diff --git a/services/kms/model_create_key_payload.go b/services/kms/model_create_key_payload.go
index 522c81f0c..2b0613ba0 100644
--- a/services/kms/model_create_key_payload.go
+++ b/services/kms/model_create_key_payload.go
@@ -157,15 +157,9 @@ func setCreateKeyPayloadgetImportOnlyAttributeType(arg *CreateKeyPayloadgetImpor
 	types and functions for protection
 */
 
-// isEnumRef
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type CreateKeyPayloadGetProtectionAttributeType = *Protection
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type CreateKeyPayloadGetProtectionArgType = Protection
-
+// isNotNullableString
 // Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type CreateKeyPayloadGetProtectionRetType = Protection
+type CreateKeyPayloadGetProtectionAttributeType = *string
 
 // Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
 func getCreateKeyPayloadGetProtectionAttributeTypeOk(arg CreateKeyPayloadGetProtectionAttributeType) (ret CreateKeyPayloadGetProtectionRetType, ok bool) {
@@ -180,6 +174,12 @@ func setCreateKeyPayloadGetProtectionAttributeType(arg *CreateKeyPayloadGetProte
 	*arg = &val
 }
 
+// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
+type CreateKeyPayloadGetProtectionArgType = string
+
+// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
+type CreateKeyPayloadGetProtectionRetType = string
+
 /*
 	types and functions for purpose
 */
@@ -220,6 +220,7 @@ type CreateKeyPayload struct {
 	DisplayName CreateKeyPayloadGetDisplayNameAttributeType `json:"displayName" required:"true"`
 	// States whether versions can be created or only imported.
 	ImportOnly CreateKeyPayloadgetImportOnlyAttributeType `json:"importOnly,omitempty"`
+	// The underlying system that is responsible for protecting the key material. Possible values are \"software\" or \"hsm\"
 	// REQUIRED
 	Protection CreateKeyPayloadGetProtectionAttributeType `json:"protection" required:"true"`
 	// REQUIRED
diff --git a/services/kms/model_create_wrapping_key_payload.go b/services/kms/model_create_wrapping_key_payload.go
index 2c54db486..00f76ce0e 100644
--- a/services/kms/model_create_wrapping_key_payload.go
+++ b/services/kms/model_create_wrapping_key_payload.go
@@ -130,15 +130,9 @@ type CreateWrappingKeyPayloadGetDisplayNameRetType = string
 	types and functions for protection
 */
 
-// isEnumRef
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type CreateWrappingKeyPayloadGetProtectionAttributeType = *Protection
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type CreateWrappingKeyPayloadGetProtectionArgType = Protection
-
+// isNotNullableString
 // Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type CreateWrappingKeyPayloadGetProtectionRetType = Protection
+type CreateWrappingKeyPayloadGetProtectionAttributeType = *string
 
 // Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
 func getCreateWrappingKeyPayloadGetProtectionAttributeTypeOk(arg CreateWrappingKeyPayloadGetProtectionAttributeType) (ret CreateWrappingKeyPayloadGetProtectionRetType, ok bool) {
@@ -153,6 +147,12 @@ func setCreateWrappingKeyPayloadGetProtectionAttributeType(arg *CreateWrappingKe
 	*arg = &val
 }
 
+// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
+type CreateWrappingKeyPayloadGetProtectionArgType = string
+
+// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
+type CreateWrappingKeyPayloadGetProtectionRetType = string
+
 /*
 	types and functions for purpose
 */
@@ -191,6 +191,7 @@ type CreateWrappingKeyPayload struct {
 	// The display name to distinguish multiple wrapping keys. Valid characters: letters, digits, underscores and hyphens.
 	// REQUIRED
 	DisplayName CreateWrappingKeyPayloadGetDisplayNameAttributeType `json:"displayName" required:"true"`
+	// The underlying system that is responsible for protecting the key material. Possible values are \"software\" or \"hsm\"
 	// REQUIRED
 	Protection CreateWrappingKeyPayloadGetProtectionAttributeType `json:"protection" required:"true"`
 	// REQUIRED
diff --git a/services/kms/model_key.go b/services/kms/model_key.go
index 76ad77c5c..5fa8b049f 100644
--- a/services/kms/model_key.go
+++ b/services/kms/model_key.go
@@ -267,15 +267,9 @@ type KeyGetKeyRingIdRetType = string
 	types and functions for protection
 */
 
