aws-sdk-ec2 1.454.0 → 1.455.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3434f26b012725ec2fac3a31acb147529ba847ee60228a32f3d70ee95f38283d
-  data.tar.gz: 41d21aeef55038e017ca8b2e7a9d7dfd77f50631dc8c316236b313419662c857
+  metadata.gz: f3026801536da9e2157d614a8405606bb85b2b5848047718905b5217c9288636
+  data.tar.gz: 60c50b0970bb87e42dfafc047f88085164da89d04dab858b5bb1d97013a7369a
 SHA512:
-  metadata.gz: 71cb3bc764e06e53ba73f68648fa11440c72b9cbaf98d4cd188358d2750628000e522586969faba1ff4c2937d29e58dd4c6b29e71cc94859994fa54109bff5a1
-  data.tar.gz: a70ae56d4ff810917fbe26cc8bbf94b11b528e0b28a7556bd0c1557477ec9e0fa1ede81b50ae4f788254c5e24d65a061b5fde18c55cf53c6b806f8fbc56c24e3
+  metadata.gz: 21c5190881a6abd5ee27152b3ebc1085f40ed943a1af858c9ea450f1dc1bfcab33e58c9d3c3bb906e23670878711f25bd8989e071709389cd6bf33e994258b13
+  data.tar.gz: b2fe6a2b35d71196d2bced7fd7aac53ddb994086fc38c14aaae8f8e4bbcef0e2a670dec055b56556c1976b910c059bec69094ec8ba1a3dc765cf44d4a0953319

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.455.0 (2024-05-02)
+------------------
+
+* Feature - This release includes a new API for retrieving the public endorsement key of the EC2 instance's Nitro Trusted Platform Module (NitroTPM).
+
 1.454.0 (2024-05-01)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.454.0
+1.455.0

data/lib/aws-sdk-ec2/client.rb

@@ -41777,6 +41777,59 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Gets the public endorsement key associated with the Nitro Trusted
+    # Platform Module (NitroTPM) for the specified instance.
+    #
+    # @option params [required, String] :instance_id
+    #   The ID of the instance for which to get the public endorsement key.
+    #
+    # @option params [required, String] :key_type
+    #   The required public endorsement key type.
+    #
+    # @option params [required, String] :key_format
+    #   The required public endorsement key format. Specify `der` for a
+    #   DER-encoded public key that is compatible with OpenSSL. Specify `tpmt`
+    #   for a TPM 2.0 format that is compatible with tpm2-tools. The returned
+    #   key is base64 encoded.
+    #
+    # @option params [Boolean] :dry_run
+    #   Specify this parameter to verify whether the request will succeed,
+    #   without actually making the request. If the request will succeed, the
+    #   response is `DryRunOperation`. Otherwise, the response is
+    #   `UnauthorizedOperation`.
+    #
+    # @return [Types::GetInstanceTpmEkPubResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetInstanceTpmEkPubResult#instance_id #instance_id} => String
+    #   * {Types::GetInstanceTpmEkPubResult#key_type #key_type} => String
+    #   * {Types::GetInstanceTpmEkPubResult#key_format #key_format} => String
+    #   * {Types::GetInstanceTpmEkPubResult#key_value #key_value} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_instance_tpm_ek_pub({
+    #     instance_id: "InstanceId", # required
+    #     key_type: "rsa-2048", # required, accepts rsa-2048, ecc-sec-p384
+    #     key_format: "der", # required, accepts der, tpmt
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.instance_id #=> String
+    #   resp.key_type #=> String, one of "rsa-2048", "ecc-sec-p384"
+    #   resp.key_format #=> String, one of "der", "tpmt"
+    #   resp.key_value #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetInstanceTpmEkPub AWS API Documentation
+    #
+    # @overload get_instance_tpm_ek_pub(params = {})
+    # @param [Hash] params ({})
+    def get_instance_tpm_ek_pub(params = {}, options = {})
+      req = build_request(:get_instance_tpm_ek_pub, params)
+      req.send_request(options)
+    end
+
     # Returns a list of instance types with the specified instance
     # attributes. You can use the response to preview the instance types
     # without launching instances. Note that the response does not consider
@@ -59302,7 +59355,7 @@ module Aws::EC2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.454.0'
+      context[:gem_version] = '1.455.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ec2/client_api.rb

@@ -1255,6 +1255,9 @@ module Aws::EC2
     EgressOnlyInternetGatewayList = Shapes::ListShape.new(name: 'EgressOnlyInternetGatewayList')
     EipAllocationPublicIp = Shapes::StringShape.new(name: 'EipAllocationPublicIp')
     EipAssociationIdList = Shapes::ListShape.new(name: 'EipAssociationIdList')
+    EkPubKeyFormat = Shapes::StringShape.new(name: 'EkPubKeyFormat')
+    EkPubKeyType = Shapes::StringShape.new(name: 'EkPubKeyType')
+    EkPubKeyValue = Shapes::StringShape.new(name: 'EkPubKeyValue')
     ElasticGpuAssociation = Shapes::StructureShape.new(name: 'ElasticGpuAssociation')
     ElasticGpuAssociationList = Shapes::ListShape.new(name: 'ElasticGpuAssociationList')
     ElasticGpuHealth = Shapes::StructureShape.new(name: 'ElasticGpuHealth')
@@ -1470,6 +1473,8 @@ module Aws::EC2
     GetImageBlockPublicAccessStateResult = Shapes::StructureShape.new(name: 'GetImageBlockPublicAccessStateResult')
     GetInstanceMetadataDefaultsRequest = Shapes::StructureShape.new(name: 'GetInstanceMetadataDefaultsRequest')
     GetInstanceMetadataDefaultsResult = Shapes::StructureShape.new(name: 'GetInstanceMetadataDefaultsResult')
+    GetInstanceTpmEkPubRequest = Shapes::StructureShape.new(name: 'GetInstanceTpmEkPubRequest')
+    GetInstanceTpmEkPubResult = Shapes::StructureShape.new(name: 'GetInstanceTpmEkPubResult')
     GetInstanceTypesFromInstanceRequirementsRequest = Shapes::StructureShape.new(name: 'GetInstanceTypesFromInstanceRequirementsRequest')
     GetInstanceTypesFromInstanceRequirementsResult = Shapes::StructureShape.new(name: 'GetInstanceTypesFromInstanceRequirementsResult')
     GetInstanceUefiDataRequest = Shapes::StructureShape.new(name: 'GetInstanceUefiDataRequest')
@@ -9095,6 +9100,18 @@ module Aws::EC2
     GetInstanceMetadataDefaultsResult.add_member(:account_level, Shapes::ShapeRef.new(shape: InstanceMetadataDefaultsResponse, location_name: "accountLevel"))
     GetInstanceMetadataDefaultsResult.struct_class = Types::GetInstanceMetadataDefaultsResult
 
+    GetInstanceTpmEkPubRequest.add_member(:instance_id, Shapes::ShapeRef.new(shape: InstanceId, required: true, location_name: "InstanceId"))
+    GetInstanceTpmEkPubRequest.add_member(:key_type, Shapes::ShapeRef.new(shape: EkPubKeyType, required: true, location_name: "KeyType"))
+    GetInstanceTpmEkPubRequest.add_member(:key_format, Shapes::ShapeRef.new(shape: EkPubKeyFormat, required: true, location_name: "KeyFormat"))
+    GetInstanceTpmEkPubRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
+    GetInstanceTpmEkPubRequest.struct_class = Types::GetInstanceTpmEkPubRequest
+
+    GetInstanceTpmEkPubResult.add_member(:instance_id, Shapes::ShapeRef.new(shape: InstanceId, location_name: "instanceId"))
+    GetInstanceTpmEkPubResult.add_member(:key_type, Shapes::ShapeRef.new(shape: EkPubKeyType, location_name: "keyType"))
+    GetInstanceTpmEkPubResult.add_member(:key_format, Shapes::ShapeRef.new(shape: EkPubKeyFormat, location_name: "keyFormat"))
+    GetInstanceTpmEkPubResult.add_member(:key_value, Shapes::ShapeRef.new(shape: EkPubKeyValue, location_name: "keyValue"))
+    GetInstanceTpmEkPubResult.struct_class = Types::GetInstanceTpmEkPubResult
+
     GetInstanceTypesFromInstanceRequirementsRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
     GetInstanceTypesFromInstanceRequirementsRequest.add_member(:architecture_types, Shapes::ShapeRef.new(shape: ArchitectureTypeSet, required: true, location_name: "ArchitectureType"))
     GetInstanceTypesFromInstanceRequirementsRequest.add_member(:virtualization_types, Shapes::ShapeRef.new(shape: VirtualizationTypeSet, required: true, location_name: "VirtualizationType"))
@@ -19948,6 +19965,14 @@ module Aws::EC2
         o.output = Shapes::ShapeRef.new(shape: GetInstanceMetadataDefaultsResult)
       end)
 
