aws-sdk-cloudfront 1.128.0 → 1.140.0

data/lib/aws-sdk-cloudfront/types.rb

@@ -236,6 +236,15 @@ module Aws::CloudFront
     #   The Amazon Resource Name (ARN) of the Anycast static IP list.
     #   @return [String]
     #
+    # @!attribute [rw] ip_address_type
+    #   The IP address type for the Anycast static IP list.
+    #   @return [String]
+    #
+    # @!attribute [rw] ipam_config
+    #   The IPAM configuration for the Anycast static IP list, that contains
+    #   the quantity and list of IPAM CIDR configurations.
+    #   @return [Types::IpamConfig]
+    #
     # @!attribute [rw] anycast_ips
     #   The static IP addresses that are allocated to the Anycast static IP
     #   list.
@@ -256,6 +265,8 @@ module Aws::CloudFront
       :name,
       :status,
       :arn,
+      :ip_address_type,
+      :ipam_config,
       :anycast_ips,
       :ip_count,
       :last_modified_time)
@@ -339,6 +350,19 @@ module Aws::CloudFront
     #   The last time the Anycast static IP list was modified.
     #   @return [Time]
     #
+    # @!attribute [rw] ip_address_type
+    #   The IP address type for the Anycast static IP list.
+    #   @return [String]
+    #
+    # @!attribute [rw] etag
+    #   The current version (ETag value) of the Anycast static IP list.
+    #   @return [String]
+    #
+    # @!attribute [rw] ipam_config
+    #   The IPAM configuration for the Anycast static IP list, that contains
+    #   the quantity and list of IPAM CIDR configurations.
+    #   @return [Types::IpamConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/AnycastIpListSummary AWS API Documentation
     #
     class AnycastIpListSummary < Struct.new(
@@ -347,7 +371,10 @@ module Aws::CloudFront
       :status,
       :arn,
       :ip_count,
-      :last_modified_time)
+      :last_modified_time,
+      :ip_address_type,
+      :etag,
+      :ipam_config)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -490,6 +517,56 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # The CA certificates bundle location in Amazon S3.
+    #
+    # @!attribute [rw] bucket
+    #   The S3 bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] key
+    #   The location's key.
+    #   @return [String]
+    #
+    # @!attribute [rw] region
+    #   The location's Region.
+    #   @return [String]
+    #
+    # @!attribute [rw] version
+    #   The location's version.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CaCertificatesBundleS3Location AWS API Documentation
+    #
+    class CaCertificatesBundleS3Location < Struct.new(
+      :bucket,
+      :key,
+      :region,
+      :version)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A CA certificates bundle source.
+    #
+    # @note CaCertificatesBundleSource is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @!attribute [rw] ca_certificates_bundle_s3_location
+    #   The CA certificates bundle location in Amazon S3.
+    #   @return [Types::CaCertificatesBundleS3Location]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CaCertificatesBundleSource AWS API Documentation
+    #
+    class CaCertificatesBundleSource < Struct.new(
+      :ca_certificates_bundle_s3_location,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class CaCertificatesBundleS3Location < CaCertificatesBundleSource; end
+      class Unknown < CaCertificatesBundleSource; end
+    end
+
     # A complex type that describes how CloudFront processes requests.
     #
     # You must create at least as many cache behaviors (including the
@@ -1617,6 +1694,103 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # A connection function association.
+    #
+    # @!attribute [rw] id
+    #   The association's ID.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ConnectionFunctionAssociation AWS API Documentation
+    #
+    class ConnectionFunctionAssociation < Struct.new(
+      :id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A connection function summary.
+    #
+    # @!attribute [rw] name
+    #   The connection function name.
+    #   @return [String]
+    #
+    # @!attribute [rw] id
+    #   The connection function ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] connection_function_config
+    #   Contains configuration information about a CloudFront function.
+    #   @return [Types::FunctionConfig]
+    #
+    # @!attribute [rw] connection_function_arn
+    #   The connection function Amazon Resource Name (ARN).
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The connection function status.
+    #   @return [String]
+    #
+    # @!attribute [rw] stage
+    #   The connection function stage.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_time
+    #   The connection function created time.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_modified_time
+    #   The connection function last modified time.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ConnectionFunctionSummary AWS API Documentation
+    #
+    class ConnectionFunctionSummary < Struct.new(
+      :name,
+      :id,
+      :connection_function_config,
+      :connection_function_arn,
+      :status,
+      :stage,
+      :created_time,
+      :last_modified_time)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A connection function test result.
