Struct KmsGrantConstraints

#[non_exhaustive]
pub struct KmsGrantConstraints {
    pub encryption_context_equals: Option<HashMap<String, String>>,
    pub encryption_context_subset: Option<HashMap<String, String>>,
}

Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context. You can specify only one type of encryption context. An empty map is treated as not specified. For more information, see GrantConstraints.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

encryption_context_equals: Option<HashMap<String, String>>

A list of key-value pairs that must match the encryption context in the cryptographic operation request. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint.

encryption_context_subset: Option<HashMap<String, String>>

A list of key-value pairs that must be included in the encryption context of the cryptographic operation request. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs.

Implementations

impl KmsGrantConstraints

pub fn encryption_context_equals(&self) -> Option<&HashMap<String, String>>

A list of key-value pairs that must match the encryption context in the cryptographic operation request. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint.

pub fn encryption_context_subset(&self) -> Option<&HashMap<String, String>>

A list of key-value pairs that must be included in the encryption context of the cryptographic operation request. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs.

impl KmsGrantConstraints

pub fn builder() -> KmsGrantConstraintsBuilder

Creates a new builder-style object to manufacture KmsGrantConstraints.

Trait Implementations

impl Clone for KmsGrantConstraints

fn clone(&self) -> KmsGrantConstraints

Returns a duplicate of the value.

const fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KmsGrantConstraints

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for KmsGrantConstraints

fn eq(&self, other: &KmsGrantConstraints) -> bool

Tests for self and other values to be equal, and is used by ==.

const fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for KmsGrantConstraints