Skip to content

Commit 232be1e

Browse files
author
AWS
committed
AWS IoT Update: AWS IoT Core released Fleet Provisioning for scalable onboarding of IoT devices to the cloud. This release includes support for customer's Lambda functions to validate devices during onboarding. Fleet Provisioning also allows devices to send Certificate Signing Requests (CSR) to AWS IoT Core for signing and getting a unique certificate. Lastly, AWS IoT Core added a feature to register the same certificate for multiple accounts in the same region without needing to register the certificate authority (CA).
1 parent a0f76ff commit 232be1e

File tree

2 files changed

+153
-13
lines changed

2 files changed

+153
-13
lines changed

‎.changes/next-release/feature-AWSIoT-2d21d9e.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"type": "feature",
3+
"category": "AWS IoT",
4+
"description": "AWS IoT Core released Fleet Provisioning for scalable onboarding of IoT devices to the cloud. This release includes support for customer's Lambda functions to validate devices during onboarding. Fleet Provisioning also allows devices to send Certificate Signing Requests (CSR) to AWS IoT Core for signing and getting a unique certificate. Lastly, AWS IoT Core added a feature to register the same certificate for multiple accounts in the same region without needing to register the certificate authority (CA)."
5+
}

‎services/iot/src/main/resources/codegen-resources/service-2.json

Lines changed: 148 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1361,6 +1361,7 @@
13611361
"errors":[
13621362
{"shape":"ResourceNotFoundException"},
13631363
{"shape":"ThrottlingException"},
1364+
{"shape":"InvalidRequestException"},
13641365
{"shape":"UnauthorizedException"},
13651366
{"shape":"ServiceUnavailableException"},
13661367
{"shape":"InternalFailureException"}
@@ -2813,6 +2814,26 @@
28132814
],
28142815
"documentation":"<p>Registers a device certificate with AWS IoT. If you have more than one CA certificate that has the same subject field, you must specify the CA certificate that was used to sign the device certificate being registered.</p>"
28152816
},
2817+
"RegisterCertificateWithoutCA":{
2818+
"name":"RegisterCertificateWithoutCA",
2819+
"http":{
2820+
"method":"POST",
2821+
"requestUri":"/certificate/register-no-ca"
2822+
},
2823+
"input":{"shape":"RegisterCertificateWithoutCARequest"},
2824+
"output":{"shape":"RegisterCertificateWithoutCAResponse"},
2825+
"errors":[
2826+
{"shape":"ResourceAlreadyExistsException"},
2827+
{"shape":"InvalidRequestException"},
2828+
{"shape":"CertificateStateException"},
2829+
{"shape":"CertificateValidationException"},
2830+
{"shape":"ThrottlingException"},
2831+
{"shape":"UnauthorizedException"},
2832+
{"shape":"ServiceUnavailableException"},
2833+
{"shape":"InternalFailureException"}
2834+
],
2835+
"documentation":"<p>Register a certificate that does not have a certificate authority (CA).</p>"
2836+
},
28162837
"RegisterThing":{
28172838
"name":"RegisterThing",
28182839
"http":{
@@ -2980,8 +3001,7 @@
29803001
{"shape":"InternalException"},
29813002
{"shape":"NotConfiguredException"},
29823003
{"shape":"InvalidRequestException"},
2983-
{"shape":"ServiceUnavailableException"},
2984-
{"shape":"LimitExceededException"}
3004+
{"shape":"ServiceUnavailableException"}
29853005
],
29863006
"documentation":"<p>Sets the logging level.</p>"
29873007
},
@@ -4468,6 +4488,7 @@
44684488
},
44694489
"AuthInfo":{
44704490
"type":"structure",
4491+
"required":["resources"],
44714492
"members":{
44724493
"actionType":{
44734494
"shape":"ActionType",
@@ -4997,6 +5018,10 @@
49975018
"shape":"CertificateStatus",
49985019
