Skip to content

Commit ed302dc

Browse files
trivikrtrivikr
authored
feat(clients): update clients as of 05/10/2021 (#2373)
1 parent a90bc87 commit ed302dc

File tree

374 files changed

+37311
-4740
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

374 files changed

+37311
-4740
lines changed

‎clients/client-acm-pca/ACMPCA.ts

+11-11
Original file line numberDiff line numberDiff line change
@@ -130,10 +130,10 @@ export class ACMPCA extends ACMPCAClient {
130130
* validity period of the CRL), the Amazon S3 bucket that will contain the CRL, and a CNAME
131131
* alias for the S3 bucket that is included in certificates issued by the CA. If
132132
* successful, this action returns the Amazon Resource Name (ARN) of the CA.</p>
133-
* <p>ACM Private CAA assets that are stored in Amazon S3 can be protected with encryption.
133+
* <p>ACM Private CA assets that are stored in Amazon S3 can be protected with encryption.
134134
* For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaCreateCa.html#crl-encryption">Encrypting Your
135135
* CRLs</a>.</p>
136-
* <note>
136+
* <note>
137137
* <p>Both PCA and the IAM principal must have permission to write to
138138
* the S3 bucket that you specify. If the IAM principal making the call
139139
* does not have permission to write to the bucket, then an exception is
@@ -176,15 +176,15 @@ export class ACMPCA extends ACMPCAClient {
176176
*
177177
* The <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_IssueCertificate.html">IssueCertificate</a> and <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_RevokeCertificate.html">RevokeCertificate</a> actions use
178178
* the private key. </p>
179-
* <note>
179+
* <note>
180180
* <p>Both PCA and the IAM principal must have permission to write to
181181
* the S3 bucket that you specify. If the IAM principal making the call
182182
* does not have permission to write to the bucket, then an exception is
183183
* thrown. For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaAuthAccess.html">Configure
184184
* Access to ACM Private CA</a>.</p>
185185
* </note>
186186
*
187-
* <p>ACM Private CAA assets that are stored in Amazon S3 can be protected with encryption.
187+
* <p>ACM Private CA assets that are stored in Amazon S3 can be protected with encryption.
188188
* For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaAuditReport.html#audit-report-encryption">Encrypting Your Audit
189189
* Reports</a>.</p>
190190
*/
@@ -336,7 +336,7 @@ export class ACMPCA extends ACMPCAClient {
336336
* renew the affected certificates automatically.</p>
337337
* <p>Permissions can be granted with the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreatePermission.html">CreatePermission</a> action and
338338
* listed with the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListPermissions.html">ListPermissions</a> action. </p>
339-
* <p class="title">
339+
* <p class="title">
340340
* <b>About Permissions</b>
341341
* </p>
342342
* <ul>
@@ -675,7 +675,7 @@ export class ACMPCA extends ACMPCAClient {
675675
* resource or the policy cannot be found, this action returns a
676676
* <code>ResourceNotFoundException</code>. </p>
677677
* <p>The policy can be attached or updated with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_PutPolicy.html">PutPolicy</a> and removed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePolicy.html">DeletePolicy</a>.</p>
678-
* <p class="title">
678+
* <p class="title">
679679
* <b>About Policies</b>
680680
* </p>
681681
* <ul>
@@ -1052,7 +1052,7 @@ export class ACMPCA extends ACMPCAClient {
10521052
* Manager (RAM). For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/pca-ram.html">Attach a Policy for Cross-Account
10531053
* Access</a>.</p>
10541054
* <p>The policy can be displayed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetPolicy.html">GetPolicy</a> and removed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePolicy.html">DeletePolicy</a>.</p>
1055-
* <p class="title">
1055+
* <p class="title">
10561056
* <b>About Policies</b>
10571057
* </p>
10581058
* <ul>
@@ -1154,15 +1154,15 @@ export class ACMPCA extends ACMPCAClient {
11541154
* further attempts every 15 minutes. With Amazon CloudWatch, you can create alarms for the
11551155
* metrics <code>CRLGenerated</code> and <code>MisconfiguredCRLBucket</code>. For more
11561156
* information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaCloudWatch.html">Supported CloudWatch Metrics</a>.</p>
1157-
* <note>
1157+
* <note>
11581158
* <p>Both PCA and the IAM principal must have permission to write to
11591159
* the S3 bucket that you specify. If the IAM principal making the call
11601160
* does not have permission to write to the bucket, then an exception is
11611161
* thrown. For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaAuthAccess.html">Configure
11621162
* Access to ACM Private CA</a>.</p>
11631163
* </note>
1164-
* <p>ACM Private CA also writes revocation information to the audit report. For more information,
1165-
* see <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthorityAuditReport.html">CreateCertificateAuthorityAuditReport</a>.</p>
1164+
* <p>ACM Private CA also writes
1165+
* revocation information to the audit report. For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthorityAuditReport.html">CreateCertificateAuthorityAuditReport</a>.</p>
11661166
* <note>
11671167
* <p>You cannot revoke a root CA self-signed certificate.</p>
11681168
* </note>
@@ -1276,7 +1276,7 @@ export class ACMPCA extends ACMPCAClient {
12761276
* private CA must be in the <code>ACTIVE</code> or <code>DISABLED</code> state before you
12771277
* can update it. You can disable a private CA that is in the <code>ACTIVE</code> state or
12781278
* make a CA that is in the <code>DISABLED</code> state active again.</p>
1279-
* <note>
1279+
* <note>
12801280
* <p>Both PCA and the IAM principal must have permission to write to
12811281
* the S3 bucket that you specify. If the IAM principal making the call
12821282
* does not have permission to write to the bucket, then an exception is

