aws-sdk-cognitoidentityprovider 1.144.0 → 1.145.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2b30b3c80eccac76786e91712eec231f03f9193948e682a04bd7f65a962f7ee8
-  data.tar.gz: d9e2bcae1a67646de0940d53a7fe23943c6a0e73035902db0997e8675c5bf343
+  metadata.gz: b6d76e0739d68ceecdf2dc621c82df4e167c8e2f794fc42112cc1f47c8ed7209
+  data.tar.gz: 10da5b733cb761b9e9875247e74defaace8bd3ec74f06ce34253923b06bd99a0
 SHA512:
-  metadata.gz: 392c24d91b9857f50621f6b6a474a15f8045ef410d199f5edb588ce119ea99c5cc306ae4b63b244416d04203f6f3969c04e39fa49f1fe49df8e6609bd172aa7a
-  data.tar.gz: 4b13494116d81bce9d37207c9c5f6eb1ea1b7a54649a4292eab9725bf45bb3b7194021432e3a4b6cffb5a1c17fd737770dd22383ab6deccef6afa861d5da759e
+  metadata.gz: 77512b0cf6d02f4c9bd9eaff2ef359223829ee130de476641f4e8b0cd834b09136f0c9e695af1175623877631da0deae7dd5155f80e318599d63a81b84ca5017
+  data.tar.gz: 289044320295b9822e12755b4c43344bfe75ac07371fa4464ace126a317cc9e16f56bf5eb87da95439ec508ef3b288e341eee611dfd9cbb57705127a94fdfc9e

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.145.0 (2026-06-18)
+------------------
+
+* Feature - In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS.
+
 1.144.0 (2026-06-01)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.144.0
+1.145.0

data/lib/aws-sdk-cognitoidentityprovider/client.rb

@@ -6442,6 +6442,7 @@ module Aws::CognitoIdentityProvider
     #     managed_login_version: 1,
     #     custom_domain_config: {
     #       certificate_arn: "ArnType", # required
+    #       security_policy: "TLS_V1", # accepts TLS_V1, TLS_V1_2_2021, TLS_V1_3_2025
     #     },
     #     routing: {
     #       failover: {
@@ -7796,6 +7797,7 @@ module Aws::CognitoIdentityProvider
     #   resp.domain_description.version #=> String
     #   resp.domain_description.status #=> String, one of "CREATING", "DELETING", "UPDATING", "ACTIVE", "FAILED"
     #   resp.domain_description.custom_domain_config.certificate_arn #=> String
+    #   resp.domain_description.custom_domain_config.security_policy #=> String, one of "TLS_V1", "TLS_V1_2_2021", "TLS_V1_3_2025"
     #   resp.domain_description.managed_login_version #=> Integer
     #   resp.domain_description.routing.failover.secondary_region #=> String
     #   resp.domain_description.routing.failover.primary_route_53_health_check_id #=> String
@@ -13833,6 +13835,7 @@ module Aws::CognitoIdentityProvider
     #     managed_login_version: 1,
     #     custom_domain_config: {
     #       certificate_arn: "ArnType", # required
+    #       security_policy: "TLS_V1", # accepts TLS_V1, TLS_V1_2_2021, TLS_V1_3_2025
     #     },
     #     routing: {
     #       failover: {
@@ -14074,7 +14077,7 @@ module Aws::CognitoIdentityProvider
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cognitoidentityprovider'
-      context[:gem_version] = '1.144.0'
+      context[:gem_version] = '1.145.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cognitoidentityprovider/client_api.rb

@@ -474,6 +474,7 @@ module Aws::CognitoIdentityProvider
     SearchedAttributeNamesListType = Shapes::ListShape.new(name: 'SearchedAttributeNamesListType')
     SecretCodeType = Shapes::StringShape.new(name: 'SecretCodeType')
     SecretHashType = Shapes::StringShape.new(name: 'SecretHashType')
+    SecurityPolicyType = Shapes::StringShape.new(name: 'SecurityPolicyType')
     SessionType = Shapes::StringShape.new(name: 'SessionType')
     SetLogDeliveryConfigurationRequest = Shapes::StructureShape.new(name: 'SetLogDeliveryConfigurationRequest')
     SetLogDeliveryConfigurationResponse = Shapes::StructureShape.new(name: 'SetLogDeliveryConfigurationResponse')
@@ -1215,6 +1216,7 @@ module Aws::CognitoIdentityProvider
     CustomAttributesListType.member = Shapes::ShapeRef.new(shape: SchemaAttributeType)
 
