aws-sdk-acmpca 1.87.0 → 1.88.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 30631947f20df6b1764fe9003e8808c2df9c7ae55aa7cd2112b1c19bb558bcff
4
- data.tar.gz: 70f23bcf00425c236888b66c53a335af5ddfd7c968d2392db1bb258455e94184
3
+ metadata.gz: c4a3e552a184e56a1b5c444fe9f38ad18e6c6a2d6a19e3fae9302b1570a0e9e0
4
+ data.tar.gz: 897980aca30d6ca76c84b15419e07a495404e21bf69420d77e6efa24c7681b59
5
5
  SHA512:
6
- metadata.gz: 4d9865dee1a6407cba98e2f53b2dcd4eb0fdf3183588213b00f0876f6d28e540c299ec789d76d0c4448708bad4db64b156c4affa2ca3ae40f18b03f2ef9d11d0
7
- data.tar.gz: c6546f70598439c2d0c597de16692f7e15359a6e13fcff2cfa37081b919f2c3831bd2ef38be15c5f51f91553ab2a6926c384b82881dd3488cd31426a758f1939
6
+ metadata.gz: 9b796d157901f2fb3cd5c8877d041ad1b539f94c4e0ea29ca74acd42fc35bc8ada146466a3ede33725df3619f8ce5d954b2aea0ee091914e6f6d0039318c52e8
7
+ data.tar.gz: 8fd78efd9f98a6276e2de7ae560e68e1740dbdc1d9f8de049b78f19351c3b21321e5bf4d065aab32e620b0e3f7a5e37e70f4996a81a90a558fc6fac257a09e50
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.88.0 (2025-02-11)
5
+ ------------------
6
+
7
+ * Feature - Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option.
8
+
4
9
  1.87.0 (2025-02-06)
5
10
  ------------------
6
11
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.87.0
1
+ 1.88.0
@@ -702,6 +702,8 @@ module Aws::ACMPCA
702
702
  # crl_distribution_point_extension_configuration: {
703
703
  # omit_extension: false, # required
704
704
  # },
705
+ # crl_type: "COMPLETE", # accepts COMPLETE, PARTITIONED
706
+ # custom_path: "CrlPathString",
705
707
  # },
706
708
  # ocsp_configuration: {
707
709
  # enabled: false, # required
@@ -1215,6 +1217,8 @@ module Aws::ACMPCA
1215
1217
  # resp.certificate_authority.revocation_configuration.crl_configuration.s3_bucket_name #=> String
1216
1218
  # resp.certificate_authority.revocation_configuration.crl_configuration.s3_object_acl #=> String, one of "PUBLIC_READ", "BUCKET_OWNER_FULL_CONTROL"
1217
1219
  # resp.certificate_authority.revocation_configuration.crl_configuration.crl_distribution_point_extension_configuration.omit_extension #=> Boolean
1220
+ # resp.certificate_authority.revocation_configuration.crl_configuration.crl_type #=> String, one of "COMPLETE", "PARTITIONED"
1221
+ # resp.certificate_authority.revocation_configuration.crl_configuration.custom_path #=> String
1218
1222
  # resp.certificate_authority.revocation_configuration.ocsp_configuration.enabled #=> Boolean
1219
1223
  # resp.certificate_authority.revocation_configuration.ocsp_configuration.ocsp_custom_cname #=> String
1220
1224
  # resp.certificate_authority.restorable_until #=> Time
@@ -2064,6 +2068,8 @@ module Aws::ACMPCA
2064
2068
  # resp.certificate_authorities[0].revocation_configuration.crl_configuration.s3_bucket_name #=> String
2065
2069
  # resp.certificate_authorities[0].revocation_configuration.crl_configuration.s3_object_acl #=> String, one of "PUBLIC_READ", "BUCKET_OWNER_FULL_CONTROL"
2066
2070
  # resp.certificate_authorities[0].revocation_configuration.crl_configuration.crl_distribution_point_extension_configuration.omit_extension #=> Boolean
2071
+ # resp.certificate_authorities[0].revocation_configuration.crl_configuration.crl_type #=> String, one of "COMPLETE", "PARTITIONED"
2072
+ # resp.certificate_authorities[0].revocation_configuration.crl_configuration.custom_path #=> String
2067
2073
  # resp.certificate_authorities[0].revocation_configuration.ocsp_configuration.enabled #=> Boolean
2068
2074
  # resp.certificate_authorities[0].revocation_configuration.ocsp_configuration.ocsp_custom_cname #=> String
2069
2075
  # resp.certificate_authorities[0].restorable_until #=> Time
@@ -2653,6 +2659,8 @@ module Aws::ACMPCA
2653
2659
  # crl_distribution_point_extension_configuration: {
2654
2660
  # omit_extension: false, # required
2655
2661
  # },
2662
+ # crl_type: "COMPLETE", # accepts COMPLETE, PARTITIONED
2663
+ # custom_path: "CrlPathString",
2656
2664
  # },
2657
2665
  # ocsp_configuration: {
2658
2666
  # enabled: false, # required
@@ -2689,7 +2697,7 @@ module Aws::ACMPCA
2689
2697
  tracer: tracer
2690
2698
  )
2691
2699
  context[:gem_name] = 'aws-sdk-acmpca'
2692
- context[:gem_version] = '1.87.0'
2700
+ context[:gem_version] = '1.88.0'
2693
2701
  Seahorse::Client::Request.new(handlers, context)
2694
2702
  end
2695
2703
 
