client

package
v3.0.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Feb 24, 2023 License: Apache-2.0 Imports: 5 Imported by: 16

Documentation

Overview

This file is auto-generated, don't edit it. Thanks. *

*

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AsymmetricDecryptRequest

type AsymmetricDecryptRequest struct {
	// The decryption algorithm.
	Algorithm *string `json:"Algorithm,omitempty" xml:"Algorithm,omitempty"`
	// The ciphertext that you want to decrypt.
	//
	// >
	// *   The value is encoded in Base64.
	// *   You can call the [AsymmetricEncrypt](~~148131~~) operation to generate the ciphertext.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The ID of the customer master key (CMK). The ID must be globally unique.
	//
	// >  You can also set this parameter to an alias that is bound to the CMK. For more information, see [Alias overview](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version ID of the CMK. The ID must be globally unique.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
}

func (AsymmetricDecryptRequest) GoString

func (s AsymmetricDecryptRequest) GoString() string

func (*AsymmetricDecryptRequest) SetAlgorithm

func (*AsymmetricDecryptRequest) SetCiphertextBlob

func (s *AsymmetricDecryptRequest) SetCiphertextBlob(v string) *AsymmetricDecryptRequest

func (*AsymmetricDecryptRequest) SetKeyId

func (*AsymmetricDecryptRequest) SetKeyVersionId

func (AsymmetricDecryptRequest) String

func (s AsymmetricDecryptRequest) String() string

type AsymmetricDecryptResponse

type AsymmetricDecryptResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *AsymmetricDecryptResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (AsymmetricDecryptResponse) GoString

func (s AsymmetricDecryptResponse) GoString() string

func (*AsymmetricDecryptResponse) SetBody

func (*AsymmetricDecryptResponse) SetHeaders

func (*AsymmetricDecryptResponse) SetStatusCode

func (AsymmetricDecryptResponse) String

func (s AsymmetricDecryptResponse) String() string

type AsymmetricDecryptResponseBody

type AsymmetricDecryptResponseBody struct {
	// The ID of the CMK. The ID must be globally unique.
	//
	// >  If you set the KeyId parameter in the request to an alias, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version ID of the CMK that is used to encrypt the plaintext.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The Base64-encoded plaintext that is generated after decryption.
	Plaintext *string `json:"Plaintext,omitempty" xml:"Plaintext,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (AsymmetricDecryptResponseBody) GoString

func (*AsymmetricDecryptResponseBody) SetKeyId

func (*AsymmetricDecryptResponseBody) SetKeyVersionId

func (*AsymmetricDecryptResponseBody) SetPlaintext

func (*AsymmetricDecryptResponseBody) SetRequestId

func (AsymmetricDecryptResponseBody) String

type AsymmetricEncryptRequest

type AsymmetricEncryptRequest struct {
	// The encryption algorithm.
	Algorithm *string `json:"Algorithm,omitempty" xml:"Algorithm,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	//
	// >  You can also set this parameter to an alias that is bound to the CMK. For more information, see [Overview of aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version ID of the CMK. The ID must be globally unique.
	//
	// >  You can call the [ListKeyVersions](~~133966~~) operation to query the versions of a CMK. The ID of a version is specified by the KeyVersionId parameter.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The plaintext that you want to encrypt. The plaintext must be Base64-encoded.
	Plaintext *string `json:"Plaintext,omitempty" xml:"Plaintext,omitempty"`
}

func (AsymmetricEncryptRequest) GoString

func (s AsymmetricEncryptRequest) GoString() string

func (*AsymmetricEncryptRequest) SetAlgorithm

func (*AsymmetricEncryptRequest) SetKeyId

func (*AsymmetricEncryptRequest) SetKeyVersionId

func (*AsymmetricEncryptRequest) SetPlaintext

func (AsymmetricEncryptRequest) String

func (s AsymmetricEncryptRequest) String() string

type AsymmetricEncryptResponse

type AsymmetricEncryptResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *AsymmetricEncryptResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (AsymmetricEncryptResponse) GoString

func (s AsymmetricEncryptResponse) GoString() string

func (*AsymmetricEncryptResponse) SetBody

func (*AsymmetricEncryptResponse) SetHeaders

func (*AsymmetricEncryptResponse) SetStatusCode

func (AsymmetricEncryptResponse) String

func (s AsymmetricEncryptResponse) String() string

type AsymmetricEncryptResponseBody

type AsymmetricEncryptResponseBody struct {
	// The Base64-encoded ciphertext that was generated after encryption.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	//
	// >  If you set the KeyId parameter in the request to an alias, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version ID of the CMK that is used to encrypt the plaintext.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (AsymmetricEncryptResponseBody) GoString

func (*AsymmetricEncryptResponseBody) SetCiphertextBlob

func (*AsymmetricEncryptResponseBody) SetKeyId

func (*AsymmetricEncryptResponseBody) SetKeyVersionId

func (*AsymmetricEncryptResponseBody) SetRequestId

func (AsymmetricEncryptResponseBody) String

type AsymmetricSignRequest

type AsymmetricSignRequest struct {
	// The signature algorithm.
	Algorithm *string `json:"Algorithm,omitempty" xml:"Algorithm,omitempty"`
	// The digest that is generated for the original message by using a hash algorithm. The hash algorithm is specified by the Algorithm parameter.
	//
	// >
	// *   The value is encoded in Base64.
	// *   For more information about how to calculate message digests, see the **Preprocess signature: compute a message digest** section of the [Generate and verify a signature by using an asymmetric CMK](~~148146~~) topic.
	Digest *string `json:"Digest,omitempty" xml:"Digest,omitempty"`
	// The ID of the customer master key (CMK). The ID must be globally unique.
	//
	// >  You can also set this parameter to an alias that is bound to the CMK. For more information, see [Alias overview](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version ID of the CMK. The ID must be globally unique.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
}

func (AsymmetricSignRequest) GoString

func (s AsymmetricSignRequest) GoString() string

func (*AsymmetricSignRequest) SetAlgorithm

func (*AsymmetricSignRequest) SetDigest

func (*AsymmetricSignRequest) SetKeyId

func (*AsymmetricSignRequest) SetKeyVersionId

func (s *AsymmetricSignRequest) SetKeyVersionId(v string) *AsymmetricSignRequest

func (AsymmetricSignRequest) String

func (s AsymmetricSignRequest) String() string

type AsymmetricSignResponse

type AsymmetricSignResponse struct {
	Headers    map[string]*string          `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                      `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *AsymmetricSignResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (AsymmetricSignResponse) GoString

func (s AsymmetricSignResponse) GoString() string

func (*AsymmetricSignResponse) SetBody

func (*AsymmetricSignResponse) SetHeaders

func (*AsymmetricSignResponse) SetStatusCode

func (AsymmetricSignResponse) String

func (s AsymmetricSignResponse) String() string

type AsymmetricSignResponseBody

type AsymmetricSignResponseBody struct {
	// The ID of the CMK. The ID must be globally unique.
	//
	// >  If you set the KeyId parameter in the request to an alias, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version ID of the CMK. The ID must be globally unique.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The calculated signature.
	//
	// >  The value is encoded in Base64.
	Value *string `json:"Value,omitempty" xml:"Value,omitempty"`
}

func (AsymmetricSignResponseBody) GoString

func (s AsymmetricSignResponseBody) GoString() string

func (*AsymmetricSignResponseBody) SetKeyId

func (*AsymmetricSignResponseBody) SetKeyVersionId

func (*AsymmetricSignResponseBody) SetRequestId

func (*AsymmetricSignResponseBody) SetValue

func (AsymmetricSignResponseBody) String

type AsymmetricVerifyRequest

type AsymmetricVerifyRequest struct {
	// The signature algorithm.
	Algorithm *string `json:"Algorithm,omitempty" xml:"Algorithm,omitempty"`
	// The digest that is generated for the original message by using a hash algorithm. The hash algorithm is specified by the **Algorithm** parameter.
	//
	// >  The value is encoded in Base64.
	Digest *string `json:"Digest,omitempty" xml:"Digest,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	//
	// >  You can also set this parameter to an alias that is bound to the CMK. For more information, see [Overview of aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version ID of the CMK. The ID must be globally unique.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The signature value to be verified.
	//
	// >  The value is encoded in Base64.
	Value *string `json:"Value,omitempty" xml:"Value,omitempty"`
}

func (AsymmetricVerifyRequest) GoString

func (s AsymmetricVerifyRequest) GoString() string

func (*AsymmetricVerifyRequest) SetAlgorithm

func (*AsymmetricVerifyRequest) SetDigest

func (*AsymmetricVerifyRequest) SetKeyId

func (*AsymmetricVerifyRequest) SetKeyVersionId

func (*AsymmetricVerifyRequest) SetValue

func (AsymmetricVerifyRequest) String

func (s AsymmetricVerifyRequest) String() string

type AsymmetricVerifyResponse

type AsymmetricVerifyResponse struct {
	Headers    map[string]*string            `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                        `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *AsymmetricVerifyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (AsymmetricVerifyResponse) GoString

func (s AsymmetricVerifyResponse) GoString() string

func (*AsymmetricVerifyResponse) SetBody

func (*AsymmetricVerifyResponse) SetHeaders

func (*AsymmetricVerifyResponse) SetStatusCode

func (AsymmetricVerifyResponse) String

func (s AsymmetricVerifyResponse) String() string

type AsymmetricVerifyResponseBody

type AsymmetricVerifyResponseBody struct {
	// The ID of the CMK. The ID must be globally unique.
	//
	// >  If you set the KeyId parameter in the request to an alias, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version ID of the CMK that is used to encrypt the plaintext.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// Indicates whether the signature passed the verification.
	Value *bool `json:"Value,omitempty" xml:"Value,omitempty"`
}

func (AsymmetricVerifyResponseBody) GoString

func (s AsymmetricVerifyResponseBody) GoString() string

func (*AsymmetricVerifyResponseBody) SetKeyId

func (*AsymmetricVerifyResponseBody) SetKeyVersionId

func (*AsymmetricVerifyResponseBody) SetRequestId

func (*AsymmetricVerifyResponseBody) SetValue

func (AsymmetricVerifyResponseBody) String

type CancelKeyDeletionRequest

type CancelKeyDeletionRequest struct {
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (CancelKeyDeletionRequest) GoString

func (s CancelKeyDeletionRequest) GoString() string

func (*CancelKeyDeletionRequest) SetKeyId

func (CancelKeyDeletionRequest) String

func (s CancelKeyDeletionRequest) String() string

type CancelKeyDeletionResponse

type CancelKeyDeletionResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CancelKeyDeletionResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CancelKeyDeletionResponse) GoString

func (s CancelKeyDeletionResponse) GoString() string

func (*CancelKeyDeletionResponse) SetBody

func (*CancelKeyDeletionResponse) SetHeaders

func (*CancelKeyDeletionResponse) SetStatusCode

func (CancelKeyDeletionResponse) String

func (s CancelKeyDeletionResponse) String() string

type CancelKeyDeletionResponseBody

type CancelKeyDeletionResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (CancelKeyDeletionResponseBody) GoString

func (*CancelKeyDeletionResponseBody) SetRequestId

func (CancelKeyDeletionResponseBody) String

type CertificatePrivateKeyDecryptRequest

type CertificatePrivateKeyDecryptRequest struct {
	// The encryption algorithm. Valid values:
	//
	// *   RSAES_OAEP_SHA\_1
	//
	// *   RSAES_OAEP_SHA\_256
	//
	// *   SM2PKE
	//
	// > The SM2PKE encryption algorithm is supported only in regions in mainland China. In these regions, managed hardware security modules (HSMs) are used. For more information, see [Managed HSM overview](~~125803~~).
	Algorithm *string `json:"Algorithm,omitempty" xml:"Algorithm,omitempty"`
	// The ID of the certificate. The ID must be globally unique in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The data that you want to decrypt.
	//
	// The value is encoded in Base64.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
}

func (CertificatePrivateKeyDecryptRequest) GoString

func (*CertificatePrivateKeyDecryptRequest) SetAlgorithm

func (*CertificatePrivateKeyDecryptRequest) SetCertificateId

func (*CertificatePrivateKeyDecryptRequest) SetCiphertextBlob

func (CertificatePrivateKeyDecryptRequest) String

type CertificatePrivateKeyDecryptResponse

type CertificatePrivateKeyDecryptResponse struct {
	Headers    map[string]*string                        `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                    `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CertificatePrivateKeyDecryptResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CertificatePrivateKeyDecryptResponse) GoString

func (*CertificatePrivateKeyDecryptResponse) SetHeaders

func (*CertificatePrivateKeyDecryptResponse) SetStatusCode

func (CertificatePrivateKeyDecryptResponse) String

type CertificatePrivateKeyDecryptResponseBody

type CertificatePrivateKeyDecryptResponseBody struct {
	// The ID of the certificate.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The plaintext after data is decrypted.
	//
	// The value is encoded in Base64.
	Plaintext *string `json:"Plaintext,omitempty" xml:"Plaintext,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (CertificatePrivateKeyDecryptResponseBody) GoString

func (*CertificatePrivateKeyDecryptResponseBody) SetCertificateId

func (*CertificatePrivateKeyDecryptResponseBody) SetPlaintext

func (*CertificatePrivateKeyDecryptResponseBody) SetRequestId

func (CertificatePrivateKeyDecryptResponseBody) String

type CertificatePrivateKeySignRequest

type CertificatePrivateKeySignRequest struct {
	// The signature algorithm. Valid values:
	//
	// *   RSA_PKCS1\_SHA\_256
	//
	// *   RSA_PSS_SHA\_256
	//
	// *   ECDSA_SHA\_256
	//
	// *   SM2DSA
	//
	// >* The SM2DSA signature algorithm is supported only in regions where managed hardware security modules (HSMs) are used in mainland China. For more information, see [Managed HSM overview](~~125803~~).
	Algorithm *string `json:"Algorithm,omitempty" xml:"Algorithm,omitempty"`
	// The ID of the certificate. The ID must be globally unique in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The data to be signed.
	//
	// The value is encoded in Base64. For example, if the hexadecimal data that you want to sign is `[0x31, 0x32, 0x33, 0x34]`, the Base64-encoded data is `MTIzNA==`.
	//
	// If the MessageType parameter is set to RAW, the size of the data must be less than or equal to 4 KB.
	//
	// If the size of the data is greater than 4 KB, you can set the MessageType parameter to DIGEST and set the Message parameter to the digest of the data. The digest is also called hash value. You can compute the digest of the data on an on-premises machine. Certificates Manager uses the digest that you compute in your own certificate application system. The message digest algorithm that you use must match the specified signature algorithm. Comply with the following mapping between signature algorithms and message digest algorithms:
	//
	// *   If the signature algorithm is RSA_PKCS1\_SHA\_256, RSA_PSS_SHA\_256, or ECDSA_SHA\_256, the message digest algorithm must be SHA-256.
	// *   If the signature algorithm is SM2DSA, the message digest algorithm must be SM3.
	//
	// >  If the key type of the certificate is EC_SM2 and the MessageType parameter is set to DIGEST, the value of the Message parameter is `e` that is described in GB/T 32918.2-2016 6.1.
	Message *string `json:"Message,omitempty" xml:"Message,omitempty"`
	// The type of the message. Valid values:
	//
	// *   RAW: the raw data. This is the default value.
	// *   DIGEST: the message digest (hash value) of the raw data.
	MessageType *string `json:"MessageType,omitempty" xml:"MessageType,omitempty"`
}

func (CertificatePrivateKeySignRequest) GoString

func (*CertificatePrivateKeySignRequest) SetAlgorithm

func (*CertificatePrivateKeySignRequest) SetCertificateId

func (*CertificatePrivateKeySignRequest) SetMessage

func (*CertificatePrivateKeySignRequest) SetMessageType

func (CertificatePrivateKeySignRequest) String

type CertificatePrivateKeySignResponse

type CertificatePrivateKeySignResponse struct {
	Headers    map[string]*string                     `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                 `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CertificatePrivateKeySignResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CertificatePrivateKeySignResponse) GoString

func (*CertificatePrivateKeySignResponse) SetHeaders

func (*CertificatePrivateKeySignResponse) SetStatusCode

func (CertificatePrivateKeySignResponse) String

type CertificatePrivateKeySignResponseBody

type CertificatePrivateKeySignResponseBody struct {
	// The ID of the certificate.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The signature value.
	//
	// The value is encoded in Base64.
	SignatureValue *string `json:"SignatureValue,omitempty" xml:"SignatureValue,omitempty"`
}

func (CertificatePrivateKeySignResponseBody) GoString

func (*CertificatePrivateKeySignResponseBody) SetCertificateId

func (*CertificatePrivateKeySignResponseBody) SetRequestId

func (*CertificatePrivateKeySignResponseBody) SetSignatureValue

func (CertificatePrivateKeySignResponseBody) String

type CertificatePublicKeyEncryptRequest

type CertificatePublicKeyEncryptRequest struct {
	// The encryption algorithm. Valid values:
	//
	// *   RSAES_OAEP_SHA\_1
	//
	// *   RSAES_OAEP_SHA\_256
	//
	// *   SM2PKE
	//
	// >The SM2PKE encryption algorithm is supported only in regions in mainland China. In these regions, managed hardware security modules (HSMs) are used. For more information, see [Managed HSM overview](~~125803~~).
	Algorithm *string `json:"Algorithm,omitempty" xml:"Algorithm,omitempty"`
	// The ID of the certificate. The ID must be globally unique in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The data that you want to encrypt.
	//
	// The value is encoded in Base64. For example, if the hexadecimal data that you want to encrypt is `[0x31, 0x32, 0x33, 0x34]`, the Base64-encoded data is `MTIzNA==`.
	//
	// The size of data that can be encrypted varies based on the encryption algorithm that you use:
	//
	// *   RSAES_OAEP_SHA\_1: 214 bytes
	// *   RSAES_OAEP_SHA\_256: 190 bytes
	// *   SM2PKE: 6,047 bytes
	//
	// If the size of data that you want to encrypt exceeds the preceding limits, you can call the [GenerateDataKey](~~28948~~) operation to generate a data key to encrypt the data. Then, call the CertificatePublicKeyEncrypt operation to encrypt the data key.
	Plaintext *string `json:"Plaintext,omitempty" xml:"Plaintext,omitempty"`
}

func (CertificatePublicKeyEncryptRequest) GoString

func (*CertificatePublicKeyEncryptRequest) SetAlgorithm

func (*CertificatePublicKeyEncryptRequest) SetCertificateId

func (*CertificatePublicKeyEncryptRequest) SetPlaintext

func (CertificatePublicKeyEncryptRequest) String

type CertificatePublicKeyEncryptResponse

type CertificatePublicKeyEncryptResponse struct {
	Headers    map[string]*string                       `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                   `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CertificatePublicKeyEncryptResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CertificatePublicKeyEncryptResponse) GoString

func (*CertificatePublicKeyEncryptResponse) SetHeaders

func (*CertificatePublicKeyEncryptResponse) SetStatusCode

func (CertificatePublicKeyEncryptResponse) String

type CertificatePublicKeyEncryptResponseBody

type CertificatePublicKeyEncryptResponseBody struct {
	// The ID of the certificate.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The ciphertext.
	//
	// The value is encoded in Base64.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (CertificatePublicKeyEncryptResponseBody) GoString

func (*CertificatePublicKeyEncryptResponseBody) SetCertificateId

func (*CertificatePublicKeyEncryptResponseBody) SetCiphertextBlob

func (*CertificatePublicKeyEncryptResponseBody) SetRequestId

func (CertificatePublicKeyEncryptResponseBody) String

type CertificatePublicKeyVerifyRequest

type CertificatePublicKeyVerifyRequest struct {
	// The signature algorithm. Valid values:
	//
	// *   RSA_PKCS1\_SHA\_256
	//
	// *   RSA_PSS_SHA\_256
	//
	// *   ECDSA_SHA\_256
	//
	// *   SM2DSA
	//
	// > The SM2DSA signature algorithm is supported only in regions where managed hardware security modules (HSMs) are used in the Chinese mainland. For more information, see [Managed HSM overview](~~125803~~).
	Algorithm *string `json:"Algorithm,omitempty" xml:"Algorithm,omitempty"`
	// The ID of the certificate. The ID must be globally unique in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The raw data that is signed.
	//
	// The value is encoded in Base64. For example, if the raw data in the hexadecimal format is `[0x31, 0x32, 0x33, 0x34]`, set this parameter to the Base64-encoded value `MTIzNA==`.
	//
	// If the MessageType parameter is set to RAW, the size of the data must be less than or equal to 4 KB.
	//
	// If the size of the data is greater than 4 KB, you can set the MessageType parameter to DIGEST and set the Message parameter to the digest of the data. The digest is also called hash value. You can compute the digest of the data on an on-premises device. Certificates Manager uses the digest that you compute in your own certificate application system. The message digest algorithm that you use must match the specified signature algorithm. Comply with the following mapping between signature algorithms and message digest algorithms:
	//
	// *   If the signature algorithm is RSA_PKCS1\_SHA\_256, RSA_PSS_SHA\_256, or ECDSA_SHA\_256, the message digest algorithm must be SHA-256.
	// *   If the signature algorithm is SM2DSA, the message digest algorithm must be SM3.
	//
	// >  If the key type of the certificate is EC_SM2 and the MessageType parameter is set to DIGEST, the value of the Message parameter is `e` that is described in GB/T 32918.2-2016 6.1.
	Message *string `json:"Message,omitempty" xml:"Message,omitempty"`
	// The type of the message. Valid values:
	//
	// *   RAW: the raw data. This is the default value.
	// *   DIGEST: the message digest (hash value) of the raw data.
	MessageType *string `json:"MessageType,omitempty" xml:"MessageType,omitempty"`
	// The signature value.
	//
	// The value is encoded in Base64.
	SignatureValue *string `json:"SignatureValue,omitempty" xml:"SignatureValue,omitempty"`
}

func (CertificatePublicKeyVerifyRequest) GoString

func (*CertificatePublicKeyVerifyRequest) SetAlgorithm

func (*CertificatePublicKeyVerifyRequest) SetCertificateId

func (*CertificatePublicKeyVerifyRequest) SetMessage

func (*CertificatePublicKeyVerifyRequest) SetMessageType

func (*CertificatePublicKeyVerifyRequest) SetSignatureValue

func (CertificatePublicKeyVerifyRequest) String

type CertificatePublicKeyVerifyResponse

type CertificatePublicKeyVerifyResponse struct {
	Headers    map[string]*string                      `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                  `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CertificatePublicKeyVerifyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CertificatePublicKeyVerifyResponse) GoString

func (*CertificatePublicKeyVerifyResponse) SetHeaders

func (*CertificatePublicKeyVerifyResponse) SetStatusCode

func (CertificatePublicKeyVerifyResponse) String

type CertificatePublicKeyVerifyResponseBody

type CertificatePublicKeyVerifyResponseBody struct {
	// The ID of the certificate.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The verification result. Valid values:
	//
	// *   true: The signature is valid.
	// *   false: The signature is invalid.
	SignatureValid *bool `json:"SignatureValid,omitempty" xml:"SignatureValid,omitempty"`
}

func (CertificatePublicKeyVerifyResponseBody) GoString

func (*CertificatePublicKeyVerifyResponseBody) SetCertificateId

func (*CertificatePublicKeyVerifyResponseBody) SetRequestId

func (*CertificatePublicKeyVerifyResponseBody) SetSignatureValid

func (CertificatePublicKeyVerifyResponseBody) String

type Client

type Client struct {
	openapi.Client
}

func NewClient

func NewClient(config *openapi.Config) (*Client, error)

func (*Client) AsymmetricDecrypt

func (client *Client) AsymmetricDecrypt(request *AsymmetricDecryptRequest) (_result *AsymmetricDecryptResponse, _err error)

*

  • This operation supports only asymmetric keys for which the **Usage** parameter is set to **ENCRYPT/DECRYPT**. The following table lists supported encryption algorithms.
  • | KeySpec | Algorithm | Description | Maximum length in bytes |
  • | ------- | --------- | ----------- | ----------------------- |
  • | RSA_2048 | RSAES_OAEP_SHA_256 | RSAES-OAEP using SHA-256 and MGF1 with SHA-256 | 256 |
  • | RSA_2048 | RSAES_OAEP_SHA_1 | RSAES-OAEP using SHA1 and MGF1 with SHA1 | 256 |
  • | RSA_3072 | RSAES_OAEP_SHA_256 | RSAES-OAEP using SHA-256 and MGF1 with SHA-256 | 384 |
  • | RSA_3072 | RSAES_OAEP_SHA_1 | RSAES-OAEP using SHA1 and MGF1 with SHA1 | 384 |
  • | EC_SM2 | SM2PKE | SM2 public key encryption algorithm based on elliptic curves | 6144 |
  • In this example, the asymmetric key whose ID is `5c438b18-05be-40ad-b6c2-3be6752c****` and version ID is `2ab1a983-7072-4bbc-a582-584b5bd8****` and the decryption algorithm `RSAES_OAEP_SHA_1` are used to decrypt the ciphertext `BQKP+1zK6+ZEMxTP5qaVzcsgXtWplYBKm0NXdSnB5FzliFxE1bSiu4dnEIlca2JpeH7yz1/S6fed630H+hIH6DoM25fTLNcKj+mFB0Xnh9m2+HN59Mn4qyTfcUeadnfCXSWcGBouhXFwcdd2rJ3n337bzTf4jm659gZu3L0i6PLuxM9p7mqdwO0cKJPfGVfhnfMz+f4alMg79WB/NNyE2lyX7/qxvV49ObNrrJbKSFiz8Djocaf0IESNLMbfYI5bXjWkJlX92DQbKhibtQW8ZOJ//ZC6t0AWcUoKL6QDm/dg5koQalcleRinpB+QadFm894sLbVZ9+N4GVsv1W****==`. *
  • @param request AsymmetricDecryptRequest
  • @return AsymmetricDecryptResponse

func (*Client) AsymmetricDecryptWithOptions

func (client *Client) AsymmetricDecryptWithOptions(request *AsymmetricDecryptRequest, runtime *util.RuntimeOptions) (_result *AsymmetricDecryptResponse, _err error)

*

  • This operation supports only asymmetric keys for which the **Usage** parameter is set to **ENCRYPT/DECRYPT**. The following table lists supported encryption algorithms.
  • | KeySpec | Algorithm | Description | Maximum length in bytes |
  • | ------- | --------- | ----------- | ----------------------- |
  • | RSA_2048 | RSAES_OAEP_SHA_256 | RSAES-OAEP using SHA-256 and MGF1 with SHA-256 | 256 |
  • | RSA_2048 | RSAES_OAEP_SHA_1 | RSAES-OAEP using SHA1 and MGF1 with SHA1 | 256 |
  • | RSA_3072 | RSAES_OAEP_SHA_256 | RSAES-OAEP using SHA-256 and MGF1 with SHA-256 | 384 |
  • | RSA_3072 | RSAES_OAEP_SHA_1 | RSAES-OAEP using SHA1 and MGF1 with SHA1 | 384 |
  • | EC_SM2 | SM2PKE | SM2 public key encryption algorithm based on elliptic curves | 6144 |
  • In this example, the asymmetric key whose ID is `5c438b18-05be-40ad-b6c2-3be6752c****` and version ID is `2ab1a983-7072-4bbc-a582-584b5bd8****` and the decryption algorithm `RSAES_OAEP_SHA_1` are used to decrypt the ciphertext `BQKP+1zK6+ZEMxTP5qaVzcsgXtWplYBKm0NXdSnB5FzliFxE1bSiu4dnEIlca2JpeH7yz1/S6fed630H+hIH6DoM25fTLNcKj+mFB0Xnh9m2+HN59Mn4qyTfcUeadnfCXSWcGBouhXFwcdd2rJ3n337bzTf4jm659gZu3L0i6PLuxM9p7mqdwO0cKJPfGVfhnfMz+f4alMg79WB/NNyE2lyX7/qxvV49ObNrrJbKSFiz8Djocaf0IESNLMbfYI5bXjWkJlX92DQbKhibtQW8ZOJ//ZC6t0AWcUoKL6QDm/dg5koQalcleRinpB+QadFm894sLbVZ9+N4GVsv1W****==`. *
  • @param request AsymmetricDecryptRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return AsymmetricDecryptResponse

func (*Client) AsymmetricEncrypt

func (client *Client) AsymmetricEncrypt(request *AsymmetricEncryptRequest) (_result *AsymmetricEncryptResponse, _err error)

*

  • This operation is supported only for asymmetric keys for which the **Usage** parameter is set to **ENCRYPT/DECRYPT**. The following table lists the supported encryption algorithms:
  • | KeySpec | Algorithm | Description | Maximum number of bytes that can be encrypted |
  • | ------- | --------- | ----------- | --------------------------------------------- |
  • | RSA_2048 | RSAES_OAEP_SHA_256 | RSAES-OAEP using SHA-256 and MGF1 with SHA-256 | 190 |
  • | RSA_2048 | RSAES_OAEP_SHA_1 | RSAES-OAEP using SHA1 and MGF1 with SHA1 | 214 |
  • | RSA_3072 | RSAES_OAEP_SHA_256 | RSAES-OAEP using SHA-256 and MGF1 with SHA-256 | 318 |
  • | RSA_3072 | RSAES_OAEP_SHA_1 | RSAES-OAEP using SHA1 and MGF1 with SHA1 | 342 |
  • | EC_SM2 | SM2PKE | SM2 public key encryption algorithm based on elliptic curves | 6047 |
  • You can use the asymmetric CMK whose ID is `5c438b18-05be-40ad-b6c2-3be6752c****` and version ID is `2ab1a983-7072-4bbc-a582-584b5bd8****` and the algorithm `RSAES_OAEP_SHA_1` to encrypt the plaintext `SGVsbG8gd29ybGQ=` based on the parameter settings provided in this topic. *
  • @param request AsymmetricEncryptRequest
  • @return AsymmetricEncryptResponse

func (*Client) AsymmetricEncryptWithOptions

func (client *Client) AsymmetricEncryptWithOptions(request *AsymmetricEncryptRequest, runtime *util.RuntimeOptions) (_result *AsymmetricEncryptResponse, _err error)

*

  • This operation is supported only for asymmetric keys for which the **Usage** parameter is set to **ENCRYPT/DECRYPT**. The following table lists the supported encryption algorithms:
  • | KeySpec | Algorithm | Description | Maximum number of bytes that can be encrypted |
  • | ------- | --------- | ----------- | --------------------------------------------- |
  • | RSA_2048 | RSAES_OAEP_SHA_256 | RSAES-OAEP using SHA-256 and MGF1 with SHA-256 | 190 |
  • | RSA_2048 | RSAES_OAEP_SHA_1 | RSAES-OAEP using SHA1 and MGF1 with SHA1 | 214 |
  • | RSA_3072 | RSAES_OAEP_SHA_256 | RSAES-OAEP using SHA-256 and MGF1 with SHA-256 | 318 |
  • | RSA_3072 | RSAES_OAEP_SHA_1 | RSAES-OAEP using SHA1 and MGF1 with SHA1 | 342 |
  • | EC_SM2 | SM2PKE | SM2 public key encryption algorithm based on elliptic curves | 6047 |
  • You can use the asymmetric CMK whose ID is `5c438b18-05be-40ad-b6c2-3be6752c****` and version ID is `2ab1a983-7072-4bbc-a582-584b5bd8****` and the algorithm `RSAES_OAEP_SHA_1` to encrypt the plaintext `SGVsbG8gd29ybGQ=` based on the parameter settings provided in this topic. *
  • @param request AsymmetricEncryptRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return AsymmetricEncryptResponse

func (*Client) AsymmetricSign

func (client *Client) AsymmetricSign(request *AsymmetricSignRequest) (_result *AsymmetricSignResponse, _err error)

*

  • This operation supports only asymmetric keys for which the **Usage** parameter is set to **SIGN/VERIFY**. The following table describes the supported signature algorithms.
  • | KeySpec | Algorithm | Description |
  • | ------- | --------- | ----------- |
  • | RSA_2048 | RSA_PSS_SHA_256 | RSASSA-PSS using SHA-256 and MGF1 with SHA-256 |
  • | RSA_2048 | RSA_PKCS1_SHA_256 | RSASSA-PKCS1-v1_5 using SHA-256 |
  • | RSA_3072 | RSA_PSS_SHA_256 | RSASSA-PSS using SHA-256 and MGF1 with SHA-256 |
  • | RSA_3072 | RSA_PKCS1_SHA_256 | RSASSA-PKCS1-v1_5 using SHA-256 |
  • | EC_P256 | ECDSA_SHA_256 | ECDSA on the P-256 Curve(secp256r1) with a SHA-256 digest |
  • | EC_P256K | ECDSA_SHA_256 | ECDSA on the P-256K Curve(secp256k1) with a SHA-256 digest |
  • | EC_SM2 | SM2DSA | SM2 public key encryption algorithm based on elliptic curves cryptography (ECC) |
  • > According to GB/T 32918.2 "Information security technology-Public key cryptographic algorithm SM2 based on elliptic curves-Part 2: Digital signature algorithm", when you calculate the SM2 signature, the **Digest** parameter is used to calculate the digest value of the combination of Z(A) and M, rather than the SM3 digest value. M indicates the original message to be signed. Z(A) indicates the hash value for User A. The hash value is defined in GB/T GB/T 32918.2. In this example, the asymmetric key whose ID is `5c438b18-05be-40ad-b6c2-3be6752c****` and version ID is `2ab1a983-7072-4bbc-a582-584b5bd8****` and the signature algorithm `RSA_PSS_SHA_256` are used to generate a signature for the digest `ZOyIygCyaOW6GjVnihtTFtIS9PNmskdyMlNKiuy****=`. *
  • @param request AsymmetricSignRequest
  • @return AsymmetricSignResponse

func (*Client) AsymmetricSignWithOptions

func (client *Client) AsymmetricSignWithOptions(request *AsymmetricSignRequest, runtime *util.RuntimeOptions) (_result *AsymmetricSignResponse, _err error)

*

  • This operation supports only asymmetric keys for which the **Usage** parameter is set to **SIGN/VERIFY**. The following table describes the supported signature algorithms.
  • | KeySpec | Algorithm | Description |
  • | ------- | --------- | ----------- |
  • | RSA_2048 | RSA_PSS_SHA_256 | RSASSA-PSS using SHA-256 and MGF1 with SHA-256 |
  • | RSA_2048 | RSA_PKCS1_SHA_256 | RSASSA-PKCS1-v1_5 using SHA-256 |
  • | RSA_3072 | RSA_PSS_SHA_256 | RSASSA-PSS using SHA-256 and MGF1 with SHA-256 |
  • | RSA_3072 | RSA_PKCS1_SHA_256 | RSASSA-PKCS1-v1_5 using SHA-256 |
  • | EC_P256 | ECDSA_SHA_256 | ECDSA on the P-256 Curve(secp256r1) with a SHA-256 digest |
  • | EC_P256K | ECDSA_SHA_256 | ECDSA on the P-256K Curve(secp256k1) with a SHA-256 digest |
  • | EC_SM2 | SM2DSA | SM2 public key encryption algorithm based on elliptic curves cryptography (ECC) |
  • > According to GB/T 32918.2 "Information security technology-Public key cryptographic algorithm SM2 based on elliptic curves-Part 2: Digital signature algorithm", when you calculate the SM2 signature, the **Digest** parameter is used to calculate the digest value of the combination of Z(A) and M, rather than the SM3 digest value. M indicates the original message to be signed. Z(A) indicates the hash value for User A. The hash value is defined in GB/T GB/T 32918.2. In this example, the asymmetric key whose ID is `5c438b18-05be-40ad-b6c2-3be6752c****` and version ID is `2ab1a983-7072-4bbc-a582-584b5bd8****` and the signature algorithm `RSA_PSS_SHA_256` are used to generate a signature for the digest `ZOyIygCyaOW6GjVnihtTFtIS9PNmskdyMlNKiuy****=`. *
  • @param request AsymmetricSignRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return AsymmetricSignResponse

func (*Client) AsymmetricVerify

func (client *Client) AsymmetricVerify(request *AsymmetricVerifyRequest) (_result *AsymmetricVerifyResponse, _err error)

*

  • This operation supports only asymmetric keys for which the **Usage** parameter is set to **SIGN/VERIFY**. The following table describes the supported signature algorithms.
  • | KeySpec | Algorithm | Description |
  • | ------- | --------- | ----------- |
  • | RSA_2048 | RSA_PSS_SHA_256 | RSASSA-PSS using SHA-256 and MGF1 with SHA-256 |
  • | RSA_2048 | RSA_PKCS1_SHA_256 | RSASSA-PKCS1-v1_5 using SHA-256 |
  • | RSA_3072 | RSA_PSS_SHA_256 | RSASSA-PSS using SHA-256 and MGF1 with SHA-256 |
  • | RSA_3072 | RSA_PKCS1_SHA_256 | RSASSA-PKCS1-v1_5 using SHA-256 |
  • | EC_P256 | ECDSA_SHA_256 | ECDSA on the P-256 Curve(secp256r1) with a SHA-256 digest |
  • | EC_P256K | ECDSA_SHA_256 | ECDSA on the P-256K Curve(secp256k1) with a SHA-256 digest |
  • | EC_SM2 | SM2DSA | SM2 elliptic curve public key encryption algorithm |
  • > When you calculate the SM2 signature based on GB/T 32918, the **Digest** parameter is used to calculate the digest value of the combination of Z(A) and M, rather than the SM3 digest value. M indicates the original message to be signed. Z(A) indicates the hash value for User A. The hash value is defined in GB/T 32918. In this example, the asymmetric key whose ID is `5c438b18-05be-40ad-b6c2-3be6752c****` and version ID is `2ab1a983-7072-4bbc-a582-584b5bd8****` and the signature algorithm RSA_PSS_SHA_256 are used to verify the signature `M2CceNZH00ZgL9ED/ZHFp21YRAvYeZHknJUc207OCZ0N9wNn9As4z2bON3FF3je+1Nu+2+/8Zj50HpMTpzYpMp2R93cYmACCmhaYoKydxylbyGzJR8y9likZRCrkD38lRoS40aBBvv/6iRKzQuo9EGYVcel36cMNg00VmYNBy3pa1rwg3gA4l3cy6kjayZja1WGPkVhrVKsrJMdbpl0ApLjXKuD8rw1n1XLCwCUEL5eLPljTZaAveqdOFQOiZnZEGI27qIiZe7I1fN8tcz6anS/gTM7xRKE++5egEvRWlTQQTJeApnPSiUPA+8ZykNdelQsOQh5SrGoyI4A5pq****==` of the digest `ZOyIygCyaOW6GjVnihtTFtIS9PNmskdyMlNKiuyjfzw=`. *
  • @param request AsymmetricVerifyRequest
  • @return AsymmetricVerifyResponse

func (*Client) AsymmetricVerifyWithOptions

func (client *Client) AsymmetricVerifyWithOptions(request *AsymmetricVerifyRequest, runtime *util.RuntimeOptions) (_result *AsymmetricVerifyResponse, _err error)

