Conver to regular Go vendor + dep tool

2026-06-02 04:50:49 +00:00 · 2017-03-22 17:38:32 +03:00
parent 070347295e
commit c6c1012330
3260 changed files with 1742550 additions and 72 deletions
@@ -0,0 +1,154 @@
+// THIS FILE IS AUTOMATICALLY GENERATED. DO NOT EDIT.
+
+package kms
+
+const (
+
+	// ErrCodeAlreadyExistsException for service response error code
+	// "AlreadyExistsException".
+	//
+	// The request was rejected because it attempted to create a resource that already
+	// exists.
+	ErrCodeAlreadyExistsException = "AlreadyExistsException"
+
+	// ErrCodeDependencyTimeoutException for service response error code
+	// "DependencyTimeoutException".
+	//
+	// The system timed out while trying to fulfill the request. The request can
+	// be retried.
+	ErrCodeDependencyTimeoutException = "DependencyTimeoutException"
+
+	// ErrCodeDisabledException for service response error code
+	// "DisabledException".
+	//
+	// The request was rejected because the specified CMK is not enabled.
+	ErrCodeDisabledException = "DisabledException"
+
+	// ErrCodeExpiredImportTokenException for service response error code
+	// "ExpiredImportTokenException".
+	//
+	// The request was rejected because the provided import token is expired. Use
+	// GetParametersForImport to retrieve a new import token and public key, use
+	// the new public key to encrypt the key material, and then try the request
+	// again.
+	ErrCodeExpiredImportTokenException = "ExpiredImportTokenException"
+
+	// ErrCodeIncorrectKeyMaterialException for service response error code
+	// "IncorrectKeyMaterialException".
+	//
+	// The request was rejected because the provided key material is invalid or
+	// is not the same key material that was previously imported into this customer
+	// master key (CMK).
+	ErrCodeIncorrectKeyMaterialException = "IncorrectKeyMaterialException"
+
+	// ErrCodeInternalException for service response error code
+	// "InternalException".
+	//
+	// The request was rejected because an internal exception occurred. The request
+	// can be retried.
+	ErrCodeInternalException = "InternalException"
+
+	// ErrCodeInvalidAliasNameException for service response error code
+	// "InvalidAliasNameException".
+	//
+	// The request was rejected because the specified alias name is not valid.
+	ErrCodeInvalidAliasNameException = "InvalidAliasNameException"
+
+	// ErrCodeInvalidArnException for service response error code
+	// "InvalidArnException".
+	//
+	// The request was rejected because a specified ARN was not valid.
+	ErrCodeInvalidArnException = "InvalidArnException"
+
+	// ErrCodeInvalidCiphertextException for service response error code
+	// "InvalidCiphertextException".
+	//
+	// The request was rejected because the specified ciphertext has been corrupted
+	// or is otherwise invalid.
+	ErrCodeInvalidCiphertextException = "InvalidCiphertextException"
+
+	// ErrCodeInvalidGrantIdException for service response error code
+	// "InvalidGrantIdException".
+	//
+	// The request was rejected because the specified GrantId is not valid.
+	ErrCodeInvalidGrantIdException = "InvalidGrantIdException"
+
+	// ErrCodeInvalidGrantTokenException for service response error code
+	// "InvalidGrantTokenException".
+	//
+	// The request was rejected because the specified grant token is not valid.
+	ErrCodeInvalidGrantTokenException = "InvalidGrantTokenException"
+
+	// ErrCodeInvalidImportTokenException for service response error code
+	// "InvalidImportTokenException".
+	//
+	// The request was rejected because the provided import token is invalid or
+	// is associated with a different customer master key (CMK).
+	ErrCodeInvalidImportTokenException = "InvalidImportTokenException"
+
+	// ErrCodeInvalidKeyUsageException for service response error code
+	// "InvalidKeyUsageException".
+	//
+	// The request was rejected because the specified KeySpec value is not valid.
+	ErrCodeInvalidKeyUsageException = "InvalidKeyUsageException"
+
+	// ErrCodeInvalidMarkerException for service response error code
+	// "InvalidMarkerException".
+	//
+	// The request was rejected because the marker that specifies where pagination
+	// should next begin is not valid.
+	ErrCodeInvalidMarkerException = "InvalidMarkerException"
+
+	// ErrCodeInvalidStateException for service response error code
+	// "InvalidStateException".
+	//
+	// The request was rejected because the state of the specified resource is not
+	// valid for this request.
+	//
+	// For more information about how key state affects the use of a CMK, see How
+	// Key State Affects Use of a Customer Master Key (http://docs.aws.amazon.com/kms/latest/developerguide/key-state.html)
+	// in the AWS Key Management Service Developer Guide.
+	ErrCodeInvalidStateException = "InvalidStateException"
+
+	// ErrCodeKeyUnavailableException for service response error code
+	// "KeyUnavailableException".
+	//
+	// The request was rejected because the specified CMK was not available. The
+	// request can be retried.
+	ErrCodeKeyUnavailableException = "KeyUnavailableException"
+
+	// ErrCodeLimitExceededException for service response error code
+	// "LimitExceededException".
