aws-sdk-ec2 1.312.0 → 1.313.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3d2c43af6428c9fd6d5056e4fc76ff60a07ce310aa865e5a59bdebe11bccef65
-  data.tar.gz: d636f87a15c97f2cfb5710eeab4f5ecf25b82cbc3751c23f14f3c8da84ebc5c8
+  metadata.gz: 9e87ff32550b9190c1c9e6f7660900723d0bb1869171eb6212f2e658f2ff242d
+  data.tar.gz: 4326706a511f020490b5730bb0a37a7aac8ba2c181185c7a8995785ba6f52936
 SHA512:
-  metadata.gz: a258a17066ef662555d85a4b3abd1dd45b407e750bc3a0943a7292d4c52f30508f38a7913dc1bd6066cb45eba874860041fb35f4d856424de5febab0f1b38609
-  data.tar.gz: af7e37c75e29aa546ecad0878f2a0ac7f4de708845b84621173aed468393ed857294dff60e986d35e0b19005d2ed005faa755b8a006227ce8b10d57dc6c4a1a7
+  metadata.gz: 5d0a075837fba59cc40d326308d04df33849977a36c220c214fb7dd63cb63086473eb53a28e58de8435f4c440d1d9dd69c7b66d918b86ad2f7bd8c47ddfa65c5
+  data.tar.gz: 1b03b1013ff29d4c4dcbb3d5d4fd7856721cbfb7d9e0b3019935fd277933b7bfd22885fb78206de8884c00f33b9954b2ade4c5acb49beec07ea8871142c03db0

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.313.0 (2022-05-10)
+------------------
+
+* Feature - Added support for using NitroTPM and UEFI Secure Boot on EC2 instances.
+
 1.312.0 (2022-05-06)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.312.0
+1.313.0