*

  • This operation supports only asymmetric keys for which the **Usage** parameter is set to **SIGN/VERIFY**. The following table describes the supported signature algorithms.
  • | KeySpec | Algorithm | Description |
  • | ------- | --------- | ----------- |
  • | RSA_2048 | RSA_PSS_SHA_256 | RSASSA-PSS using SHA-256 and MGF1 with SHA-256 |
  • | RSA_2048 | RSA_PKCS1_SHA_256 | RSASSA-PKCS1-v1_5 using SHA-256 |
  • | RSA_3072 | RSA_PSS_SHA_256 | RSASSA-PSS using SHA-256 and MGF1 with SHA-256 |
  • | RSA_3072 | RSA_PKCS1_SHA_256 | RSASSA-PKCS1-v1_5 using SHA-256 |
  • | EC_P256 | ECDSA_SHA_256 | ECDSA on the P-256 Curve(secp256r1) with a SHA-256 digest |
  • | EC_P256K | ECDSA_SHA_256 | ECDSA on the P-256K Curve(secp256k1) with a SHA-256 digest |
  • | EC_SM2 | SM2DSA | SM2 elliptic curve public key encryption algorithm |
  • > When you calculate the SM2 signature based on GB/T 32918, the **Digest** parameter is used to calculate the digest value of the combination of Z(A) and M, rather than the SM3 digest value. M indicates the original message to be signed. Z(A) indicates the hash value for User A. The hash value is defined in GB/T 32918. In this example, the asymmetric key whose ID is `5c438b18-05be-40ad-b6c2-3be6752c****` and version ID is `2ab1a983-7072-4bbc-a582-584b5bd8****` and the signature algorithm RSA_PSS_SHA_256 are used to verify the signature `M2CceNZH00ZgL9ED/ZHFp21YRAvYeZHknJUc207OCZ0N9wNn9As4z2bON3FF3je+1Nu+2+/8Zj50HpMTpzYpMp2R93cYmACCmhaYoKydxylbyGzJR8y9likZRCrkD38lRoS40aBBvv/6iRKzQuo9EGYVcel36cMNg00VmYNBy3pa1rwg3gA4l3cy6kjayZja1WGPkVhrVKsrJMdbpl0ApLjXKuD8rw1n1XLCwCUEL5eLPljTZaAveqdOFQOiZnZEGI27qIiZe7I1fN8tcz6anS/gTM7xRKE++5egEvRWlTQQTJeApnPSiUPA+8ZykNdelQsOQh5SrGoyI4A5pq****==` of the digest `ZOyIygCyaOW6GjVnihtTFtIS9PNmskdyMlNKiuyjfzw=`. *
  • @param request AsymmetricVerifyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return AsymmetricVerifyResponse

func (*Client) CancelKeyDeletion

func (client *Client) CancelKeyDeletion(request *CancelKeyDeletionRequest) (_result *CancelKeyDeletionResponse, _err error)

*

  • If the deletion task of a CMK is canceled, the CMK returns to the Enabled state. *
  • @param request CancelKeyDeletionRequest
  • @return CancelKeyDeletionResponse

func (*Client) CancelKeyDeletionWithOptions

func (client *Client) CancelKeyDeletionWithOptions(request *CancelKeyDeletionRequest, runtime *util.RuntimeOptions) (_result *CancelKeyDeletionResponse, _err error)

*

  • If the deletion task of a CMK is canceled, the CMK returns to the Enabled state. *
  • @param request CancelKeyDeletionRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CancelKeyDeletionResponse

func (*Client) CertificatePrivateKeyDecrypt

func (client *Client) CertificatePrivateKeyDecrypt(request *CertificatePrivateKeyDecryptRequest) (_result *CertificatePrivateKeyDecryptResponse, _err error)

*

  • Limit: The encryption algorithm in the request parameters must match the key type.
  • The following table describes the mapping between encryption algorithms and key types.
  • | Algorithm | Key Spec |
  • | --------- | -------- |
  • | RSAES_OAEP_SHA_1 | RSA_2048 |
  • | RSAES_OAEP_SHA_256 | RSA_2048 |
  • | SM2PKE | EC_SM2 |
  • In this example, the certificate whose ID is `12345678-1234-1234-1234-12345678****` and the encryption algorithm `RSAES_OAEP_SHA_256` are used to decrypt the data `ZOyIygCyaOW6Gj****MlNKiuyjfzw=`. *
  • @param request CertificatePrivateKeyDecryptRequest
  • @return CertificatePrivateKeyDecryptResponse

func (*Client) CertificatePrivateKeyDecryptWithOptions

func (client *Client) CertificatePrivateKeyDecryptWithOptions(request *CertificatePrivateKeyDecryptRequest, runtime *util.RuntimeOptions) (_result *CertificatePrivateKeyDecryptResponse, _err error)

*

  • Limit: The encryption algorithm in the request parameters must match the key type.
  • The following table describes the mapping between encryption algorithms and key types.
  • | Algorithm | Key Spec |
  • | --------- | -------- |
  • | RSAES_OAEP_SHA_1 | RSA_2048 |
  • | RSAES_OAEP_SHA_256 | RSA_2048 |
  • | SM2PKE | EC_SM2 |
  • In this example, the certificate whose ID is `12345678-1234-1234-1234-12345678****` and the encryption algorithm `RSAES_OAEP_SHA_256` are used to decrypt the data `ZOyIygCyaOW6Gj****MlNKiuyjfzw=`. *
  • @param request CertificatePrivateKeyDecryptRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CertificatePrivateKeyDecryptResponse

func (*Client) CertificatePrivateKeySign

func (client *Client) CertificatePrivateKeySign(request *CertificatePrivateKeySignRequest) (_result *CertificatePrivateKeySignResponse, _err error)

*

  • The signature algorithm in the request parameters must match the key type. The following table describes the mapping between signature algorithms and key types.
  • | Algorithm | Key Spec |
  • | --------- | -------- |
  • | RSA_PKCS1_SHA_256 | RSA_2048 |
  • | RSA_PSS_SHA_256 | RSA_2048 |
  • | ECDSA_SHA_256 | EC_P256 |
  • | SM2DSA | EC_SM2 |
  • In this example, the certificate whose ID is `12345678-1234-1234-1234-12345678****` and the signature algorithm `ECDSA_SHA_256` are used to generate a signature for the raw data `VGhlIHF1aWNrIGJyb3duIGZveCBqdW1wcyBvdmVyIHRoZSBsYXp5IGRvZy4=`. *
  • @param request CertificatePrivateKeySignRequest
  • @return CertificatePrivateKeySignResponse

func (*Client) CertificatePrivateKeySignWithOptions

func (client *Client) CertificatePrivateKeySignWithOptions(request *CertificatePrivateKeySignRequest, runtime *util.RuntimeOptions) (_result *CertificatePrivateKeySignResponse, _err error)

*

  • The signature algorithm in the request parameters must match the key type. The following table describes the mapping between signature algorithms and key types.
  • | Algorithm | Key Spec |
  • | --------- | -------- |
  • | RSA_PKCS1_SHA_256 | RSA_2048 |
  • | RSA_PSS_SHA_256 | RSA_2048 |
  • | ECDSA_SHA_256 | EC_P256 |
  • | SM2DSA | EC_SM2 |
  • In this example, the certificate whose ID is `12345678-1234-1234-1234-12345678****` and the signature algorithm `ECDSA_SHA_256` are used to generate a signature for the raw data `VGhlIHF1aWNrIGJyb3duIGZveCBqdW1wcyBvdmVyIHRoZSBsYXp5IGRvZy4=`. *
  • @param request CertificatePrivateKeySignRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CertificatePrivateKeySignResponse

func (*Client) CertificatePublicKeyEncrypt

func (client *Client) CertificatePublicKeyEncrypt(request *CertificatePublicKeyEncryptRequest) (_result *CertificatePublicKeyEncryptResponse, _err error)

*

  • Limit: The encryption algorithm in the request parameters must match the key type.
  • The following table describes the mapping between encryption algorithms and key types.
  • | Algorithm | Key Spec |
  • | --------- | -------- |
  • | RSAES_OAEP_SHA_1 | RSA_2048 |
  • | RSAES_OAEP_SHA_256 | RSA_2048 |
  • | SM2PKE | EC_SM2 |
  • In this example, the certificate whose ID is `12345678-1234-1234-1234-12345678****` and the encryption algorithm `RSAES_OAEP_SHA_256` are used to encrypt the data `VGhlIHF1aWNrIGJyb3duIGZveCBqdW1wcyBvdmVyIHRoZSBsYXp5IGRvZy4=`. *
  • @param request CertificatePublicKeyEncryptRequest
  • @return CertificatePublicKeyEncryptResponse

func (*Client) CertificatePublicKeyEncryptWithOptions

func (client *Client) CertificatePublicKeyEncryptWithOptions(request *CertificatePublicKeyEncryptRequest, runtime *util.RuntimeOptions) (_result *CertificatePublicKeyEncryptResponse, _err error)

*

  • Limit: The encryption algorithm in the request parameters must match the key type.
  • The following table describes the mapping between encryption algorithms and key types.
  • | Algorithm | Key Spec |
  • | --------- | -------- |
  • | RSAES_OAEP_SHA_1 | RSA_2048 |
  • | RSAES_OAEP_SHA_256 | RSA_2048 |
  • | SM2PKE | EC_SM2 |
  • In this example, the certificate whose ID is `12345678-1234-1234-1234-12345678****` and the encryption algorithm `RSAES_OAEP_SHA_256` are used to encrypt the data `VGhlIHF1aWNrIGJyb3duIGZveCBqdW1wcyBvdmVyIHRoZSBsYXp5IGRvZy4=`. *
  • @param request CertificatePublicKeyEncryptRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CertificatePublicKeyEncryptResponse

func (*Client) CertificatePublicKeyVerify

func (client *Client) CertificatePublicKeyVerify(request *CertificatePublicKeyVerifyRequest) (_result *CertificatePublicKeyVerifyResponse, _err error)

*

  • The signature algorithm in the request parameters must match the key type. The following table describes the mapping between signature algorithms and key types.
  • | Algorithm | Key Spec |
  • | --------- | -------- |
  • | RSA_PKCS1_SHA_256 | RSA_2048 |
  • | RSA_PSS_SHA_256 | RSA_2048 |
  • | ECDSA_SHA_256 | EC_P256 |
  • | SM2DSA | EC_SM2 |
  • In this example, the certificate whose ID is `12345678-1234-1234-1234-12345678****` and the signature algorithm `ECDSA_SHA_256` are used to verify the digital signature `ZOyIygCyaOW6Gj****MlNKiuyjfzw=` of the raw data `VGhlIHF1aWNrIGJyb3duIGZveCBqdW1wcyBvdmVyIHRoZSBsYXp5IGRvZy4=`. *
  • @param request CertificatePublicKeyVerifyRequest
  • @return CertificatePublicKeyVerifyResponse

func (*Client) CertificatePublicKeyVerifyWithOptions

func (client *Client) CertificatePublicKeyVerifyWithOptions(request *CertificatePublicKeyVerifyRequest, runtime *util.RuntimeOptions) (_result *CertificatePublicKeyVerifyResponse, _err error)

*

  • The signature algorithm in the request parameters must match the key type. The following table describes the mapping between signature algorithms and key types.
  • | Algorithm | Key Spec |
  • | --------- | -------- |
  • | RSA_PKCS1_SHA_256 | RSA_2048 |
  • | RSA_PSS_SHA_256 | RSA_2048 |
  • | ECDSA_SHA_256 | EC_P256 |
  • | SM2DSA | EC_SM2 |
  • In this example, the certificate whose ID is `12345678-1234-1234-1234-12345678****` and the signature algorithm `ECDSA_SHA_256` are used to verify the digital signature `ZOyIygCyaOW6Gj****MlNKiuyjfzw=` of the raw data `VGhlIHF1aWNrIGJyb3duIGZveCBqdW1wcyBvdmVyIHRoZSBsYXp5IGRvZy4=`. *
  • @param request CertificatePublicKeyVerifyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CertificatePublicKeyVerifyResponse

func (*Client) CreateAlias

func (client *Client) CreateAlias(request *CreateAliasRequest) (_result *CreateAliasResponse, _err error)

*

  • * Each alias can be bound to only one CMK at a time.
  • * The aliases of CMKs in the same region must be unique.
  • In this topic, an alias named `alias/example` is created for a CMK named `7906979c-8e06-46a2-be2d-68e3ccbc****`. *
  • @param request CreateAliasRequest
  • @return CreateAliasResponse

func (*Client) CreateAliasWithOptions

func (client *Client) CreateAliasWithOptions(request *CreateAliasRequest, runtime *util.RuntimeOptions) (_result *CreateAliasResponse, _err error)

*

  • * Each alias can be bound to only one CMK at a time.
  • * The aliases of CMKs in the same region must be unique.
  • In this topic, an alias named `alias/example` is created for a CMK named `7906979c-8e06-46a2-be2d-68e3ccbc****`. *
  • @param request CreateAliasRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CreateAliasResponse

func (*Client) CreateCertificate

func (client *Client) CreateCertificate(request *CreateCertificateRequest) (_result *CreateCertificateResponse, _err error)

*

  • To create a certificate, you must specify the type of the asymmetric key. Certificates Manager generates a private key and returns a certificate signing request (CSR). Submit the CSR in the Privacy Enhanced Mail (PEM) format to a certificate authority (CA) to obtain the formal certificate and certificate chain. Then, call the [UploadCertificate](~~212136~~) operation to import the certificate into Certificates Manager.
  • In this example, a certificate is created and the CSR is obtained. *
  • @param request CreateCertificateRequest
  • @return CreateCertificateResponse

func (*Client) CreateCertificateWithOptions

func (client *Client) CreateCertificateWithOptions(tmpReq *CreateCertificateRequest, runtime *util.RuntimeOptions) (_result *CreateCertificateResponse, _err error)

*

  • To create a certificate, you must specify the type of the asymmetric key. Certificates Manager generates a private key and returns a certificate signing request (CSR). Submit the CSR in the Privacy Enhanced Mail (PEM) format to a certificate authority (CA) to obtain the formal certificate and certificate chain. Then, call the [UploadCertificate](~~212136~~) operation to import the certificate into Certificates Manager.
  • In this example, a certificate is created and the CSR is obtained. *
  • @param tmpReq CreateCertificateRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CreateCertificateResponse

func (*Client) CreateKey

func (client *Client) CreateKey(request *CreateKeyRequest) (_result *CreateKeyResponse, _err error)

*

  • A CMK can be symmetric or asymmetric. Symmetric CMKs are used to generate data keys that can be used to encrypt large amounts of data. You can also use symmetric CMKs to encrypt small volume of data that is less than 6 KB. For more information, see [GenerateDataKey](https://www.alibabacloud.com/help/en/key-management-service/latest/generatedatakey). Asymmetric CMKs are used to encrypt data, decrypt data, generate digital signatures, and verify digital signatures. However, you cannot use asymmetric CMKs to generate data keys.
  • The following table describes different types of CMKs and the operations that are supported by the CMKs.
  • | CMK category | CMK type | Description | Encryption and decryption | Signature generation and verification |
  • | ------------ | -------- | ----------- | ------------------------- | ------------------------------------- |
  • | Symmetric CMK | Aliyun_AES_256 | An advanced Encryption Standard (AES) CMK with a length of 256 bits. | Yes | No |
  • | Symmetric CMK | Aliyun_AES_128 | An AES CMK with a length of 128 bits. Only Dedicated KMS supports this CMK type. | Yes | No |
  • | Symmetric CMK | Aliyun_AES_192 | An AES CMK with a length of 192 bits. Only Dedicated KMS supports this CMK type. | Yes | No |
  • | Symmetric CMK | Aliyun_SM4 | SM4 CMK. | Yes | No |
  • | Asymmetric CMK | RSA_2048 | Rivest-Shamir-Adleman (RSA) CMK with a length of 2,048 bits. | Supported | Supported |
  • | Asymmetric CMK | RSA_3072 | RSA CMK with a length of 3,072 bits. | Supported | Supported |
  • | Asymmetric CMK | EC_P256 | National Institute of Standards and Technology (NIST)-recommended elliptic curve P-256 (secp256r1). | Not supported | Supported |
  • | Asymmetric CMK | EC_P256K | Standards for Efficient Cryptography Group (SECG) elliptic curve secp256k1 | Not supported | Supported |
  • | Asymmetric CMK | EC_SM2 | 256-bit elliptic curves over the prime field that is defined in GB/T 32918. | Supported | Supported |
  • > - If the value of the KeySpec parameter that is used to create a symmetric CMK is prefixed with `Aliyun_`, a standard cryptographic algorithm is used, but non-standard ciphertext is generated. An asymmetric CMK can be used to generate standard ciphertext or signatures.
  • - You can use an RSA CMK to perform one of the two types of operations: encrypt and decrypt data, and generate and verify signatures. You cannot use the RSA CMK to perform both two types of operations. *
  • @param request CreateKeyRequest
  • @return CreateKeyResponse

func (*Client) CreateKeyVersion

func (client *Client) CreateKeyVersion(request *CreateKeyVersionRequest) (_result *CreateKeyVersionResponse, _err error)

*

  • * You can create a version only for an asymmetric CMK that is in the Enabled state. You can call the [CreateKey](~~28947~~) operation to create an asymmetric CMK and the [DescribeKey](~~28952~~) operation to query the status of the CMK. The status is specified by the KeyState parameter.
  • * The minimum interval for creating a version of the same CMK is seven days. You can call the [DescribeKey](~~28952~~) operation to query the time when the last version of a CMK was created. The time is specified by the LastRotationDate parameter.
  • * If a CMK is in a private key store, you cannot create a version for the CMK.
  • * You can create a maximum of 50 versions for a CMK in the same region.
  • You can create a version for the CMK whose ID is `0b30658a-ed1a-4922-b8f7-a673ca9c****` by using the parameter settings provided in this topic. *
  • @param request CreateKeyVersionRequest
  • @return CreateKeyVersionResponse

func (*Client) CreateKeyVersionWithOptions

func (client *Client) CreateKeyVersionWithOptions(request *CreateKeyVersionRequest, runtime *util.RuntimeOptions) (_result *CreateKeyVersionResponse, _err error)

*

  • * You can create a version only for an asymmetric CMK that is in the Enabled state. You can call the [CreateKey](~~28947~~) operation to create an asymmetric CMK and the [DescribeKey](~~28952~~) operation to query the status of the CMK. The status is specified by the KeyState parameter.
  • * The minimum interval for creating a version of the same CMK is seven days. You can call the [DescribeKey](~~28952~~) operation to query the time when the last version of a CMK was created. The time is specified by the LastRotationDate parameter.
  • * If a CMK is in a private key store, you cannot create a version for the CMK.
  • * You can create a maximum of 50 versions for a CMK in the same region.
  • You can create a version for the CMK whose ID is `0b30658a-ed1a-4922-b8f7-a673ca9c****` by using the parameter settings provided in this topic. *
  • @param request CreateKeyVersionRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CreateKeyVersionResponse

func (*Client) CreateKeyWithOptions

func (client *Client) CreateKeyWithOptions(request *CreateKeyRequest, runtime *util.RuntimeOptions) (_result *CreateKeyResponse, _err error)

*

  • A CMK can be symmetric or asymmetric. Symmetric CMKs are used to generate data keys that can be used to encrypt large amounts of data. You can also use symmetric CMKs to encrypt small volume of data that is less than 6 KB. For more information, see [GenerateDataKey](https://www.alibabacloud.com/help/en/key-management-service/latest/generatedatakey). Asymmetric CMKs are used to encrypt data, decrypt data, generate digital signatures, and verify digital signatures. However, you cannot use asymmetric CMKs to generate data keys.
  • The following table describes different types of CMKs and the operations that are supported by the CMKs.
  • | CMK category | CMK type | Description | Encryption and decryption | Signature generation and verification |
  • | ------------ | -------- | ----------- | ------------------------- | ------------------------------------- |
  • | Symmetric CMK | Aliyun_AES_256 | An advanced Encryption Standard (AES) CMK with a length of 256 bits. | Yes | No |
  • | Symmetric CMK | Aliyun_AES_128 | An AES CMK with a length of 128 bits. Only Dedicated KMS supports this CMK type. | Yes | No |
  • | Symmetric CMK | Aliyun_AES_192 | An AES CMK with a length of 192 bits. Only Dedicated KMS supports this CMK type. | Yes | No |
  • | Symmetric CMK | Aliyun_SM4 | SM4 CMK. | Yes | No |
  • | Asymmetric CMK | RSA_2048 | Rivest-Shamir-Adleman (RSA) CMK with a length of 2,048 bits. | Supported | Supported |
  • | Asymmetric CMK | RSA_3072 | RSA CMK with a length of 3,072 bits. | Supported | Supported |
  • | Asymmetric CMK | EC_P256 | National Institute of Standards and Technology (NIST)-recommended elliptic curve P-256 (secp256r1). | Not supported | Supported |
  • | Asymmetric CMK | EC_P256K | Standards for Efficient Cryptography Group (SECG) elliptic curve secp256k1 | Not supported | Supported |
  • | Asymmetric CMK | EC_SM2 | 256-bit elliptic curves over the prime field that is defined in GB/T 32918. | Supported | Supported |
  • > - If the value of the KeySpec parameter that is used to create a symmetric CMK is prefixed with `Aliyun_`, a standard cryptographic algorithm is used, but non-standard ciphertext is generated. An asymmetric CMK can be used to generate standard ciphertext or signatures.
  • - You can use an RSA CMK to perform one of the two types of operations: encrypt and decrypt data, and generate and verify signatures. You cannot use the RSA CMK to perform both two types of operations. *
  • @param request CreateKeyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CreateKeyResponse

func (*Client) CreateSecret

func (client *Client) CreateSecret(request *CreateSecretRequest) (_result *CreateSecretResponse, _err error)

*

  • You must specify the secret name, the secret value that is stored in the initial version, and the version number. The initial version is labeled as ACSCurrent.
  • You can specify a symmetric customer master key (CMK) as the encryption key to encrypt the secret value. If you do not specify an encryption key, Secrets Manager creates a CMK to encrypt the secret value. This CMK is used as the default encryption key for all secrets that are created by your Alibaba Cloud account in the current region. Secrets Manager encrypts only the secret value of each version. Secrets Manager does not encrypt the metadata such as the secret name, version number, or state label.
  • To use a specified CMK to encrypt the secret value, you must have the `kms:GenerateDataKey` permission on the CMK.
  • In this example, a generic secret named `mydbconninfo` is created. The initial version number of the secret is specified in the `VersionId` parameter, and the value is `v1`. The secret value is specified in the `SecretData` parameter, and the value is `{"user":"root","passwd":"****"}`. *
  • @param request CreateSecretRequest
  • @return CreateSecretResponse

func (*Client) CreateSecretWithOptions

func (client *Client) CreateSecretWithOptions(tmpReq *CreateSecretRequest, runtime *util.RuntimeOptions) (_result *CreateSecretResponse, _err error)

*

  • You must specify the secret name, the secret value that is stored in the initial version, and the version number. The initial version is labeled as ACSCurrent.
  • You can specify a symmetric customer master key (CMK) as the encryption key to encrypt the secret value. If you do not specify an encryption key, Secrets Manager creates a CMK to encrypt the secret value. This CMK is used as the default encryption key for all secrets that are created by your Alibaba Cloud account in the current region. Secrets Manager encrypts only the secret value of each version. Secrets Manager does not encrypt the metadata such as the secret name, version number, or state label.
  • To use a specified CMK to encrypt the secret value, you must have the `kms:GenerateDataKey` permission on the CMK.
  • In this example, a generic secret named `mydbconninfo` is created. The initial version number of the secret is specified in the `VersionId` parameter, and the value is `v1`. The secret value is specified in the `SecretData` parameter, and the value is `{"user":"root","passwd":"****"}`. *
  • @param tmpReq CreateSecretRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return CreateSecretResponse

func (*Client) Decrypt

func (client *Client) Decrypt(request *DecryptRequest) (_result *DecryptResponse, _err error)

func (*Client) DecryptWithOptions

func (client *Client) DecryptWithOptions(tmpReq *DecryptRequest, runtime *util.RuntimeOptions) (_result *DecryptResponse, _err error)

func (*Client) DeleteAlias

func (client *Client) DeleteAlias(request *DeleteAliasRequest) (_result *DeleteAliasResponse, _err error)

func (*Client) DeleteAliasWithOptions

func (client *Client) DeleteAliasWithOptions(request *DeleteAliasRequest, runtime *util.RuntimeOptions) (_result *DeleteAliasResponse, _err error)

func (*Client) DeleteCertificate

func (client *Client) DeleteCertificate(request *DeleteCertificateRequest) (_result *DeleteCertificateResponse, _err error)

*

  • After the certificate and its private key and certificate chain are deleted, they cannot be restored. Proceed with caution.
  • In this example, the certificate whose ID is `9a28de48-8d8b-484d-a766-dec4****` and its private key and certificate chain are deleted. *
  • @param request DeleteCertificateRequest
  • @return DeleteCertificateResponse

func (*Client) DeleteCertificateWithOptions

func (client *Client) DeleteCertificateWithOptions(request *DeleteCertificateRequest, runtime *util.RuntimeOptions) (_result *DeleteCertificateResponse, _err error)

*

  • After the certificate and its private key and certificate chain are deleted, they cannot be restored. Proceed with caution.
  • In this example, the certificate whose ID is `9a28de48-8d8b-484d-a766-dec4****` and its private key and certificate chain are deleted. *
  • @param request DeleteCertificateRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return DeleteCertificateResponse

func (*Client) DeleteKeyMaterial

func (client *Client) DeleteKeyMaterial(request *DeleteKeyMaterialRequest) (_result *DeleteKeyMaterialResponse, _err error)

*

  • This operation does not delete the CMK that is created by using the key material.
  • If the CMK is in the PendingDeletion state, the state of the CMK and the scheduled deletion time do not change after you call this operation. If the CMK is not in the PendingDeletion state, the state of the CMK changes to PendingImport after you call this operation.
  • After you delete the key material, you can upload only the same key material into the CMK. *
  • @param request DeleteKeyMaterialRequest
  • @return DeleteKeyMaterialResponse

func (*Client) DeleteKeyMaterialWithOptions

func (client *Client) DeleteKeyMaterialWithOptions(request *DeleteKeyMaterialRequest, runtime *util.RuntimeOptions) (_result *DeleteKeyMaterialResponse, _err error)

*

  • This operation does not delete the CMK that is created by using the key material.
  • If the CMK is in the PendingDeletion state, the state of the CMK and the scheduled deletion time do not change after you call this operation. If the CMK is not in the PendingDeletion state, the state of the CMK changes to PendingImport after you call this operation.
  • After you delete the key material, you can upload only the same key material into the CMK. *
  • @param request DeleteKeyMaterialRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return DeleteKeyMaterialResponse

func (*Client) DeleteSecret

func (client *Client) DeleteSecret(request *DeleteSecretRequest) (_result *DeleteSecretResponse, _err error)

*

  • If you call this operation without specifying a recovery period, the deleted secret can be recovered within 30 days.
  • If you specify a recovery period, the deleted secret can be recovered within the recovery period. You can also forcibly delete a secret. A forcibly deleted secret cannot be recovered. *
  • @param request DeleteSecretRequest
  • @return DeleteSecretResponse

func (*Client) DeleteSecretWithOptions

func (client *Client) DeleteSecretWithOptions(request *DeleteSecretRequest, runtime *util.RuntimeOptions) (_result *DeleteSecretResponse, _err error)

*

  • If you call this operation without specifying a recovery period, the deleted secret can be recovered within 30 days.
  • If you specify a recovery period, the deleted secret can be recovered within the recovery period. You can also forcibly delete a secret. A forcibly deleted secret cannot be recovered. *
  • @param request DeleteSecretRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return DeleteSecretResponse

func (*Client) DescribeAccountKmsStatus

func (client *Client) DescribeAccountKmsStatus() (_result *DescribeAccountKmsStatusResponse, _err error)

func (*Client) DescribeAccountKmsStatusWithOptions

func (client *Client) DescribeAccountKmsStatusWithOptions(runtime *util.RuntimeOptions) (_result *DescribeAccountKmsStatusResponse, _err error)

func (*Client) DescribeCertificate

func (client *Client) DescribeCertificate(request *DescribeCertificateRequest) (_result *DescribeCertificateResponse, _err error)

*

  • In this example, the information about the certificate whose ID is `9a28de48-8d8b-484d-a766-dec4****` is queried. The certificate information includes the certificate ID, creation time, certificate issuer, validity period, serial number, and signature algorithm. *
  • @param request DescribeCertificateRequest
  • @return DescribeCertificateResponse

func (*Client) DescribeCertificateWithOptions

func (client *Client) DescribeCertificateWithOptions(request *DescribeCertificateRequest, runtime *util.RuntimeOptions) (_result *DescribeCertificateResponse, _err error)

*

  • In this example, the information about the certificate whose ID is `9a28de48-8d8b-484d-a766-dec4****` is queried. The certificate information includes the certificate ID, creation time, certificate issuer, validity period, serial number, and signature algorithm. *
  • @param request DescribeCertificateRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return DescribeCertificateResponse

func (*Client) DescribeKey

func (client *Client) DescribeKey(request *DescribeKeyRequest) (_result *DescribeKeyResponse, _err error)

*

  • You can query the information about the CMK `05754286-3ba2-4fa6-8d41-4323aca6****` by using parameter settings provided in this topic. The information includes the creator, creation time, status, and deletion protection status of the CMK. *
  • @param request DescribeKeyRequest
  • @return DescribeKeyResponse

func (*Client) DescribeKeyVersion

func (client *Client) DescribeKeyVersion(request *DescribeKeyVersionRequest) (_result *DescribeKeyVersionResponse, _err error)

*

  • This topic provides an example on how to query the information about a version of the CMK `1234abcd-12ab-34cd-56ef-12345678****`. The ID of the CMK version is `2ab1a983-7072-4bbc-a582-584b5bd8****`. The response shows that the creation time of the CMK version is `2016-03-25T10:42:40Z`. *
  • @param request DescribeKeyVersionRequest
  • @return DescribeKeyVersionResponse

func (*Client) DescribeKeyVersionWithOptions

func (client *Client) DescribeKeyVersionWithOptions(request *DescribeKeyVersionRequest, runtime *util.RuntimeOptions) (_result *DescribeKeyVersionResponse, _err error)

*

  • This topic provides an example on how to query the information about a version of the CMK `1234abcd-12ab-34cd-56ef-12345678****`. The ID of the CMK version is `2ab1a983-7072-4bbc-a582-584b5bd8****`. The response shows that the creation time of the CMK version is `2016-03-25T10:42:40Z`. *
  • @param request DescribeKeyVersionRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return DescribeKeyVersionResponse

func (*Client) DescribeKeyWithOptions

func (client *Client) DescribeKeyWithOptions(request *DescribeKeyRequest, runtime *util.RuntimeOptions) (_result *DescribeKeyResponse, _err error)

*

  • You can query the information about the CMK `05754286-3ba2-4fa6-8d41-4323aca6****` by using parameter settings provided in this topic. The information includes the creator, creation time, status, and deletion protection status of the CMK. *
  • @param request DescribeKeyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return DescribeKeyResponse

func (*Client) DescribeRegions

func (client *Client) DescribeRegions() (_result *DescribeRegionsResponse, _err error)

func (*Client) DescribeRegionsWithOptions

func (client *Client) DescribeRegionsWithOptions(runtime *util.RuntimeOptions) (_result *DescribeRegionsResponse, _err error)

func (*Client) DescribeSecret

func (client *Client) DescribeSecret(request *DescribeSecretRequest) (_result *DescribeSecretResponse, _err error)

*

  • This operation returns the metadata of a secret. This operation does not return the secret value.
  • In this example, the metadata of the secret named `secret001` is queried. *
  • @param request DescribeSecretRequest
  • @return DescribeSecretResponse

func (*Client) DescribeSecretWithOptions

func (client *Client) DescribeSecretWithOptions(request *DescribeSecretRequest, runtime *util.RuntimeOptions) (_result *DescribeSecretResponse, _err error)

*

  • This operation returns the metadata of a secret. This operation does not return the secret value.
  • In this example, the metadata of the secret named `secret001` is queried. *
  • @param request DescribeSecretRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return DescribeSecretResponse

func (*Client) DisableKey

func (client *Client) DisableKey(request *DisableKeyRequest) (_result *DisableKeyResponse, _err error)

*

  • If a customer master key (CMK) is disabled, the ciphertext encrypted by using this CMK cannot be decrypted until you re-enable it. You can call the [EnableKey](~~35150~~) operation to enable the CMK.
  • In this example, the CMK whose ID is `1234abcd-12ab-34cd-56ef-12345678****` is disabled. *
  • @param request DisableKeyRequest
  • @return DisableKeyResponse

func (*Client) DisableKeyWithOptions

func (client *Client) DisableKeyWithOptions(request *DisableKeyRequest, runtime *util.RuntimeOptions) (_result *DisableKeyResponse, _err error)

*

  • If a customer master key (CMK) is disabled, the ciphertext encrypted by using this CMK cannot be decrypted until you re-enable it. You can call the [EnableKey](~~35150~~) operation to enable the CMK.
  • In this example, the CMK whose ID is `1234abcd-12ab-34cd-56ef-12345678****` is disabled. *
  • @param request DisableKeyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return DisableKeyResponse

func (*Client) EnableKey

func (client *Client) EnableKey(request *EnableKeyRequest) (_result *EnableKeyResponse, _err error)

func (*Client) EnableKeyWithOptions

func (client *Client) EnableKeyWithOptions(request *EnableKeyRequest, runtime *util.RuntimeOptions) (_result *EnableKeyResponse, _err error)

func (*Client) Encrypt

func (client *Client) Encrypt(request *EncryptRequest) (_result *EncryptResponse, _err error)

*

  • * KMS uses the primary version of a specified CMK to encrypt data.
  • * Only data of 6 KB or less can be encrypted. For example, you can call this operation to encrypt RSA keys, database access passwords, or other sensitive information.
  • * When you migrate encrypted data across regions, you can call this operation in the destination region to encrypt the plaintext of the data key that is used to encrypt the migrated data in the source region. This way, the ciphertext of the data key is generated in the destination region. You can also call the [Decrypt](~~28950~~) operation to decrypt the data key. *
  • @param request EncryptRequest
  • @return EncryptResponse

func (*Client) EncryptWithOptions

func (client *Client) EncryptWithOptions(tmpReq *EncryptRequest, runtime *util.RuntimeOptions) (_result *EncryptResponse, _err error)

*

  • * KMS uses the primary version of a specified CMK to encrypt data.
  • * Only data of 6 KB or less can be encrypted. For example, you can call this operation to encrypt RSA keys, database access passwords, or other sensitive information.
  • * When you migrate encrypted data across regions, you can call this operation in the destination region to encrypt the plaintext of the data key that is used to encrypt the migrated data in the source region. This way, the ciphertext of the data key is generated in the destination region. You can also call the [Decrypt](~~28950~~) operation to decrypt the data key. *
  • @param tmpReq EncryptRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return EncryptResponse

func (*Client) ExportDataKey

func (client *Client) ExportDataKey(request *ExportDataKeyRequest) (_result *ExportDataKeyResponse, _err error)

*

  • You can call the [GenerateDataKeyWithoutPlaintext](~~134043~~) operation to generate a data key, which is encrypted by a CMK. If you want to distribute the data key to other regions or cryptographic modules, you can call the ExportDataKey operation to use a public key to encrypt the data key.
  • Then, you can import the ciphertext of the data key to the cryptographic module where the private key is stored. This way, the data key is securely distributed from KMS to the cryptographic module. After the data key is imported to the cryptographic module, you can use it to encrypt or decrypt data. *
  • @param request ExportDataKeyRequest
  • @return ExportDataKeyResponse

func (*Client) ExportDataKeyWithOptions

func (client *Client) ExportDataKeyWithOptions(tmpReq *ExportDataKeyRequest, runtime *util.RuntimeOptions) (_result *ExportDataKeyResponse, _err error)

*

  • You can call the [GenerateDataKeyWithoutPlaintext](~~134043~~) operation to generate a data key, which is encrypted by a CMK. If you want to distribute the data key to other regions or cryptographic modules, you can call the ExportDataKey operation to use a public key to encrypt the data key.
  • Then, you can import the ciphertext of the data key to the cryptographic module where the private key is stored. This way, the data key is securely distributed from KMS to the cryptographic module. After the data key is imported to the cryptographic module, you can use it to encrypt or decrypt data. *
  • @param tmpReq ExportDataKeyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return ExportDataKeyResponse

func (*Client) GenerateAndExportDataKey

func (client *Client) GenerateAndExportDataKey(request *GenerateAndExportDataKeyRequest) (_result *GenerateAndExportDataKeyResponse, _err error)

*

  • We recommend that you perform the following steps to import your data key to a cryptographic module:
  • * Call the GenerateAndExportDataKey operation to generate a data key and obtain both the ciphertext of the data key encrypted by using the CMK and that encrypted by using the public key.
  • * Store the ciphertext of the data key encrypted by using the CMK in KMS Secrets Manager or in a storage service such as ApsaraDB. This ciphertext is used for backup and restoration.
  • * Import the ciphertext of the data key encrypted by using the public key to the cryptographic module where the private key is stored. Then, you can use the data key to encrypt or decrypt data.
  • > The CMK that you specify in the request of this operation is only used to encrypt the data key and is not involved in the generation of the data key. KMS does not record or store the data keys randomly generated by calling this operation. You must take note of the data keys and the returned ciphertext. *
  • @param request GenerateAndExportDataKeyRequest
  • @return GenerateAndExportDataKeyResponse

func (*Client) GenerateAndExportDataKeyWithOptions

func (client *Client) GenerateAndExportDataKeyWithOptions(tmpReq *GenerateAndExportDataKeyRequest, runtime *util.RuntimeOptions) (_result *GenerateAndExportDataKeyResponse, _err error)

*

  • We recommend that you perform the following steps to import your data key to a cryptographic module:
  • * Call the GenerateAndExportDataKey operation to generate a data key and obtain both the ciphertext of the data key encrypted by using the CMK and that encrypted by using the public key.
  • * Store the ciphertext of the data key encrypted by using the CMK in KMS Secrets Manager or in a storage service such as ApsaraDB. This ciphertext is used for backup and restoration.
  • * Import the ciphertext of the data key encrypted by using the public key to the cryptographic module where the private key is stored. Then, you can use the data key to encrypt or decrypt data.
  • > The CMK that you specify in the request of this operation is only used to encrypt the data key and is not involved in the generation of the data key. KMS does not record or store the data keys randomly generated by calling this operation. You must take note of the data keys and the returned ciphertext. *
  • @param tmpReq GenerateAndExportDataKeyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return GenerateAndExportDataKeyResponse

func (*Client) GenerateDataKey

func (client *Client) GenerateDataKey(request *GenerateDataKeyRequest) (_result *GenerateDataKeyResponse, _err error)

*

  • This operation creates a random data key, encrypts the data key by using the specified customer master key (CMK), and returns the plaintext and ciphertext of the data key. You can use the plaintext of the data key to locally encrypt your data without using KMS and store the encrypted data together with the ciphertext of the data key. You can obtain the plaintext of the data key from the Plaintext parameter in the response and the ciphertext of the data key from the CiphertextBlob parameter in the response.
  • The CMK that you specify in the request of this operation is only used to encrypt the data key and is not involved in the generation of the data key. KMS does not record or store the generated data key. Therefore, you need to store the ciphertext of the data key in persistent storage.
  • We recommend that you locally encrypt data by performing the following steps:
  • 1\\. Call the GenerateDataKey operation.
  • 2\\. Use the plaintext of the data key that you obtain to locally encrypt data without using KMS. Then, delete the plaintext of the data key from the memory.
  • 3\\. Store the encrypted data together with the ciphertext of the data key that you obtain.
  • We recommend that you locally decrypt data by performing the following steps:
  • * Call the [Decrypt](~~28950~~) operation to decrypt the locally stored ciphertext of the data key. The plaintext of data key is then returned.
  • * Use the plaintext of the data key to locally decrypt data and then delete the plaintext of the data key from the memory.
  • In this example, a random data key is generated for the CMK whose ID is `7906979c-8e06-46a2-be2d-68e3ccbc****`. *
  • @param request GenerateDataKeyRequest
  • @return GenerateDataKeyResponse

func (*Client) GenerateDataKeyWithOptions

func (client *Client) GenerateDataKeyWithOptions(tmpReq *GenerateDataKeyRequest, runtime *util.RuntimeOptions) (_result *GenerateDataKeyResponse, _err error)