+	//
+	// The request was rejected because a limit was exceeded. For more information,
+	// see Limits (http://docs.aws.amazon.com/kms/latest/developerguide/limits.html)
+	// in the AWS Key Management Service Developer Guide.
+	ErrCodeLimitExceededException = "LimitExceededException"
+
+	// ErrCodeMalformedPolicyDocumentException for service response error code
+	// "MalformedPolicyDocumentException".
+	//
+	// The request was rejected because the specified policy is not syntactically
+	// or semantically correct.
+	ErrCodeMalformedPolicyDocumentException = "MalformedPolicyDocumentException"
+
+	// ErrCodeNotFoundException for service response error code
+	// "NotFoundException".
+	//
+	// The request was rejected because the specified entity or resource could not
+	// be found.
+	ErrCodeNotFoundException = "NotFoundException"
+
+	// ErrCodeTagException for service response error code
+	// "TagException".
+	//
+	// The request was rejected because one or more tags are not valid.
+	ErrCodeTagException = "TagException"
+
+	// ErrCodeUnsupportedOperationException for service response error code
+	// "UnsupportedOperationException".
+	//
+	// The request was rejected because a specified parameter is not supported or
+	// a specified resource is not valid for this operation.
+	ErrCodeUnsupportedOperationException = "UnsupportedOperationException"
+)
@@ -0,0 +1,875 @@
+// THIS FILE IS AUTOMATICALLY GENERATED. DO NOT EDIT.
+
+package kms_test
+
+import (
+	"bytes"
+	"fmt"
+	"time"
+
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/session"
+	"github.com/aws/aws-sdk-go/service/kms"
+)
+
+var _ time.Duration
+var _ bytes.Buffer
+
+func ExampleKMS_CancelKeyDeletion() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.CancelKeyDeletionInput{
+		KeyId: aws.String("KeyIdType"), // Required
+	}
+	resp, err := svc.CancelKeyDeletion(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_CreateAlias() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.CreateAliasInput{
+		AliasName:   aws.String("AliasNameType"), // Required
+		TargetKeyId: aws.String("KeyIdType"),     // Required
+	}
+	resp, err := svc.CreateAlias(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_CreateGrant() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.CreateGrantInput{
+		GranteePrincipal: aws.String("PrincipalIdType"), // Required
+		KeyId:            aws.String("KeyIdType"),       // Required
+		Constraints: &kms.GrantConstraints{
+			EncryptionContextEquals: map[string]*string{
+				"Key": aws.String("EncryptionContextValue"), // Required
+				// More values...
+			},
+			EncryptionContextSubset: map[string]*string{
+				"Key": aws.String("EncryptionContextValue"), // Required
+				// More values...
+			},
+		},
+		GrantTokens: []*string{
+			aws.String("GrantTokenType"), // Required
+			// More values...
+		},
+		Name: aws.String("GrantNameType"),
+		Operations: []*string{
+			aws.String("GrantOperation"), // Required
+			// More values...
+		},
+		RetiringPrincipal: aws.String("PrincipalIdType"),
+	}
+	resp, err := svc.CreateGrant(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_CreateKey() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.CreateKeyInput{
+		BypassPolicyLockoutSafetyCheck: aws.Bool(true),
+		Description:                    aws.String("DescriptionType"),
+		KeyUsage:                       aws.String("KeyUsageType"),
+		Origin:                         aws.String("OriginType"),
+		Policy:                         aws.String("PolicyType"),
+		Tags: []*kms.Tag{
+			{ // Required
+				TagKey:   aws.String("TagKeyType"),   // Required
+				TagValue: aws.String("TagValueType"), // Required
+			},
+			// More values...
+		},
+	}
+	resp, err := svc.CreateKey(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_Decrypt() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.DecryptInput{
+		CiphertextBlob: []byte("PAYLOAD"), // Required
+		EncryptionContext: map[string]*string{
+			"Key": aws.String("EncryptionContextValue"), // Required
+			// More values...
+		},
+		GrantTokens: []*string{
+			aws.String("GrantTokenType"), // Required
+			// More values...
+		},
+	}
+	resp, err := svc.Decrypt(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_DeleteAlias() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.DeleteAliasInput{
+		AliasName: aws.String("AliasNameType"), // Required
+	}
+	resp, err := svc.DeleteAlias(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_DeleteImportedKeyMaterial() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.DeleteImportedKeyMaterialInput{
+		KeyId: aws.String("KeyIdType"), // Required
+	}
+	resp, err := svc.DeleteImportedKeyMaterial(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_DescribeKey() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.DescribeKeyInput{
+		KeyId: aws.String("KeyIdType"), // Required
+		GrantTokens: []*string{
+			aws.String("GrantTokenType"), // Required
+			// More values...