+    #
+    # @!attribute [rw] connection_function_summary
+    #   The connection function summary.
+    #   @return [Types::ConnectionFunctionSummary]
+    #
+    # @!attribute [rw] compute_utilization
+    #   The connection function compute utilization.
+    #   @return [String]
+    #
+    # @!attribute [rw] connection_function_execution_logs
+    #   The connection function execution logs.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] connection_function_error_message
+    #   The connection function error message.
+    #   @return [String]
+    #
+    # @!attribute [rw] connection_function_output
+    #   The connection function output.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ConnectionFunctionTestResult AWS API Documentation
+    #
+    class ConnectionFunctionTestResult < Struct.new(
+      :connection_function_summary,
+      :compute_utilization,
+      :connection_function_execution_logs,
+      :connection_function_error_message,
+      :connection_function_output)
+      SENSITIVE = [:connection_function_execution_logs, :connection_function_error_message, :connection_function_output]
+      include Aws::Structure
+    end
+
     # The connection group for your distribution tenants. When you first
     # create a distribution tenant and you don't specify a connection
     # group, CloudFront will automatically create a default connection group
@@ -2216,12 +2390,31 @@ module Aws::CloudFront
     #   A complex type that contains zero or more `Tag` elements.
     #   @return [Types::Tags]
     #
+    # @!attribute [rw] ip_address_type
+    #   The IP address type for the Anycast static IP list. You can specify
+    #   one of the following options:
+    #
+    #   * `ipv4` only
+    #
+    #   * `ipv6` only
+    #
+    #   * `dualstack` - Allocate a list of both IPv4 and IPv6 addresses
+    #   @return [String]
+    #
+    # @!attribute [rw] ipam_cidr_configs
+    #   A list of IPAM CIDR configurations that specify the IP address
+    #   ranges and IPAM pool settings for creating the Anycast static IP
+    #   list.
+    #   @return [Array<Types::IpamCidrConfig>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateAnycastIpListRequest AWS API Documentation
     #
     class CreateAnycastIpListRequest < Struct.new(
       :name,
       :ip_count,
-      :tags)
+      :tags,
+      :ip_address_type,
+      :ipam_cidr_configs)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2327,6 +2520,56 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] name
+    #   A name for the connection function.
+    #   @return [String]
+    #
+    # @!attribute [rw] connection_function_config
+    #   Contains configuration information about a CloudFront function.
+    #   @return [Types::FunctionConfig]
+    #
+    # @!attribute [rw] connection_function_code
+    #   The code for the connection function.
+    #   @return [String]
+    #
+    # @!attribute [rw] tags
+    #   A complex type that contains zero or more `Tag` elements.
+    #   @return [Types::Tags]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateConnectionFunctionRequest AWS API Documentation
+    #
+    class CreateConnectionFunctionRequest < Struct.new(
+      :name,
+      :connection_function_config,
+      :connection_function_code,
+      :tags)
+      SENSITIVE = [:connection_function_code]
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] connection_function_summary
+    #   The summary for the connection function.
+    #   @return [Types::ConnectionFunctionSummary]
+    #
+    # @!attribute [rw] location
+    #   The location of the connection function.
+    #   @return [String]
+    #
+    # @!attribute [rw] etag
+    #   The version identifier for the current version of the connection
+    #   function.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateConnectionFunctionResult AWS API Documentation
+    #
+    class CreateConnectionFunctionResult < Struct.new(
+      :connection_function_summary,
+      :location,
+      :etag)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] name
     #   The name of the connection group. Enter a friendly identifier that
     #   is unique within your Amazon Web Services account. This name can't
@@ -3160,6 +3403,45 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] name
+    #   A name for the trust store.
+    #   @return [String]
+    #
+    # @!attribute [rw] ca_certificates_bundle_source
+    #   The CA certificates bundle source for the trust store.
+    #   @return [Types::CaCertificatesBundleSource]
+    #
+    # @!attribute [rw] tags
+    #   A complex type that contains zero or more `Tag` elements.
+    #   @return [Types::Tags]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateTrustStoreRequest AWS API Documentation
+    #
+    class CreateTrustStoreRequest < Struct.new(
+      :name,
+      :ca_certificates_bundle_source,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] trust_store
+    #   The trust store.
