aws-sdk-acmpca 1.112.0 → 1.113.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2c5aa72cda84abccd1d14ff29f4f588297d8f462b284188cb9b3280013b64bf1
-  data.tar.gz: 71027b03a0f13476385d93590b62f46e505dace70a941d24e256f05129cc9ab4
+  metadata.gz: 341c470f74f6cab2197f4a4faf39afe3a379ab407ebe45b63cd1efc444a65408
+  data.tar.gz: 9873ddb0d04fdd99828ae636154a9f13bdd8ad4de72256c21700935dd44e471c
 SHA512:
-  metadata.gz: ffa13f7130d2f94007d313c9cb86a78d174115c2079f2152335838b17f54abdeaabaca3a55c8e1ab3ec3903a03eafcad7a7a12ca09b7f8607d93cff1ec5d5837
-  data.tar.gz: 14c04b947fb98006776b2263e68f1718ebe58bddce0912091ad60cebe2cd47a7a52e9b0ec30df1b3d4f72804bb48dbd98724c711fad448e19313546407441cf4
+  metadata.gz: 6e09bc01bad7a0abc12c51c1608702ba367f04330f999d4700ee68f6d98bccb8f6af4536fdba5ab22c640febbaa063b724bcbc45765c0f95912268da7e3a6bd2
+  data.tar.gz: 4ec3ac0a259a5e32a2d8ee64c218d3543b9c56bb95d305d390f1186cbd06042e1dcde8e6a2b337368c252a09e8503bcf033c019466eda06dfb812de3a526d477

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.113.0 (2026-08-05)
+------------------
+
+* Feature - Private Certificate Authority service now supports RSASSA-PSS signing algorithm.
+
 1.112.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.112.0
+1.113.0