*

  • This operation creates a random data key, encrypts the data key by using the specified customer master key (CMK), and returns the plaintext and ciphertext of the data key. You can use the plaintext of the data key to locally encrypt your data without using KMS and store the encrypted data together with the ciphertext of the data key. You can obtain the plaintext of the data key from the Plaintext parameter in the response and the ciphertext of the data key from the CiphertextBlob parameter in the response.
  • The CMK that you specify in the request of this operation is only used to encrypt the data key and is not involved in the generation of the data key. KMS does not record or store the generated data key. Therefore, you need to store the ciphertext of the data key in persistent storage.
  • We recommend that you locally encrypt data by performing the following steps:
  • 1\\. Call the GenerateDataKey operation.
  • 2\\. Use the plaintext of the data key that you obtain to locally encrypt data without using KMS. Then, delete the plaintext of the data key from the memory.
  • 3\\. Store the encrypted data together with the ciphertext of the data key that you obtain.
  • We recommend that you locally decrypt data by performing the following steps:
  • * Call the [Decrypt](~~28950~~) operation to decrypt the locally stored ciphertext of the data key. The plaintext of data key is then returned.
  • * Use the plaintext of the data key to locally decrypt data and then delete the plaintext of the data key from the memory.
  • In this example, a random data key is generated for the CMK whose ID is `7906979c-8e06-46a2-be2d-68e3ccbc****`. *
  • @param tmpReq GenerateDataKeyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return GenerateDataKeyResponse

func (*Client) GenerateDataKeyWithoutPlaintext

func (client *Client) GenerateDataKeyWithoutPlaintext(request *GenerateDataKeyWithoutPlaintextRequest) (_result *GenerateDataKeyWithoutPlaintextResponse, _err error)

*

  • This operation creates a random data key, encrypts the data key by using a specific symmetric CMK, and returns the ciphertext of the data key. This operation serves the same purpose as the [GenerateDataKey](~~28948~~) operation. The only difference is that this operation does not return the plaintext of the data key.
  • The CMK that you specify in the request of this operation is only used to encrypt the data key and is not involved in the generation of the data key. KMS does not record or store the generated data key.
  • >
  • * This operation applies to the scenario when you do not need to use the data key to immediately encrypt data. Before you can use the data key to encrypt data, you must call the [Decrypt](~~28950~~) operation to decrypt the ciphertext of the data key.
  • * This operation is also suitable for a distributed system with different trust levels. For example, a system stores data in different partitions based on a preset trust policy. A module creates different partitions and generates different data keys for each partition in advance. This module is not involved in data production and consumption after it completes initialization of the control plane. This module is the key provider. When producing and consuming data, modules on the control plane obtain the ciphertext of the data key for a partition first. After decrypting the ciphertext of the data key, modules on the control plane use the plaintext of the data key to encrypt or decrypt data and then clear the plaintext of the data key from the memory. In such a system, the key provider does not need to obtain the plaintext of the data key. It only needs to have the permissions to call the GenerateDataKeyWithoutPlaintext operation. The data producers or consumers do not need to generate new data keys. They only need to have the permissions to call the Decrypt operation. *
  • @param request GenerateDataKeyWithoutPlaintextRequest
  • @return GenerateDataKeyWithoutPlaintextResponse

func (*Client) GenerateDataKeyWithoutPlaintextWithOptions

func (client *Client) GenerateDataKeyWithoutPlaintextWithOptions(tmpReq *GenerateDataKeyWithoutPlaintextRequest, runtime *util.RuntimeOptions) (_result *GenerateDataKeyWithoutPlaintextResponse, _err error)

*

  • This operation creates a random data key, encrypts the data key by using a specific symmetric CMK, and returns the ciphertext of the data key. This operation serves the same purpose as the [GenerateDataKey](~~28948~~) operation. The only difference is that this operation does not return the plaintext of the data key.
  • The CMK that you specify in the request of this operation is only used to encrypt the data key and is not involved in the generation of the data key. KMS does not record or store the generated data key.
  • >
  • * This operation applies to the scenario when you do not need to use the data key to immediately encrypt data. Before you can use the data key to encrypt data, you must call the [Decrypt](~~28950~~) operation to decrypt the ciphertext of the data key.
  • * This operation is also suitable for a distributed system with different trust levels. For example, a system stores data in different partitions based on a preset trust policy. A module creates different partitions and generates different data keys for each partition in advance. This module is not involved in data production and consumption after it completes initialization of the control plane. This module is the key provider. When producing and consuming data, modules on the control plane obtain the ciphertext of the data key for a partition first. After decrypting the ciphertext of the data key, modules on the control plane use the plaintext of the data key to encrypt or decrypt data and then clear the plaintext of the data key from the memory. In such a system, the key provider does not need to obtain the plaintext of the data key. It only needs to have the permissions to call the GenerateDataKeyWithoutPlaintext operation. The data producers or consumers do not need to generate new data keys. They only need to have the permissions to call the Decrypt operation. *
  • @param tmpReq GenerateDataKeyWithoutPlaintextRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return GenerateDataKeyWithoutPlaintextResponse

func (*Client) GetCertificate

func (client *Client) GetCertificate(request *GetCertificateRequest) (_result *GetCertificateResponse, _err error)

*

  • In this example, the certificate whose ID is `9a28de48-8d8b-484d-a766-dec4****` is queried. The certificate, certificate chain, certificate ID, and certificate signing request (CSR) are returned. *
  • @param request GetCertificateRequest
  • @return GetCertificateResponse

func (*Client) GetCertificateWithOptions

func (client *Client) GetCertificateWithOptions(request *GetCertificateRequest, runtime *util.RuntimeOptions) (_result *GetCertificateResponse, _err error)

*

  • In this example, the certificate whose ID is `9a28de48-8d8b-484d-a766-dec4****` is queried. The certificate, certificate chain, certificate ID, and certificate signing request (CSR) are returned. *
  • @param request GetCertificateRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return GetCertificateResponse

func (*Client) GetEndpoint

func (client *Client) GetEndpoint(productId *string, regionId *string, endpointRule *string, network *string, suffix *string, endpointMap map[string]*string, endpoint *string) (_result *string, _err error)

func (*Client) GetParametersForImport

func (client *Client) GetParametersForImport(request *GetParametersForImportRequest) (_result *GetParametersForImportResponse, _err error)

*

  • The returned parameters can be used to call the [ImportKeyMaterial](https://www.alibabacloud.com/help/en/key-management-service/latest/importkeymaterial) operation.
  • - You can import key material only for CMKs whose Origin parameter is set to EXTERNAL.
  • - The public key and token that are returned by the GetParametersForImport operation must be used together. The public key and token can be used to import key material only for the CMK that is specified when you call the operation.
  • - The public key and token that are returned vary each time you call the GetParametersForImport operation.
  • - You must specify the type of the public key and the encryption algorithm that are used to encrypt key material. The following table lists the types of public keys and the encryption algorithms allowed for each type.
  • | Public key type | Encryption algorithm | Description |
  • | --------------- | -------------------- | ----------- |
  • | RSA_2048 | RSAES_PKCS1_V1_5
  • RSAES_OAEP_SHA_1
  • RSAES_OAEP_SHA_256 | CMKs of all regions and all protection levels are supported.
  • Dedicated Key Management Service (KMS) does not support RSAES_OAEP_SHA_1. |
  • | EC_SM2 | SM2PKE | CMKs whose ProtectionLevel is set to HSM are supported. The SM2 algorithm is developed and approved by the State Cryptography Administration of China. The SM2 algorithm can be used only to import key material for a CMK whose ProtectionLevel is set to HSM. You can use the SM2 algorithm only when you enable the Managed HSM feature for KMS in the Chinese mainland. For more information, see [Overview of Managed HSM](https://www.alibabacloud.com/help/en/key-management-service/latest/managed-hsm-overview). |
  • For more information, see [Import key material](https://www.alibabacloud.com/help/en/key-management-service/latest/import-key-material). This topic provides an example on how to query the parameters that are used to import key material for a CMK. The ID of the CMK is `1234abcd-12ab-34cd-56ef-12345678****`, the encryption algorithm is `RSAES_PKCS1_V1_5`, and the public key is of the `RSA_2048` type. The parameters that are returned include the ID of the CMK, the public key that is used to encrypt the key material, the token that is used to import the key material, and the time when the token expires. *
  • @param request GetParametersForImportRequest
  • @return GetParametersForImportResponse

func (*Client) GetParametersForImportWithOptions

func (client *Client) GetParametersForImportWithOptions(request *GetParametersForImportRequest, runtime *util.RuntimeOptions) (_result *GetParametersForImportResponse, _err error)

*

  • The returned parameters can be used to call the [ImportKeyMaterial](https://www.alibabacloud.com/help/en/key-management-service/latest/importkeymaterial) operation.
  • - You can import key material only for CMKs whose Origin parameter is set to EXTERNAL.
  • - The public key and token that are returned by the GetParametersForImport operation must be used together. The public key and token can be used to import key material only for the CMK that is specified when you call the operation.
  • - The public key and token that are returned vary each time you call the GetParametersForImport operation.
  • - You must specify the type of the public key and the encryption algorithm that are used to encrypt key material. The following table lists the types of public keys and the encryption algorithms allowed for each type.
  • | Public key type | Encryption algorithm | Description |
  • | --------------- | -------------------- | ----------- |
  • | RSA_2048 | RSAES_PKCS1_V1_5
  • RSAES_OAEP_SHA_1
  • RSAES_OAEP_SHA_256 | CMKs of all regions and all protection levels are supported.
  • Dedicated Key Management Service (KMS) does not support RSAES_OAEP_SHA_1. |
  • | EC_SM2 | SM2PKE | CMKs whose ProtectionLevel is set to HSM are supported. The SM2 algorithm is developed and approved by the State Cryptography Administration of China. The SM2 algorithm can be used only to import key material for a CMK whose ProtectionLevel is set to HSM. You can use the SM2 algorithm only when you enable the Managed HSM feature for KMS in the Chinese mainland. For more information, see [Overview of Managed HSM](https://www.alibabacloud.com/help/en/key-management-service/latest/managed-hsm-overview). |
  • For more information, see [Import key material](https://www.alibabacloud.com/help/en/key-management-service/latest/import-key-material). This topic provides an example on how to query the parameters that are used to import key material for a CMK. The ID of the CMK is `1234abcd-12ab-34cd-56ef-12345678****`, the encryption algorithm is `RSAES_PKCS1_V1_5`, and the public key is of the `RSA_2048` type. The parameters that are returned include the ID of the CMK, the public key that is used to encrypt the key material, the token that is used to import the key material, and the time when the token expires. *
  • @param request GetParametersForImportRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return GetParametersForImportResponse

func (*Client) GetPublicKey

func (client *Client) GetPublicKey(request *GetPublicKeyRequest) (_result *GetPublicKeyResponse, _err error)

func (*Client) GetPublicKeyWithOptions

func (client *Client) GetPublicKeyWithOptions(request *GetPublicKeyRequest, runtime *util.RuntimeOptions) (_result *GetPublicKeyResponse, _err error)

func (*Client) GetRandomPassword

func (client *Client) GetRandomPassword(request *GetRandomPasswordRequest) (_result *GetRandomPasswordResponse, _err error)

func (*Client) GetRandomPasswordWithOptions

func (client *Client) GetRandomPasswordWithOptions(request *GetRandomPasswordRequest, runtime *util.RuntimeOptions) (_result *GetRandomPasswordResponse, _err error)

func (*Client) GetSecretValue

func (client *Client) GetSecretValue(request *GetSecretValueRequest) (_result *GetSecretValueResponse, _err error)

*

  • If you do not specify a version number or stage label, Secrets Manager returns the secret value of the version marked with ACSCurrent.
  • If a customer master key (CMK) is specified to encrypt the secret value, you must also have the `kms:Decrypt` permission on the CMK to call the GetSecretValue operation.
  • In this example, the value of the secret named `secret001` is obtained. The secret value is returned in the `SecretData` parameter. The secret value is `testdata1`. *
  • @param request GetSecretValueRequest
  • @return GetSecretValueResponse

func (*Client) GetSecretValueWithOptions

func (client *Client) GetSecretValueWithOptions(request *GetSecretValueRequest, runtime *util.RuntimeOptions) (_result *GetSecretValueResponse, _err error)

*

  • If you do not specify a version number or stage label, Secrets Manager returns the secret value of the version marked with ACSCurrent.
  • If a customer master key (CMK) is specified to encrypt the secret value, you must also have the `kms:Decrypt` permission on the CMK to call the GetSecretValue operation.
  • In this example, the value of the secret named `secret001` is obtained. The secret value is returned in the `SecretData` parameter. The secret value is `testdata1`. *
  • @param request GetSecretValueRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return GetSecretValueResponse

func (*Client) ImportKeyMaterial

func (client *Client) ImportKeyMaterial(request *ImportKeyMaterialRequest) (_result *ImportKeyMaterialResponse, _err error)

*

  • Call [CreateKey](~~28947~~) when creating a CMK, you can select its key material source as external.** Origin** set to** EXTERNAL**. This API is used to import the key material into the CMK.
  • * To view the CMK **Origin**, see [DescribeKey](~~28952~~).
  • * Before importing key material, you need to call the [GetParametersForImport](~~68621~~) obtain the parameters required to import the key material, including the public key and import token.
  • >
  • * The key type of the pair is** Aliyun_AES\\_256** the key material must be 256 bits. The key type must be** Aliyun_SM4** the CMK and key material must be 128 bits.
  • * You can set the expiration time for the key material, or you can set it to never expire.
  • * You can reimport the key material and reset the expiration time for the specified CMK at any time, but the same key material must be imported.
  • * After the imported key material expires or is deleted, the specified CMK is unavailable until the same key material are imported again.
  • * A Key material can be imported to multiple cmks, but any Data or Data Key encrypted by one CMK cannot be decrypted by another CMK. *
  • @param request ImportKeyMaterialRequest
  • @return ImportKeyMaterialResponse

func (*Client) ImportKeyMaterialWithOptions

func (client *Client) ImportKeyMaterialWithOptions(request *ImportKeyMaterialRequest, runtime *util.RuntimeOptions) (_result *ImportKeyMaterialResponse, _err error)

*

  • Call [CreateKey](~~28947~~) when creating a CMK, you can select its key material source as external.** Origin** set to** EXTERNAL**. This API is used to import the key material into the CMK.
  • * To view the CMK **Origin**, see [DescribeKey](~~28952~~).
  • * Before importing key material, you need to call the [GetParametersForImport](~~68621~~) obtain the parameters required to import the key material, including the public key and import token.
  • >
  • * The key type of the pair is** Aliyun_AES\\_256** the key material must be 256 bits. The key type must be** Aliyun_SM4** the CMK and key material must be 128 bits.
  • * You can set the expiration time for the key material, or you can set it to never expire.
  • * You can reimport the key material and reset the expiration time for the specified CMK at any time, but the same key material must be imported.
  • * After the imported key material expires or is deleted, the specified CMK is unavailable until the same key material are imported again.
  • * A Key material can be imported to multiple cmks, but any Data or Data Key encrypted by one CMK cannot be decrypted by another CMK. *
  • @param request ImportKeyMaterialRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return ImportKeyMaterialResponse

func (*Client) Init

func (client *Client) Init(config *openapi.Config) (_err error)

func (*Client) ListAliases

func (client *Client) ListAliases(request *ListAliasesRequest) (_result *ListAliasesResponse, _err error)

func (*Client) ListAliasesByKeyId

func (client *Client) ListAliasesByKeyId(request *ListAliasesByKeyIdRequest) (_result *ListAliasesByKeyIdResponse, _err error)

func (*Client) ListAliasesByKeyIdWithOptions

func (client *Client) ListAliasesByKeyIdWithOptions(request *ListAliasesByKeyIdRequest, runtime *util.RuntimeOptions) (_result *ListAliasesByKeyIdResponse, _err error)

func (*Client) ListAliasesWithOptions

func (client *Client) ListAliasesWithOptions(request *ListAliasesRequest, runtime *util.RuntimeOptions) (_result *ListAliasesResponse, _err error)

func (*Client) ListKeyVersions

func (client *Client) ListKeyVersions(request *ListKeyVersionsRequest) (_result *ListKeyVersionsResponse, _err error)

func (*Client) ListKeyVersionsWithOptions

func (client *Client) ListKeyVersionsWithOptions(request *ListKeyVersionsRequest, runtime *util.RuntimeOptions) (_result *ListKeyVersionsResponse, _err error)

func (*Client) ListKeys

func (client *Client) ListKeys(request *ListKeysRequest) (_result *ListKeysResponse, _err error)

func (*Client) ListKeysWithOptions

func (client *Client) ListKeysWithOptions(request *ListKeysRequest, runtime *util.RuntimeOptions) (_result *ListKeysResponse, _err error)

func (*Client) ListResourceTags

func (client *Client) ListResourceTags(request *ListResourceTagsRequest) (_result *ListResourceTagsResponse, _err error)

*

  • Request format: KeyId="string" *
  • @param request ListResourceTagsRequest
  • @return ListResourceTagsResponse

func (*Client) ListResourceTagsWithOptions

func (client *Client) ListResourceTagsWithOptions(request *ListResourceTagsRequest, runtime *util.RuntimeOptions) (_result *ListResourceTagsResponse, _err error)

*

  • Request format: KeyId="string" *
  • @param request ListResourceTagsRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return ListResourceTagsResponse

func (*Client) ListSecretVersionIds

func (client *Client) ListSecretVersionIds(request *ListSecretVersionIdsRequest) (_result *ListSecretVersionIdsResponse, _err error)

*

  • The secret value is not included in the returned version information. By default, deprecated secret versions are not returned. *
  • @param request ListSecretVersionIdsRequest
  • @return ListSecretVersionIdsResponse

func (*Client) ListSecretVersionIdsWithOptions

func (client *Client) ListSecretVersionIdsWithOptions(request *ListSecretVersionIdsRequest, runtime *util.RuntimeOptions) (_result *ListSecretVersionIdsResponse, _err error)

*

  • The secret value is not included in the returned version information. By default, deprecated secret versions are not returned. *
  • @param request ListSecretVersionIdsRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return ListSecretVersionIdsResponse

func (*Client) ListSecrets

func (client *Client) ListSecrets(request *ListSecretsRequest) (_result *ListSecretsResponse, _err error)

*

  • This operation returns the metadata information about the secrets and does not return encrypted secret values.
  • In this example, the secrets created by the current account in the current region are returned. The `PageNumber` parameter is set to `1`, and the `PageSize` parameter is set to `2`, which indicates that two secrets are to be returned on Page 1. *
  • @param request ListSecretsRequest
  • @return ListSecretsResponse

func (*Client) ListSecretsWithOptions

func (client *Client) ListSecretsWithOptions(request *ListSecretsRequest, runtime *util.RuntimeOptions) (_result *ListSecretsResponse, _err error)

*

  • This operation returns the metadata information about the secrets and does not return encrypted secret values.
  • In this example, the secrets created by the current account in the current region are returned. The `PageNumber` parameter is set to `1`, and the `PageSize` parameter is set to `2`, which indicates that two secrets are to be returned on Page 1. *
  • @param request ListSecretsRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return ListSecretsResponse

func (*Client) OpenKmsService

func (client *Client) OpenKmsService() (_result *OpenKmsServiceResponse, _err error)

*

func (*Client) OpenKmsServiceWithOptions

func (client *Client) OpenKmsServiceWithOptions(runtime *util.RuntimeOptions) (_result *OpenKmsServiceResponse, _err error)

*

  • When you call this operation, note that:
  • - KMS is a paid service. For more information about the billing method, see [Billing description](https://www.alibabacloud.com/help/en/key-management-service/latest/billing-billing).
  • - An Alibaba Cloud account can activate KMS only once.
  • - Make sure that your Alibaba Cloud account has passed real-name authentication. *
  • @param request OpenKmsServiceRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return OpenKmsServiceResponse

func (*Client) PutSecretValue

func (client *Client) PutSecretValue(request *PutSecretValueRequest) (_result *PutSecretValueResponse, _err error)

*

  • This operation is used to store the secret values of new versions. It cannot be used to modify the secret value of an existing version.
  • By default, the newly stored secret value is marked with ACSCurrent, and the mark for the previous version of the secret value is changed from ACSCurrent to ACSPrevious. If you specify the VersionStage parameter, the newly stored secret value is marked with the stage label that you specify.
  • You must specify a version number when you call the operation. Secrets Manager performs operations based on the following rules:
  • * If the specified version number does not exist in the secret, Secrets Manager creates the version and stores the secret value.
  • * If the specified version number already exists in the secret and the secret value of the existing version is the same as the secret value that you specify, Secrets Manager ignores the request and returns a success message. The request is idempotent.
  • * If the specified version number already exists in the secret but the secret value of the existing version is different from the secret value that you specify, Secrets Manager rejects the request and returns a failure message.
  • Limits: This operation is available only for standard secrets.
  • In this example, the secret value of a new version is stored into the `secret001` secret. The `VersionId` parameter is set to `00000000000000000000000000000000203` as the new version, and the `SecretData` parameter is set to `importantdata`. *
  • @param request PutSecretValueRequest
  • @return PutSecretValueResponse

func (*Client) PutSecretValueWithOptions

func (client *Client) PutSecretValueWithOptions(request *PutSecretValueRequest, runtime *util.RuntimeOptions) (_result *PutSecretValueResponse, _err error)

*

  • This operation is used to store the secret values of new versions. It cannot be used to modify the secret value of an existing version.
  • By default, the newly stored secret value is marked with ACSCurrent, and the mark for the previous version of the secret value is changed from ACSCurrent to ACSPrevious. If you specify the VersionStage parameter, the newly stored secret value is marked with the stage label that you specify.
  • You must specify a version number when you call the operation. Secrets Manager performs operations based on the following rules:
  • * If the specified version number does not exist in the secret, Secrets Manager creates the version and stores the secret value.
  • * If the specified version number already exists in the secret and the secret value of the existing version is the same as the secret value that you specify, Secrets Manager ignores the request and returns a success message. The request is idempotent.
  • * If the specified version number already exists in the secret but the secret value of the existing version is different from the secret value that you specify, Secrets Manager rejects the request and returns a failure message.
  • Limits: This operation is available only for standard secrets.
  • In this example, the secret value of a new version is stored into the `secret001` secret. The `VersionId` parameter is set to `00000000000000000000000000000000203` as the new version, and the `SecretData` parameter is set to `importantdata`. *
  • @param request PutSecretValueRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return PutSecretValueResponse

func (*Client) ReEncrypt

func (client *Client) ReEncrypt(request *ReEncryptRequest) (_result *ReEncryptResponse, _err error)

*

  • You can call this operation in the following scenarios:
  • * After the CMK that was used to encrypt your data is rotated, you can call this operation to use the latest CMK version to re-encrypt the data. For more information about automatic key rotation, see [Configure automatic key rotation](~~134270~~).
  • * The CMK that was used to encrypt your data remains unchanged, but EncryptionContext is changed. In this scenario, you can call this operation to re-encrypt the data.
  • * You can call this operation to use a CMK in KMS to re-encrypt data or a data key that was previously encrypted by a different CMK.
  • To use the ReEncrypt operation, you must have two permissions:
  • * kms:ReEncryptFrom on the source CMK
  • * kms:ReEncryptTo on the destination CMK
  • * For simplicity, you can specify kms:ReEncrypt\\* to allow both of the preceding permissions. *
  • @param request ReEncryptRequest
  • @return ReEncryptResponse

func (*Client) ReEncryptWithOptions

func (client *Client) ReEncryptWithOptions(tmpReq *ReEncryptRequest, runtime *util.RuntimeOptions) (_result *ReEncryptResponse, _err error)

*

  • You can call this operation in the following scenarios:
  • * After the CMK that was used to encrypt your data is rotated, you can call this operation to use the latest CMK version to re-encrypt the data. For more information about automatic key rotation, see [Configure automatic key rotation](~~134270~~).
  • * The CMK that was used to encrypt your data remains unchanged, but EncryptionContext is changed. In this scenario, you can call this operation to re-encrypt the data.
  • * You can call this operation to use a CMK in KMS to re-encrypt data or a data key that was previously encrypted by a different CMK.
  • To use the ReEncrypt operation, you must have two permissions:
  • * kms:ReEncryptFrom on the source CMK
  • * kms:ReEncryptTo on the destination CMK
  • * For simplicity, you can specify kms:ReEncrypt\\* to allow both of the preceding permissions. *
  • @param tmpReq ReEncryptRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return ReEncryptResponse

func (*Client) RestoreSecret

func (client *Client) RestoreSecret(request *RestoreSecretRequest) (_result *RestoreSecretResponse, _err error)

*

  • You can only use this operation to restore a deleted secret that is within its recovery period. If you set **ForceDeleteWithoutRecovery** to **true** when you delete the secret, you cannot restore it. *
  • @param request RestoreSecretRequest
  • @return RestoreSecretResponse

func (*Client) RestoreSecretWithOptions

func (client *Client) RestoreSecretWithOptions(request *RestoreSecretRequest, runtime *util.RuntimeOptions) (_result *RestoreSecretResponse, _err error)

*

  • You can only use this operation to restore a deleted secret that is within its recovery period. If you set **ForceDeleteWithoutRecovery** to **true** when you delete the secret, you cannot restore it. *
  • @param request RestoreSecretRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return RestoreSecretResponse

func (*Client) RotateSecret

func (client *Client) RotateSecret(request *RotateSecretRequest) (_result *RotateSecretResponse, _err error)

*

  • Limits:
  • • A secret of each Alibaba Cloud account can be rotated for a maximum of 50 times per hour.
  • • The RotateSecret operation is unavailable for standard secrets.
  • In this example, the `RdsSecret/Mysql5.4/MyCred` secret is manually rotated, and the version number of the secret is set to `000000123` after the secret is rotated. *
  • @param request RotateSecretRequest
  • @return RotateSecretResponse

func (*Client) RotateSecretWithOptions

func (client *Client) RotateSecretWithOptions(request *RotateSecretRequest, runtime *util.RuntimeOptions) (_result *RotateSecretResponse, _err error)

*

  • Limits:
  • • A secret of each Alibaba Cloud account can be rotated for a maximum of 50 times per hour.
  • • The RotateSecret operation is unavailable for standard secrets.
  • In this example, the `RdsSecret/Mysql5.4/MyCred` secret is manually rotated, and the version number of the secret is set to `000000123` after the secret is rotated. *
  • @param request RotateSecretRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return RotateSecretResponse

func (*Client) ScheduleKeyDeletion

func (client *Client) ScheduleKeyDeletion(request *ScheduleKeyDeletionRequest) (_result *ScheduleKeyDeletionResponse, _err error)

*

  • During the scheduled period, the CMK is in the PendingDeletion state and cannot be used to encrypt data, decrypt data, or generate data keys.
  • After a CMK is deleted, it cannot be recovered. Data that is encrypted and data keys that are generated by using the CMK cannot be decrypted. To prevent accidental deletion of CMKs, Key Management Service (KMS) allows you to only schedule key deletion tasks. You cannot directly delete CMKs. If you want to delete a CMK, call the [DisableKey](~~35151~~) operation to disable the CMK.
  • When you call this operation, you must specify a scheduled period between 7 days to 366 days. The scheduled period starts from the time when you submit the request. You can call the [CancelKeyDeletion](~~44197~~) operation to cancel the key deletion task before the scheduled period ends. *
  • @param request ScheduleKeyDeletionRequest
  • @return ScheduleKeyDeletionResponse

func (*Client) ScheduleKeyDeletionWithOptions

func (client *Client) ScheduleKeyDeletionWithOptions(request *ScheduleKeyDeletionRequest, runtime *util.RuntimeOptions) (_result *ScheduleKeyDeletionResponse, _err error)

*

  • During the scheduled period, the CMK is in the PendingDeletion state and cannot be used to encrypt data, decrypt data, or generate data keys.
  • After a CMK is deleted, it cannot be recovered. Data that is encrypted and data keys that are generated by using the CMK cannot be decrypted. To prevent accidental deletion of CMKs, Key Management Service (KMS) allows you to only schedule key deletion tasks. You cannot directly delete CMKs. If you want to delete a CMK, call the [DisableKey](~~35151~~) operation to disable the CMK.
  • When you call this operation, you must specify a scheduled period between 7 days to 366 days. The scheduled period starts from the time when you submit the request. You can call the [CancelKeyDeletion](~~44197~~) operation to cancel the key deletion task before the scheduled period ends. *
  • @param request ScheduleKeyDeletionRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return ScheduleKeyDeletionResponse

func (*Client) SetDeletionProtection

func (client *Client) SetDeletionProtection(request *SetDeletionProtectionRequest) (_result *SetDeletionProtectionResponse, _err error)

*

  • * After you enable deletion protection for a CMK, you cannot delete the CMK. If you want to delete the CMK, you must first disable deletion protection for the CMK.
  • * Before you can call the SetDeletionProtection operation, make sure that the required CMK is not in the Pending Deletion state. You can call the [DescribeKey](~~28952~~) operation to query the CMK status, which is specified by the KeyState parameter.
  • You can enable deletion protection for the CMK whose Alibaba Cloud Resource Name (ARN) is `acs:kms:cn-hangzhou:123213123****:key/0225f411-b21d-46d1-be5b-93931c82****` by using parameter settings provided in this topic. The CMK ARN is specified by the ProtectedResourceArn parameter. *
  • @param request SetDeletionProtectionRequest
  • @return SetDeletionProtectionResponse

func (*Client) SetDeletionProtectionWithOptions

func (client *Client) SetDeletionProtectionWithOptions(request *SetDeletionProtectionRequest, runtime *util.RuntimeOptions) (_result *SetDeletionProtectionResponse, _err error)

*

  • * After you enable deletion protection for a CMK, you cannot delete the CMK. If you want to delete the CMK, you must first disable deletion protection for the CMK.
  • * Before you can call the SetDeletionProtection operation, make sure that the required CMK is not in the Pending Deletion state. You can call the [DescribeKey](~~28952~~) operation to query the CMK status, which is specified by the KeyState parameter.
  • You can enable deletion protection for the CMK whose Alibaba Cloud Resource Name (ARN) is `acs:kms:cn-hangzhou:123213123****:key/0225f411-b21d-46d1-be5b-93931c82****` by using parameter settings provided in this topic. The CMK ARN is specified by the ProtectedResourceArn parameter. *
  • @param request SetDeletionProtectionRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return SetDeletionProtectionResponse

func (*Client) TagResource

func (client *Client) TagResource(request *TagResourceRequest) (_result *TagResourceResponse, _err error)

*

  • You can add up to 10 tags to a CMK, secret, or certificate.
  • In this example, the tags `[{"TagKey":"S1key1","TagValue":"S1val1"},{"TagKey":"S1key2","TagValue":"S2val2"}]` are added to the CMK whose ID is `08c33a6f-4e0a-4a1b-a3fa-7ddf****`. *
  • @param request TagResourceRequest
  • @return TagResourceResponse

func (*Client) TagResourceWithOptions

func (client *Client) TagResourceWithOptions(request *TagResourceRequest, runtime *util.RuntimeOptions) (_result *TagResourceResponse, _err error)

*

  • You can add up to 10 tags to a CMK, secret, or certificate.
  • In this example, the tags `[{"TagKey":"S1key1","TagValue":"S1val1"},{"TagKey":"S1key2","TagValue":"S2val2"}]` are added to the CMK whose ID is `08c33a6f-4e0a-4a1b-a3fa-7ddf****`. *
  • @param request TagResourceRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return TagResourceResponse

func (*Client) UntagResource

func (client *Client) UntagResource(request *UntagResourceRequest) (_result *UntagResourceResponse, _err error)

*

  • In this example, the tags whose tag keys are tagkey1 and tagkey2 are removed from the CMK whose ID is `08c33a6f-4e0a-4a1b-a3fa-7ddf****`. *
  • @param request UntagResourceRequest
  • @return UntagResourceResponse

func (*Client) UntagResourceWithOptions

func (client *Client) UntagResourceWithOptions(request *UntagResourceRequest, runtime *util.RuntimeOptions) (_result *UntagResourceResponse, _err error)

*

  • In this example, the tags whose tag keys are tagkey1 and tagkey2 are removed from the CMK whose ID is `08c33a6f-4e0a-4a1b-a3fa-7ddf****`. *
  • @param request UntagResourceRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return UntagResourceResponse

func (*Client) UpdateAlias

func (client *Client) UpdateAlias(request *UpdateAliasRequest) (_result *UpdateAliasResponse, _err error)

func (*Client) UpdateAliasWithOptions

func (client *Client) UpdateAliasWithOptions(request *UpdateAliasRequest, runtime *util.RuntimeOptions) (_result *UpdateAliasResponse, _err error)

func (*Client) UpdateCertificateStatus

func (client *Client) UpdateCertificateStatus(request *UpdateCertificateStatusRequest) (_result *UpdateCertificateStatusResponse, _err error)

*

  • In this example, the status of the certificate whose ID is `9a28de48-8d8b-484d-a766-dec4****` is updated to INACTIVE. *
  • @param request UpdateCertificateStatusRequest
  • @return UpdateCertificateStatusResponse

func (*Client) UpdateCertificateStatusWithOptions

func (client *Client) UpdateCertificateStatusWithOptions(request *UpdateCertificateStatusRequest, runtime *util.RuntimeOptions) (_result *UpdateCertificateStatusResponse, _err error)

*

  • In this example, the status of the certificate whose ID is `9a28de48-8d8b-484d-a766-dec4****` is updated to INACTIVE. *
  • @param request UpdateCertificateStatusRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return UpdateCertificateStatusResponse

func (*Client) UpdateKeyDescription

func (client *Client) UpdateKeyDescription(request *UpdateKeyDescriptionRequest) (_result *UpdateKeyDescriptionResponse, _err error)

*

  • This operation replaces the description of a customer master key (CMK) with the description that you specify. The original description of the CMK is specified by the Description parameter when you call the [DescribeKey](~~28952~~) operation. You can call this operation to add, modify, or delete the description of a CMK. *
  • @param request UpdateKeyDescriptionRequest
  • @return UpdateKeyDescriptionResponse

func (*Client) UpdateKeyDescriptionWithOptions

func (client *Client) UpdateKeyDescriptionWithOptions(request *UpdateKeyDescriptionRequest, runtime *util.RuntimeOptions) (_result *UpdateKeyDescriptionResponse, _err error)

*

  • This operation replaces the description of a customer master key (CMK) with the description that you specify. The original description of the CMK is specified by the Description parameter when you call the [DescribeKey](~~28952~~) operation. You can call this operation to add, modify, or delete the description of a CMK. *
  • @param request UpdateKeyDescriptionRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return UpdateKeyDescriptionResponse

func (*Client) UpdateRotationPolicy

func (client *Client) UpdateRotationPolicy(request *UpdateRotationPolicyRequest) (_result *UpdateRotationPolicyResponse, _err error)

*

  • When automatic key rotation is enabled, KMS automatically creates a key version after the preset rotation period arrives. In addition, KMS sets the new key version as the primary key version.
  • An automatic key rotation policy cannot be configured for the following keys:
  • * Asymmetric key
  • * Service-managed key
  • * Bring your own key (BYOK) that is imported into KMS
  • * Key that is not in the **Enabled** state
  • In this example, automatic key rotation is enabled for a CMK whose ID is `1234abcd-12ab-34cd-56ef-12345678****`. The automatic rotation period is 30 days. *
  • @param request UpdateRotationPolicyRequest
  • @return UpdateRotationPolicyResponse

func (*Client) UpdateRotationPolicyWithOptions

func (client *Client) UpdateRotationPolicyWithOptions(request *UpdateRotationPolicyRequest, runtime *util.RuntimeOptions) (_result *UpdateRotationPolicyResponse, _err error)

*

  • When automatic key rotation is enabled, KMS automatically creates a key version after the preset rotation period arrives. In addition, KMS sets the new key version as the primary key version.
  • An automatic key rotation policy cannot be configured for the following keys:
  • * Asymmetric key
  • * Service-managed key
  • * Bring your own key (BYOK) that is imported into KMS
  • * Key that is not in the **Enabled** state
  • In this example, automatic key rotation is enabled for a CMK whose ID is `1234abcd-12ab-34cd-56ef-12345678****`. The automatic rotation period is 30 days. *
  • @param request UpdateRotationPolicyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return UpdateRotationPolicyResponse

func (*Client) UpdateSecret

func (client *Client) UpdateSecret(request *UpdateSecretRequest) (_result *UpdateSecretResponse, _err error)

*

  • In this example, the metadata of the `secret001` secret is updated. The `Description` parameter is set to `datainfo`. *
  • @param request UpdateSecretRequest
  • @return UpdateSecretResponse

func (*Client) UpdateSecretRotationPolicy

func (client *Client) UpdateSecretRotationPolicy(request *UpdateSecretRotationPolicyRequest) (_result *UpdateSecretRotationPolicyResponse, _err error)

*

  • After automatic rotation is enabled, Secrets Manager schedules the first automatic rotation by adding the preset rotation interval to the timestamp of the last rotation.
  • Limits: The UpdateSecretRotationPolicy operation cannot be used to update the rotation policy of generic secrets.
  • In this example, the rotation policy of the `RdsSecret/Mysql5.4/MyCred` secret is updated. The following settings are modified:
  • * The `EnableAutomaticRotation` parameter is set to `true`, which indicates that automatic rotation is enabled.
  • * The `RotationInterval` parameter is set to `30d`, which indicates that the interval for automatic rotation is 30 days. *
  • @param request UpdateSecretRotationPolicyRequest
  • @return UpdateSecretRotationPolicyResponse

func (*Client) UpdateSecretRotationPolicyWithOptions

func (client *Client) UpdateSecretRotationPolicyWithOptions(request *UpdateSecretRotationPolicyRequest, runtime *util.RuntimeOptions) (_result *UpdateSecretRotationPolicyResponse, _err error)

*

  • After automatic rotation is enabled, Secrets Manager schedules the first automatic rotation by adding the preset rotation interval to the timestamp of the last rotation.
  • Limits: The UpdateSecretRotationPolicy operation cannot be used to update the rotation policy of generic secrets.
  • In this example, the rotation policy of the `RdsSecret/Mysql5.4/MyCred` secret is updated. The following settings are modified:
  • * The `EnableAutomaticRotation` parameter is set to `true`, which indicates that automatic rotation is enabled.
  • * The `RotationInterval` parameter is set to `30d`, which indicates that the interval for automatic rotation is 30 days. *
  • @param request UpdateSecretRotationPolicyRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return UpdateSecretRotationPolicyResponse

func (*Client) UpdateSecretVersionStage

func (client *Client) UpdateSecretVersionStage(request *UpdateSecretVersionStageRequest) (_result *UpdateSecretVersionStageResponse, _err error)

*

  • You can use this operation to achieve the following purposes:
  • * Use a specified stage label to mark a new secret version.
  • * Remove a specific stage label from an existing secret version.
  • Limits: This operation is available only for generic secrets.
  • In this example, the stage label that marks the version of the `secret001` secret is updated. The stage label `ACSCurrent` is used to mark the `002` version. *
  • @param request UpdateSecretVersionStageRequest
  • @return UpdateSecretVersionStageResponse

func (*Client) UpdateSecretVersionStageWithOptions

func (client *Client) UpdateSecretVersionStageWithOptions(request *UpdateSecretVersionStageRequest, runtime *util.RuntimeOptions) (_result *UpdateSecretVersionStageResponse, _err error)

*

  • You can use this operation to achieve the following purposes:
  • * Use a specified stage label to mark a new secret version.
  • * Remove a specific stage label from an existing secret version.
  • Limits: This operation is available only for generic secrets.
  • In this example, the stage label that marks the version of the `secret001` secret is updated. The stage label `ACSCurrent` is used to mark the `002` version. *
  • @param request UpdateSecretVersionStageRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return UpdateSecretVersionStageResponse

func (*Client) UpdateSecretWithOptions

func (client *Client) UpdateSecretWithOptions(request *UpdateSecretRequest, runtime *util.RuntimeOptions) (_result *UpdateSecretResponse, _err error)

*

  • In this example, the metadata of the `secret001` secret is updated. The `Description` parameter is set to `datainfo`. *
  • @param request UpdateSecretRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return UpdateSecretResponse

func (*Client) UploadCertificate

func (client *Client) UploadCertificate(request *UploadCertificateRequest) (_result *UploadCertificateResponse, _err error)