"documentation":"<p>The status of the certificate.</p> <p>The status value REGISTER_INACTIVE is deprecated and should not be used.</p>"
49995020
},
5021+
"certificateMode":{
5022+
"shape":"CertificateMode",
5023+
"documentation":"<p>The mode of the certificate.</p>"
5024+
},
50005025
"creationDate":{
50015026
"shape":"DateType",
50025027
"documentation":"<p>The date and time the certificate was created.</p>"
@@ -5071,6 +5096,10 @@
50715096
"validity":{
50725097
"shape":"CertificateValidity",
50735098
"documentation":"<p>When the certificate is valid.</p>"
5099+
},
5100+
"certificateMode":{
5101+
"shape":"CertificateMode",
5102+
"documentation":"<p>The mode of the certificate.</p>"
50745103
}
50755104
},
50765105
"documentation":"<p>Describes a certificate.</p>"
@@ -5081,6 +5110,13 @@
50815110
"min":64,
50825111
"pattern":"(0x)?[a-fA-F0-9]+"
50835112
},
5113+
"CertificateMode":{
5114+
"type":"string",
5115+
"enum":[
5116+
"DEFAULT",
5117+
"SNI_ONLY"
5118+
]
5119+
},
50845120
"CertificateName":{"type":"string"},
50855121
"CertificatePathOnDevice":{"type":"string"},
50865122
"CertificatePem":{
@@ -5406,6 +5442,10 @@
54065442
"shape":"AuthorizerStatus",
54075443
"documentation":"<p>The status of the create authorizer request.</p>"
54085444
},
5445+
"tags":{
5446+
"shape":"TagList",
5447+
"documentation":"<p>Metadata which can be used to manage the custom authorizer.</p> <note> <p>For URI Request parameters use format: ...key1=value1&amp;key2=value2...</p> <p>For the CLI command-line parameter use format: &amp;&amp;tags \"key1=value1&amp;key2=value2...\"</p> <p>For the cli-input-json file use format: \"tags\": \"key1=value1&amp;key2=value2...\"</p> </note>"
5448+
},
54095449
"signingDisabled":{
54105450
"shape":"BooleanKey",
54115451
"documentation":"<p>Specifies whether AWS IoT validates the token signature in an authorization request.</p>"
@@ -5572,7 +5612,11 @@
55725612
},
55735613
"serviceType":{
55745614
"shape":"ServiceType",
5575-
"documentation":"<p>The type of service delivered by the endpoint.</p>"
5615+
"documentation":"<p>The type of service delivered by the endpoint.</p> <note> <p>AWS IoT Core currently supports only the <code>DATA</code> service type.</p> </note>"
5616+
},
5617+
"tags":{
5618+
"shape":"TagList",
5619+
"documentation":"<p>Metadata which can be used to manage the domain configuration.</p> <note> <p>For URI Request parameters use format: ...key1=value1&amp;key2=value2...</p> <p>For the CLI command-line parameter use format: &amp;&amp;tags \"key1=value1&amp;key2=value2...\"</p> <p>For the cli-input-json file use format: \"tags\": \"key1=value1&amp;key2=value2...\"</p> </note>"
55765620
}
55775621
}
55785622
},
@@ -5898,6 +5942,10 @@
58985942
"policyDocument":{
58995943
"shape":"PolicyDocument",
59005944
"documentation":"<p>The JSON document that describes the policy. <b>policyDocument</b> must have a minimum length of 1, with a maximum length of 2048, excluding whitespace.</p>"
5945+
},
5946+
"tags":{
5947+
"shape":"TagList",
5948+
"documentation":"<p>Metadata which can be used to manage the policy.</p> <note> <p>For URI Request parameters use format: ...key1=value1&amp;key2=value2...</p> <p>For the CLI command-line parameter use format: &amp;&amp;tags \"key1=value1&amp;key2=value2...\"</p> <p>For the cli-input-json file use format: \"tags\": \"key1=value1&amp;key2=value2...\"</p> </note>"
59015949
}
59025950
},
59035951
"documentation":"<p>The input for the CreatePolicy operation.</p>"
@@ -6033,6 +6081,10 @@
60336081
"shape":"RoleArn",
60346082
"documentation":"<p>The role ARN for the role associated with the fleet provisioning template. This IoT role grants permission to provision a device.</p>"
60356083
},
6084+
"preProvisioningHook":{
6085+