+    #   @return [Types::TrustStore]
+    #
+    # @!attribute [rw] etag
+    #   The version identifier for the current version of the trust store.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateTrustStoreResult AWS API Documentation
+    #
+    class CreateTrustStoreResult < Struct.new(
+      :trust_store,
+      :etag)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] vpc_origin_endpoint_config
     #   The VPC origin endpoint configuration.
     #   @return [Types::VpcOriginEndpointConfig]
@@ -3900,6 +4182,24 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] id
+    #   The connection function's ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The current version (`ETag` value) of the connection function you
+    #   are deleting.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DeleteConnectionFunctionRequest AWS API Documentation
+    #
+    class DeleteConnectionFunctionRequest < Struct.new(
+      :id,
+      :if_match)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] id
     #   The ID of the connection group to delete.
     #   @return [String]
@@ -4202,6 +4502,19 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the CloudFront resource for which
+    #   the resource policy should be deleted.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DeleteResourcePolicyRequest AWS API Documentation
+    #
+    class DeleteResourcePolicyRequest < Struct.new(
+      :resource_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] id
     #   The identifier for the response headers policy that you are
     #   deleting.
@@ -4246,6 +4559,24 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] id
+    #   The trust store's ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The current version (`ETag` value) of the trust store you are
+    #   deleting.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DeleteTrustStoreRequest AWS API Documentation
+    #
+    class DeleteTrustStoreRequest < Struct.new(
+      :id,
+      :if_match)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] id
     #   The VPC origin ID.
     #   @return [String]
@@ -4281,6 +4612,41 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] identifier
+    #   The connection function's identifier.
+    #   @return [String]
+    #
+    # @!attribute [rw] stage
+    #   The connection function's stage.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DescribeConnectionFunctionRequest AWS API Documentation
+    #
+    class DescribeConnectionFunctionRequest < Struct.new(
+      :identifier,
+      :stage)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] connection_function_summary
+    #   The connection function's summary.
+    #   @return [Types::ConnectionFunctionSummary]
+    #
+    # @!attribute [rw] etag
+    #   The version identifier for the current version of the connection
+    #   function.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DescribeConnectionFunctionResult AWS API Documentation
+    #
+    class DescribeConnectionFunctionResult < Struct.new(
+      :connection_function_summary,
+      :etag)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] name
     #   The name of the function that you are getting information about.
     #   @return [String]
@@ -4859,6 +5225,14 @@ module Aws::CloudFront
     #   distribution tenants (tenant-only).
     #   @return [String]
     #
+    # @!attribute [rw] viewer_mtls_config
+    #   The distribution's viewer mTLS configuration.
+    #   @return [Types::ViewerMtlsConfig]
+    #
+    # @!attribute [rw] connection_function_association
+    #   The distribution's connection function association.
+    #   @return [Types::ConnectionFunctionAssociation]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DistributionConfig AWS API Documentation
     #
     class DistributionConfig < Struct.new(
@@ -4883,7 +5257,9 @@ module Aws::CloudFront
       :staging,
       :anycast_ip_list_id,
       :tenant_config,
-      :connection_mode)
+      :connection_mode,
+      :viewer_mtls_config,
+      :connection_function_association)
       SENSITIVE = [:comment]
       include Aws::Structure
     end
@@ -4939,9 +5315,80 @@ module Aws::CloudFront
     #   Contains the distribution IDs in the list.
     #   @return [Array<String>]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DistributionIdList AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DistributionIdList AWS API Documentation
+    #
+    class DistributionIdList < Struct.new(
+      :marker,
+      :next_marker,
+      :max_items,
+      :is_truncated,
+      :quantity,
+      :items)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A structure that pairs a CloudFront distribution ID with its owning
+    # Amazon Web Services account ID.
+    #
+    # @!attribute [rw] distribution_id
+    #   The ID of the distribution.
+    #   @return [String]
+    #
+    # @!attribute [rw] owner_account_id
+    #   The ID of the Amazon Web Services account that owns the
+    #   distribution.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DistributionIdOwner AWS API Documentation
+    #
+    class DistributionIdOwner < Struct.new(
+      :distribution_id,
+      :owner_account_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The list of distribution IDs and the Amazon Web Services accounts that
+    # they belong to.
+    #
+    # @!attribute [rw] marker
+    #   Use this field when paginating results to indicate where to begin in
+    #   your list of `DistributionIdOwner` objects. The response includes
+    #   distributions in the list that occur after the marker. To get the
+    #   next page of the list, set this field's value to the value of
+    #   `NextMarker` from the current page's response.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_marker
+    #   A token used for pagination of results returned in the response. You
+    #   can use the token from the previous request to define where the
+    #   current request should begin.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of `DistributionIdOwner` objects to return.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] is_truncated
+    #   A flag that indicates whether more `DistributionIdOwner` objects
+    #   remain to be listed. If your results were truncated, you can make a
+    #   follow-up pagination request using the `Marker` request parameter to
+    #   retrieve more results in the list.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] quantity
+    #   Specifies the actual number of `DistributionIdOwner` objects
+    #   included in the list for the current page.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] items
+    #   The number of `DistributionIdOwner` objects.
