aws-sdk-cloudfront 1.36.0 → 1.40.0

data/lib/aws-sdk-cloudfront/cookie_signer.rb

@@ -3,7 +3,6 @@
 require 'base64'
 require 'uri'
 require 'time'
-require 'json'
 require 'openssl'
 
 module Aws

data/lib/aws-sdk-cloudfront/errors.rb

@@ -79,6 +79,7 @@ module Aws::CloudFront
   # * {NoSuchOrigin}
   # * {NoSuchOriginRequestPolicy}
   # * {NoSuchPublicKey}
+  # * {NoSuchRealtimeLogConfig}
   # * {NoSuchResource}
   # * {NoSuchStreamingDistribution}
   # * {OriginRequestPolicyAlreadyExists}
@@ -87,6 +88,8 @@ module Aws::CloudFront
   # * {PublicKeyAlreadyExists}
   # * {PublicKeyInUse}
   # * {QueryArgProfileEmpty}
+  # * {RealtimeLogConfigAlreadyExists}
+  # * {RealtimeLogConfigInUse}
   # * {StreamingDistributionAlreadyExists}
   # * {StreamingDistributionNotDisabled}
   # * {TooManyCacheBehaviors}
@@ -122,6 +125,7 @@ module Aws::CloudFront
   # * {TooManyQueryStringParameters}
   # * {TooManyQueryStringsInCachePolicy}
   # * {TooManyQueryStringsInOriginRequestPolicy}
+  # * {TooManyRealtimeLogConfigs}
   # * {TooManyStreamingDistributionCNAMEs}
   # * {TooManyStreamingDistributions}
   # * {TooManyTrustedSigners}
@@ -913,6 +917,21 @@ module Aws::CloudFront
       end
     end
 
+    class NoSuchRealtimeLogConfig < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::CloudFront::Types::NoSuchRealtimeLogConfig] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+    end
+
     class NoSuchResource < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context
@@ -1033,6 +1052,36 @@ module Aws::CloudFront
       end
     end
 
+    class RealtimeLogConfigAlreadyExists < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::CloudFront::Types::RealtimeLogConfigAlreadyExists] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+    end
+
+    class RealtimeLogConfigInUse < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::CloudFront::Types::RealtimeLogConfigInUse] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+    end
+
     class StreamingDistributionAlreadyExists < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context
@@ -1558,6 +1607,21 @@ module Aws::CloudFront
       end
     end
 
+    class TooManyRealtimeLogConfigs < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::CloudFront::Types::TooManyRealtimeLogConfigs] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+    end
+
     class TooManyStreamingDistributionCNAMEs < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context

data/lib/aws-sdk-cloudfront/signer.rb

@@ -3,7 +3,6 @@
 require 'base64'
 require 'uri'
 require 'time'
-require 'json'
 require 'openssl'
 
 module Aws
@@ -112,7 +111,7 @@ module Aws
               }
           ]
         }
-        JSON.dump(json_hash)
+        Aws::Json.dump(json_hash)
       end
 
       def encode(policy)

data/lib/aws-sdk-cloudfront/types.rb

@@ -308,6 +308,7 @@ module Aws::CloudFront
     #           ],
     #         },
     #         field_level_encryption_id: "string",
+    #         realtime_log_config_arn: "string",
     #         cache_policy_id: "string",
     #         origin_request_policy_id: "string",
     #         forwarded_values: {
@@ -475,6 +476,16 @@ module Aws::CloudFront
     #   for this cache behavior.
     #   @return [String]
     #
+    # @!attribute [rw] realtime_log_config_arn
+    #   The Amazon Resource Name (ARN) of the real-time log configuration
+    #   that is attached to this cache behavior. For more information, see
+    #   [Real-time logs][1] in the *Amazon CloudFront Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html
+    #   @return [String]
+    #
     # @!attribute [rw] cache_policy_id
     #   The unique identifier of the cache policy that is attached to this
     #   cache behavior. For more information, see [Creating cache
@@ -606,6 +617,7 @@ module Aws::CloudFront
       :compress,
       :lambda_function_associations,
       :field_level_encryption_id,
+      :realtime_log_config_arn,
       :cache_policy_id,
       :origin_request_policy_id,
       :forwarded_values,
@@ -654,6 +666,7 @@ module Aws::CloudFront
     #               ],
     #             },
     #             field_level_encryption_id: "string",
+    #             realtime_log_config_arn: "string",
     #             cache_policy_id: "string",
     #             origin_request_policy_id: "string",
     #             forwarded_values: {
@@ -786,6 +799,7 @@ module Aws::CloudFront
     #         min_ttl: 1, # required
     #         parameters_in_cache_key_and_forwarded_to_origin: {
     #           enable_accept_encoding_gzip: false, # required
+    #           enable_accept_encoding_brotli: false,
     #           headers_config: { # required
     #             header_behavior: "none", # required, accepts none, whitelist
     #             headers: {
@@ -1498,11 +1512,11 @@ module Aws::CloudFront
     # an origin request policy instead of this field.
     #
     # If you want to include cookies in the cache key, use `CookiesConfig`
-    # in a cache policy. See `CreateCachePolicy`.
