aws-sdk-cloudfront 1.146.0 → 1.147.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e260dd7adaf13417142c98ca089e1741250367548ef7d6ced4b28c24b3cd9c37
-  data.tar.gz: 9e803bef6804d819626aa48bcf03bc69defd6074b183b14ba1d0b6fbeb83581d
+  metadata.gz: 37ae0c59950159319e89cd1d73c5d7de72a892e1c1cd82abb7b7b177319f1481
+  data.tar.gz: e1467fde07600d009fe55e29a7f8e0267d8e53ba47ac9791af9e7838623e99b6
 SHA512:
-  metadata.gz: 98be1eb242692365759cfd1e82e23d8bda3ee32d28028c87b9ef4651156b5766ae86c7dcc45aa8249a3fbdc1e17ff510da24916babeffda3d76f5b44fa5d9f13
-  data.tar.gz: 6114becbec025bb51903b2da5dbf51225ed9839914c921e2413bc214c5b0ae4803050748a74e48650b07947b10cd7275fedd98e2bf931df482d7b46a09f251e0
+  metadata.gz: b7cab994470db7ff3e5461136bde36a8e23fd16f86ac924338649bd095ab60693581e2c24b1ded6d30b67a650e93399e9ba46edf1e3c5b32cd751c2a0f12fb2d
+  data.tar.gz: 17d0b44ca253fb983e7b9ab3bbba85a7574cf605b1d2b792232ec4f7cd14b175e7d9b618142c21699d5ccd828cfcbcdc6545b4f3550c68a20f6182e43e420574

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.147.0 (2026-05-14)
+------------------
+
+* Feature - Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes
+
 1.146.0 (2026-05-13)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.146.0
+1.147.0