+    #   @return [Array<Types::DistributionIdOwner>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DistributionIdOwnerList AWS API Documentation
     #
-    class DistributionIdList < Struct.new(
+    class DistributionIdOwnerList < Struct.new(
       :marker,
       :next_marker,
       :max_items,
@@ -5179,6 +5626,14 @@ module Aws::CloudFront
     #   distribution.
     #   @return [String]
     #
+    # @!attribute [rw] viewer_mtls_config
+    #   The distribution's viewer mTLS configuration.
+    #   @return [Types::ViewerMtlsConfig]
+    #
+    # @!attribute [rw] connection_function_association
+    #   The distribution's connection function association.
+    #   @return [Types::ConnectionFunctionAssociation]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DistributionSummary AWS API Documentation
     #
     class DistributionSummary < Struct.new(
@@ -5205,7 +5660,9 @@ module Aws::CloudFront
       :alias_icp_recordals,
       :staging,
       :connection_mode,
-      :anycast_ip_list_id)
+      :anycast_ip_list_id,
+      :viewer_mtls_config,
+      :connection_function_association)
       SENSITIVE = [:comment]
       include Aws::Structure
     end
@@ -6597,6 +7054,46 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] identifier
+    #   The connection function's identifier.
+    #   @return [String]
+    #
+    # @!attribute [rw] stage
+    #   The connection function's stage.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetConnectionFunctionRequest AWS API Documentation
+    #
+    class GetConnectionFunctionRequest < Struct.new(
+      :identifier,
+      :stage)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] connection_function_code
+    #   The connection function's code.
+    #   @return [String]
+    #
+    # @!attribute [rw] etag
+    #   The version identifier for the current version of the connection
+    #   function.
+    #   @return [String]
+    #
+    # @!attribute [rw] content_type
+    #   The connection function's content type.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetConnectionFunctionResult AWS API Documentation
+    #
+    class GetConnectionFunctionResult < Struct.new(
+      :connection_function_code,
+      :etag,
+      :content_type)
+      SENSITIVE = [:connection_function_code]
+      include Aws::Structure
+    end
+
     # @!attribute [rw] routing_endpoint
     #   The routing endpoint for the target connection group, such as
     #   d111111abcdef8.cloudfront.net.
@@ -7412,6 +7909,37 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the CloudFront resource that is
+    #   associated with the resource policy.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetResourcePolicyRequest AWS API Documentation
+    #
+    class GetResourcePolicyRequest < Struct.new(
+      :resource_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the CloudFront resource that is
+    #   associated with the resource policy.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy_document
+    #   The resource policy in JSON format.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetResourcePolicyResult AWS API Documentation
+    #
+    class GetResourcePolicyResult < Struct.new(
+      :resource_arn,
+      :policy_document)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] id
     #   The identifier for the response headers policy.
     #
@@ -7552,6 +8080,35 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] identifier
+    #   The trust store's identifier.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetTrustStoreRequest AWS API Documentation
+    #
+    class GetTrustStoreRequest < Struct.new(
+      :identifier)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] trust_store
+    #   The trust store.
+    #   @return [Types::TrustStore]
+    #
+    # @!attribute [rw] etag
+    #   The version identifier for the current version of the trust store.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetTrustStoreResult AWS API Documentation
+    #
+    class GetTrustStoreResult < Struct.new(
+      :trust_store,
+      :etag)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] id
     #   The VPC origin ID.
     #   @return [String]
@@ -8234,6 +8791,61 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # Configuration for an IPAM CIDR that defines a specific IP address
+    # range, IPAM pool, and associated Anycast IP address.
+    #
+    # @!attribute [rw] cidr
+    #   The CIDR that specifies the IP address range for this IPAM
+    #   configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] ipam_pool_arn
+    #   The Amazon Resource Name (ARN) of the IPAM pool that the CIDR block
+    #   is assigned to.