data/lib/aws-sdk-ec2/client.rb

@@ -20130,6 +20130,8 @@ module Aws::EC2
     #   * {Types::ImageAttribute#ramdisk_id #ramdisk_id} => Types::AttributeValue
     #   * {Types::ImageAttribute#sriov_net_support #sriov_net_support} => Types::AttributeValue
     #   * {Types::ImageAttribute#boot_mode #boot_mode} => Types::AttributeValue
+    #   * {Types::ImageAttribute#tpm_support #tpm_support} => Types::AttributeValue
+    #   * {Types::ImageAttribute#uefi_data #uefi_data} => Types::AttributeValue
     #   * {Types::ImageAttribute#last_launched_time #last_launched_time} => Types::AttributeValue
     #
     #
@@ -20155,7 +20157,7 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.describe_image_attribute({
-    #     attribute: "description", # required, accepts description, kernel, ramdisk, launchPermission, productCodes, blockDeviceMapping, sriovNetSupport, bootMode, lastLaunchedTime
+    #     attribute: "description", # required, accepts description, kernel, ramdisk, launchPermission, productCodes, blockDeviceMapping, sriovNetSupport, bootMode, tpmSupport, uefiData, lastLaunchedTime
     #     image_id: "ImageId", # required
     #     dry_run: false,
     #   })
@@ -20189,6 +20191,8 @@ module Aws::EC2
     #   resp.ramdisk_id #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #   resp.sriov_net_support #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #   resp.boot_mode #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #   resp.tpm_support #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #   resp.uefi_data #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #   resp.last_launched_time #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeImageAttribute AWS API Documentation
@@ -20469,6 +20473,7 @@ module Aws::EC2
     #   resp.images[0].tags[0].value #=> String
     #   resp.images[0].virtualization_type #=> String, one of "hvm", "paravirtual"
     #   resp.images[0].boot_mode #=> String, one of "legacy-bios", "uefi"
+    #   resp.images[0].tpm_support #=> String, one of "v2.0"
     #   resp.images[0].deprecation_time #=> String
     #
     #
@@ -22186,6 +22191,7 @@ module Aws::EC2
     #   resp.reservations[0].instances[0].private_dns_name_options.enable_resource_name_dns_a_record #=> Boolean
     #   resp.reservations[0].instances[0].private_dns_name_options.enable_resource_name_dns_aaaa_record #=> Boolean
     #   resp.reservations[0].instances[0].ipv_6_address #=> String
+    #   resp.reservations[0].instances[0].tpm_support #=> String
     #   resp.reservations[0].instances[0].maintenance_options.auto_recovery #=> String, one of "disabled", "default"
     #   resp.reservations[0].owner_id #=> String
     #   resp.reservations[0].requester_id #=> String
@@ -35266,6 +35272,62 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # A binary representation of the UEFI variable store. Only non-volatile
+    # variables are stored. This is a base64 encoded and zlib compressed
+    # binary value that must be properly encoded.
+    #
+    # When you use [register-image][1] to create an AMI, you can create an
+    # exact copy of your variable store by passing the UEFI data in the
+    # `UefiData` parameter. You can modify the UEFI data by using the
+    # [python-uefivars tool][2] on GitHub. You can use the tool to convert
+    # the UEFI data into a human-readable format (JSON), which you can
+    # inspect and modify, and then convert back into the binary format to
+    # use with register-image.
+    #
+    # For more information, see [UEFI Secure Boot][3] in the *Amazon EC2
+    # User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/cli/latest/reference/ec2/register-image.html
+    # [2]: https://github.com/awslabs/python-uefivars
+    # [3]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html
+    #
+    # @option params [required, String] :instance_id
+    #   The ID of the instance from which to retrieve the UEFI data.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::GetInstanceUefiDataResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetInstanceUefiDataResult#instance_id #instance_id} => String
+    #   * {Types::GetInstanceUefiDataResult#uefi_data #uefi_data} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_instance_uefi_data({
+    #     instance_id: "InstanceId", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.instance_id #=> String
+    #   resp.uefi_data #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetInstanceUefiData AWS API Documentation
+    #
+    # @overload get_instance_uefi_data(params = {})
+    # @param [Hash] params ({})
+    def get_instance_uefi_data(params = {}, options = {})
+      req = build_request(:get_instance_uefi_data, params)
+      req.send_request(options)
+    end
+
     # Retrieve historical information about a CIDR within an IPAM scope. For
     # more information, see [View the history of IP
     # addresses](/vpc/latest/ipam/view-history-cidr-ipam.html) in the
@@ -43789,6 +43851,28 @@ module Aws::EC2
     #
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html
     #
+    # @option params [String] :tpm_support
+    #   Set to `v2.0` to enable Trusted Platform Module (TPM) support. For
+    #   more information, see [NitroTPM][1] in the *Amazon Elastic Compute
+    #   Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html
+    #
+    # @option params [String] :uefi_data
+    #   Base64 representation of the non-volatile UEFI variable store. To
+    #   retrieve the UEFI data, use the [GetInstanceUefiData][1] command. You
+    #   can inspect and modify the UEFI data by using the [python-uefivars
+    #   tool][2] on GitHub. For more information, see [UEFI Secure Boot][3] in
+    #   the *Amazon Elastic Compute Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceUefiData
+    #   [2]: https://github.com/awslabs/python-uefivars
+    #   [3]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html
+    #
     # @return [Types::RegisterImageResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::RegisterImageResult#image_id #image_id} => String
@@ -43827,6 +43911,8 @@ module Aws::EC2
     #     sriov_net_support: "String",
     #     virtualization_type: "String",
     #     boot_mode: "legacy-bios", # accepts legacy-bios, uefi
+    #     tpm_support: "v2.0", # accepts v2.0
+    #     uefi_data: "StringType",
     #   })
     #
     # @example Response structure
@@ -47604,6 +47690,7 @@ module Aws::EC2
     #   resp.instances[0].private_dns_name_options.enable_resource_name_dns_a_record #=> Boolean
     #   resp.instances[0].private_dns_name_options.enable_resource_name_dns_aaaa_record #=> Boolean
     #   resp.instances[0].ipv_6_address #=> String
+    #   resp.instances[0].tpm_support #=> String
     #   resp.instances[0].maintenance_options.auto_recovery #=> String, one of "disabled", "default"
     #   resp.owner_id #=> String
     #   resp.requester_id #=> String
@@ -49514,7 +49601,7 @@ module Aws::EC2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.312.0'
+      context[:gem_version] = '1.313.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ec2/client_api.rb

