the MultiRegion field is True. For more
	// information about any listed CMK, use the DescribeKey operation.
	//
	// *
	// MultiRegionKeyType indicates whether the CMK is a PRIMARY or REPLICA key.
	//
	// *
	// PrimaryKey displays the key ARN and Region of the primary key. This field
	// displays the current CMK if it is the primary key.
	//
	// * ReplicaKeys displays the
	// key ARNs and Regions of all replica keys. This field includes the current CMK if
	// it is a replica key.
	MultiRegionConfiguration *MultiRegionConfiguration

	// The source of the CMK's key material. When this value is AWS_KMS, AWS KMS
	// created the key material. When this value is EXTERNAL, the key material was
	// imported from your existing key management infrastructure or the CMK lacks key
	// material. When this value is AWS_CLOUDHSM, the key material was created in the
	// AWS CloudHSM cluster associated with a custom key store.
	Origin OriginType

	// The waiting period before the primary key in a multi-Region key is deleted. This
	// waiting period begins when the last of its replica keys is deleted. This value
	// is present only when the KeyState of the CMK is PendingReplicaDeletion. That
	// indicates that the CMK is the primary key in a multi-Region key, it is scheduled
	// for deletion, and it still has existing replica keys. When a regional CMK or a
	// replica key in a multi-Region key is scheduled for deletion, its deletion date
	// is displayed in the DeletionDate field. However, when the primary key in a
	// multi-Region key is scheduled for deletion, its waiting period doesn't begin
	// until all of its replica keys are deleted. This value displays that waiting
	// period. When the last replica key in the multi-Region key is deleted, the
	// KeyState of the scheduled primary key changes from PendingReplicaDeletion to
	// PendingDeletion and the deletion date appears in the DeletionDate field.
	PendingDeletionWindowInDays *int32

	// The signing algorithms that the CMK supports. You cannot use the CMK with other
	// signing algorithms within AWS KMS. This field appears only when the KeyUsage of
	// the CMK is SIGN_VERIFY.
	SigningAlgorithms []SigningAlgorithmSpec

	// The time at which the imported key material expires. When the key material
	// expires, AWS KMS deletes the key material and the CMK becomes unusable. This
	// value is present only for CMKs whose Origin is EXTERNAL and whose
	// ExpirationModel is KEY_MATERIAL_EXPIRES, otherwise this value is omitted.
	ValidTo *time.Time
	// contains filtered or unexported fields
}

type KeyState string

const (
	KeyStateCreating               KeyState = "Creating"
	KeyStateEnabled                KeyState = "Enabled"
	KeyStateDisabled               KeyState = "Disabled"
	KeyStatePendingDeletion        KeyState = "PendingDeletion"
	KeyStatePendingImport          KeyState = "PendingImport"
	KeyStatePendingReplicaDeletion KeyState = "PendingReplicaDeletion"
	KeyStateUnavailable            KeyState = "Unavailable"
	KeyStateUpdating               KeyState = "Updating"
)

type KeyUnavailableException struct {
	Message *string
	// contains filtered or unexported fields
}

type KeyUsageType string

const (
	KeyUsageTypeSignVerify     KeyUsageType = "SIGN_VERIFY"
	KeyUsageTypeEncryptDecrypt KeyUsageType = "ENCRYPT_DECRYPT"
)

type LimitExceededException struct {
	Message *string
	// contains filtered or unexported fields
}

type MalformedPolicyDocumentException struct {
	Message *string
	// contains filtered or unexported fields
}

type MessageType string

const (
	MessageTypeRaw    MessageType = "RAW"
	MessageTypeDigest MessageType = "DIGEST"
)

type MultiRegionConfiguration struct {

	// Indicates whether the CMK is a PRIMARY or REPLICA key.
	MultiRegionKeyType MultiRegionKeyType

	// Displays the key ARN and Region of the primary key. This field includes the
	// current CMK if it is the primary key.
	PrimaryKey *MultiRegionKey

	// displays the key ARNs and Regions of all replica keys. This field includes the
	// current CMK if it is a replica key.
	ReplicaKeys []MultiRegionKey
	// contains filtered or unexported fields
}

type MultiRegionKey struct {

	// Displays the key ARN of a primary or replica key of a multi-Region key.
	Arn *string

	// Displays the AWS Region of a primary or replica key in a multi-Region key.
	Region *string
	// contains filtered or unexported fields
}

type MultiRegionKeyType string

const (
	MultiRegionKeyTypePrimary MultiRegionKeyType = "PRIMARY"
	MultiRegionKeyTypeReplica MultiRegionKeyType = "REPLICA"
)

type NotFoundException struct {
	Message *string
	// contains filtered or unexported fields
}

type OriginType string

const (
	OriginTypeAwsKms      OriginType = "AWS_KMS"
	OriginTypeExternal    OriginType = "EXTERNAL"
	OriginTypeAwsCloudhsm OriginType = "AWS_CLOUDHSM"
)

type SigningAlgorithmSpec string

const (
	SigningAlgorithmSpecRsassaPssSha256      SigningAlgorithmSpec = "RSASSA_PSS_SHA_256"
	SigningAlgorithmSpecRsassaPssSha384      SigningAlgorithmSpec = "RSASSA_PSS_SHA_384"
	SigningAlgorithmSpecRsassaPssSha512      SigningAlgorithmSpec = "RSASSA_PSS_SHA_512"
	SigningAlgorithmSpecRsassaPkcs1V15Sha256 SigningAlgorithmSpec = "RSASSA_PKCS1_V1_5_SHA_256"
	SigningAlgorithmSpecRsassaPkcs1V15Sha384 SigningAlgorithmSpec = "RSASSA_PKCS1_V1_5_SHA_384"
	SigningAlgorithmSpecRsassaPkcs1V15Sha512 SigningAlgorithmSpec = "RSASSA_PKCS1_V1_5_SHA_512"
	SigningAlgorithmSpecEcdsaSha256          SigningAlgorithmSpec = "ECDSA_SHA_256"
	SigningAlgorithmSpecEcdsaSha384          SigningAlgorithmSpec = "ECDSA_SHA_384"
	SigningAlgorithmSpecEcdsaSha512          SigningAlgorithmSpec = "ECDSA_SHA_512"
)

type Tag struct {

	// The key of the tag.
	//
	// This member is required.
	TagKey *string

	// The value of the tag.
	//
	// This member is required.
	TagValue *string
	// contains filtered or unexported fields
}

type TagException struct {
	Message *string
	// contains filtered or unexported fields
}

type UnsupportedOperationException struct {
	Message *string
	// contains filtered or unexported fields
}

type WrappingKeySpec string

const (
	WrappingKeySpecRsa2048 WrappingKeySpec = "RSA_2048"
)