+    #   @return [String]
+    #
+    # @!attribute [rw] anycast_ip
+    #   The specified Anycast IP address allocated from the IPAM pool for
+    #   this CIDR configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the IPAM CIDR configuration.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/IpamCidrConfig AWS API Documentation
+    #
+    class IpamCidrConfig < Struct.new(
+      :cidr,
+      :ipam_pool_arn,
+      :anycast_ip,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration IPAM settings that includes the quantity of CIDR
+    # configurations and the list of IPAM CIDR configurations.
+    #
+    # @!attribute [rw] quantity
+    #   The number of IPAM CIDR configurations in the `IpamCidrConfigs`
+    #   list.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] ipam_cidr_configs
+    #   A list of IPAM CIDR configurations that define the IP address
+    #   ranges, IPAM pools, and associated Anycast IP addresses.
+    #   @return [Array<Types::IpamCidrConfig>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/IpamConfig AWS API Documentation
+    #
+    class IpamConfig < Struct.new(
+      :quantity,
+      :ipam_cidr_configs)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A list of identifiers for the public keys that CloudFront can use to
     # verify the signatures of signed URLs and signed cookies.
     #
@@ -8780,6 +9392,52 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] marker
+    #   Use this field when paginating results to indicate where to begin in
+    #   your list. The response includes items in the list that occur after
+    #   the marker. To get the next page of the list, set this field's
+    #   value to the value of `NextMarker` from the current page's
+    #   response.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of connection functions that you want returned in
+    #   the response.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] stage
+    #   The connection function's stage.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListConnectionFunctionsRequest AWS API Documentation
+    #
+    class ListConnectionFunctionsRequest < Struct.new(
+      :marker,
+      :max_items,
+      :stage)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] next_marker
+    #   Indicates the next page of connection functions. To get the next
+    #   page of the list, use this value in the `Marker` field of your
+    #   request.
+    #   @return [String]
+    #
+    # @!attribute [rw] connection_functions
+    #   A list of connection functions.
+    #   @return [Array<Types::ConnectionFunctionSummary>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListConnectionFunctionsResult AWS API Documentation
+    #
+    class ListConnectionFunctionsResult < Struct.new(
+      :next_marker,
+      :connection_functions)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] association_filter
     #   Filter by associated Anycast IP list ID.
     #   @return [Types::ConnectionGroupAssociationFilter]
@@ -9022,6 +9680,45 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] marker
+    #   Use this field when paginating results to indicate where to begin in
+    #   your list. The response includes items in the list that occur after
+    #   the marker. To get the next page of the list, set this field's
+    #   value to the value of `NextMarker` from the current page's
+    #   response.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of distributions that you want returned in the
+    #   response.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] connection_function_identifier
+    #   The distributions by connection function identifier.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListDistributionsByConnectionFunctionRequest AWS API Documentation
+    #
+    class ListDistributionsByConnectionFunctionRequest < Struct.new(
+      :marker,
+      :max_items,
+      :connection_function_identifier)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] distribution_list
+    #   A distribution list.
+    #   @return [Types::DistributionList]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListDistributionsByConnectionFunctionResult AWS API Documentation
+    #
+    class ListDistributionsByConnectionFunctionResult < Struct.new(
+      :distribution_list)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] marker
     #   The marker for the next set of distributions to retrieve.
     #   @return [String]
@@ -9138,6 +9835,45 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] resource_arn
+    #   The ARN of the CloudFront resource that you've shared with other
+    #   Amazon Web Services accounts.
+    #   @return [String]
+    #
+    # @!attribute [rw] marker
+    #   Use this field when paginating results to indicate where to begin in
+    #   your list of distributions. The response includes distributions in
+    #   the list that occur after the marker. To get the next page of the
+    #   list, set this field's value to the value of `NextMarker` from the
+    #   current page's response.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of distributions to return.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListDistributionsByOwnedResourceRequest AWS API Documentation
+    #
+    class ListDistributionsByOwnedResourceRequest < Struct.new(
+      :resource_arn,
+      :marker,
+      :max_items)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] distribution_list
+    #   The list of distributions that are using the shared resource.
+    #   @return [Types::DistributionIdOwnerList]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListDistributionsByOwnedResourceResult AWS API Documentation
+    #
+    class ListDistributionsByOwnedResourceResult < Struct.new(
+      :distribution_list)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] marker
     #   Use this field when paginating results to indicate where to begin in
     #   your list of distributions. The response includes distributions in
@@ -9223,6 +9959,45 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] trust_store_identifier
+    #   The distributions by trust store identifier.