data/lib/aws-sdk-acmpca/client.rb

@@ -614,7 +614,7 @@ module Aws::ACMPCA
     #   resp = client.create_certificate_authority({
     #     certificate_authority_configuration: { # required
     #       key_algorithm: "RSA_2048", # required, accepts RSA_2048, RSA_3072, RSA_4096, EC_prime256v1, EC_secp384r1, EC_secp521r1, ML_DSA_44, ML_DSA_65, ML_DSA_87, SM2
-    #       signing_algorithm: "SHA256WITHECDSA", # required, accepts SHA256WITHECDSA, SHA384WITHECDSA, SHA512WITHECDSA, SHA256WITHRSA, SHA384WITHRSA, SHA512WITHRSA, SM3WITHSM2, ML_DSA_44, ML_DSA_65, ML_DSA_87
+    #       signing_algorithm: "SHA256WITHECDSA", # required, accepts SHA256WITHECDSA, SHA384WITHECDSA, SHA512WITHECDSA, SHA256WITHRSA, SHA384WITHRSA, SHA512WITHRSA, SHA256WITHRSA_PSS, SHA384WITHRSA_PSS, SHA512WITHRSA_PSS, SM3WITHSM2, ML_DSA_44, ML_DSA_65, ML_DSA_87
     #       subject: { # required
     #         country: "CountryCodeString",
     #         organization: "String64",
@@ -1169,7 +1169,7 @@ module Aws::ACMPCA
     #   resp.certificate_authority.not_after #=> Time
     #   resp.certificate_authority.failure_reason #=> String, one of "REQUEST_TIMED_OUT", "UNSUPPORTED_ALGORITHM", "OTHER"
     #   resp.certificate_authority.certificate_authority_configuration.key_algorithm #=> String, one of "RSA_2048", "RSA_3072", "RSA_4096", "EC_prime256v1", "EC_secp384r1", "EC_secp521r1", "ML_DSA_44", "ML_DSA_65", "ML_DSA_87", "SM2"
-    #   resp.certificate_authority.certificate_authority_configuration.signing_algorithm #=> String, one of "SHA256WITHECDSA", "SHA384WITHECDSA", "SHA512WITHECDSA", "SHA256WITHRSA", "SHA384WITHRSA", "SHA512WITHRSA", "SM3WITHSM2", "ML_DSA_44", "ML_DSA_65", "ML_DSA_87"
+    #   resp.certificate_authority.certificate_authority_configuration.signing_algorithm #=> String, one of "SHA256WITHECDSA", "SHA384WITHECDSA", "SHA512WITHECDSA", "SHA256WITHRSA", "SHA384WITHRSA", "SHA512WITHRSA", "SHA256WITHRSA_PSS", "SHA384WITHRSA_PSS", "SHA512WITHRSA_PSS", "SM3WITHSM2", "ML_DSA_44", "ML_DSA_65", "ML_DSA_87"
     #   resp.certificate_authority.certificate_authority_configuration.subject.country #=> String
     #   resp.certificate_authority.certificate_authority_configuration.subject.organization #=> String
     #   resp.certificate_authority.certificate_authority_configuration.subject.organizational_unit #=> String
@@ -1937,7 +1937,7 @@ module Aws::ACMPCA
     #     },
     #     certificate_authority_arn: "Arn", # required
     #     csr: "data", # required
-    #     signing_algorithm: "SHA256WITHECDSA", # required, accepts SHA256WITHECDSA, SHA384WITHECDSA, SHA512WITHECDSA, SHA256WITHRSA, SHA384WITHRSA, SHA512WITHRSA, SM3WITHSM2, ML_DSA_44, ML_DSA_65, ML_DSA_87
+    #     signing_algorithm: "SHA256WITHECDSA", # required, accepts SHA256WITHECDSA, SHA384WITHECDSA, SHA512WITHECDSA, SHA256WITHRSA, SHA384WITHRSA, SHA512WITHRSA, SHA256WITHRSA_PSS, SHA384WITHRSA_PSS, SHA512WITHRSA_PSS, SM3WITHSM2, ML_DSA_44, ML_DSA_65, ML_DSA_87
     #     template_arn: "Arn",
     #     validity: { # required
     #       value: 1, # required
@@ -2020,7 +2020,7 @@ module Aws::ACMPCA
     #   resp.certificate_authorities[0].not_after #=> Time
     #   resp.certificate_authorities[0].failure_reason #=> String, one of "REQUEST_TIMED_OUT", "UNSUPPORTED_ALGORITHM", "OTHER"
     #   resp.certificate_authorities[0].certificate_authority_configuration.key_algorithm #=> String, one of "RSA_2048", "RSA_3072", "RSA_4096", "EC_prime256v1", "EC_secp384r1", "EC_secp521r1", "ML_DSA_44", "ML_DSA_65", "ML_DSA_87", "SM2"
-    #   resp.certificate_authorities[0].certificate_authority_configuration.signing_algorithm #=> String, one of "SHA256WITHECDSA", "SHA384WITHECDSA", "SHA512WITHECDSA", "SHA256WITHRSA", "SHA384WITHRSA", "SHA512WITHRSA", "SM3WITHSM2", "ML_DSA_44", "ML_DSA_65", "ML_DSA_87"
+    #   resp.certificate_authorities[0].certificate_authority_configuration.signing_algorithm #=> String, one of "SHA256WITHECDSA", "SHA384WITHECDSA", "SHA512WITHECDSA", "SHA256WITHRSA", "SHA384WITHRSA", "SHA512WITHRSA", "SHA256WITHRSA_PSS", "SHA384WITHRSA_PSS", "SHA512WITHRSA_PSS", "SM3WITHSM2", "ML_DSA_44", "ML_DSA_65", "ML_DSA_87"
     #   resp.certificate_authorities[0].certificate_authority_configuration.subject.country #=> String
     #   resp.certificate_authorities[0].certificate_authority_configuration.subject.organization #=> String
     #   resp.certificate_authorities[0].certificate_authority_configuration.subject.organizational_unit #=> String
@@ -2711,7 +2711,7 @@ module Aws::ACMPCA
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-acmpca'
-      context[:gem_version] = '1.112.0'
+      context[:gem_version] = '1.113.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-acmpca/client_api.rb