-// isEnumRef
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type KeyGetProtectionAttributeType = *Protection
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type KeyGetProtectionArgType = Protection
-
+// isNotNullableString
 // Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type KeyGetProtectionRetType = Protection
+type KeyGetProtectionAttributeType = *string
 
 // Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
 func getKeyGetProtectionAttributeTypeOk(arg KeyGetProtectionAttributeType) (ret KeyGetProtectionRetType, ok bool) {
@@ -290,6 +284,12 @@ func setKeyGetProtectionAttributeType(arg *KeyGetProtectionAttributeType, val Ke
 	*arg = &val
 }
 
+// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
+type KeyGetProtectionArgType = string
+
+// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
+type KeyGetProtectionRetType = string
+
 /*
 	types and functions for purpose
 */
@@ -502,6 +502,7 @@ type Key struct {
 	// The unique id of the key ring this key is assigned to.
 	// REQUIRED
 	KeyRingId KeyGetKeyRingIdAttributeType `json:"keyRingId" required:"true"`
+	// The underlying system that is responsible for protecting the key material. Possible values are \"software\" or \"hsm\"
 	// REQUIRED
 	Protection KeyGetProtectionAttributeType `json:"protection" required:"true"`
 	// REQUIRED
diff --git a/services/kms/model_protection.go b/services/kms/model_protection.go
deleted file mode 100644
index fcfccb0ff..000000000
--- a/services/kms/model_protection.go
+++ /dev/null
@@ -1,132 +0,0 @@
-/*
-STACKIT Key Management Service API
-
-This API provides endpoints for managing keys and key rings.
-
-API version: 1.0.0
-*/
-
-// Code generated by OpenAPI Generator (https://openapi-generator.tech); DO NOT EDIT.
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-package kms
-
-import (
-	"encoding/json"
-	"fmt"
-)
-
-// Protection The underlying system that is responsible for protecting the key material. (\"hsm\" is a private preview feature).
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type Protection string
-
-// List of protection
-const (
-	// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-	PROTECTION_SOFTWARE Protection = "software"
-	// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-	PROTECTION_HSM Protection = "hsm"
-)
-
-// All allowed values of Protection enum
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-var AllowedProtectionEnumValues = []Protection{
-	"software",
-	"hsm",
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v *Protection) UnmarshalJSON(src []byte) error {
-	var value string
-	err := json.Unmarshal(src, &value)
-	if err != nil {
-		return err
-	}
-	// Allow unmarshalling zero value for testing purposes
-	var zeroValue string
-	if value == zeroValue {
-		return nil
-	}
-	enumTypeValue := Protection(value)
-	for _, existing := range AllowedProtectionEnumValues {
-		if existing == enumTypeValue {
-			*v = enumTypeValue
-			return nil
-		}
-	}
-
-	return fmt.Errorf("%+v is not a valid Protection", value)
-}
-
-// NewProtectionFromValue returns a pointer to a valid Protection
-// for the value passed as argument, or an error if the value passed is not allowed by the enum
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func NewProtectionFromValue(v string) (*Protection, error) {
-	ev := Protection(v)
-	if ev.IsValid() {
-		return &ev, nil
-	} else {
-		return nil, fmt.Errorf("invalid value '%v' for Protection: valid values are %v", v, AllowedProtectionEnumValues)
-	}
-}
-
-// IsValid return true if the value is valid for the enum, false otherwise
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v Protection) IsValid() bool {
-	for _, existing := range AllowedProtectionEnumValues {
-		if existing == v {
-			return true
-		}
-	}
-	return false
-}
-
-// Ptr returns reference to protection value
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v Protection) Ptr() *Protection {
-	return &v
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type NullableProtection struct {
-	value *Protection
-	isSet bool
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v NullableProtection) Get() *Protection {
-	return v.value
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v *NullableProtection) Set(val *Protection) {
-	v.value = val
-	v.isSet = true
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v NullableProtection) IsSet() bool {
-	return v.isSet
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v *NullableProtection) Unset() {
-	v.value = nil
-	v.isSet = false
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func NewNullableProtection(val *Protection) *NullableProtection {
-	return &NullableProtection{value: val, isSet: true}
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v NullableProtection) MarshalJSON() ([]byte, error) {
-	return json.Marshal(v.value)
-}
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-func (v *NullableProtection) UnmarshalJSON(src []byte) error {
-	v.isSet = true
-	return json.Unmarshal(src, &v.value)
-}
diff --git a/services/kms/model_protection_test.go b/services/kms/model_protection_test.go
deleted file mode 100644
index 92baef33b..000000000
--- a/services/kms/model_protection_test.go
+++ /dev/null
@@ -1,11 +0,0 @@
-/*
-STACKIT Key Management Service API
-
-This API provides endpoints for managing keys and key rings.
-
-API version: 1.0.0
-*/
-
-// Code generated by OpenAPI Generator (https://openapi-generator.tech); DO NOT EDIT.
-
-package kms
diff --git a/services/kms/model_wrapping_key.go b/services/kms/model_wrapping_key.go
index df0954066..d699a82b5 100644
--- a/services/kms/model_wrapping_key.go
+++ b/services/kms/model_wrapping_key.go
@@ -240,15 +240,9 @@ type WrappingKeyGetKeyRingIdRetType = string
 	types and functions for protection
 */
 