+    # in a cache policy. See `CachePolicy`.
     #
     # If you want to send cookies to the origin but not include them in the
     # cache key, use `CookiesConfig` in an origin request policy. See
-    # `CreateOriginRequestPolicy`.
+    # `OriginRequestPolicy`.
     #
     # A complex type that specifies whether you want CloudFront to forward
     # cookies to the origin and, if so, which ones. For more information
@@ -1607,6 +1621,7 @@ module Aws::CloudFront
     #           min_ttl: 1, # required
     #           parameters_in_cache_key_and_forwarded_to_origin: {
     #             enable_accept_encoding_gzip: false, # required
+    #             enable_accept_encoding_brotli: false,
     #             headers_config: { # required
     #               header_behavior: "none", # required, accepts none, whitelist
     #               headers: {
@@ -1823,6 +1838,7 @@ module Aws::CloudFront
     #               ],
     #             },
     #             field_level_encryption_id: "string",
+    #             realtime_log_config_arn: "string",
     #             cache_policy_id: "string",
     #             origin_request_policy_id: "string",
     #             forwarded_values: {
@@ -1880,6 +1896,7 @@ module Aws::CloudFront
     #                   ],
     #                 },
     #                 field_level_encryption_id: "string",
+    #                 realtime_log_config_arn: "string",
     #                 cache_policy_id: "string",
     #                 origin_request_policy_id: "string",
     #                 forwarded_values: {
@@ -1930,7 +1947,7 @@ module Aws::CloudFront
     #             cloud_front_default_certificate: false,
     #             iam_certificate_id: "string",
     #             acm_certificate_arn: "string",
-    #             ssl_support_method: "sni-only", # accepts sni-only, vip
+    #             ssl_support_method: "sni-only", # accepts sni-only, vip, static-ip
     #             minimum_protocol_version: "SSLv3", # accepts SSLv3, TLSv1, TLSv1_2016, TLSv1.1_2016, TLSv1.2_2018, TLSv1.2_2019
     #             certificate: "string",
     #             certificate_source: "cloudfront", # accepts cloudfront, iam, acm
@@ -2085,6 +2102,7 @@ module Aws::CloudFront
     #                 ],
     #               },
     #               field_level_encryption_id: "string",
+    #               realtime_log_config_arn: "string",
     #               cache_policy_id: "string",
     #               origin_request_policy_id: "string",
     #               forwarded_values: {
@@ -2142,6 +2160,7 @@ module Aws::CloudFront
     #                     ],
     #                   },
     #                   field_level_encryption_id: "string",
+    #                   realtime_log_config_arn: "string",
     #                   cache_policy_id: "string",
     #                   origin_request_policy_id: "string",
     #                   forwarded_values: {
@@ -2192,7 +2211,7 @@ module Aws::CloudFront
     #               cloud_front_default_certificate: false,
     #               iam_certificate_id: "string",
     #               acm_certificate_arn: "string",
-    #               ssl_support_method: "sni-only", # accepts sni-only, vip
+    #               ssl_support_method: "sni-only", # accepts sni-only, vip, static-ip
     #               minimum_protocol_version: "SSLv3", # accepts SSLv3, TLSv1, TLSv1_2016, TLSv1.1_2016, TLSv1.2_2018, TLSv1.2_2019
     #               certificate: "string",
     #               certificate_source: "cloudfront", # accepts cloudfront, iam, acm
@@ -2439,6 +2458,51 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreateMonitoringSubscriptionRequest
+    #   data as a hash:
+    #
+    #       {
+    #         distribution_id: "string", # required
+    #         monitoring_subscription: { # required
+    #           realtime_metrics_subscription_config: {
+    #             realtime_metrics_subscription_status: "Enabled", # required, accepts Enabled, Disabled
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] distribution_id
+    #   The ID of the distribution that you are enabling metrics for.
+    #   @return [String]
+    #
+    # @!attribute [rw] monitoring_subscription
+    #   A monitoring subscription. This structure contains information about
+    #   whether additional CloudWatch metrics are enabled for a given
+    #   CloudFront distribution.
+    #   @return [Types::MonitoringSubscription]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateMonitoringSubscriptionRequest AWS API Documentation
+    #
+    class CreateMonitoringSubscriptionRequest < Struct.new(
+      :distribution_id,
+      :monitoring_subscription)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] monitoring_subscription
+    #   A monitoring subscription. This structure contains information about
+    #   whether additional CloudWatch metrics are enabled for a given
+    #   CloudFront distribution.
