aws-sdk-acmpca 1.53.0 → 1.55.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0edf1634ac1ecccd3a553bdaeb0af2286d9726dae76809035c23c9646b758111
-  data.tar.gz: 7f31e903cc3da3c54ca0a2c8c4d6b6c820d64557619e1dc47433eb8e6b2af556
+  metadata.gz: 29a8c31bf94981bd67cc85a878c4fb93bdf999b2a662d78cbc2c5df68c8680b3
+  data.tar.gz: bba43113622380d993c3a6229ef665b5f0abe1bf19b680c8a9f0527fdbbaad88
 SHA512:
-  metadata.gz: b732e104ac090db63a2b3f623dc906cfebe472f2622dbec22797875119b92fc0c0a72f8dfaeb782ceb1967a04e15e3fa2a6d19a41cfe5861260e11a0ebf3d7c0
-  data.tar.gz: 753923b7ffadb7473afe781c27e2a7b9bca5da4af7c9b3b6a0e6ccfb17b47f55803b91c31bc97fd73a29aa6528386968cdd544e30a9426916b79ba410f0b548b
+  metadata.gz: c4b8689f469bc128d1844199716ab7966af5752dbbaf7e1c53b6420405a0e8991cdc6257dd5d978bc85164bf8fc63a22da4284972ec12cc65e52360d8b85aded
+  data.tar.gz: 1e2f7647ad6e1d9e52b6fe5422d2464910eefe16d9b9d58bce5b2422c846868e2a88823128be6548d33f9599e803f22f51ef92770f4423eda0e183cf757824e2

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.55.0 (2023-06-09)
+------------------
+
+* Feature - Document-only update to refresh CLI  documentation for AWS Private CA. No change to the service.
+
+1.54.0 (2023-05-31)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.53.0 (2023-01-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.53.0
+1.55.0

data/lib/aws-sdk-acmpca/client.rb

@@ -275,6 +275,11 @@ module Aws::ACMPCA
     #       in the future.
     #
     #
+    #   @option options [String] :sdk_ua_app_id
+    #     A unique and opaque application ID that is appended to the
+    #     User-Agent header as app/<sdk_ua_app_id>. It should have a
+    #     maximum length of 50.
+    #
     #   @option options [String] :secret_access_key
     #
     #   @option options [String] :session_token
@@ -468,20 +473,24 @@ module Aws::ACMPCA
     #
     #   Default: FIPS\_140\_2\_LEVEL\_3\_OR\_HIGHER
     #
-    #   *Note:* `FIPS_140_2_LEVEL_3_OR_HIGHER` is not supported in the
-    #   following Regions:
-    #
-    #   * ap-northeast-3
-    #
-    #   * ap-southeast-3
-    #
-    #   When creating a CA in these Regions, you must provide
+    #   <note markdown="1"> Some Amazon Web Services Regions do not support the default. When
+    #   creating a CA in these Regions, you must provide
     #   `FIPS_140_2_LEVEL_2_OR_HIGHER` as the argument for
     #   `KeyStorageSecurityStandard`. Failure to do this results in an
     #   `InvalidArgsException` with the message, "A certificate authority
     #   cannot be created in this region with the specified security
     #   standard."
     #
+    #    For information about security standard support in various Regions,
+    #   see [Storage and security compliance of Amazon Web Services Private CA
+    #   private keys][1].
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/userguide/data-protection.html#private-keys
+    #
     # @option params [Array<Types::Tag>] :tags
     #   Key-value pairs that will be attached to the new private CA. You can
     #   associate up to 50 tags with a private CA. For information using tags
@@ -1624,7 +1633,7 @@ module Aws::ACMPCA
     #   parameter used to sign a CSR in the `CreateCertificateAuthority`
     #   action.
     #
-    #   <note markdown="1"> The specified signing algorithm family (RSA or ECDSA) much match the
+    #   <note markdown="1"> The specified signing algorithm family (RSA or ECDSA) must match the
     #   algorithm family of the CA's secret key.
     #
     #    </note>
@@ -1692,7 +1701,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_Validity.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_Validity.html
     #   [2]: https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.5
     #
     # @option params [String] :idempotency_token
@@ -2562,7 +2571,7 @@ module Aws::ACMPCA
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-acmpca'
-      context[:gem_version] = '1.53.0'
+      context[:gem_version] = '1.55.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-acmpca/endpoint_parameters.rb

