aws-sdk-acmpca 1.86.0 → 1.90.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9746f46d245f29b7bb3747daa0b59d15efa45ead90abcab291562f938ec3bcad
-  data.tar.gz: b38f0fd7c630a0bea17c8ccb9bd5d7468b59e9d83d008b04b7d7bb4c26890e44
+  metadata.gz: 8d705b436b021f2f4f4eb2e541c17dda05d3c2b0567299efa26d6589b76b4419
+  data.tar.gz: a5205e96872f6ca6c1f5f370b99d05abbef5cf20278ef7d717cca79589f7c917
 SHA512:
-  metadata.gz: 1204761ce101b8013c68b6f21ae4600a37ca0b4d6ea660ebded4b206cef4d0275b7ab7aefebacf54143ed42bffac699abd505a22532b4cf86fd7d209414ea430
-  data.tar.gz: 5a7d018411ac44d4cb81bd79170f448bc8ddd597a521f1f871aaffc00757a4e745bab32dab4fa19d33739478386450c0ca34dba1f49c1fdbef659b616a6d92a5
+  metadata.gz: 7b2e10f119d681b4696f5e9106268ebf145cce20692a3f03e288ce22561e177bf75e65832a22d01c40d29c1c1bf2767b2a31161dc648d6cea606c1a436f3a460
+  data.tar.gz: 7afa13c2e5555dcd7db2f78e4d9f3017a4db3c035fd4a5792e625cbda22839d98a0f395d75b08ff4d85a4bdba7096359cfdf3af5783d4154f091a8a9615fcfab

data/CHANGELOG.md

@@ -1,6 +1,26 @@
 Unreleased Changes
 ------------------
 
+1.90.0 (2025-02-18)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.89.0 (2025-02-13)
+------------------
+
+* Feature - Private Certificate Authority (PCA) documentation updates
+
+1.88.0 (2025-02-11)
+------------------
+
+* Feature - Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option.
+
+1.87.0 (2025-02-06)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.86.0 (2025-01-15)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.86.0
+1.90.0

data/lib/aws-sdk-acmpca/client.rb

@@ -7,34 +7,34 @@
 #
 # WARNING ABOUT GENERATED CODE
 
-require 'seahorse/client/plugins/content_length.rb'
-require 'aws-sdk-core/plugins/credentials_configuration.rb'
-require 'aws-sdk-core/plugins/logging.rb'
-require 'aws-sdk-core/plugins/param_converter.rb'
-require 'aws-sdk-core/plugins/param_validator.rb'
-require 'aws-sdk-core/plugins/user_agent.rb'
-require 'aws-sdk-core/plugins/helpful_socket_errors.rb'
-require 'aws-sdk-core/plugins/retry_errors.rb'
-require 'aws-sdk-core/plugins/global_configuration.rb'
-require 'aws-sdk-core/plugins/regional_endpoint.rb'
-require 'aws-sdk-core/plugins/endpoint_discovery.rb'
-require 'aws-sdk-core/plugins/endpoint_pattern.rb'
-require 'aws-sdk-core/plugins/response_paging.rb'
-require 'aws-sdk-core/plugins/stub_responses.rb'
-require 'aws-sdk-core/plugins/idempotency_token.rb'
-require 'aws-sdk-core/plugins/invocation_id.rb'
-require 'aws-sdk-core/plugins/jsonvalue_converter.rb'
-require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
-require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
-require 'aws-sdk-core/plugins/transfer_encoding.rb'
-require 'aws-sdk-core/plugins/http_checksum.rb'
-require 'aws-sdk-core/plugins/checksum_algorithm.rb'
-require 'aws-sdk-core/plugins/request_compression.rb'
-require 'aws-sdk-core/plugins/defaults_mode.rb'
-require 'aws-sdk-core/plugins/recursion_detection.rb'
-require 'aws-sdk-core/plugins/telemetry.rb'
-require 'aws-sdk-core/plugins/sign.rb'
-require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
+require 'seahorse/client/plugins/content_length'
+require 'aws-sdk-core/plugins/credentials_configuration'
+require 'aws-sdk-core/plugins/logging'
+require 'aws-sdk-core/plugins/param_converter'
+require 'aws-sdk-core/plugins/param_validator'
+require 'aws-sdk-core/plugins/user_agent'
+require 'aws-sdk-core/plugins/helpful_socket_errors'
+require 'aws-sdk-core/plugins/retry_errors'
+require 'aws-sdk-core/plugins/global_configuration'
+require 'aws-sdk-core/plugins/regional_endpoint'
+require 'aws-sdk-core/plugins/endpoint_discovery'
+require 'aws-sdk-core/plugins/endpoint_pattern'
+require 'aws-sdk-core/plugins/response_paging'
+require 'aws-sdk-core/plugins/stub_responses'
+require 'aws-sdk-core/plugins/idempotency_token'
+require 'aws-sdk-core/plugins/invocation_id'
+require 'aws-sdk-core/plugins/jsonvalue_converter'
+require 'aws-sdk-core/plugins/client_metrics_plugin'
+require 'aws-sdk-core/plugins/client_metrics_send_plugin'
+require 'aws-sdk-core/plugins/transfer_encoding'
+require 'aws-sdk-core/plugins/http_checksum'
+require 'aws-sdk-core/plugins/checksum_algorithm'
+require 'aws-sdk-core/plugins/request_compression'
+require 'aws-sdk-core/plugins/defaults_mode'
+require 'aws-sdk-core/plugins/recursion_detection'
+require 'aws-sdk-core/plugins/telemetry'
+require 'aws-sdk-core/plugins/sign'
+require 'aws-sdk-core/plugins/protocols/json_rpc'
 