+		},
+	}
+	resp, err := svc.DescribeKey(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_DisableKey() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.DisableKeyInput{
+		KeyId: aws.String("KeyIdType"), // Required
+	}
+	resp, err := svc.DisableKey(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_DisableKeyRotation() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.DisableKeyRotationInput{
+		KeyId: aws.String("KeyIdType"), // Required
+	}
+	resp, err := svc.DisableKeyRotation(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_EnableKey() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.EnableKeyInput{
+		KeyId: aws.String("KeyIdType"), // Required
+	}
+	resp, err := svc.EnableKey(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_EnableKeyRotation() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.EnableKeyRotationInput{
+		KeyId: aws.String("KeyIdType"), // Required
+	}
+	resp, err := svc.EnableKeyRotation(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_Encrypt() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.EncryptInput{
+		KeyId:     aws.String("KeyIdType"), // Required
+		Plaintext: []byte("PAYLOAD"),       // Required
+		EncryptionContext: map[string]*string{
+			"Key": aws.String("EncryptionContextValue"), // Required
+			// More values...
+		},
+		GrantTokens: []*string{
+			aws.String("GrantTokenType"), // Required
+			// More values...
+		},
+	}
+	resp, err := svc.Encrypt(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_GenerateDataKey() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.GenerateDataKeyInput{
+		KeyId: aws.String("KeyIdType"), // Required
+		EncryptionContext: map[string]*string{
+			"Key": aws.String("EncryptionContextValue"), // Required
+			// More values...
+		},
+		GrantTokens: []*string{
+			aws.String("GrantTokenType"), // Required
+			// More values...
+		},
+		KeySpec:       aws.String("DataKeySpec"),
+		NumberOfBytes: aws.Int64(1),
+	}
+	resp, err := svc.GenerateDataKey(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_GenerateDataKeyWithoutPlaintext() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.GenerateDataKeyWithoutPlaintextInput{
+		KeyId: aws.String("KeyIdType"), // Required
+		EncryptionContext: map[string]*string{
+			"Key": aws.String("EncryptionContextValue"), // Required
+			// More values...
+		},
+		GrantTokens: []*string{
+			aws.String("GrantTokenType"), // Required
+			// More values...
+		},
+		KeySpec:       aws.String("DataKeySpec"),
+		NumberOfBytes: aws.Int64(1),
+	}
+	resp, err := svc.GenerateDataKeyWithoutPlaintext(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_GenerateRandom() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.GenerateRandomInput{
+		NumberOfBytes: aws.Int64(1),
+	}
+	resp, err := svc.GenerateRandom(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_GetKeyPolicy() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.GetKeyPolicyInput{
+		KeyId:      aws.String("KeyIdType"),      // Required
+		PolicyName: aws.String("PolicyNameType"), // Required
+	}
+	resp, err := svc.GetKeyPolicy(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_GetKeyRotationStatus() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.GetKeyRotationStatusInput{
+		KeyId: aws.String("KeyIdType"), // Required
+	}
+	resp, err := svc.GetKeyRotationStatus(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_GetParametersForImport() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.GetParametersForImportInput{
+		KeyId:             aws.String("KeyIdType"),       // Required
+		WrappingAlgorithm: aws.String("AlgorithmSpec"),   // Required
+		WrappingKeySpec:   aws.String("WrappingKeySpec"), // Required
+	}
+	resp, err := svc.GetParametersForImport(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ImportKeyMaterial() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ImportKeyMaterialInput{
+		EncryptedKeyMaterial: []byte("PAYLOAD"),       // Required
+		ImportToken:          []byte("PAYLOAD"),       // Required
+		KeyId:                aws.String("KeyIdType"), // Required
+		ExpirationModel:      aws.String("ExpirationModelType"),
+		ValidTo:              aws.Time(time.Now()),
+	}
+	resp, err := svc.ImportKeyMaterial(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ListAliases() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ListAliasesInput{
+		Limit:  aws.Int64(1),
+		Marker: aws.String("MarkerType"),
+	}
+	resp, err := svc.ListAliases(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ListGrants() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ListGrantsInput{
+		KeyId:  aws.String("KeyIdType"), // Required
+		Limit:  aws.Int64(1),
+		Marker: aws.String("MarkerType"),
+	}
+	resp, err := svc.ListGrants(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ListKeyPolicies() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ListKeyPoliciesInput{
+		KeyId:  aws.String("KeyIdType"), // Required
+		Limit:  aws.Int64(1),
+		Marker: aws.String("MarkerType"),
+	}
+	resp, err := svc.ListKeyPolicies(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ListKeys() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ListKeysInput{
+		Limit:  aws.Int64(1),
+		Marker: aws.String("MarkerType"),
+	}
+	resp, err := svc.ListKeys(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ListResourceTags() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ListResourceTagsInput{
+		KeyId:  aws.String("KeyIdType"), // Required
+		Limit:  aws.Int64(1),
+		Marker: aws.String("MarkerType"),
+	}
+	resp, err := svc.ListResourceTags(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ListRetirableGrants() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ListRetirableGrantsInput{
+		RetiringPrincipal: aws.String("PrincipalIdType"), // Required
+		Limit:             aws.Int64(1),
+		Marker:            aws.String("MarkerType"),
+	}
+	resp, err := svc.ListRetirableGrants(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_PutKeyPolicy() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.PutKeyPolicyInput{
+		KeyId:                          aws.String("KeyIdType"),      // Required
+		Policy:                         aws.String("PolicyType"),     // Required
+		PolicyName:                     aws.String("PolicyNameType"), // Required
+		BypassPolicyLockoutSafetyCheck: aws.Bool(true),
+	}
+	resp, err := svc.PutKeyPolicy(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ReEncrypt() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ReEncryptInput{
+		CiphertextBlob:   []byte("PAYLOAD"),       // Required
+		DestinationKeyId: aws.String("KeyIdType"), // Required
+		DestinationEncryptionContext: map[string]*string{
+			"Key": aws.String("EncryptionContextValue"), // Required
+			// More values...
