Skip to content

Commit e69e0de

Browse files
watany-devwatany-dev
authored
chore(ec2): KMS supports FIPS 140-2 enabled Endpoint and Other (#24679)
Since the Version Update for RDS was merged as a "feat", we will issue this Pull Request as a "feat" as well, not as a "chore". However, there is no particular preference, so it can also be issued as a "chore". Endpoints corresponding to the following news: https://aws.amazon.com/about-aws/whats-new/2023/03/aws-key-management-service-fips-140-2-interface-vpc-endpoints/?nc1=h_ls Endpoints that are obviously not supported according to the following link: https://docs.aws.amazon.com/vpc/latest/privatelink/aws-services-privatelink-support.html ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent 5771d79 commit e69e0de

File tree

2 files changed

+36
-0
lines changed

2 files changed

+36
-0
lines changed

‎packages/@aws-cdk/aws-ec2/lib/vpc-endpoint.ts

+18
Original file line numberDiff line numberDiff line change
@@ -260,6 +260,7 @@ export class InterfaceVpcEndpointService implements IInterfaceVpcEndpointService
260260
export class InterfaceVpcEndpointAwsService implements IInterfaceVpcEndpointService {
261261
public static readonly SAGEMAKER_STUDIO = new InterfaceVpcEndpointAwsService('studio', 'aws.sagemaker');
262262
public static readonly SAGEMAKER_NOTEBOOK = new InterfaceVpcEndpointAwsService('notebook', 'aws.sagemaker');
263+
public static readonly KENDRA_RANKING = new InterfaceVpcEndpointAwsService('kendra-ranking', 'aws.api');
263264
public static readonly ACCESS_ANALYZER = new InterfaceVpcEndpointAwsService('access-analyzer');
264265
public static readonly ACCOUNT_MANAGEMENT = new InterfaceVpcEndpointAwsService('account');
265266
public static readonly APP_MESH = new InterfaceVpcEndpointAwsService('appmesh-envoy-management');
@@ -307,6 +308,7 @@ export class InterfaceVpcEndpointAwsService implements IInterfaceVpcEndpointServ
307308
public static readonly COMPREHEND_MEDICAL = new InterfaceVpcEndpointAwsService('comprehendmedical');
308309
public static readonly CONFIG = new InterfaceVpcEndpointAwsService('config');
309310
public static readonly CONNECT_APP_INTEGRATIONS = new InterfaceVpcEndpointAwsService('app-integrations');
311+
public static readonly CONNECT_CASES = new InterfaceVpcEndpointAwsService('cases');
310312
public static readonly CONNECT_CONNECT_CAMPAIGNS = new InterfaceVpcEndpointAwsService('connect-campaigns');
311313
public static readonly CONNECT_PROFILE = new InterfaceVpcEndpointAwsService('profile');
312314
public static readonly CONNECT_VOICEID = new InterfaceVpcEndpointAwsService('voiceid');
@@ -325,8 +327,10 @@ export class InterfaceVpcEndpointAwsService implements IInterfaceVpcEndpointServ
325327
public static readonly ECS = new InterfaceVpcEndpointAwsService('ecs');
326328
public static readonly ECS_AGENT = new InterfaceVpcEndpointAwsService('ecs-agent');
327329
public static readonly ECS_TELEMETRY = new InterfaceVpcEndpointAwsService('ecs-telemetry');
330+
public static readonly EKS = new InterfaceVpcEndpointAwsService('eks');
328331
public static readonly ELASTIC_BEANSTALK = new InterfaceVpcEndpointAwsService('elasticbeanstalk');
329332
public static readonly ELASTIC_BEANSTALK_HEALTH = new InterfaceVpcEndpointAwsService('elasticbeanstalk-health');
333+
public static readonly ELASTIC_DISASTER_RECOVERY = new InterfaceVpcEndpointAwsService('drs');
330334
public static readonly ELASTIC_FILESYSTEM = new InterfaceVpcEndpointAwsService('elasticfilesystem');
331335
public static readonly ELASTIC_FILESYSTEM_FIPS = new InterfaceVpcEndpointAwsService('elasticfilesystem-fips');
332336
public static readonly ELASTIC_INFERENCE_RUNTIME = new InterfaceVpcEndpointAwsService('elastic-inference.runtime');
@@ -354,25 +358,30 @@ export class InterfaceVpcEndpointAwsService implements IInterfaceVpcEndpointServ
354358
public static readonly GLUE = new InterfaceVpcEndpointAwsService('glue');
355359
public static readonly GLUE_DATABREW = new InterfaceVpcEndpointAwsService('databrew');
356360
public static readonly GRAFANA = new InterfaceVpcEndpointAwsService('grafana');
361+
public static readonly GRAFANA_WORKSPACE = new InterfaceVpcEndpointAwsService('grafana-workspace');
357362
public static readonly GROUNDSTATION = new InterfaceVpcEndpointAwsService('groundstation');
358363
public static readonly HEALTHLAKE = new InterfaceVpcEndpointAwsService('healthlake');
359364
public static readonly IAM_IDENTITY_CENTER = new InterfaceVpcEndpointAwsService('identitystore');
360365
public static readonly IAM_ROLES_ANYWHERE = new InterfaceVpcEndpointAwsService('rolesanywhere');
361366
public static readonly INSPECTOR = new InterfaceVpcEndpointAwsService('inspector2');
362367
public static readonly IOT_CORE = new InterfaceVpcEndpointAwsService('iot.data');
368+
