Skip to content

Commit 5ba0655

Browse files
author
awstools
committed
feat(client-ec2): Adds support for Customer Managed Key encryption for Amazon Verified Access resources
1 parent 614d195 commit 5ba0655

30 files changed

+751
-309
lines changed

‎clients/client-ec2/src/commands/AttachVerifiedAccessTrustProviderCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,10 @@ export interface AttachVerifiedAccessTrustProviderCommandOutput
8989
* // Value: "STRING_VALUE",
9090
* // },
9191
* // ],
92+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
93+
* // CustomerManagedKeyEnabled: true || false,
94+
* // KmsKeyArn: "STRING_VALUE",
95+
* // },
9296
* // },
9397
* // VerifiedAccessInstance: { // VerifiedAccessInstance
9498
* // VerifiedAccessInstanceId: "STRING_VALUE",

‎clients/client-ec2/src/commands/CreatePlacementGroupCommand.ts

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,8 @@ import {
1515
} from "@smithy/types";
1616

1717
import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
18-
import { CreatePlacementGroupRequest, CreatePlacementGroupResult } from "../models/models_1";
18+
import { CreatePlacementGroupRequest } from "../models/models_1";
19+
import { CreatePlacementGroupResult } from "../models/models_2";
1920
import { de_CreatePlacementGroupCommand, se_CreatePlacementGroupCommand } from "../protocols/Aws_ec2";
2021

2122
/**

‎clients/client-ec2/src/commands/CreateVerifiedAccessEndpointCommand.ts

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -84,6 +84,10 @@ export interface CreateVerifiedAccessEndpointCommandOutput
8484
* ],
8585
* ClientToken: "STRING_VALUE",
8686
* DryRun: true || false,
87+
* SseSpecification: { // VerifiedAccessSseSpecificationRequest
88+
* CustomerManagedKeyEnabled: true || false,
89+
* KmsKeyArn: "STRING_VALUE",
90+
* },
8791
* };
8892
* const command = new CreateVerifiedAccessEndpointCommand(input);
8993
* const response = await client.send(command);
@@ -128,6 +132,10 @@ export interface CreateVerifiedAccessEndpointCommandOutput
128132
* // Value: "STRING_VALUE",
129133
* // },
130134
* // ],
135+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
136+
* // CustomerManagedKeyEnabled: true || false,
137+
* // KmsKeyArn: "STRING_VALUE",
138+
* // },
131139
* // },
132140
* // };
133141
*

‎clients/client-ec2/src/commands/CreateVerifiedAccessGroupCommand.ts

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,10 @@ export interface CreateVerifiedAccessGroupCommandOutput extends CreateVerifiedAc
6464
* ],
6565
* ClientToken: "STRING_VALUE",
6666
* DryRun: true || false,
67+
* SseSpecification: { // VerifiedAccessSseSpecificationRequest
68+
* CustomerManagedKeyEnabled: true || false,
69+
* KmsKeyArn: "STRING_VALUE",
70+
* },
6771
* };
6872
* const command = new CreateVerifiedAccessGroupCommand(input);
6973
* const response = await client.send(command);
@@ -83,6 +87,10 @@ export interface CreateVerifiedAccessGroupCommandOutput extends CreateVerifiedAc
8387
* // Value: "STRING_VALUE",
8488
* // },
8589
* // ],
90+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
91+
* // CustomerManagedKeyEnabled: true || false,
92+
* // KmsKeyArn: "STRING_VALUE",
93+
* // },
8694
* // },
8795
* // };
8896
*

‎clients/client-ec2/src/commands/CreateVerifiedAccessTrustProviderCommand.ts

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -88,6 +88,10 @@ export interface CreateVerifiedAccessTrustProviderCommandOutput
8888
* ],
8989
* ClientToken: "STRING_VALUE",
9090
* DryRun: true || false,
91+
* SseSpecification: { // VerifiedAccessSseSpecificationRequest
92+
* CustomerManagedKeyEnabled: true || false,
93+
* KmsKeyArn: "STRING_VALUE",
94+
* },
9195
* };
9296
* const command = new CreateVerifiedAccessTrustProviderCommand(input);
9397
* const response = await client.send(command);
@@ -119,6 +123,10 @@ export interface CreateVerifiedAccessTrustProviderCommandOutput
119123
* // Value: "STRING_VALUE",
120124
* // },
121125
* // ],
126+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
127+
* // CustomerManagedKeyEnabled: true || false,
128+
* // KmsKeyArn: "STRING_VALUE",
129+
* // },
122130
* // },
123131
* // };
124132
*