+    #   @return [Types::MonitoringSubscription]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateMonitoringSubscriptionResult AWS API Documentation
+    #
+    class CreateMonitoringSubscriptionResult < Struct.new(
+      :monitoring_subscription)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass CreateOriginRequestPolicyRequest
     #   data as a hash:
     #
@@ -2551,6 +2615,74 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreateRealtimeLogConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         end_points: [ # required
+    #           {
+    #             stream_type: "string", # required
+    #             kinesis_stream_config: {
+    #               role_arn: "string", # required
+    #               stream_arn: "string", # required
+    #             },
+    #           },
+    #         ],
+    #         fields: ["string"], # required
+    #         name: "string", # required
+    #         sampling_rate: 1, # required
+    #       }
+    #
+    # @!attribute [rw] end_points
+    #   Contains information about the Amazon Kinesis data stream where you
+    #   are sending real-time log data.
+    #   @return [Array<Types::EndPoint>]
+    #
+    # @!attribute [rw] fields
+    #   A list of fields to include in each real-time log record.
+    #
+    #   For more information about fields, see [Real-time log configuration
+    #   fields][1] in the *Amazon CloudFront Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-fields
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] name
+    #   A unique name to identify this real-time log configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] sampling_rate
+    #   The sampling rate for this real-time log configuration. The sampling
+    #   rate determines the percentage of viewer requests that are
+    #   represented in the real-time log data. You must provide an integer
+    #   between 1 and 100, inclusive.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateRealtimeLogConfigRequest AWS API Documentation
+    #
+    class CreateRealtimeLogConfigRequest < Struct.new(
+      :end_points,
+      :fields,
+      :name,
+      :sampling_rate)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] realtime_log_config
+    #   A real-time log configuration.
+    #   @return [Types::RealtimeLogConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/CreateRealtimeLogConfigResult AWS API Documentation
+    #
+    class CreateRealtimeLogConfigResult < Struct.new(
+      :realtime_log_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request to create a new streaming distribution.
     #
     # @note When making an API call, you may pass CreateStreamingDistributionRequest
@@ -3032,6 +3164,7 @@ module Aws::CloudFront
     #           ],
     #         },
     #         field_level_encryption_id: "string",
+    #         realtime_log_config_arn: "string",
     #         cache_policy_id: "string",
     #         origin_request_policy_id: "string",
     #         forwarded_values: {
@@ -3174,6 +3307,16 @@ module Aws::CloudFront
     #   for the default cache behavior.
     #   @return [String]
     #
+    # @!attribute [rw] realtime_log_config_arn
+    #   The Amazon Resource Name (ARN) of the real-time log configuration
+    #   that is attached to this cache behavior. For more information, see
+    #   [Real-time logs][1] in the *Amazon CloudFront Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html
+    #   @return [String]
+    #
     # @!attribute [rw] cache_policy_id
     #   The unique identifier of the cache policy that is attached to the
     #   default cache behavior. For more information, see [Creating cache
@@ -3304,6 +3447,7 @@ module Aws::CloudFront
       :compress,
       :lambda_function_associations,
       :field_level_encryption_id,
+      :realtime_log_config_arn,
       :cache_policy_id,
       :origin_request_policy_id,
       :forwarded_values,
@@ -3492,6 +3636,29 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DeleteMonitoringSubscriptionRequest
+    #   data as a hash:
+    #
+    #       {
+    #         distribution_id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] distribution_id
+    #   The ID of the distribution that you are disabling metrics for.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DeleteMonitoringSubscriptionRequest AWS API Documentation
+    #
+    class DeleteMonitoringSubscriptionRequest < Struct.new(
+      :distribution_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DeleteMonitoringSubscriptionResult AWS API Documentation
+    #
+    class DeleteMonitoringSubscriptionResult < Aws::EmptyStructure; end
+
     # @note When making an API call, you may pass DeleteOriginRequestPolicyRequest
     #   data as a hash:
     #
@@ -3548,6 +3715,32 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DeleteRealtimeLogConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         name: "string",
+    #         arn: "string",
+    #       }
+    #
+    # @!attribute [rw] name
+    #   The name of the real-time log configuration to delete.
+    #   @return [String]
+    #
+    # @!attribute [rw] arn
+    #   The Amazon Resource Name (ARN) of the real-time log configuration to
+    #   delete.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/DeleteRealtimeLogConfigRequest AWS API Documentation
+    #
+    class DeleteRealtimeLogConfigRequest < Struct.new(
+      :name,
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request to delete a streaming distribution.