@@ -743,8 +743,8 @@ module Aws::ACMPCA
         o.output = Shapes::ShapeRef.new(shape: IssueCertificateResponse)
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
-        o.errors << Shapes::ShapeRef.new(shape: InvalidArgsException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidArnException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidArgsException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidStateException)
         o.errors << Shapes::ShapeRef.new(shape: MalformedCSRException)
       end)

data/lib/aws-sdk-acmpca/types.rb

@@ -371,7 +371,8 @@ module Aws::ACMPCA
     #   requests.
     #
     #   This parameter should not be confused with the `SigningAlgorithm`
-    #   parameter used to sign certificates when they are issued.
+    #   parameter of the `IssueCertificate` API action, which is used to
+    #   sign certificates when they are issued.
     #   @return [String]
     #
     # @!attribute [rw] subject
@@ -774,7 +775,7 @@ module Aws::ACMPCA
     #
     #
     #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html
-    #   [2]: https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-policies
+    #   [2]: https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html#s3-policies
     #   [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html
     #   @return [String]
     #
@@ -801,7 +802,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-bpa
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html#s3-bpa
     #   @return [String]
     #
     # @!attribute [rw] crl_distribution_point_extension_configuration
@@ -815,15 +816,14 @@ module Aws::ACMPCA
     #   Specifies whether to create a complete or partitioned CRL. This
     #   setting determines the maximum number of certificates that the
     #   certificate authority can issue and revoke. For more information,
-    #   see [Amazon Web Services Private CA
-    #   quotas](privateca/latest/userguide/pca.html#limits_pca).
+    #   see [Amazon Web Services Private CA quotas][1].
     #
     #   * `COMPLETE` - The default setting. Amazon Web Services Private CA
     #     maintains a single CRL file for all unexpired certificates issued by
     #     a CA that have been revoked for any reason. Each certificate that
     #     Amazon Web Services Private CA issues is bound to a specific CRL
     #     through its CRL distribution point (CDP) extension, defined in [
-    #     RFC 5280][1].
+    #     RFC 5280][2].
     #
     #   * `PARTITIONED` - Compared to complete CRLs, partitioned CRLs
     #     dramatically increase the number of certificates your private CA
@@ -837,7 +837,8 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.9
+    #   [1]: https://docs.aws.amazon.com/general/latest/gr/pca.html#limits_pca
+    #   [2]: https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.9
     #   @return [String]
     #
     # @!attribute [rw] custom_path
@@ -874,7 +875,7 @@ module Aws::ACMPCA
     #   that CA unless otherwise specified through CSR or API passthrough.
     #
     #   <note markdown="1"> Only set this if you have another way to distribute the CRL
-    #   Distribution Points ffor certificates issued by your CA, such as the
+    #   Distribution Points for certificates issued by your CA, such as the
     #   Matter Distributed Compliance Ledger
     #
     #    This configuration cannot be enabled with a custom CNAME set.

data/lib/aws-sdk-acmpca.rb

@@ -55,7 +55,7 @@ module Aws::ACMPCA
   autoload :EndpointProvider, 'aws-sdk-acmpca/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-acmpca/endpoints'
 
-  GEM_VERSION = '1.112.0'
+  GEM_VERSION = '1.113.0'
 
