aws-sdk-cloudfront 1.155.0 → 1.157.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 545f6bfeb8d3e33647c6d81747ada8268a025e092d3fb5ba3ec2ad7cb7ad4270
-  data.tar.gz: 8a324be000901cd6e71880a49ea30e89c4c4c8431e0ff7578cd28da4e2da4ba4
+  metadata.gz: 96292f976f78415a1e5b93f8d668be3d5e40351be0c449eb8a1645b52c3fe12d
+  data.tar.gz: 970d6f7342ee20efd54edd32b7313b7c47307b2ca44b8c2b90df70768aaea787
 SHA512:
-  metadata.gz: 530f9271542b77f5d66ac0258b940ebfedbc714942286b7721b9cc0cd136f72d6c69ed0245619bdb8d4ca628aeb6d00842175ce083a056daa569c49f5f2107ea
-  data.tar.gz: 05ef8a82a99cd8ec4080fd37a537590be62b2d128f0c939c6c22da513427fb5d0be05e8e3a7325d06e4bbde30a64cf0ca56b8d3a36aa35e1c5fc013424b38565
+  metadata.gz: 1a325c30c395f3369af9964ab7ac45c5875e122e22c421168a2b554f8c5834d91d90401fd4a676aeaec78b58cf10ff6d8f85910cc4cb420b04fc38afca435fb8
+  data.tar.gz: f32d2b1f94a6dca06917cb8cde9ff06c9ea9e694fc65bd2063ddf13f375c1eebf47a071dcd42978d1cfc85c27712a3323d3f0fa964bf58b4bd8ba7593d0402e8

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.157.0 (2026-10-14)
+------------------
+
+* Feature - This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections.
+
+1.156.0 (2026-10-01)
+------------------
+
+* Feature - Added always-amz-auth as a supported signing behavior for Origin Access Control (OAC), enabling CloudFront to authenticate requests to Lambda-Web origins.
+
 1.155.0 (2026-09-23)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.155.0
+1.157.0