     #
     # @note When making an API call, you may pass DeleteStreamingDistributionRequest
@@ -3769,6 +3962,7 @@ module Aws::CloudFront
     #             ],
     #           },
     #           field_level_encryption_id: "string",
+    #           realtime_log_config_arn: "string",
     #           cache_policy_id: "string",
     #           origin_request_policy_id: "string",
     #           forwarded_values: {
@@ -3826,6 +4020,7 @@ module Aws::CloudFront
     #                 ],
     #               },
     #               field_level_encryption_id: "string",
+    #               realtime_log_config_arn: "string",
     #               cache_policy_id: "string",
     #               origin_request_policy_id: "string",
     #               forwarded_values: {
@@ -3876,7 +4071,7 @@ module Aws::CloudFront
     #           cloud_front_default_certificate: false,
     #           iam_certificate_id: "string",
     #           acm_certificate_arn: "string",
-    #           ssl_support_method: "sni-only", # accepts sni-only, vip
+    #           ssl_support_method: "sni-only", # accepts sni-only, vip, static-ip
     #           minimum_protocol_version: "SSLv3", # accepts SSLv3, TLSv1, TLSv1_2016, TLSv1.1_2016, TLSv1.2_2018, TLSv1.2_2019
     #           certificate: "string",
     #           certificate_source: "cloudfront", # accepts cloudfront, iam, acm
@@ -4250,6 +4445,7 @@ module Aws::CloudFront
     #               ],
     #             },
     #             field_level_encryption_id: "string",
+    #             realtime_log_config_arn: "string",
     #             cache_policy_id: "string",
     #             origin_request_policy_id: "string",
     #             forwarded_values: {
@@ -4307,6 +4503,7 @@ module Aws::CloudFront
     #                   ],
     #                 },
     #                 field_level_encryption_id: "string",
+    #                 realtime_log_config_arn: "string",
     #                 cache_policy_id: "string",
     #                 origin_request_policy_id: "string",
     #                 forwarded_values: {
@@ -4357,7 +4554,7 @@ module Aws::CloudFront
     #             cloud_front_default_certificate: false,
     #             iam_certificate_id: "string",
     #             acm_certificate_arn: "string",
-    #             ssl_support_method: "sni-only", # accepts sni-only, vip
+    #             ssl_support_method: "sni-only", # accepts sni-only, vip, static-ip
     #             minimum_protocol_version: "SSLv3", # accepts SSLv3, TLSv1, TLSv1_2016, TLSv1.1_2016, TLSv1.2_2018, TLSv1.2_2019
     #             certificate: "string",
     #             certificate_source: "cloudfront", # accepts cloudfront, iam, acm
@@ -4729,6 +4926,39 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # Contains information about the Amazon Kinesis data stream where you
+    # are sending real-time log data in a real-time log configuration.
+    #
+    # @note When making an API call, you may pass EndPoint
+    #   data as a hash:
+    #
+    #       {
+    #         stream_type: "string", # required
+    #         kinesis_stream_config: {
+    #           role_arn: "string", # required
+    #           stream_arn: "string", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] stream_type
+    #   The type of data stream where you are sending real-time log data.
+    #   The only valid value is `Kinesis`.
+    #   @return [String]
+    #
+    # @!attribute [rw] kinesis_stream_config
+    #   Contains information about the Amazon Kinesis data stream where you
+    #   are sending real-time log data.
+    #   @return [Types::KinesisStreamConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/EndPoint AWS API Documentation
+    #
+    class EndPoint < Struct.new(
+      :stream_type,
+      :kinesis_stream_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A complex data type that includes the profile configurations and other
     # options specified for field-level encryption.
     #
@@ -5818,6 +6048,40 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetMonitoringSubscriptionRequest
+    #   data as a hash:
+    #
+    #       {
+    #         distribution_id: "string", # required
+    #       }
+    #
+    # @!attribute [rw] distribution_id
+    #   The ID of the distribution that you are getting metrics information
+    #   for.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetMonitoringSubscriptionRequest AWS API Documentation
+    #
+    class GetMonitoringSubscriptionRequest < Struct.new(
+      :distribution_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] monitoring_subscription
+    #   A monitoring subscription. This structure contains information about
+    #   whether additional CloudWatch metrics are enabled for a given
+    #   CloudFront distribution.
+    #   @return [Types::MonitoringSubscription]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetMonitoringSubscriptionResult AWS API Documentation
+    #
+    class GetMonitoringSubscriptionResult < Struct.new(
+      :monitoring_subscription)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass GetOriginRequestPolicyConfigRequest
     #   data as a hash:
     #
@@ -5974,6 +6238,44 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetRealtimeLogConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         name: "string",
+    #         arn: "string",
+    #       }
+    #
+    # @!attribute [rw] name
+    #   The name of the real-time log configuration to get.
+    #   @return [String]
+    #
+    # @!attribute [rw] arn
+    #   The Amazon Resource Name (ARN) of the real-time log configuration to
+    #   get.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetRealtimeLogConfigRequest AWS API Documentation
+    #
+    class GetRealtimeLogConfigRequest < Struct.new(
+      :name,
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] realtime_log_config
+    #   A real-time log configuration.
+    #   @return [Types::RealtimeLogConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/GetRealtimeLogConfigResult AWS API Documentation
+    #
+    class GetRealtimeLogConfigResult < Struct.new(
+      :realtime_log_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # To request to get a streaming distribution configuration.
     #
     # @note When making an API call, you may pass GetStreamingDistributionConfigRequest
@@ -6650,6 +6952,44 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # Contains information about the Amazon Kinesis data stream where you
+    # are sending real-time log data.