-// isEnumRef
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type WrappingKeyGetProtectionAttributeType = *Protection
-
-// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type WrappingKeyGetProtectionArgType = Protection
-
+// isNotNullableString
 // Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
-type WrappingKeyGetProtectionRetType = Protection
+type WrappingKeyGetProtectionAttributeType = *string
 
 // Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
 func getWrappingKeyGetProtectionAttributeTypeOk(arg WrappingKeyGetProtectionAttributeType) (ret WrappingKeyGetProtectionRetType, ok bool) {
@@ -263,6 +257,12 @@ func setWrappingKeyGetProtectionAttributeType(arg *WrappingKeyGetProtectionAttri
 	*arg = &val
 }
 
+// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
+type WrappingKeyGetProtectionArgType = string
+
+// Deprecated: Will be removed after 2026-09-30. Move to the packages generated for each available API version instead
+type WrappingKeyGetProtectionRetType = string
+
 /*
 	types and functions for publicKey
 */
@@ -497,6 +497,7 @@ type WrappingKey struct {
 	// The unique id of the key ring this wrapping key is assigned to.
 	// REQUIRED
 	KeyRingId WrappingKeyGetKeyRingIdAttributeType `json:"keyRingId" required:"true"`
+	// The underlying system that is responsible for protecting the key material. Possible values are \"software\" or \"hsm\"
 	// REQUIRED
 	Protection WrappingKeyGetProtectionAttributeType `json:"protection" required:"true"`
 	// The public key of the wrapping key.
diff --git a/services/kms/oas_commit b/services/kms/oas_commit
index 8ae9a8db5..968568376 100644
--- a/services/kms/oas_commit
+++ b/services/kms/oas_commit
@@ -1 +1 @@
-e9fe931e91e0b8f067d5c12518398a52062ca794
+9ff2efb2c9614ebfffa878f0a99f82ee15fd4b9d
diff --git a/services/kms/v1api/model_create_key_payload.go b/services/kms/v1api/model_create_key_payload.go
index ae45dec63..a669b372d 100644
--- a/services/kms/v1api/model_create_key_payload.go
+++ b/services/kms/v1api/model_create_key_payload.go
@@ -27,9 +27,10 @@ type CreateKeyPayload struct {
 	// The display name to distinguish multiple keys. Valid characters: letters, digits, underscores and hyphens.
 	DisplayName string `json:"displayName" validate:"regexp=^[a-zA-Z0-9_-]+$"`
 	// States whether versions can be created or only imported.
-	ImportOnly           *bool      `json:"importOnly,omitempty"`
-	Protection           Protection `json:"protection"`
-	Purpose              Purpose    `json:"purpose"`
+	ImportOnly *bool `json:"importOnly,omitempty"`
+	// The underlying system that is responsible for protecting the key material. Possible values are \"software\" or \"hsm\"
+	Protection           string  `json:"protection"`
+	Purpose              Purpose `json:"purpose"`
 	AdditionalProperties map[string]interface{}
 }
 
@@ -39,7 +40,7 @@ type _CreateKeyPayload CreateKeyPayload
 // This constructor will assign default values to properties that have it defined,
 // and makes sure properties required by API are set, but the set of arguments
 // will change when the set of required properties is changed
-func NewCreateKeyPayload(algorithm Algorithm, displayName string, protection Protection, purpose Purpose) *CreateKeyPayload {
+func NewCreateKeyPayload(algorithm Algorithm, displayName string, protection string, purpose Purpose) *CreateKeyPayload {
 	this := CreateKeyPayload{}
 	var accessScope AccessScope = ACCESSSCOPE_PUBLIC
 	this.AccessScope = &accessScope
@@ -209,9 +210,9 @@ func (o *CreateKeyPayload) SetImportOnly(v bool) {
 }
 