"shape":"ProvisioningHook",
6086+
"documentation":"<p>Creates a pre-provisioning hook template.</p>"
6087+
},
60366088
"tags":{
60376089
"shape":"TagList",
60386090
"documentation":"<p>Metadata which can be used to manage the fleet provisioning template.</p> <note> <p>For URI Request parameters use format: ...key1=value1&amp;key2=value2...</p> <p>For the CLI command-line parameter use format: &amp;&amp;tags \"key1=value1&amp;key2=value2...\"</p> <p>For the cli-input-json file use format: \"tags\": \"key1=value1&amp;key2=value2...\"</p> </note>"
@@ -6122,6 +6174,10 @@
61226174
"credentialDurationSeconds":{
61236175
"shape":"CredentialDurationSeconds",
61246176
"documentation":"<p>How long (in seconds) the credentials will be valid.</p>"
6177+
},
6178+
"tags":{
6179+
"shape":"TagList",
6180+
"documentation":"<p>Metadata which can be used to manage the role alias.</p> <note> <p>For URI Request parameters use format: ...key1=value1&amp;key2=value2...</p> <p>For the CLI command-line parameter use format: &amp;&amp;tags \"key1=value1&amp;key2=value2...\"</p> <p>For the cli-input-json file use format: \"tags\": \"key1=value1&amp;key2=value2...\"</p> </note>"
61256181
}
61266182
}
61276183
},
@@ -6334,7 +6390,7 @@
63346390
"members":{
63356391
"thingName":{
63366392
"shape":"ThingName",
6337-
"documentation":"<p>The name of the thing to create.</p>",
6393+
"documentation":"<p>The name of the thing to create.</p> <p>You can't change a thing's name after you create it. To change a thing's name, you must create a new thing, give it the new name, and then delete the old thing.</p>",
63386394
"location":"uri",
63396395
"locationName":"thingName"
63406396
},
@@ -7668,6 +7724,10 @@
76687724
"provisioningRoleArn":{
76697725
"shape":"RoleArn",
76707726
"documentation":"<p>The ARN of the role associated with the provisioning template. This IoT role grants permission to provision a device.</p>"
7727+
},
7728+
"preProvisioningHook":{
7729+
"shape":"ProvisioningHook",
7730+
"documentation":"<p>Gets information about a pre-provisioned hook.</p>"
76717731
}
76727732
}
76737733
},
@@ -7995,7 +8055,7 @@
79958055
"members":{
79968056
"defaultClientId":{
79978057
"shape":"ClientId",
7998-
"documentation":"<p>The default client ID.</p>"
8058+
"documentation":"<p>The default MQTT client ID. For a typical device, the thing name is also used as the default MQTT client ID. Although we don’t require a mapping between a thing's registry name and its use of MQTT client IDs, certificates, or shadow state, we recommend that you choose a thing name and use it as the MQTT client ID for the registry and the Device Shadow service.</p> <p>This lets you better organize your AWS IoT fleet without removing the flexibility of the underlying device certificate model or shadows.</p>"
79998059
},
80008060
"thingName":{
80018061
"shape":"ThingName",
@@ -11840,6 +11900,7 @@
1184011900
},
1184111901
"MaxJobExecutionsPerMin":{
1184211902
"type":"integer",
11903+
"max":1000,
1184311904
"min":1
1184411905
},
1184511906
"MaxResults":{
@@ -11878,7 +11939,7 @@
1187811939
},
1187911940
"operator":{
1188011941
"shape":"DimensionValueOperator",
11881-
"documentation":"<p>Defines how the <code>dimensionValues</code> of a dimension are interpreted. For example, for DimensionType TOPIC_FILTER, with <code>IN</code> operator, a message will be counted only if its topic matches one of the topic filters. With <code>NOT_IN</code> Operator, a message will be counted only if it doesn't match any of the topic filters. The operator is optional: if it's not provided (is <code>null</code>), it will be interpreted as <code>IN</code>.</p>"
11942+