‎clients/client-acm-pca/commands/CreateCertificateAuthorityAuditReportCommand.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -32,15 +32,15 @@ export interface CreateCertificateAuthorityAuditReportCommandOutput
3232
*
3333
* The <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_IssueCertificate.html">IssueCertificate</a> and <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_RevokeCertificate.html">RevokeCertificate</a> actions use
3434
* the private key. </p>
35-
* <note>
35+
* <note>
3636
* <p>Both PCA and the IAM principal must have permission to write to
3737
* the S3 bucket that you specify. If the IAM principal making the call
3838
* does not have permission to write to the bucket, then an exception is
3939
* thrown. For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaAuthAccess.html">Configure
4040
* Access to ACM Private CA</a>.</p>
4141
* </note>
4242
*
43-
* <p>ACM Private CAA assets that are stored in Amazon S3 can be protected with encryption.
43+
* <p>ACM Private CA assets that are stored in Amazon S3 can be protected with encryption.
4444
* For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaAuditReport.html#audit-report-encryption">Encrypting Your Audit
4545
* Reports</a>.</p>
4646
* @example

‎clients/client-acm-pca/commands/CreateCertificateAuthorityCommand.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -30,10 +30,10 @@ export interface CreateCertificateAuthorityCommandOutput extends CreateCertifica
3030
* validity period of the CRL), the Amazon S3 bucket that will contain the CRL, and a CNAME
3131
* alias for the S3 bucket that is included in certificates issued by the CA. If
3232
* successful, this action returns the Amazon Resource Name (ARN) of the CA.</p>
33-
* <p>ACM Private CAA assets that are stored in Amazon S3 can be protected with encryption.
33+
* <p>ACM Private CA assets that are stored in Amazon S3 can be protected with encryption.
3434
* For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaCreateCa.html#crl-encryption">Encrypting Your
3535
* CRLs</a>.</p>
36-
* <note>
36+
* <note>
3737
* <p>Both PCA and the IAM principal must have permission to write to
3838
* the S3 bucket that you specify. If the IAM principal making the call
3939
* does not have permission to write to the bucket, then an exception is