+    #   @return [String]
+    #
+    # @!attribute [rw] marker
+    #   Use this field when paginating results to indicate where to begin in
+    #   your list. The response includes items in the list that occur after
+    #   the marker. To get the next page of the list, set this field's
+    #   value to the value of `NextMarker` from the current page's
+    #   response.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of distributions that you want returned in the
+    #   response.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListDistributionsByTrustStoreRequest AWS API Documentation
+    #
+    class ListDistributionsByTrustStoreRequest < Struct.new(
+      :trust_store_identifier,
+      :marker,
+      :max_items)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] distribution_list
+    #   A distribution list.
+    #   @return [Types::DistributionList]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListDistributionsByTrustStoreResult AWS API Documentation
+    #
+    class ListDistributionsByTrustStoreResult < Struct.new(
+      :distribution_list)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] marker
     #   The marker associated with the VPC origin distributions list.
     #   @return [String]
@@ -9919,10 +10694,50 @@ module Aws::CloudFront
     #   A complex type that contains zero or more `Tag` elements.
     #   @return [Types::Tags]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListTagsForResourceResult AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListTagsForResourceResult AWS API Documentation
+    #
+    class ListTagsForResourceResult < Struct.new(
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] marker
+    #   Use this field when paginating results to indicate where to begin in
+    #   your list. The response includes items in the list that occur after
+    #   the marker. To get the next page of the list, set this field's
+    #   value to the value of `NextMarker` from the current page's
+    #   response.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of trust stores that you want returned in the
+    #   response.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListTrustStoresRequest AWS API Documentation
+    #
+    class ListTrustStoresRequest < Struct.new(
+      :marker,
+      :max_items)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] next_marker
+    #   Indicates the next page of trust stores. To get the next page of the
+    #   list, use this value in the `Marker` field of your request.
+    #   @return [String]
+    #
+    # @!attribute [rw] trust_store_list
+    #   The trust store list.
+    #   @return [Array<Types::TrustStoreSummary>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListTrustStoresResult AWS API Documentation
     #
-    class ListTagsForResourceResult < Struct.new(
-      :tags)
+    class ListTrustStoresResult < Struct.new(
+      :next_marker,
+      :trust_store_list)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -11552,6 +12367,10 @@ module Aws::CloudFront
     # A public key that you can use with [signed URLs and signed
     # cookies][1], or with [field-level encryption][2].
     #
+    # CloudFront supports signed URLs and signed cookies with RSA 2048 or
+    # ECDSA 256 key signatures. Field-level encryption is only compatible
+    # with RSA 2048 key signatures.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html
@@ -11603,6 +12422,10 @@ module Aws::CloudFront
     # [signed URLs and signed cookies][1], or with [field-level
     # encryption][2].
     #
+    # CloudFront supports signed URLs and signed cookies with RSA 2048 or
+    # ECDSA 256 key signatures. Field-level encryption is only compatible
+    # with RSA 2048 key signatures.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html
@@ -11728,6 +12551,35 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] id
+    #   The connection function ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The current version (`ETag` value) of the connection function.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/PublishConnectionFunctionRequest AWS API Documentation
+    #
+    class PublishConnectionFunctionRequest < Struct.new(
+      :id,
+      :if_match)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] connection_function_summary
+    #   The connection function summary.
+    #   @return [Types::ConnectionFunctionSummary]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/PublishConnectionFunctionResult AWS API Documentation
+    #
+    class PublishConnectionFunctionResult < Struct.new(
+      :connection_function_summary)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] name
     #   The name of the function that you are publishing.
     #   @return [String]
@@ -11759,6 +12611,37 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the CloudFront resource for which
+    #   the policy is being created.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy_document
+    #   The JSON-formatted resource policy to create.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/PutResourcePolicyRequest AWS API Documentation
+    #
+    class PutResourcePolicyRequest < Struct.new(
+      :resource_arn,
+      :policy_document)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the CloudFront resource for which
+    #   the policy was created.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/PutResourcePolicyResult AWS API Documentation
+    #
+    class PutResourcePolicyResult < Struct.new(
+      :resource_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Query argument-profile mapping for field-level encryption.
     #
     # @!attribute [rw] query_arg
@@ -13698,6 +14581,45 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] id
+    #   The connection function ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The current version (`ETag` value) of the connection function.
+    #   @return [String]
+    #
+    # @!attribute [rw] stage
+    #   The connection function stage.