+		},
+		GrantTokens: []*string{
+			aws.String("GrantTokenType"), // Required
+			// More values...
+		},
+		SourceEncryptionContext: map[string]*string{
+			"Key": aws.String("EncryptionContextValue"), // Required
+			// More values...
+		},
+	}
+	resp, err := svc.ReEncrypt(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_RetireGrant() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.RetireGrantInput{
+		GrantId:    aws.String("GrantIdType"),
+		GrantToken: aws.String("GrantTokenType"),
+		KeyId:      aws.String("KeyIdType"),
+	}
+	resp, err := svc.RetireGrant(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_RevokeGrant() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.RevokeGrantInput{
+		GrantId: aws.String("GrantIdType"), // Required
+		KeyId:   aws.String("KeyIdType"),   // Required
+	}
+	resp, err := svc.RevokeGrant(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_ScheduleKeyDeletion() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.ScheduleKeyDeletionInput{
+		KeyId:               aws.String("KeyIdType"), // Required
+		PendingWindowInDays: aws.Int64(1),
+	}
+	resp, err := svc.ScheduleKeyDeletion(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_TagResource() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.TagResourceInput{
+		KeyId: aws.String("KeyIdType"), // Required
+		Tags: []*kms.Tag{ // Required
+			{ // Required
+				TagKey:   aws.String("TagKeyType"),   // Required
+				TagValue: aws.String("TagValueType"), // Required
+			},
+			// More values...
+		},
+	}
+	resp, err := svc.TagResource(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_UntagResource() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.UntagResourceInput{
+		KeyId: aws.String("KeyIdType"), // Required
+		TagKeys: []*string{ // Required
+			aws.String("TagKeyType"), // Required
+			// More values...
+		},
+	}
+	resp, err := svc.UntagResource(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_UpdateAlias() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.UpdateAliasInput{
+		AliasName:   aws.String("AliasNameType"), // Required
+		TargetKeyId: aws.String("KeyIdType"),     // Required
+	}
+	resp, err := svc.UpdateAlias(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
+
+func ExampleKMS_UpdateKeyDescription() {
+	sess := session.Must(session.NewSession())
+
+	svc := kms.New(sess)
+
+	params := &kms.UpdateKeyDescriptionInput{
+		Description: aws.String("DescriptionType"), // Required
+		KeyId:       aws.String("KeyIdType"),       // Required
+	}
+	resp, err := svc.UpdateKeyDescription(params)
+
+	if err != nil {
+		// Print the error, cast err to awserr.Error to get the Code and
+		// Message from an error.
+		fmt.Println(err.Error())
+		return
+	}
+
+	// Pretty-print the response data.
+	fmt.Println(resp)
+}
@@ -0,0 +1,216 @@
+// THIS FILE IS AUTOMATICALLY GENERATED. DO NOT EDIT.
+
+// Package kmsiface provides an interface to enable mocking the AWS Key Management Service service client
+// for testing your code.
+//
+// It is important to note that this interface will have breaking changes
+// when the service model is updated and adds new API operations, paginators,
+// and waiters.
+package kmsiface
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/service/kms"
+)
+
+// KMSAPI provides an interface to enable mocking the
+// kms.KMS service client's API operation,
+// paginators, and waiters. This make unit testing your code that calls out
+// to the SDK's service client's calls easier.
+//
+// The best way to use this interface is so the SDK's service client's calls
+// can be stubbed out for unit testing your code with the SDK without needing
+// to inject custom request handlers into the the SDK's request pipeline.
+//
+//    // myFunc uses an SDK service client to make a request to
+//    // AWS Key Management Service.
+//    func myFunc(svc kmsiface.KMSAPI) bool {
+//        // Make svc.CancelKeyDeletion request
+//    }
+//
+//    func main() {
+//        sess := session.New()
+//        svc := kms.New(sess)
+//
+//        myFunc(svc)
+//    }
+//
+// In your _test.go file:
+//
+//    // Define a mock struct to be used in your unit tests of myFunc.
+//    type mockKMSClient struct {
+//        kmsiface.KMSAPI
+//    }
+//    func (m *mockKMSClient) CancelKeyDeletion(input *kms.CancelKeyDeletionInput) (*kms.CancelKeyDeletionOutput, error) {
+//        // mock response/functionality
+//    }
+//
+//    func TestMyFunc(t *testing.T) {
+//        // Setup Test
+//        mockSvc := &mockKMSClient{}
+//
+//        myfunc(mockSvc)
+//
+//        // Verify myFunc's functionality
+//    }
+//
+// It is important to note that this interface will have breaking changes
+// when the service model is updated and adds new API operations, paginators,
+// and waiters. Its suggested to use the pattern above for testing, or using
+// tooling to generate mocks to satisfy the interfaces.