 // GetProtection returns the Protection field value
-func (o *CreateKeyPayload) GetProtection() Protection {
+func (o *CreateKeyPayload) GetProtection() string {
 	if o == nil {
-		var ret Protection
+		var ret string
 		return ret
 	}
 
@@ -220,7 +221,7 @@ func (o *CreateKeyPayload) GetProtection() Protection {
 
 // GetProtectionOk returns a tuple with the Protection field value
 // and a boolean to check if the value has been set.
-func (o *CreateKeyPayload) GetProtectionOk() (*Protection, bool) {
+func (o *CreateKeyPayload) GetProtectionOk() (*string, bool) {
 	if o == nil {
 		return nil, false
 	}
@@ -228,7 +229,7 @@ func (o *CreateKeyPayload) GetProtectionOk() (*Protection, bool) {
 }
 
 // SetProtection sets field value
-func (o *CreateKeyPayload) SetProtection(v Protection) {
+func (o *CreateKeyPayload) SetProtection(v string) {
 	o.Protection = v
 }
 
diff --git a/services/kms/v1api/model_create_wrapping_key_payload.go b/services/kms/v1api/model_create_wrapping_key_payload.go
index 32fa50c64..52d133e05 100644
--- a/services/kms/v1api/model_create_wrapping_key_payload.go
+++ b/services/kms/v1api/model_create_wrapping_key_payload.go
@@ -25,8 +25,9 @@ type CreateWrappingKeyPayload struct {
 	// A user chosen description to distinguish multiple wrapping keys.
 	Description *string `json:"description,omitempty"`
 	// The display name to distinguish multiple wrapping keys. Valid characters: letters, digits, underscores and hyphens.
-	DisplayName          string          `json:"displayName" validate:"regexp=^[a-zA-Z0-9_-]+$"`
-	Protection           Protection      `json:"protection"`
+	DisplayName string `json:"displayName" validate:"regexp=^[a-zA-Z0-9_-]+$"`
+	// The underlying system that is responsible for protecting the key material. Possible values are \"software\" or \"hsm\"
+	Protection           string          `json:"protection"`
 	Purpose              WrappingPurpose `json:"purpose"`
 	AdditionalProperties map[string]interface{}
 }
@@ -37,7 +38,7 @@ type _CreateWrappingKeyPayload CreateWrappingKeyPayload
 // This constructor will assign default values to properties that have it defined,
 // and makes sure properties required by API are set, but the set of arguments
 // will change when the set of required properties is changed
-func NewCreateWrappingKeyPayload(algorithm WrappingAlgorithm, displayName string, protection Protection, purpose WrappingPurpose) *CreateWrappingKeyPayload {
+func NewCreateWrappingKeyPayload(algorithm WrappingAlgorithm, displayName string, protection string, purpose WrappingPurpose) *CreateWrappingKeyPayload {
 	this := CreateWrappingKeyPayload{}
 	var accessScope AccessScope = ACCESSSCOPE_PUBLIC
 	this.AccessScope = &accessScope
@@ -171,9 +172,9 @@ func (o *CreateWrappingKeyPayload) SetDisplayName(v string) {
 }
 
 // GetProtection returns the Protection field value
-func (o *CreateWrappingKeyPayload) GetProtection() Protection {
+func (o *CreateWrappingKeyPayload) GetProtection() string {
 	if o == nil {
-		var ret Protection
+		var ret string
 		return ret
 	}
 
@@ -182,7 +183,7 @@ func (o *CreateWrappingKeyPayload) GetProtection() Protection {
 
 // GetProtectionOk returns a tuple with the Protection field value
 // and a boolean to check if the value has been set.
-func (o *CreateWrappingKeyPayload) GetProtectionOk() (*Protection, bool) {
+func (o *CreateWrappingKeyPayload) GetProtectionOk() (*string, bool) {
 	if o == nil {
 		return nil, false
 	}
@@ -190,7 +191,7 @@ func (o *CreateWrappingKeyPayload) GetProtectionOk() (*Protection, bool) {
 }
 