data/lib/aws-sdk-cloudfront/client.rb

@@ -884,7 +884,7 @@ module Aws::CloudFront
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.default_value #=> String
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.required #=> Boolean
     #   resp.distribution.distribution_config.connection_mode #=> String, one of "direct", "tenant-only"
-    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -1674,7 +1674,7 @@ module Aws::CloudFront
     #       },
     #       connection_mode: "direct", # accepts direct, tenant-only
     #       viewer_mtls_config: {
-    #         mode: "required", # accepts required, optional
+    #         mode: "required", # accepts required, optional, passthrough
     #         trust_store_config: {
     #           trust_store_id: "string", # required
     #           advertise_trust_store_ca_names: false,
@@ -1891,7 +1891,7 @@ module Aws::CloudFront
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.default_value #=> String
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.required #=> Boolean
     #   resp.distribution.distribution_config.connection_mode #=> String, one of "direct", "tenant-only"
-    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -2359,7 +2359,7 @@ module Aws::CloudFront
     #         },
     #         connection_mode: "direct", # accepts direct, tenant-only
     #         viewer_mtls_config: {
-    #           mode: "required", # accepts required, optional
+    #           mode: "required", # accepts required, optional, passthrough
     #           trust_store_config: {
     #             trust_store_id: "string", # required
     #             advertise_trust_store_ca_names: false,
@@ -2585,7 +2585,7 @@ module Aws::CloudFront
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.default_value #=> String
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.required #=> Boolean
     #   resp.distribution.distribution_config.connection_mode #=> String, one of "direct", "tenant-only"
-    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -3832,6 +3832,10 @@ module Aws::CloudFront
     # @option params [required, Types::CaCertificatesBundleSource] :ca_certificates_bundle_source
     #   The CA certificates bundle source for the trust store.
     #
+    # @option params [Boolean] :use_client_certificate_ocsp_endpoint
+    #   A Boolean that determines whether to use the CA certificate's OCSP
+    #   endpoint to check certificate revocation status.
+    #
     # @option params [Types::Tags] :tags
     #   A complex type that contains zero or more `Tag` elements.
     #
@@ -3852,6 +3856,7 @@ module Aws::CloudFront
     #         version: "string",
     #       },
     #     },
+    #     use_client_certificate_ocsp_endpoint: false,
     #     tags: {
     #       items: [
     #         {
@@ -3871,6 +3876,7 @@ module Aws::CloudFront
     #   resp.trust_store.number_of_ca_certificates #=> Integer
     #   resp.trust_store.last_modified_time #=> Time
     #   resp.trust_store.reason #=> String
+    #   resp.trust_store.use_client_certificate_ocsp_endpoint #=> Boolean
     #   resp.etag #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateTrustStore AWS API Documentation
@@ -5684,7 +5690,7 @@ module Aws::CloudFront
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.default_value #=> String
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.required #=> Boolean
     #   resp.distribution.distribution_config.connection_mode #=> String, one of "direct", "tenant-only"
-    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -5907,7 +5913,7 @@ module Aws::CloudFront
     #   resp.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.default_value #=> String
     #   resp.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.required #=> Boolean
     #   resp.distribution_config.connection_mode #=> String, one of "direct", "tenant-only"
-    #   resp.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution_config.viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution_config.viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution_config.viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -7113,6 +7119,7 @@ module Aws::CloudFront
     #   resp.trust_store.number_of_ca_certificates #=> Integer
     #   resp.trust_store.last_modified_time #=> Time
     #   resp.trust_store.reason #=> String
+    #   resp.trust_store.use_client_certificate_ocsp_endpoint #=> Boolean
     #   resp.etag #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetTrustStore AWS API Documentation
@@ -7990,7 +7997,7 @@ module Aws::CloudFront
     #   resp.distribution_list.items[0].staging #=> Boolean
     #   resp.distribution_list.items[0].connection_mode #=> String, one of "direct", "tenant-only"
     #   resp.distribution_list.items[0].anycast_ip_list_id #=> String
-    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -8217,7 +8224,7 @@ module Aws::CloudFront
     #   resp.distribution_list.items[0].staging #=> Boolean
     #   resp.distribution_list.items[0].connection_mode #=> String, one of "direct", "tenant-only"
     #   resp.distribution_list.items[0].anycast_ip_list_id #=> String
-    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -8500,7 +8507,7 @@ module Aws::CloudFront
     #   resp.distribution_list.items[0].staging #=> Boolean
     #   resp.distribution_list.items[0].connection_mode #=> String, one of "direct", "tenant-only"
     #   resp.distribution_list.items[0].anycast_ip_list_id #=> String
-    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -8726,7 +8733,7 @@ module Aws::CloudFront
     #   resp.distribution_list.items[0].staging #=> Boolean
     #   resp.distribution_list.items[0].connection_mode #=> String, one of "direct", "tenant-only"
     #   resp.distribution_list.items[0].anycast_ip_list_id #=> String
-    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -9130,7 +9137,7 @@ module Aws::CloudFront
     #   resp.distribution_list.items[0].staging #=> Boolean
     #   resp.distribution_list.items[0].connection_mode #=> String, one of "direct", "tenant-only"
     #   resp.distribution_list.items[0].anycast_ip_list_id #=> String
-    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -9415,7 +9422,7 @@ module Aws::CloudFront
     #   resp.distribution_list.items[0].staging #=> Boolean
     #   resp.distribution_list.items[0].connection_mode #=> String, one of "direct", "tenant-only"
     #   resp.distribution_list.items[0].anycast_ip_list_id #=> String
-    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -9715,7 +9722,7 @@ module Aws::CloudFront
     #   resp.distribution_list.items[0].staging #=> Boolean
     #   resp.distribution_list.items[0].connection_mode #=> String, one of "direct", "tenant-only"
     #   resp.distribution_list.items[0].anycast_ip_list_id #=> String
-    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution_list.items[0].viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution_list.items[0].viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -11921,7 +11928,7 @@ module Aws::CloudFront
     #       },
     #       connection_mode: "direct", # accepts direct, tenant-only
     #       viewer_mtls_config: {
-    #         mode: "required", # accepts required, optional
+    #         mode: "required", # accepts required, optional, passthrough
     #         trust_store_config: {
     #           trust_store_id: "string", # required
     #           advertise_trust_store_ca_names: false,
@@ -12140,7 +12147,7 @@ module Aws::CloudFront
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.default_value #=> String
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.required #=> Boolean
     #   resp.distribution.distribution_config.connection_mode #=> String, one of "direct", "tenant-only"
-    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -12539,7 +12546,7 @@ module Aws::CloudFront
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.default_value #=> String
     #   resp.distribution.distribution_config.tenant_config.parameter_definitions[0].definition.string_schema.required #=> Boolean
     #   resp.distribution.distribution_config.connection_mode #=> String, one of "direct", "tenant-only"
-    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional"
+    #   resp.distribution.distribution_config.viewer_mtls_config.mode #=> String, one of "required", "optional", "passthrough"
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.trust_store_id #=> String
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.advertise_trust_store_ca_names #=> Boolean
     #   resp.distribution.distribution_config.viewer_mtls_config.trust_store_config.ignore_certificate_expiry #=> Boolean
@@ -13588,9 +13595,13 @@ module Aws::CloudFront
     # @option params [required, String] :id
     #   The trust store ID.
     #
-    # @option params [required, Types::CaCertificatesBundleSource] :ca_certificates_bundle_source
+    # @option params [Types::CaCertificatesBundleSource] :ca_certificates_bundle_source
     #   The CA certificates bundle source.
     #
+    # @option params [Boolean] :use_client_certificate_ocsp_endpoint
+    #   A Boolean that determines whether to use the CA certificate's OCSP
+    #   endpoint to check certificate revocation status.
+    #
     # @option params [required, String] :if_match
     #   The current version (`ETag` value) of the trust store you are
     #   updating.
@@ -13604,7 +13615,7 @@ module Aws::CloudFront
     #
     #   resp = client.update_trust_store({
     #     id: "ResourceId", # required
-    #     ca_certificates_bundle_source: { # required
+    #     ca_certificates_bundle_source: {
     #       ca_certificates_bundle_s3_location: {
     #         bucket: "string", # required
     #         key: "string", # required
@@ -13612,6 +13623,7 @@ module Aws::CloudFront
     #         version: "string",
     #       },
     #     },
+    #     use_client_certificate_ocsp_endpoint: false,
     #     if_match: "string", # required
     #   })
     #
@@ -13624,6 +13636,7 @@ module Aws::CloudFront
     #   resp.trust_store.number_of_ca_certificates #=> Integer
     #   resp.trust_store.last_modified_time #=> Time
     #   resp.trust_store.reason #=> String
+    #   resp.trust_store.use_client_certificate_ocsp_endpoint #=> Boolean
     #   resp.etag #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateTrustStore AWS API Documentation
@@ -13804,7 +13817,7 @@ module Aws::CloudFront
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudfront'
-      context[:gem_version] = '1.146.0'
+      context[:gem_version] = '1.147.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cloudfront/client_api.rb

@@ -1512,6 +1512,7 @@ module Aws::CloudFront
 
     CreateTrustStoreRequest.add_member(:name, Shapes::ShapeRef.new(shape: string, required: true, location_name: "Name"))
     CreateTrustStoreRequest.add_member(:ca_certificates_bundle_source, Shapes::ShapeRef.new(shape: CaCertificatesBundleSource, required: true, location_name: "CaCertificatesBundleSource"))
+    CreateTrustStoreRequest.add_member(:use_client_certificate_ocsp_endpoint, Shapes::ShapeRef.new(shape: boolean, location_name: "UseClientCertificateOCSPEndpoint"))
     CreateTrustStoreRequest.add_member(:tags, Shapes::ShapeRef.new(shape: Tags, location_name: "Tags"))
     CreateTrustStoreRequest.struct_class = Types::CreateTrustStoreRequest
 
@@ -3823,6 +3824,7 @@ module Aws::CloudFront
     TrustStore.add_member(:number_of_ca_certificates, Shapes::ShapeRef.new(shape: integer, location_name: "NumberOfCaCertificates"))
     TrustStore.add_member(:last_modified_time, Shapes::ShapeRef.new(shape: timestamp, location_name: "LastModifiedTime"))
     TrustStore.add_member(:reason, Shapes::ShapeRef.new(shape: string, location_name: "Reason"))
+    TrustStore.add_member(:use_client_certificate_ocsp_endpoint, Shapes::ShapeRef.new(shape: boolean, location_name: "UseClientCertificateOCSPEndpoint"))
     TrustStore.struct_class = Types::TrustStore
 
     TrustStoreConfig.add_member(:trust_store_id, Shapes::ShapeRef.new(shape: string, required: true, location_name: "TrustStoreId"))
@@ -4134,7 +4136,8 @@ module Aws::CloudFront
     UpdateStreamingDistributionResult[:payload_member] = UpdateStreamingDistributionResult.member(:streaming_distribution)
 
     UpdateTrustStoreRequest.add_member(:id, Shapes::ShapeRef.new(shape: ResourceId, required: true, location: "uri", location_name: "Id"))
-    UpdateTrustStoreRequest.add_member(:ca_certificates_bundle_source, Shapes::ShapeRef.new(shape: CaCertificatesBundleSource, required: true, location_name: "CaCertificatesBundleSource", metadata: {"xmlNamespace" => {"uri" => "http://cloudfront.amazonaws.com/doc/2020-05-31/"}}))
+    UpdateTrustStoreRequest.add_member(:ca_certificates_bundle_source, Shapes::ShapeRef.new(shape: CaCertificatesBundleSource, location_name: "CaCertificatesBundleSource", metadata: {"xmlNamespace" => {"uri" => "http://cloudfront.amazonaws.com/doc/2020-05-31/"}}))
+    UpdateTrustStoreRequest.add_member(:use_client_certificate_ocsp_endpoint, Shapes::ShapeRef.new(shape: boolean, location: "header", location_name: "UseClientCertificateOCSPEndpoint"))
     UpdateTrustStoreRequest.add_member(:if_match, Shapes::ShapeRef.new(shape: string, required: true, location: "header", location_name: "If-Match"))
     UpdateTrustStoreRequest.struct_class = Types::UpdateTrustStoreRequest
     UpdateTrustStoreRequest[:payload] = :ca_certificates_bundle_source

data/lib/aws-sdk-cloudfront/types.rb

@@ -3443,6 +3443,11 @@ module Aws::CloudFront
     #   The CA certificates bundle source for the trust store.
     #   @return [Types::CaCertificatesBundleSource]
     #
+    # @!attribute [rw] use_client_certificate_ocsp_endpoint
+    #   A Boolean that determines whether to use the CA certificate's OCSP
+    #   endpoint to check certificate revocation status.
+    #   @return [Boolean]
+    #
     # @!attribute [rw] tags
     #   A complex type that contains zero or more `Tag` elements.
     #   @return [Types::Tags]
@@ -3452,6 +3457,7 @@ module Aws::CloudFront
     class CreateTrustStoreRequest < Struct.new(
       :name,
       :ca_certificates_bundle_source,
+      :use_client_certificate_ocsp_endpoint,
       :tags)
       SENSITIVE = []
       include Aws::Structure
@@ -15724,6 +15730,11 @@ module Aws::CloudFront
     #   The trust store's reason.
     #   @return [String]
     #
+    # @!attribute [rw] use_client_certificate_ocsp_endpoint
+    #   A Boolean that determines whether the trust store uses the CA
+    #   certificate's OCSP endpoint to check certificate revocation status.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/TrustStore AWS API Documentation
     #
     class TrustStore < Struct.new(
@@ -15733,7 +15744,8 @@ module Aws::CloudFront
       :status,
       :number_of_ca_certificates,
       :last_modified_time,
-      :reason)
+      :reason,
+      :use_client_certificate_ocsp_endpoint)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -16929,6 +16941,11 @@ module Aws::CloudFront
     #   The CA certificates bundle source.
     #   @return [Types::CaCertificatesBundleSource]
     #
+    # @!attribute [rw] use_client_certificate_ocsp_endpoint
+    #   A Boolean that determines whether to use the CA certificate's OCSP
+    #   endpoint to check certificate revocation status.
+    #   @return [Boolean]
+    #
     # @!attribute [rw] if_match
     #   The current version (`ETag` value) of the trust store you are
     #   updating.
@@ -16939,6 +16956,7 @@ module Aws::CloudFront
     class UpdateTrustStoreRequest < Struct.new(
       :id,
       :ca_certificates_bundle_source,
+      :use_client_certificate_ocsp_endpoint,
       :if_match)
       SENSITIVE = []
       include Aws::Structure
@@ -17183,8 +17201,8 @@ module Aws::CloudFront
     #   * `static-ip` - Do not specify this value unless your distribution
     #     has been enabled for this feature by the CloudFront team. If you
     #     have a use case that requires static IP addresses for a
-    #     distribution, contact CloudFront through the [Amazon Web
-    #     ServicesSupport Center][2].
+    #     distribution, contact CloudFront through the [Amazon Web Services
+    #     Support Center][2].
     #
     #   If the distribution uses the CloudFront domain name such as
     #   `d111111abcdef8.cloudfront.net`, don't set a value for this field.

data/lib/aws-sdk-cloudfront.rb

@@ -55,7 +55,7 @@ module Aws::CloudFront
   autoload :EndpointProvider, 'aws-sdk-cloudfront/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cloudfront/endpoints'
 
-  GEM_VERSION = '1.146.0'
+  GEM_VERSION = '1.147.0'
 
 end
 

data/sig/client.rbs

@@ -601,7 +601,7 @@ module Aws
                                    }?,
                                    connection_mode: ("direct" | "tenant-only")?,
                                    viewer_mtls_config: {
-                                     mode: ("required" | "optional")?,
+                                     mode: ("required" | "optional" | "passthrough")?,
                                      trust_store_config: {
                                        trust_store_id: ::String,
                                        advertise_trust_store_ca_names: bool?,
@@ -968,7 +968,7 @@ module Aws
                                                }?,
                                                connection_mode: ("direct" | "tenant-only")?,
                                                viewer_mtls_config: {
-                                                 mode: ("required" | "optional")?,
+                                                 mode: ("required" | "optional" | "passthrough")?,
                                                  trust_store_config: {
                                                    trust_store_id: ::String,
                                                    advertise_trust_store_ca_names: bool?,
@@ -1463,6 +1463,7 @@ module Aws
                                     version: ::String?
                                   }?
                                 },
+                                ?use_client_certificate_ocsp_endpoint: bool,
                                 ?tags: {
                                   items: Array[
                                     {
@@ -3165,7 +3166,7 @@ module Aws
                                    }?,
                                    connection_mode: ("direct" | "tenant-only")?,
                                    viewer_mtls_config: {
-                                     mode: ("required" | "optional")?,
+                                     mode: ("required" | "optional" | "passthrough")?,
                                      trust_store_config: {
                                        trust_store_id: ::String,
                                        advertise_trust_store_ca_names: bool?,
@@ -3612,7 +3613,7 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudFront/Client.html#update_trust_store-instance_method
       def update_trust_store: (
                                 id: ::String,
-                                ca_certificates_bundle_source: {
+                                ?ca_certificates_bundle_source: {
                                   ca_certificates_bundle_s3_location: {
                                     bucket: ::String,
                                     key: ::String,
@@ -3620,6 +3621,7 @@ module Aws
                                     version: ::String?
                                   }?
                                 },
+                                ?use_client_certificate_ocsp_endpoint: bool,
                                 if_match: ::String
                               ) -> _UpdateTrustStoreResponseSuccess
                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateTrustStoreResponseSuccess

data/sig/types.rbs

@@ -791,6 +791,7 @@ module Aws::CloudFront
     class CreateTrustStoreRequest
       attr_accessor name: ::String
       attr_accessor ca_certificates_bundle_source: Types::CaCertificatesBundleSource
+      attr_accessor use_client_certificate_ocsp_endpoint: bool
       attr_accessor tags: Types::Tags
       SENSITIVE: []
     end
@@ -3815,6 +3816,7 @@ module Aws::CloudFront
       attr_accessor number_of_ca_certificates: ::Integer
       attr_accessor last_modified_time: ::Time
       attr_accessor reason: ::String
+      attr_accessor use_client_certificate_ocsp_endpoint: bool
       SENSITIVE: []
     end
 
@@ -4161,6 +4163,7 @@ module Aws::CloudFront
     class UpdateTrustStoreRequest
       attr_accessor id: ::String
       attr_accessor ca_certificates_bundle_source: Types::CaCertificatesBundleSource
+      attr_accessor use_client_certificate_ocsp_endpoint: bool
       attr_accessor if_match: ::String
       SENSITIVE: []
     end
@@ -4214,7 +4217,7 @@ module Aws::CloudFront
     end
 
     class ViewerMtlsConfig
-      attr_accessor mode: ("required" | "optional")
+      attr_accessor mode: ("required" | "optional" | "passthrough")
       attr_accessor trust_store_config: Types::TrustStoreConfig
       SENSITIVE: []
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cloudfront
 version: !ruby/object:Gem::Version
-  version: 1.146.0
+  version: 1.147.0
 platform: ruby
 authors:
 - Amazon Web Services