 module Aws::ACMPCA
   # An API client for ACMPCA.  To construct a client, you need to configure a `:region` and `:credentials`.
@@ -702,6 +702,8 @@ module Aws::ACMPCA
     #         crl_distribution_point_extension_configuration: {
     #           omit_extension: false, # required
     #         },
+    #         crl_type: "COMPLETE", # accepts COMPLETE, PARTITIONED
+    #         custom_path: "CrlPathString",
     #       },
     #       ocsp_configuration: {
     #         enabled: false, # required
@@ -1215,6 +1217,8 @@ module Aws::ACMPCA
     #   resp.certificate_authority.revocation_configuration.crl_configuration.s3_bucket_name #=> String
     #   resp.certificate_authority.revocation_configuration.crl_configuration.s3_object_acl #=> String, one of "PUBLIC_READ", "BUCKET_OWNER_FULL_CONTROL"
     #   resp.certificate_authority.revocation_configuration.crl_configuration.crl_distribution_point_extension_configuration.omit_extension #=> Boolean
+    #   resp.certificate_authority.revocation_configuration.crl_configuration.crl_type #=> String, one of "COMPLETE", "PARTITIONED"
+    #   resp.certificate_authority.revocation_configuration.crl_configuration.custom_path #=> String
     #   resp.certificate_authority.revocation_configuration.ocsp_configuration.enabled #=> Boolean
     #   resp.certificate_authority.revocation_configuration.ocsp_configuration.ocsp_custom_cname #=> String
     #   resp.certificate_authority.restorable_until #=> Time
@@ -2064,6 +2068,8 @@ module Aws::ACMPCA
     #   resp.certificate_authorities[0].revocation_configuration.crl_configuration.s3_bucket_name #=> String
     #   resp.certificate_authorities[0].revocation_configuration.crl_configuration.s3_object_acl #=> String, one of "PUBLIC_READ", "BUCKET_OWNER_FULL_CONTROL"
     #   resp.certificate_authorities[0].revocation_configuration.crl_configuration.crl_distribution_point_extension_configuration.omit_extension #=> Boolean
+    #   resp.certificate_authorities[0].revocation_configuration.crl_configuration.crl_type #=> String, one of "COMPLETE", "PARTITIONED"
+    #   resp.certificate_authorities[0].revocation_configuration.crl_configuration.custom_path #=> String
     #   resp.certificate_authorities[0].revocation_configuration.ocsp_configuration.enabled #=> Boolean
     #   resp.certificate_authorities[0].revocation_configuration.ocsp_configuration.ocsp_custom_cname #=> String
     #   resp.certificate_authorities[0].restorable_until #=> Time
@@ -2653,6 +2659,8 @@ module Aws::ACMPCA
     #         crl_distribution_point_extension_configuration: {
     #           omit_extension: false, # required
     #         },
+    #         crl_type: "COMPLETE", # accepts COMPLETE, PARTITIONED
+    #         custom_path: "CrlPathString",
     #       },
     #       ocsp_configuration: {
     #         enabled: false, # required
@@ -2689,7 +2697,7 @@ module Aws::ACMPCA
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-acmpca'
-      context[:gem_version] = '1.86.0'
+      context[:gem_version] = '1.90.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-acmpca/client_api.rb