 // SetProtection sets field value
-func (o *CreateWrappingKeyPayload) SetProtection(v Protection) {
+func (o *CreateWrappingKeyPayload) SetProtection(v string) {
 	o.Protection = v
 }
 
diff --git a/services/kms/v1api/model_key.go b/services/kms/v1api/model_key.go
index 3d3263f3e..39c86485c 100644
--- a/services/kms/v1api/model_key.go
+++ b/services/kms/v1api/model_key.go
@@ -36,10 +36,11 @@ type Key struct {
 	// States whether versions can be created or only imported.
 	ImportOnly bool `json:"importOnly"`
 	// The unique id of the key ring this key is assigned to.
-	KeyRingId            string     `json:"keyRingId"`
-	Protection           Protection `json:"protection"`
-	Purpose              Purpose    `json:"purpose"`
-	State                KeyState   `json:"state"`
+	KeyRingId string `json:"keyRingId"`
+	// The underlying system that is responsible for protecting the key material. Possible values are \"software\" or \"hsm\"
+	Protection           string   `json:"protection"`
+	Purpose              Purpose  `json:"purpose"`
+	State                KeyState `json:"state"`
 	AdditionalProperties map[string]interface{}
 }
 
@@ -49,7 +50,7 @@ type _Key Key
 // This constructor will assign default values to properties that have it defined,
 // and makes sure properties required by API are set, but the set of arguments
 // will change when the set of required properties is changed
-func NewKey(accessScope AccessScope, algorithm Algorithm, createdAt time.Time, displayName string, id string, importOnly bool, keyRingId string, protection Protection, purpose Purpose, state KeyState) *Key {
+func NewKey(accessScope AccessScope, algorithm Algorithm, createdAt time.Time, displayName string, id string, importOnly bool, keyRingId string, protection string, purpose Purpose, state KeyState) *Key {
 	this := Key{}
 	this.AccessScope = accessScope
 	this.Algorithm = algorithm
@@ -309,9 +310,9 @@ func (o *Key) SetKeyRingId(v string) {
 }
 
 // GetProtection returns the Protection field value
-func (o *Key) GetProtection() Protection {
+func (o *Key) GetProtection() string {
 	if o == nil {
-		var ret Protection
+		var ret string
 		return ret
 	}
 
@@ -320,7 +321,7 @@ func (o *Key) GetProtection() Protection {
 
 // GetProtectionOk returns a tuple with the Protection field value
 // and a boolean to check if the value has been set.
-func (o *Key) GetProtectionOk() (*Protection, bool) {
+func (o *Key) GetProtectionOk() (*string, bool) {
 	if o == nil {
 		return nil, false
 	}
@@ -328,7 +329,7 @@ func (o *Key) GetProtectionOk() (*Protection, bool) {
 }
 
 // SetProtection sets field value
-func (o *Key) SetProtection(v Protection) {
+func (o *Key) SetProtection(v string) {
 	o.Protection = v
 }
 