+    #
+    # @note When making an API call, you may pass KinesisStreamConfig
+    #   data as a hash:
+    #
+    #       {
+    #         role_arn: "string", # required
+    #         stream_arn: "string", # required
+    #       }
+    #
+    # @!attribute [rw] role_arn
+    #   The Amazon Resource Name (ARN) of an AWS Identity and Access
+    #   Management (IAM) role that CloudFront can use to send real-time log
+    #   data to your Kinesis data stream.
+    #
+    #   For more information the IAM role, see [Real-time log configuration
+    #   IAM role][1] in the *Amazon CloudFront Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-iam-role
+    #   @return [String]
+    #
+    # @!attribute [rw] stream_arn
+    #   The Amazon Resource Name (ARN) of the Kinesis data stream where you
+    #   are sending real-time log data.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/KinesisStreamConfig AWS API Documentation
+    #
+    class KinesisStreamConfig < Struct.new(
+      :role_arn,
+      :stream_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A complex type that contains a Lambda function association.
     #
     # @note When making an API call, you may pass LambdaFunctionAssociation
@@ -6956,6 +7296,61 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListDistributionsByRealtimeLogConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         marker: "string",
+    #         max_items: 1,
+    #         realtime_log_config_name: "string",
+    #         realtime_log_config_arn: "string",
+    #       }
+    #
+    # @!attribute [rw] marker
+    #   Use this field when paginating results to indicate where to begin in
+    #   your list of distributions. The response includes distributions in
+    #   the list that occur after the marker. To get the next page of the
+    #   list, set this field’s value to the value of `NextMarker` from the
+    #   current page’s response.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of distributions that you want in the response.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] realtime_log_config_name
+    #   The name of the real-time log configuration whose associated
+    #   distributions you want to list.
+    #   @return [String]
+    #
+    # @!attribute [rw] realtime_log_config_arn
+    #   The Amazon Resource Name (ARN) of the real-time log configuration
+    #   whose associated distributions you want to list.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListDistributionsByRealtimeLogConfigRequest AWS API Documentation
+    #
+    class ListDistributionsByRealtimeLogConfigRequest < Struct.new(
+      :marker,
+      :max_items,
+      :realtime_log_config_name,
+      :realtime_log_config_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] distribution_list
+    #   A distribution list.
+    #   @return [Types::DistributionList]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListDistributionsByRealtimeLogConfigResult AWS API Documentation
+    #
+    class ListDistributionsByRealtimeLogConfigResult < Struct.new(
+      :distribution_list)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request to list distributions that are associated with a specified
     # AWS WAF web ACL.
     #
@@ -7300,6 +7695,48 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListRealtimeLogConfigsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         max_items: 1,
+    #         marker: "string",
+    #       }
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of real-time log configurations that you want in
+    #   the response.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] marker
+    #   Use this field when paginating results to indicate where to begin in
+    #   your list of real-time log configurations. The response includes
+    #   real-time log configurations in the list that occur after the
+    #   marker. To get the next page of the list, set this field’s value to
+    #   the value of `NextMarker` from the current page’s response.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListRealtimeLogConfigsRequest AWS API Documentation
+    #
+    class ListRealtimeLogConfigsRequest < Struct.new(
+      :max_items,
+      :marker)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] realtime_log_configs
+    #   A list of real-time log configurations.
+    #   @return [Types::RealtimeLogConfigs]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/ListRealtimeLogConfigsResult AWS API Documentation
+    #
+    class ListRealtimeLogConfigsResult < Struct.new(
+      :realtime_log_configs)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request to list your streaming distributions.
     #
     # @note When making an API call, you may pass ListStreamingDistributionsRequest
@@ -7447,6 +7884,31 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # A monitoring subscription. This structure contains information about
+    # whether additional CloudWatch metrics are enabled for a given
+    # CloudFront distribution.
+    #
+    # @note When making an API call, you may pass MonitoringSubscription
+    #   data as a hash:
+    #
+    #       {
+    #         realtime_metrics_subscription_config: {
+    #           realtime_metrics_subscription_status: "Enabled", # required, accepts Enabled, Disabled
+    #         },
+    #       }
+    #
+    # @!attribute [rw] realtime_metrics_subscription_config
+    #   A subscription configuration for additional CloudWatch metrics.
+    #   @return [Types::RealtimeMetricsSubscriptionConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/MonitoringSubscription AWS API Documentation
+    #
+    class MonitoringSubscription < Struct.new(
+      :realtime_metrics_subscription_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The cache policy does not exist.
     #
     # @!attribute [rw] message
@@ -7564,6 +8026,19 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # The real-time log configuration does not exist.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/NoSuchRealtimeLogConfig AWS API Documentation
+    #
+    class NoSuchRealtimeLogConfig < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A resource that was specified is not valid.
     #
     # @!attribute [rw] message
@@ -7995,7 +8470,7 @@ module Aws::CloudFront
     #
     # CloudFront sends a request when it can’t find an object in its cache
     # that matches the request. If you want to send values to the origin and
-    # also include them in the cache key, use `CreateCachePolicy`.
+    # also include them in the cache key, use `CachePolicy`.