@@ -50,9 +50,6 @@ module Aws::ACMPCA
 
     def initialize(options = {})
       self[:region] = options[:region]
-      if self[:region].nil?
-        raise ArgumentError, "Missing required EndpointParameter: :region"
-      end
       self[:use_dual_stack] = options[:use_dual_stack]
       self[:use_dual_stack] = false if self[:use_dual_stack].nil?
       if self[:use_dual_stack].nil?

data/lib/aws-sdk-acmpca/endpoint_provider.rb

@@ -14,39 +14,42 @@ module Aws::ACMPCA
       use_dual_stack = parameters.use_dual_stack
       use_fips = parameters.use_fips
       endpoint = parameters.endpoint
-      if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
-        if Aws::Endpoints::Matchers.set?(endpoint)
-          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
-            raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
-          end
-          if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-            raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
-          end
-          return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
+      if Aws::Endpoints::Matchers.set?(endpoint)
+        if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
+          raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
         end
-        if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
-            return Aws::Endpoints::Endpoint.new(url: "https://acm-pca-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
-          end
-          raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
+        if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+          raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
         end
-        if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
-            if Aws::Endpoints::Matchers.string_equals?("aws-us-gov", Aws::Endpoints::Matchers.attr(partition_result, "name"))
-              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
+        return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(region)
+        if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
+          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
+              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
             end
-            return Aws::Endpoints::Endpoint.new(url: "https://acm-pca-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
+            raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
           end
-          raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
-        end
-        if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
-            return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
+              if Aws::Endpoints::Matchers.string_equals?("aws-us-gov", Aws::Endpoints::Matchers.attr(partition_result, "name"))
+                return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.amazonaws.com", headers: {}, properties: {})
+              end
+              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
+            end
+            raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
+          end
+          if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
+              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+            end
+            raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
           end
-          raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
+          return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
         end
-        return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
       end
+      raise ArgumentError, "Invalid Configuration: Missing Region"
       raise ArgumentError, 'No endpoint could be resolved'
 