‎clients/client-ec2/src/commands/DeletePublicIpv4PoolCommand.ts

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,8 @@ import {
1515
} from "@smithy/types";
1616

1717
import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
18-
import { DeletePublicIpv4PoolRequest, DeletePublicIpv4PoolResult } from "../models/models_2";
18+
import { DeletePublicIpv4PoolRequest } from "../models/models_2";
19+
import { DeletePublicIpv4PoolResult } from "../models/models_3";
1920
import { de_DeletePublicIpv4PoolCommand, se_DeletePublicIpv4PoolCommand } from "../protocols/Aws_ec2";
2021

2122
/**

‎clients/client-ec2/src/commands/DeleteQueuedReservedInstancesCommand.ts

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,8 +15,7 @@ import {
1515
} from "@smithy/types";
1616

1717
import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
18-
import { DeleteQueuedReservedInstancesRequest } from "../models/models_2";
19-
import { DeleteQueuedReservedInstancesResult } from "../models/models_3";
18+
import { DeleteQueuedReservedInstancesRequest, DeleteQueuedReservedInstancesResult } from "../models/models_3";
2019
import { de_DeleteQueuedReservedInstancesCommand, se_DeleteQueuedReservedInstancesCommand } from "../protocols/Aws_ec2";
2120

2221
/**

‎clients/client-ec2/src/commands/DeleteVerifiedAccessEndpointCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -94,6 +94,10 @@ export interface DeleteVerifiedAccessEndpointCommandOutput
9494
* // Value: "STRING_VALUE",
9595
* // },
9696
* // ],
97+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
98+
* // CustomerManagedKeyEnabled: true || false,
99+
* // KmsKeyArn: "STRING_VALUE",
100+
* // },
97101
* // },
98102
* // };
99103
*

‎clients/client-ec2/src/commands/DeleteVerifiedAccessGroupCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -67,6 +67,10 @@ export interface DeleteVerifiedAccessGroupCommandOutput extends DeleteVerifiedAc
6767
* // Value: "STRING_VALUE",
6868
* // },
6969
* // ],
70+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
71+
* // CustomerManagedKeyEnabled: true || false,
72+
* // KmsKeyArn: "STRING_VALUE",
73+
* // },
7074
* // },
7175
* // };
7276
*

‎clients/client-ec2/src/commands/DeleteVerifiedAccessTrustProviderCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -88,6 +88,10 @@ export interface DeleteVerifiedAccessTrustProviderCommandOutput
8888
* // Value: "STRING_VALUE",
8989
* // },
9090
* // ],
91+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
92+
* // CustomerManagedKeyEnabled: true || false,
93+
* // KmsKeyArn: "STRING_VALUE",
94+
* // },
9195
* // },
9296
* // };
9397
*

‎clients/client-ec2/src/commands/DescribeVerifiedAccessEndpointsCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -111,6 +111,10 @@ export interface DescribeVerifiedAccessEndpointsCommandOutput
111111
* // Value: "STRING_VALUE",
112112
* // },
113113
* // ],
114+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
115+
* // CustomerManagedKeyEnabled: true || false,
116+
* // KmsKeyArn: "STRING_VALUE",
117+
* // },
114118
* // },
115119
* // ],
116120
* // NextToken: "STRING_VALUE",

‎clients/client-ec2/src/commands/DescribeVerifiedAccessGroupsCommand.ts

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ import {
1515
} from "@smithy/types";
1616

1717
import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
18-
import { DescribeVerifiedAccessGroupsRequest, DescribeVerifiedAccessGroupsResult } from "../models/models_4";
18+
import { DescribeVerifiedAccessGroupsRequest, DescribeVerifiedAccessGroupsResult } from "../models/models_5";
1919
import { de_DescribeVerifiedAccessGroupsCommand, se_DescribeVerifiedAccessGroupsCommand } from "../protocols/Aws_ec2";
2020

2121
/**
@@ -82,6 +82,10 @@ export interface DescribeVerifiedAccessGroupsCommandOutput
8282
* // Value: "STRING_VALUE",
8383
* // },
8484
* // ],
85+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
86+
* // CustomerManagedKeyEnabled: true || false,
87+
* // KmsKeyArn: "STRING_VALUE",
88+
* // },
8589
* // },
8690
* // ],
8791
* // NextToken: "STRING_VALUE",