@@ -53,6 +53,8 @@ module Aws::ACMPCA
53
53
  CreatePermissionRequest = Shapes::StructureShape.new(name: 'CreatePermissionRequest')
54
54
  CrlConfiguration = Shapes::StructureShape.new(name: 'CrlConfiguration')
55
55
  CrlDistributionPointExtensionConfiguration = Shapes::StructureShape.new(name: 'CrlDistributionPointExtensionConfiguration')
56
+ CrlPathString = Shapes::StringShape.new(name: 'CrlPathString')
57
+ CrlType = Shapes::StringShape.new(name: 'CrlType')
56
58
  CsrBlob = Shapes::BlobShape.new(name: 'CsrBlob')
57
59
  CsrBody = Shapes::StringShape.new(name: 'CsrBody')
58
60
  CsrExtensions = Shapes::StructureShape.new(name: 'CsrExtensions')
@@ -261,6 +263,8 @@ module Aws::ACMPCA
261
263
  CrlConfiguration.add_member(:s3_bucket_name, Shapes::ShapeRef.new(shape: S3BucketName3To255, location_name: "S3BucketName"))
262
264
  CrlConfiguration.add_member(:s3_object_acl, Shapes::ShapeRef.new(shape: S3ObjectAcl, location_name: "S3ObjectAcl"))
263
265
  CrlConfiguration.add_member(:crl_distribution_point_extension_configuration, Shapes::ShapeRef.new(shape: CrlDistributionPointExtensionConfiguration, location_name: "CrlDistributionPointExtensionConfiguration"))
266
+ CrlConfiguration.add_member(:crl_type, Shapes::ShapeRef.new(shape: CrlType, location_name: "CrlType"))
267
+ CrlConfiguration.add_member(:custom_path, Shapes::ShapeRef.new(shape: CrlPathString, location_name: "CustomPath"))
264
268
  CrlConfiguration.struct_class = Types::CrlConfiguration
265
269
 