+type KMSAPI interface {
+	CancelKeyDeletion(*kms.CancelKeyDeletionInput) (*kms.CancelKeyDeletionOutput, error)
+	CancelKeyDeletionWithContext(aws.Context, *kms.CancelKeyDeletionInput, ...request.Option) (*kms.CancelKeyDeletionOutput, error)
+	CancelKeyDeletionRequest(*kms.CancelKeyDeletionInput) (*request.Request, *kms.CancelKeyDeletionOutput)
+
+	CreateAlias(*kms.CreateAliasInput) (*kms.CreateAliasOutput, error)
+	CreateAliasWithContext(aws.Context, *kms.CreateAliasInput, ...request.Option) (*kms.CreateAliasOutput, error)
+	CreateAliasRequest(*kms.CreateAliasInput) (*request.Request, *kms.CreateAliasOutput)
+
+	CreateGrant(*kms.CreateGrantInput) (*kms.CreateGrantOutput, error)
+	CreateGrantWithContext(aws.Context, *kms.CreateGrantInput, ...request.Option) (*kms.CreateGrantOutput, error)
+	CreateGrantRequest(*kms.CreateGrantInput) (*request.Request, *kms.CreateGrantOutput)
+
+	CreateKey(*kms.CreateKeyInput) (*kms.CreateKeyOutput, error)
+	CreateKeyWithContext(aws.Context, *kms.CreateKeyInput, ...request.Option) (*kms.CreateKeyOutput, error)
+	CreateKeyRequest(*kms.CreateKeyInput) (*request.Request, *kms.CreateKeyOutput)
+
+	Decrypt(*kms.DecryptInput) (*kms.DecryptOutput, error)
+	DecryptWithContext(aws.Context, *kms.DecryptInput, ...request.Option) (*kms.DecryptOutput, error)
+	DecryptRequest(*kms.DecryptInput) (*request.Request, *kms.DecryptOutput)
+
+	DeleteAlias(*kms.DeleteAliasInput) (*kms.DeleteAliasOutput, error)
+	DeleteAliasWithContext(aws.Context, *kms.DeleteAliasInput, ...request.Option) (*kms.DeleteAliasOutput, error)
+	DeleteAliasRequest(*kms.DeleteAliasInput) (*request.Request, *kms.DeleteAliasOutput)
+
+	DeleteImportedKeyMaterial(*kms.DeleteImportedKeyMaterialInput) (*kms.DeleteImportedKeyMaterialOutput, error)
+	DeleteImportedKeyMaterialWithContext(aws.Context, *kms.DeleteImportedKeyMaterialInput, ...request.Option) (*kms.DeleteImportedKeyMaterialOutput, error)
+	DeleteImportedKeyMaterialRequest(*kms.DeleteImportedKeyMaterialInput) (*request.Request, *kms.DeleteImportedKeyMaterialOutput)
+
+	DescribeKey(*kms.DescribeKeyInput) (*kms.DescribeKeyOutput, error)
+	DescribeKeyWithContext(aws.Context, *kms.DescribeKeyInput, ...request.Option) (*kms.DescribeKeyOutput, error)
+	DescribeKeyRequest(*kms.DescribeKeyInput) (*request.Request, *kms.DescribeKeyOutput)
+
+	DisableKey(*kms.DisableKeyInput) (*kms.DisableKeyOutput, error)
+	DisableKeyWithContext(aws.Context, *kms.DisableKeyInput, ...request.Option) (*kms.DisableKeyOutput, error)
+	DisableKeyRequest(*kms.DisableKeyInput) (*request.Request, *kms.DisableKeyOutput)
+
+	DisableKeyRotation(*kms.DisableKeyRotationInput) (*kms.DisableKeyRotationOutput, error)
+	DisableKeyRotationWithContext(aws.Context, *kms.DisableKeyRotationInput, ...request.Option) (*kms.DisableKeyRotationOutput, error)
+	DisableKeyRotationRequest(*kms.DisableKeyRotationInput) (*request.Request, *kms.DisableKeyRotationOutput)
+
+	EnableKey(*kms.EnableKeyInput) (*kms.EnableKeyOutput, error)
+	EnableKeyWithContext(aws.Context, *kms.EnableKeyInput, ...request.Option) (*kms.EnableKeyOutput, error)
+	EnableKeyRequest(*kms.EnableKeyInput) (*request.Request, *kms.EnableKeyOutput)
+
+	EnableKeyRotation(*kms.EnableKeyRotationInput) (*kms.EnableKeyRotationOutput, error)
+	EnableKeyRotationWithContext(aws.Context, *kms.EnableKeyRotationInput, ...request.Option) (*kms.EnableKeyRotationOutput, error)
+	EnableKeyRotationRequest(*kms.EnableKeyRotationInput) (*request.Request, *kms.EnableKeyRotationOutput)
+
+	Encrypt(*kms.EncryptInput) (*kms.EncryptOutput, error)
+	EncryptWithContext(aws.Context, *kms.EncryptInput, ...request.Option) (*kms.EncryptOutput, error)
+	EncryptRequest(*kms.EncryptInput) (*request.Request, *kms.EncryptOutput)
+
+	GenerateDataKey(*kms.GenerateDataKeyInput) (*kms.GenerateDataKeyOutput, error)