data/lib/aws-sdk-cloudfront/client.rb

@@ -3213,7 +3213,7 @@ module Aws::CloudFront
     #       name: "string", # required
     #       description: "string",
     #       signing_protocol: "sigv4", # required, accepts sigv4, sigv4a
-    #       signing_behavior: "never", # required, accepts never, always, no-override
+    #       signing_behavior: "never", # required, accepts never, always, no-override, always-amz-auth
     #       origin_access_control_origin_type: "s3", # required, accepts s3, mediastore, mediapackagev2, lambda
     #     },
     #   })
@@ -3224,7 +3224,7 @@ module Aws::CloudFront
     #   resp.origin_access_control.origin_access_control_config.name #=> String
     #   resp.origin_access_control.origin_access_control_config.description #=> String
     #   resp.origin_access_control.origin_access_control_config.signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control.origin_access_control_config.origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #   resp.location #=> String
     #   resp.etag #=> String
@@ -3962,6 +3962,7 @@ module Aws::CloudFront
     #         quantity: 1, # required
     #         items: ["SSLv3"], # required, accepts SSLv3, TLSv1, TLSv1.1, TLSv1.2
     #       },
+    #       ip_address_type: "ipv4", # accepts ipv4, dualstack
     #     },
     #     tags: {
     #       items: [
@@ -3989,6 +3990,7 @@ module Aws::CloudFront
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.quantity #=> Integer
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.items #=> Array
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.items[0] #=> String, one of "SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2"
+    #   resp.vpc_origin.vpc_origin_endpoint_config.ip_address_type #=> String, one of "ipv4", "dualstack"
     #   resp.location #=> String
     #   resp.etag #=> String
     #
@@ -4798,6 +4800,7 @@ module Aws::CloudFront
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.quantity #=> Integer
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.items #=> Array
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.items[0] #=> String, one of "SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2"
+    #   resp.vpc_origin.vpc_origin_endpoint_config.ip_address_type #=> String, one of "ipv4", "dualstack"
     #   resp.etag #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DeleteVpcOrigin AWS API Documentation
@@ -6504,7 +6507,7 @@ module Aws::CloudFront
     #   resp.origin_access_control.origin_access_control_config.name #=> String
     #   resp.origin_access_control.origin_access_control_config.description #=> String
     #   resp.origin_access_control.origin_access_control_config.signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control.origin_access_control_config.origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #   resp.etag #=> String
     #
@@ -6538,7 +6541,7 @@ module Aws::CloudFront
     #   resp.origin_access_control_config.name #=> String
     #   resp.origin_access_control_config.description #=> String
     #   resp.origin_access_control_config.signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control_config.origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #   resp.etag #=> String
     #
@@ -7196,6 +7199,7 @@ module Aws::CloudFront
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.quantity #=> Integer
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.items #=> Array
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.items[0] #=> String, one of "SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2"
+    #   resp.vpc_origin.vpc_origin_endpoint_config.ip_address_type #=> String, one of "ipv4", "dualstack"
     #   resp.etag #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetVpcOrigin AWS API Documentation
@@ -10289,7 +10293,7 @@ module Aws::CloudFront
     #   resp.origin_access_control_list.items[0].description #=> String
     #   resp.origin_access_control_list.items[0].name #=> String
     #   resp.origin_access_control_list.items[0].signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control_list.items[0].signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control_list.items[0].signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control_list.items[0].origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListOriginAccessControls AWS API Documentation
@@ -10795,6 +10799,7 @@ module Aws::CloudFront
     #   resp.vpc_origin_list.items[0].arn #=> String
     #   resp.vpc_origin_list.items[0].account_id #=> String
     #   resp.vpc_origin_list.items[0].origin_endpoint_arn #=> String
+    #   resp.vpc_origin_list.items[0].ip_address_type #=> String, one of "ipv4", "dualstack"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListVpcOrigins AWS API Documentation
     #
@@ -13064,7 +13069,7 @@ module Aws::CloudFront
     #       name: "string", # required
     #       description: "string",
     #       signing_protocol: "sigv4", # required, accepts sigv4, sigv4a
-    #       signing_behavior: "never", # required, accepts never, always, no-override
+    #       signing_behavior: "never", # required, accepts never, always, no-override, always-amz-auth
     #       origin_access_control_origin_type: "s3", # required, accepts s3, mediastore, mediapackagev2, lambda
     #     },
     #     id: "string", # required
@@ -13077,7 +13082,7 @@ module Aws::CloudFront
     #   resp.origin_access_control.origin_access_control_config.name #=> String
     #   resp.origin_access_control.origin_access_control_config.description #=> String
     #   resp.origin_access_control.origin_access_control_config.signing_protocol #=> String, one of "sigv4", "sigv4a"
-    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override"
+    #   resp.origin_access_control.origin_access_control_config.signing_behavior #=> String, one of "never", "always", "no-override", "always-amz-auth"
     #   resp.origin_access_control.origin_access_control_config.origin_access_control_origin_type #=> String, one of "s3", "mediastore", "mediapackagev2", "lambda"
     #   resp.etag #=> String
     #
@@ -13725,6 +13730,7 @@ module Aws::CloudFront
     #         quantity: 1, # required
     #         items: ["SSLv3"], # required, accepts SSLv3, TLSv1, TLSv1.1, TLSv1.2
     #       },
+    #       ip_address_type: "ipv4", # accepts ipv4, dualstack
     #     },
     #     id: "string", # required
     #     if_match: "string", # required
@@ -13746,6 +13752,7 @@ module Aws::CloudFront
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.quantity #=> Integer
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.items #=> Array
     #   resp.vpc_origin.vpc_origin_endpoint_config.origin_ssl_protocols.items[0] #=> String, one of "SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2"
+    #   resp.vpc_origin.vpc_origin_endpoint_config.ip_address_type #=> String, one of "ipv4", "dualstack"
     #   resp.etag #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateVpcOrigin AWS API Documentation
@@ -13815,7 +13822,7 @@ module Aws::CloudFront
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudfront'
-      context[:gem_version] = '1.155.0'
+      context[:gem_version] = '1.157.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cloudfront/client_api.rb