‎clients/client-acm-pca/commands/DeletePermissionCommand.ts

+1-1
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ export interface DeletePermissionCommandOutput extends __MetadataBearer {}
2828
* renew the affected certificates automatically.</p>
2929
* <p>Permissions can be granted with the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreatePermission.html">CreatePermission</a> action and
3030
* listed with the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListPermissions.html">ListPermissions</a> action. </p>
31-
* <p class="title">
31+
* <p class="title">
3232
* <b>About Permissions</b>
3333
* </p>
3434
* <ul>

‎clients/client-acm-pca/commands/GetPolicyCommand.ts

+1-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ export interface GetPolicyCommandOutput extends GetPolicyResponse, __MetadataBea
2222
* resource or the policy cannot be found, this action returns a
2323
* <code>ResourceNotFoundException</code>. </p>
2424
* <p>The policy can be attached or updated with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_PutPolicy.html">PutPolicy</a> and removed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePolicy.html">DeletePolicy</a>.</p>
25-
* <p class="title">
25+
* <p class="title">
2626
* <b>About Policies</b>
2727
* </p>
2828
* <ul>

‎clients/client-acm-pca/commands/PutPolicyCommand.ts

+1-1
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ export interface PutPolicyCommandOutput extends __MetadataBearer {}
2323
* Manager (RAM). For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/pca-ram.html">Attach a Policy for Cross-Account
2424
* Access</a>.</p>
2525
* <p>The policy can be displayed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetPolicy.html">GetPolicy</a> and removed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePolicy.html">DeletePolicy</a>.</p>
26-
* <p class="title">
26+
* <p class="title">
2727
* <b>About Policies</b>
2828
* </p>
2929
* <ul>

‎clients/client-acm-pca/commands/RevokeCertificateCommand.ts

+3-3
Original file line numberDiff line numberDiff line change
@@ -29,15 +29,15 @@ export interface RevokeCertificateCommandOutput extends __MetadataBearer {}
2929
* further attempts every 15 minutes. With Amazon CloudWatch, you can create alarms for the
3030
* metrics <code>CRLGenerated</code> and <code>MisconfiguredCRLBucket</code>. For more
3131
* information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaCloudWatch.html">Supported CloudWatch Metrics</a>.</p>
32-
* <note>
32+
* <note>
3333
* <p>Both PCA and the IAM principal must have permission to write to
3434
* the S3 bucket that you specify. If the IAM principal making the call
3535
* does not have permission to write to the bucket, then an exception is
3636
* thrown. For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaAuthAccess.html">Configure
3737
* Access to ACM Private CA</a>.</p>
3838
* </note>
39-
* <p>ACM Private CA also writes revocation information to the audit report. For more information,
40-
* see <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthorityAuditReport.html">CreateCertificateAuthorityAuditReport</a>.</p>
39+
* <p>ACM Private CA also writes
40+
* revocation information to the audit report. For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthorityAuditReport.html">CreateCertificateAuthorityAuditReport</a>.</p>
4141
* <note>
4242
* <p>You cannot revoke a root CA self-signed certificate.</p>
4343
* </note>

‎clients/client-acm-pca/commands/UpdateCertificateAuthorityCommand.ts

+1-1
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ export interface UpdateCertificateAuthorityCommandOutput extends __MetadataBeare
2525
* private CA must be in the <code>ACTIVE</code> or <code>DISABLED</code> state before you
2626
* can update it. You can disable a private CA that is in the <code>ACTIVE</code> state or
2727
* make a CA that is in the <code>DISABLED</code> state active again.</p>
28-
* <note>
28+
* <note>
2929
* <p>Both PCA and the IAM principal must have permission to write to
3030
* the S3 bucket that you specify. If the IAM principal making the call
3131
* does not have permission to write to the bucket, then an exception is