+	GenerateDataKeyWithContext(aws.Context, *kms.GenerateDataKeyInput, ...request.Option) (*kms.GenerateDataKeyOutput, error)
+	GenerateDataKeyRequest(*kms.GenerateDataKeyInput) (*request.Request, *kms.GenerateDataKeyOutput)
+
+	GenerateDataKeyWithoutPlaintext(*kms.GenerateDataKeyWithoutPlaintextInput) (*kms.GenerateDataKeyWithoutPlaintextOutput, error)
+	GenerateDataKeyWithoutPlaintextWithContext(aws.Context, *kms.GenerateDataKeyWithoutPlaintextInput, ...request.Option) (*kms.GenerateDataKeyWithoutPlaintextOutput, error)
+	GenerateDataKeyWithoutPlaintextRequest(*kms.GenerateDataKeyWithoutPlaintextInput) (*request.Request, *kms.GenerateDataKeyWithoutPlaintextOutput)
+
+	GenerateRandom(*kms.GenerateRandomInput) (*kms.GenerateRandomOutput, error)
+	GenerateRandomWithContext(aws.Context, *kms.GenerateRandomInput, ...request.Option) (*kms.GenerateRandomOutput, error)
+	GenerateRandomRequest(*kms.GenerateRandomInput) (*request.Request, *kms.GenerateRandomOutput)
+
+	GetKeyPolicy(*kms.GetKeyPolicyInput) (*kms.GetKeyPolicyOutput, error)
+	GetKeyPolicyWithContext(aws.Context, *kms.GetKeyPolicyInput, ...request.Option) (*kms.GetKeyPolicyOutput, error)
+	GetKeyPolicyRequest(*kms.GetKeyPolicyInput) (*request.Request, *kms.GetKeyPolicyOutput)
+
+	GetKeyRotationStatus(*kms.GetKeyRotationStatusInput) (*kms.GetKeyRotationStatusOutput, error)
+	GetKeyRotationStatusWithContext(aws.Context, *kms.GetKeyRotationStatusInput, ...request.Option) (*kms.GetKeyRotationStatusOutput, error)
+	GetKeyRotationStatusRequest(*kms.GetKeyRotationStatusInput) (*request.Request, *kms.GetKeyRotationStatusOutput)
+
+	GetParametersForImport(*kms.GetParametersForImportInput) (*kms.GetParametersForImportOutput, error)
+	GetParametersForImportWithContext(aws.Context, *kms.GetParametersForImportInput, ...request.Option) (*kms.GetParametersForImportOutput, error)
+	GetParametersForImportRequest(*kms.GetParametersForImportInput) (*request.Request, *kms.GetParametersForImportOutput)
+
+	ImportKeyMaterial(*kms.ImportKeyMaterialInput) (*kms.ImportKeyMaterialOutput, error)
+	ImportKeyMaterialWithContext(aws.Context, *kms.ImportKeyMaterialInput, ...request.Option) (*kms.ImportKeyMaterialOutput, error)
+	ImportKeyMaterialRequest(*kms.ImportKeyMaterialInput) (*request.Request, *kms.ImportKeyMaterialOutput)
+
+	ListAliases(*kms.ListAliasesInput) (*kms.ListAliasesOutput, error)
+	ListAliasesWithContext(aws.Context, *kms.ListAliasesInput, ...request.Option) (*kms.ListAliasesOutput, error)
+	ListAliasesRequest(*kms.ListAliasesInput) (*request.Request, *kms.ListAliasesOutput)
+
+	ListAliasesPages(*kms.ListAliasesInput, func(*kms.ListAliasesOutput, bool) bool) error
+	ListAliasesPagesWithContext(aws.Context, *kms.ListAliasesInput, func(*kms.ListAliasesOutput, bool) bool, ...request.Option) error
+
+	ListGrants(*kms.ListGrantsInput) (*kms.ListGrantsResponse, error)
+	ListGrantsWithContext(aws.Context, *kms.ListGrantsInput, ...request.Option) (*kms.ListGrantsResponse, error)
+	ListGrantsRequest(*kms.ListGrantsInput) (*request.Request, *kms.ListGrantsResponse)
+
+	ListGrantsPages(*kms.ListGrantsInput, func(*kms.ListGrantsResponse, bool) bool) error
+	ListGrantsPagesWithContext(aws.Context, *kms.ListGrantsInput, func(*kms.ListGrantsResponse, bool) bool, ...request.Option) error
+
+	ListKeyPolicies(*kms.ListKeyPoliciesInput) (*kms.ListKeyPoliciesOutput, error)
+	ListKeyPoliciesWithContext(aws.Context, *kms.ListKeyPoliciesInput, ...request.Option) (*kms.ListKeyPoliciesOutput, error)
+	ListKeyPoliciesRequest(*kms.ListKeyPoliciesInput) (*request.Request, *kms.ListKeyPoliciesOutput)
+
+	ListKeyPoliciesPages(*kms.ListKeyPoliciesInput, func(*kms.ListKeyPoliciesOutput, bool) bool) error
+	ListKeyPoliciesPagesWithContext(aws.Context, *kms.ListKeyPoliciesInput, func(*kms.ListKeyPoliciesOutput, bool) bool, ...request.Option) error