 end
 

data/sig/client.rbs

@@ -87,7 +87,7 @@ module Aws
       def create_certificate_authority: (
                                           certificate_authority_configuration: {
                                             key_algorithm: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "EC_prime256v1" | "EC_secp384r1" | "EC_secp521r1" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "SM2"),
-                                            signing_algorithm: ("SHA256WITHECDSA" | "SHA384WITHECDSA" | "SHA512WITHECDSA" | "SHA256WITHRSA" | "SHA384WITHRSA" | "SHA512WITHRSA" | "SM3WITHSM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87"),
+                                            signing_algorithm: ("SHA256WITHECDSA" | "SHA384WITHECDSA" | "SHA512WITHECDSA" | "SHA256WITHRSA" | "SHA384WITHRSA" | "SHA512WITHRSA" | "SHA256WITHRSA_PSS" | "SHA384WITHRSA_PSS" | "SHA512WITHRSA_PSS" | "SM3WITHSM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87"),
                                             subject: Params::asn1_subject,
                                             csr_extensions: {
                                               key_usage: Params::key_usage?,
@@ -277,7 +277,7 @@ module Aws
                                },
                                certificate_authority_arn: ::String,
                                csr: ::String,
-                               signing_algorithm: ("SHA256WITHECDSA" | "SHA384WITHECDSA" | "SHA512WITHECDSA" | "SHA256WITHRSA" | "SHA384WITHRSA" | "SHA512WITHRSA" | "SM3WITHSM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87"),
+                               signing_algorithm: ("SHA256WITHECDSA" | "SHA384WITHECDSA" | "SHA512WITHECDSA" | "SHA256WITHRSA" | "SHA384WITHRSA" | "SHA512WITHRSA" | "SHA256WITHRSA_PSS" | "SHA384WITHRSA_PSS" | "SHA512WITHRSA_PSS" | "SM3WITHSM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87"),
                                ?template_arn: ::String,
                                validity: {
                                  value: ::Integer,

data/sig/types.rbs

@@ -66,7 +66,7 @@ module Aws::ACMPCA
 
     class CertificateAuthorityConfiguration
       attr_accessor key_algorithm: ("RSA_2048" | "RSA_3072" | "RSA_4096" | "EC_prime256v1" | "EC_secp384r1" | "EC_secp521r1" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87" | "SM2")
-      attr_accessor signing_algorithm: ("SHA256WITHECDSA" | "SHA384WITHECDSA" | "SHA512WITHECDSA" | "SHA256WITHRSA" | "SHA384WITHRSA" | "SHA512WITHRSA" | "SM3WITHSM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
+      attr_accessor signing_algorithm: ("SHA256WITHECDSA" | "SHA384WITHECDSA" | "SHA512WITHECDSA" | "SHA256WITHRSA" | "SHA384WITHRSA" | "SHA512WITHRSA" | "SHA256WITHRSA_PSS" | "SHA384WITHRSA_PSS" | "SHA512WITHRSA_PSS" | "SM3WITHSM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
       attr_accessor subject: Types::ASN1Subject
       attr_accessor csr_extensions: Types::CsrExtensions
       SENSITIVE: []
@@ -319,7 +319,7 @@ module Aws::ACMPCA
       attr_accessor api_passthrough: Types::ApiPassthrough
       attr_accessor certificate_authority_arn: ::String
       attr_accessor csr: ::String
-      attr_accessor signing_algorithm: ("SHA256WITHECDSA" | "SHA384WITHECDSA" | "SHA512WITHECDSA" | "SHA256WITHRSA" | "SHA384WITHRSA" | "SHA512WITHRSA" | "SM3WITHSM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
+      attr_accessor signing_algorithm: ("SHA256WITHECDSA" | "SHA384WITHECDSA" | "SHA512WITHECDSA" | "SHA256WITHRSA" | "SHA384WITHRSA" | "SHA512WITHRSA" | "SHA256WITHRSA_PSS" | "SHA384WITHRSA_PSS" | "SHA512WITHRSA_PSS" | "SM3WITHSM2" | "ML_DSA_44" | "ML_DSA_65" | "ML_DSA_87")
       attr_accessor template_arn: ::String
       attr_accessor validity: Types::Validity
       attr_accessor validity_not_before: Types::Validity

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-acmpca
 version: !ruby/object:Gem::Version
-  version: 1.112.0
+  version: 1.113.0
 platform: ruby
 authors:
 - Amazon Web Services