+    #   @return [String]
+    #
+    # @!attribute [rw] connection_object
+    #   The connection object.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/TestConnectionFunctionRequest AWS API Documentation
+    #
+    class TestConnectionFunctionRequest < Struct.new(
+      :id,
+      :if_match,
+      :stage,
+      :connection_object)
+      SENSITIVE = [:connection_object]
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] connection_function_test_result
+    #   The connection function test result.
+    #   @return [Types::ConnectionFunctionTestResult]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/TestConnectionFunctionResult AWS API Documentation
+    #
+    class TestConnectionFunctionResult < Struct.new(
+      :connection_function_test_result)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The CloudFront function failed.
     #
     # @!attribute [rw] message
@@ -14695,6 +15617,123 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # A trust store.
+    #
+    # @!attribute [rw] id
+    #   The trust store's ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] arn
+    #   The trust store's Amazon Resource Name (ARN).
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The trust store's name.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The trust store's status.
+    #   @return [String]
+    #
+    # @!attribute [rw] number_of_ca_certificates
+    #   The trust store's number of CA certificates.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] last_modified_time
+    #   The trust store's last modified time.
+    #   @return [Time]
+    #
+    # @!attribute [rw] reason
+    #   The trust store's reason.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/TrustStore AWS API Documentation
+    #
+    class TrustStore < Struct.new(
+      :id,
+      :arn,
+      :name,
+      :status,
+      :number_of_ca_certificates,
+      :last_modified_time,
+      :reason)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A trust store configuration.
+    #
+    # @!attribute [rw] trust_store_id
+    #   The trust store ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] advertise_trust_store_ca_names
+    #   The configuration to use to advertise trust store CA names.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] ignore_certificate_expiry
+    #   The configuration to use to ignore certificate expiration.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/TrustStoreConfig AWS API Documentation
+    #
+    class TrustStoreConfig < Struct.new(
+      :trust_store_id,
+      :advertise_trust_store_ca_names,
+      :ignore_certificate_expiry)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A trust store summary.
+    #
+    # @!attribute [rw] id
+    #   The trust store's ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] arn
+    #   The trust store's Amazon Resource Name (ARN).
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The trust store's name.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The trust store's status.
+    #   @return [String]
+    #
+    # @!attribute [rw] number_of_ca_certificates
+    #   The trust store's number of CA certificates.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] last_modified_time
+    #   The trust store's last modified time.
+    #   @return [Time]
+    #
+    # @!attribute [rw] reason
+    #   The trust store's reason.
+    #   @return [String]
+    #
+    # @!attribute [rw] etag
+    #   The version identifier for the current version of the trust store.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/TrustStoreSummary AWS API Documentation
+    #
+    class TrustStoreSummary < Struct.new(
+      :id,
+      :arn,
+      :name,
+      :status,
+      :number_of_ca_certificates,
+      :last_modified_time,
+      :reason,
+      :etag)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The specified key group does not exist.
     #
     # @!attribute [rw] message
@@ -14807,6 +15846,59 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] id
+    #   The ID of the Anycast static IP list.
+    #   @return [String]
+    #
+    # @!attribute [rw] ip_address_type
+    #   The IP address type for the Anycast static IP list. You can specify
+    #   one of the following options:
+    #
+    #   * `ipv4` only
+    #
+    #   * `ipv6` only
+    #
+    #   * `dualstack` - Allocate a list of both IPv4 and IPv6 addresses
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The current version (ETag value) of the Anycast static IP list that
+    #   you are updating.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateAnycastIpListRequest AWS API Documentation
+    #
+    class UpdateAnycastIpListRequest < Struct.new(
+      :id,
+      :ip_address_type,
+      :if_match)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] anycast_ip_list
+    #   An Anycast static IP list. For more information, see [Request
+    #   Anycast static IPs to use for allowlisting][1] in the *Amazon
+    #   CloudFront Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.html
+    #   @return [Types::AnycastIpList]
+    #
+    # @!attribute [rw] etag
+    #   The current version of the Anycast static IP list.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateAnycastIpListResult AWS API Documentation
+    #
+    class UpdateAnycastIpListResult < Struct.new(
+      :anycast_ip_list,
+      :etag)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] cache_policy_config
     #   A cache policy configuration.
     #   @return [Types::CachePolicyConfig]
@@ -14895,6 +15987,52 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] id
+    #   The connection function ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] if_match
+    #   The current version (`ETag` value) of the connection function you
+    #   are updating.
+    #   @return [String]
+    #
+    # @!attribute [rw] connection_function_config
+    #   Contains configuration information about a CloudFront function.