     end

data/lib/aws-sdk-acmpca/types.rb

@@ -523,19 +523,23 @@ module Aws::ACMPCA
     #
     #   Default: FIPS\_140\_2\_LEVEL\_3\_OR\_HIGHER
     #
-    #   *Note:* `FIPS_140_2_LEVEL_3_OR_HIGHER` is not supported in the
-    #   following Regions:
-    #
-    #   * ap-northeast-3
-    #
-    #   * ap-southeast-3
-    #
-    #   When creating a CA in these Regions, you must provide
+    #   <note markdown="1"> Some Amazon Web Services Regions do not support the default. When
+    #   creating a CA in these Regions, you must provide
     #   `FIPS_140_2_LEVEL_2_OR_HIGHER` as the argument for
     #   `KeyStorageSecurityStandard`. Failure to do this results in an
     #   `InvalidArgsException` with the message, "A certificate authority
     #   cannot be created in this region with the specified security
     #   standard."
+    #
+    #    For information about security standard support in various Regions,
+    #   see [Storage and security compliance of Amazon Web Services Private
+    #   CA private keys][1].
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/userguide/data-protection.html#private-keys
     #   @return [String]
     #
     # @!attribute [rw] tags
@@ -657,45 +661,45 @@ module Aws::ACMPCA
     #
     # CRLs contain the following fields:
     #
-    # * **Version**\: The current version number defined in RFC 5280 is V2.
+    # * **Version**: The current version number defined in RFC 5280 is V2.
     #   The integer value is 0x1.
     #
-    # * **Signature Algorithm**\: The name of the algorithm used to sign the
+    # * **Signature Algorithm**: The name of the algorithm used to sign the
     #   CRL.
     #
-    # * **Issuer**\: The X.500 distinguished name of your private CA that
+    # * **Issuer**: The X.500 distinguished name of your private CA that
     #   issued the CRL.
     #
-    # * **Last Update**\: The issue date and time of this CRL.
+    # * **Last Update**: The issue date and time of this CRL.
     #
-    # * **Next Update**\: The day and time by which the next CRL will be
+    # * **Next Update**: The day and time by which the next CRL will be
     #   issued.
     #
-    # * **Revoked Certificates**\: List of revoked certificates. Each list
+    # * **Revoked Certificates**: List of revoked certificates. Each list
     #   item contains the following information.
     #
-    #   * **Serial Number**\: The serial number, in hexadecimal format, of
+    #   * **Serial Number**: The serial number, in hexadecimal format, of
     #     the revoked certificate.
     #
-    #   * **Revocation Date**\: Date and time the certificate was revoked.
+    #   * **Revocation Date**: Date and time the certificate was revoked.
     #
-    #   * **CRL Entry Extensions**\: Optional extensions for the CRL entry.
+    #   * **CRL Entry Extensions**: Optional extensions for the CRL entry.
     #
-    #     * **X509v3 CRL Reason Code**\: Reason the certificate was revoked.
+    #     * **X509v3 CRL Reason Code**: Reason the certificate was revoked.
     #
     #     ^
     #
-    # * **CRL Extensions**\: Optional extensions for the CRL.
+    # * **CRL Extensions**: Optional extensions for the CRL.
     #
-    #   * **X509v3 Authority Key Identifier**\: Identifies the public key
+    #   * **X509v3 Authority Key Identifier**: Identifies the public key
     #     associated with the private key used to sign the certificate.
     #
-    #   * **X509v3 CRL Number:**\: Decimal sequence number for the CRL.
+    #   * **X509v3 CRL Number:**: Decimal sequence number for the CRL.
     #
-    # * **Signature Algorithm**\: Algorithm used by your private CA to sign
+    # * **Signature Algorithm**: Algorithm used by your private CA to sign
     #   the CRL.
     #
-    # * **Signature Value**\: Signature computed over the CRL.
+    # * **Signature Value**: Signature computed over the CRL.
     #
     # Certificate revocation lists created by Amazon Web Services Private CA
     # are DER-encoded. You can use the following OpenSSL command to list a
@@ -1581,7 +1585,7 @@ module Aws::ACMPCA
     #   parameter used to sign a CSR in the `CreateCertificateAuthority`
     #   action.
     #
-    #   <note markdown="1"> The specified signing algorithm family (RSA or ECDSA) much match the
+    #   <note markdown="1"> The specified signing algorithm family (RSA or ECDSA) must match the
     #   algorithm family of the CA's secret key.
     #
     #    </note>
@@ -1652,7 +1656,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_Validity.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_Validity.html
     #   [2]: https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.5
     #   @return [Types::Validity]
     #
@@ -2526,10 +2530,10 @@ module Aws::ACMPCA
     #
     # Amazon Web Services Private CA API consumes the `Validity` data type
     # differently in two distinct parameters of the `IssueCertificate`
-    # action. The required parameter `IssueCertificate`\:`Validity`
-    # specifies the end of a certificate's validity period. The optional
-    # parameter `IssueCertificate`\:`ValidityNotBefore` specifies a
-    # customized starting time for the validity period.
+    # action. The required parameter `IssueCertificate`:`Validity` specifies
+    # the end of a certificate's validity period. The optional parameter
+    # `IssueCertificate`:`ValidityNotBefore` specifies a customized starting
+    # time for the validity period.
     #
     #
     #
@@ -2545,7 +2549,7 @@ module Aws::ACMPCA
     #   those listed below. Type definitions with values include a sample
     #   input value and the resulting output.
     #
-    #   `END_DATE`\: The specific date and time when the certificate will
+    #   `END_DATE`: The specific date and time when the certificate will
     #   expire, expressed using UTCTime (YYMMDDHHMMSS) or GeneralizedTime
     #   (YYYYMMDDHHMMSS) format. When UTCTime is used, if the year field
     #   (YY) is greater than or equal to 50, the year is interpreted as
@@ -2556,7 +2560,7 @@ module Aws::ACMPCA
     #
     #   * Output expiration date/time: 12/31/2049 23:59:59
     #
-    #   `ABSOLUTE`\: The specific date and time when the validity of a
+    #   `ABSOLUTE`: The specific date and time when the validity of a
     #   certificate will start or expire, expressed in seconds since the
     #   Unix Epoch.
     #
@@ -2564,7 +2568,7 @@ module Aws::ACMPCA
     #
     #   * Output expiration date/time: 01/01/2050 00:00:00
     #
-    #   `DAYS`, `MONTHS`, `YEARS`\: The relative time from the moment of
+    #   `DAYS`, `MONTHS`, `YEARS`: The relative time from the moment of
     #   issuance until the certificate will expire, expressed in days,
     #   months, or years.
     #

data/lib/aws-sdk-acmpca.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-acmpca/customizations'
 # @!group service
 module Aws::ACMPCA
 
-  GEM_VERSION = '1.53.0'
+  GEM_VERSION = '1.55.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-acmpca
 version: !ruby/object:Gem::Version
-  version: 1.53.0
+  version: 1.55.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-01-18 00:00:00.000000000 Z
+date: 2023-06-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.165.0
+        version: 3.174.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.165.0
+        version: 3.174.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement