import type { MetadataBearer as __MetadataBearer } from "@smithy/types"; import type { RevokeGrantRequest } from "../models/models_0"; /** * @public */ export type { __MetadataBearer }; /** * @public * * The input for {@link RevokeGrantCommand}. */ export interface RevokeGrantCommandInput extends RevokeGrantRequest { } /** * @public * * The output of {@link RevokeGrantCommand}. */ export interface RevokeGrantCommandOutput extends __MetadataBearer { } declare const RevokeGrantCommand_base: { new (input: RevokeGrantCommandInput): import("@smithy/core/client").CommandImpl; new (input: RevokeGrantCommandInput): import("@smithy/core/client").CommandImpl; getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions; }; /** *

Deletes the specified grant. You revoke a grant to terminate the permissions that the * grant allows. For more information, see Retiring and revoking grants in the * * Key Management Service Developer Guide * .

*

When you create, retire, or revoke a grant, there might be a brief delay, usually less than five minutes, until the grant is available throughout KMS. This state is known as eventual consistency. For details, see Eventual consistency in * the * Key Management Service Developer Guide * .

*

For detailed information about grants, including grant terminology, see Grants in KMS in the * * Key Management Service Developer Guide * . For examples of creating grants in several * programming languages, see Use CreateGrant with an Amazon Web Services SDK or CLI.

*

* Cross-account use: Yes. To perform this operation on a KMS key in a different Amazon Web Services account, specify the key * ARN in the value of the KeyId parameter.

*

* Required permissions: kms:RevokeGrant (key policy).

*

* Related operations: *

* *

* Eventual consistency: The KMS API follows an eventual consistency model. * For more information, see KMS eventual consistency.

* @example * Use a bare-bones client and the command you need to make an API call. * ```javascript * import { KMSClient, RevokeGrantCommand } from "@aws-sdk/client-kms"; // ES Modules import * // const { KMSClient, RevokeGrantCommand } = require("@aws-sdk/client-kms"); // CommonJS import * // import type { KMSClientConfig } from "@aws-sdk/client-kms"; * const config = {}; // type is KMSClientConfig * const client = new KMSClient(config); * const input = { // RevokeGrantRequest * KeyId: "STRING_VALUE", // required * GrantId: "STRING_VALUE", // required * DryRun: true || false, * }; * const command = new RevokeGrantCommand(input); * const response = await client.send(command); * // {}; * * ``` * * @param RevokeGrantCommandInput - {@link RevokeGrantCommandInput} * @returns {@link RevokeGrantCommandOutput} * @see {@link RevokeGrantCommandInput} for command's `input` shape. * @see {@link RevokeGrantCommandOutput} for command's `response` shape. * @see {@link KMSClientResolvedConfig | config} for KMSClient's `config` shape. * * @throws {@link DependencyTimeoutException} (server fault) *

The system timed out while trying to fulfill the request. You can retry the * request.

* * @throws {@link DryRunOperationException} (client fault) *

The request was rejected because the DryRun parameter was specified.

* * @throws {@link InvalidArnException} (client fault) *

The request was rejected because a specified ARN, or an ARN in a key policy, is not * valid.

* * @throws {@link InvalidGrantIdException} (client fault) *

The request was rejected because the specified GrantId is not valid.

* * @throws {@link KMSInternalException} (server fault) *

The request was rejected because an internal exception occurred. The request can be * retried.

* * @throws {@link KMSInvalidStateException} (client fault) *

The request was rejected because the state of the specified resource is not valid for this * request.

*

This exceptions means one of the following:

* * * @throws {@link NotFoundException} (client fault) *

The request was rejected because the specified entity or resource could not be * found.

* * @throws {@link KMSServiceException} *

Base exception class for all service exceptions from KMS service.

* * * @example To revoke a grant * ```javascript * // The following example revokes a grant. * const input = { * GrantId: "0c237476b39f8bc44e45212e08498fbe3151305030726c0590dd8d3e9f3d6a60", * KeyId: "1234abcd-12ab-34cd-56ef-1234567890ab" * }; * const command = new RevokeGrantCommand(input); * const response = await client.send(command); * /* response is * { /* metadata only *\/ } * *\/ * ``` * * @public */ export declare class RevokeGrantCommand extends RevokeGrantCommand_base { /** @internal type navigation helper, not in runtime. */ protected static __types: { api: { input: RevokeGrantRequest; output: {}; }; sdk: { input: RevokeGrantCommandInput; output: RevokeGrantCommandOutput; }; }; }