*

  • In this example, a certificate issued by a CA is imported into Certificates Manager. The ID of the certificate in Certificates Manager is `12345678-1234-1234-1234-12345678****`. *
  • @param request UploadCertificateRequest
  • @return UploadCertificateResponse

func (*Client) UploadCertificateWithOptions

func (client *Client) UploadCertificateWithOptions(request *UploadCertificateRequest, runtime *util.RuntimeOptions) (_result *UploadCertificateResponse, _err error)

*

  • In this example, a certificate issued by a CA is imported into Certificates Manager. The ID of the certificate in Certificates Manager is `12345678-1234-1234-1234-12345678****`. *
  • @param request UploadCertificateRequest
  • @param runtime runtime options for this request RuntimeOptions
  • @return UploadCertificateResponse

type CreateAliasRequest

type CreateAliasRequest struct {
	// The alias of the CMK.
	//
	// The alias must be 1 to 255 characters in length and must contain the prefix `alias/`. The alias cannot be prefixed with the reserved word `alias/acs`.
	AliasName *string `json:"AliasName,omitempty" xml:"AliasName,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (CreateAliasRequest) GoString

func (s CreateAliasRequest) GoString() string

func (*CreateAliasRequest) SetAliasName

func (s *CreateAliasRequest) SetAliasName(v string) *CreateAliasRequest

func (*CreateAliasRequest) SetKeyId

func (CreateAliasRequest) String

func (s CreateAliasRequest) String() string

type CreateAliasResponse

type CreateAliasResponse struct {
	Headers    map[string]*string       `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                   `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CreateAliasResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CreateAliasResponse) GoString

func (s CreateAliasResponse) GoString() string

func (*CreateAliasResponse) SetBody

func (*CreateAliasResponse) SetHeaders

func (s *CreateAliasResponse) SetHeaders(v map[string]*string) *CreateAliasResponse

func (*CreateAliasResponse) SetStatusCode

func (s *CreateAliasResponse) SetStatusCode(v int32) *CreateAliasResponse

func (CreateAliasResponse) String

func (s CreateAliasResponse) String() string

type CreateAliasResponseBody

type CreateAliasResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (CreateAliasResponseBody) GoString

func (s CreateAliasResponseBody) GoString() string

func (*CreateAliasResponseBody) SetRequestId

func (CreateAliasResponseBody) String

func (s CreateAliasResponseBody) String() string

type CreateCertificateRequest

type CreateCertificateRequest struct {
	// Specifies whether the private key of the certificate can be exported for use. Valid values:
	//
	// *   true: The private key of the certificate can be exported for use. This is the default value.
	// *   false: The private key of the certificate cannot be exported for use. We recommend that you set this parameter to false to protect keys with a higher security level.
	ExportablePrivateKey *bool `json:"ExportablePrivateKey,omitempty" xml:"ExportablePrivateKey,omitempty"`
	// The type of the key. Valid values:
	//
	// *   RSA\_2048
	// *   EC_P256
	// *   EC_SM2
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The certificate subject, which is the owner of the certificate.
	//
	// Specify the value in the distinguished name (DN) format, as defined in [RFC 2253](https://tools.ietf.org/html/rfc2253?spm=a2c4g.11186623.2.13.265f1a1cGFCn3Q). A DN is a sequence of relative distinguished names (RDNs).
	//
	// RDNs are key-value pairs in the format of `attribute1=value1,attribute2=value2`. Separate multiple RDNs with commas (,).
	//
	// The Subject parameter consists of the following fields:
	//
	// *   CN: required. The name of the certificate subject.
	// *   C: required. The two-character country or region code in the [ISO 3166-1](https://www.iso.org/obp/ui/#search/code/) standard. For example, CN indicates China.
	// *   O: required. The legal name of the enterprise, company, organization, or institution.
	// *   OU: required. The name of the department.
	// *   ST: optional. The name of the province, municipality, autonomous region, or special administrative region.
	// *   L: optional. The name of the city.
	Subject *string `json:"Subject,omitempty" xml:"Subject,omitempty"`
	// The subject alternative names.
	//
	// A domain name list is supported. A maximum of 10 domain names are supported.
	SubjectAlternativeNames map[string]interface{} `json:"SubjectAlternativeNames,omitempty" xml:"SubjectAlternativeNames,omitempty"`
}

func (CreateCertificateRequest) GoString

func (s CreateCertificateRequest) GoString() string

func (*CreateCertificateRequest) SetExportablePrivateKey

func (s *CreateCertificateRequest) SetExportablePrivateKey(v bool) *CreateCertificateRequest

func (*CreateCertificateRequest) SetKeySpec

func (*CreateCertificateRequest) SetSubject

func (*CreateCertificateRequest) SetSubjectAlternativeNames

func (s *CreateCertificateRequest) SetSubjectAlternativeNames(v map[string]interface{}) *CreateCertificateRequest

func (CreateCertificateRequest) String

func (s CreateCertificateRequest) String() string

type CreateCertificateResponse

type CreateCertificateResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CreateCertificateResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CreateCertificateResponse) GoString

func (s CreateCertificateResponse) GoString() string

func (*CreateCertificateResponse) SetBody

func (*CreateCertificateResponse) SetHeaders

func (*CreateCertificateResponse) SetStatusCode

func (CreateCertificateResponse) String

func (s CreateCertificateResponse) String() string

type CreateCertificateResponseBody

type CreateCertificateResponseBody struct {
	// The Alibaba Cloud Resource Name (ARN) of the certificate.
	Arn *string `json:"Arn,omitempty" xml:"Arn,omitempty"`
	// The ID of the certificate. It is the globally unique identifier (GUID) of the certificate in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The CSR in the PEM format.
	Csr *string `json:"Csr,omitempty" xml:"Csr,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (CreateCertificateResponseBody) GoString

func (*CreateCertificateResponseBody) SetArn

func (*CreateCertificateResponseBody) SetCertificateId

func (*CreateCertificateResponseBody) SetCsr

func (*CreateCertificateResponseBody) SetRequestId

func (CreateCertificateResponseBody) String

type CreateCertificateShrinkRequest

type CreateCertificateShrinkRequest struct {
	// Specifies whether the private key of the certificate can be exported for use. Valid values:
	//
	// *   true: The private key of the certificate can be exported for use. This is the default value.
	// *   false: The private key of the certificate cannot be exported for use. We recommend that you set this parameter to false to protect keys with a higher security level.
	ExportablePrivateKey *bool `json:"ExportablePrivateKey,omitempty" xml:"ExportablePrivateKey,omitempty"`
	// The type of the key. Valid values:
	//
	// *   RSA\_2048
	// *   EC_P256
	// *   EC_SM2
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The certificate subject, which is the owner of the certificate.
	//
	// Specify the value in the distinguished name (DN) format, as defined in [RFC 2253](https://tools.ietf.org/html/rfc2253?spm=a2c4g.11186623.2.13.265f1a1cGFCn3Q). A DN is a sequence of relative distinguished names (RDNs).
	//
	// RDNs are key-value pairs in the format of `attribute1=value1,attribute2=value2`. Separate multiple RDNs with commas (,).
	//
	// The Subject parameter consists of the following fields:
	//
	// *   CN: required. The name of the certificate subject.
	// *   C: required. The two-character country or region code in the [ISO 3166-1](https://www.iso.org/obp/ui/#search/code/) standard. For example, CN indicates China.
	// *   O: required. The legal name of the enterprise, company, organization, or institution.
	// *   OU: required. The name of the department.
	// *   ST: optional. The name of the province, municipality, autonomous region, or special administrative region.
	// *   L: optional. The name of the city.
	Subject *string `json:"Subject,omitempty" xml:"Subject,omitempty"`
	// The subject alternative names.
	//
	// A domain name list is supported. A maximum of 10 domain names are supported.
	SubjectAlternativeNamesShrink *string `json:"SubjectAlternativeNames,omitempty" xml:"SubjectAlternativeNames,omitempty"`
}

func (CreateCertificateShrinkRequest) GoString

func (*CreateCertificateShrinkRequest) SetExportablePrivateKey

func (*CreateCertificateShrinkRequest) SetKeySpec

func (*CreateCertificateShrinkRequest) SetSubject

func (*CreateCertificateShrinkRequest) SetSubjectAlternativeNamesShrink

func (s *CreateCertificateShrinkRequest) SetSubjectAlternativeNamesShrink(v string) *CreateCertificateShrinkRequest

func (CreateCertificateShrinkRequest) String

type CreateKeyRequest

type CreateKeyRequest struct {
	// The ID of the dedicated KMS instance.
	DKMSInstanceId *string `json:"DKMSInstanceId,omitempty" xml:"DKMSInstanceId,omitempty"`
	// The description of the CMK.
	//
	// The description can be 0 to 8,192 characters in length.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// Specifies whether to enable automatic key rotation. Valid values:
	//
	// *   true
	// *   false
	//
	// Default value: false.
	//
	// >  If the Origin parameter is set to EXTERNAL or the KeySpec parameter is set to an asymmetric CMK type, automatic key rotation is not supported.
	EnableAutomaticRotation *bool `json:"EnableAutomaticRotation,omitempty" xml:"EnableAutomaticRotation,omitempty"`
	// The type of the CMK. Valid values:
	//
	// *   Aliyun_AES\_256
	// *   Aliyun_AES\_128
	// *   Aliyun_AES\_192
	// *   Aliyun_SM4
	// *   RSA\_2048
	// *   RSA\_3072
	// *   EC_P256
	// *   EC_P256K
	// *   EC_SM2
	//
	// >
	// *   The default type of the CMK is Aliyun_AES\_256.
	// *   Only Dedicated KMS supports Aliyun_AES\_128 and Aliyun_AES\_192.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The usage of the CMK. Valid values:
	//
	// *   ENCRYPT/DECRYPT: encrypts or decrypts data.
	// *   SIGN/VERIFY: generates or verifies a digital signature.
	//
	// If the CMK supports signature verification, the default value is SIGN/VERIFY. If the CMK does not support signature verification, the default value is ENCRYPT/DECRYPT.
	KeyUsage *string `json:"KeyUsage,omitempty" xml:"KeyUsage,omitempty"`
	// The source of key material. Valid values:
	//
	// *   Aliyun_KMS (default value)
	// *   EXTERNAL
	//
	// >
	// *   The value of this parameter is case-sensitive.
	// *   If you set the KeySpec parameter to an asymmetric CMK type, you are not allowed to set the Origin parameter to EXTERNAL.
	// *   If you set the Origin parameter to EXTERNAL, you must import key material. For more information, see [Import key material](~~68523~~).
	Origin *string `json:"Origin,omitempty" xml:"Origin,omitempty"`
	// The protection level of the CMK. Valid values:
	//
	// *   SOFTWARE
	// *   HSM
	//
	// Default value: SOFTWARE.
	//
	// >
	// *   The value of this parameter is case-sensitive.
	// *   Assume that you set this parameter to HSM. If you set the Origin parameter to Aliyun_KMS, the CMK is created in a managed HSM. If you set the Origin parameter to EXTERNAL, you can import an external key into the managed HSM.
	ProtectionLevel *string `json:"ProtectionLevel,omitempty" xml:"ProtectionLevel,omitempty"`
	// The period of automatic key rotation. Specify the value in the integer\[unit] format. Unit: d (day), h (hour), m (minute), or s (second). For example, you can use either 7d or 604800s to specify a seven-day period. The period can range from 7 days to 730 days.
	//
	// >  If you set the EnableAutomaticRotation parameter to true, you must also specify this parameter. If you set the EnableAutomaticRotation parameter to false, you can leave this parameter unspecified.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
}

func (CreateKeyRequest) GoString

func (s CreateKeyRequest) GoString() string

func (*CreateKeyRequest) SetDKMSInstanceId

func (s *CreateKeyRequest) SetDKMSInstanceId(v string) *CreateKeyRequest

func (*CreateKeyRequest) SetDescription

func (s *CreateKeyRequest) SetDescription(v string) *CreateKeyRequest

func (*CreateKeyRequest) SetEnableAutomaticRotation

func (s *CreateKeyRequest) SetEnableAutomaticRotation(v bool) *CreateKeyRequest

func (*CreateKeyRequest) SetKeySpec

func (s *CreateKeyRequest) SetKeySpec(v string) *CreateKeyRequest

func (*CreateKeyRequest) SetKeyUsage

func (s *CreateKeyRequest) SetKeyUsage(v string) *CreateKeyRequest

func (*CreateKeyRequest) SetOrigin

func (s *CreateKeyRequest) SetOrigin(v string) *CreateKeyRequest

func (*CreateKeyRequest) SetProtectionLevel

func (s *CreateKeyRequest) SetProtectionLevel(v string) *CreateKeyRequest

func (*CreateKeyRequest) SetRotationInterval

func (s *CreateKeyRequest) SetRotationInterval(v string) *CreateKeyRequest

func (CreateKeyRequest) String

func (s CreateKeyRequest) String() string

type CreateKeyResponse

type CreateKeyResponse struct {
	Headers    map[string]*string     `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                 `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CreateKeyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CreateKeyResponse) GoString

func (s CreateKeyResponse) GoString() string

func (*CreateKeyResponse) SetBody

func (*CreateKeyResponse) SetHeaders

func (s *CreateKeyResponse) SetHeaders(v map[string]*string) *CreateKeyResponse

func (*CreateKeyResponse) SetStatusCode

func (s *CreateKeyResponse) SetStatusCode(v int32) *CreateKeyResponse

func (CreateKeyResponse) String

func (s CreateKeyResponse) String() string

type CreateKeyResponseBody

type CreateKeyResponseBody struct {
	// The metadata of the CMK.
	KeyMetadata *CreateKeyResponseBodyKeyMetadata `json:"KeyMetadata,omitempty" xml:"KeyMetadata,omitempty" type:"Struct"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (CreateKeyResponseBody) GoString

func (s CreateKeyResponseBody) GoString() string

func (*CreateKeyResponseBody) SetKeyMetadata

func (*CreateKeyResponseBody) SetRequestId

func (CreateKeyResponseBody) String

func (s CreateKeyResponseBody) String() string

type CreateKeyResponseBodyKeyMetadata

type CreateKeyResponseBodyKeyMetadata struct {
	// The Alibaba Cloud Resource Name (ARN) of the CMK.
	Arn *string `json:"Arn,omitempty" xml:"Arn,omitempty"`
	// Indicates whether automatic key rotation is enabled. Valid values:
	//
	// *   Enabled: Automatic key rotation is enabled.
	// *   Disabled: Automatic key rotation is disabled.
	// *   Suspended: Automatic key rotation is suspended. For more information, see [Automatic key rotation](~~134270~~).
	//
	// >  Automatic key rotation is available only for symmetric CMKs.
	AutomaticRotation *string `json:"AutomaticRotation,omitempty" xml:"AutomaticRotation,omitempty"`
	// The date and time when the CMK was created. The time is displayed in UTC.
	CreationDate *string `json:"CreationDate,omitempty" xml:"CreationDate,omitempty"`
	// The creator of the CMK.
	Creator *string `json:"Creator,omitempty" xml:"Creator,omitempty"`
	// The ID of the dedicated KMS instance.
	DKMSInstanceId *string `json:"DKMSInstanceId,omitempty" xml:"DKMSInstanceId,omitempty"`
	// The time when the CMK is scheduled for deletion.
	//
	// For more information, see [ScheduleKeyDeletion](~~44196~~).
	//
	// >  This value is returned only when the value of the KeyState parameter is PendingDeletion.
	DeleteDate *string `json:"DeleteDate,omitempty" xml:"DeleteDate,omitempty"`
	// The description of the CMK.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The type of the CMK.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The status of the CMK.
	//
	// For more information, see [Impact of CMK status on API operations](~~44211~~).
	KeyState *string `json:"KeyState,omitempty" xml:"KeyState,omitempty"`
	// The usage of the CMK.
	KeyUsage *string `json:"KeyUsage,omitempty" xml:"KeyUsage,omitempty"`
	// The time when the last rotation was performed. The time is displayed in UTC.
	//
	// For a new CMK, this parameter value is the time when the initial version of the CMK was generated.
	LastRotationDate *string `json:"LastRotationDate,omitempty" xml:"LastRotationDate,omitempty"`
	// The time when the key material expires. The time is displayed in UTC.
	//
	// If this parameter value is empty, the key material does not expire.
	MaterialExpireTime *string `json:"MaterialExpireTime,omitempty" xml:"MaterialExpireTime,omitempty"`
	// The time when the next rotation will be performed.
	//
	// >  This value is returned only when the value of the AutomaticRotation parameter is Enabled or Suspended.
	NextRotationDate *string `json:"NextRotationDate,omitempty" xml:"NextRotationDate,omitempty"`
	// The source of the key material for the CMK.
	Origin *string `json:"Origin,omitempty" xml:"Origin,omitempty"`
	// The ID of the current primary key version of the symmetric CMK.
	//
	// >
	// *   The primary key version of a symmetric CMK is an active encryption key. KMS uses the primary key version of a specified CMK to encrypt data.
	// *   This parameter is unavailable for asymmetric CMKs.
	PrimaryKeyVersion *string `json:"PrimaryKeyVersion,omitempty" xml:"PrimaryKeyVersion,omitempty"`
	// The protection level of the CMK.
	ProtectionLevel *string `json:"ProtectionLevel,omitempty" xml:"ProtectionLevel,omitempty"`
	// The period of automatic key rotation. Unit: seconds. The value is in the format of an integer followed by the letter s. For example, if the rotation period is seven days, this parameter is set to 604800s. This value is returned only when the value of the AutomaticRotation parameter is Enabled or Suspended.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
}

func (CreateKeyResponseBodyKeyMetadata) GoString

func (*CreateKeyResponseBodyKeyMetadata) SetArn

func (*CreateKeyResponseBodyKeyMetadata) SetAutomaticRotation

func (*CreateKeyResponseBodyKeyMetadata) SetCreationDate

func (*CreateKeyResponseBodyKeyMetadata) SetCreator

func (*CreateKeyResponseBodyKeyMetadata) SetDKMSInstanceId

func (*CreateKeyResponseBodyKeyMetadata) SetDeleteDate

func (*CreateKeyResponseBodyKeyMetadata) SetDescription

func (*CreateKeyResponseBodyKeyMetadata) SetKeyId

func (*CreateKeyResponseBodyKeyMetadata) SetKeySpec

func (*CreateKeyResponseBodyKeyMetadata) SetKeyState

func (*CreateKeyResponseBodyKeyMetadata) SetKeyUsage

func (*CreateKeyResponseBodyKeyMetadata) SetLastRotationDate

func (*CreateKeyResponseBodyKeyMetadata) SetMaterialExpireTime

func (*CreateKeyResponseBodyKeyMetadata) SetNextRotationDate

func (*CreateKeyResponseBodyKeyMetadata) SetOrigin

func (*CreateKeyResponseBodyKeyMetadata) SetPrimaryKeyVersion

func (*CreateKeyResponseBodyKeyMetadata) SetProtectionLevel

func (*CreateKeyResponseBodyKeyMetadata) SetRotationInterval

func (CreateKeyResponseBodyKeyMetadata) String

type CreateKeyVersionRequest

type CreateKeyVersionRequest struct {
	// The ID of the CMK. The ID must be globally unique.
	//
	// >  You can also set the value to an alias that is bound to the CMK. For more information, see [Overview of aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (CreateKeyVersionRequest) GoString

func (s CreateKeyVersionRequest) GoString() string

func (*CreateKeyVersionRequest) SetKeyId

func (CreateKeyVersionRequest) String

func (s CreateKeyVersionRequest) String() string

type CreateKeyVersionResponse

type CreateKeyVersionResponse struct {
	Headers    map[string]*string            `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                        `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CreateKeyVersionResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CreateKeyVersionResponse) GoString

func (s CreateKeyVersionResponse) GoString() string

func (*CreateKeyVersionResponse) SetBody

func (*CreateKeyVersionResponse) SetHeaders

func (*CreateKeyVersionResponse) SetStatusCode

func (CreateKeyVersionResponse) String

func (s CreateKeyVersionResponse) String() string

type CreateKeyVersionResponseBody

type CreateKeyVersionResponseBody struct {
	// The metadata of the version.
	KeyVersion *CreateKeyVersionResponseBodyKeyVersion `json:"KeyVersion,omitempty" xml:"KeyVersion,omitempty" type:"Struct"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (CreateKeyVersionResponseBody) GoString

func (s CreateKeyVersionResponseBody) GoString() string

func (*CreateKeyVersionResponseBody) SetRequestId

func (CreateKeyVersionResponseBody) String

type CreateKeyVersionResponseBodyKeyVersion

type CreateKeyVersionResponseBodyKeyVersion struct {
	// The date and time when the version was created. The time is displayed in UTC.
	CreationDate *string `json:"CreationDate,omitempty" xml:"CreationDate,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The ID of the version.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
}

func (CreateKeyVersionResponseBodyKeyVersion) GoString

func (*CreateKeyVersionResponseBodyKeyVersion) SetCreationDate

func (*CreateKeyVersionResponseBodyKeyVersion) SetKeyId

func (*CreateKeyVersionResponseBodyKeyVersion) SetKeyVersionId

func (CreateKeyVersionResponseBodyKeyVersion) String

type CreateSecretRequest

type CreateSecretRequest struct {
	// The ID of the dedicated KMS instance.
	DKMSInstanceId *string `json:"DKMSInstanceId,omitempty" xml:"DKMSInstanceId,omitempty"`
	// The description of the secret.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// Specifies whether to enable automatic rotation. Valid values:
	//
	// *   true: specifies to enable automatic rotation.
	// *   false: specifies to disable automatic rotation. This is the default value.
	//
	// >  This parameter is valid if you set the SecretType parameter to Rds, RAMCredentials, or ECS.
	EnableAutomaticRotation *bool `json:"EnableAutomaticRotation,omitempty" xml:"EnableAutomaticRotation,omitempty"`
	// The ID of the CMK that is used to encrypt the secret value.
	//
	// If the DKMSInstanceId parameter is empty, Secrets Manager uses a CMK that is created by Dedicated KMS to encrypt and protect secrets. If the DKMSInstanceId parameter is not empty, specify the CMK of the dedicated KMS instance to encrypt and protect secrets.
	//
	// >  The CMK must be a symmetric CMK.
	EncryptionKeyId *string `json:"EncryptionKeyId,omitempty" xml:"EncryptionKeyId,omitempty"`
	// The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length.
	//
	// *   If you set the SecretType parameter to Generic, you do not need to configure this parameter.
	//
	// *   If you set the SecretType parameter to Rds, configure the following fields for the ExtendedConfig parameter:
	//
	//     *   SecretSubType: required. The subtype of the secret. Valid values:
	//
	//         *   SingleUser: Secrets Manager manages the ApsaraDB RDS secret in single-account mode. When the secret is rotated, the password of the specified account is reset to a new random password.
	//         *   DoubleUsers: Secrets Manager manages the ApsaraDB RDS secret in dual-account mode. One account is referenced by the ACSCurrent version, and the other account is referenced by the ACSPrevious version. When the secret is rotated, the password of the account referenced by the ACSPrevious version is reset to a new random password. Then, Secrets Manager switches the referenced accounts between the ACSCurrent and ACSPrevious versions.
	//
	//     *   DBInstanceId: required. The ApsaraDB RDS instance to which the ApsaraDB RDS account belongs.
	//
	//     *   CustomData: optional. The custom data. The value is a collection of key-value pairs in the JSON format. Up to 10 key-value pairs can be specified. Separate multiple key-value pairs with commas (,). Example: `{"Key1": "v1", "fds":"fdsf"}`. The default value is a pair of empty braces (`{}`).
	//
	// *   If you set the SecretType parameter to RAMCredentials, configure the following fields for the ExtendedConfig parameter:
	//
	//     *   SecretSubType: required. The subtype of the secret. Set the value to RamUserAccessKey.
	//     *   UserName: required. The name of the RAM user.
	//     *   CustomData: optional. The custom data. The value is a collection of key-value pairs in the JSON format. Up to 10 key-value pairs can be specified. Separate multiple key-value pairs with commas (,). The default value is a pair of empty braces (`{}`).
	//
	// *   If you set the SecretType parameter to ECS, configure the following fields for the ExtendedConfig parameter:
	//
	//     *   SecretSubType: required. The subtype of the secret. Valid values:
	//
	//         *   Password: the password that is used to log on to the ECS instance.
	//         *   SSHKey: the SSH public key and private key that are used to log on to the ECS instance.
	//
	//     *   RegionId: required. The ID of the region in which the ECS instance resides.
	//
	//     *   InstanceId: required. The ID of the ECS instance.
	//
	//     *   CustomData: optional. The custom data. The value is a collection of key-value pairs in the JSON format. Up to 10 key-value pairs can be specified. Separate multiple key-value pairs with commas (,). The default value is a pair of empty braces (`{}`).
	//
	// >  This parameter is required if you set the SecretType parameter to Rds, RAMCredentials, or ECS.
	ExtendedConfig map[string]interface{} `json:"ExtendedConfig,omitempty" xml:"ExtendedConfig,omitempty"`
	// The interval for automatic rotation. Valid values: 6 hours to 8,760 hours (365 days).
	//
	// The value is in the `integer[unit]` format.
	//
	// The unit can be d (day), h (hour), m (minute), or s (second). For example, both 7d and 604800s indicate a seven-day interval.
	//
	// >  This parameter is required if you set the EnableAutomaticRotation parameter to true. This parameter is ignored if you set the EnableAutomaticRotation parameter to false or if the EnableAutomaticRotation parameter is not configured.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
	// The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores the encrypted value in the initial version.
	//
	// *   If you set the SecretType parameter to Generic that indicates a generic secret, you can customize the secret value.
	//
	// *   If you set the SecretType parameter to Rds that indicates a managed ApsaraDB RDS secret, the secret value must be in the format of `{"Accounts":[{"AccountName":"","AccountPassword":""}]}`. In the preceding format, `AccountName` indicates the username of the account that is used to connect to your ApsaraDB RDS instance, and `AccountPassword` specifies the password of the account.
	//
	// *   If you set the SecretType parameter to RAMCredentials that indicates a managed RAM secret, the secret value must be in the format of `{"AccessKeys":[{"AccessKeyId":"","AccessKeySecret":"",}]}`. In the preceding format, `AccessKeyId` indicates the AccessKey ID of the RAM user and `AccessKeySecret` specifies the AccessKey secret of the RAM user. You must specify all the AccessKey pairs of the RAM user.
	//
	// *   If you set the SecretType parameter to ECS that indicates a managed ECS secret, the secret value must be in one of the following formats:
	//
	//     *   `{"UserName":"","Password": ""}`: In the format, `UserName` specifies the username that is used to log on to the ECS instance, and `Password` specifies the password that is used to log on to the ECS instance.
	//     *   `{"UserName":"","PublicKey": "", "PrivateKey": ""}`: In the format, `PublicKey` indicates the SSH public key that is used to log on to the ECS instance, and `PrivateKey` specifies the SSH private key that is used to log on to the ECS instance.
	SecretData *string `json:"SecretData,omitempty" xml:"SecretData,omitempty"`
	// The type of the secret value. Valid values:
	//
	// *   text
	// *   binary
	//
	// >  If you set the SecretType parameter to Rds, RAMCredentials, or ECS, the SecretDataType parameter must be set to text.
	SecretDataType *string `json:"SecretDataType,omitempty" xml:"SecretDataType,omitempty"`
	// The name of the secret.
	//
	// The value must be 1 to 64 characters in length and can contain letters, digits, underscores (\_), forward slashes (/), plus signs (+), equal signs (=), periods (.), hyphens (-), and at signs (@). The following list describes the name requirements for different types of secrets:
	//
	// *   If the SecretType parameter is set to Generic or Rds, the name cannot start with `acs/`.
	// *   If the SecretType parameter is set to RAMCredentials, set the SecretName parameter to `$Auto`. In this case, KMS automatically generates a secret name that starts with `acs/ram/user/`. The name includes the display name of RAM user.
	// *   If the SecretType parameter is set to ECS, the name must start with `acs/ecs/`.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The type of the secret. Valid values:
	//
	// *   Generic: specifies a generic secret.
	// *   Rds: specifies a managed ApsaraDB RDS secret.
	// *   RAMCredentials: specifies a managed RAM secret.
	// *   ECS: specifies a managed ECS secret.
	SecretType *string `json:"SecretType,omitempty" xml:"SecretType,omitempty"`
	// The tags of the secret.
	Tags *string `json:"Tags,omitempty" xml:"Tags,omitempty"`
	// The initial version number. Version numbers are unique in each secret.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
}

func (CreateSecretRequest) GoString

func (s CreateSecretRequest) GoString() string

func (*CreateSecretRequest) SetDKMSInstanceId

func (s *CreateSecretRequest) SetDKMSInstanceId(v string) *CreateSecretRequest

func (*CreateSecretRequest) SetDescription

func (s *CreateSecretRequest) SetDescription(v string) *CreateSecretRequest

func (*CreateSecretRequest) SetEnableAutomaticRotation

func (s *CreateSecretRequest) SetEnableAutomaticRotation(v bool) *CreateSecretRequest

func (*CreateSecretRequest) SetEncryptionKeyId

func (s *CreateSecretRequest) SetEncryptionKeyId(v string) *CreateSecretRequest

func (*CreateSecretRequest) SetExtendedConfig

func (s *CreateSecretRequest) SetExtendedConfig(v map[string]interface{}) *CreateSecretRequest

func (*CreateSecretRequest) SetRotationInterval

func (s *CreateSecretRequest) SetRotationInterval(v string) *CreateSecretRequest

func (*CreateSecretRequest) SetSecretData

func (s *CreateSecretRequest) SetSecretData(v string) *CreateSecretRequest

func (*CreateSecretRequest) SetSecretDataType

func (s *CreateSecretRequest) SetSecretDataType(v string) *CreateSecretRequest

func (*CreateSecretRequest) SetSecretName

func (s *CreateSecretRequest) SetSecretName(v string) *CreateSecretRequest

func (*CreateSecretRequest) SetSecretType

func (s *CreateSecretRequest) SetSecretType(v string) *CreateSecretRequest

func (*CreateSecretRequest) SetTags

func (*CreateSecretRequest) SetVersionId

func (s *CreateSecretRequest) SetVersionId(v string) *CreateSecretRequest

func (CreateSecretRequest) String

func (s CreateSecretRequest) String() string

type CreateSecretResponse

type CreateSecretResponse struct {
	Headers    map[string]*string        `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                    `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *CreateSecretResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (CreateSecretResponse) GoString

func (s CreateSecretResponse) GoString() string

func (*CreateSecretResponse) SetBody

func (*CreateSecretResponse) SetHeaders

func (s *CreateSecretResponse) SetHeaders(v map[string]*string) *CreateSecretResponse

func (*CreateSecretResponse) SetStatusCode

func (s *CreateSecretResponse) SetStatusCode(v int32) *CreateSecretResponse

func (CreateSecretResponse) String

func (s CreateSecretResponse) String() string

type CreateSecretResponseBody

type CreateSecretResponseBody struct {
	// The Alibaba Cloud Resource Name (ARN) of the secret.
	Arn *string `json:"Arn,omitempty" xml:"Arn,omitempty"`
	// Indicates whether automatic rotation is enabled. Valid values:
	//
	// *   Enabled: indicates that automatic rotation is enabled.
	// *   Disabled: indicates that automatic rotation is disabled.
	// *   Invalid: indicates that the status of automatic rotation is abnormal. In this case, Secrets Manager cannot automatically rotate the secret.
	//
	// >  This parameter is returned if you set the SecretType parameter to Rds, RAMCredentials, or ECS.
	AutomaticRotation *string `json:"AutomaticRotation,omitempty" xml:"AutomaticRotation,omitempty"`
	// The ID of the dedicated KMS instance.
	DKMSInstanceId *string `json:"DKMSInstanceId,omitempty" xml:"DKMSInstanceId,omitempty"`
	// The extended configuration of the secret.
	//
	// >  This parameter is returned if you set the SecretType parameter to Rds, RAMCredentials, or ECS.
	ExtendedConfig *string `json:"ExtendedConfig,omitempty" xml:"ExtendedConfig,omitempty"`
	// The time when the next rotation will be performed.
	//
	// >  This parameter is returned if automatic rotation is enabled.
	NextRotationDate *string `json:"NextRotationDate,omitempty" xml:"NextRotationDate,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The interval for automatic rotation.
	//
	// The value is in the `integer[unit]` format. The value of the `unit` field is fixed as s. For example, if the value is 604800s, automatic rotation is performed at a 7-day interval.
	//
	// >  This parameter is returned if automatic rotation is enabled.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The type of the secret. Valid values:
	//
	// *   Generic: indicates a generic secret.
	// *   Rds: indicates a managed ApsaraDB RDS secret.
	// *   RAMCredentials: indicates a managed RAM secret.
	// *   ECS: indicates a managed ECS secret.
	SecretType *string `json:"SecretType,omitempty" xml:"SecretType,omitempty"`
	// The version number of the secret.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
}

func (CreateSecretResponseBody) GoString

func (s CreateSecretResponseBody) GoString() string

func (*CreateSecretResponseBody) SetArn

func (*CreateSecretResponseBody) SetAutomaticRotation

func (s *CreateSecretResponseBody) SetAutomaticRotation(v string) *CreateSecretResponseBody

func (*CreateSecretResponseBody) SetDKMSInstanceId

func (s *CreateSecretResponseBody) SetDKMSInstanceId(v string) *CreateSecretResponseBody

func (*CreateSecretResponseBody) SetExtendedConfig

func (s *CreateSecretResponseBody) SetExtendedConfig(v string) *CreateSecretResponseBody

func (*CreateSecretResponseBody) SetNextRotationDate

func (s *CreateSecretResponseBody) SetNextRotationDate(v string) *CreateSecretResponseBody

func (*CreateSecretResponseBody) SetRequestId

func (*CreateSecretResponseBody) SetRotationInterval

func (s *CreateSecretResponseBody) SetRotationInterval(v string) *CreateSecretResponseBody

func (*CreateSecretResponseBody) SetSecretName

func (*CreateSecretResponseBody) SetSecretType

func (*CreateSecretResponseBody) SetVersionId

func (CreateSecretResponseBody) String

func (s CreateSecretResponseBody) String() string

type CreateSecretShrinkRequest

type CreateSecretShrinkRequest struct {
	// The ID of the dedicated KMS instance.
	DKMSInstanceId *string `json:"DKMSInstanceId,omitempty" xml:"DKMSInstanceId,omitempty"`
	// The description of the secret.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// Specifies whether to enable automatic rotation. Valid values:
	//
	// *   true: specifies to enable automatic rotation.
	// *   false: specifies to disable automatic rotation. This is the default value.
	//
	// >  This parameter is valid if you set the SecretType parameter to Rds, RAMCredentials, or ECS.
	EnableAutomaticRotation *bool `json:"EnableAutomaticRotation,omitempty" xml:"EnableAutomaticRotation,omitempty"`
	// The ID of the CMK that is used to encrypt the secret value.
	//
	// If the DKMSInstanceId parameter is empty, Secrets Manager uses a CMK that is created by Dedicated KMS to encrypt and protect secrets. If the DKMSInstanceId parameter is not empty, specify the CMK of the dedicated KMS instance to encrypt and protect secrets.
	//
	// >  The CMK must be a symmetric CMK.
	EncryptionKeyId *string `json:"EncryptionKeyId,omitempty" xml:"EncryptionKeyId,omitempty"`
	// The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length.
	//
	// *   If you set the SecretType parameter to Generic, you do not need to configure this parameter.
	//
	// *   If you set the SecretType parameter to Rds, configure the following fields for the ExtendedConfig parameter:
	//
	//     *   SecretSubType: required. The subtype of the secret. Valid values:
	//
	//         *   SingleUser: Secrets Manager manages the ApsaraDB RDS secret in single-account mode. When the secret is rotated, the password of the specified account is reset to a new random password.
	//         *   DoubleUsers: Secrets Manager manages the ApsaraDB RDS secret in dual-account mode. One account is referenced by the ACSCurrent version, and the other account is referenced by the ACSPrevious version. When the secret is rotated, the password of the account referenced by the ACSPrevious version is reset to a new random password. Then, Secrets Manager switches the referenced accounts between the ACSCurrent and ACSPrevious versions.
	//
	//     *   DBInstanceId: required. The ApsaraDB RDS instance to which the ApsaraDB RDS account belongs.
	//
	//     *   CustomData: optional. The custom data. The value is a collection of key-value pairs in the JSON format. Up to 10 key-value pairs can be specified. Separate multiple key-value pairs with commas (,). Example: `{"Key1": "v1", "fds":"fdsf"}`. The default value is a pair of empty braces (`{}`).
	//
	// *   If you set the SecretType parameter to RAMCredentials, configure the following fields for the ExtendedConfig parameter:
	//
	//     *   SecretSubType: required. The subtype of the secret. Set the value to RamUserAccessKey.
	//     *   UserName: required. The name of the RAM user.
	//     *   CustomData: optional. The custom data. The value is a collection of key-value pairs in the JSON format. Up to 10 key-value pairs can be specified. Separate multiple key-value pairs with commas (,). The default value is a pair of empty braces (`{}`).
	//
	// *   If you set the SecretType parameter to ECS, configure the following fields for the ExtendedConfig parameter:
	//
	//     *   SecretSubType: required. The subtype of the secret. Valid values:
	//
	//         *   Password: the password that is used to log on to the ECS instance.
	//         *   SSHKey: the SSH public key and private key that are used to log on to the ECS instance.
	//
	//     *   RegionId: required. The ID of the region in which the ECS instance resides.
	//
	//     *   InstanceId: required. The ID of the ECS instance.
	//
	//     *   CustomData: optional. The custom data. The value is a collection of key-value pairs in the JSON format. Up to 10 key-value pairs can be specified. Separate multiple key-value pairs with commas (,). The default value is a pair of empty braces (`{}`).
	//
	// >  This parameter is required if you set the SecretType parameter to Rds, RAMCredentials, or ECS.
	ExtendedConfigShrink *string `json:"ExtendedConfig,omitempty" xml:"ExtendedConfig,omitempty"`
	// The interval for automatic rotation. Valid values: 6 hours to 8,760 hours (365 days).
	//
	// The value is in the `integer[unit]` format.
	//
	// The unit can be d (day), h (hour), m (minute), or s (second). For example, both 7d and 604800s indicate a seven-day interval.
	//
	// >  This parameter is required if you set the EnableAutomaticRotation parameter to true. This parameter is ignored if you set the EnableAutomaticRotation parameter to false or if the EnableAutomaticRotation parameter is not configured.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
	// The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores the encrypted value in the initial version.
	//
	// *   If you set the SecretType parameter to Generic that indicates a generic secret, you can customize the secret value.
	//
	// *   If you set the SecretType parameter to Rds that indicates a managed ApsaraDB RDS secret, the secret value must be in the format of `{"Accounts":[{"AccountName":"","AccountPassword":""}]}`. In the preceding format, `AccountName` indicates the username of the account that is used to connect to your ApsaraDB RDS instance, and `AccountPassword` specifies the password of the account.
	//
	// *   If you set the SecretType parameter to RAMCredentials that indicates a managed RAM secret, the secret value must be in the format of `{"AccessKeys":[{"AccessKeyId":"","AccessKeySecret":"",}]}`. In the preceding format, `AccessKeyId` indicates the AccessKey ID of the RAM user and `AccessKeySecret` specifies the AccessKey secret of the RAM user. You must specify all the AccessKey pairs of the RAM user.
	//
	// *   If you set the SecretType parameter to ECS that indicates a managed ECS secret, the secret value must be in one of the following formats:
	//
	//     *   `{"UserName":"","Password": ""}`: In the format, `UserName` specifies the username that is used to log on to the ECS instance, and `Password` specifies the password that is used to log on to the ECS instance.
	//     *   `{"UserName":"","PublicKey": "", "PrivateKey": ""}`: In the format, `PublicKey` indicates the SSH public key that is used to log on to the ECS instance, and `PrivateKey` specifies the SSH private key that is used to log on to the ECS instance.
	SecretData *string `json:"SecretData,omitempty" xml:"SecretData,omitempty"`
	// The type of the secret value. Valid values:
	//
	// *   text
	// *   binary
	//
	// >  If you set the SecretType parameter to Rds, RAMCredentials, or ECS, the SecretDataType parameter must be set to text.
	SecretDataType *string `json:"SecretDataType,omitempty" xml:"SecretDataType,omitempty"`
	// The name of the secret.
	//
	// The value must be 1 to 64 characters in length and can contain letters, digits, underscores (\_), forward slashes (/), plus signs (+), equal signs (=), periods (.), hyphens (-), and at signs (@). The following list describes the name requirements for different types of secrets:
	//
	// *   If the SecretType parameter is set to Generic or Rds, the name cannot start with `acs/`.
	// *   If the SecretType parameter is set to RAMCredentials, set the SecretName parameter to `$Auto`. In this case, KMS automatically generates a secret name that starts with `acs/ram/user/`. The name includes the display name of RAM user.
	// *   If the SecretType parameter is set to ECS, the name must start with `acs/ecs/`.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The type of the secret. Valid values:
	//
	// *   Generic: specifies a generic secret.
	// *   Rds: specifies a managed ApsaraDB RDS secret.
	// *   RAMCredentials: specifies a managed RAM secret.
	// *   ECS: specifies a managed ECS secret.
	SecretType *string `json:"SecretType,omitempty" xml:"SecretType,omitempty"`
	// The tags of the secret.
	Tags *string `json:"Tags,omitempty" xml:"Tags,omitempty"`
	// The initial version number. Version numbers are unique in each secret.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
}