@@ -821,6 +821,7 @@ module Aws::CloudFront
     ViewerMtlsConfig = Shapes::StructureShape.new(name: 'ViewerMtlsConfig')
     ViewerMtlsMode = Shapes::StringShape.new(name: 'ViewerMtlsMode')
     ViewerProtocolPolicy = Shapes::StringShape.new(name: 'ViewerProtocolPolicy')
+    VpcIpAddressType = Shapes::StringShape.new(name: 'VpcIpAddressType')
     VpcOrigin = Shapes::StructureShape.new(name: 'VpcOrigin')
     VpcOriginConfig = Shapes::StructureShape.new(name: 'VpcOriginConfig')
     VpcOriginEndpointConfig = Shapes::StructureShape.new(name: 'VpcOriginEndpointConfig')
@@ -4210,6 +4211,7 @@ module Aws::CloudFront
     VpcOriginEndpointConfig.add_member(:https_port, Shapes::ShapeRef.new(shape: integer, required: true, location_name: "HTTPSPort"))
     VpcOriginEndpointConfig.add_member(:origin_protocol_policy, Shapes::ShapeRef.new(shape: OriginProtocolPolicy, required: true, location_name: "OriginProtocolPolicy"))
     VpcOriginEndpointConfig.add_member(:origin_ssl_protocols, Shapes::ShapeRef.new(shape: OriginSslProtocols, location_name: "OriginSslProtocols"))
+    VpcOriginEndpointConfig.add_member(:ip_address_type, Shapes::ShapeRef.new(shape: VpcIpAddressType, location_name: "IpAddressType"))
     VpcOriginEndpointConfig.struct_class = Types::VpcOriginEndpointConfig
 
     VpcOriginList.add_member(:marker, Shapes::ShapeRef.new(shape: string, required: true, location_name: "Marker"))
@@ -4228,6 +4230,7 @@ module Aws::CloudFront
     VpcOriginSummary.add_member(:arn, Shapes::ShapeRef.new(shape: string, required: true, location_name: "Arn"))
     VpcOriginSummary.add_member(:account_id, Shapes::ShapeRef.new(shape: string, location_name: "AccountId"))
     VpcOriginSummary.add_member(:origin_endpoint_arn, Shapes::ShapeRef.new(shape: string, required: true, location_name: "OriginEndpointArn"))
+    VpcOriginSummary.add_member(:ip_address_type, Shapes::ShapeRef.new(shape: VpcIpAddressType, location_name: "IpAddressType"))
     VpcOriginSummary.struct_class = Types::VpcOriginSummary
 
     VpcOriginSummaryList.member = Shapes::ShapeRef.new(shape: VpcOriginSummary, location_name: "VpcOriginSummary")

data/lib/aws-sdk-cloudfront/types.rb

@@ -11532,6 +11532,15 @@ module Aws::CloudFront
     #     [cache policy][2] for all cache behaviors that use origins
     #     associated with this origin access control.**
     #
+    #   * `always-amz-auth` – CloudFront signs all origin requests with
+    #     Amazon authentication headers. If the viewer request contains the
+    #     `Authorization` header, then CloudFront also forwards that header
+    #     to the origin. This value is only valid with Lambda-Web origins.
+    #     **WARNING: To forward the `Authorization` header from the viewer
+    #     request, you *must* add the `Authorization` header to a [cache
+    #     policy][2] for all cache behaviors that use origins associated
+    #     with this origin access control.**
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#oac-advanced-settings
@@ -11645,6 +11654,11 @@ module Aws::CloudFront
     #     the viewer request contains the `Authorization` header, CloudFront
     #     doesn't sign the origin request, but instead passes along the
     #     `Authorization` header that it received in the viewer request.
+    #
+    #   * `always-amz-auth` – CloudFront signs all origin requests with
+    #     Amazon authentication headers, and forwards the viewer's
+    #     `Authorization` header to the origin if one is present. This value
+    #     is only valid with Lambda-Web origins.
     #   @return [String]
     #
     # @!attribute [rw] origin_access_control_origin_type
@@ -17429,6 +17443,12 @@ module Aws::CloudFront
     #   your origin.
     #   @return [Types::OriginSslProtocols]
     #
+    # @!attribute [rw] ip_address_type
+    #   The IP address type of the CloudFront VPC origin endpoint
+    #   configuration. Valid values are `ipv4` and `dualstack`. IPv6-only is
+    #   not supported for VPC origins.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/VpcOriginEndpointConfig AWS API Documentation
     #
     class VpcOriginEndpointConfig < Struct.new(
@@ -17437,7 +17457,8 @@ module Aws::CloudFront
       :http_port,
       :https_port,
       :origin_protocol_policy,
-      :origin_ssl_protocols)
+      :origin_ssl_protocols,
+      :ip_address_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -17519,6 +17540,11 @@ module Aws::CloudFront
     #   The VPC origin summary origin endpoint ARN.
     #   @return [String]
     #
+    # @!attribute [rw] ip_address_type
+    #   The IP address type of the CloudFront VPC origin. Valid values are
+    #   `ipv4` and `dualstack`. IPv6-only is not supported for VPC origins.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/VpcOriginSummary AWS API Documentation
     #
     class VpcOriginSummary < Struct.new(
@@ -17529,7 +17555,8 @@ module Aws::CloudFront
       :last_modified_time,
       :arn,
       :account_id,
-      :origin_endpoint_arn)
+      :origin_endpoint_arn,
+      :ip_address_type)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-cloudfront.rb