‎clients/client-ec2/src/commands/DescribeVerifiedAccessTrustProvidersCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -100,6 +100,10 @@ export interface DescribeVerifiedAccessTrustProvidersCommandOutput
100100
* // Value: "STRING_VALUE",
101101
* // },
102102
* // ],
103+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
104+
* // CustomerManagedKeyEnabled: true || false,
105+
* // KmsKeyArn: "STRING_VALUE",
106+
* // },
103107
* // },
104108
* // ],
105109
* // NextToken: "STRING_VALUE",

‎clients/client-ec2/src/commands/DetachVerifiedAccessTrustProviderCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,10 @@ export interface DetachVerifiedAccessTrustProviderCommandOutput
8989
* // Value: "STRING_VALUE",
9090
* // },
9191
* // ],
92+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
93+
* // CustomerManagedKeyEnabled: true || false,
94+
* // KmsKeyArn: "STRING_VALUE",
95+
* // },
9296
* // },
9397
* // VerifiedAccessInstance: { // VerifiedAccessInstance
9498
* // VerifiedAccessInstanceId: "STRING_VALUE",

‎clients/client-ec2/src/commands/GetVerifiedAccessGroupPolicyCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ import {
1515
} from "@smithy/types";
1616

1717
import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
18-
import { GetVerifiedAccessGroupPolicyRequest, GetVerifiedAccessGroupPolicyResult } from "../models/models_5";
18+
import { GetVerifiedAccessGroupPolicyRequest, GetVerifiedAccessGroupPolicyResult } from "../models/models_6";
1919
import { de_GetVerifiedAccessGroupPolicyCommand, se_GetVerifiedAccessGroupPolicyCommand } from "../protocols/Aws_ec2";
2020

2121
/**

‎clients/client-ec2/src/commands/ModifyVerifiedAccessEndpointCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,6 +107,10 @@ export interface ModifyVerifiedAccessEndpointCommandOutput
107107
* // Value: "STRING_VALUE",
108108
* // },
109109
* // ],
110+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
111+
* // CustomerManagedKeyEnabled: true || false,
112+
* // KmsKeyArn: "STRING_VALUE",
113+
* // },
110114
* // },
111115
* // };
112116
*

‎clients/client-ec2/src/commands/ModifyVerifiedAccessEndpointPolicyCommand.ts

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,16 +54,24 @@ export interface ModifyVerifiedAccessEndpointPolicyCommandOutput
5454
* const client = new EC2Client(config);
5555
* const input = { // ModifyVerifiedAccessEndpointPolicyRequest
5656
* VerifiedAccessEndpointId: "STRING_VALUE", // required
57-
* PolicyEnabled: true || false, // required
57+
* PolicyEnabled: true || false,
5858
* PolicyDocument: "STRING_VALUE",
5959
* ClientToken: "STRING_VALUE",
6060
* DryRun: true || false,
61+
* SseSpecification: { // VerifiedAccessSseSpecificationRequest
62+
* CustomerManagedKeyEnabled: true || false,
63+
* KmsKeyArn: "STRING_VALUE",
64+
* },
6165
* };
6266
* const command = new ModifyVerifiedAccessEndpointPolicyCommand(input);
6367
* const response = await client.send(command);
6468
* // { // ModifyVerifiedAccessEndpointPolicyResult
6569
* // PolicyEnabled: true || false,
6670
* // PolicyDocument: "STRING_VALUE",
71+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
72+
* // CustomerManagedKeyEnabled: true || false,
73+
* // KmsKeyArn: "STRING_VALUE",
74+
* // },
6775
* // };
6876
*
6977
* ```

‎clients/client-ec2/src/commands/ModifyVerifiedAccessGroupCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -69,6 +69,10 @@ export interface ModifyVerifiedAccessGroupCommandOutput extends ModifyVerifiedAc
6969
* // Value: "STRING_VALUE",
7070
* // },
7171
* // ],
72+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
73+
* // CustomerManagedKeyEnabled: true || false,
74+
* // KmsKeyArn: "STRING_VALUE",
75+
* // },
7276
* // },
7377
* // };
7478
*

‎clients/client-ec2/src/commands/ModifyVerifiedAccessGroupPolicyCommand.ts

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,16 +51,24 @@ export interface ModifyVerifiedAccessGroupPolicyCommandOutput
5151
* const client = new EC2Client(config);
5252
* const input = { // ModifyVerifiedAccessGroupPolicyRequest
5353
* VerifiedAccessGroupId: "STRING_VALUE", // required
54-
* PolicyEnabled: true || false, // required
54+
* PolicyEnabled: true || false,
5555
* PolicyDocument: "STRING_VALUE",
5656
* ClientToken: "STRING_VALUE",
5757
* DryRun: true || false,
58+
* SseSpecification: { // VerifiedAccessSseSpecificationRequest
59+
* CustomerManagedKeyEnabled: true || false,
60+
* KmsKeyArn: "STRING_VALUE",
61+
* },
5862
* };
5963
* const command = new ModifyVerifiedAccessGroupPolicyCommand(input);
6064
* const response = await client.send(command);
6165
* // { // ModifyVerifiedAccessGroupPolicyResult
6266
* // PolicyEnabled: true || false,
6367
* // PolicyDocument: "STRING_VALUE",
68+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
69+
* // CustomerManagedKeyEnabled: true || false,
70+
* // KmsKeyArn: "STRING_VALUE",
71+
* // },
6472
* // };
6573
*
6674
* ```

