import { NodeHttpOptions as __HttpOptions__ } from '@aws-sdk/types'; import * as __aws_sdk_types from '@aws-sdk/types'; /** * ReEncryptInput shape */ export interface ReEncryptInput { /** *
Ciphertext of the data to reencrypt.
*/ CiphertextBlob: ArrayBuffer | ArrayBufferView | string; /** *Encryption context used to encrypt and decrypt the data specified in the CiphertextBlob parameter.
A unique identifier for the CMK that is used to reencrypt the data.
To specify a CMK, use its key ID, Amazon Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix it with "alias/". To specify a CMK in a different AWS account, you must use the key ARN or alias ARN.
For example:
Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
Alias name: alias/ExampleAlias
Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias
To get the key ID and key ARN for a CMK, use ListKeys or DescribeKey. To get the alias name and alias ARN, use ListAliases.
*/ DestinationKeyId: string; /** *Encryption context to use when the data is reencrypted.
*/ DestinationEncryptionContext?: { [key: string]: string; } | Iterable<[string, string]>; /** *A list of grant tokens.
For more information, see Grant Tokens in the AWS Key Management Service Developer Guide.
*/ GrantTokens?: Array