     CustomDomainConfigType.add_member(:certificate_arn, Shapes::ShapeRef.new(shape: ArnType, required: true, location_name: "CertificateArn"))
+    CustomDomainConfigType.add_member(:security_policy, Shapes::ShapeRef.new(shape: SecurityPolicyType, location_name: "SecurityPolicy"))
     CustomDomainConfigType.struct_class = Types::CustomDomainConfigType
 
     CustomEmailLambdaVersionConfigType.add_member(:lambda_version, Shapes::ShapeRef.new(shape: CustomEmailSenderLambdaVersionType, required: true, location_name: "LambdaVersion"))

data/lib/aws-sdk-cognitoidentityprovider/types.rb

@@ -4951,7 +4951,8 @@ module Aws::CognitoIdentityProvider
       include Aws::Structure
     end
 
-    # The configuration for a hosted UI custom domain.
+    # The configuration for a custom domain, including the SSL certificate
+    # and TLS security policy.
     #
     # @!attribute [rw] certificate_arn
     #   The Amazon Resource Name (ARN) of an Certificate Manager SSL
@@ -4959,10 +4960,26 @@ module Aws::CognitoIdentityProvider
     #   custom domain.
     #   @return [String]
     #
+    # @!attribute [rw] security_policy
+    #   The security policy for the custom domain. Defines the minimum TLS
+    #   version and cipher suites that CloudFront uses when communicating
+    #   with viewers (clients). Valid values are as follows:
+    #
+    #   * `TLS_V1`: Supports TLS 1.0 and later. Provides the broadest client
+    #     compatibility.
+    #
+    #   * `TLS_V1_2_2021`: Supports TLS 1.2 and later with 2021 cipher
+    #     suites. Recommended minimum for most use cases.
+    #
+    #   * `TLS_V1_3_2025`: Supports TLS 1.3 and later with 2025 cipher
+    #     suites. Provides the strongest security posture.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/CustomDomainConfigType AWS API Documentation
     #
     class CustomDomainConfigType < Struct.new(
-      :certificate_arn)
+      :certificate_arn,
+      :security_policy)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-cognitoidentityprovider.rb

@@ -54,7 +54,7 @@ module Aws::CognitoIdentityProvider
   autoload :EndpointProvider, 'aws-sdk-cognitoidentityprovider/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cognitoidentityprovider/endpoints'
 
-  GEM_VERSION = '1.144.0'
+  GEM_VERSION = '1.145.0'
 
 end
 

data/sig/client.rbs

@@ -790,7 +790,8 @@ module Aws
                                      user_pool_id: ::String,
                                      ?managed_login_version: ::Integer,
                                      ?custom_domain_config: {
-                                       certificate_arn: ::String
+                                       certificate_arn: ::String,
+                                       security_policy: ("TLS_V1" | "TLS_V1_2_2021" | "TLS_V1_3_2025")?
                                      },
                                      ?routing: {
                                        failover: {
@@ -1969,7 +1970,8 @@ module Aws
                                      user_pool_id: ::String,
                                      ?managed_login_version: ::Integer,
                                      ?custom_domain_config: {
-                                       certificate_arn: ::String
+                                       certificate_arn: ::String,
+                                       security_policy: ("TLS_V1" | "TLS_V1_2_2021" | "TLS_V1_3_2025")?
                                      },
                                      ?routing: {
                                        failover: {

data/sig/types.rbs

@@ -746,6 +746,7 @@ module Aws::CognitoIdentityProvider
 
     class CustomDomainConfigType
       attr_accessor certificate_arn: ::String
+      attr_accessor security_policy: ("TLS_V1" | "TLS_V1_2_2021" | "TLS_V1_3_2025")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cognitoidentityprovider
 version: !ruby/object:Gem::Version
-  version: 1.144.0
+  version: 1.145.0
 platform: ruby
 authors:
 - Amazon Web Services