+
+	ListKeys(*kms.ListKeysInput) (*kms.ListKeysOutput, error)
+	ListKeysWithContext(aws.Context, *kms.ListKeysInput, ...request.Option) (*kms.ListKeysOutput, error)
+	ListKeysRequest(*kms.ListKeysInput) (*request.Request, *kms.ListKeysOutput)
+
+	ListKeysPages(*kms.ListKeysInput, func(*kms.ListKeysOutput, bool) bool) error
+	ListKeysPagesWithContext(aws.Context, *kms.ListKeysInput, func(*kms.ListKeysOutput, bool) bool, ...request.Option) error
+
+	ListResourceTags(*kms.ListResourceTagsInput) (*kms.ListResourceTagsOutput, error)
+	ListResourceTagsWithContext(aws.Context, *kms.ListResourceTagsInput, ...request.Option) (*kms.ListResourceTagsOutput, error)
+	ListResourceTagsRequest(*kms.ListResourceTagsInput) (*request.Request, *kms.ListResourceTagsOutput)
+
+	ListRetirableGrants(*kms.ListRetirableGrantsInput) (*kms.ListGrantsResponse, error)
+	ListRetirableGrantsWithContext(aws.Context, *kms.ListRetirableGrantsInput, ...request.Option) (*kms.ListGrantsResponse, error)
+	ListRetirableGrantsRequest(*kms.ListRetirableGrantsInput) (*request.Request, *kms.ListGrantsResponse)
+
+	PutKeyPolicy(*kms.PutKeyPolicyInput) (*kms.PutKeyPolicyOutput, error)
+	PutKeyPolicyWithContext(aws.Context, *kms.PutKeyPolicyInput, ...request.Option) (*kms.PutKeyPolicyOutput, error)
+	PutKeyPolicyRequest(*kms.PutKeyPolicyInput) (*request.Request, *kms.PutKeyPolicyOutput)
+
+	ReEncrypt(*kms.ReEncryptInput) (*kms.ReEncryptOutput, error)
+	ReEncryptWithContext(aws.Context, *kms.ReEncryptInput, ...request.Option) (*kms.ReEncryptOutput, error)
+	ReEncryptRequest(*kms.ReEncryptInput) (*request.Request, *kms.ReEncryptOutput)
+
+	RetireGrant(*kms.RetireGrantInput) (*kms.RetireGrantOutput, error)
+	RetireGrantWithContext(aws.Context, *kms.RetireGrantInput, ...request.Option) (*kms.RetireGrantOutput, error)
+	RetireGrantRequest(*kms.RetireGrantInput) (*request.Request, *kms.RetireGrantOutput)
+
+	RevokeGrant(*kms.RevokeGrantInput) (*kms.RevokeGrantOutput, error)
+	RevokeGrantWithContext(aws.Context, *kms.RevokeGrantInput, ...request.Option) (*kms.RevokeGrantOutput, error)
+	RevokeGrantRequest(*kms.RevokeGrantInput) (*request.Request, *kms.RevokeGrantOutput)
+
+	ScheduleKeyDeletion(*kms.ScheduleKeyDeletionInput) (*kms.ScheduleKeyDeletionOutput, error)
+	ScheduleKeyDeletionWithContext(aws.Context, *kms.ScheduleKeyDeletionInput, ...request.Option) (*kms.ScheduleKeyDeletionOutput, error)
+	ScheduleKeyDeletionRequest(*kms.ScheduleKeyDeletionInput) (*request.Request, *kms.ScheduleKeyDeletionOutput)
+
+	TagResource(*kms.TagResourceInput) (*kms.TagResourceOutput, error)
+	TagResourceWithContext(aws.Context, *kms.TagResourceInput, ...request.Option) (*kms.TagResourceOutput, error)
+	TagResourceRequest(*kms.TagResourceInput) (*request.Request, *kms.TagResourceOutput)
+
+	UntagResource(*kms.UntagResourceInput) (*kms.UntagResourceOutput, error)
+	UntagResourceWithContext(aws.Context, *kms.UntagResourceInput, ...request.Option) (*kms.UntagResourceOutput, error)
+	UntagResourceRequest(*kms.UntagResourceInput) (*request.Request, *kms.UntagResourceOutput)
+
+	UpdateAlias(*kms.UpdateAliasInput) (*kms.UpdateAliasOutput, error)
+	UpdateAliasWithContext(aws.Context, *kms.UpdateAliasInput, ...request.Option) (*kms.UpdateAliasOutput, error)
+	UpdateAliasRequest(*kms.UpdateAliasInput) (*request.Request, *kms.UpdateAliasOutput)
+
+	UpdateKeyDescription(*kms.UpdateKeyDescriptionInput) (*kms.UpdateKeyDescriptionOutput, error)
+	UpdateKeyDescriptionWithContext(aws.Context, *kms.UpdateKeyDescriptionInput, ...request.Option) (*kms.UpdateKeyDescriptionOutput, error)
+	UpdateKeyDescriptionRequest(*kms.UpdateKeyDescriptionInput) (*request.Request, *kms.UpdateKeyDescriptionOutput)
+}
+
+var _ KMSAPI = (*kms.KMS)(nil)
@@ -0,0 +1,163 @@
+// THIS FILE IS AUTOMATICALLY GENERATED. DO NOT EDIT.