public static readonly IOT_CORE_DEVICE_ADVISOR = new InterfaceVpcEndpointAwsService('deviceadvisor.iot');
363369
public static readonly IOT_CORE_FOR_LORAWAN = new InterfaceVpcEndpointAwsService('iotwireless.api');
364370
public static readonly IOT_LORAWAN_CUPS = new InterfaceVpcEndpointAwsService('lorawan.cups');
365371
public static readonly IOT_LORAWAN_LNS = new InterfaceVpcEndpointAwsService('lorawan.lns');
366372
public static readonly IOT_GREENGRASS = new InterfaceVpcEndpointAwsService('greengrass');
373+
public static readonly IOT_ROBORUNNER = new InterfaceVpcEndpointAwsService('iotroborunner');
367374
public static readonly IOT_SITEWISE_API = new InterfaceVpcEndpointAwsService('iotsitewise.api');
368375
public static readonly IOT_SITEWISE_DATA = new InterfaceVpcEndpointAwsService('iotsitewise.data');
369376
public static readonly IOT_TWINMAKER_API = new InterfaceVpcEndpointAwsService('iottwinmaker.api');
370377
public static readonly IOT_TWINMAKER_DATA = new InterfaceVpcEndpointAwsService('iottwinmaker.data');
378+
public static readonly KENDRA = new InterfaceVpcEndpointAwsService('kendra');
371379
public static readonly KEYSPACES = new InterfaceVpcEndpointAwsService('cassandra', '', 9142);
372380
public static readonly KEYSPACES_FIPS = new InterfaceVpcEndpointAwsService('cassandra-fips', '', 9142);
373381
public static readonly KINESIS_STREAMS = new InterfaceVpcEndpointAwsService('kinesis-streams');
374382
public static readonly KINESIS_FIREHOSE = new InterfaceVpcEndpointAwsService('kinesis-firehose');
375383
public static readonly KMS = new InterfaceVpcEndpointAwsService('kms');
384+
public static readonly KMS_FIPS = new InterfaceVpcEndpointAwsService('kms-fips');
376385
public static readonly LAKE_FORMATION = new InterfaceVpcEndpointAwsService('lakeformation');
377386
public static readonly CLOUDWATCH_LOGS = new InterfaceVpcEndpointAwsService('logs');
378387
public static readonly CLOUDWATCH = new InterfaceVpcEndpointAwsService('monitoring');
@@ -397,8 +406,15 @@ export class InterfaceVpcEndpointAwsService implements IInterfaceVpcEndpointServ
397406
public static readonly MIGRATIONHUB_REFACTOR_SPACES = new InterfaceVpcEndpointAwsService('refactor-spaces');
398407
public static readonly MIGRATIONHUB_STRATEGY = new InterfaceVpcEndpointAwsService('migrationhub-strategy');
399408
public static readonly NIMBLE_STUDIO = new InterfaceVpcEndpointAwsService('nimble');
409+
public static readonly OMICS_ANALYTICS = new InterfaceVpcEndpointAwsService('analytics-omics');
410+
public static readonly OMICS_CONTROL_STORAGE = new InterfaceVpcEndpointAwsService('control-storage-omics');
411+
public static readonly OMICS_STORAGE = new InterfaceVpcEndpointAwsService('storage-omics');
412+
public static readonly OMICS_TAGS = new InterfaceVpcEndpointAwsService('tags-omics');
413+
public static readonly OMICS_WORKFLOWS = new InterfaceVpcEndpointAwsService('workflows-omics');
400414
public static readonly PANORAMA = new InterfaceVpcEndpointAwsService('panorama');
401415
public static readonly PINPOINT = new InterfaceVpcEndpointAwsService('pinpoint-sms-voice-v2');
416+
public static readonly POLLY = new InterfaceVpcEndpointAwsService('polly');
417+
public static readonly PRIVATE_5G = new InterfaceVpcEndpointAwsService('private-networks');
402418
public static readonly PROTON = new InterfaceVpcEndpointAwsService('proton');
403419
public static readonly QLDB = new InterfaceVpcEndpointAwsService('qldb.session');
404420
public static readonly RDS = new InterfaceVpcEndpointAwsService('rds');
@@ -408,9 +424,11 @@ export class InterfaceVpcEndpointAwsService implements IInterfaceVpcEndpointServ
408424
public static readonly REDSHIFT_FIPS = new InterfaceVpcEndpointAwsService('redshift-fips');
409425
public static readonly REDSHIFT_DATA = new InterfaceVpcEndpointAwsService('redshift-data');
410426
public static readonly S3 = new InterfaceVpcEndpointAwsService('s3');
427+
public static readonly S3_MULTI_REGION_ACCESS_POINTS = new InterfaceVpcEndpointAwsService('s3-global.accesspoint', 'com.amazonaws');
411428
public static readonly S3_OUTPOSTS = new InterfaceVpcEndpointAwsService('s3-outposts');
412429
public static readonly SAGEMAKER_API = new InterfaceVpcEndpointAwsService('sagemaker.api');
413430
public static readonly SAGEMAKER_FEATURESTORE_RUNTIME = new InterfaceVpcEndpointAwsService('sagemaker.featurestore-runtime');
431+
public static readonly SAGEMAKER_METRICS = new InterfaceVpcEndpointAwsService('sagemaker.metrics');
414432
public static readonly SAGEMAKER_RUNTIME = new InterfaceVpcEndpointAwsService('sagemaker.runtime');
415433
public static readonly SAGEMAKER_RUNTIME_FIPS = new InterfaceVpcEndpointAwsService('sagemaker.runtime-fips');
416434
public static readonly SECRETS_MANAGER = new InterfaceVpcEndpointAwsService('secretsmanager');