@@ -1240,6 +1240,8 @@ module Aws::EC2
     GetHostReservationPurchasePreviewResult = Shapes::StructureShape.new(name: 'GetHostReservationPurchasePreviewResult')
     GetInstanceTypesFromInstanceRequirementsRequest = Shapes::StructureShape.new(name: 'GetInstanceTypesFromInstanceRequirementsRequest')
     GetInstanceTypesFromInstanceRequirementsResult = Shapes::StructureShape.new(name: 'GetInstanceTypesFromInstanceRequirementsResult')
+    GetInstanceUefiDataRequest = Shapes::StructureShape.new(name: 'GetInstanceUefiDataRequest')
+    GetInstanceUefiDataResult = Shapes::StructureShape.new(name: 'GetInstanceUefiDataResult')
     GetIpamAddressHistoryRequest = Shapes::StructureShape.new(name: 'GetIpamAddressHistoryRequest')
     GetIpamAddressHistoryResult = Shapes::StructureShape.new(name: 'GetIpamAddressHistoryResult')
     GetIpamPoolAllocationsMaxResults = Shapes::IntegerShape.new(name: 'GetIpamPoolAllocationsMaxResults')
@@ -2370,6 +2372,7 @@ module Aws::EC2
     StoreImageTaskResultSet = Shapes::ListShape.new(name: 'StoreImageTaskResultSet')
     String = Shapes::StringShape.new(name: 'String')
     StringList = Shapes::ListShape.new(name: 'StringList')
+    StringType = Shapes::StringShape.new(name: 'StringType')
     Subnet = Shapes::StructureShape.new(name: 'Subnet')
     SubnetAssociation = Shapes::StructureShape.new(name: 'SubnetAssociation')
     SubnetAssociationList = Shapes::ListShape.new(name: 'SubnetAssociationList')
@@ -2429,6 +2432,7 @@ module Aws::EC2
     TieringOperationStatus = Shapes::StringShape.new(name: 'TieringOperationStatus')
     TotalLocalStorageGB = Shapes::StructureShape.new(name: 'TotalLocalStorageGB')
     TotalLocalStorageGBRequest = Shapes::StructureShape.new(name: 'TotalLocalStorageGBRequest')
+    TpmSupportValues = Shapes::StringShape.new(name: 'TpmSupportValues')
     TrafficDirection = Shapes::StringShape.new(name: 'TrafficDirection')
     TrafficMirrorFilter = Shapes::StructureShape.new(name: 'TrafficMirrorFilter')
     TrafficMirrorFilterId = Shapes::StringShape.new(name: 'TrafficMirrorFilterId')
@@ -7634,6 +7638,14 @@ module Aws::EC2
     GetInstanceTypesFromInstanceRequirementsResult.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location_name: "nextToken"))
     GetInstanceTypesFromInstanceRequirementsResult.struct_class = Types::GetInstanceTypesFromInstanceRequirementsResult
 
+    GetInstanceUefiDataRequest.add_member(:instance_id, Shapes::ShapeRef.new(shape: InstanceId, required: true, location_name: "InstanceId"))
+    GetInstanceUefiDataRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
+    GetInstanceUefiDataRequest.struct_class = Types::GetInstanceUefiDataRequest
+
+    GetInstanceUefiDataResult.add_member(:instance_id, Shapes::ShapeRef.new(shape: InstanceId, location_name: "instanceId"))
+    GetInstanceUefiDataResult.add_member(:uefi_data, Shapes::ShapeRef.new(shape: String, location_name: "uefiData"))
+    GetInstanceUefiDataResult.struct_class = Types::GetInstanceUefiDataResult
+
     GetIpamAddressHistoryRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
     GetIpamAddressHistoryRequest.add_member(:cidr, Shapes::ShapeRef.new(shape: String, required: true, location_name: "Cidr"))
     GetIpamAddressHistoryRequest.add_member(:ipam_scope_id, Shapes::ShapeRef.new(shape: IpamScopeId, required: true, location_name: "IpamScopeId"))
@@ -8046,6 +8058,7 @@ module Aws::EC2
     Image.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tagSet"))
     Image.add_member(:virtualization_type, Shapes::ShapeRef.new(shape: VirtualizationType, location_name: "virtualizationType"))
     Image.add_member(:boot_mode, Shapes::ShapeRef.new(shape: BootModeValues, location_name: "bootMode"))
+    Image.add_member(:tpm_support, Shapes::ShapeRef.new(shape: TpmSupportValues, location_name: "tpmSupport"))
     Image.add_member(:deprecation_time, Shapes::ShapeRef.new(shape: String, location_name: "deprecationTime"))
     Image.struct_class = Types::Image
 
@@ -8058,6 +8071,8 @@ module Aws::EC2
     ImageAttribute.add_member(:ramdisk_id, Shapes::ShapeRef.new(shape: AttributeValue, location_name: "ramdisk"))
     ImageAttribute.add_member(:sriov_net_support, Shapes::ShapeRef.new(shape: AttributeValue, location_name: "sriovNetSupport"))
     ImageAttribute.add_member(:boot_mode, Shapes::ShapeRef.new(shape: AttributeValue, location_name: "bootMode"))
+    ImageAttribute.add_member(:tpm_support, Shapes::ShapeRef.new(shape: AttributeValue, location_name: "tpmSupport"))
+    ImageAttribute.add_member(:uefi_data, Shapes::ShapeRef.new(shape: AttributeValue, location_name: "uefiData"))
     ImageAttribute.add_member(:last_launched_time, Shapes::ShapeRef.new(shape: AttributeValue, location_name: "lastLaunchedTime"))
     ImageAttribute.struct_class = Types::ImageAttribute
 
@@ -8325,6 +8340,7 @@ module Aws::EC2
     Instance.add_member(:usage_operation_update_time, Shapes::ShapeRef.new(shape: MillisecondDateTime, location_name: "usageOperationUpdateTime"))
     Instance.add_member(:private_dns_name_options, Shapes::ShapeRef.new(shape: PrivateDnsNameOptionsResponse, location_name: "privateDnsNameOptions"))
     Instance.add_member(:ipv_6_address, Shapes::ShapeRef.new(shape: String, location_name: "ipv6Address"))
+    Instance.add_member(:tpm_support, Shapes::ShapeRef.new(shape: String, location_name: "tpmSupport"))
     Instance.add_member(:maintenance_options, Shapes::ShapeRef.new(shape: InstanceMaintenanceOptions, location_name: "maintenanceOptions"))
     Instance.struct_class = Types::Instance
 
@@ -10832,6 +10848,8 @@ module Aws::EC2
     RegisterImageRequest.add_member(:sriov_net_support, Shapes::ShapeRef.new(shape: String, location_name: "sriovNetSupport"))
     RegisterImageRequest.add_member(:virtualization_type, Shapes::ShapeRef.new(shape: String, location_name: "virtualizationType"))
     RegisterImageRequest.add_member(:boot_mode, Shapes::ShapeRef.new(shape: BootModeValues, location_name: "BootMode"))
+    RegisterImageRequest.add_member(:tpm_support, Shapes::ShapeRef.new(shape: TpmSupportValues, location_name: "TpmSupport"))
+    RegisterImageRequest.add_member(:uefi_data, Shapes::ShapeRef.new(shape: StringType, location_name: "UefiData"))
     RegisterImageRequest.struct_class = Types::RegisterImageRequest
 
     RegisterImageResult.add_member(:image_id, Shapes::ShapeRef.new(shape: String, location_name: "imageId"))
@@ -16822,6 +16840,14 @@ module Aws::EC2
         )
       end)
 
+      api.add_operation(:get_instance_uefi_data, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetInstanceUefiData"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetInstanceUefiDataRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetInstanceUefiDataResult)
+      end)
+
       api.add_operation(:get_ipam_address_history, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetIpamAddressHistory"
         o.http_method = "POST"

data/lib/aws-sdk-ec2/image.rb

@@ -225,6 +225,18 @@ module Aws::EC2
       data[:boot_mode]
     end
 
+    # If the image is configured for NitroTPM support, the value is `v2.0`.
+    # For more information, see [NitroTPM][1] in the *Amazon Elastic Compute
+    # Cloud User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html
+    # @return [String]
+    def tpm_support
+      data[:tpm_support]
+    end
+
     # The date and time to deprecate the AMI, in UTC, in the following
     # format: *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z. If you specified a value
     # for seconds, Amazon EC2 rounds the seconds to the nearest minute.
@@ -502,7 +514,7 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   image.describe_attribute({
-    #     attribute: "description", # required, accepts description, kernel, ramdisk, launchPermission, productCodes, blockDeviceMapping, sriovNetSupport, bootMode, lastLaunchedTime
+    #     attribute: "description", # required, accepts description, kernel, ramdisk, launchPermission, productCodes, blockDeviceMapping, sriovNetSupport, bootMode, tpmSupport, uefiData, lastLaunchedTime
     #     dry_run: false,
     #   })
     # @param [Hash] options ({})