"documentation":"<p>Defines how the <code>dimensionValues</code> of a dimension are interpreted. For example, for dimension type TOPIC_FILTER, the <code>IN</code> operator, a message will be counted only if its topic matches one of the topic filters. With <code>NOT_IN</code> operator, a message will be counted only if it doesn't match any of the topic filters. The operator is optional: if it's not provided (is <code>null</code>), it will be interpreted as <code>IN</code>.</p>"
1188211943
}
1188311944
},
1188411945
"documentation":"<p>The dimension of a metric.</p>"
@@ -12294,6 +12355,12 @@
1229412355
},
1229512356
"PartitionKey":{"type":"string"},
1229612357
"PayloadField":{"type":"string"},
12358+
"PayloadVersion":{
12359+
"type":"string",
12360+
"max":32,
12361+
"min":10,
12362+
"pattern":"^[0-9-]+$"
12363+
},
1229712364
"Percent":{
1229812365
"type":"double",
1229912366
"max":100,
@@ -12470,6 +12537,21 @@
1247012537
"max":2,
1247112538
"min":1
1247212539
},
12540+
"ProvisioningHook":{
12541+
"type":"structure",
12542+
"required":["targetArn"],
12543+
"members":{
12544+
"payloadVersion":{
12545+
"shape":"PayloadVersion",
12546+
"documentation":"<p>The payload that was sent to the target function.</p> <p> <i>Note:</i> Only Lambda functions are currently supported.</p>"
12547+
},
12548+
"targetArn":{
12549+
"shape":"TargetArn",
12550+
"documentation":"<p>The ARN of the target function.</p> <p> <i>Note:</i> Only Lambda functions are currently supported.</p>"
12551+
}
12552+
},
12553+
"documentation":"<p>Structure that contains <code>payloadVersion</code> and <code>targetArn</code>.</p>"
12554+
},
1247312555
"ProvisioningTemplateListing":{
1247412556
"type":"list",
1247512557
"member":{"shape":"ProvisioningTemplateSummary"}
@@ -12667,6 +12749,10 @@
1266712749
"registrationConfig":{
1266812750
"shape":"RegistrationConfig",
1266912751
"documentation":"<p>Information about the registration configuration.</p>"
12752+
},
12753+
"tags":{
12754+
"shape":"TagList",
12755+
"documentation":"<p>Metadata which can be used to manage the CA certificate.</p> <note> <p>For URI Request parameters use format: ...key1=value1&amp;key2=value2...</p> <p>For the CLI command-line parameter use format: &amp;&amp;tags \"key1=value1&amp;key2=value2...\"</p> <p>For the cli-input-json file use format: \"tags\": \"key1=value1&amp;key2=value2...\"</p> </note>"
1267012756
}
1267112757
},
1267212758
"documentation":"<p>The input to the RegisterCACertificate operation.</p>"
@@ -12725,6 +12811,33 @@
1272512811
},
1272612812
"documentation":"<p>The output from the RegisterCertificate operation.</p>"
1272712813
},
12814+
"RegisterCertificateWithoutCARequest":{
12815+
"type":"structure",
12816+
"required":["certificatePem"],
12817+
"members":{
12818+
"certificatePem":{
12819+
"shape":"CertificatePem",
12820+
"documentation":"<p>The certificate data, in PEM format.</p>"
12821+
},
12822+
"status":{
12823+
"shape":"CertificateStatus",
12824+
"documentation":"<p>The status of the register certificate request.</p>"
12825+
}
12826+
}
12827+
},
12828+
"RegisterCertificateWithoutCAResponse":{
12829+
"type":"structure",
12830+
"members":{
12831+
"certificateArn":{
12832+
"shape":"CertificateArn",
12833+
"documentation":"<p>The Amazon Resource Name (ARN) of the registered certificate.</p>"
12834+
},
12835+
"certificateId":{
12836+
"shape":"CertificateId",
12837+
"documentation":"<p>The ID of the registered certificate. (The last part of the certificate ARN contains the certificate ID.</p>"
12838+
}
12839+
}
12840+
},
1272812841
"RegisterThingRequest":{
1272912842
"type":"structure",
1273012843
"required":["templateBody"],
@@ -12735,7 +12848,7 @@
1273512848
},
1273612849
"parameters":{
1273712850
"shape":"Parameters",
12738-