func (CreateSecretShrinkRequest) GoString

func (s CreateSecretShrinkRequest) GoString() string

func (*CreateSecretShrinkRequest) SetDKMSInstanceId

func (*CreateSecretShrinkRequest) SetDescription

func (*CreateSecretShrinkRequest) SetEnableAutomaticRotation

func (s *CreateSecretShrinkRequest) SetEnableAutomaticRotation(v bool) *CreateSecretShrinkRequest

func (*CreateSecretShrinkRequest) SetEncryptionKeyId

func (*CreateSecretShrinkRequest) SetExtendedConfigShrink

func (s *CreateSecretShrinkRequest) SetExtendedConfigShrink(v string) *CreateSecretShrinkRequest

func (*CreateSecretShrinkRequest) SetRotationInterval

func (s *CreateSecretShrinkRequest) SetRotationInterval(v string) *CreateSecretShrinkRequest

func (*CreateSecretShrinkRequest) SetSecretData

func (*CreateSecretShrinkRequest) SetSecretDataType

func (*CreateSecretShrinkRequest) SetSecretName

func (*CreateSecretShrinkRequest) SetSecretType

func (*CreateSecretShrinkRequest) SetTags

func (*CreateSecretShrinkRequest) SetVersionId

func (CreateSecretShrinkRequest) String

func (s CreateSecretShrinkRequest) String() string

type DecryptRequest

type DecryptRequest struct {
	// The ciphertext that you want to decrypt.
	//
	// You can generate the ciphertext by calling the following operations:
	//
	// *   [GenerateDataKey](~~28948~~)
	// *   [Encrypt](~~28949~~)
	// *   [GenerateDataKeyWithoutPlaintext](~~134043~~)
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The JSON string that consists of key-value pairs.
	//
	// >  If you specify the EncryptionContext parameter when you call the [GenerateDataKey](~~28948~~), [Encrypt](~~28949~~), or [GenerateDataKeyWithoutPlaintext](~~134043~~) operation, you must specify the same context when you call the Decrypt operation. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContext map[string]interface{} `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
}

func (DecryptRequest) GoString

func (s DecryptRequest) GoString() string

func (*DecryptRequest) SetCiphertextBlob

func (s *DecryptRequest) SetCiphertextBlob(v string) *DecryptRequest

func (*DecryptRequest) SetEncryptionContext

func (s *DecryptRequest) SetEncryptionContext(v map[string]interface{}) *DecryptRequest

func (DecryptRequest) String

func (s DecryptRequest) String() string

type DecryptResponse

type DecryptResponse struct {
	Headers    map[string]*string   `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32               `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DecryptResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DecryptResponse) GoString

func (s DecryptResponse) GoString() string

func (*DecryptResponse) SetBody

func (*DecryptResponse) SetHeaders

func (s *DecryptResponse) SetHeaders(v map[string]*string) *DecryptResponse

func (*DecryptResponse) SetStatusCode

func (s *DecryptResponse) SetStatusCode(v int32) *DecryptResponse

func (DecryptResponse) String

func (s DecryptResponse) String() string

type DecryptResponseBody

type DecryptResponseBody struct {
	// The ID of the customer master key (CMK) that is used to decrypt the ciphertext.
	//
	// It is the GUID of the CMK.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The ID of the CMK version that is used to decrypt the ciphertext.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The plaintext that is generated after decryption.
	Plaintext *string `json:"Plaintext,omitempty" xml:"Plaintext,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DecryptResponseBody) GoString

func (s DecryptResponseBody) GoString() string

func (*DecryptResponseBody) SetKeyId

func (*DecryptResponseBody) SetKeyVersionId

func (s *DecryptResponseBody) SetKeyVersionId(v string) *DecryptResponseBody

func (*DecryptResponseBody) SetPlaintext

func (s *DecryptResponseBody) SetPlaintext(v string) *DecryptResponseBody

func (*DecryptResponseBody) SetRequestId

func (s *DecryptResponseBody) SetRequestId(v string) *DecryptResponseBody

func (DecryptResponseBody) String

func (s DecryptResponseBody) String() string

type DecryptShrinkRequest

type DecryptShrinkRequest struct {
	// The ciphertext that you want to decrypt.
	//
	// You can generate the ciphertext by calling the following operations:
	//
	// *   [GenerateDataKey](~~28948~~)
	// *   [Encrypt](~~28949~~)
	// *   [GenerateDataKeyWithoutPlaintext](~~134043~~)
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The JSON string that consists of key-value pairs.
	//
	// >  If you specify the EncryptionContext parameter when you call the [GenerateDataKey](~~28948~~), [Encrypt](~~28949~~), or [GenerateDataKeyWithoutPlaintext](~~134043~~) operation, you must specify the same context when you call the Decrypt operation. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContextShrink *string `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
}

func (DecryptShrinkRequest) GoString

func (s DecryptShrinkRequest) GoString() string

func (*DecryptShrinkRequest) SetCiphertextBlob

func (s *DecryptShrinkRequest) SetCiphertextBlob(v string) *DecryptShrinkRequest

func (*DecryptShrinkRequest) SetEncryptionContextShrink

func (s *DecryptShrinkRequest) SetEncryptionContextShrink(v string) *DecryptShrinkRequest

func (DecryptShrinkRequest) String

func (s DecryptShrinkRequest) String() string

type DeleteAliasRequest

type DeleteAliasRequest struct {
	// The alias that you want to delete.
	//
	// The value must be 1 to 255 characters in length and must include the alias/ prefix.
	AliasName *string `json:"AliasName,omitempty" xml:"AliasName,omitempty"`
}

func (DeleteAliasRequest) GoString

func (s DeleteAliasRequest) GoString() string

func (*DeleteAliasRequest) SetAliasName

func (s *DeleteAliasRequest) SetAliasName(v string) *DeleteAliasRequest

func (DeleteAliasRequest) String

func (s DeleteAliasRequest) String() string

type DeleteAliasResponse

type DeleteAliasResponse struct {
	Headers    map[string]*string       `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                   `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DeleteAliasResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DeleteAliasResponse) GoString

func (s DeleteAliasResponse) GoString() string

func (*DeleteAliasResponse) SetBody

func (*DeleteAliasResponse) SetHeaders

func (s *DeleteAliasResponse) SetHeaders(v map[string]*string) *DeleteAliasResponse

func (*DeleteAliasResponse) SetStatusCode

func (s *DeleteAliasResponse) SetStatusCode(v int32) *DeleteAliasResponse

func (DeleteAliasResponse) String

func (s DeleteAliasResponse) String() string

type DeleteAliasResponseBody

type DeleteAliasResponseBody struct {
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DeleteAliasResponseBody) GoString

func (s DeleteAliasResponseBody) GoString() string

func (*DeleteAliasResponseBody) SetRequestId

func (DeleteAliasResponseBody) String

func (s DeleteAliasResponseBody) String() string

type DeleteCertificateRequest

type DeleteCertificateRequest struct {
	// The ID of the certificate. It is the globally unique identifier (GUID) of the certificate in Alibaba Cloud Certificate Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
}

func (DeleteCertificateRequest) GoString

func (s DeleteCertificateRequest) GoString() string

func (*DeleteCertificateRequest) SetCertificateId

func (DeleteCertificateRequest) String

func (s DeleteCertificateRequest) String() string

type DeleteCertificateResponse

type DeleteCertificateResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DeleteCertificateResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DeleteCertificateResponse) GoString

func (s DeleteCertificateResponse) GoString() string

func (*DeleteCertificateResponse) SetBody

func (*DeleteCertificateResponse) SetHeaders

func (*DeleteCertificateResponse) SetStatusCode

func (DeleteCertificateResponse) String

func (s DeleteCertificateResponse) String() string

type DeleteCertificateResponseBody

type DeleteCertificateResponseBody struct {
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DeleteCertificateResponseBody) GoString

func (*DeleteCertificateResponseBody) SetRequestId

func (DeleteCertificateResponseBody) String

type DeleteKeyMaterialRequest

type DeleteKeyMaterialRequest struct {
	// The globally unique ID of the CMK.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (DeleteKeyMaterialRequest) GoString

func (s DeleteKeyMaterialRequest) GoString() string

func (*DeleteKeyMaterialRequest) SetKeyId

func (DeleteKeyMaterialRequest) String

func (s DeleteKeyMaterialRequest) String() string

type DeleteKeyMaterialResponse

type DeleteKeyMaterialResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DeleteKeyMaterialResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DeleteKeyMaterialResponse) GoString

func (s DeleteKeyMaterialResponse) GoString() string

func (*DeleteKeyMaterialResponse) SetBody

func (*DeleteKeyMaterialResponse) SetHeaders

func (*DeleteKeyMaterialResponse) SetStatusCode

func (DeleteKeyMaterialResponse) String

func (s DeleteKeyMaterialResponse) String() string

type DeleteKeyMaterialResponseBody

type DeleteKeyMaterialResponseBody struct {
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DeleteKeyMaterialResponseBody) GoString

func (*DeleteKeyMaterialResponseBody) SetRequestId

func (DeleteKeyMaterialResponseBody) String

type DeleteSecretRequest

type DeleteSecretRequest struct {
	// Specifies whether to forcibly delete the secret. If this parameter is set to true, the secret cannot be recovered.
	//
	// Valid values:
	//
	// *   **true**
	// *   **false** (default value)
	ForceDeleteWithoutRecovery *string `json:"ForceDeleteWithoutRecovery,omitempty" xml:"ForceDeleteWithoutRecovery,omitempty"`
	// Specifies the recovery period of the secret if you do not forcibly delete it. Default value: 30. Unit: Days.
	RecoveryWindowInDays *string `json:"RecoveryWindowInDays,omitempty" xml:"RecoveryWindowInDays,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (DeleteSecretRequest) GoString

func (s DeleteSecretRequest) GoString() string

func (*DeleteSecretRequest) SetForceDeleteWithoutRecovery

func (s *DeleteSecretRequest) SetForceDeleteWithoutRecovery(v string) *DeleteSecretRequest

func (*DeleteSecretRequest) SetRecoveryWindowInDays

func (s *DeleteSecretRequest) SetRecoveryWindowInDays(v string) *DeleteSecretRequest

func (*DeleteSecretRequest) SetSecretName

func (s *DeleteSecretRequest) SetSecretName(v string) *DeleteSecretRequest

func (DeleteSecretRequest) String

func (s DeleteSecretRequest) String() string

type DeleteSecretResponse

type DeleteSecretResponse struct {
	Headers    map[string]*string        `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                    `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DeleteSecretResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DeleteSecretResponse) GoString

func (s DeleteSecretResponse) GoString() string

func (*DeleteSecretResponse) SetBody

func (*DeleteSecretResponse) SetHeaders

func (s *DeleteSecretResponse) SetHeaders(v map[string]*string) *DeleteSecretResponse

func (*DeleteSecretResponse) SetStatusCode

func (s *DeleteSecretResponse) SetStatusCode(v int32) *DeleteSecretResponse

func (DeleteSecretResponse) String

func (s DeleteSecretResponse) String() string

type DeleteSecretResponseBody

type DeleteSecretResponseBody struct {
	// The time when the secret is scheduled to be deleted.
	PlannedDeleteTime *string `json:"PlannedDeleteTime,omitempty" xml:"PlannedDeleteTime,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (DeleteSecretResponseBody) GoString

func (s DeleteSecretResponseBody) GoString() string

func (*DeleteSecretResponseBody) SetPlannedDeleteTime

func (s *DeleteSecretResponseBody) SetPlannedDeleteTime(v string) *DeleteSecretResponseBody

func (*DeleteSecretResponseBody) SetRequestId

func (*DeleteSecretResponseBody) SetSecretName

func (DeleteSecretResponseBody) String

func (s DeleteSecretResponseBody) String() string

type DescribeAccountKmsStatusResponse

type DescribeAccountKmsStatusResponse struct {
	Headers    map[string]*string                    `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DescribeAccountKmsStatusResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DescribeAccountKmsStatusResponse) GoString

func (*DescribeAccountKmsStatusResponse) SetHeaders

func (*DescribeAccountKmsStatusResponse) SetStatusCode

func (DescribeAccountKmsStatusResponse) String

type DescribeAccountKmsStatusResponseBody

type DescribeAccountKmsStatusResponseBody struct {
	// The status of KMS within your Alibaba cloud account. Valid values:
	//
	// *   Enabled: KMS is enabled.
	//
	// *   NotEnabled: KMS is disabled.
	//
	// *   InDebt: Your account is overdue, and KMS stops providing services.
	//
	// > If your Alibaba Cloud account is overdue, top up your account at the earliest opportunity to avoid impacts on your services.
	//
	// *   Suspended: KMS is suspended.
	AccountStatus *string `json:"AccountStatus,omitempty" xml:"AccountStatus,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DescribeAccountKmsStatusResponseBody) GoString

func (*DescribeAccountKmsStatusResponseBody) SetAccountStatus

func (*DescribeAccountKmsStatusResponseBody) SetRequestId

func (DescribeAccountKmsStatusResponseBody) String

type DescribeCertificateRequest

type DescribeCertificateRequest struct {
	// The ID of the certificate. The ID must be globally unique in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
}

func (DescribeCertificateRequest) GoString

func (s DescribeCertificateRequest) GoString() string

func (*DescribeCertificateRequest) SetCertificateId

func (DescribeCertificateRequest) String

type DescribeCertificateResponse

type DescribeCertificateResponse struct {
	Headers    map[string]*string               `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                           `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DescribeCertificateResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DescribeCertificateResponse) GoString

func (s DescribeCertificateResponse) GoString() string

func (*DescribeCertificateResponse) SetBody

func (*DescribeCertificateResponse) SetHeaders

func (*DescribeCertificateResponse) SetStatusCode

func (DescribeCertificateResponse) String

type DescribeCertificateResponseBody

type DescribeCertificateResponseBody struct {
	// The Alibaba Cloud Resource Name (ARN) of the certificate.
	Arn *string `json:"Arn,omitempty" xml:"Arn,omitempty"`
	// The ID of the certificate. The ID must be globally unique in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The time when the certificate was created.
	CreatedAt *string `json:"CreatedAt,omitempty" xml:"CreatedAt,omitempty"`
	// Indicates whether the private key of the certificate can be exported for use. Valid values:
	//
	// *   true: The private key of the certificate can be exported for use. This is the default value.
	// *   false: The private key of the certificate cannot be exported for use.
	ExportablePrivateKey *bool `json:"ExportablePrivateKey,omitempty" xml:"ExportablePrivateKey,omitempty"`
	// The certificate issuer in the distinguished name (DN) format.
	Issuer *string `json:"Issuer,omitempty" xml:"Issuer,omitempty"`
	// The type of the key.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The end of the validity period of the certificate.
	NotAfter *string `json:"NotAfter,omitempty" xml:"NotAfter,omitempty"`
	// The beginning of the validity period of the certificate.
	NotBefore *string `json:"NotBefore,omitempty" xml:"NotBefore,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The serial number of the certificate.
	Serial *string `json:"Serial,omitempty" xml:"Serial,omitempty"`
	// The signature algorithm of the certificate. Valid values:
	//
	// *   RSA2048-SHA256
	// *   ECDSA-SHA256
	// *   SM2-SM3
	SignatureAlgorithm *string `json:"SignatureAlgorithm,omitempty" xml:"SignatureAlgorithm,omitempty"`
	// The status of the certificate. Valid values:
	//
	// *   PENDING: The certificate is to be imported.
	// *   ACTIVE: The certificate is enabled.
	// *   INACTIVE: The certificate is disabled.
	// *   REVOKED: The certificate is revoked.
	Status *string `json:"Status,omitempty" xml:"Status,omitempty"`
	// The subject of the certificate, which is in the DN format.
	Subject *string `json:"Subject,omitempty" xml:"Subject,omitempty"`
	// The alias of the certificate subject.
	//
	// A domain name list is supported. A maximum of 10 domain names are supported.
	SubjectAlternativeNames []*string `json:"SubjectAlternativeNames,omitempty" xml:"SubjectAlternativeNames,omitempty" type:"Repeated"`
	// The public key identifier of the certificate subject.
	SubjectKeyIdentifier *string `json:"SubjectKeyIdentifier,omitempty" xml:"SubjectKeyIdentifier,omitempty"`
	// The public key of the certificate.
	SubjectPublicKey *string `json:"SubjectPublicKey,omitempty" xml:"SubjectPublicKey,omitempty"`
	// The tag of the certificate.
	Tags map[string]interface{} `json:"Tags,omitempty" xml:"Tags,omitempty"`
	// The time when the certificate was updated.
	UpdatedAt *string `json:"UpdatedAt,omitempty" xml:"UpdatedAt,omitempty"`
}

func (DescribeCertificateResponseBody) GoString

func (*DescribeCertificateResponseBody) SetArn

func (*DescribeCertificateResponseBody) SetCertificateId

func (*DescribeCertificateResponseBody) SetCreatedAt

func (*DescribeCertificateResponseBody) SetExportablePrivateKey

func (*DescribeCertificateResponseBody) SetIssuer

func (*DescribeCertificateResponseBody) SetKeySpec

func (*DescribeCertificateResponseBody) SetNotAfter

func (*DescribeCertificateResponseBody) SetNotBefore

func (*DescribeCertificateResponseBody) SetRequestId

func (*DescribeCertificateResponseBody) SetSerial

func (*DescribeCertificateResponseBody) SetSignatureAlgorithm

func (*DescribeCertificateResponseBody) SetStatus

func (*DescribeCertificateResponseBody) SetSubject

func (*DescribeCertificateResponseBody) SetSubjectAlternativeNames

func (s *DescribeCertificateResponseBody) SetSubjectAlternativeNames(v []*string) *DescribeCertificateResponseBody

func (*DescribeCertificateResponseBody) SetSubjectKeyIdentifier

func (*DescribeCertificateResponseBody) SetSubjectPublicKey

func (*DescribeCertificateResponseBody) SetTags

func (*DescribeCertificateResponseBody) SetUpdatedAt

func (DescribeCertificateResponseBody) String

type DescribeKeyRequest

type DescribeKeyRequest struct {
	// The ID of the CMK. The ID must be globally unique.
	//
	// You can also set this parameter to an alias that is bound to the CMK. For more information, see [Overview of aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (DescribeKeyRequest) GoString

func (s DescribeKeyRequest) GoString() string

func (*DescribeKeyRequest) SetKeyId

func (DescribeKeyRequest) String

func (s DescribeKeyRequest) String() string

type DescribeKeyResponse

type DescribeKeyResponse struct {
	Headers    map[string]*string       `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                   `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DescribeKeyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DescribeKeyResponse) GoString

func (s DescribeKeyResponse) GoString() string

func (*DescribeKeyResponse) SetBody

func (*DescribeKeyResponse) SetHeaders

func (s *DescribeKeyResponse) SetHeaders(v map[string]*string) *DescribeKeyResponse

func (*DescribeKeyResponse) SetStatusCode

func (s *DescribeKeyResponse) SetStatusCode(v int32) *DescribeKeyResponse

func (DescribeKeyResponse) String

func (s DescribeKeyResponse) String() string

type DescribeKeyResponseBody

type DescribeKeyResponseBody struct {
	// The metadata of the CMK.
	KeyMetadata *DescribeKeyResponseBodyKeyMetadata `json:"KeyMetadata,omitempty" xml:"KeyMetadata,omitempty" type:"Struct"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DescribeKeyResponseBody) GoString

func (s DescribeKeyResponseBody) GoString() string

func (*DescribeKeyResponseBody) SetKeyMetadata

func (*DescribeKeyResponseBody) SetRequestId

func (DescribeKeyResponseBody) String

func (s DescribeKeyResponseBody) String() string

type DescribeKeyResponseBodyKeyMetadata

type DescribeKeyResponseBodyKeyMetadata struct {
	// The Alibaba Cloud Resource Name (ARN) of the CMK.
	Arn *string `json:"Arn,omitempty" xml:"Arn,omitempty"`
	// Indicates whether automatic key rotation is enabled. Valid values:
	//
	// *   Enabled
	// *   Disabled
	// *   Suspended
	//
	// For more information, see [Automatic key rotation](~~134270~~).
	//
	// >  Only symmetric CMKs support automatic key rotation.
	AutomaticRotation *string `json:"AutomaticRotation,omitempty" xml:"AutomaticRotation,omitempty"`
	// The time when the CMK was created. The time is displayed in UTC.
	CreationDate *string `json:"CreationDate,omitempty" xml:"CreationDate,omitempty"`
	// The Alibaba Cloud account that is used to create the CMK.
	Creator *string `json:"Creator,omitempty" xml:"Creator,omitempty"`
	// The ID of the dedicated KMS instance.
	DKMSInstanceId *string `json:"DKMSInstanceId,omitempty" xml:"DKMSInstanceId,omitempty"`
	// The time at which the CMK is scheduled for deletion. The time is displayed in UTC.
	//
	// For more information, see [ScheduleKeyDeletion](~~44196~~).
	//
	// >  This parameter is returned only when the value of the KeyState parameter is PendingDeletion.
	DeleteDate *string `json:"DeleteDate,omitempty" xml:"DeleteDate,omitempty"`
	// Indicates whether deletion protection is enabled. Valid values:
	//
	// *   Enabled
	// *   Disabled
	DeletionProtection *string `json:"DeletionProtection,omitempty" xml:"DeletionProtection,omitempty"`
	// The description of deletion protection.
	DeletionProtectionDescription *string `json:"DeletionProtectionDescription,omitempty" xml:"DeletionProtectionDescription,omitempty"`
	// The description of the CMK.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The type of the CMK.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The status of the CMK.
	//
	// For more information, see [Impact of CMK status on API operations](~~44211~~).
	KeyState *string `json:"KeyState,omitempty" xml:"KeyState,omitempty"`
	// The usage of the CMK.
	KeyUsage *string `json:"KeyUsage,omitempty" xml:"KeyUsage,omitempty"`
	// The time when the last rotation was performed. The time is displayed in UTC. For a new CMK, the value of this parameter is the time when the initial version of the CMK was generated.
	LastRotationDate *string `json:"LastRotationDate,omitempty" xml:"LastRotationDate,omitempty"`
	// The time when the key material expires. The time is displayed in UTC. If this parameter value is empty, the key material does not expire.
	MaterialExpireTime *string `json:"MaterialExpireTime,omitempty" xml:"MaterialExpireTime,omitempty"`
	// The time when the next rotation will be performed.
	//
	// >  This parameter is returned only when the value of the AutomaticRotation parameter is Enabled or Suspended.
	NextRotationDate *string `json:"NextRotationDate,omitempty" xml:"NextRotationDate,omitempty"`
	// The source of the key material for the CMK.
	Origin *string `json:"Origin,omitempty" xml:"Origin,omitempty"`
	// The ID of the current primary key version for the symmetric CMK.
	PrimaryKeyVersion *string `json:"PrimaryKeyVersion,omitempty" xml:"PrimaryKeyVersion,omitempty"`
	// The protection level of the CMK.
	ProtectionLevel *string `json:"ProtectionLevel,omitempty" xml:"ProtectionLevel,omitempty"`
	// The interval for automatic key rotation.
	//
	// Unit: seconds.
	//
	// For example, if the value is 604800s, automatic key rotation is performed at a 7-day interval.
	//
	// >  This parameter is returned only when the value of the AutomaticRotation parameter is Enabled or Suspended.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
}

func (DescribeKeyResponseBodyKeyMetadata) GoString

func (*DescribeKeyResponseBodyKeyMetadata) SetArn

func (*DescribeKeyResponseBodyKeyMetadata) SetAutomaticRotation

func (*DescribeKeyResponseBodyKeyMetadata) SetCreationDate

func (*DescribeKeyResponseBodyKeyMetadata) SetCreator

func (*DescribeKeyResponseBodyKeyMetadata) SetDKMSInstanceId

func (*DescribeKeyResponseBodyKeyMetadata) SetDeleteDate

func (*DescribeKeyResponseBodyKeyMetadata) SetDeletionProtection

func (*DescribeKeyResponseBodyKeyMetadata) SetDeletionProtectionDescription

func (s *DescribeKeyResponseBodyKeyMetadata) SetDeletionProtectionDescription(v string) *DescribeKeyResponseBodyKeyMetadata

func (*DescribeKeyResponseBodyKeyMetadata) SetDescription

func (*DescribeKeyResponseBodyKeyMetadata) SetKeyId

func (*DescribeKeyResponseBodyKeyMetadata) SetKeySpec

func (*DescribeKeyResponseBodyKeyMetadata) SetKeyState

func (*DescribeKeyResponseBodyKeyMetadata) SetKeyUsage

func (*DescribeKeyResponseBodyKeyMetadata) SetLastRotationDate

func (*DescribeKeyResponseBodyKeyMetadata) SetMaterialExpireTime

func (*DescribeKeyResponseBodyKeyMetadata) SetNextRotationDate

func (*DescribeKeyResponseBodyKeyMetadata) SetOrigin

func (*DescribeKeyResponseBodyKeyMetadata) SetPrimaryKeyVersion

func (*DescribeKeyResponseBodyKeyMetadata) SetProtectionLevel

func (*DescribeKeyResponseBodyKeyMetadata) SetRotationInterval

func (DescribeKeyResponseBodyKeyMetadata) String

type DescribeKeyVersionRequest

type DescribeKeyVersionRequest struct {
	// The globally unique ID of the CMK.
	//
	// You can also set this parameter to an alias that is bound to the CMK. For more information, see [Alias overview](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The globally unique ID of the CMK version.
	//
	// You can call the [ListKeyVersions](~~133966~~) operation to query the versions of the CMK.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
}

func (DescribeKeyVersionRequest) GoString

func (s DescribeKeyVersionRequest) GoString() string

func (*DescribeKeyVersionRequest) SetKeyId

func (*DescribeKeyVersionRequest) SetKeyVersionId

func (DescribeKeyVersionRequest) String

func (s DescribeKeyVersionRequest) String() string

type DescribeKeyVersionResponse

type DescribeKeyVersionResponse struct {
	Headers    map[string]*string              `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                          `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DescribeKeyVersionResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DescribeKeyVersionResponse) GoString

func (s DescribeKeyVersionResponse) GoString() string

func (*DescribeKeyVersionResponse) SetBody

func (*DescribeKeyVersionResponse) SetHeaders

func (*DescribeKeyVersionResponse) SetStatusCode

func (DescribeKeyVersionResponse) String

type DescribeKeyVersionResponseBody

type DescribeKeyVersionResponseBody struct {
	// The metadata of the CMK version.
	KeyVersion *DescribeKeyVersionResponseBodyKeyVersion `json:"KeyVersion,omitempty" xml:"KeyVersion,omitempty" type:"Struct"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DescribeKeyVersionResponseBody) GoString

func (*DescribeKeyVersionResponseBody) SetRequestId

func (DescribeKeyVersionResponseBody) String

type DescribeKeyVersionResponseBodyKeyVersion

type DescribeKeyVersionResponseBodyKeyVersion struct {
	// The date and time when the CMK version was created. The time is displayed in UTC.
	CreationDate *string `json:"CreationDate,omitempty" xml:"CreationDate,omitempty"`
	// The globally unique ID of the CMK.
	//
	// >  If you set the KeyId parameter in the request to an alias of the CMK, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The globally unique ID of the CMK version.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
}

func (DescribeKeyVersionResponseBodyKeyVersion) GoString

func (*DescribeKeyVersionResponseBodyKeyVersion) SetCreationDate

func (*DescribeKeyVersionResponseBodyKeyVersion) SetKeyId

func (*DescribeKeyVersionResponseBodyKeyVersion) SetKeyVersionId

func (DescribeKeyVersionResponseBodyKeyVersion) String

type DescribeRegionsResponse

type DescribeRegionsResponse struct {
	Headers    map[string]*string           `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                       `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DescribeRegionsResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DescribeRegionsResponse) GoString

func (s DescribeRegionsResponse) GoString() string

func (*DescribeRegionsResponse) SetBody

func (*DescribeRegionsResponse) SetHeaders

func (*DescribeRegionsResponse) SetStatusCode

func (DescribeRegionsResponse) String

func (s DescribeRegionsResponse) String() string

type DescribeRegionsResponseBody

type DescribeRegionsResponseBody struct {
	// The region.
	Regions *DescribeRegionsResponseBodyRegions `json:"Regions,omitempty" xml:"Regions,omitempty" type:"Struct"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DescribeRegionsResponseBody) GoString

func (s DescribeRegionsResponseBody) GoString() string

func (*DescribeRegionsResponseBody) SetRegions

func (*DescribeRegionsResponseBody) SetRequestId

func (DescribeRegionsResponseBody) String

type DescribeRegionsResponseBodyRegions

type DescribeRegionsResponseBodyRegions struct {
	Region []*DescribeRegionsResponseBodyRegionsRegion `json:"Region,omitempty" xml:"Region,omitempty" type:"Repeated"`
}

func (DescribeRegionsResponseBodyRegions) GoString

func (DescribeRegionsResponseBodyRegions) String

type DescribeRegionsResponseBodyRegionsRegion

type DescribeRegionsResponseBodyRegionsRegion struct {
	// The region ID.
	RegionId *string `json:"RegionId,omitempty" xml:"RegionId,omitempty"`
}

func (DescribeRegionsResponseBodyRegionsRegion) GoString

func (*DescribeRegionsResponseBodyRegionsRegion) SetRegionId

func (DescribeRegionsResponseBodyRegionsRegion) String

type DescribeSecretRequest

type DescribeSecretRequest struct {
	// Specifies whether to return the resource tags of the secret. Valid values:
	//
	// *   true: The resource tags are returned.
	// *   false: The resource tags are not returned. This is the default value.
	FetchTags *string `json:"FetchTags,omitempty" xml:"FetchTags,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (DescribeSecretRequest) GoString

func (s DescribeSecretRequest) GoString() string

func (*DescribeSecretRequest) SetFetchTags

func (*DescribeSecretRequest) SetSecretName

func (s *DescribeSecretRequest) SetSecretName(v string) *DescribeSecretRequest

func (DescribeSecretRequest) String

func (s DescribeSecretRequest) String() string

type DescribeSecretResponse

type DescribeSecretResponse struct {
	Headers    map[string]*string          `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                      `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DescribeSecretResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DescribeSecretResponse) GoString

func (s DescribeSecretResponse) GoString() string

func (*DescribeSecretResponse) SetBody

func (*DescribeSecretResponse) SetHeaders

func (*DescribeSecretResponse) SetStatusCode

func (DescribeSecretResponse) String

func (s DescribeSecretResponse) String() string

type DescribeSecretResponseBody

type DescribeSecretResponseBody struct {
	// The Alibaba Cloud Resource Name (ARN) of the secret.
	Arn *string `json:"Arn,omitempty" xml:"Arn,omitempty"`
	// Indicates whether automatic rotation is enabled. Valid values:
	//
	// *   Enabled: indicates that automatic rotation is enabled.
	// *   Disabled: indicates that automatic rotation is disabled.
	// *   Invalid: indicates that the status of automatic rotation is abnormal. In this case, Secrets Manager cannot automatically rotate the secret.
	//
	// >  This parameter is returned only for a managed ApsaraDB RDS secret, a managed RAM secret, or a managed ECS secret.
	AutomaticRotation *string `json:"AutomaticRotation,omitempty" xml:"AutomaticRotation,omitempty"`
	// The time when the secret was created.
	CreateTime *string `json:"CreateTime,omitempty" xml:"CreateTime,omitempty"`
	// The ID of the dedicated KMS instance.
	DKMSInstanceId *string `json:"DKMSInstanceId,omitempty" xml:"DKMSInstanceId,omitempty"`
	// The description of the secret.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// The ID of the customer master key (CMK) that is used to encrypt the secret value.
	EncryptionKeyId *string `json:"EncryptionKeyId,omitempty" xml:"EncryptionKeyId,omitempty"`
	// The extended configuration of the secret.
	//
	// >  This parameter is returned only for a managed ApsaraDB RDS secret, a managed Resource Access Management (RAM) secret, or a managed Elastic Compute Service (ECS) secret.
	ExtendedConfig *string `json:"ExtendedConfig,omitempty" xml:"ExtendedConfig,omitempty"`
	// The time when the last rotation was performed.
	//
	// >  This parameter is returned if the secret was rotated.
	LastRotationDate *string `json:"LastRotationDate,omitempty" xml:"LastRotationDate,omitempty"`
	// The time when the next rotation will be performed.
	//
	// >  This parameter is returned when automatic rotation is enabled.
	NextRotationDate *string `json:"NextRotationDate,omitempty" xml:"NextRotationDate,omitempty"`
	// The time when the secret is scheduled to be deleted.
	PlannedDeleteTime *string `json:"PlannedDeleteTime,omitempty" xml:"PlannedDeleteTime,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The interval for automatic rotation.
	//
	// The value is in the `integer[unit]` format. `integer` indicates the length of time. `unit`: indicates the time unit. The value of `unit` is fixed as s. For example, if the value is 604800s, automatic rotation is performed at a 7-day interval.
	//
	// >  This parameter is returned when automatic rotation is enabled.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The type of the secret. Valid values:
	//
	// *   Generic: indicates a generic secret.
	// *   Rds: indicates a managed ApsaraDB RDS secret.
	// *   RAMCredentials: indicates a managed RAM secret.
	// *   ECS: indicates a managed ECS secret.
	SecretType *string `json:"SecretType,omitempty" xml:"SecretType,omitempty"`
	// The resource tags of the secret.
	//
	// This parameter is not returned if you set the FetchTags parameter to false or you do not specify the FetchTags parameter.
	Tags *DescribeSecretResponseBodyTags `json:"Tags,omitempty" xml:"Tags,omitempty" type:"Struct"`
	// The time when the secret was updated.
	UpdateTime *string `json:"UpdateTime,omitempty" xml:"UpdateTime,omitempty"`
}

func (DescribeSecretResponseBody) GoString

func (s DescribeSecretResponseBody) GoString() string

func (*DescribeSecretResponseBody) SetArn

func (*DescribeSecretResponseBody) SetAutomaticRotation

func (s *DescribeSecretResponseBody) SetAutomaticRotation(v string) *DescribeSecretResponseBody

func (*DescribeSecretResponseBody) SetCreateTime

func (*DescribeSecretResponseBody) SetDKMSInstanceId

func (*DescribeSecretResponseBody) SetDescription

func (*DescribeSecretResponseBody) SetEncryptionKeyId

func (*DescribeSecretResponseBody) SetExtendedConfig

func (*DescribeSecretResponseBody) SetLastRotationDate

func (*DescribeSecretResponseBody) SetNextRotationDate

func (*DescribeSecretResponseBody) SetPlannedDeleteTime

func (s *DescribeSecretResponseBody) SetPlannedDeleteTime(v string) *DescribeSecretResponseBody

func (*DescribeSecretResponseBody) SetRequestId

func (*DescribeSecretResponseBody) SetRotationInterval

func (*DescribeSecretResponseBody) SetSecretName

func (*DescribeSecretResponseBody) SetSecretType

func (*DescribeSecretResponseBody) SetTags

func (*DescribeSecretResponseBody) SetUpdateTime

func (DescribeSecretResponseBody) String

type DescribeSecretResponseBodyTags

type DescribeSecretResponseBodyTags struct {
	Tag []*DescribeSecretResponseBodyTagsTag `json:"Tag,omitempty" xml:"Tag,omitempty" type:"Repeated"`
}

func (DescribeSecretResponseBodyTags) GoString

func (*DescribeSecretResponseBodyTags) SetTag

func (DescribeSecretResponseBodyTags) String

type DescribeSecretResponseBodyTagsTag

type DescribeSecretResponseBodyTagsTag struct {
	// The tag key.
	TagKey *string `json:"TagKey,omitempty" xml:"TagKey,omitempty"`
	// The tag value.
	TagValue *string `json:"TagValue,omitempty" xml:"TagValue,omitempty"`
}

func (DescribeSecretResponseBodyTagsTag) GoString

func (*DescribeSecretResponseBodyTagsTag) SetTagKey

func (*DescribeSecretResponseBodyTagsTag) SetTagValue

func (DescribeSecretResponseBodyTagsTag) String

type DisableKeyRequest

type DisableKeyRequest struct {
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (DisableKeyRequest) GoString

func (s DisableKeyRequest) GoString() string

func (*DisableKeyRequest) SetKeyId

func (s *DisableKeyRequest) SetKeyId(v string) *DisableKeyRequest

func (DisableKeyRequest) String

func (s DisableKeyRequest) String() string

type DisableKeyResponse

type DisableKeyResponse struct {
	Headers    map[string]*string      `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                  `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *DisableKeyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (DisableKeyResponse) GoString

func (s DisableKeyResponse) GoString() string

func (*DisableKeyResponse) SetBody

func (*DisableKeyResponse) SetHeaders

func (s *DisableKeyResponse) SetHeaders(v map[string]*string) *DisableKeyResponse

func (*DisableKeyResponse) SetStatusCode

func (s *DisableKeyResponse) SetStatusCode(v int32) *DisableKeyResponse

func (DisableKeyResponse) String

func (s DisableKeyResponse) String() string

type DisableKeyResponseBody

type DisableKeyResponseBody struct {
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (DisableKeyResponseBody) GoString

func (s DisableKeyResponseBody) GoString() string

func (*DisableKeyResponseBody) SetRequestId

func (DisableKeyResponseBody) String

func (s DisableKeyResponseBody) String() string

type EnableKeyRequest

type EnableKeyRequest struct {
	// The globally unique ID of the CMK.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (EnableKeyRequest) GoString

func (s EnableKeyRequest) GoString() string

func (*EnableKeyRequest) SetKeyId

func (s *EnableKeyRequest) SetKeyId(v string) *EnableKeyRequest

func (EnableKeyRequest) String

func (s EnableKeyRequest) String() string

type EnableKeyResponse

type EnableKeyResponse struct {
	Headers    map[string]*string     `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                 `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *EnableKeyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (EnableKeyResponse) GoString

func (s EnableKeyResponse) GoString() string

func (*EnableKeyResponse) SetBody

func (*EnableKeyResponse) SetHeaders

func (s *EnableKeyResponse) SetHeaders(v map[string]*string) *EnableKeyResponse

func (*EnableKeyResponse) SetStatusCode

func (s *EnableKeyResponse) SetStatusCode(v int32) *EnableKeyResponse

func (EnableKeyResponse) String

func (s EnableKeyResponse) String() string

type EnableKeyResponseBody

type EnableKeyResponseBody struct {
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (EnableKeyResponseBody) GoString