‎clients/client-ec2/src/commands/ModifyVerifiedAccessTrustProviderCommand.ts

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,10 @@ export interface ModifyVerifiedAccessTrustProviderCommandOutput
6868
* Description: "STRING_VALUE",
6969
* DryRun: true || false,
7070
* ClientToken: "STRING_VALUE",
71+
* SseSpecification: { // VerifiedAccessSseSpecificationRequest
72+
* CustomerManagedKeyEnabled: true || false,
73+
* KmsKeyArn: "STRING_VALUE",
74+
* },
7175
* };
7276
* const command = new ModifyVerifiedAccessTrustProviderCommand(input);
7377
* const response = await client.send(command);
@@ -99,6 +103,10 @@ export interface ModifyVerifiedAccessTrustProviderCommandOutput
99103
* // Value: "STRING_VALUE",
100104
* // },
101105
* // ],
106+
* // SseSpecification: { // VerifiedAccessSseSpecificationResponse
107+
* // CustomerManagedKeyEnabled: true || false,
108+
* // KmsKeyArn: "STRING_VALUE",
109+
* // },
102110
* // },
103111
* // };
104112
*

‎clients/client-ec2/src/models/models_0.ts

Lines changed: 35 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -5710,9 +5710,7 @@ export interface VerifiedAccessInstance {
57105710

57115711
/**
57125712
* @public
5713-
* <p>
5714-
* Describes if support for Federal Information Processing Standards (FIPS) is enabled on the instance.
5715-
* </p>
5713+
* <p>Describes whether support for Federal Information Processing Standards (FIPS) is enabled on the instance.</p>
57165714
*/
57175715
FipsEnabled?: boolean;
57185716
}
@@ -5778,6 +5776,32 @@ export interface OidcOptions {
57785776
Scope?: string;
57795777
}
57805778

5779+
/**
5780+
* @public
5781+
* <p>
5782+
* Describes the options in use for server side encryption.
5783+
* </p>
5784+
*/
5785+
export interface VerifiedAccessSseSpecificationResponse {
5786+
/**
5787+
* @public
5788+
* <p>
5789+
* Describes the use of customer managed KMS keys for server side encryption.
5790+
* </p>
5791+
* <p>Valid values: <code>True</code> | <code>False</code>
5792+
* </p>
5793+
*/
5794+
CustomerManagedKeyEnabled?: boolean;
5795+
5796+
/**
5797+
* @public
5798+
* <p>
5799+
* Describes the ARN of the KMS key.
5800+
* </p>
5801+
*/
5802+
KmsKeyArn?: string;
5803+
}
5804+
57815805
/**
57825806
* @public
57835807
* <p>Describes a Verified Access trust provider.</p>
@@ -5848,6 +5872,14 @@ export interface VerifiedAccessTrustProvider {
58485872
* <p>The tags.</p>
58495873
*/
58505874
Tags?: Tag[];
5875+
5876+
/**
5877+
* @public
5878+
* <p>
5879+
* Describes the options in use for server side encryption.
5880+
* </p>
5881+
*/
5882+
SseSpecification?: VerifiedAccessSseSpecificationResponse;
58515883
}
58525884

58535885
/**
@@ -9570,19 +9602,6 @@ export interface FederatedAuthenticationRequest {
95709602
SelfServiceSAMLProviderArn?: string;
95719603
}
95729604

9573-
/**
9574-
* @public
9575-
* <p>Information about the client certificate to be used for authentication.</p>
9576-
*/
9577-
export interface CertificateAuthenticationRequest {
9578-
/**
9579-
* @public
9580-
* <p>The ARN of the client certificate. The certificate must be signed by a certificate
9581-
* authority (CA) and it must be provisioned in Certificate Manager (ACM).</p>
9582-
*/
9583-
ClientRootCertificateChainArn?: string;
9584-
}
9585-
95869605
/**
95879606
* @internal
95889607
*/

0 commit comments

Comments
 (0)