‎packages/@aws-cdk/aws-ec2/package.json

+18
Original file line numberDiff line numberDiff line change
@@ -291,6 +291,7 @@
291291
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.CODEGURU_REVIEWER",
292292
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.CODEPIPELINE",
293293
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.CODESTAR_CONNECTIONS",
294+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.CONNECT_CASES",
294295
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.CONFIG",
295296
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.COMPREHEND",
296297
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.COMPREHEND_MEDICAL",
@@ -306,7 +307,9 @@
306307
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ECS",
307308
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ECS_AGENT",
308309
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ECS_TELEMETRY",
310+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.EKS",
309311
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ELASTICACHE",
312+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ELASTIC_DISASTER_RECOVERY",
310313
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ELASTIC_FILESYSTEM",
311314
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ELASTIC_FILESYSTEM_FIPS",
312315
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ELASTIC_INFERENCE_RUNTIME",
@@ -319,19 +322,32 @@
319322
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.GLUE",
320323
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.GLUE_DATABREW",
321324
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.GRAFANA",
325+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.GRAFANA_WORKSPACE",
322326
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.GROUNDSTATION",
327+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.KENDRA",
328+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.KENDRA_RANKING",
323329
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.KEYSPACES",
324330
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.KINESIS_STREAMS",
325331
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.KINESIS_FIREHOSE",
326332
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.KMS",
333+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.KMS_FIPS",
327334
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.HEALTHLAKE",
328335
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.IAM_IDENTITY_CENTER",
329336
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.IAM_ROLES_ANYWHERE",
330337
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.IMAGE_BUILDER",
331338
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.INSPECTOR",
332339
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.IOT_CORE",
333340
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.IOT_GREENGRASS",
341+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.IOT_CORE_DEVICE_ADVISOR",
342+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.IOT_ROBORUNNER",
343+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.OMICS_ANALYTICS",
344+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.OMICS_CONTROL_STORAGE",
345+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.OMICS_STORAGE",
346+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.OMICS_TAGS",
347+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.OMICS_WORKFLOWS",
334348
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.PRIVATE_CERTIFICATE_AUTHORITY",
349+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.POLLY",
350+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.PRIVATE_5G",
335351
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.RDS",
336352
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.RDS_DATA",
337353
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.S3",
@@ -355,6 +371,8 @@
355371
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.REKOGNITION_FIPS",
356372
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.ROBOMAKER",
357373
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.S3_OUTPOSTS",
374+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.S3_MULTI_REGION_ACCESS_POINTS",
375+
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.SAGEMAKER_METRICS",
358376
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.SES",
359377
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.SNOW_DEVICE_MANAGEMENT",
360378
"docs-public-apis:@aws-cdk/aws-ec2.InterfaceVpcEndpointAwsService.STEP_FUNCTIONS",

0 commit comments

Comments
 (0)