+    #   @return [Types::FunctionConfig]
+    #
+    # @!attribute [rw] connection_function_code
+    #   The connection function code.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateConnectionFunctionRequest AWS API Documentation
+    #
+    class UpdateConnectionFunctionRequest < Struct.new(
+      :id,
+      :if_match,
+      :connection_function_config,
+      :connection_function_code)
+      SENSITIVE = [:connection_function_code]
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] connection_function_summary
+    #   The connection function summary.
+    #   @return [Types::ConnectionFunctionSummary]
+    #
+    # @!attribute [rw] etag
+    #   The version identifier for the current version of the connection
+    #   function.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateConnectionFunctionResult AWS API Documentation
+    #
+    class UpdateConnectionFunctionResult < Struct.new(
+      :connection_function_summary,
+      :etag)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] id
     #   The ID of the connection group.
     #   @return [String]
@@ -15699,6 +16837,46 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @!attribute [rw] id
+    #   The trust store ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] ca_certificates_bundle_source
+    #   The CA certificates bundle source.
+    #   @return [Types::CaCertificatesBundleSource]
+    #
+    # @!attribute [rw] if_match
+    #   The current version (`ETag` value) of the trust store you are
+    #   updating.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateTrustStoreRequest AWS API Documentation
+    #
+    class UpdateTrustStoreRequest < Struct.new(
+      :id,
+      :ca_certificates_bundle_source,
+      :if_match)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] trust_store
+    #   The trust store.
+    #   @return [Types::TrustStore]
+    #
+    # @!attribute [rw] etag
+    #   The version identifier for the current version of the trust store.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateTrustStoreResult AWS API Documentation
+    #
+    class UpdateTrustStoreResult < Struct.new(
+      :trust_store,
+      :etag)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] vpc_origin_endpoint_config
     #   The VPC origin endpoint configuration.
     #   @return [Types::VpcOriginEndpointConfig]
@@ -16003,6 +17181,26 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # A viewer mTLS configuration.
+    #
+    # @!attribute [rw] mode
+    #   The viewer mTLS mode.
+    #   @return [String]
+    #
+    # @!attribute [rw] trust_store_config
+    #   The trust store configuration associated with the viewer mTLS
+    #   configuration.
+    #   @return [Types::TrustStoreConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ViewerMtlsConfig AWS API Documentation
+    #
+    class ViewerMtlsConfig < Struct.new(
+      :mode,
+      :trust_store_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An Amazon CloudFront VPC origin.
     #
     # @!attribute [rw] id
@@ -16013,6 +17211,11 @@ module Aws::CloudFront
     #   The VPC origin ARN.
     #   @return [String]
     #
+    # @!attribute [rw] account_id
+    #   The account ID of the Amazon Web Services account that owns the VPC
+    #   origin.
+    #   @return [String]
+    #
     # @!attribute [rw] status
     #   The VPC origin status.
     #   @return [String]
@@ -16034,6 +17237,7 @@ module Aws::CloudFront
     class VpcOrigin < Struct.new(
       :id,
       :arn,
+      :account_id,
       :status,
       :created_time,
       :last_modified_time,
@@ -16048,6 +17252,11 @@ module Aws::CloudFront
     #   The VPC origin ID.
     #   @return [String]
     #
+    # @!attribute [rw] owner_account_id
+    #   The account ID of the Amazon Web Services account that owns the VPC
+    #   origin.
+    #   @return [String]
+    #
     # @!attribute [rw] origin_read_timeout
     #   Specifies how long, in seconds, CloudFront waits for a response from
     #   the origin. This is also known as the *origin response timeout*. The
@@ -16080,6 +17289,7 @@ module Aws::CloudFront
     #
     class VpcOriginConfig < Struct.new(
       :vpc_origin_id,
+      :owner_account_id,
       :origin_read_timeout,
       :origin_keepalive_timeout)
       SENSITIVE = []
@@ -16198,6 +17408,11 @@ module Aws::CloudFront
     #   The VPC origin summary ARN.
     #   @return [String]
     #
+    # @!attribute [rw] account_id
+    #   The account ID of the Amazon Web Services account that owns the VPC
+    #   origin.
+    #   @return [String]
+    #
     # @!attribute [rw] origin_endpoint_arn
     #   The VPC origin summary origin endpoint ARN.
     #   @return [String]
@@ -16211,6 +17426,7 @@ module Aws::CloudFront
       :created_time,
       :last_modified_time,
       :arn,
+      :account_id,
       :origin_endpoint_arn)
       SENSITIVE = []
       include Aws::Structure