     #
     # @!attribute [rw] id
     #   The unique identifier for the origin request policy.
@@ -8053,7 +8528,7 @@ module Aws::CloudFront
     #
     # CloudFront sends a request when it can’t find an object in its cache
     # that matches the request. If you want to send values to the origin and
-    # also include them in the cache key, use `CreateCachePolicy`.
+    # also include them in the cache key, use `CachePolicy`.
     #
     # @note When making an API call, you may pass OriginRequestPolicyConfig
     #   data as a hash:
@@ -8427,13 +8902,14 @@ module Aws::CloudFront
     # the origin. CloudFront sends a request when it can’t find an object in
     # its cache that matches the request’s cache key. If you want to send
     # values to the origin but *not* include them in the cache key, use
-    # `CreateOriginRequestPolicy`.
+    # `OriginRequestPolicy`.
     #
     # @note When making an API call, you may pass ParametersInCacheKeyAndForwardedToOrigin
     #   data as a hash:
     #
     #       {
     #         enable_accept_encoding_gzip: false, # required
+    #         enable_accept_encoding_brotli: false,
     #         headers_config: { # required
     #           header_behavior: "none", # required, accepts none, whitelist
     #           headers: {
@@ -8458,37 +8934,70 @@ module Aws::CloudFront
     #       }
     #
     # @!attribute [rw] enable_accept_encoding_gzip
-    #   A flag that determines whether the `Accept-Encoding` HTTP header is
+    #   A flag that can affect whether the `Accept-Encoding` HTTP header is
     #   included in the cache key and included in requests that CloudFront
     #   sends to the origin.
     #
-    #   If this field is `true` *and* the viewer request includes the
-    #   `Accept-Encoding` header, then CloudFront normalizes the value of
-    #   the viewer’s `Accept-Encoding` header to one of the following:
+    #   This field is related to the `EnableAcceptEncodingBrotli` field. If
+    #   one or both of these fields is `true` *and* the viewer request
+    #   includes the `Accept-Encoding` header, then CloudFront does the
+    #   following:
+    #
+    #   * Normalizes the value of the viewer’s `Accept-Encoding` header
     #
-    #   * `Accept-Encoding: gzip` (if `gzip` is in the viewer’s
-    #     `Accept-Encoding` header)
+    #   * Includes the normalized header in the cache key
     #
-    #   * `Accept-Encoding: identity` (if `gzip` is *not* in the viewer’s
-    #     `Accept-Encoding` header)
+    #   * Includes the normalized header in the request to the origin
     #
-    #   CloudFront includes the normalized header in the cache key and
-    #   includes it in requests that CloudFront sends to the origin.
+    #   If one or both of these fields are `true`, you should not whitelist
+    #   the `Accept-Encoding` header in the cache policy or in an origin
+    #   request policy attached to the same cache behavior.
     #
-    #   If this field is `false`, then CloudFront treats the
+    #   For more information, see [Cache compressed objects][1] in the
+    #   *Amazon CloudFront Developer Guide*.
+    #
+    #   If both of these fields are `false`, then CloudFront treats the
     #   `Accept-Encoding` header the same as any other HTTP header in the
     #   viewer request. By default, it’s not included in the cache key and
-    #   it’s not included in origin requests. You can manually add
-    #   `Accept-Encoding` to the headers whitelist like any other HTTP
+    #   it’s not included in origin requests. In this case, you can manually
+    #   add `Accept-Encoding` to the headers whitelist like any other HTTP
     #   header.
     #
-    #   When this field is `true`, you should not whitelist the
-    #   `Accept-Encoding` header in the cache policy or in an origin request
-    #   policy attached to the same cache behavior.
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-policy-compressed-objects
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] enable_accept_encoding_brotli
+    #   A flag that can affect whether the `Accept-Encoding` HTTP header is
+    #   included in the cache key and included in requests that CloudFront
+    #   sends to the origin.
+    #
+    #   This field is related to the `EnableAcceptEncodingGzip` field. If
+    #   one or both of these fields is `true` *and* the viewer request
+    #   includes the `Accept-Encoding` header, then CloudFront does the
+    #   following:
+    #
+    #   * Normalizes the value of the viewer’s `Accept-Encoding` header
+    #
+    #   * Includes the normalized header in the cache key
+    #
+    #   * Includes the normalized header in the request to the origin
+    #
+    #   If one or both of these fields are `true`, you should not whitelist
+    #   the `Accept-Encoding` header in the cache policy or in an origin
+    #   request policy attached to the same cache behavior.