"documentation":"<p>The parameters for provisioning a thing. See <a href=\"https://docs.aws.amazon.com/iot/latest/developerguide/programmatic-provisioning.html\">Programmatic Provisioning</a> for more information.</p>"
12851+
"documentation":"<p>The parameters for provisioning a thing. See <a href=\"https://docs.aws.amazon.com/iot/latest/developerguide/provision-template.html\">Provisioning Templates</a> for more information.</p>"
1273912852
}
1274012853
}
1274112854
},
@@ -12744,7 +12857,7 @@
1274412857
"members":{
1274512858
"certificatePem":{
1274612859
"shape":"CertificatePem",
12747-
"documentation":"<p>.</p>"
12860+
"documentation":"<p>The certificate data, in PEM format.</p>"
1274812861
},
1274912862
"resourceArns":{
1275012863
"shape":"ResourceArns",
@@ -12843,6 +12956,7 @@
1284312956
},
1284412957
"RemoveAuthorizerConfig":{"type":"boolean"},
1284512958
"RemoveAutoRegistration":{"type":"boolean"},
12959+
"RemoveHook":{"type":"boolean"},
1284612960
"RemoveThingFromBillingGroupRequest":{
1284712961
"type":"structure",
1284812962
"members":{
@@ -14012,6 +14126,7 @@
1401214126
"TableName":{"type":"string"},
1401314127
"Tag":{
1401414128
"type":"structure",
14129+
"required":["Key"],
1401514130
"members":{
1401614131
"Key":{
1401714132
"shape":"TagKey",
@@ -14024,7 +14139,12 @@
1402414139
},
1402514140
"documentation":"<p>A set of key/value pairs that are used to manage the resource.</p>"
1402614141
},
14027-
"TagKey":{"type":"string"},
14142+
"TagKey":{
14143+
"type":"string",
14144+
"max":128,
14145+
"min":1,
14146+
"pattern":"^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$"
14147+
},
1402814148
"TagKeyList":{
1402914149
"type":"list",
1403014150
"member":{"shape":"TagKey"}
@@ -14055,9 +14175,16 @@
1405514175
"members":{
1405614176
}
1405714177
},
14058-
"TagValue":{"type":"string"},
14178+
"TagValue":{
14179+
"type":"string",
14180+
"max":256,
14181+
"min":1
14182+
},
1405914183
"Target":{"type":"string"},
14060-
"TargetArn":{"type":"string"},
14184+
"TargetArn":{
14185+
"type":"string",
14186+
"max":2048
14187+
},
1406114188
"TargetAuditCheckNames":{
1406214189
"type":"list",
1406314190
"member":{"shape":"AuditCheckName"}
@@ -14223,7 +14350,7 @@
1422314350
},
1422414351
"tokenSignature":{
1422514352
"shape":"TokenSignature",
14226-
"documentation":"<p>The signature made with the token and your custom authentication service's private key.</p>"
14353+
"documentation":"<p>The signature made with the token and your custom authentication service's private key. This value must be Base-64-encoded.</p>"
1422714354
},
1422814355
"httpContext":{
1422914356
"shape":"HttpContext",
@@ -15374,6 +15501,14 @@
1537415501
"provisioningRoleArn":{
1537515502
"shape":"RoleArn",
1537615503
"documentation":"<p>The ARN of the role associated with the provisioning template. This IoT role grants permission to provision a device.</p>"
15504+
},
15505+
"preProvisioningHook":{
15506+
"shape":"ProvisioningHook",
15507+
"documentation":"<p>Updates the pre-provisioning hook template.</p>"
15508+
},
15509+
"removePreProvisioningHook":{
15510+
"shape":"RemoveHook",
15511+
"documentation":"<p>Removes pre-provisioning hook template.</p>"
1537715512
}
1537815513
}
1537915514
},
@@ -15660,7 +15795,7 @@
1566015795
"members":{
1566115796
"thingName":{
1566215797
"shape":"ThingName",
15663-
"documentation":"<p>The name of the thing to update.</p>",
15798+
"documentation":"<p>The name of the thing to update.</p> <p>You can't change a thing's name. To change a thing's name, you must create a new thing, give it the new name, and then delete the old thing.</p>",
1566415799
"location":"uri",
1566515800
"locationName":"thingName"
1566615801
},

0 commit comments

Comments
 (0)