266
270
  CrlDistributionPointExtensionConfiguration.add_member(:omit_extension, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "OmitExtension", metadata: {"box"=>true}))
@@ -804,6 +804,44 @@ module Aws::ACMPCA
804
804
  # present and contain the default CRL URL.
805
805
  # @return [Types::CrlDistributionPointExtensionConfiguration]
806
806
  #
807
+ # @!attribute [rw] crl_type
808
+ # Choose whether to use a partitioned or complete CRL. Your choice
809
+ # determines the maximum number of certificates that the certificate
810
+ # authority can issue and revoke, as described in the [Amazon Web
811
+ # Services Private CA quotas][1].
812
+ #
813
+ # * `PARTITIONED` - The default setting. Partitioned CRLs are an
814
+ # especially good option for devices that have limited processing
815
+ # power or storage capacity, such as certain IoT devices. Compared
816
+ # to complete CRLs, partitioned CRLs dramatically increase the
817
+ # number of certificates your private CA can issue. Each certificate
818
+ # that Amazon Web Services Private CA issues is bound to a specific
819
+ # CRL partition through the CRL distribution point (CDP) defined in
820
+ # [RFC 5280][2].
821
+ #
822
+ # To make sure that your client fetches the CRL from a valid
823
+ # endpoint, we recommend that you programmatically validate that the
824
+ # CRL's issuing distribution point (IDP) URI matches the
825
+ # certificate's CDP URI. Amazon Web Services Private CA marks the
826
+ # IDP extension as critical, which your client must be able to
827
+ # process.
828
+ #
829
+ # * `COMPLETE` - Amazon Web Services Private CA maintains a single CRL
830
+ # file for all unexpired certificates issued by a CA that have been
831
+ # revoked for any reason.
832
+ #
833
+ #
834
+ #
835
+ # [1]: https://docs.aws.amazon.com/general/latest/gr/pca.html#limits_pca-connector-ad
836
+ # [2]: https://datatracker.ietf.org/doc/html/rfc5280
837
+ # @return [String]
838
+ #
839
+ # @!attribute [rw] custom_path
840
+ # Designates a custom file path in S3 for CRL(s). For example,
841
+ # `http://<CustomName>/<CustomPath>/<CrlPartition_GUID>.crl`. You can
842
+ # change the custom path up to five times.
843
+ # @return [String]
844
+ #
807
845
  # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CrlConfiguration AWS API Documentation
808
846
  #
809
847
  class CrlConfiguration < Struct.new(
@@ -812,7 +850,9 @@ module Aws::ACMPCA
812
850
  :custom_cname,
813
851
  :s3_bucket_name,
814
852
  :s3_object_acl,
815
- :crl_distribution_point_extension_configuration)
853
+ :crl_distribution_point_extension_configuration,
854
+ :crl_type,
855
+ :custom_path)
816
856
  SENSITIVE = []
817
857
  include Aws::Structure
818
858
  end
@@ -93,20 +93,20 @@ module Aws::ACMPCA
93
93
  operation_name: :describe_certificate_authority_audit_report,
94
94
  acceptors: [
95
95
  {
96
- "state" => "success",
97
96
  "matcher" => "path",
98
97
  "argument" => "audit_report_status",
98
+ "state" => "success",
99
99
  "expected" => "SUCCESS"
100
100
  },
101
101
  {
102
- "state" => "failure",
103
102
  "matcher" => "path",
104
103
  "argument" => "audit_report_status",
104
+ "state" => "failure",
105
105
  "expected" => "FAILED"
106
106
  },
107
107
  {
108
- "state" => "failure",
109
108
  "matcher" => "error",
109
+ "state" => "failure",
110
110
  "expected" => "AccessDeniedException"
111
111
  }
112
112
  ]
@@ -143,18 +143,18 @@ module Aws::ACMPCA
143
143
  operation_name: :get_certificate_authority_csr,
144
144
  acceptors: [
145
145
  {
146
+ "matcher" => "error",
146
147
  "state" => "success",
147
- "matcher" => "status",
148
- "expected" => 200
148
+ "expected" => false
149
149
  },
150
150
  {
151
- "state" => "retry",
152
151
  "matcher" => "error",
152
+ "state" => "retry",
153
153
  "expected" => "RequestInProgressException"
154
154
  },
155
155
  {
156
- "state" => "failure",
157
156
  "matcher" => "error",
157
+ "state" => "failure",
158
158
  "expected" => "AccessDeniedException"
159
159
  }
160
160
  ]
@@ -191,18 +191,18 @@ module Aws::ACMPCA
191
191
  operation_name: :get_certificate,
192
192
  acceptors: [
193
193
  {
194
+ "matcher" => "error",
194
195
  "state" => "success",
195
- "matcher" => "status",
196
- "expected" => 200
196
+ "expected" => false
197
197
  },
198
198
  {
199
- "state" => "retry",
200
199
  "matcher" => "error",
200
+ "state" => "retry",
201
201
  "expected" => "RequestInProgressException"
202
202
  },
203
203
  {
204
- "state" => "failure",
205
204
  "matcher" => "error",
205
+ "state" => "failure",
206
206
  "expected" => "AccessDeniedException"
207
207
  }
208
208
  ]
@@ -55,7 +55,7 @@ module Aws::ACMPCA
55
55
  autoload :EndpointProvider, 'aws-sdk-acmpca/endpoint_provider'
56
56
  autoload :Endpoints, 'aws-sdk-acmpca/endpoints'
57
57
 
58
- GEM_VERSION = '1.87.0'
58
+ GEM_VERSION = '1.88.0'
59
59
 
60
60
  end
61
61
 
data/sig/client.rbs CHANGED
@@ -177,7 +177,9 @@ module Aws
177
177
  s3_object_acl: ("PUBLIC_READ" | "BUCKET_OWNER_FULL_CONTROL")?,
178
178
  crl_distribution_point_extension_configuration: {
179
179
  omit_extension: bool
180
- }?
180
+ }?,
181
+ crl_type: ("COMPLETE" | "PARTITIONED")?,
182
+ custom_path: ::String?
181
183
  }?,
182
184
  ocsp_configuration: {
183
185
  enabled: bool,
@@ -535,7 +537,9 @@ module Aws
535
537
  s3_object_acl: ("PUBLIC_READ" | "BUCKET_OWNER_FULL_CONTROL")?,
536
538
  crl_distribution_point_extension_configuration: {
537
539
  omit_extension: bool
538
- }?
540
+ }?,
541
+ crl_type: ("COMPLETE" | "PARTITIONED")?,
542
+ custom_path: ::String?
539
543
  }?,
540
544
  ocsp_configuration: {
541
545
  enabled: bool,
data/sig/types.rbs CHANGED
@@ -126,6 +126,8 @@ module Aws::ACMPCA
126
126
  attr_accessor s3_bucket_name: ::String
127
127
  attr_accessor s3_object_acl: ("PUBLIC_READ" | "BUCKET_OWNER_FULL_CONTROL")
128
128
  attr_accessor crl_distribution_point_extension_configuration: Types::CrlDistributionPointExtensionConfiguration
129
+ attr_accessor crl_type: ("COMPLETE" | "PARTITIONED")
130
+ attr_accessor custom_path: ::String
129
131
  SENSITIVE: []
130
132
  end
131
133
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-acmpca
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.87.0
4
+ version: 1.88.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2025-02-06 00:00:00.000000000 Z
11
+ date: 2025-02-11 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core