func (s EnableKeyResponseBody) GoString() string

func (*EnableKeyResponseBody) SetRequestId

func (EnableKeyResponseBody) String

func (s EnableKeyResponseBody) String() string

type EncryptRequest

type EncryptRequest struct {
	// A JSON string that consists of key-value pairs. If you specify this parameter, an equivalent value is required when you call the Decrypt operation. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContext map[string]interface{} `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// The globally unique ID of the CMK. You can also set this parameter to an alias that is bound to the CMK. For more information, see [Use aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The plaintext to be encrypted. The plaintext must be Base64 encoded.
	Plaintext *string `json:"Plaintext,omitempty" xml:"Plaintext,omitempty"`
}

func (EncryptRequest) GoString

func (s EncryptRequest) GoString() string

func (*EncryptRequest) SetEncryptionContext

func (s *EncryptRequest) SetEncryptionContext(v map[string]interface{}) *EncryptRequest

func (*EncryptRequest) SetKeyId

func (s *EncryptRequest) SetKeyId(v string) *EncryptRequest

func (*EncryptRequest) SetPlaintext

func (s *EncryptRequest) SetPlaintext(v string) *EncryptRequest

func (EncryptRequest) String

func (s EncryptRequest) String() string

type EncryptResponse

type EncryptResponse struct {
	Headers    map[string]*string   `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32               `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *EncryptResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (EncryptResponse) GoString

func (s EncryptResponse) GoString() string

func (*EncryptResponse) SetBody

func (*EncryptResponse) SetHeaders

func (s *EncryptResponse) SetHeaders(v map[string]*string) *EncryptResponse

func (*EncryptResponse) SetStatusCode

func (s *EncryptResponse) SetStatusCode(v int32) *EncryptResponse

func (EncryptResponse) String

func (s EncryptResponse) String() string

type EncryptResponseBody

type EncryptResponseBody struct {
	// The ciphertext of the data that is encrypted by using the primary CMK version.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The globally unique ID of the CMK. If you set the KeyId parameter to an alias, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The ID of the key version that is used to encrypt the plaintext. It is the primary version of the CMK.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (EncryptResponseBody) GoString

func (s EncryptResponseBody) GoString() string

func (*EncryptResponseBody) SetCiphertextBlob

func (s *EncryptResponseBody) SetCiphertextBlob(v string) *EncryptResponseBody

func (*EncryptResponseBody) SetKeyId

func (*EncryptResponseBody) SetKeyVersionId

func (s *EncryptResponseBody) SetKeyVersionId(v string) *EncryptResponseBody

func (*EncryptResponseBody) SetRequestId

func (s *EncryptResponseBody) SetRequestId(v string) *EncryptResponseBody

func (EncryptResponseBody) String

func (s EncryptResponseBody) String() string

type EncryptShrinkRequest

type EncryptShrinkRequest struct {
	// A JSON string that consists of key-value pairs. If you specify this parameter, an equivalent value is required when you call the Decrypt operation. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContextShrink *string `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// The globally unique ID of the CMK. You can also set this parameter to an alias that is bound to the CMK. For more information, see [Use aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The plaintext to be encrypted. The plaintext must be Base64 encoded.
	Plaintext *string `json:"Plaintext,omitempty" xml:"Plaintext,omitempty"`
}

func (EncryptShrinkRequest) GoString

func (s EncryptShrinkRequest) GoString() string

func (*EncryptShrinkRequest) SetEncryptionContextShrink

func (s *EncryptShrinkRequest) SetEncryptionContextShrink(v string) *EncryptShrinkRequest

func (*EncryptShrinkRequest) SetKeyId

func (*EncryptShrinkRequest) SetPlaintext

func (s *EncryptShrinkRequest) SetPlaintext(v string) *EncryptShrinkRequest

func (EncryptShrinkRequest) String

func (s EncryptShrinkRequest) String() string

type ExportDataKeyRequest

type ExportDataKeyRequest struct {
	// The ciphertext of the data key encrypted by using a CMK.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// A JSON string that consists of key-value pairs. If you specify this parameter when you use a CMK to encrypt the data key, an equivalent value is required here. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContext map[string]interface{} `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// A Base64-encoded public key.
	PublicKeyBlob *string `json:"PublicKeyBlob,omitempty" xml:"PublicKeyBlob,omitempty"`
	// The encryption algorithm based on which you want to use the public key specified by PublicKeyBlob to encrypt the data key. For more information about encryption algorithms, see [AsymmetricDecrypt](~~148130~~).
	//
	// Valid values:
	//
	// *   RSAES_OAEP_SHA\_256
	// *   RSAES_OAEP_SHA\_1
	// *   SM2PKE
	WrappingAlgorithm *string `json:"WrappingAlgorithm,omitempty" xml:"WrappingAlgorithm,omitempty"`
	// The key type of the public key specified by PublicKeyBlob. For more information about key types, see [Introduction to asymmetric keys](~~148147~~).
	//
	// Valid values:
	//
	// *   RSA\_2048
	// *   EC_SM2
	WrappingKeySpec *string `json:"WrappingKeySpec,omitempty" xml:"WrappingKeySpec,omitempty"`
}

func (ExportDataKeyRequest) GoString

func (s ExportDataKeyRequest) GoString() string

func (*ExportDataKeyRequest) SetCiphertextBlob

func (s *ExportDataKeyRequest) SetCiphertextBlob(v string) *ExportDataKeyRequest

func (*ExportDataKeyRequest) SetEncryptionContext

func (s *ExportDataKeyRequest) SetEncryptionContext(v map[string]interface{}) *ExportDataKeyRequest

func (*ExportDataKeyRequest) SetPublicKeyBlob

func (s *ExportDataKeyRequest) SetPublicKeyBlob(v string) *ExportDataKeyRequest

func (*ExportDataKeyRequest) SetWrappingAlgorithm

func (s *ExportDataKeyRequest) SetWrappingAlgorithm(v string) *ExportDataKeyRequest

func (*ExportDataKeyRequest) SetWrappingKeySpec

func (s *ExportDataKeyRequest) SetWrappingKeySpec(v string) *ExportDataKeyRequest

func (ExportDataKeyRequest) String

func (s ExportDataKeyRequest) String() string

type ExportDataKeyResponse

type ExportDataKeyResponse struct {
	Headers    map[string]*string         `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                     `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ExportDataKeyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ExportDataKeyResponse) GoString

func (s ExportDataKeyResponse) GoString() string

func (*ExportDataKeyResponse) SetBody

func (*ExportDataKeyResponse) SetHeaders

func (*ExportDataKeyResponse) SetStatusCode

func (s *ExportDataKeyResponse) SetStatusCode(v int32) *ExportDataKeyResponse

func (ExportDataKeyResponse) String

func (s ExportDataKeyResponse) String() string

type ExportDataKeyResponseBody

type ExportDataKeyResponseBody struct {
	// The data key encrypted by using the public key and then exported.
	ExportedDataKey *string `json:"ExportedDataKey,omitempty" xml:"ExportedDataKey,omitempty"`
	// The ID of the CMK that is used to decrypt the specified ciphertext of the data key.
	//
	// This parameter is the globally unique ID of the CMK.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The ID of the CMK version that is used to decrypt the specified ciphertext of the data key.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (ExportDataKeyResponseBody) GoString

func (s ExportDataKeyResponseBody) GoString() string

func (*ExportDataKeyResponseBody) SetExportedDataKey

func (*ExportDataKeyResponseBody) SetKeyId

func (*ExportDataKeyResponseBody) SetKeyVersionId

func (*ExportDataKeyResponseBody) SetRequestId

func (ExportDataKeyResponseBody) String

func (s ExportDataKeyResponseBody) String() string

type ExportDataKeyShrinkRequest

type ExportDataKeyShrinkRequest struct {
	// The ciphertext of the data key encrypted by using a CMK.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// A JSON string that consists of key-value pairs. If you specify this parameter when you use a CMK to encrypt the data key, an equivalent value is required here. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContextShrink *string `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// A Base64-encoded public key.
	PublicKeyBlob *string `json:"PublicKeyBlob,omitempty" xml:"PublicKeyBlob,omitempty"`
	// The encryption algorithm based on which you want to use the public key specified by PublicKeyBlob to encrypt the data key. For more information about encryption algorithms, see [AsymmetricDecrypt](~~148130~~).
	//
	// Valid values:
	//
	// *   RSAES_OAEP_SHA\_256
	// *   RSAES_OAEP_SHA\_1
	// *   SM2PKE
	WrappingAlgorithm *string `json:"WrappingAlgorithm,omitempty" xml:"WrappingAlgorithm,omitempty"`
	// The key type of the public key specified by PublicKeyBlob. For more information about key types, see [Introduction to asymmetric keys](~~148147~~).
	//
	// Valid values:
	//
	// *   RSA\_2048
	// *   EC_SM2
	WrappingKeySpec *string `json:"WrappingKeySpec,omitempty" xml:"WrappingKeySpec,omitempty"`
}

func (ExportDataKeyShrinkRequest) GoString

func (s ExportDataKeyShrinkRequest) GoString() string

func (*ExportDataKeyShrinkRequest) SetCiphertextBlob

func (*ExportDataKeyShrinkRequest) SetEncryptionContextShrink

func (s *ExportDataKeyShrinkRequest) SetEncryptionContextShrink(v string) *ExportDataKeyShrinkRequest

func (*ExportDataKeyShrinkRequest) SetPublicKeyBlob

func (*ExportDataKeyShrinkRequest) SetWrappingAlgorithm

func (s *ExportDataKeyShrinkRequest) SetWrappingAlgorithm(v string) *ExportDataKeyShrinkRequest

func (*ExportDataKeyShrinkRequest) SetWrappingKeySpec

func (ExportDataKeyShrinkRequest) String

type GenerateAndExportDataKeyRequest

type GenerateAndExportDataKeyRequest struct {
	// A JSON string of key-value pairs. If you specify this parameter here, an equivalent value is required when you decrypt or re-encrypt the data key. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContext map[string]interface{} `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// The globally unique ID of the CMK. You can also set this parameter to an alias that is bound to the CMK. For more information, see [Use aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The length of the data key that you want to generate. Valid values:
	//
	// *   AES\_256: a 256-bit symmetric key
	// *   AES\_128: a 128-bit symmetric key
	//
	// >  We recommend that you use the KeySpec or NumberOfBytes parameter to specify the length of a data key. If both parameters are not specified, KMS generates a 256-bit data key. If both parameters are specified, KMS ignores the KeySpec parameter.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The length of the data key that you want to generate.
	//
	// Valid values: 1 to 1024.
	//
	// Unit: bytes.
	NumberOfBytes *int32 `json:"NumberOfBytes,omitempty" xml:"NumberOfBytes,omitempty"`
	// A Base64-encoded public key.
	PublicKeyBlob *string `json:"PublicKeyBlob,omitempty" xml:"PublicKeyBlob,omitempty"`
	// The encryption algorithm based on which you want to use the public key specified by PublicKeyBlob to encrypt the data key. For more information about encryption algorithms, see [AsymmetricDecrypt](~~148130~~).
	//
	// Valid values:
	//
	// *   RSAES_OAEP_SHA\_256
	// *   RSAES_OAEP_SHA\_1
	// *   SM2PKE
	WrappingAlgorithm *string `json:"WrappingAlgorithm,omitempty" xml:"WrappingAlgorithm,omitempty"`
	// The key type of the public key specified by PublicKeyBlob. For more information about key types, see [Introduction to asymmetric keys](~~148147~~).
	//
	// Valid values:
	//
	// *   RSA\_2048
	// *   EC_SM2
	WrappingKeySpec *string `json:"WrappingKeySpec,omitempty" xml:"WrappingKeySpec,omitempty"`
}

func (GenerateAndExportDataKeyRequest) GoString

func (*GenerateAndExportDataKeyRequest) SetEncryptionContext

func (s *GenerateAndExportDataKeyRequest) SetEncryptionContext(v map[string]interface{}) *GenerateAndExportDataKeyRequest

func (*GenerateAndExportDataKeyRequest) SetKeyId

func (*GenerateAndExportDataKeyRequest) SetKeySpec

func (*GenerateAndExportDataKeyRequest) SetNumberOfBytes

func (*GenerateAndExportDataKeyRequest) SetPublicKeyBlob

func (*GenerateAndExportDataKeyRequest) SetWrappingAlgorithm

func (*GenerateAndExportDataKeyRequest) SetWrappingKeySpec

func (GenerateAndExportDataKeyRequest) String

type GenerateAndExportDataKeyResponse

type GenerateAndExportDataKeyResponse struct {
	Headers    map[string]*string                    `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *GenerateAndExportDataKeyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (GenerateAndExportDataKeyResponse) GoString

func (*GenerateAndExportDataKeyResponse) SetHeaders

func (*GenerateAndExportDataKeyResponse) SetStatusCode

func (GenerateAndExportDataKeyResponse) String

type GenerateAndExportDataKeyResponseBody

type GenerateAndExportDataKeyResponseBody struct {
	// The ciphertext of the data key encrypted by using the primary CMK version.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The data key encrypted by using the public key and then exported.
	ExportedDataKey *string `json:"ExportedDataKey,omitempty" xml:"ExportedDataKey,omitempty"`
	// The globally unique ID of the CMK.
	//
	// >  If you set the KeyId parameter to an alias, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The ID of the CMK version that is used to encrypt the plaintext. It is the primary version of the CMK.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (GenerateAndExportDataKeyResponseBody) GoString

func (*GenerateAndExportDataKeyResponseBody) SetCiphertextBlob

func (*GenerateAndExportDataKeyResponseBody) SetExportedDataKey

func (*GenerateAndExportDataKeyResponseBody) SetKeyId

func (*GenerateAndExportDataKeyResponseBody) SetKeyVersionId

func (*GenerateAndExportDataKeyResponseBody) SetRequestId

func (GenerateAndExportDataKeyResponseBody) String

type GenerateAndExportDataKeyShrinkRequest

type GenerateAndExportDataKeyShrinkRequest struct {
	// A JSON string of key-value pairs. If you specify this parameter here, an equivalent value is required when you decrypt or re-encrypt the data key. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContextShrink *string `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// The globally unique ID of the CMK. You can also set this parameter to an alias that is bound to the CMK. For more information, see [Use aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The length of the data key that you want to generate. Valid values:
	//
	// *   AES\_256: a 256-bit symmetric key
	// *   AES\_128: a 128-bit symmetric key
	//
	// >  We recommend that you use the KeySpec or NumberOfBytes parameter to specify the length of a data key. If both parameters are not specified, KMS generates a 256-bit data key. If both parameters are specified, KMS ignores the KeySpec parameter.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The length of the data key that you want to generate.
	//
	// Valid values: 1 to 1024.
	//
	// Unit: bytes.
	NumberOfBytes *int32 `json:"NumberOfBytes,omitempty" xml:"NumberOfBytes,omitempty"`
	// A Base64-encoded public key.
	PublicKeyBlob *string `json:"PublicKeyBlob,omitempty" xml:"PublicKeyBlob,omitempty"`
	// The encryption algorithm based on which you want to use the public key specified by PublicKeyBlob to encrypt the data key. For more information about encryption algorithms, see [AsymmetricDecrypt](~~148130~~).
	//
	// Valid values:
	//
	// *   RSAES_OAEP_SHA\_256
	// *   RSAES_OAEP_SHA\_1
	// *   SM2PKE
	WrappingAlgorithm *string `json:"WrappingAlgorithm,omitempty" xml:"WrappingAlgorithm,omitempty"`
	// The key type of the public key specified by PublicKeyBlob. For more information about key types, see [Introduction to asymmetric keys](~~148147~~).
	//
	// Valid values:
	//
	// *   RSA\_2048
	// *   EC_SM2
	WrappingKeySpec *string `json:"WrappingKeySpec,omitempty" xml:"WrappingKeySpec,omitempty"`
}

func (GenerateAndExportDataKeyShrinkRequest) GoString

func (*GenerateAndExportDataKeyShrinkRequest) SetEncryptionContextShrink

func (*GenerateAndExportDataKeyShrinkRequest) SetKeyId

func (*GenerateAndExportDataKeyShrinkRequest) SetKeySpec

func (*GenerateAndExportDataKeyShrinkRequest) SetNumberOfBytes

func (*GenerateAndExportDataKeyShrinkRequest) SetPublicKeyBlob

func (*GenerateAndExportDataKeyShrinkRequest) SetWrappingAlgorithm

func (*GenerateAndExportDataKeyShrinkRequest) SetWrappingKeySpec

func (GenerateAndExportDataKeyShrinkRequest) String

type GenerateDataKeyRequest

type GenerateDataKeyRequest struct {
	// The JSON string that consists of key-value pairs.
	//
	// If you specify this parameter, an equivalent value is required when you call the [Decrypt](~~28950~~) operation. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContext map[string]interface{} `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	//
	// You can also set this parameter to an alias that is bound to the CMK. For more information, see [Alias overview](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The type of the data key that you want to generate. Valid values:
	//
	// *   AES\_256: a 256-bit symmetric key
	// *   AES\_128: a 128-bit symmetric key
	//
	// >  We recommend that you use the KeySpec or NumberOfBytes parameter to specify the length of a data key. If none of the parameters are specified, KMS generates a 256-bit data key. If both parameters are specified, KMS ignores the KeySpec parameter.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The length of the data key that you want to generate. Unit: bytes.
	//
	// Valid values: 1 to 1024.
	//
	// Default value:
	//
	// *   If the KeySpec parameter is set to AES\_256, set the value of the NumberOfBytes parameter to 32.
	// *   If the KeySpec parameter is set to AES\_128, set the value of the NumberOfBytes parameter to 16.
	NumberOfBytes *int32 `json:"NumberOfBytes,omitempty" xml:"NumberOfBytes,omitempty"`
}

func (GenerateDataKeyRequest) GoString

func (s GenerateDataKeyRequest) GoString() string

func (*GenerateDataKeyRequest) SetEncryptionContext

func (s *GenerateDataKeyRequest) SetEncryptionContext(v map[string]interface{}) *GenerateDataKeyRequest

func (*GenerateDataKeyRequest) SetKeyId

func (*GenerateDataKeyRequest) SetKeySpec

func (*GenerateDataKeyRequest) SetNumberOfBytes

func (s *GenerateDataKeyRequest) SetNumberOfBytes(v int32) *GenerateDataKeyRequest

func (GenerateDataKeyRequest) String

func (s GenerateDataKeyRequest) String() string

type GenerateDataKeyResponse

type GenerateDataKeyResponse struct {
	Headers    map[string]*string           `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                       `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *GenerateDataKeyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (GenerateDataKeyResponse) GoString

func (s GenerateDataKeyResponse) GoString() string

func (*GenerateDataKeyResponse) SetBody

func (*GenerateDataKeyResponse) SetHeaders

func (*GenerateDataKeyResponse) SetStatusCode

func (GenerateDataKeyResponse) String

func (s GenerateDataKeyResponse) String() string

type GenerateDataKeyResponseBody

type GenerateDataKeyResponseBody struct {
	// The ciphertext of the data key that is encrypted by using the primary version of the specified CMK.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	//
	// >  If you set the KeyId parameter in the request to an alias of the CMK, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The ID of the CMK version. The ID must be globally unique.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The Base64 encoded plaintext of the data key.
	Plaintext *string `json:"Plaintext,omitempty" xml:"Plaintext,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (GenerateDataKeyResponseBody) GoString

func (s GenerateDataKeyResponseBody) GoString() string

func (*GenerateDataKeyResponseBody) SetCiphertextBlob

func (*GenerateDataKeyResponseBody) SetKeyId

func (*GenerateDataKeyResponseBody) SetKeyVersionId

func (*GenerateDataKeyResponseBody) SetPlaintext

func (*GenerateDataKeyResponseBody) SetRequestId

func (GenerateDataKeyResponseBody) String

type GenerateDataKeyShrinkRequest

type GenerateDataKeyShrinkRequest struct {
	// The JSON string that consists of key-value pairs.
	//
	// If you specify this parameter, an equivalent value is required when you call the [Decrypt](~~28950~~) operation. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContextShrink *string `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	//
	// You can also set this parameter to an alias that is bound to the CMK. For more information, see [Alias overview](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The type of the data key that you want to generate. Valid values:
	//
	// *   AES\_256: a 256-bit symmetric key
	// *   AES\_128: a 128-bit symmetric key
	//
	// >  We recommend that you use the KeySpec or NumberOfBytes parameter to specify the length of a data key. If none of the parameters are specified, KMS generates a 256-bit data key. If both parameters are specified, KMS ignores the KeySpec parameter.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The length of the data key that you want to generate. Unit: bytes.
	//
	// Valid values: 1 to 1024.
	//
	// Default value:
	//
	// *   If the KeySpec parameter is set to AES\_256, set the value of the NumberOfBytes parameter to 32.
	// *   If the KeySpec parameter is set to AES\_128, set the value of the NumberOfBytes parameter to 16.
	NumberOfBytes *int32 `json:"NumberOfBytes,omitempty" xml:"NumberOfBytes,omitempty"`
}

func (GenerateDataKeyShrinkRequest) GoString

func (s GenerateDataKeyShrinkRequest) GoString() string

func (*GenerateDataKeyShrinkRequest) SetEncryptionContextShrink

func (s *GenerateDataKeyShrinkRequest) SetEncryptionContextShrink(v string) *GenerateDataKeyShrinkRequest

func (*GenerateDataKeyShrinkRequest) SetKeyId

func (*GenerateDataKeyShrinkRequest) SetKeySpec

func (*GenerateDataKeyShrinkRequest) SetNumberOfBytes

func (GenerateDataKeyShrinkRequest) String

type GenerateDataKeyWithoutPlaintextRequest

type GenerateDataKeyWithoutPlaintextRequest struct {
	// A JSON string that consists of key-value pairs. If you specify this parameter, an equivalent value is required when you call the Decrypt operation. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContext map[string]interface{} `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// The globally unique ID of the CMK. You can also set this parameter to an alias that is bound to the CMK. For more information, see Use aliases.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The length of the data key that you want to generate. Valid values:
	//
	// *   AES\_256: 256-bit symmetric key
	// *   AES\_128: 128-bit symmetric key
	//
	// >  We recommend that you use the KeySpec or NumberOfBytes parameter to specify the length of a data key. If both of them are not specified, KMS generates a 256-bit data key. If both of them are specified, KMS ignores the KeySpec parameter.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The length of the data key that you want to generate.
	//
	// Valid values: 1 to 1024.
	//
	// Unit: bytes.
	NumberOfBytes *int32 `json:"NumberOfBytes,omitempty" xml:"NumberOfBytes,omitempty"`
}

func (GenerateDataKeyWithoutPlaintextRequest) GoString

func (*GenerateDataKeyWithoutPlaintextRequest) SetEncryptionContext

func (s *GenerateDataKeyWithoutPlaintextRequest) SetEncryptionContext(v map[string]interface{}) *GenerateDataKeyWithoutPlaintextRequest

func (*GenerateDataKeyWithoutPlaintextRequest) SetKeyId

func (*GenerateDataKeyWithoutPlaintextRequest) SetKeySpec

func (*GenerateDataKeyWithoutPlaintextRequest) SetNumberOfBytes

func (GenerateDataKeyWithoutPlaintextRequest) String

type GenerateDataKeyWithoutPlaintextResponse

type GenerateDataKeyWithoutPlaintextResponse struct {
	Headers    map[string]*string                           `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                       `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *GenerateDataKeyWithoutPlaintextResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (GenerateDataKeyWithoutPlaintextResponse) GoString

func (*GenerateDataKeyWithoutPlaintextResponse) SetHeaders

func (*GenerateDataKeyWithoutPlaintextResponse) SetStatusCode

func (GenerateDataKeyWithoutPlaintextResponse) String

type GenerateDataKeyWithoutPlaintextResponseBody

type GenerateDataKeyWithoutPlaintextResponseBody struct {
	// The ciphertext of the data that is encrypted by using the primary CMK version.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The globally unique ID of the CMK.
	//
	// >  If you set the KeyId parameter to an alias, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The ID of the key version that is used to encrypt the plaintext. It is the primary version of the CMK.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (GenerateDataKeyWithoutPlaintextResponseBody) GoString

func (*GenerateDataKeyWithoutPlaintextResponseBody) SetCiphertextBlob

func (*GenerateDataKeyWithoutPlaintextResponseBody) SetKeyId

func (*GenerateDataKeyWithoutPlaintextResponseBody) SetKeyVersionId

func (*GenerateDataKeyWithoutPlaintextResponseBody) SetRequestId

func (GenerateDataKeyWithoutPlaintextResponseBody) String

type GenerateDataKeyWithoutPlaintextShrinkRequest

type GenerateDataKeyWithoutPlaintextShrinkRequest struct {
	// A JSON string that consists of key-value pairs. If you specify this parameter, an equivalent value is required when you call the Decrypt operation. For more information, see [EncryptionContext](~~42975~~).
	EncryptionContextShrink *string `json:"EncryptionContext,omitempty" xml:"EncryptionContext,omitempty"`
	// The globally unique ID of the CMK. You can also set this parameter to an alias that is bound to the CMK. For more information, see Use aliases.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The length of the data key that you want to generate. Valid values:
	//
	// *   AES\_256: 256-bit symmetric key
	// *   AES\_128: 128-bit symmetric key
	//
	// >  We recommend that you use the KeySpec or NumberOfBytes parameter to specify the length of a data key. If both of them are not specified, KMS generates a 256-bit data key. If both of them are specified, KMS ignores the KeySpec parameter.
	KeySpec *string `json:"KeySpec,omitempty" xml:"KeySpec,omitempty"`
	// The length of the data key that you want to generate.
	//
	// Valid values: 1 to 1024.
	//
	// Unit: bytes.
	NumberOfBytes *int32 `json:"NumberOfBytes,omitempty" xml:"NumberOfBytes,omitempty"`
}

func (GenerateDataKeyWithoutPlaintextShrinkRequest) GoString

func (*GenerateDataKeyWithoutPlaintextShrinkRequest) SetEncryptionContextShrink

func (*GenerateDataKeyWithoutPlaintextShrinkRequest) SetKeyId

func (*GenerateDataKeyWithoutPlaintextShrinkRequest) SetKeySpec

func (*GenerateDataKeyWithoutPlaintextShrinkRequest) SetNumberOfBytes

func (GenerateDataKeyWithoutPlaintextShrinkRequest) String

type GetCertificateRequest

type GetCertificateRequest struct {
	// The ID of the certificate. It is the globally unique identifier (GUID) of the certificate in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
}

func (GetCertificateRequest) GoString

func (s GetCertificateRequest) GoString() string

func (*GetCertificateRequest) SetCertificateId

func (s *GetCertificateRequest) SetCertificateId(v string) *GetCertificateRequest

func (GetCertificateRequest) String

func (s GetCertificateRequest) String() string

type GetCertificateResponse

type GetCertificateResponse struct {
	Headers    map[string]*string          `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                      `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *GetCertificateResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (GetCertificateResponse) GoString

func (s GetCertificateResponse) GoString() string

func (*GetCertificateResponse) SetBody

func (*GetCertificateResponse) SetHeaders

func (*GetCertificateResponse) SetStatusCode

func (GetCertificateResponse) String

func (s GetCertificateResponse) String() string

type GetCertificateResponseBody

type GetCertificateResponseBody struct {
	// The certificate in the Privacy Enhanced Mail (PEM) format.
	Certificate *string `json:"Certificate,omitempty" xml:"Certificate,omitempty"`
	// The certificate chain in the PEM format.
	CertificateChain *string `json:"CertificateChain,omitempty" xml:"CertificateChain,omitempty"`
	// The ID of the certificate.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The CSR in the PEM format.
	Csr *string `json:"Csr,omitempty" xml:"Csr,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (GetCertificateResponseBody) GoString

func (s GetCertificateResponseBody) GoString() string

func (*GetCertificateResponseBody) SetCertificate

func (*GetCertificateResponseBody) SetCertificateChain

func (*GetCertificateResponseBody) SetCertificateId

func (*GetCertificateResponseBody) SetCsr

func (*GetCertificateResponseBody) SetRequestId

func (GetCertificateResponseBody) String

type GetParametersForImportRequest

type GetParametersForImportRequest struct {
	// The globally unique ID of the CMK.
	//
	// >  You can import key material only for CMKs whose Origin parameter is set to EXTERNAL.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The algorithm that is used to encrypt key material.
	WrappingAlgorithm *string `json:"WrappingAlgorithm,omitempty" xml:"WrappingAlgorithm,omitempty"`
	// The type of the public key that is used to encrypt key material.
	WrappingKeySpec *string `json:"WrappingKeySpec,omitempty" xml:"WrappingKeySpec,omitempty"`
}

func (GetParametersForImportRequest) GoString

func (*GetParametersForImportRequest) SetKeyId

func (*GetParametersForImportRequest) SetWrappingAlgorithm

func (*GetParametersForImportRequest) SetWrappingKeySpec

func (GetParametersForImportRequest) String

type GetParametersForImportResponse

type GetParametersForImportResponse struct {
	Headers    map[string]*string                  `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                              `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *GetParametersForImportResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (GetParametersForImportResponse) GoString

func (*GetParametersForImportResponse) SetHeaders

func (*GetParametersForImportResponse) SetStatusCode

func (GetParametersForImportResponse) String

type GetParametersForImportResponseBody

type GetParametersForImportResponseBody struct {
	// The token that is used to import key material.
	//
	// The token is valid for 24 hours. The value of this parameter is required when you call the [ImportKeyMaterial](~~68622~~) operation.
	ImportToken *string `json:"ImportToken,omitempty" xml:"ImportToken,omitempty"`
	// The globally unique ID of the CMK.
	//
	// The value of this parameter is required when you call the [ImportKeyMaterial](~~68622~~) operation.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The public key that is used to encrypt key material.
	//
	// The public key is Base64-encoded.
	PublicKey *string `json:"PublicKey,omitempty" xml:"PublicKey,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The time when the token expires.
	TokenExpireTime *string `json:"TokenExpireTime,omitempty" xml:"TokenExpireTime,omitempty"`
}

func (GetParametersForImportResponseBody) GoString

func (*GetParametersForImportResponseBody) SetImportToken

func (*GetParametersForImportResponseBody) SetKeyId

func (*GetParametersForImportResponseBody) SetPublicKey

func (*GetParametersForImportResponseBody) SetRequestId

func (*GetParametersForImportResponseBody) SetTokenExpireTime

func (GetParametersForImportResponseBody) String

type GetPublicKeyRequest

type GetPublicKeyRequest struct {
	// The globally unique ID of the CMK. You can also set this parameter to an alias that is bound to the CMK. For more information, see [Use aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The globally unique ID of the CMK version.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
}

func (GetPublicKeyRequest) GoString

func (s GetPublicKeyRequest) GoString() string

func (*GetPublicKeyRequest) SetKeyId

func (*GetPublicKeyRequest) SetKeyVersionId

func (s *GetPublicKeyRequest) SetKeyVersionId(v string) *GetPublicKeyRequest

func (GetPublicKeyRequest) String

func (s GetPublicKeyRequest) String() string

type GetPublicKeyResponse

type GetPublicKeyResponse struct {
	Headers    map[string]*string        `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                    `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *GetPublicKeyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (GetPublicKeyResponse) GoString

func (s GetPublicKeyResponse) GoString() string

func (*GetPublicKeyResponse) SetBody

func (*GetPublicKeyResponse) SetHeaders

func (s *GetPublicKeyResponse) SetHeaders(v map[string]*string) *GetPublicKeyResponse

func (*GetPublicKeyResponse) SetStatusCode

func (s *GetPublicKeyResponse) SetStatusCode(v int32) *GetPublicKeyResponse

func (GetPublicKeyResponse) String

func (s GetPublicKeyResponse) String() string

type GetPublicKeyResponseBody

type GetPublicKeyResponseBody struct {
	// The globally unique ID of the CMK.
	//
	// >  If you set the KeyId parameter to the alias of the CMK, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The version of the CMK that is used to encrypt the plaintext.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The public key returned in the PEM format.
	PublicKey *string `json:"PublicKey,omitempty" xml:"PublicKey,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (GetPublicKeyResponseBody) GoString

func (s GetPublicKeyResponseBody) GoString() string

func (*GetPublicKeyResponseBody) SetKeyId

func (*GetPublicKeyResponseBody) SetKeyVersionId

func (*GetPublicKeyResponseBody) SetPublicKey

func (*GetPublicKeyResponseBody) SetRequestId

func (GetPublicKeyResponseBody) String

func (s GetPublicKeyResponseBody) String() string

type GetRandomPasswordRequest

type GetRandomPasswordRequest struct {
	// The characters that are not included in the password to be generated.
	//
	// Valid values:
	//
	// ` Valid characters: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ! \"#$%&\"()*+,-. /:;<=>? @[\] your_project_id} ~  `.
	//
	// This parameter is empty by default.
	ExcludeCharacters *string `json:"ExcludeCharacters,omitempty" xml:"ExcludeCharacters,omitempty"`
	// Specifies whether to exclude lowercase letters.
	//
	// Valid values:
	//
	// *   true
	// *   false
	ExcludeLowercase *string `json:"ExcludeLowercase,omitempty" xml:"ExcludeLowercase,omitempty"`
	// Specifies whether to exclude digits.
	//
	// Valid values:
	//
	// *   true
	// *   false
	ExcludeNumbers *string `json:"ExcludeNumbers,omitempty" xml:"ExcludeNumbers,omitempty"`
	// Specifies whether to exclude special characters.
	//
	// Valid values:
	//
	// *   true
	// *   false
	ExcludePunctuation *string `json:"ExcludePunctuation,omitempty" xml:"ExcludePunctuation,omitempty"`
	// Specifies whether to exclude uppercase letters.
	//
	// Valid values:
	//
	// *   true
	// *   false
	ExcludeUppercase *string `json:"ExcludeUppercase,omitempty" xml:"ExcludeUppercase,omitempty"`
	// The number of bytes that the password to be generated contains.
	//
	// Valid values: 8 to 128.
	//
	// Default value: 32
	PasswordLength *string `json:"PasswordLength,omitempty" xml:"PasswordLength,omitempty"`
	// Specifies whether to include all the preceding character types.
	//
	// Valid values:
	//
	// *   true
	// *   false
	RequireEachIncludedType *string `json:"RequireEachIncludedType,omitempty" xml:"RequireEachIncludedType,omitempty"`
}

func (GetRandomPasswordRequest) GoString

func (s GetRandomPasswordRequest) GoString() string

func (*GetRandomPasswordRequest) SetExcludeCharacters

func (s *GetRandomPasswordRequest) SetExcludeCharacters(v string) *GetRandomPasswordRequest

func (*GetRandomPasswordRequest) SetExcludeLowercase

func (s *GetRandomPasswordRequest) SetExcludeLowercase(v string) *GetRandomPasswordRequest

func (*GetRandomPasswordRequest) SetExcludeNumbers

func (s *GetRandomPasswordRequest) SetExcludeNumbers(v string) *GetRandomPasswordRequest

func (*GetRandomPasswordRequest) SetExcludePunctuation

func (s *GetRandomPasswordRequest) SetExcludePunctuation(v string) *GetRandomPasswordRequest

func (*GetRandomPasswordRequest) SetExcludeUppercase

func (s *GetRandomPasswordRequest) SetExcludeUppercase(v string) *GetRandomPasswordRequest

func (*GetRandomPasswordRequest) SetPasswordLength

func (s *GetRandomPasswordRequest) SetPasswordLength(v string) *GetRandomPasswordRequest

func (*GetRandomPasswordRequest) SetRequireEachIncludedType

func (s *GetRandomPasswordRequest) SetRequireEachIncludedType(v string) *GetRandomPasswordRequest

func (GetRandomPasswordRequest) String

func (s GetRandomPasswordRequest) String() string

type GetRandomPasswordResponse

type GetRandomPasswordResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *GetRandomPasswordResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (GetRandomPasswordResponse) GoString

func (s GetRandomPasswordResponse) GoString() string

func (*GetRandomPasswordResponse) SetBody

func (*GetRandomPasswordResponse) SetHeaders

func (*GetRandomPasswordResponse) SetStatusCode

func (GetRandomPasswordResponse) String

func (s GetRandomPasswordResponse) String() string

type GetRandomPasswordResponseBody

type GetRandomPasswordResponseBody struct {
	// The generated random password.
	RandomPassword *string `json:"RandomPassword,omitempty" xml:"RandomPassword,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (GetRandomPasswordResponseBody) GoString

func (*GetRandomPasswordResponseBody) SetRandomPassword

func (*GetRandomPasswordResponseBody) SetRequestId

func (GetRandomPasswordResponseBody) String

type GetSecretValueRequest

type GetSecretValueRequest struct {
	// Specifies whether to obtain the extended configuration of the secret. Valid values:
	//
	// *   true
	// *   false: This is the default value.
	//
	// >  This parameter is ignored for a generic secret.
	FetchExtendedConfig *bool `json:"FetchExtendedConfig,omitempty" xml:"FetchExtendedConfig,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The version number of the secret value. If you specify this parameter, Secrets Manager returns the secret value of the specified version.
	//
	// >  This parameter is ignored for a managed ApsaraDB RDS secret, a managed RAM secret, or a managed ECS secret.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
	// The stage label that marks the secret version. If you specify this parameter, Secrets Manager returns the secret value of the version that is marked with the specified stage label.
	//
	// Default value: ACSCurrent.
	//
	// >  For a managed ApsaraDB RDS secret, a managed RAM secret, or a managed ECS secret, Secrets Manager can return only the secret value of the version marked with ACSPrevious or ACSCurrent.
	VersionStage *string `json:"VersionStage,omitempty" xml:"VersionStage,omitempty"`
}

func (GetSecretValueRequest) GoString

func (s GetSecretValueRequest) GoString() string

func (*GetSecretValueRequest) SetFetchExtendedConfig

func (s *GetSecretValueRequest) SetFetchExtendedConfig(v bool) *GetSecretValueRequest

func (*GetSecretValueRequest) SetSecretName

func (s *GetSecretValueRequest) SetSecretName(v string) *GetSecretValueRequest

func (*GetSecretValueRequest) SetVersionId

func (*GetSecretValueRequest) SetVersionStage

func (s *GetSecretValueRequest) SetVersionStage(v string) *GetSecretValueRequest

func (GetSecretValueRequest) String

func (s GetSecretValueRequest) String() string

type GetSecretValueResponse

type GetSecretValueResponse struct {
	Headers    map[string]*string          `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                      `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *GetSecretValueResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (GetSecretValueResponse) GoString