+
+package kms
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/jsonrpc"
+)
+
+// AWS Key Management Service (AWS KMS) is an encryption and key management
+// web service. This guide describes the AWS KMS operations that you can call
+// programmatically. For general information about AWS KMS, see the AWS Key
+// Management Service Developer Guide (http://docs.aws.amazon.com/kms/latest/developerguide/).
+//
+// AWS provides SDKs that consist of libraries and sample code for various programming
+// languages and platforms (Java, Ruby, .Net, iOS, Android, etc.). The SDKs
+// provide a convenient way to create programmatic access to AWS KMS and other
+// AWS services. For example, the SDKs take care of tasks such as signing requests
+// (see below), managing errors, and retrying requests automatically. For more
+// information about the AWS SDKs, including how to download and install them,
+// see Tools for Amazon Web Services (http://aws.amazon.com/tools/).
+//
+// We recommend that you use the AWS SDKs to make programmatic API calls to
+// AWS KMS.
+//
+// Clients must support TLS (Transport Layer Security) 1.0. We recommend TLS
+// 1.2. Clients must also support cipher suites with Perfect Forward Secrecy
+// (PFS) such as Ephemeral Diffie-Hellman (DHE) or Elliptic Curve Ephemeral
+// Diffie-Hellman (ECDHE). Most modern systems such as Java 7 and later support
+// these modes.
+//
+// Signing Requests
+//
+// Requests must be signed by using an access key ID and a secret access key.
+// We strongly recommend that you do not use your AWS account (root) access
+// key ID and secret key for everyday work with AWS KMS. Instead, use the access
+// key ID and secret access key for an IAM user, or you can use the AWS Security
+// Token Service to generate temporary security credentials that you can use
+// to sign requests.
+//
+// All AWS KMS operations require Signature Version 4 (http://docs.aws.amazon.com/general/latest/gr/signature-version-4.html).
+//
+// Logging API Requests
+//
+// AWS KMS supports AWS CloudTrail, a service that logs AWS API calls and related
+// events for your AWS account and delivers them to an Amazon S3 bucket that
+// you specify. By using the information collected by CloudTrail, you can determine
+// what requests were made to AWS KMS, who made the request, when it was made,
+// and so on. To learn more about CloudTrail, including how to turn it on and
+// find your log files, see the AWS CloudTrail User Guide (http://docs.aws.amazon.com/awscloudtrail/latest/userguide/).
+//
+// Additional Resources
+//
+// For more information about credentials and request signing, see the following:
+//
+//    * AWS Security Credentials (http://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html)
+//    - This topic provides general information about the types of credentials
+//    used for accessing AWS.
+//
+//    * Temporary Security Credentials (http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html)
+//    - This section of the IAM User Guide describes how to create and use temporary
+//    security credentials.
+//
+//    * Signature Version 4 Signing Process (http://docs.aws.amazon.com/general/latest/gr/signature-version-4.html)
+//    - This set of topics walks you through the process of signing a request
+//    using an access key ID and a secret access key.
+//
+// Commonly Used APIs
+//
+// Of the APIs discussed in this guide, the following will prove the most useful
+// for most applications. You will likely perform actions other than these,
+// such as creating keys and assigning policies, by using the console.
+//
+//    * Encrypt
+//
+//    * Decrypt
+//
+//    * GenerateDataKey
+//
+//    * GenerateDataKeyWithoutPlaintext
+// The service client's operations are safe to be used concurrently.
+// It is not safe to mutate any of the client's properties though.
+// Please also see https://docs.aws.amazon.com/goto/WebAPI/kms-2014-11-01
+type KMS struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "kms"       // Service endpoint prefix API calls made to.
+	EndpointsID = ServiceName // Service ID for Regions and Endpoints metadata.
+)
+
+// New creates a new instance of the KMS client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a KMS client from just a session.
+//     svc := kms.New(mySession)
+//
+//     // Create a KMS client with additional configuration
+//     svc := kms.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *KMS {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *KMS {
+	svc := &KMS{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2014-11-01",
+				JSONVersion:   "1.1",
+				TargetPrefix:  "TrentService",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(jsonrpc.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(jsonrpc.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(jsonrpc.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(jsonrpc.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a KMS operation and runs any
+// custom request initialization.
+func (c *KMS) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}