data/lib/aws-sdk-ec2/instance.rb

@@ -389,6 +389,18 @@ module Aws::EC2
       data[:ipv_6_address]
     end
 
+    # If the instance is configured for NitroTPM support, the value is
+    # `v2.0`. For more information, see [NitroTPM][1] in the *Amazon EC2
+    # User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html
+    # @return [String]
+    def tpm_support
+      data[:tpm_support]
+    end
+
     # Provides information on the recovery and maintenance options of your
     # instance.
     # @return [Types::InstanceMaintenanceOptions]

data/lib/aws-sdk-ec2/resource.rb

@@ -1677,6 +1677,8 @@ module Aws::EC2
     #     sriov_net_support: "String",
     #     virtualization_type: "String",
     #     boot_mode: "legacy-bios", # accepts legacy-bios, uefi
+    #     tpm_support: "v2.0", # accepts v2.0
+    #     uefi_data: "StringType",
     #   })
     # @param [Hash] options ({})
     # @option options [String] :image_location
@@ -1758,6 +1760,26 @@ module Aws::EC2
     #
     #
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html
+    # @option options [String] :tpm_support
+    #   Set to `v2.0` to enable Trusted Platform Module (TPM) support. For
+    #   more information, see [NitroTPM][1] in the *Amazon Elastic Compute
+    #   Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html
+    # @option options [String] :uefi_data
+    #   Base64 representation of the non-volatile UEFI variable store. To
+    #   retrieve the UEFI data, use the [GetInstanceUefiData][1] command. You
+    #   can inspect and modify the UEFI data by using the [python-uefivars
+    #   tool][2] on GitHub. For more information, see [UEFI Secure Boot][3] in
+    #   the *Amazon Elastic Compute Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceUefiData
+    #   [2]: https://github.com/awslabs/python-uefivars
+    #   [3]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html
     # @return [Image]
     def register_image(options = {})
       resp = @client.register_image(options)