@@ -53,6 +53,8 @@ module Aws::ACMPCA
     CreatePermissionRequest = Shapes::StructureShape.new(name: 'CreatePermissionRequest')
     CrlConfiguration = Shapes::StructureShape.new(name: 'CrlConfiguration')
     CrlDistributionPointExtensionConfiguration = Shapes::StructureShape.new(name: 'CrlDistributionPointExtensionConfiguration')
+    CrlPathString = Shapes::StringShape.new(name: 'CrlPathString')
+    CrlType = Shapes::StringShape.new(name: 'CrlType')
     CsrBlob = Shapes::BlobShape.new(name: 'CsrBlob')
     CsrBody = Shapes::StringShape.new(name: 'CsrBody')
     CsrExtensions = Shapes::StructureShape.new(name: 'CsrExtensions')
@@ -261,6 +263,8 @@ module Aws::ACMPCA
     CrlConfiguration.add_member(:s3_bucket_name, Shapes::ShapeRef.new(shape: S3BucketName3To255, location_name: "S3BucketName"))
     CrlConfiguration.add_member(:s3_object_acl, Shapes::ShapeRef.new(shape: S3ObjectAcl, location_name: "S3ObjectAcl"))
     CrlConfiguration.add_member(:crl_distribution_point_extension_configuration, Shapes::ShapeRef.new(shape: CrlDistributionPointExtensionConfiguration, location_name: "CrlDistributionPointExtensionConfiguration"))
+    CrlConfiguration.add_member(:crl_type, Shapes::ShapeRef.new(shape: CrlType, location_name: "CrlType"))
+    CrlConfiguration.add_member(:custom_path, Shapes::ShapeRef.new(shape: CrlPathString, location_name: "CustomPath"))
     CrlConfiguration.struct_class = Types::CrlConfiguration
 
     CrlDistributionPointExtensionConfiguration.add_member(:omit_extension, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "OmitExtension", metadata: {"box"=>true}))

data/lib/aws-sdk-acmpca/endpoint_provider.rb

@@ -10,43 +10,39 @@
 module Aws::ACMPCA
   class EndpointProvider
     def resolve_endpoint(parameters)
-      region = parameters.region
-      use_dual_stack = parameters.use_dual_stack
-      use_fips = parameters.use_fips
-      endpoint = parameters.endpoint
-      if Aws::Endpoints::Matchers.set?(endpoint)
-        if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
+      if Aws::Endpoints::Matchers.set?(parameters.endpoint)
+        if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
           raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
         end
-        if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+        if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
           raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
         end
-        return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
+        return Aws::Endpoints::Endpoint.new(url: parameters.endpoint, headers: {}, properties: {})
       end
-      if Aws::Endpoints::Matchers.set?(region)
-        if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
-          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+      if Aws::Endpoints::Matchers.set?(parameters.region)
+        if (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region))
+          if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
             if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
-              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca-fips.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
             end
             raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
           end
-          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
+          if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
             if Aws::Endpoints::Matchers.boolean_equals?(Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"), true)
               if Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-us-gov")
-                return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.amazonaws.com", headers: {}, properties: {})
+                return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{parameters.region}.amazonaws.com", headers: {}, properties: {})
               end
-              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
+              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca-fips.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
             end
             raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
           end
-          if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+          if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, true)
             if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
-              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+              return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
             end
             raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
           end
-          return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
+          return Aws::Endpoints::Endpoint.new(url: "https://acm-pca.#{parameters.region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
         end
       end
       raise ArgumentError, "Invalid Configuration: Missing Region"

data/lib/aws-sdk-acmpca/types.rb

@@ -804,6 +804,40 @@ module Aws::ACMPCA
     #   present and contain the default CRL URL.
     #   @return [Types::CrlDistributionPointExtensionConfiguration]
     #
+    # @!attribute [rw] crl_type
+    #   Specifies whether to create a complete or partitioned CRL. This
+    #   setting determines the maximum number of certificates that the
+    #   certificate authority can issue and revoke. For more information,
+    #   see [Amazon Web Services Private CA
+    #   quotas](privateca/latest/userguide/pca.html#limits_pca).
+    #
+    #   * `COMPLETE` - The default setting. Amazon Web Services Private CA
+    #     maintains a single CRL file for all unexpired certificates issued by
+    #     a CA that have been revoked for any reason. Each certificate that
+    #     Amazon Web Services Private CA issues is bound to a specific CRL
+    #     through its CRL distribution point (CDP) extension, defined in [
+    #     RFC 5280][1].
+    #
+    #   * `PARTITIONED` - Compared to complete CRLs, partitioned CRLs
+    #     dramatically increase the number of certificates your private CA
+    #     can issue.
+    #
+    #     When using partitioned CRLs, you must validate that the CRL's
+    #     associated issuing distribution point (IDP) URI matches the
+    #     certificate's CDP URI to ensure the right CRL has been fetched.
+    #     Amazon Web Services Private CA marks the IDP extension as
+    #     critical, which your client must be able to process.
+    #
+    #
+    #
+    #   [1]: https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.9
+    #   @return [String]
+    #
+    # @!attribute [rw] custom_path
+    #   Designates a custom file path in S3 for CRL(s). For example,
+    #   `http://<CustomName>/ <CustomPath>/<CrlPartition_GUID>.crl`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CrlConfiguration AWS API Documentation
     #
     class CrlConfiguration < Struct.new(
@@ -812,7 +846,9 @@ module Aws::ACMPCA
       :custom_cname,
       :s3_bucket_name,
       :s3_object_acl,
-      :crl_distribution_point_extension_configuration)
+      :crl_distribution_point_extension_configuration,
+      :crl_type,
+      :custom_path)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-acmpca/waiters.rb