func (s GetSecretValueResponse) GoString() string

func (*GetSecretValueResponse) SetBody

func (*GetSecretValueResponse) SetHeaders

func (*GetSecretValueResponse) SetStatusCode

func (GetSecretValueResponse) String

func (s GetSecretValueResponse) String() string

type GetSecretValueResponseBody

type GetSecretValueResponseBody struct {
	// Indicates whether automatic rotation is enabled. Valid values:
	//
	// *   Enabled: indicates that automatic rotation is enabled.
	// *   Disabled: indicates that automatic rotation is disabled.
	// *   Invalid: indicates that the status of automatic rotation is abnormal. In this case, Secrets Manager cannot automatically rotate the secret.
	//
	// >  This parameter is returned only for a managed ApsaraDB RDS secret, a managed RAM secret, or a managed ECS secret.
	AutomaticRotation *string `json:"AutomaticRotation,omitempty" xml:"AutomaticRotation,omitempty"`
	// The time when the secret was created.
	CreateTime *string `json:"CreateTime,omitempty" xml:"CreateTime,omitempty"`
	// The extended configuration of the secret.
	//
	// >  This parameter is returned if you set the FetchExtendedConfig parameter to true. This parameter is returned only for a managed ApsaraDB RDS secret, a managed RAM secret, or a managed ECS secret.
	ExtendedConfig *string `json:"ExtendedConfig,omitempty" xml:"ExtendedConfig,omitempty"`
	// The time when the last rotation was performed.
	//
	// >  This parameter is returned if the secret was rotated.
	LastRotationDate *string `json:"LastRotationDate,omitempty" xml:"LastRotationDate,omitempty"`
	// The time when the next rotation will be performed.
	//
	// >  This parameter is returned if automatic rotation is enabled.
	NextRotationDate *string `json:"NextRotationDate,omitempty" xml:"NextRotationDate,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The interval for automatic rotation.
	//
	// The value is in the `integer[unit]` format. The `unit` field has a fixed value of s. For example, if the value is 604800s, automatic rotation is performed at a 7-day interval.
	//
	// >  This parameter is returned if automatic rotation is enabled.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
	// The secret value. Secrets Manager decrypts the ciphertext of the secret value and returns the plaintext of the secret value in this parameter.
	//
	// *   For a generic secret, the secret value of the specified version is returned.
	//
	// *   For a managed ApsaraDB RDS secret, the value is returned in the following format:`{"AccountName":"","AccountPassword":""}` .
	//
	// *   For a managed RAM secret, the secret value is returned in the following format: `{"AccessKeyId":"Adfdsfd","AccessKeySecret":"fdsfdsf","GenerateTimestamp": "2016-03-25T10:42:40Z"}`.
	//
	// *   For a managed ECS secret, the secret value is returned in one of the following formats:
	//
	//     *   `{"UserName":"root","Password":"H5asdasdsads****"}`: The secret value is returned in this format if the ECS secret is a password.
	//     *   `{"UserName":"root","PublicKey":"ssh-rsa ****mKwnVix9YTFY9Rs= imported-openssh-key","PrivateKey": "d6bee1cb-2e14-4277-ba6b-73786b21****"}`: The secret value is returned in this format is the ECS secret is a pair of SSH keys. The private key is in the Privacy Enhanced Mail (PEM) format.
	SecretData *string `json:"SecretData,omitempty" xml:"SecretData,omitempty"`
	// The type of the secret value. Valid values:
	//
	// *   text
	// *   binary
	SecretDataType *string `json:"SecretDataType,omitempty" xml:"SecretDataType,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The type of the secret. Valid values:
	//
	// *   Generic: indicates a generic secret.
	// *   Rds: indicates a managed ApsaraDB RDS secret.
	// *   RAMCredentials: indicates a managed RAM secret.
	// *   ECS: indicates a managed ECS secret.
	SecretType *string `json:"SecretType,omitempty" xml:"SecretType,omitempty"`
	// The version number of the secret value.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
	// The stage labels that mark the secret versions.
	VersionStages *GetSecretValueResponseBodyVersionStages `json:"VersionStages,omitempty" xml:"VersionStages,omitempty" type:"Struct"`
}

func (GetSecretValueResponseBody) GoString

func (s GetSecretValueResponseBody) GoString() string

func (*GetSecretValueResponseBody) SetAutomaticRotation

func (s *GetSecretValueResponseBody) SetAutomaticRotation(v string) *GetSecretValueResponseBody

func (*GetSecretValueResponseBody) SetCreateTime

func (*GetSecretValueResponseBody) SetExtendedConfig

func (*GetSecretValueResponseBody) SetLastRotationDate

func (*GetSecretValueResponseBody) SetNextRotationDate

func (*GetSecretValueResponseBody) SetRequestId

func (*GetSecretValueResponseBody) SetRotationInterval

func (*GetSecretValueResponseBody) SetSecretData

func (*GetSecretValueResponseBody) SetSecretDataType

func (*GetSecretValueResponseBody) SetSecretName

func (*GetSecretValueResponseBody) SetSecretType

func (*GetSecretValueResponseBody) SetVersionId

func (*GetSecretValueResponseBody) SetVersionStages

func (GetSecretValueResponseBody) String

type GetSecretValueResponseBodyVersionStages

type GetSecretValueResponseBodyVersionStages struct {
	VersionStage []*string `json:"VersionStage,omitempty" xml:"VersionStage,omitempty" type:"Repeated"`
}

func (GetSecretValueResponseBodyVersionStages) GoString

func (*GetSecretValueResponseBodyVersionStages) SetVersionStage

func (GetSecretValueResponseBodyVersionStages) String

type ImportKeyMaterialRequest

type ImportKeyMaterialRequest struct {
	// Use** GetParametersForImport** the Returned public key and the base64-encoded key material.
	EncryptedKeyMaterial *string `json:"EncryptedKeyMaterial,omitempty" xml:"EncryptedKeyMaterial,omitempty"`
	// By calling** GetParametersForImport** the import token.
	ImportToken *string `json:"ImportToken,omitempty" xml:"ImportToken,omitempty"`
	// The ID of the CMK to be imported.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The time when the key material expires.
	//
	// If this parameter is not specified or set this parameter to 0, the key material does not expire.
	//
	// >  The value cannot be earlier than the time when the API is called (based on the server time).
	KeyMaterialExpireUnix *int64 `json:"KeyMaterialExpireUnix,omitempty" xml:"KeyMaterialExpireUnix,omitempty"`
}

func (ImportKeyMaterialRequest) GoString

func (s ImportKeyMaterialRequest) GoString() string

func (*ImportKeyMaterialRequest) SetEncryptedKeyMaterial

func (s *ImportKeyMaterialRequest) SetEncryptedKeyMaterial(v string) *ImportKeyMaterialRequest

func (*ImportKeyMaterialRequest) SetImportToken

func (*ImportKeyMaterialRequest) SetKeyId

func (*ImportKeyMaterialRequest) SetKeyMaterialExpireUnix

func (s *ImportKeyMaterialRequest) SetKeyMaterialExpireUnix(v int64) *ImportKeyMaterialRequest

func (ImportKeyMaterialRequest) String

func (s ImportKeyMaterialRequest) String() string

type ImportKeyMaterialResponse

type ImportKeyMaterialResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ImportKeyMaterialResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ImportKeyMaterialResponse) GoString

func (s ImportKeyMaterialResponse) GoString() string

func (*ImportKeyMaterialResponse) SetBody

func (*ImportKeyMaterialResponse) SetHeaders

func (*ImportKeyMaterialResponse) SetStatusCode

func (ImportKeyMaterialResponse) String

func (s ImportKeyMaterialResponse) String() string

type ImportKeyMaterialResponseBody

type ImportKeyMaterialResponseBody struct {
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (ImportKeyMaterialResponseBody) GoString

func (*ImportKeyMaterialResponseBody) SetRequestId

func (ImportKeyMaterialResponseBody) String

type ListAliasesByKeyIdRequest

type ListAliasesByKeyIdRequest struct {
	// The globally unique ID of the CMK.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The number of the page to return.
	//
	// Valid values: an integer that is greater than 0.
	//
	// Default value: 1.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries to return on each page.
	//
	// Valid values: 0 to 101.
	//
	// Default value: 10
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
}

func (ListAliasesByKeyIdRequest) GoString

func (s ListAliasesByKeyIdRequest) GoString() string

func (*ListAliasesByKeyIdRequest) SetKeyId

func (*ListAliasesByKeyIdRequest) SetPageNumber

func (*ListAliasesByKeyIdRequest) SetPageSize

func (ListAliasesByKeyIdRequest) String

func (s ListAliasesByKeyIdRequest) String() string

type ListAliasesByKeyIdResponse

type ListAliasesByKeyIdResponse struct {
	Headers    map[string]*string              `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                          `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ListAliasesByKeyIdResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ListAliasesByKeyIdResponse) GoString

func (s ListAliasesByKeyIdResponse) GoString() string

func (*ListAliasesByKeyIdResponse) SetBody

func (*ListAliasesByKeyIdResponse) SetHeaders

func (*ListAliasesByKeyIdResponse) SetStatusCode

func (ListAliasesByKeyIdResponse) String

type ListAliasesByKeyIdResponseBody

type ListAliasesByKeyIdResponseBody struct {
	// An array that consists of aliases.
	Aliases *ListAliasesByKeyIdResponseBodyAliases `json:"Aliases,omitempty" xml:"Aliases,omitempty" type:"Struct"`
	// The page number of the returned page.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries returned per page.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The total number of returned CMKs.
	TotalCount *int32 `json:"TotalCount,omitempty" xml:"TotalCount,omitempty"`
}

func (ListAliasesByKeyIdResponseBody) GoString

func (*ListAliasesByKeyIdResponseBody) SetPageNumber

func (*ListAliasesByKeyIdResponseBody) SetPageSize

func (*ListAliasesByKeyIdResponseBody) SetRequestId

func (*ListAliasesByKeyIdResponseBody) SetTotalCount

func (ListAliasesByKeyIdResponseBody) String

type ListAliasesByKeyIdResponseBodyAliases

type ListAliasesByKeyIdResponseBodyAliases struct {
	Alias []*ListAliasesByKeyIdResponseBodyAliasesAlias `json:"Alias,omitempty" xml:"Alias,omitempty" type:"Repeated"`
}

func (ListAliasesByKeyIdResponseBodyAliases) GoString

func (ListAliasesByKeyIdResponseBodyAliases) String

type ListAliasesByKeyIdResponseBodyAliasesAlias

type ListAliasesByKeyIdResponseBodyAliasesAlias struct {
	// The Alibaba Cloud Resource Name (ARN) of the alias.
	AliasArn *string `json:"AliasArn,omitempty" xml:"AliasArn,omitempty"`
	// The ID of the alias.
	AliasName *string `json:"AliasName,omitempty" xml:"AliasName,omitempty"`
	// The CMK to which an alias is bound.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (ListAliasesByKeyIdResponseBodyAliasesAlias) GoString

func (*ListAliasesByKeyIdResponseBodyAliasesAlias) SetAliasArn

func (*ListAliasesByKeyIdResponseBodyAliasesAlias) SetAliasName

func (*ListAliasesByKeyIdResponseBodyAliasesAlias) SetKeyId

func (ListAliasesByKeyIdResponseBodyAliasesAlias) String

type ListAliasesRequest

type ListAliasesRequest struct {
	// The number of the page to return.
	//
	// Pages start from page 1.
	//
	// Default value: 1.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries to return on each page.
	//
	// Valid values: 0 to 100.
	//
	// Default value: 10.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
}

func (ListAliasesRequest) GoString

func (s ListAliasesRequest) GoString() string

func (*ListAliasesRequest) SetPageNumber

func (s *ListAliasesRequest) SetPageNumber(v int32) *ListAliasesRequest

func (*ListAliasesRequest) SetPageSize

func (s *ListAliasesRequest) SetPageSize(v int32) *ListAliasesRequest

func (ListAliasesRequest) String

func (s ListAliasesRequest) String() string

type ListAliasesResponse

type ListAliasesResponse struct {
	Headers    map[string]*string       `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                   `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ListAliasesResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ListAliasesResponse) GoString

func (s ListAliasesResponse) GoString() string

func (*ListAliasesResponse) SetBody

func (*ListAliasesResponse) SetHeaders

func (s *ListAliasesResponse) SetHeaders(v map[string]*string) *ListAliasesResponse

func (*ListAliasesResponse) SetStatusCode

func (s *ListAliasesResponse) SetStatusCode(v int32) *ListAliasesResponse

func (ListAliasesResponse) String

func (s ListAliasesResponse) String() string

type ListAliasesResponseBody

type ListAliasesResponseBody struct {
	// The alias of the user.
	Aliases *ListAliasesResponseBodyAliases `json:"Aliases,omitempty" xml:"Aliases,omitempty" type:"Struct"`
	// The page number of the returned page.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries returned per page.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The total number of returned aliases.
	TotalCount *int32 `json:"TotalCount,omitempty" xml:"TotalCount,omitempty"`
}

func (ListAliasesResponseBody) GoString

func (s ListAliasesResponseBody) GoString() string

func (*ListAliasesResponseBody) SetAliases

func (*ListAliasesResponseBody) SetPageNumber

func (*ListAliasesResponseBody) SetPageSize

func (*ListAliasesResponseBody) SetRequestId

func (*ListAliasesResponseBody) SetTotalCount

func (ListAliasesResponseBody) String

func (s ListAliasesResponseBody) String() string

type ListAliasesResponseBodyAliases

type ListAliasesResponseBodyAliases struct {
	Alias []*ListAliasesResponseBodyAliasesAlias `json:"Alias,omitempty" xml:"Alias,omitempty" type:"Repeated"`
}

func (ListAliasesResponseBodyAliases) GoString

func (*ListAliasesResponseBodyAliases) SetAlias

func (ListAliasesResponseBodyAliases) String

type ListAliasesResponseBodyAliasesAlias

type ListAliasesResponseBodyAliasesAlias struct {
	// The Alibaba Cloud Resource Name (ARN) of the alias.
	AliasArn *string `json:"AliasArn,omitempty" xml:"AliasArn,omitempty"`
	// The ID of the alias.
	AliasName *string `json:"AliasName,omitempty" xml:"AliasName,omitempty"`
	// The CMK to which the alias belongs.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (ListAliasesResponseBodyAliasesAlias) GoString

func (*ListAliasesResponseBodyAliasesAlias) SetAliasArn

func (*ListAliasesResponseBodyAliasesAlias) SetAliasName

func (*ListAliasesResponseBodyAliasesAlias) SetKeyId

func (ListAliasesResponseBodyAliasesAlias) String

type ListKeyVersionsRequest

type ListKeyVersionsRequest struct {
	// The globally unique ID of the CMK. You can also set this parameter to an alias that is bound to the CMK. For more information, see [Use aliases](~~68522~~).
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The number of the page to return.
	//
	// Pages start from page 1.
	//
	// Default value: 1.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries to return on each page.
	//
	// Valid values: 0 to 101.
	//
	// Default value: 10.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
}

func (ListKeyVersionsRequest) GoString

func (s ListKeyVersionsRequest) GoString() string

func (*ListKeyVersionsRequest) SetKeyId

func (*ListKeyVersionsRequest) SetPageNumber

func (*ListKeyVersionsRequest) SetPageSize

func (ListKeyVersionsRequest) String

func (s ListKeyVersionsRequest) String() string

type ListKeyVersionsResponse

type ListKeyVersionsResponse struct {
	Headers    map[string]*string           `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                       `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ListKeyVersionsResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ListKeyVersionsResponse) GoString

func (s ListKeyVersionsResponse) GoString() string

func (*ListKeyVersionsResponse) SetBody

func (*ListKeyVersionsResponse) SetHeaders

func (*ListKeyVersionsResponse) SetStatusCode

func (ListKeyVersionsResponse) String

func (s ListKeyVersionsResponse) String() string

type ListKeyVersionsResponseBody

type ListKeyVersionsResponseBody struct {
	// An array that consists of key versions.
	KeyVersions *ListKeyVersionsResponseBodyKeyVersions `json:"KeyVersions,omitempty" xml:"KeyVersions,omitempty" type:"Struct"`
	// The page number of the returned page.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries returned per page.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The total number of returned key versions.
	TotalCount *int32 `json:"TotalCount,omitempty" xml:"TotalCount,omitempty"`
}

func (ListKeyVersionsResponseBody) GoString

func (s ListKeyVersionsResponseBody) GoString() string

func (*ListKeyVersionsResponseBody) SetKeyVersions

func (*ListKeyVersionsResponseBody) SetPageNumber

func (*ListKeyVersionsResponseBody) SetPageSize

func (*ListKeyVersionsResponseBody) SetRequestId

func (*ListKeyVersionsResponseBody) SetTotalCount

func (ListKeyVersionsResponseBody) String

type ListKeyVersionsResponseBodyKeyVersions

type ListKeyVersionsResponseBodyKeyVersions struct {
	KeyVersion []*ListKeyVersionsResponseBodyKeyVersionsKeyVersion `json:"KeyVersion,omitempty" xml:"KeyVersion,omitempty" type:"Repeated"`
}

func (ListKeyVersionsResponseBodyKeyVersions) GoString

func (ListKeyVersionsResponseBodyKeyVersions) String

type ListKeyVersionsResponseBodyKeyVersionsKeyVersion

type ListKeyVersionsResponseBodyKeyVersionsKeyVersion struct {
	// The date and time when the CMK version was created. The time is displayed in UTC.
	CreationDate *string `json:"CreationDate,omitempty" xml:"CreationDate,omitempty"`
	// The globally unique ID of the CMK.
	//
	// >  If you set the KeyId parameter to the alias of the CMK, the ID of the CMK to which the alias is bound is returned.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The globally unique ID of the CMK version.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
}

func (ListKeyVersionsResponseBodyKeyVersionsKeyVersion) GoString

func (*ListKeyVersionsResponseBodyKeyVersionsKeyVersion) SetCreationDate

func (*ListKeyVersionsResponseBodyKeyVersionsKeyVersion) SetKeyId

func (*ListKeyVersionsResponseBodyKeyVersionsKeyVersion) SetKeyVersionId

func (ListKeyVersionsResponseBodyKeyVersionsKeyVersion) String

type ListKeysRequest

type ListKeysRequest struct {
	// The CMK filter. The filter consists of one or more key-value pairs. You can specify a maximum of 10 key-value pairs.
	//
	// *   Key
	//
	//     *   Description: the property that you want to filter.
	//
	//     *   Type: string.
	//
	//     *   Valid values:
	//
	//         *   KeyState: the status of the CMK.
	//         *   KeySpec: the type of the CMK.
	//         *   KeyUsage: the usage of the CMK.
	//         *   ProtectionLevel: the protection level.
	//         *   CreatorType: the type of the creator.
	//
	// *   Values
	//
	//     *   Description: the value to be included after filtering.
	//
	//     *   Format: string array.
	//
	//     *   Length: 0 to 10.
	//
	//     *   Valid values:
	//
	//         *   When Key is set to KeyState, the value can be Enabled, Disabled, PendingDeletion, or PendingImport.
	//
	//         *   When Key is set to KeySpec, the value can be Aliyun_AES\_256, Aliyun_SM4, RSA\_2048, EC_P256, EC_P256K, or EC_SM2.
	//
	//             Note: You can create CMKs of the EC_SM2 or Aliyun_SM4 type only in regions where State Cryptography Administration (SCA)-certified managed HSMs reside. For more information about the regions, see [Supported regions](~~125803~~). If your region does not support EC_SM2 or Aliyun_SM4, the two values are ignored if they are specified.
	//
	//         *   When Key is set to KeyUsage, the value can be ENCRYPT/DECRYPT or SIGN/VERIFY. ENCRYPT/DECRYPT indicates that the CMK is used to encrypt and decrypt data. SIGN/VERIFY indicates that the CMK is used to generate and verify digital signatures.
	//
	//         *   When Key is set to ProtectionLevel, the value can be SOFTWARE (software) or HSM (hardware).
	//
	//             You can set ProtectionLevel to HSM in only specific regions. For more information about the regions, see [Supported regions](~~125803~~). If your region does not support the value HSM, the value is ignored if the value is specified.
	//
	//         *   If Key is set to CreatorType, the value can be User or Service. User indicates that CMKs created by the current account are queried. Service indicates that CMKs automatically created by other cloud services authorized by the current account are queried.
	//
	// The logical relationship between different keys is AND, and the logical relationship between multiple items in the same key is OR. Example:
	//
	// `[ {"Key":"KeyState", "Values":["Enabled","Disabled"]}, {"Key":"KeyState", "Values":["PendingDeletion"]}, {"Key":"KeySpec", "Values":["Aliyun_AES_256"]}]`. In this example, the semantics are:`(KeyState=Enabled OR KeyState=Disabled OR KeyState=PendingDeletion) AND (KeySpec=Aliyun_AES_ 256)`.
	Filters *string `json:"Filters,omitempty" xml:"Filters,omitempty"`
	// The number of the page to return.
	//
	// Pages start from page 1.
	//
	// Default value: 1.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries to return on each page.
	//
	// Valid values: 1 to 100.
	//
	// Default value: 10
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
}

func (ListKeysRequest) GoString

func (s ListKeysRequest) GoString() string

func (*ListKeysRequest) SetFilters

func (s *ListKeysRequest) SetFilters(v string) *ListKeysRequest

func (*ListKeysRequest) SetPageNumber

func (s *ListKeysRequest) SetPageNumber(v int32) *ListKeysRequest

func (*ListKeysRequest) SetPageSize

func (s *ListKeysRequest) SetPageSize(v int32) *ListKeysRequest

func (ListKeysRequest) String

func (s ListKeysRequest) String() string

type ListKeysResponse

type ListKeysResponse struct {
	Headers    map[string]*string    `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ListKeysResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ListKeysResponse) GoString

func (s ListKeysResponse) GoString() string

func (*ListKeysResponse) SetBody

func (*ListKeysResponse) SetHeaders

func (s *ListKeysResponse) SetHeaders(v map[string]*string) *ListKeysResponse

func (*ListKeysResponse) SetStatusCode

func (s *ListKeysResponse) SetStatusCode(v int32) *ListKeysResponse

func (ListKeysResponse) String

func (s ListKeysResponse) String() string

type ListKeysResponseBody

type ListKeysResponseBody struct {
	// An array that consists of the CMKs of the current Alibaba Cloud account in the current region.
	Keys *ListKeysResponseBodyKeys `json:"Keys,omitempty" xml:"Keys,omitempty" type:"Struct"`
	// The page number of the returned page.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries returned per page.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The total number of CMKs.
	TotalCount *int32 `json:"TotalCount,omitempty" xml:"TotalCount,omitempty"`
}

func (ListKeysResponseBody) GoString

func (s ListKeysResponseBody) GoString() string

func (*ListKeysResponseBody) SetKeys

func (*ListKeysResponseBody) SetPageNumber

func (s *ListKeysResponseBody) SetPageNumber(v int32) *ListKeysResponseBody

func (*ListKeysResponseBody) SetPageSize

func (s *ListKeysResponseBody) SetPageSize(v int32) *ListKeysResponseBody

func (*ListKeysResponseBody) SetRequestId

func (s *ListKeysResponseBody) SetRequestId(v string) *ListKeysResponseBody

func (*ListKeysResponseBody) SetTotalCount

func (s *ListKeysResponseBody) SetTotalCount(v int32) *ListKeysResponseBody

func (ListKeysResponseBody) String

func (s ListKeysResponseBody) String() string

type ListKeysResponseBodyKeys

type ListKeysResponseBodyKeys struct {
	Key []*ListKeysResponseBodyKeysKey `json:"Key,omitempty" xml:"Key,omitempty" type:"Repeated"`
}

func (ListKeysResponseBodyKeys) GoString

func (s ListKeysResponseBodyKeys) GoString() string

func (*ListKeysResponseBodyKeys) SetKey

func (ListKeysResponseBodyKeys) String

func (s ListKeysResponseBodyKeys) String() string

type ListKeysResponseBodyKeysKey

type ListKeysResponseBodyKeysKey struct {
	// The Alibaba Cloud Resource Name (ARN) of the CMK.
	KeyArn *string `json:"KeyArn,omitempty" xml:"KeyArn,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (ListKeysResponseBodyKeysKey) GoString

func (s ListKeysResponseBodyKeysKey) GoString() string

func (*ListKeysResponseBodyKeysKey) SetKeyArn

func (*ListKeysResponseBodyKeysKey) SetKeyId

func (ListKeysResponseBodyKeysKey) String

type ListResourceTagsRequest

type ListResourceTagsRequest struct {
	// The globally unique ID of the CMK.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (ListResourceTagsRequest) GoString

func (s ListResourceTagsRequest) GoString() string

func (*ListResourceTagsRequest) SetKeyId

func (ListResourceTagsRequest) String

func (s ListResourceTagsRequest) String() string

type ListResourceTagsResponse

type ListResourceTagsResponse struct {
	Headers    map[string]*string            `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                        `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ListResourceTagsResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ListResourceTagsResponse) GoString

func (s ListResourceTagsResponse) GoString() string

func (*ListResourceTagsResponse) SetBody

func (*ListResourceTagsResponse) SetHeaders

func (*ListResourceTagsResponse) SetStatusCode

func (ListResourceTagsResponse) String

func (s ListResourceTagsResponse) String() string

type ListResourceTagsResponseBody

type ListResourceTagsResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The tags of the CMK.
	Tags *ListResourceTagsResponseBodyTags `json:"Tags,omitempty" xml:"Tags,omitempty" type:"Struct"`
}

func (ListResourceTagsResponseBody) GoString

func (s ListResourceTagsResponseBody) GoString() string

func (*ListResourceTagsResponseBody) SetRequestId

func (*ListResourceTagsResponseBody) SetTags

func (ListResourceTagsResponseBody) String

type ListResourceTagsResponseBodyTags

type ListResourceTagsResponseBodyTags struct {
	Tag []*ListResourceTagsResponseBodyTagsTag `json:"Tag,omitempty" xml:"Tag,omitempty" type:"Repeated"`
}

func (ListResourceTagsResponseBodyTags) GoString

func (ListResourceTagsResponseBodyTags) String

type ListResourceTagsResponseBodyTagsTag

type ListResourceTagsResponseBodyTagsTag struct {
	// The globally unique ID of the CMK.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The tag key.
	TagKey *string `json:"TagKey,omitempty" xml:"TagKey,omitempty"`
	// The tag value.
	TagValue *string `json:"TagValue,omitempty" xml:"TagValue,omitempty"`
}

func (ListResourceTagsResponseBodyTagsTag) GoString

func (*ListResourceTagsResponseBodyTagsTag) SetKeyId

func (*ListResourceTagsResponseBodyTagsTag) SetTagKey

func (*ListResourceTagsResponseBodyTagsTag) SetTagValue

func (ListResourceTagsResponseBodyTagsTag) String

type ListSecretVersionIdsRequest

type ListSecretVersionIdsRequest struct {
	// Specifies whether to return deprecated secret versions.
	//
	// Valid values:
	//
	// *   false: no
	// *   true: yes
	//
	// Default value: false.
	IncludeDeprecated *string `json:"IncludeDeprecated,omitempty" xml:"IncludeDeprecated,omitempty"`
	// The number of the page to return. Default value: 1.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries to return on each page. Default value: 10.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (ListSecretVersionIdsRequest) GoString

func (s ListSecretVersionIdsRequest) GoString() string

func (*ListSecretVersionIdsRequest) SetIncludeDeprecated

func (*ListSecretVersionIdsRequest) SetPageNumber

func (*ListSecretVersionIdsRequest) SetPageSize

func (*ListSecretVersionIdsRequest) SetSecretName

func (ListSecretVersionIdsRequest) String

type ListSecretVersionIdsResponse

type ListSecretVersionIdsResponse struct {
	Headers    map[string]*string                `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                            `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ListSecretVersionIdsResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ListSecretVersionIdsResponse) GoString

func (s ListSecretVersionIdsResponse) GoString() string

func (*ListSecretVersionIdsResponse) SetBody

func (*ListSecretVersionIdsResponse) SetHeaders

func (*ListSecretVersionIdsResponse) SetStatusCode

func (ListSecretVersionIdsResponse) String

type ListSecretVersionIdsResponseBody

type ListSecretVersionIdsResponseBody struct {
	// The page number of the returned page.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries returned per page.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The number of entries returned on the current page.
	TotalCount *int32 `json:"TotalCount,omitempty" xml:"TotalCount,omitempty"`
	// The list of secret versions.
	VersionIds *ListSecretVersionIdsResponseBodyVersionIds `json:"VersionIds,omitempty" xml:"VersionIds,omitempty" type:"Struct"`
}

func (ListSecretVersionIdsResponseBody) GoString

func (*ListSecretVersionIdsResponseBody) SetPageNumber

func (*ListSecretVersionIdsResponseBody) SetPageSize

func (*ListSecretVersionIdsResponseBody) SetRequestId

func (*ListSecretVersionIdsResponseBody) SetSecretName

func (*ListSecretVersionIdsResponseBody) SetTotalCount

func (ListSecretVersionIdsResponseBody) String

type ListSecretVersionIdsResponseBodyVersionIds

type ListSecretVersionIdsResponseBodyVersionIds struct {
	VersionId []*ListSecretVersionIdsResponseBodyVersionIdsVersionId `json:"VersionId,omitempty" xml:"VersionId,omitempty" type:"Repeated"`
}

func (ListSecretVersionIdsResponseBodyVersionIds) GoString

func (ListSecretVersionIdsResponseBodyVersionIds) String

type ListSecretVersionIdsResponseBodyVersionIdsVersionId

type ListSecretVersionIdsResponseBodyVersionIdsVersionId struct {
	// The time when the secret version was created.
	CreateTime *string `json:"CreateTime,omitempty" xml:"CreateTime,omitempty"`
	// The version number.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
	// The stage labels that mark the secret version.
	VersionStages *ListSecretVersionIdsResponseBodyVersionIdsVersionIdVersionStages `json:"VersionStages,omitempty" xml:"VersionStages,omitempty" type:"Struct"`
}

func (ListSecretVersionIdsResponseBodyVersionIdsVersionId) GoString

func (*ListSecretVersionIdsResponseBodyVersionIdsVersionId) SetCreateTime

func (*ListSecretVersionIdsResponseBodyVersionIdsVersionId) SetVersionId

func (ListSecretVersionIdsResponseBodyVersionIdsVersionId) String

type ListSecretVersionIdsResponseBodyVersionIdsVersionIdVersionStages

type ListSecretVersionIdsResponseBodyVersionIdsVersionIdVersionStages struct {
	VersionStage []*string `json:"VersionStage,omitempty" xml:"VersionStage,omitempty" type:"Repeated"`
}

func (ListSecretVersionIdsResponseBodyVersionIdsVersionIdVersionStages) GoString

func (*ListSecretVersionIdsResponseBodyVersionIdsVersionIdVersionStages) SetVersionStage

func (ListSecretVersionIdsResponseBodyVersionIdsVersionIdVersionStages) String

type ListSecretsRequest

type ListSecretsRequest struct {
	// Specifies whether to return the resource tags of the secret. Valid values:
	//
	// *   true: returns the resource tags.
	// *   false: does not return the resource tags. This is the default value.
	FetchTags *string `json:"FetchTags,omitempty" xml:"FetchTags,omitempty"`
	// The secret filter. The filter consists of one or more key-value pairs. You can specify one key-value pair or leave this parameter empty. If you use one tag key or tag value to filter resources, up to 4,000 resources can be queried. If you want to query more than 4,000 resources, call the [ListResourceTags](~~120090~~) operation.
	//
	// *   Key
	//
	//     *   Description: the property that you want to filter.
	//
	//     *   Type: string.
	//
	//     *   Valid values:
	//
	//         *   SecretName: the secret name.
	//         *   Description: the description of the secret.
	//         *   TagKey: the tag key.
	//         *   TagValue: the tag value.
	//
	// *   Values
	//
	//     *   Description: the value to be included after filtering.
	//
	//     *   Type: string.
	//
	//     *   Length: 0 to 10.
	//
	//     *   Valid values:
	//
	//         *   If the Key field is set to SecretName, the value must be 1 to 192 characters in length and can contain letters, digits, and special characters `_ / + = . @ -`.
	//         *   If the Key field is set to Description, the value must be 1 to 256 characters in length.
	//         *   If the Key field is set to TagKey, the value must be 1 to 256 characters in length and can contain letters, digits, and special characters `/ _ - . + = @ :`.
	//         *   If the Key field is set to TagValue, the value must be 1 to 256 characters in length and can contain letters, numbers, and special characters `/ _ - . + = @ :`.
	//
	// The logical relationship between values of the Values field in a key-value pair is OR. Example: `[ {"Key":"SecretName", "Values":["sec1","sec2"]}]`. In this example, the semantics are `SecretName=sec 1 OR SecretName=sec 2`.
	Filters *string `json:"Filters,omitempty" xml:"Filters,omitempty"`
	// The number of the page to return.
	//
	// Pages start from page 1.
	//
	// Default value: 1.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries to return on each page.
	//
	// Valid values: 1 to 100.
	//
	// Default value: 10.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
}

func (ListSecretsRequest) GoString

func (s ListSecretsRequest) GoString() string

func (*ListSecretsRequest) SetFetchTags

func (s *ListSecretsRequest) SetFetchTags(v string) *ListSecretsRequest

func (*ListSecretsRequest) SetFilters

func (s *ListSecretsRequest) SetFilters(v string) *ListSecretsRequest

func (*ListSecretsRequest) SetPageNumber

func (s *ListSecretsRequest) SetPageNumber(v int32) *ListSecretsRequest

func (*ListSecretsRequest) SetPageSize

func (s *ListSecretsRequest) SetPageSize(v int32) *ListSecretsRequest

func (ListSecretsRequest) String

func (s ListSecretsRequest) String() string

type ListSecretsResponse

type ListSecretsResponse struct {
	Headers    map[string]*string       `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                   `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ListSecretsResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ListSecretsResponse) GoString

func (s ListSecretsResponse) GoString() string

func (*ListSecretsResponse) SetBody

func (*ListSecretsResponse) SetHeaders

func (s *ListSecretsResponse) SetHeaders(v map[string]*string) *ListSecretsResponse

func (*ListSecretsResponse) SetStatusCode

func (s *ListSecretsResponse) SetStatusCode(v int32) *ListSecretsResponse

func (ListSecretsResponse) String

func (s ListSecretsResponse) String() string

type ListSecretsResponseBody

type ListSecretsResponseBody struct {
	// The page number of the returned page.
	PageNumber *int32 `json:"PageNumber,omitempty" xml:"PageNumber,omitempty"`
	// The number of entries returned per page.
	PageSize *int32 `json:"PageSize,omitempty" xml:"PageSize,omitempty"`
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The list of secrets.
	SecretList *ListSecretsResponseBodySecretList `json:"SecretList,omitempty" xml:"SecretList,omitempty" type:"Struct"`
	// The number of returned secrets.
	TotalCount *int32 `json:"TotalCount,omitempty" xml:"TotalCount,omitempty"`
}

func (ListSecretsResponseBody) GoString

func (s ListSecretsResponseBody) GoString() string

func (*ListSecretsResponseBody) SetPageNumber

func (*ListSecretsResponseBody) SetPageSize

func (*ListSecretsResponseBody) SetRequestId

func (*ListSecretsResponseBody) SetSecretList

func (*ListSecretsResponseBody) SetTotalCount

func (ListSecretsResponseBody) String

func (s ListSecretsResponseBody) String() string

type ListSecretsResponseBodySecretList

type ListSecretsResponseBodySecretList struct {
	Secret []*ListSecretsResponseBodySecretListSecret `json:"Secret,omitempty" xml:"Secret,omitempty" type:"Repeated"`
}

func (ListSecretsResponseBodySecretList) GoString

func (ListSecretsResponseBodySecretList) String

type ListSecretsResponseBodySecretListSecret

type ListSecretsResponseBodySecretListSecret struct {
	// The time when the secret was created.
	CreateTime *string `json:"CreateTime,omitempty" xml:"CreateTime,omitempty"`
	// The time when the secret is scheduled to be deleted.
	PlannedDeleteTime *string `json:"PlannedDeleteTime,omitempty" xml:"PlannedDeleteTime,omitempty"`
	// The secret name.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The type of the secret. Valid values:
	//
	// *   Generic: indicates a generic secret.
	// *   Rds: indicates a managed ApsaraDB RDS secret.
	SecretType *string `json:"SecretType,omitempty" xml:"SecretType,omitempty"`
	// The resource tags of the secret.
	//
	// This parameter is not returned if you set the FetchTags parameter to false or do not specify the FetchTags parameter.
	Tags *ListSecretsResponseBodySecretListSecretTags `json:"Tags,omitempty" xml:"Tags,omitempty" type:"Struct"`
	// The time when the secret was updated.
	UpdateTime *string `json:"UpdateTime,omitempty" xml:"UpdateTime,omitempty"`
}

func (ListSecretsResponseBodySecretListSecret) GoString

func (*ListSecretsResponseBodySecretListSecret) SetCreateTime

func (*ListSecretsResponseBodySecretListSecret) SetPlannedDeleteTime

func (*ListSecretsResponseBodySecretListSecret) SetSecretName

func (*ListSecretsResponseBodySecretListSecret) SetSecretType

func (*ListSecretsResponseBodySecretListSecret) SetUpdateTime

func (ListSecretsResponseBodySecretListSecret) String

type ListSecretsResponseBodySecretListSecretTags

type ListSecretsResponseBodySecretListSecretTags struct {
	Tag []*ListSecretsResponseBodySecretListSecretTagsTag `json:"Tag,omitempty" xml:"Tag,omitempty" type:"Repeated"`
}

func (ListSecretsResponseBodySecretListSecretTags) GoString

func (ListSecretsResponseBodySecretListSecretTags) String

type ListSecretsResponseBodySecretListSecretTagsTag

type ListSecretsResponseBodySecretListSecretTagsTag struct {
	// The tag key.
	TagKey *string `json:"TagKey,omitempty" xml:"TagKey,omitempty"`
	// The tag value.
	TagValue *string `json:"TagValue,omitempty" xml:"TagValue,omitempty"`
}

func (ListSecretsResponseBodySecretListSecretTagsTag) GoString

func (*ListSecretsResponseBodySecretListSecretTagsTag) SetTagKey

func (*ListSecretsResponseBodySecretListSecretTagsTag) SetTagValue

func (ListSecretsResponseBodySecretListSecretTagsTag) String

type OpenKmsServiceResponse

type OpenKmsServiceResponse struct {
	Headers    map[string]*string          `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                      `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *OpenKmsServiceResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (OpenKmsServiceResponse) GoString

func (s OpenKmsServiceResponse) GoString() string

func (*OpenKmsServiceResponse) SetBody

func (*OpenKmsServiceResponse) SetHeaders

func (*OpenKmsServiceResponse) SetStatusCode

func (OpenKmsServiceResponse) String

func (s OpenKmsServiceResponse) String() string

type OpenKmsServiceResponseBody

type OpenKmsServiceResponseBody struct {
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (OpenKmsServiceResponseBody) GoString

func (s OpenKmsServiceResponseBody) GoString() string

func (*OpenKmsServiceResponseBody) SetRequestId

func (OpenKmsServiceResponseBody) String

type PutSecretValueRequest

type PutSecretValueRequest struct {
	// The secret value. The value is encrypted and then stored in the new version.
	SecretData *string `json:"SecretData,omitempty" xml:"SecretData,omitempty"`
	// The type of the secret value. Valid values:
	//
	// *   text: This is the default value.
	// *   binary
	SecretDataType *string `json:"SecretDataType,omitempty" xml:"SecretDataType,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The new version of the secret value. Version numbers must be unique in each secret.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
	// The stage labels that are used to mark the new version. If you do not specify this parameter, Secrets Manager marks the new version with ACSCurrent.
	VersionStages *string `json:"VersionStages,omitempty" xml:"VersionStages,omitempty"`
}

func (PutSecretValueRequest) GoString

func (s PutSecretValueRequest) GoString() string

func (*PutSecretValueRequest) SetSecretData

func (s *PutSecretValueRequest) SetSecretData(v string) *PutSecretValueRequest

func (*PutSecretValueRequest) SetSecretDataType

func (s *PutSecretValueRequest) SetSecretDataType(v string) *PutSecretValueRequest

func (*PutSecretValueRequest) SetSecretName

func (s *PutSecretValueRequest) SetSecretName(v string) *PutSecretValueRequest

func (*PutSecretValueRequest) SetVersionId

func (*PutSecretValueRequest) SetVersionStages

func (s *PutSecretValueRequest) SetVersionStages(v string) *PutSecretValueRequest

func (PutSecretValueRequest) String

func (s PutSecretValueRequest) String() string

type PutSecretValueResponse

type PutSecretValueResponse struct {
	Headers    map[string]*string          `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                      `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *PutSecretValueResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (PutSecretValueResponse) GoString

func (s PutSecretValueResponse) GoString() string

func (*PutSecretValueResponse) SetBody

func (*PutSecretValueResponse) SetHeaders

func (*PutSecretValueResponse) SetStatusCode

func (PutSecretValueResponse) String

func (s PutSecretValueResponse) String() string

type PutSecretValueResponseBody

type PutSecretValueResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The new version of the secret value.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
	// The stage labels that are used to mark the new version.
	VersionStages *PutSecretValueResponseBodyVersionStages `json:"VersionStages,omitempty" xml:"VersionStages,omitempty" type:"Struct"`
}