     #
     #   For more information, see [Cache compressed objects][1] in the
     #   *Amazon CloudFront Developer Guide*.
     #
+    #   If both of these fields are `false`, then CloudFront treats the
+    #   `Accept-Encoding` header the same as any other HTTP header in the
+    #   viewer request. By default, it’s not included in the cache key and
+    #   it’s not included in origin requests. In this case, you can manually
+    #   add `Accept-Encoding` to the headers whitelist like any other HTTP
+    #   header.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-policy-compressed-objects
@@ -8518,6 +9027,7 @@ module Aws::CloudFront
     #
     class ParametersInCacheKeyAndForwardedToOrigin < Struct.new(
       :enable_accept_encoding_gzip,
+      :enable_accept_encoding_brotli,
       :headers_config,
       :cookies_config,
       :query_strings_config)
@@ -8855,11 +9365,11 @@ module Aws::CloudFront
     # an origin request policy instead of this field.
     #
     # If you want to include query strings in the cache key, use
-    # `QueryStringsConfig` in a cache policy. See `CreateCachePolicy`.
+    # `QueryStringsConfig` in a cache policy. See `CachePolicy`.
     #
     # If you want to send query strings to the origin but not include them
     # in the cache key, use `QueryStringsConfig` in an origin request
-    # policy. See `CreateOriginRequestPolicy`.
+    # policy. See `OriginRequestPolicy`.
     #
     # A complex type that contains information about the query string
     # parameters that you want CloudFront to use for caching for a cache
@@ -8920,6 +9430,144 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # A real-time log configuration.
+    #
+    # @!attribute [rw] arn
+    #   The Amazon Resource Name (ARN) of this real-time log configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The unique name of this real-time log configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] sampling_rate
+    #   The sampling rate for this real-time log configuration. The sampling
+    #   rate determines the percentage of viewer requests that are
+    #   represented in the real-time log data. The sampling rate is an
+    #   integer between 1 and 100, inclusive.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] end_points
+    #   Contains information about the Amazon Kinesis data stream where you
+    #   are sending real-time log data for this real-time log configuration.
+    #   @return [Array<Types::EndPoint>]
+    #
+    # @!attribute [rw] fields
+    #   A list of fields that are included in each real-time log record. In
+    #   an API response, the fields are provided in the same order in which
+    #   they are sent to the Amazon Kinesis data stream.
+    #
+    #   For more information about fields, see [Real-time log configuration
+    #   fields][1] in the *Amazon CloudFront Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-fields
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/RealtimeLogConfig AWS API Documentation
+    #
+    class RealtimeLogConfig < Struct.new(
+      :arn,
+      :name,
+      :sampling_rate,
+      :end_points,
+      :fields)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A real-time log configuration with this name already exists. You must
+    # provide a unique name. To modify an existing real-time log
+    # configuration, use `UpdateRealtimeLogConfig`.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/RealtimeLogConfigAlreadyExists AWS API Documentation
+    #
+    class RealtimeLogConfigAlreadyExists < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Cannot delete the real-time log configuration because it is attached
+    # to one or more cache behaviors.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/RealtimeLogConfigInUse AWS API Documentation
+    #
+    class RealtimeLogConfigInUse < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A list of real-time log configurations.
+    #
+    # @!attribute [rw] max_items
+    #   The maximum number of real-time log configurations requested.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] items
+    #   Contains the list of real-time log configurations.
+    #   @return [Array<Types::RealtimeLogConfig>]
+    #
+    # @!attribute [rw] is_truncated
+    #   A flag that indicates whether there are more real-time log
+    #   configurations than are contained in this list.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] marker
+    #   This parameter indicates where this list of real-time log
+    #   configurations begins. This list includes real-time log
+    #   configurations that occur after the marker.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_marker
+    #   If there are more items in the list than are in this response, this
+    #   element is present. It contains the value that you should use in the
+    #   `Marker` field of a subsequent request to continue listing real-time
+    #   log configurations where you left off.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/RealtimeLogConfigs AWS API Documentation
+    #
+    class RealtimeLogConfigs < Struct.new(
+      :max_items,
+      :items,
+      :is_truncated,
+      :marker,
+      :next_marker)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A subscription configuration for additional CloudWatch metrics.
+    #
+    # @note When making an API call, you may pass RealtimeMetricsSubscriptionConfig
+    #   data as a hash:
+    #
+    #       {
+    #         realtime_metrics_subscription_status: "Enabled", # required, accepts Enabled, Disabled
+    #       }
+    #
+    # @!attribute [rw] realtime_metrics_subscription_status
+    #   A flag that indicates whether additional CloudWatch metrics are
+    #   enabled for a given CloudFront distribution.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/RealtimeMetricsSubscriptionConfig AWS API Documentation
+    #
+    class RealtimeMetricsSubscriptionConfig < Struct.new(
+      :realtime_metrics_subscription_status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A complex type that identifies ways in which you want to restrict
     # distribution of your content.
     #
@@ -10169,6 +10817,25 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # You have reached the maximum number of real-time log configurations
+    # for this AWS account. For more information, see [Quotas][1] (formerly
+    # known as limits) in the *Amazon CloudFront Developer Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.html
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/TooManyRealtimeLogConfigs AWS API Documentation
+    #
+    class TooManyRealtimeLogConfigs < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Your request contains more CNAMEs than are allowed per distribution.