data/lib/aws-sdk-ec2/types.rb

@@ -20307,7 +20307,7 @@ module Aws::EC2
     #   data as a hash:
     #
     #       {
-    #         attribute: "description", # required, accepts description, kernel, ramdisk, launchPermission, productCodes, blockDeviceMapping, sriovNetSupport, bootMode, lastLaunchedTime
+    #         attribute: "description", # required, accepts description, kernel, ramdisk, launchPermission, productCodes, blockDeviceMapping, sriovNetSupport, bootMode, tpmSupport, uefiData, lastLaunchedTime
     #         image_id: "ImageId", # required
     #         dry_run: false,
     #       }
@@ -35443,6 +35443,51 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetInstanceUefiDataRequest
+    #   data as a hash:
+    #
+    #       {
+    #         instance_id: "InstanceId", # required
+    #         dry_run: false,
+    #       }
+    #
+    # @!attribute [rw] instance_id
+    #   The ID of the instance from which to retrieve the UEFI data.
+    #   @return [String]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetInstanceUefiDataRequest AWS API Documentation
+    #
+    class GetInstanceUefiDataRequest < Struct.new(
+      :instance_id,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] instance_id
+    #   The ID of the instance from which to retrieve the UEFI data.
+    #   @return [String]
+    #
+    # @!attribute [rw] uefi_data
+    #   Base64 representation of the non-volatile UEFI variable store.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetInstanceUefiDataResult AWS API Documentation
+    #
+    class GetInstanceUefiDataResult < Struct.new(
+      :instance_id,
+      :uefi_data)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass GetIpamAddressHistoryRequest
     #   data as a hash:
     #
@@ -37891,6 +37936,16 @@ module Aws::EC2
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html
     #   @return [String]
     #
+    # @!attribute [rw] tpm_support
+    #   If the image is configured for NitroTPM support, the value is
+    #   `v2.0`. For more information, see [NitroTPM][1] in the *Amazon
+    #   Elastic Compute Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html
+    #   @return [String]
+    #
     # @!attribute [rw] deprecation_time
     #   The date and time to deprecate the AMI, in UTC, in the following
     #   format: *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z. If you specified a value
@@ -37927,6 +37982,7 @@ module Aws::EC2
       :tags,
       :virtualization_type,
       :boot_mode,
+      :tpm_support,
       :deprecation_time)
       SENSITIVE = []
       include Aws::Structure
@@ -37971,6 +38027,25 @@ module Aws::EC2
     #   The boot mode.
     #   @return [Types::AttributeValue]
     #
+    # @!attribute [rw] tpm_support
+    #   If the image is configured for NitroTPM support, the value is
+    #   `v2.0`.
+    #   @return [Types::AttributeValue]
+    #
+    # @!attribute [rw] uefi_data
+    #   Base64 representation of the non-volatile UEFI variable store. To
+    #   retrieve the UEFI data, use the [GetInstanceUefiData][1] command.
+    #   You can inspect and modify the UEFI data by using the
+    #   [python-uefivars tool][2] on GitHub. For more information, see [UEFI
+    #   Secure Boot][3] in the *Amazon Elastic Compute Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceUefiData
+    #   [2]: https://github.com/awslabs/python-uefivars
+    #   [3]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html
+    #   @return [Types::AttributeValue]
+    #
     # @!attribute [rw] last_launched_time
     #   The date and time, in [ISO 8601 date-time format][1], when the AMI
     #   was last used to launch an EC2 instance. When the AMI is used, there
@@ -37997,6 +38072,8 @@ module Aws::EC2
       :ramdisk_id,
       :sriov_net_support,
       :boot_mode,
+      :tpm_support,
+      :uefi_data,
       :last_launched_time)
       SENSITIVE = []
       include Aws::Structure
@@ -39536,6 +39613,16 @@ module Aws::EC2
     #   The IPv6 address assigned to the instance.
     #   @return [String]
     #
+    # @!attribute [rw] tpm_support
+    #   If the instance is configured for NitroTPM support, the value is
+    #   `v2.0`. For more information, see [NitroTPM][1] in the *Amazon EC2
+    #   User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html
+    #   @return [String]
+    #
     # @!attribute [rw] maintenance_options
     #   Provides information on the recovery and maintenance options of your
     #   instance.
@@ -39598,6 +39685,7 @@ module Aws::EC2
       :usage_operation_update_time,
       :private_dns_name_options,
       :ipv_6_address,
+      :tpm_support,
       :maintenance_options)
       SENSITIVE = []
       include Aws::Structure
@@ -54578,6 +54666,8 @@ module Aws::EC2
     #         sriov_net_support: "String",
     #         virtualization_type: "String",
     #         boot_mode: "legacy-bios", # accepts legacy-bios, uefi
+    #         tpm_support: "v2.0", # accepts v2.0
+    #         uefi_data: "StringType",
     #       }
     #
     # @!attribute [rw] image_location
@@ -54689,6 +54779,30 @@ module Aws::EC2
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html
     #   @return [String]
     #
+    # @!attribute [rw] tpm_support
+    #   Set to `v2.0` to enable Trusted Platform Module (TPM) support. For
+    #   more information, see [NitroTPM][1] in the *Amazon Elastic Compute
+    #   Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html
+    #   @return [String]
+    #
+    # @!attribute [rw] uefi_data
+    #   Base64 representation of the non-volatile UEFI variable store. To
+    #   retrieve the UEFI data, use the [GetInstanceUefiData][1] command.
+    #   You can inspect and modify the UEFI data by using the
+    #   [python-uefivars tool][2] on GitHub. For more information, see [UEFI
+    #   Secure Boot][3] in the *Amazon Elastic Compute Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceUefiData
+    #   [2]: https://github.com/awslabs/python-uefivars
+    #   [3]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RegisterImageRequest AWS API Documentation
     #
     class RegisterImageRequest < Struct.new(
@@ -54705,7 +54819,9 @@ module Aws::EC2
       :root_device_name,
       :sriov_net_support,
       :virtualization_type,
-      :boot_mode)
+      :boot_mode,
+      :tpm_support,
+      :uefi_data)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-ec2.rb

@@ -72,6 +72,6 @@ require_relative 'aws-sdk-ec2/customizations'
 # @!group service
 module Aws::EC2
 
-  GEM_VERSION = '1.312.0'
+  GEM_VERSION = '1.313.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ec2
 version: !ruby/object:Gem::Version
-  version: 1.312.0
+  version: 1.313.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-06 00:00:00.000000000 Z
+date: 2022-05-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sigv4