@@ -93,20 +93,20 @@ module Aws::ACMPCA
             operation_name: :describe_certificate_authority_audit_report,
             acceptors: [
               {
-                "state" => "success",
                 "matcher" => "path",
                 "argument" => "audit_report_status",
+                "state" => "success",
                 "expected" => "SUCCESS"
               },
               {
-                "state" => "failure",
                 "matcher" => "path",
                 "argument" => "audit_report_status",
+                "state" => "failure",
                 "expected" => "FAILED"
               },
               {
-                "state" => "failure",
                 "matcher" => "error",
+                "state" => "failure",
                 "expected" => "AccessDeniedException"
               }
             ]
@@ -143,18 +143,18 @@ module Aws::ACMPCA
             operation_name: :get_certificate_authority_csr,
             acceptors: [
               {
+                "matcher" => "error",
                 "state" => "success",
-                "matcher" => "status",
-                "expected" => 200
+                "expected" => false
               },
               {
-                "state" => "retry",
                 "matcher" => "error",
+                "state" => "retry",
                 "expected" => "RequestInProgressException"
               },
               {
-                "state" => "failure",
                 "matcher" => "error",
+                "state" => "failure",
                 "expected" => "AccessDeniedException"
               }
             ]
@@ -191,18 +191,18 @@ module Aws::ACMPCA
             operation_name: :get_certificate,
             acceptors: [
               {
+                "matcher" => "error",
                 "state" => "success",
-                "matcher" => "status",
-                "expected" => 200
+                "expected" => false
               },
               {
-                "state" => "retry",
                 "matcher" => "error",
+                "state" => "retry",
                 "expected" => "RequestInProgressException"
               },
               {
-                "state" => "failure",
                 "matcher" => "error",
+                "state" => "failure",
                 "expected" => "AccessDeniedException"
               }
             ]

data/lib/aws-sdk-acmpca.rb

@@ -55,7 +55,7 @@ module Aws::ACMPCA
   autoload :EndpointProvider, 'aws-sdk-acmpca/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-acmpca/endpoints'
 
-  GEM_VERSION = '1.86.0'
+  GEM_VERSION = '1.90.0'
 
 end
 

data/sig/client.rbs

@@ -177,7 +177,9 @@ module Aws
                                               s3_object_acl: ("PUBLIC_READ" | "BUCKET_OWNER_FULL_CONTROL")?,
                                               crl_distribution_point_extension_configuration: {
                                                 omit_extension: bool
-                                              }?
+                                              }?,
+                                              crl_type: ("COMPLETE" | "PARTITIONED")?,
+                                              custom_path: ::String?
                                             }?,
                                             ocsp_configuration: {
                                               enabled: bool,
@@ -535,7 +537,9 @@ module Aws
                                               s3_object_acl: ("PUBLIC_READ" | "BUCKET_OWNER_FULL_CONTROL")?,
                                               crl_distribution_point_extension_configuration: {
                                                 omit_extension: bool
-                                              }?
+                                              }?,
+                                              crl_type: ("COMPLETE" | "PARTITIONED")?,
+                                              custom_path: ::String?
                                             }?,
                                             ocsp_configuration: {
                                               enabled: bool,

data/sig/types.rbs

@@ -126,6 +126,8 @@ module Aws::ACMPCA
       attr_accessor s3_bucket_name: ::String
       attr_accessor s3_object_acl: ("PUBLIC_READ" | "BUCKET_OWNER_FULL_CONTROL")
       attr_accessor crl_distribution_point_extension_configuration: Types::CrlDistributionPointExtensionConfiguration
+      attr_accessor crl_type: ("COMPLETE" | "PARTITIONED")
+      attr_accessor custom_path: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-acmpca
 version: !ruby/object:Gem::Version
-  version: 1.86.0
+  version: 1.90.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-15 00:00:00.000000000 Z
+date: 2025-02-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core