     #
     # @!attribute [rw] message
@@ -10324,6 +10991,7 @@ module Aws::CloudFront
     #           min_ttl: 1, # required
     #           parameters_in_cache_key_and_forwarded_to_origin: {
     #             enable_accept_encoding_gzip: false, # required
+    #             enable_accept_encoding_brotli: false,
     #             headers_config: { # required
     #               header_behavior: "none", # required, accepts none, whitelist
     #               headers: {
@@ -10550,6 +11218,7 @@ module Aws::CloudFront
     #               ],
     #             },
     #             field_level_encryption_id: "string",
+    #             realtime_log_config_arn: "string",
     #             cache_policy_id: "string",
     #             origin_request_policy_id: "string",
     #             forwarded_values: {
@@ -10607,6 +11276,7 @@ module Aws::CloudFront
     #                   ],
     #                 },
     #                 field_level_encryption_id: "string",
+    #                 realtime_log_config_arn: "string",
     #                 cache_policy_id: "string",
     #                 origin_request_policy_id: "string",
     #                 forwarded_values: {
@@ -10657,7 +11327,7 @@ module Aws::CloudFront
     #             cloud_front_default_certificate: false,
     #             iam_certificate_id: "string",
     #             acm_certificate_arn: "string",
-    #             ssl_support_method: "sni-only", # accepts sni-only, vip
+    #             ssl_support_method: "sni-only", # accepts sni-only, vip, static-ip
     #             minimum_protocol_version: "SSLv3", # accepts SSLv3, TLSv1, TLSv1_2016, TLSv1.1_2016, TLSv1.2_2018, TLSv1.2_2019
     #             certificate: "string",
     #             certificate_source: "cloudfront", # accepts cloudfront, iam, acm
@@ -10996,6 +11666,80 @@ module Aws::CloudFront
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass UpdateRealtimeLogConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         end_points: [
+    #           {
+    #             stream_type: "string", # required
+    #             kinesis_stream_config: {
+    #               role_arn: "string", # required
+    #               stream_arn: "string", # required
+    #             },
+    #           },
+    #         ],
+    #         fields: ["string"],
+    #         name: "string",
+    #         arn: "string",
+    #         sampling_rate: 1,
+    #       }
+    #
+    # @!attribute [rw] end_points
+    #   Contains information about the Amazon Kinesis data stream where you
+    #   are sending real-time log data.
+    #   @return [Array<Types::EndPoint>]
+    #
+    # @!attribute [rw] fields
+    #   A list of fields to include in each real-time log record.
+    #
+    #   For more information about fields, see [Real-time log configuration
+    #   fields][1] in the *Amazon CloudFront Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-fields
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] name
+    #   The name for this real-time log configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] arn
+    #   The Amazon Resource Name (ARN) for this real-time log configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] sampling_rate
+    #   The sampling rate for this real-time log configuration. The sampling
+    #   rate determines the percentage of viewer requests that are
+    #   represented in the real-time log data. You must provide an integer
+    #   between 1 and 100, inclusive.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateRealtimeLogConfigRequest AWS API Documentation
+    #
+    class UpdateRealtimeLogConfigRequest < Struct.new(
+      :end_points,
+      :fields,
+      :name,
+      :arn,
+      :sampling_rate)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] realtime_log_config
+    #   A real-time log configuration.
+    #   @return [Types::RealtimeLogConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudfront-2020-05-31/UpdateRealtimeLogConfigResult AWS API Documentation
+    #
+    class UpdateRealtimeLogConfigResult < Struct.new(
+      :realtime_log_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request to update a streaming distribution.
     #
     # @note When making an API call, you may pass UpdateStreamingDistributionRequest
@@ -11140,7 +11884,7 @@ module Aws::CloudFront
     #         cloud_front_default_certificate: false,
     #         iam_certificate_id: "string",
     #         acm_certificate_arn: "string",
-    #         ssl_support_method: "sni-only", # accepts sni-only, vip
+    #         ssl_support_method: "sni-only", # accepts sni-only, vip, static-ip
     #         minimum_protocol_version: "SSLv3", # accepts SSLv3, TLSv1, TLSv1_2016, TLSv1.1_2016, TLSv1.2_2018, TLSv1.2_2019
     #         certificate: "string",
     #         certificate_source: "cloudfront", # accepts cloudfront, iam, acm
@@ -11205,12 +11949,19 @@ module Aws::CloudFront
     #     recommended, and results in additional monthly charges from
     #     CloudFront.
     #
+    #   * `static-ip` - Do not specify this value unless your distribution
+    #     has been enabled for this feature by the CloudFront team. If you
+    #     have a use case that requires static IP addresses for a
+    #     distribution, contact CloudFront through the [AWS Support
+    #     Center][2].
+    #
     #   If the distribution uses the CloudFront domain name such as
     #   `d111111abcdef8.cloudfront.net`, don’t set a value for this field.
     #
     #
     #
     #   [1]: https://en.wikipedia.org/wiki/Server_Name_Indication
+    #   [2]: https://console.aws.amazon.com/support/home
     #   @return [String]
     #
     # @!attribute [rw] minimum_protocol_version