diff --git a/services/kms/v1api/model_protection.go b/services/kms/v1api/model_protection.go
deleted file mode 100644
index 41b52c8e5..000000000
--- a/services/kms/v1api/model_protection.go
+++ /dev/null
@@ -1,113 +0,0 @@
-/*
-STACKIT Key Management Service API
-
-This API provides endpoints for managing keys and key rings.
-
-API version: 1.0.0
-*/
-
-// Code generated by OpenAPI Generator (https://openapi-generator.tech); DO NOT EDIT.
-
-package v1api
-
-import (
-	"encoding/json"
-	"fmt"
-)
-
-// Protection The underlying system that is responsible for protecting the key material. (\"hsm\" is a private preview feature).
-type Protection string
-
-// List of protection
-const (
-	PROTECTION_SOFTWARE                 Protection = "software"
-	PROTECTION_HSM                      Protection = "hsm"
-	PROTECTION_UNKNOWN_DEFAULT_OPEN_API Protection = "unknown_default_open_api"
-)
-
-// All allowed values of Protection enum
-var AllowedProtectionEnumValues = []Protection{
-	"software",
-	"hsm",
-	"unknown_default_open_api",
-}
-
-func (v *Protection) UnmarshalJSON(src []byte) error {
-	var value string
-	err := json.Unmarshal(src, &value)
-	if err != nil {
-		return err
-	}
-	enumTypeValue := Protection(value)
-	for _, existing := range AllowedProtectionEnumValues {
-		if existing == enumTypeValue {
-			*v = enumTypeValue
-			return nil
-		}
-	}
-
-	*v = PROTECTION_UNKNOWN_DEFAULT_OPEN_API
-	return nil
-}
-
-// NewProtectionFromValue returns a pointer to a valid Protection
-// for the value passed as argument, or an error if the value passed is not allowed by the enum
-func NewProtectionFromValue(v string) (*Protection, error) {
-	ev := Protection(v)
-	if ev.IsValid() {
-		return &ev, nil
-	} else {
-		return nil, fmt.Errorf("invalid value '%v' for Protection: valid values are %v", v, AllowedProtectionEnumValues)
-	}
-}
-
-// IsValid return true if the value is valid for the enum, false otherwise
-func (v Protection) IsValid() bool {
-	for _, existing := range AllowedProtectionEnumValues {
-		if existing == v {
-			return true
-		}
-	}
-	return false
-}
-
-// Ptr returns reference to protection value
-func (v Protection) Ptr() *Protection {
-	return &v
-}
-
-type NullableProtection struct {
-	value *Protection
-	isSet bool
-}
-
-func (v NullableProtection) Get() *Protection {
-	return v.value
-}
-
-func (v *NullableProtection) Set(val *Protection) {
-	v.value = val
-	v.isSet = true
-}
-
-func (v NullableProtection) IsSet() bool {
-	return v.isSet
-}
-
-func (v *NullableProtection) Unset() {
-	v.value = nil
-	v.isSet = false
-}
-
-func NewNullableProtection(val *Protection) *NullableProtection {
-	return &NullableProtection{value: val, isSet: true}
-}
-
-func (v NullableProtection) MarshalJSON() ([]byte, error) {
-	return json.Marshal(v.value)
-}
-
-func (v *NullableProtection) UnmarshalJSON(src []byte) error {
-	v.isSet = true
-	return json.Unmarshal(src, &v.value)
-}
diff --git a/services/kms/v1api/model_wrapping_key.go b/services/kms/v1api/model_wrapping_key.go
index 8c8c6426e..11100599f 100644
--- a/services/kms/v1api/model_wrapping_key.go
+++ b/services/kms/v1api/model_wrapping_key.go
@@ -34,8 +34,9 @@ type WrappingKey struct {
 	// A auto generated unique id which identifies the wrapping keys.
 	Id string `json:"id"`
 	// The unique id of the key ring this wrapping key is assigned to.
-	KeyRingId  string     `json:"keyRingId"`
-	Protection Protection `json:"protection"`
+	KeyRingId string `json:"keyRingId"`
+	// The underlying system that is responsible for protecting the key material. Possible values are \"software\" or \"hsm\"
+	Protection string `json:"protection"`
 	// The public key of the wrapping key.
 	PublicKey            *string          `json:"publicKey,omitempty"`
 	Purpose              WrappingPurpose  `json:"purpose"`
@@ -49,7 +50,7 @@ type _WrappingKey WrappingKey
 // This constructor will assign default values to properties that have it defined,
 // and makes sure properties required by API are set, but the set of arguments
 // will change when the set of required properties is changed
-func NewWrappingKey(accessScope AccessScope, algorithm WrappingAlgorithm, createdAt time.Time, displayName string, expiresAt time.Time, id string, keyRingId string, protection Protection, purpose WrappingPurpose, state WrappingKeyState) *WrappingKey {
+func NewWrappingKey(accessScope AccessScope, algorithm WrappingAlgorithm, createdAt time.Time, displayName string, expiresAt time.Time, id string, keyRingId string, protection string, purpose WrappingPurpose, state WrappingKeyState) *WrappingKey {
 	this := WrappingKey{}
 	this.AccessScope = accessScope
 	this.Algorithm = algorithm
@@ -275,9 +276,9 @@ func (o *WrappingKey) SetKeyRingId(v string) {
 }
 
 // GetProtection returns the Protection field value
-func (o *WrappingKey) GetProtection() Protection {
+func (o *WrappingKey) GetProtection() string {
 	if o == nil {
-		var ret Protection
+		var ret string
 		return ret
 	}
 
@@ -286,7 +287,7 @@ func (o *WrappingKey) GetProtection() Protection {
 
 // GetProtectionOk returns a tuple with the Protection field value
 // and a boolean to check if the value has been set.
-func (o *WrappingKey) GetProtectionOk() (*Protection, bool) {
+func (o *WrappingKey) GetProtectionOk() (*string, bool) {
 	if o == nil {
 		return nil, false
 	}
@@ -294,7 +295,7 @@ func (o *WrappingKey) GetProtectionOk() (*Protection, bool) {
 }
 
 // SetProtection sets field value
-func (o *WrappingKey) SetProtection(v Protection) {
+func (o *WrappingKey) SetProtection(v string) {
 	o.Protection = v
 }