‎clients/client-acm-pca/models/models_0.ts

+33-5
Original file line numberDiff line numberDiff line change
@@ -428,6 +428,11 @@ export enum CertificateAuthorityType {
428428
SUBORDINATE = "SUBORDINATE",
429429
}
430430

431+
export enum KeyStorageSecurityStandard {
432+
FIPS_140_2_LEVEL_2_OR_HIGHER = "FIPS_140_2_LEVEL_2_OR_HIGHER",
433+
FIPS_140_2_LEVEL_3_OR_HIGHER = "FIPS_140_2_LEVEL_3_OR_HIGHER",
434+
}
435+
431436
/**
432437
* <p>Contains configuration information for a certificate revocation list (CRL). Your
433438
* private certificate authority (CA) creates base CRLs. Delta CRLs are not supported. You
@@ -437,7 +442,7 @@ export enum CertificateAuthorityType {
437442
* private CA copies the CNAME or the S3 bucket name to the <b>CRL
438443
* Distribution Points</b> extension of each certificate it issues. Your S3
439444
* bucket policy must give write permission to ACM Private CA. </p>
440-
* <p>ACM Private CAA assets that are stored in Amazon S3 can be protected with encryption.
445+
* <p>ACM Private CA assets that are stored in Amazon S3 can be protected with encryption.
441446
* For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaCreateCa.html#crl-encryption">Encrypting Your
442447
* CRLs</a>.</p>
443448
* <p>Your private CA uses the value in the <b>ExpirationInDays</b> parameter to calculate the <b>nextUpdate</b> field in the CRL. The CRL is refreshed at 1/2 the age of next
@@ -657,6 +662,18 @@ export interface CreateCertificateAuthorityRequest {
657662
*/
658663
IdempotencyToken?: string;
659664

665+
/**
666+
* <p>Specifies a cryptographic key management compliance standard used for handling CA
667+
* keys.</p>
668+
* <p>Default: FIPS_140_2_LEVEL_3_OR_HIGHER</p>
669+
* <p>Note: AWS Region ap-northeast-3 supports only FIPS_140_2_LEVEL_2_OR_HIGHER. You must
670+
* explicitly specify this parameter and value when creating a CA in that Region.
671+
* Specifying a different value (or no value) results in an
672+
* <code>InvalidArgsException</code> with the message "A certificate authority cannot
673+
* be created in this region with the specified security standard."</p>
674+
*/
675+
KeyStorageSecurityStandard?: KeyStorageSecurityStandard | string;
676+
660677
/**
661678
* <p>Key-value pairs that will be attached to the new private CA. You can associate up to
662679
* 50 tags with a private CA. For information using tags with IAM to manage permissions,
@@ -1214,6 +1231,17 @@ export interface CertificateAuthority {
12141231
* <code>PermanentDeletionTimeInDays</code> parameter of the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeleteCertificateAuthorityRequest.html">DeleteCertificateAuthorityRequest</a> action. </p>
12151232
*/
12161233
RestorableUntil?: Date;
1234+
1235+
/**
1236+
* <p>Defines a cryptographic key management compliance standard used for handling CA keys. </p>
1237+
* <p>Default: FIPS_140_2_LEVEL_3_OR_HIGHER</p>
1238+
* <p>Note: AWS Region ap-northeast-3 supports only FIPS_140_2_LEVEL_2_OR_HIGHER. You must
1239+
* explicitly specify this parameter and value when creating a CA in that Region.
1240+
* Specifying a different value (or no value) results in an
1241+
* <code>InvalidArgsException</code> with the message "A certificate authority cannot
1242+
* be created in this region with the specified security standard."</p>
1243+
*/
1244+
KeyStorageSecurityStandard?: KeyStorageSecurityStandard | string;
12171245
}
12181246

