Class GenerateDataKeyPairResponse
- All Implemented Interfaces:
SdkPojo,ToCopyableBuilder<GenerateDataKeyPairResponse.Builder,GenerateDataKeyPairResponse>
-
Nested Class Summary
Nested Classes -
Method Summary
Modifier and TypeMethodDescriptionbuilder()final SdkBytesThe plaintext private data key encrypted with the public key from the attestation document.final booleanfinal booleanequalsBySdkFields(Object obj) final <T> Optional<T>getValueForField(String fieldName, Class<T> clazz) final inthashCode()final StringkeyId()The Amazon Resource Name (key ARN) of the KMS key that encrypted the private key.final StringThe identifier of the key material used to encrypt the private key.final DataKeyPairSpecThe type of data key pair that was generated.final StringThe type of data key pair that was generated.final SdkBytesThe encrypted copy of the private key.final SdkBytesThe plaintext copy of the private key.final SdkBytesThe public key (in plaintext).static Class<? extends GenerateDataKeyPairResponse.Builder>final StringtoString()Returns a string representation of this object.Methods inherited from class software.amazon.awssdk.services.kms.model.KmsResponse
responseMetadataMethods inherited from class software.amazon.awssdk.core.SdkResponse
sdkHttpResponseMethods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, waitMethods inherited from interface software.amazon.awssdk.utils.builder.ToCopyableBuilder
copy
-
Method Details
-
privateKeyCiphertextBlob
The encrypted copy of the private key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.
- Returns:
- The encrypted copy of the private key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.
-
privateKeyPlaintext
The plaintext copy of the private key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.
If the response includes the
CiphertextForRecipientfield, thePrivateKeyPlaintextfield is null or empty.- Returns:
- The plaintext copy of the private key. When you use the HTTP API or the Amazon Web Services CLI, the
value is Base64-encoded. Otherwise, it is not Base64-encoded.
If the response includes the
CiphertextForRecipientfield, thePrivateKeyPlaintextfield is null or empty.
-
publicKey
The public key (in plaintext). When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.
- Returns:
- The public key (in plaintext). When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.
-
keyId
The Amazon Resource Name (key ARN) of the KMS key that encrypted the private key.
- Returns:
- The Amazon Resource Name (key ARN) of the KMS key that encrypted the private key.
-
keyPairSpec
The type of data key pair that was generated.
If the service returns an enum value that is not available in the current SDK version,
keyPairSpecwill returnDataKeyPairSpec.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available fromkeyPairSpecAsString().- Returns:
- The type of data key pair that was generated.
- See Also:
-
keyPairSpecAsString
The type of data key pair that was generated.
If the service returns an enum value that is not available in the current SDK version,
keyPairSpecwill returnDataKeyPairSpec.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available fromkeyPairSpecAsString().- Returns:
- The type of data key pair that was generated.
- See Also:
-
ciphertextForRecipient
The plaintext private data key encrypted with the public key from the attestation document. This ciphertext can be decrypted only by using a private key from the attested environment.
This field is included in the response only when the
Recipientparameter in the request includes a valid attestation document from an Amazon Web Services Nitro enclave or NitroTPM. For information about the interaction between KMS and Amazon Web Services Nitro Enclaves or Amazon Web Services NitroTPM, see Cryptographic attestation support in KMS in the Key Management Service Developer Guide.- Returns:
- The plaintext private data key encrypted with the public key from the attestation document. This
ciphertext can be decrypted only by using a private key from the attested environment.
This field is included in the response only when the
Recipientparameter in the request includes a valid attestation document from an Amazon Web Services Nitro enclave or NitroTPM. For information about the interaction between KMS and Amazon Web Services Nitro Enclaves or Amazon Web Services NitroTPM, see Cryptographic attestation support in KMS in the Key Management Service Developer Guide.
-
keyMaterialId
The identifier of the key material used to encrypt the private key.
- Returns:
- The identifier of the key material used to encrypt the private key.
-
toBuilder
- Specified by:
toBuilderin interfaceToCopyableBuilder<GenerateDataKeyPairResponse.Builder,GenerateDataKeyPairResponse> - Specified by:
toBuilderin classAwsResponse
-
builder
-
serializableBuilderClass
-
hashCode
public final int hashCode()- Overrides:
hashCodein classAwsResponse
-
equals
- Overrides:
equalsin classAwsResponse
-
equalsBySdkFields
- Specified by:
equalsBySdkFieldsin interfaceSdkPojo
-
toString
Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value. -
getValueForField
- Overrides:
getValueForFieldin classSdkResponse
-
sdkFields
-
sdkFieldNameToField
- Specified by:
sdkFieldNameToFieldin interfaceSdkPojo
-