@@ -55,7 +55,7 @@ module Aws::CloudFront
   autoload :EndpointProvider, 'aws-sdk-cloudfront/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cloudfront/endpoints'
 
-  GEM_VERSION = '1.155.0'
+  GEM_VERSION = '1.157.0'
 
 end
 

data/sig/client.rbs

@@ -464,7 +464,7 @@ module Aws
                                             name: ::String,
                                             description: ::String?,
                                             signing_protocol: ("sigv4" | "sigv4a"),
-                                            signing_behavior: ("never" | "always" | "no-override"),
+                                            signing_behavior: ("never" | "always" | "no-override" | "always-amz-auth"),
                                             origin_access_control_origin_type: ("s3" | "mediastore" | "mediapackagev2" | "lambda")
                                           }
                                         ) -> _CreateOriginAccessControlResponseSuccess
@@ -2065,7 +2065,7 @@ module Aws
                                             name: ::String,
                                             description: ::String?,
                                             signing_protocol: ("sigv4" | "sigv4a"),
-                                            signing_behavior: ("never" | "always" | "no-override"),
+                                            signing_behavior: ("never" | "always" | "no-override" | "always-amz-auth"),
                                             origin_access_control_origin_type: ("s3" | "mediastore" | "mediapackagev2" | "lambda")
                                           },
                                           id: ::String,

data/sig/params.rbs

@@ -609,7 +609,8 @@ module Aws
       origin_ssl_protocols: {
         quantity: ::Integer,
         items: Array[("SSLv3" | "TLSv1" | "TLSv1.1" | "TLSv1.2")]
-      }?
+      }?,
+      ip_address_type: ("ipv4" | "dualstack")?
     }
 
     end

data/sig/types.rbs

@@ -2852,7 +2852,7 @@ module Aws::CloudFront
       attr_accessor name: ::String
       attr_accessor description: ::String
       attr_accessor signing_protocol: ("sigv4" | "sigv4a")
-      attr_accessor signing_behavior: ("never" | "always" | "no-override")
+      attr_accessor signing_behavior: ("never" | "always" | "no-override" | "always-amz-auth")
       attr_accessor origin_access_control_origin_type: ("s3" | "mediastore" | "mediapackagev2" | "lambda")
       SENSITIVE: []
     end
@@ -2877,7 +2877,7 @@ module Aws::CloudFront
       attr_accessor description: ::String
       attr_accessor name: ::String
       attr_accessor signing_protocol: ("sigv4" | "sigv4a")
-      attr_accessor signing_behavior: ("never" | "always" | "no-override")
+      attr_accessor signing_behavior: ("never" | "always" | "no-override" | "always-amz-auth")
       attr_accessor origin_access_control_origin_type: ("s3" | "mediastore" | "mediapackagev2" | "lambda")
       SENSITIVE: []
     end
@@ -4248,6 +4248,7 @@ module Aws::CloudFront
       attr_accessor https_port: ::Integer
       attr_accessor origin_protocol_policy: ("http-only" | "match-viewer" | "https-only")
       attr_accessor origin_ssl_protocols: Types::OriginSslProtocols
+      attr_accessor ip_address_type: ("ipv4" | "dualstack")
       SENSITIVE: []
     end
 
@@ -4270,6 +4271,7 @@ module Aws::CloudFront
       attr_accessor arn: ::String
       attr_accessor account_id: ::String
       attr_accessor origin_endpoint_arn: ::String
+      attr_accessor ip_address_type: ("ipv4" | "dualstack")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cloudfront
 version: !ruby/object:Gem::Version
-  version: 1.155.0
+  version: 1.157.0
 platform: ruby
 authors:
 - Amazon Web Services