func (PutSecretValueResponseBody) GoString

func (s PutSecretValueResponseBody) GoString() string

func (*PutSecretValueResponseBody) SetRequestId

func (*PutSecretValueResponseBody) SetSecretName

func (*PutSecretValueResponseBody) SetVersionId

func (*PutSecretValueResponseBody) SetVersionStages

func (PutSecretValueResponseBody) String

type PutSecretValueResponseBodyVersionStages

type PutSecretValueResponseBodyVersionStages struct {
	VersionStage []*string `json:"VersionStage,omitempty" xml:"VersionStage,omitempty" type:"Repeated"`
}

func (PutSecretValueResponseBodyVersionStages) GoString

func (*PutSecretValueResponseBodyVersionStages) SetVersionStage

func (PutSecretValueResponseBodyVersionStages) String

type ReEncryptRequest

type ReEncryptRequest struct {
	// The ciphertext that you want to re-encrypt.
	//
	// You can set this parameter to the ciphertext that is returned after a symmetric or asymmetric encryption operation.
	//
	// *   Symmetric encryption: the ciphertext returned after you call the [Encrypt](~~28949~~), [GenerateDataKey](~~28948~~), [GenerateDataKeyWithoutPlaintext](~~134043~~), or [GenerateAndExportDataKey](~~176804~~) operation
	// *   Asymmetric encryption: the public key-encrypted ciphertext returned after you call the [GenerateAndExportDataKey](~~176804~~) operation, or the ciphertext encrypted by using the public key of an asymmetric key pair outside KMS
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// A JSON string that consists of key-value pairs. This parameter specifies the EncryptionContext that is used to re-encrypt the decrypted data or data key.
	DestinationEncryptionContext map[string]interface{} `json:"DestinationEncryptionContext,omitempty" xml:"DestinationEncryptionContext,omitempty"`
	// The ID of the symmetric CMK that is used to re-encrypt the ciphertext after the ciphertext is decrypted.
	DestinationKeyId *string `json:"DestinationKeyId,omitempty" xml:"DestinationKeyId,omitempty"`
	// The encryption algorithm based on which the public key is used to encrypt the ciphertext specified by CiphertextBlob. For more information about encryption algorithms, see [AsymmetricDecrypt](~~148130~~).
	//
	// Valid values:
	//
	// *   RSAES_OAEP_SHA\_256
	// *   RSAES_OAEP_SHA\_1
	// *   SM2PKE
	//
	// >  If you set CiphertextBlob to the public key-encrypted ciphertext that is returned after an asymmetric encryption operation, specify this parameter.
	SourceEncryptionAlgorithm *string `json:"SourceEncryptionAlgorithm,omitempty" xml:"SourceEncryptionAlgorithm,omitempty"`
	// A JSON string that consists of key-value pairs. If you specify EncryptionContext when you call the [Encrypt](~~28949~~), [GenerateDataKey](~~28948~~), [GenerateDataKeyWithoutPlaintext](~~134043~~), or [GenerateAndExportDataKey](~~176804~~) operation to encrypt the data or data key, an equivalent value is required here. For more information, see [EncryptionContext](~~42975~~).
	//
	// >  If you set CiphertextBlob to the ciphertext that is returned after a symmetric encryption operation, specify this parameter.
	SourceEncryptionContext map[string]interface{} `json:"SourceEncryptionContext,omitempty" xml:"SourceEncryptionContext,omitempty"`
	// The ID of the CMK that is used to decrypt the ciphertext.
	//
	// This parameter is the globally unique ID of the CMK.
	//
	// >  If you set CiphertextBlob to the public key-encrypted ciphertext that is returned after an asymmetric encryption operation, specify this parameter.
	SourceKeyId *string `json:"SourceKeyId,omitempty" xml:"SourceKeyId,omitempty"`
	// The ID of the CMK version that is used to decrypt the ciphertext.
	//
	// >  If you set CiphertextBlob to the public key-encrypted ciphertext that is returned after an asymmetric encryption operation, specify this parameter.
	SourceKeyVersionId *string `json:"SourceKeyVersionId,omitempty" xml:"SourceKeyVersionId,omitempty"`
}

func (ReEncryptRequest) GoString

func (s ReEncryptRequest) GoString() string

func (*ReEncryptRequest) SetCiphertextBlob

func (s *ReEncryptRequest) SetCiphertextBlob(v string) *ReEncryptRequest

func (*ReEncryptRequest) SetDestinationEncryptionContext

func (s *ReEncryptRequest) SetDestinationEncryptionContext(v map[string]interface{}) *ReEncryptRequest

func (*ReEncryptRequest) SetDestinationKeyId

func (s *ReEncryptRequest) SetDestinationKeyId(v string) *ReEncryptRequest

func (*ReEncryptRequest) SetSourceEncryptionAlgorithm

func (s *ReEncryptRequest) SetSourceEncryptionAlgorithm(v string) *ReEncryptRequest

func (*ReEncryptRequest) SetSourceEncryptionContext

func (s *ReEncryptRequest) SetSourceEncryptionContext(v map[string]interface{}) *ReEncryptRequest

func (*ReEncryptRequest) SetSourceKeyId

func (s *ReEncryptRequest) SetSourceKeyId(v string) *ReEncryptRequest

func (*ReEncryptRequest) SetSourceKeyVersionId

func (s *ReEncryptRequest) SetSourceKeyVersionId(v string) *ReEncryptRequest

func (ReEncryptRequest) String

func (s ReEncryptRequest) String() string

type ReEncryptResponse

type ReEncryptResponse struct {
	Headers    map[string]*string     `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                 `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ReEncryptResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ReEncryptResponse) GoString

func (s ReEncryptResponse) GoString() string

func (*ReEncryptResponse) SetBody

func (*ReEncryptResponse) SetHeaders

func (s *ReEncryptResponse) SetHeaders(v map[string]*string) *ReEncryptResponse

func (*ReEncryptResponse) SetStatusCode

func (s *ReEncryptResponse) SetStatusCode(v int32) *ReEncryptResponse

func (ReEncryptResponse) String

func (s ReEncryptResponse) String() string

type ReEncryptResponseBody

type ReEncryptResponseBody struct {
	// The ciphertext re-encrypted.
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// The ID of the CMK that is used to decrypt the original ciphertext.
	//
	// This parameter is the globally unique ID of the CMK.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The ID of the CMK version that is used to decrypt the original ciphertext.
	KeyVersionId *string `json:"KeyVersionId,omitempty" xml:"KeyVersionId,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (ReEncryptResponseBody) GoString

func (s ReEncryptResponseBody) GoString() string

func (*ReEncryptResponseBody) SetCiphertextBlob

func (s *ReEncryptResponseBody) SetCiphertextBlob(v string) *ReEncryptResponseBody

func (*ReEncryptResponseBody) SetKeyId

func (*ReEncryptResponseBody) SetKeyVersionId

func (s *ReEncryptResponseBody) SetKeyVersionId(v string) *ReEncryptResponseBody

func (*ReEncryptResponseBody) SetRequestId

func (ReEncryptResponseBody) String

func (s ReEncryptResponseBody) String() string

type ReEncryptShrinkRequest

type ReEncryptShrinkRequest struct {
	// The ciphertext that you want to re-encrypt.
	//
	// You can set this parameter to the ciphertext that is returned after a symmetric or asymmetric encryption operation.
	//
	// *   Symmetric encryption: the ciphertext returned after you call the [Encrypt](~~28949~~), [GenerateDataKey](~~28948~~), [GenerateDataKeyWithoutPlaintext](~~134043~~), or [GenerateAndExportDataKey](~~176804~~) operation
	// *   Asymmetric encryption: the public key-encrypted ciphertext returned after you call the [GenerateAndExportDataKey](~~176804~~) operation, or the ciphertext encrypted by using the public key of an asymmetric key pair outside KMS
	CiphertextBlob *string `json:"CiphertextBlob,omitempty" xml:"CiphertextBlob,omitempty"`
	// A JSON string that consists of key-value pairs. This parameter specifies the EncryptionContext that is used to re-encrypt the decrypted data or data key.
	DestinationEncryptionContextShrink *string `json:"DestinationEncryptionContext,omitempty" xml:"DestinationEncryptionContext,omitempty"`
	// The ID of the symmetric CMK that is used to re-encrypt the ciphertext after the ciphertext is decrypted.
	DestinationKeyId *string `json:"DestinationKeyId,omitempty" xml:"DestinationKeyId,omitempty"`
	// The encryption algorithm based on which the public key is used to encrypt the ciphertext specified by CiphertextBlob. For more information about encryption algorithms, see [AsymmetricDecrypt](~~148130~~).
	//
	// Valid values:
	//
	// *   RSAES_OAEP_SHA\_256
	// *   RSAES_OAEP_SHA\_1
	// *   SM2PKE
	//
	// >  If you set CiphertextBlob to the public key-encrypted ciphertext that is returned after an asymmetric encryption operation, specify this parameter.
	SourceEncryptionAlgorithm *string `json:"SourceEncryptionAlgorithm,omitempty" xml:"SourceEncryptionAlgorithm,omitempty"`
	// A JSON string that consists of key-value pairs. If you specify EncryptionContext when you call the [Encrypt](~~28949~~), [GenerateDataKey](~~28948~~), [GenerateDataKeyWithoutPlaintext](~~134043~~), or [GenerateAndExportDataKey](~~176804~~) operation to encrypt the data or data key, an equivalent value is required here. For more information, see [EncryptionContext](~~42975~~).
	//
	// >  If you set CiphertextBlob to the ciphertext that is returned after a symmetric encryption operation, specify this parameter.
	SourceEncryptionContextShrink *string `json:"SourceEncryptionContext,omitempty" xml:"SourceEncryptionContext,omitempty"`
	// The ID of the CMK that is used to decrypt the ciphertext.
	//
	// This parameter is the globally unique ID of the CMK.
	//
	// >  If you set CiphertextBlob to the public key-encrypted ciphertext that is returned after an asymmetric encryption operation, specify this parameter.
	SourceKeyId *string `json:"SourceKeyId,omitempty" xml:"SourceKeyId,omitempty"`
	// The ID of the CMK version that is used to decrypt the ciphertext.
	//
	// >  If you set CiphertextBlob to the public key-encrypted ciphertext that is returned after an asymmetric encryption operation, specify this parameter.
	SourceKeyVersionId *string `json:"SourceKeyVersionId,omitempty" xml:"SourceKeyVersionId,omitempty"`
}

func (ReEncryptShrinkRequest) GoString

func (s ReEncryptShrinkRequest) GoString() string

func (*ReEncryptShrinkRequest) SetCiphertextBlob

func (s *ReEncryptShrinkRequest) SetCiphertextBlob(v string) *ReEncryptShrinkRequest

func (*ReEncryptShrinkRequest) SetDestinationEncryptionContextShrink

func (s *ReEncryptShrinkRequest) SetDestinationEncryptionContextShrink(v string) *ReEncryptShrinkRequest

func (*ReEncryptShrinkRequest) SetDestinationKeyId

func (s *ReEncryptShrinkRequest) SetDestinationKeyId(v string) *ReEncryptShrinkRequest

func (*ReEncryptShrinkRequest) SetSourceEncryptionAlgorithm

func (s *ReEncryptShrinkRequest) SetSourceEncryptionAlgorithm(v string) *ReEncryptShrinkRequest

func (*ReEncryptShrinkRequest) SetSourceEncryptionContextShrink

func (s *ReEncryptShrinkRequest) SetSourceEncryptionContextShrink(v string) *ReEncryptShrinkRequest

func (*ReEncryptShrinkRequest) SetSourceKeyId

func (*ReEncryptShrinkRequest) SetSourceKeyVersionId

func (s *ReEncryptShrinkRequest) SetSourceKeyVersionId(v string) *ReEncryptShrinkRequest

func (ReEncryptShrinkRequest) String

func (s ReEncryptShrinkRequest) String() string

type RestoreSecretRequest

type RestoreSecretRequest struct {
	// The name of the secret you want to restore.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (RestoreSecretRequest) GoString

func (s RestoreSecretRequest) GoString() string

func (*RestoreSecretRequest) SetSecretName

func (s *RestoreSecretRequest) SetSecretName(v string) *RestoreSecretRequest

func (RestoreSecretRequest) String

func (s RestoreSecretRequest) String() string

type RestoreSecretResponse

type RestoreSecretResponse struct {
	Headers    map[string]*string         `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                     `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *RestoreSecretResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (RestoreSecretResponse) GoString

func (s RestoreSecretResponse) GoString() string

func (*RestoreSecretResponse) SetBody

func (*RestoreSecretResponse) SetHeaders

func (*RestoreSecretResponse) SetStatusCode

func (s *RestoreSecretResponse) SetStatusCode(v int32) *RestoreSecretResponse

func (RestoreSecretResponse) String

func (s RestoreSecretResponse) String() string

type RestoreSecretResponseBody

type RestoreSecretResponseBody struct {
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (RestoreSecretResponseBody) GoString

func (s RestoreSecretResponseBody) GoString() string

func (*RestoreSecretResponseBody) SetRequestId

func (*RestoreSecretResponseBody) SetSecretName

func (RestoreSecretResponseBody) String

func (s RestoreSecretResponseBody) String() string

type RotateSecretRequest

type RotateSecretRequest struct {
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The version number of the secret after the secret is rotated.
	//
	// >  The version number is used to ensure the idempotence of the request. Secrets Manager uses this version number to prevent your application from creating the same version of the secret when the application retries a request. If a version number already exists, Secrets Manager ignores the request for rotation and returns a success message.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
}

func (RotateSecretRequest) GoString

func (s RotateSecretRequest) GoString() string

func (*RotateSecretRequest) SetSecretName

func (s *RotateSecretRequest) SetSecretName(v string) *RotateSecretRequest

func (*RotateSecretRequest) SetVersionId

func (s *RotateSecretRequest) SetVersionId(v string) *RotateSecretRequest

func (RotateSecretRequest) String

func (s RotateSecretRequest) String() string

type RotateSecretResponse

type RotateSecretResponse struct {
	Headers    map[string]*string        `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                    `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *RotateSecretResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (RotateSecretResponse) GoString

func (s RotateSecretResponse) GoString() string

func (*RotateSecretResponse) SetBody

func (*RotateSecretResponse) SetHeaders

func (s *RotateSecretResponse) SetHeaders(v map[string]*string) *RotateSecretResponse

func (*RotateSecretResponse) SetStatusCode

func (s *RotateSecretResponse) SetStatusCode(v int32) *RotateSecretResponse

func (RotateSecretResponse) String

func (s RotateSecretResponse) String() string

type RotateSecretResponseBody

type RotateSecretResponseBody struct {
	// The Alibaba Cloud Resource Name (ARN) of the secret.
	Arn *string `json:"Arn,omitempty" xml:"Arn,omitempty"`
	// The ID of the request.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The version number of the secret after the secret is rotated.
	VersionId *string `json:"VersionId,omitempty" xml:"VersionId,omitempty"`
}

func (RotateSecretResponseBody) GoString

func (s RotateSecretResponseBody) GoString() string

func (*RotateSecretResponseBody) SetArn

func (*RotateSecretResponseBody) SetRequestId

func (*RotateSecretResponseBody) SetSecretName

func (*RotateSecretResponseBody) SetVersionId

func (RotateSecretResponseBody) String

func (s RotateSecretResponseBody) String() string

type ScheduleKeyDeletionRequest

type ScheduleKeyDeletionRequest struct {
	// The ID of the customer master key (CMK). The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The scheduled period after which the CMK is deleted. During this period, the CMK is in the PendingDeletion state. After this period ends, you cannot cancel the key deletion task.
	//
	// Valid values: 7 to 366.
	//
	// Unit: days.
	PendingWindowInDays *int32 `json:"PendingWindowInDays,omitempty" xml:"PendingWindowInDays,omitempty"`
}

func (ScheduleKeyDeletionRequest) GoString

func (s ScheduleKeyDeletionRequest) GoString() string

func (*ScheduleKeyDeletionRequest) SetKeyId

func (*ScheduleKeyDeletionRequest) SetPendingWindowInDays

func (s *ScheduleKeyDeletionRequest) SetPendingWindowInDays(v int32) *ScheduleKeyDeletionRequest

func (ScheduleKeyDeletionRequest) String

type ScheduleKeyDeletionResponse

type ScheduleKeyDeletionResponse struct {
	Headers    map[string]*string               `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                           `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *ScheduleKeyDeletionResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (ScheduleKeyDeletionResponse) GoString

func (s ScheduleKeyDeletionResponse) GoString() string

func (*ScheduleKeyDeletionResponse) SetBody

func (*ScheduleKeyDeletionResponse) SetHeaders

func (*ScheduleKeyDeletionResponse) SetStatusCode

func (ScheduleKeyDeletionResponse) String

type ScheduleKeyDeletionResponseBody

type ScheduleKeyDeletionResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (ScheduleKeyDeletionResponseBody) GoString

func (*ScheduleKeyDeletionResponseBody) SetRequestId

func (ScheduleKeyDeletionResponseBody) String

type SetDeletionProtectionRequest

type SetDeletionProtectionRequest struct {
	// The description of deletion protection.
	//
	// >  This parameter takes effect only when you set the EnableDeletionProtection parameter to true.
	DeletionProtectionDescription *string `json:"DeletionProtectionDescription,omitempty" xml:"DeletionProtectionDescription,omitempty"`
	// Specifies whether to enable deletion protection. Valid values:
	//
	// *   true: enables deletion protection.
	// *   false: disables deletion protection.
	EnableDeletionProtection *bool `json:"EnableDeletionProtection,omitempty" xml:"EnableDeletionProtection,omitempty"`
	// The ARN of the CMK for which you want to set deletion protection.
	//
	// You can call the [DescribeKey](~~28952~~) operation to query the CMK ARN.
	ProtectedResourceArn *string `json:"ProtectedResourceArn,omitempty" xml:"ProtectedResourceArn,omitempty"`
}

func (SetDeletionProtectionRequest) GoString

func (s SetDeletionProtectionRequest) GoString() string

func (*SetDeletionProtectionRequest) SetDeletionProtectionDescription

func (s *SetDeletionProtectionRequest) SetDeletionProtectionDescription(v string) *SetDeletionProtectionRequest

func (*SetDeletionProtectionRequest) SetEnableDeletionProtection

func (s *SetDeletionProtectionRequest) SetEnableDeletionProtection(v bool) *SetDeletionProtectionRequest

func (*SetDeletionProtectionRequest) SetProtectedResourceArn

func (s *SetDeletionProtectionRequest) SetProtectedResourceArn(v string) *SetDeletionProtectionRequest

func (SetDeletionProtectionRequest) String

type SetDeletionProtectionResponse

type SetDeletionProtectionResponse struct {
	Headers    map[string]*string                 `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                             `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *SetDeletionProtectionResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (SetDeletionProtectionResponse) GoString

func (*SetDeletionProtectionResponse) SetBody

func (*SetDeletionProtectionResponse) SetHeaders

func (*SetDeletionProtectionResponse) SetStatusCode

func (SetDeletionProtectionResponse) String

type SetDeletionProtectionResponseBody

type SetDeletionProtectionResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (SetDeletionProtectionResponseBody) GoString

func (*SetDeletionProtectionResponseBody) SetRequestId

func (SetDeletionProtectionResponseBody) String

type TagResourceRequest

type TagResourceRequest struct {
	// The ID of the certificate.
	//
	// >  You can configure only one of the KeyId, SecretName, and CertificateId parameters.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The ID of the customer master key (CMK). The ID must be globally unique.
	//
	// >  You can configure only one of the KeyId, SecretName, and CertificateId parameters.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The name of the secret.
	//
	// >  You can configure only one of the KeyId, SecretName, and CertificateId parameters.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// One or more tags that you want to add. The value is in the array format.
	//
	// Tag attributes:
	//
	// *   TagKey: the tag key.
	// *   TagValue: the tag value.
	Tags *string `json:"Tags,omitempty" xml:"Tags,omitempty"`
}

func (TagResourceRequest) GoString

func (s TagResourceRequest) GoString() string

func (*TagResourceRequest) SetCertificateId

func (s *TagResourceRequest) SetCertificateId(v string) *TagResourceRequest

func (*TagResourceRequest) SetKeyId

func (*TagResourceRequest) SetSecretName

func (s *TagResourceRequest) SetSecretName(v string) *TagResourceRequest

func (*TagResourceRequest) SetTags

func (TagResourceRequest) String

func (s TagResourceRequest) String() string

type TagResourceResponse

type TagResourceResponse struct {
	Headers    map[string]*string       `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                   `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *TagResourceResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (TagResourceResponse) GoString

func (s TagResourceResponse) GoString() string

func (*TagResourceResponse) SetBody

func (*TagResourceResponse) SetHeaders

func (s *TagResourceResponse) SetHeaders(v map[string]*string) *TagResourceResponse

func (*TagResourceResponse) SetStatusCode

func (s *TagResourceResponse) SetStatusCode(v int32) *TagResourceResponse

func (TagResourceResponse) String

func (s TagResourceResponse) String() string

type TagResourceResponseBody

type TagResourceResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (TagResourceResponseBody) GoString

func (s TagResourceResponseBody) GoString() string

func (*TagResourceResponseBody) SetRequestId

func (TagResourceResponseBody) String

func (s TagResourceResponseBody) String() string

type UntagResourceRequest

type UntagResourceRequest struct {
	// The ID of the certificate.
	//
	// >  You can configure only one of the KeyId, SecretName, and CertificateId parameters.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The ID of the customer master key (CMK). The ID must be globally unique.
	//
	// >  You can configure only one of the KeyId, SecretName, and CertificateId parameters.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The name of the secret.
	//
	// >  You can configure only one of the KeyId, SecretName, and CertificateId parameters.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// One or more tag keys. Separate multiple tag keys with commas (,).
	//
	// You need to specify only the tag keys, not the tag values.
	//
	// Each tag key must be 1 to 128 bytes in length.
	TagKeys *string `json:"TagKeys,omitempty" xml:"TagKeys,omitempty"`
}

func (UntagResourceRequest) GoString

func (s UntagResourceRequest) GoString() string

func (*UntagResourceRequest) SetCertificateId

func (s *UntagResourceRequest) SetCertificateId(v string) *UntagResourceRequest

func (*UntagResourceRequest) SetKeyId

func (*UntagResourceRequest) SetSecretName

func (s *UntagResourceRequest) SetSecretName(v string) *UntagResourceRequest

func (*UntagResourceRequest) SetTagKeys

func (UntagResourceRequest) String

func (s UntagResourceRequest) String() string

type UntagResourceResponse

type UntagResourceResponse struct {
	Headers    map[string]*string         `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                     `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UntagResourceResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UntagResourceResponse) GoString

func (s UntagResourceResponse) GoString() string

func (*UntagResourceResponse) SetBody

func (*UntagResourceResponse) SetHeaders

func (*UntagResourceResponse) SetStatusCode

func (s *UntagResourceResponse) SetStatusCode(v int32) *UntagResourceResponse

func (UntagResourceResponse) String

func (s UntagResourceResponse) String() string

type UntagResourceResponseBody

type UntagResourceResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (UntagResourceResponseBody) GoString

func (s UntagResourceResponseBody) GoString() string

func (*UntagResourceResponseBody) SetRequestId

func (UntagResourceResponseBody) String

func (s UntagResourceResponseBody) String() string

type UpdateAliasRequest

type UpdateAliasRequest struct {
	// The alias that you want to bind.
	//
	// The value must be 1 to 255 characters in length and must include the alias/ prefix.
	AliasName *string `json:"AliasName,omitempty" xml:"AliasName,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (UpdateAliasRequest) GoString

func (s UpdateAliasRequest) GoString() string

func (*UpdateAliasRequest) SetAliasName

func (s *UpdateAliasRequest) SetAliasName(v string) *UpdateAliasRequest

func (*UpdateAliasRequest) SetKeyId

func (UpdateAliasRequest) String

func (s UpdateAliasRequest) String() string

type UpdateAliasResponse

type UpdateAliasResponse struct {
	Headers    map[string]*string       `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                   `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UpdateAliasResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UpdateAliasResponse) GoString

func (s UpdateAliasResponse) GoString() string

func (*UpdateAliasResponse) SetBody

func (*UpdateAliasResponse) SetHeaders

func (s *UpdateAliasResponse) SetHeaders(v map[string]*string) *UpdateAliasResponse

func (*UpdateAliasResponse) SetStatusCode

func (s *UpdateAliasResponse) SetStatusCode(v int32) *UpdateAliasResponse

func (UpdateAliasResponse) String

func (s UpdateAliasResponse) String() string

type UpdateAliasResponseBody

type UpdateAliasResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (UpdateAliasResponseBody) GoString

func (s UpdateAliasResponseBody) GoString() string

func (*UpdateAliasResponseBody) SetRequestId

func (UpdateAliasResponseBody) String

func (s UpdateAliasResponseBody) String() string

type UpdateCertificateStatusRequest

type UpdateCertificateStatusRequest struct {
	// The ID of the certificate. The ID must be globally unique in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
	// The status of the certificate. Valid values:
	//
	// *   INACTIVE: The certificate is disabled.
	//
	// *   ACTIVE: The certificate is enabled.
	//
	// *   REVOKED: The certificate is revoked.
	//
	// > If the certificate is in the REVOKED state, you can use the certificate only to verify a signature, but not to generate a signature.
	Status *string `json:"Status,omitempty" xml:"Status,omitempty"`
}

func (UpdateCertificateStatusRequest) GoString

func (*UpdateCertificateStatusRequest) SetCertificateId

func (*UpdateCertificateStatusRequest) SetStatus

func (UpdateCertificateStatusRequest) String

type UpdateCertificateStatusResponse

type UpdateCertificateStatusResponse struct {
	Headers    map[string]*string                   `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                               `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UpdateCertificateStatusResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UpdateCertificateStatusResponse) GoString

func (*UpdateCertificateStatusResponse) SetHeaders

func (*UpdateCertificateStatusResponse) SetStatusCode

func (UpdateCertificateStatusResponse) String

type UpdateCertificateStatusResponseBody

type UpdateCertificateStatusResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (UpdateCertificateStatusResponseBody) GoString

func (*UpdateCertificateStatusResponseBody) SetRequestId

func (UpdateCertificateStatusResponseBody) String

type UpdateKeyDescriptionRequest

type UpdateKeyDescriptionRequest struct {
	// The description of the CMK. This description includes the purpose of the CMK, such as the types of data that you want to protect and applications that can use the CMK.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// The ID of the CMK. The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
}

func (UpdateKeyDescriptionRequest) GoString

func (s UpdateKeyDescriptionRequest) GoString() string

func (*UpdateKeyDescriptionRequest) SetDescription

func (*UpdateKeyDescriptionRequest) SetKeyId

func (UpdateKeyDescriptionRequest) String

type UpdateKeyDescriptionResponse

type UpdateKeyDescriptionResponse struct {
	Headers    map[string]*string                `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                            `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UpdateKeyDescriptionResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UpdateKeyDescriptionResponse) GoString

func (s UpdateKeyDescriptionResponse) GoString() string

func (*UpdateKeyDescriptionResponse) SetBody

func (*UpdateKeyDescriptionResponse) SetHeaders

func (*UpdateKeyDescriptionResponse) SetStatusCode

func (UpdateKeyDescriptionResponse) String

type UpdateKeyDescriptionResponseBody

type UpdateKeyDescriptionResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (UpdateKeyDescriptionResponseBody) GoString

func (*UpdateKeyDescriptionResponseBody) SetRequestId

func (UpdateKeyDescriptionResponseBody) String

type UpdateRotationPolicyRequest

type UpdateRotationPolicyRequest struct {
	// Specifies whether to enable automatic key rotation. Valid values:
	//
	// *   true: enables automatic key rotation.
	// *   false: disables automatic key rotation.
	EnableAutomaticRotation *bool `json:"EnableAutomaticRotation,omitempty" xml:"EnableAutomaticRotation,omitempty"`
	// The ID of the customer master key (CMK). The ID must be globally unique.
	KeyId *string `json:"KeyId,omitempty" xml:"KeyId,omitempty"`
	// The period of automatic key rotation. Specify the value in the integer\[unit] format. The following units are supported: d (day), h (hour), m (minute), and s (second). For example, you can use either 7d or 604800s to specify a seven-day period. The period can range from 7 days to 730 days.
	//
	// >  If you set the EnableAutomaticRotation parameter to true, you must also specify this parameter. If you set the EnableAutomaticRotation parameter to false, you can leave this parameter unspecified.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
}

func (UpdateRotationPolicyRequest) GoString

func (s UpdateRotationPolicyRequest) GoString() string

func (*UpdateRotationPolicyRequest) SetEnableAutomaticRotation

func (s *UpdateRotationPolicyRequest) SetEnableAutomaticRotation(v bool) *UpdateRotationPolicyRequest

func (*UpdateRotationPolicyRequest) SetKeyId

func (*UpdateRotationPolicyRequest) SetRotationInterval

func (UpdateRotationPolicyRequest) String

type UpdateRotationPolicyResponse

type UpdateRotationPolicyResponse struct {
	Headers    map[string]*string                `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                            `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UpdateRotationPolicyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UpdateRotationPolicyResponse) GoString

func (s UpdateRotationPolicyResponse) GoString() string

func (*UpdateRotationPolicyResponse) SetBody

func (*UpdateRotationPolicyResponse) SetHeaders

func (*UpdateRotationPolicyResponse) SetStatusCode

func (UpdateRotationPolicyResponse) String

type UpdateRotationPolicyResponseBody

type UpdateRotationPolicyResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (UpdateRotationPolicyResponseBody) GoString

func (*UpdateRotationPolicyResponseBody) SetRequestId

func (UpdateRotationPolicyResponseBody) String

type UpdateSecretRequest

type UpdateSecretRequest struct {
	ExtendedConfig *UpdateSecretRequestExtendedConfig `json:"ExtendedConfig,omitempty" xml:"ExtendedConfig,omitempty" type:"Struct"`
	// The description of the secret.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (UpdateSecretRequest) GoString

func (s UpdateSecretRequest) GoString() string

func (*UpdateSecretRequest) SetDescription

func (s *UpdateSecretRequest) SetDescription(v string) *UpdateSecretRequest

func (*UpdateSecretRequest) SetExtendedConfig

func (*UpdateSecretRequest) SetSecretName

func (s *UpdateSecretRequest) SetSecretName(v string) *UpdateSecretRequest

func (UpdateSecretRequest) String

func (s UpdateSecretRequest) String() string

type UpdateSecretRequestExtendedConfig

type UpdateSecretRequestExtendedConfig struct {
	// The custom data in the extended configuration of the secret.
	//
	// >
	// *   If this parameter is specified, the existing extended configuration of the secret is updated.
	// *   This parameter is unavailable for generic secrets.
	CustomData map[string]interface{} `json:"CustomData,omitempty" xml:"CustomData,omitempty"`
}

func (UpdateSecretRequestExtendedConfig) GoString

func (*UpdateSecretRequestExtendedConfig) SetCustomData

func (s *UpdateSecretRequestExtendedConfig) SetCustomData(v map[string]interface{}) *UpdateSecretRequestExtendedConfig

func (UpdateSecretRequestExtendedConfig) String

type UpdateSecretResponse

type UpdateSecretResponse struct {
	Headers    map[string]*string        `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                    `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UpdateSecretResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UpdateSecretResponse) GoString

func (s UpdateSecretResponse) GoString() string

func (*UpdateSecretResponse) SetBody

func (*UpdateSecretResponse) SetHeaders

func (s *UpdateSecretResponse) SetHeaders(v map[string]*string) *UpdateSecretResponse

func (*UpdateSecretResponse) SetStatusCode

func (s *UpdateSecretResponse) SetStatusCode(v int32) *UpdateSecretResponse

func (UpdateSecretResponse) String

func (s UpdateSecretResponse) String() string

type UpdateSecretResponseBody

type UpdateSecretResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (UpdateSecretResponseBody) GoString

func (s UpdateSecretResponseBody) GoString() string

func (*UpdateSecretResponseBody) SetRequestId

func (*UpdateSecretResponseBody) SetSecretName

func (UpdateSecretResponseBody) String

func (s UpdateSecretResponseBody) String() string

type UpdateSecretRotationPolicyRequest

type UpdateSecretRotationPolicyRequest struct {
	// Specifies whether to enable automatic rotation. Valid values:
	//
	// *   true: enables automatic rotation.
	// *   false: does not enable automatic rotation. This is the default value.
	EnableAutomaticRotation *bool `json:"EnableAutomaticRotation,omitempty" xml:"EnableAutomaticRotation,omitempty"`
	// The interval for automatic rotation. Valid values: 6 hours to 8,760 hours (365 days).
	//
	// The value is in the `integer[unit]` format.““
	//
	// The unit can be d (day), h (hour), m (minute), or s (second). For example, both 7d and 604800s indicate a seven-day interval.
	//
	// >  This parameter is required if you set the EnableAutomaticRotation parameter to true. This parameter is ignored if you set the EnableAutomaticRotation parameter to false or does not specify the EnableAutomaticRotation parameter.
	RotationInterval *string `json:"RotationInterval,omitempty" xml:"RotationInterval,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (UpdateSecretRotationPolicyRequest) GoString

func (*UpdateSecretRotationPolicyRequest) SetEnableAutomaticRotation

func (*UpdateSecretRotationPolicyRequest) SetRotationInterval

func (*UpdateSecretRotationPolicyRequest) SetSecretName

func (UpdateSecretRotationPolicyRequest) String

type UpdateSecretRotationPolicyResponse

type UpdateSecretRotationPolicyResponse struct {
	Headers    map[string]*string                      `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                  `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UpdateSecretRotationPolicyResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UpdateSecretRotationPolicyResponse) GoString

func (*UpdateSecretRotationPolicyResponse) SetHeaders

func (*UpdateSecretRotationPolicyResponse) SetStatusCode

func (UpdateSecretRotationPolicyResponse) String

type UpdateSecretRotationPolicyResponseBody

type UpdateSecretRotationPolicyResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (UpdateSecretRotationPolicyResponseBody) GoString

func (*UpdateSecretRotationPolicyResponseBody) SetRequestId

func (*UpdateSecretRotationPolicyResponseBody) SetSecretName

func (UpdateSecretRotationPolicyResponseBody) String

type UpdateSecretShrinkRequest

type UpdateSecretShrinkRequest struct {
	ExtendedConfig *UpdateSecretShrinkRequestExtendedConfig `json:"ExtendedConfig,omitempty" xml:"ExtendedConfig,omitempty" type:"Struct"`
	// The description of the secret.
	Description *string `json:"Description,omitempty" xml:"Description,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (UpdateSecretShrinkRequest) GoString

func (s UpdateSecretShrinkRequest) GoString() string

func (*UpdateSecretShrinkRequest) SetDescription

func (*UpdateSecretShrinkRequest) SetExtendedConfig

func (*UpdateSecretShrinkRequest) SetSecretName

func (UpdateSecretShrinkRequest) String

func (s UpdateSecretShrinkRequest) String() string

type UpdateSecretShrinkRequestExtendedConfig

type UpdateSecretShrinkRequestExtendedConfig struct {
	// The custom data in the extended configuration of the secret.
	//
	// >
	// *   If this parameter is specified, the existing extended configuration of the secret is updated.
	// *   This parameter is unavailable for generic secrets.
	CustomData *string `json:"CustomData,omitempty" xml:"CustomData,omitempty"`
}

func (UpdateSecretShrinkRequestExtendedConfig) GoString

func (*UpdateSecretShrinkRequestExtendedConfig) SetCustomData

func (UpdateSecretShrinkRequestExtendedConfig) String

type UpdateSecretVersionStageRequest

type UpdateSecretVersionStageRequest struct {
	// The version to which you want to apply the specified stage label.
	//
	// >
	// *   You must specify at least one of the RemoveFromVersion and MoveToVersion parameters.
	// *   If the VersionStage parameter is set to ACSCurrent or ACSPrevious, this parameter is required.
	MoveToVersion *string `json:"MoveToVersion,omitempty" xml:"MoveToVersion,omitempty"`
	// The version from which you want to remove the specified stage label.
	//
	// >  You must specify at least one of the RemoveFromVersion and MoveToVersion parameters.
	RemoveFromVersion *string `json:"RemoveFromVersion,omitempty" xml:"RemoveFromVersion,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
	// The specified stage label. Valid values:
	//
	// *   ACSCurrent
	// *   ACSPrevious
	// *   Custom stage label
	VersionStage *string `json:"VersionStage,omitempty" xml:"VersionStage,omitempty"`
}

func (UpdateSecretVersionStageRequest) GoString

func (*UpdateSecretVersionStageRequest) SetMoveToVersion

func (*UpdateSecretVersionStageRequest) SetRemoveFromVersion

func (*UpdateSecretVersionStageRequest) SetSecretName

func (*UpdateSecretVersionStageRequest) SetVersionStage

func (UpdateSecretVersionStageRequest) String

type UpdateSecretVersionStageResponse

type UpdateSecretVersionStageResponse struct {
	Headers    map[string]*string                    `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                                `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UpdateSecretVersionStageResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UpdateSecretVersionStageResponse) GoString

func (*UpdateSecretVersionStageResponse) SetHeaders

func (*UpdateSecretVersionStageResponse) SetStatusCode

func (UpdateSecretVersionStageResponse) String

type UpdateSecretVersionStageResponseBody

type UpdateSecretVersionStageResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
	// The name of the secret.
	SecretName *string `json:"SecretName,omitempty" xml:"SecretName,omitempty"`
}

func (UpdateSecretVersionStageResponseBody) GoString

func (*UpdateSecretVersionStageResponseBody) SetRequestId

func (*UpdateSecretVersionStageResponseBody) SetSecretName

func (UpdateSecretVersionStageResponseBody) String

type UploadCertificateRequest

type UploadCertificateRequest struct {
	// The certificate issued by the CA, which is in the Privacy Enhanced Mail (PEM) format.
	Certificate *string `json:"Certificate,omitempty" xml:"Certificate,omitempty"`
	// The certificate chain issued by the CA, which is in the PEM format.
	CertificateChain *string `json:"CertificateChain,omitempty" xml:"CertificateChain,omitempty"`
	// The ID of the certificate. The ID must be globally unique in Certificates Manager.
	CertificateId *string `json:"CertificateId,omitempty" xml:"CertificateId,omitempty"`
}

func (UploadCertificateRequest) GoString

func (s UploadCertificateRequest) GoString() string

func (*UploadCertificateRequest) SetCertificate

func (*UploadCertificateRequest) SetCertificateChain

func (s *UploadCertificateRequest) SetCertificateChain(v string) *UploadCertificateRequest

func (*UploadCertificateRequest) SetCertificateId

func (UploadCertificateRequest) String

func (s UploadCertificateRequest) String() string

type UploadCertificateResponse

type UploadCertificateResponse struct {
	Headers    map[string]*string             `json:"headers,omitempty" xml:"headers,omitempty" require:"true"`
	StatusCode *int32                         `json:"statusCode,omitempty" xml:"statusCode,omitempty" require:"true"`
	Body       *UploadCertificateResponseBody `json:"body,omitempty" xml:"body,omitempty" require:"true"`
}

func (UploadCertificateResponse) GoString

func (s UploadCertificateResponse) GoString() string

func (*UploadCertificateResponse) SetBody

func (*UploadCertificateResponse) SetHeaders

func (*UploadCertificateResponse) SetStatusCode

func (UploadCertificateResponse) String

func (s UploadCertificateResponse) String() string

type UploadCertificateResponseBody

type UploadCertificateResponseBody struct {
	// The ID of the request, which is used to locate and troubleshoot issues.
	RequestId *string `json:"RequestId,omitempty" xml:"RequestId,omitempty"`
}

func (UploadCertificateResponseBody) GoString

func (*UploadCertificateResponseBody) SetRequestId

func (UploadCertificateResponseBody) String

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL