aws-sdk-cloudfront 1.155.0 → 1.156.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 545f6bfeb8d3e33647c6d81747ada8268a025e092d3fb5ba3ec2ad7cb7ad4270
-  data.tar.gz: 8a324be000901cd6e71880a49ea30e89c4c4c8431e0ff7578cd28da4e2da4ba4
+  metadata.gz: b356540626e44f75082d1ac97586be5d46a097fa791930957f7c39bc31ee2033
+  data.tar.gz: 352e9eed509f4407c6e56c3fb765b827d9b8bdfa377e63e6c005ac55bbc13953
 SHA512:
-  metadata.gz: 530f9271542b77f5d66ac0258b940ebfedbc714942286b7721b9cc0cd136f72d6c69ed0245619bdb8d4ca628aeb6d00842175ce083a056daa569c49f5f2107ea
-  data.tar.gz: 05ef8a82a99cd8ec4080fd37a537590be62b2d128f0c939c6c22da513427fb5d0be05e8e3a7325d06e4bbde30a64cf0ca56b8d3a36aa35e1c5fc013424b38565
+  metadata.gz: 5d8ca45e758703d00ed160e2f64ae2d35eb2f194d8604b3fbb052aace34245ef5f0e6e20fb10ce049dd84c72b176f53cc0f76eaaa87090bcae87ff238ee81f08
+  data.tar.gz: e98d42fbee66e65212600bf0d233844a3c8140700a3826fff77cb2e609e102cf8100233738b67fbfe53fd8787f42fa8a3212cce54422afa0cf6bd504951dcf9e

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.156.0 (2026-10-01)
+------------------
+
+* Feature - Added always-amz-auth as a supported signing behavior for Origin Access Control (OAC), enabling CloudFront to authenticate requests to Lambda-Web origins.
+
 1.155.0 (2026-09-23)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.155.0
+1.156.0

data/lib/aws-sdk-cloudfront/client.rb

@@ -3213,7 +3213,7 @@ module Aws::CloudFront
     #       name: "string", # required
     #       description: "string",
     #       signing_protocol: "sigv4", # required, accepts sigv4, sigv4a
-    #       signing_behavior: "never", # required, accepts never, always, no-override
+    #       signing_behavior: "never", # required, accepts never, always, no-override, always-amz-auth
     #       origin_access_control_origin_type: "s3", # required, accepts s3, mediastore, mediapackagev2, lambda
     #     },
     #   })
@@ -3224,7 +3224,7 @@ module Aws::CloudFront
     #   resp.origin_access_control.origin_access_control_config.name #=> String
     #   resp.origin_access_control.origin_access_control_config.description #=> String
     #   resp.origin_access_control.origin_access_control_config.signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control.origin_access_control_config.origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #   resp.location #=> String
     #   resp.etag #=> String
@@ -6504,7 +6504,7 @@ module Aws::CloudFront
     #   resp.origin_access_control.origin_access_control_config.name #=> String
     #   resp.origin_access_control.origin_access_control_config.description #=> String
     #   resp.origin_access_control.origin_access_control_config.signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control.origin_access_control_config.origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #   resp.etag #=> String
     #
@@ -6538,7 +6538,7 @@ module Aws::CloudFront
     #   resp.origin_access_control_config.name #=> String
     #   resp.origin_access_control_config.description #=> String
     #   resp.origin_access_control_config.signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control_config.origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #   resp.etag #=> String
     #
@@ -10289,7 +10289,7 @@ module Aws::CloudFront
     #   resp.origin_access_control_list.items[0].description #=> String
     #   resp.origin_access_control_list.items[0].name #=> String
     #   resp.origin_access_control_list.items[0].signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control_list.items[0].signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control_list.items[0].signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control_list.items[0].origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListOriginAccessControls AWS API Documentation
@@ -13064,7 +13064,7 @@ module Aws::CloudFront
     #       name: "string", # required
     #       description: "string",
     #       signing_protocol: "sigv4", # required, accepts sigv4, sigv4a
-    #       signing_behavior: "never", # required, accepts never, always, no-override
+    #       signing_behavior: "never", # required, accepts never, always, no-override, always-amz-auth
     #       origin_access_control_origin_type: "s3", # required, accepts s3, mediastore, mediapackagev2, lambda
     #     },
     #     id: "string", # required
@@ -13077,7 +13077,7 @@ module Aws::CloudFront
     #   resp.origin_access_control.origin_access_control_config.name #=> String
     #   resp.origin_access_control.origin_access_control_config.description #=> String
     #   resp.origin_access_control.origin_access_control_config.signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control.origin_access_control_config.origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #   resp.etag #=> String
     #
@@ -13815,7 +13815,7 @@ module Aws::CloudFront
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudfront'
-      context[:gem_version] = '1.155.0'
+      context[:gem_version] = '1.156.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cloudfront/types.rb

@@ -11532,6 +11532,15 @@ module Aws::CloudFront
     #     [cache policy][2] for all cache behaviors that use origins
     #     associated with this origin access control.**
     #
+    #   * `always-amz-auth` – CloudFront signs all origin requests with
+    #     Amazon authentication headers. If the viewer request contains the
+    #     `Authorization` header, then CloudFront also forwards that header
+    #     to the origin. This value is only valid with Lambda-Web origins.
+    #     **WARNING: To forward the `Authorization` header from the viewer
+    #     request, you *must* add the `Authorization` header to a [cache
+    #     policy][2] for all cache behaviors that use origins associated
+    #     with this origin access control.**
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#oac-advanced-settings
@@ -11645,6 +11654,11 @@ module Aws::CloudFront
     #     the viewer request contains the `Authorization` header, CloudFront
     #     doesn't sign the origin request, but instead passes along the
     #     `Authorization` header that it received in the viewer request.
+    #
+    #   * `always-amz-auth` – CloudFront signs all origin requests with
+    #     Amazon authentication headers, and forwards the viewer's
+    #     `Authorization` header to the origin if one is present. This value
+    #     is only valid with Lambda-Web origins.
     #   @return [String]
     #
     # @!attribute [rw] origin_access_control_origin_type

data/lib/aws-sdk-cloudfront.rb

@@ -55,7 +55,7 @@ module Aws::CloudFront
   autoload :EndpointProvider, 'aws-sdk-cloudfront/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cloudfront/endpoints'
 
-  GEM_VERSION = '1.155.0'
+  GEM_VERSION = '1.156.0'
 
 end
 

data/sig/client.rbs

@@ -464,7 +464,7 @@ module Aws
                                             name: ::String,
                                             description: ::String?,
                                             signing_protocol: ("sigv4" | "sigv4a"),
-                                            signing_behavior: ("never" | "always" | "no-override"),
+                                            signing_behavior: ("never" | "always" | "no-override" | "always-amz-auth"),
                                             origin_access_control_origin_type: ("s3" | "mediastore" | "mediapackagev2" | "lambda")
                                           }
                                         ) -> _CreateOriginAccessControlResponseSuccess
@@ -2065,7 +2065,7 @@ module Aws
                                             name: ::String,
                                             description: ::String?,
                                             signing_protocol: ("sigv4" | "sigv4a"),
-                                            signing_behavior: ("never" | "always" | "no-override"),
+                                            signing_behavior: ("never" | "always" | "no-override" | "always-amz-auth"),
                                             origin_access_control_origin_type: ("s3" | "mediastore" | "mediapackagev2" | "lambda")
                                           },
                                           id: ::String,

data/sig/types.rbs

@@ -2852,7 +2852,7 @@ module Aws::CloudFront
       attr_accessor name: ::String
       attr_accessor description: ::String
       attr_accessor signing_protocol: ("sigv4" | "sigv4a")
-      attr_accessor signing_behavior: ("never" | "always" | "no-override")
+      attr_accessor signing_behavior: ("never" | "always" | "no-override" | "always-amz-auth")
       attr_accessor origin_access_control_origin_type: ("s3" | "mediastore" | "mediapackagev2" | "lambda")
       SENSITIVE: []
     end
@@ -2877,7 +2877,7 @@ module Aws::CloudFront
       attr_accessor description: ::String
       attr_accessor name: ::String
       attr_accessor signing_protocol: ("sigv4" | "sigv4a")
-      attr_accessor signing_behavior: ("never" | "always" | "no-override")
+      attr_accessor signing_behavior: ("never" | "always" | "no-override" | "always-amz-auth")
       attr_accessor origin_access_control_origin_type: ("s3" | "mediastore" | "mediapackagev2" | "lambda")
       SENSITIVE: []
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cloudfront
 version: !ruby/object:Gem::Version
-  version: 1.155.0
+  version: 1.156.0
 platform: ruby
 authors:
 - Amazon Web Services