12191247
export namespace CertificateAuthority {
@@ -1731,8 +1759,8 @@ export namespace Extensions {
17311759
* <code>APIPassthrough</code> or <code>APICSRPassthrough</code> template variant must
17321760
* be selected, or else this parameter is ignored. </p>
17331761
* <p>If conflicting or duplicate certificate information is supplied from other sources,
1734-
* ACM Private CA applies <a href="xxxxx">order of operation rules</a> to determine what
1735-
* information is used.</p>
1762+
* ACM Private CA applies <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html#template-order-of-operations">order of
1763+
* operation rules</a> to determine what information is used.</p>
17361764
*/
17371765
export interface ApiPassthrough {
17381766
/**
@@ -1850,8 +1878,8 @@ export interface IssueCertificateRequest {
18501878
* be selected, or else this parameter is ignored. For more information about using these
18511879
* templates, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html">Understanding Certificate Templates</a>.</p>
18521880
* <p>If conflicting or duplicate certificate information is supplied during certificate
1853-
* issuance, ACM Private CA applies <a href="xxxxx">order of operation rules</a> to determine
1854-
* what information is used.</p>
1881+
* issuance, ACM Private CA applies <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html#template-order-of-operations">order of
1882+
* operation rules</a> to determine what information is used.</p>
18551883
*/
18561884
ApiPassthrough?: ApiPassthrough;
18571885

‎clients/client-acm-pca/protocols/Aws_json1_1.ts

+6
Original file line numberDiff line numberDiff line change
@@ -2767,6 +2767,8 @@ const serializeAws_json1_1CreateCertificateAuthorityRequest = (
27672767
input.CertificateAuthorityType !== null && { CertificateAuthorityType: input.CertificateAuthorityType }),
27682768
...(input.IdempotencyToken !== undefined &&
27692769
input.IdempotencyToken !== null && { IdempotencyToken: input.IdempotencyToken }),
2770+
...(input.KeyStorageSecurityStandard !== undefined &&
2771+
input.KeyStorageSecurityStandard !== null && { KeyStorageSecurityStandard: input.KeyStorageSecurityStandard }),
27702772
...(input.RevocationConfiguration !== undefined &&
27712773
input.RevocationConfiguration !== null && {
27722774
RevocationConfiguration: serializeAws_json1_1RevocationConfiguration(input.RevocationConfiguration, context),
@@ -3293,6 +3295,10 @@ const deserializeAws_json1_1CertificateAuthority = (output: any, context: __Serd
32933295
: undefined,
32943296
FailureReason:
32953297
output.FailureReason !== undefined && output.FailureReason !== null ? output.FailureReason : undefined,
3298+
KeyStorageSecurityStandard:
3299+
output.KeyStorageSecurityStandard !== undefined && output.KeyStorageSecurityStandard !== null
3300+
? output.KeyStorageSecurityStandard
3301+
: undefined,
32963302
LastStateChangeAt:
32973303
output.LastStateChangeAt !== undefined && output.LastStateChangeAt !== null
32983304
? new Date(Math.round(output.LastStateChangeAt * 1000))

‎clients/client-auditmanager/models/models_0.ts

+3-3
Original file line numberDiff line numberDiff line change
@@ -1972,7 +1972,7 @@ export interface CreateAssessmentFrameworkControlSet {
19721972
* The name of the specified control set.
19731973
* </p>
19741974
*/
1975-
name?: string;
1975+
name: string | undefined;
19761976

19771977
/**
19781978
* <p>
@@ -3508,7 +3508,7 @@ export interface Evidence {
35083508

35093509
/**
35103510
* <p>
3511-
* Specifies whether the evidence is inclded in the assessment report.
3511+
* Specifies whether the evidence is included in the assessment report.
35123512
* </p>
35133513
*/
35143514
assessmentReportSelection?: string;
@@ -4850,7 +4850,7 @@ export interface UpdateAssessmentFrameworkControlSet {
48504850
* The name of the control set.
48514851
* </p>
48524852
*/
4853-
name?: string;
4853+
name: string | undefined;
48544854

48554855
/**
48564856
* <p>

0 commit comments

Comments
 (0)