+      api.add_operation(:get_instance_tpm_ek_pub, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetInstanceTpmEkPub"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetInstanceTpmEkPubRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetInstanceTpmEkPubResult)
+      end)
+
       api.add_operation(:get_instance_types_from_instance_requirements, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetInstanceTypesFromInstanceRequirements"
         o.http_method = "POST"

data/lib/aws-sdk-ec2/endpoints.rb

@@ -6214,6 +6214,20 @@ module Aws::EC2
       end
     end
 
+    class GetInstanceTpmEkPub
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::EC2::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class GetInstanceTypesFromInstanceRequirements
       def self.build(context)
         unless context.config.regional_endpoint

data/lib/aws-sdk-ec2/plugins/endpoints.rb

@@ -944,6 +944,8 @@ module Aws::EC2
             Aws::EC2::Endpoints::GetImageBlockPublicAccessState.build(context)
           when :get_instance_metadata_defaults
             Aws::EC2::Endpoints::GetInstanceMetadataDefaults.build(context)
+          when :get_instance_tpm_ek_pub
+            Aws::EC2::Endpoints::GetInstanceTpmEkPub.build(context)
           when :get_instance_types_from_instance_requirements
             Aws::EC2::Endpoints::GetInstanceTypesFromInstanceRequirements.build(context)
           when :get_instance_uefi_data

data/lib/aws-sdk-ec2/types.rb

@@ -34609,6 +34609,66 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @!attribute [rw] instance_id
+    #   The ID of the instance for which to get the public endorsement key.
+    #   @return [String]
+    #
+    # @!attribute [rw] key_type
+    #   The required public endorsement key type.
+    #   @return [String]
+    #
+    # @!attribute [rw] key_format
+    #   The required public endorsement key format. Specify `der` for a
+    #   DER-encoded public key that is compatible with OpenSSL. Specify
+    #   `tpmt` for a TPM 2.0 format that is compatible with tpm2-tools. The
+    #   returned key is base64 encoded.
+    #   @return [String]
+    #
+    # @!attribute [rw] dry_run
+    #   Specify this parameter to verify whether the request will succeed,
+    #   without actually making the request. If the request will succeed,
+    #   the response is `DryRunOperation`. Otherwise, the response is
+    #   `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetInstanceTpmEkPubRequest AWS API Documentation
+    #
+    class GetInstanceTpmEkPubRequest < Struct.new(
+      :instance_id,
+      :key_type,
+      :key_format,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] instance_id
+    #   The ID of the instance.
+    #   @return [String]
+    #
+    # @!attribute [rw] key_type
+    #   The public endorsement key type.
+    #   @return [String]
+    #
+    # @!attribute [rw] key_format
+    #   The public endorsement key format.
+    #   @return [String]
+    #
+    # @!attribute [rw] key_value
+    #   The public endorsement key material.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetInstanceTpmEkPubResult AWS API Documentation
+    #
+    class GetInstanceTpmEkPubResult < Struct.new(
+      :instance_id,
+      :key_type,
+      :key_format,
+      :key_value)
+      SENSITIVE = [:key_value]
+      include Aws::Structure
+    end
+
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.

data/lib/aws-sdk-ec2.rb

@@ -76,6 +76,6 @@ require_relative 'aws-sdk-ec2/customizations'
 # @!group service
 module Aws::EC2
 
-  GEM_VERSION = '1.454.0'
+  GEM_VERSION = '1.455.0'
 
 end

data/sig/client.rbs

@@ -8652,6 +8652,22 @@ module Aws
                                           ) -> _GetInstanceMetadataDefaultsResponseSuccess
                                         | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetInstanceMetadataDefaultsResponseSuccess
 
+      interface _GetInstanceTpmEkPubResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetInstanceTpmEkPubResult]
+        def instance_id: () -> ::String
+        def key_type: () -> ("rsa-2048" | "ecc-sec-p384")
+        def key_format: () -> ("der" | "tpmt")
+        def key_value: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Client.html#get_instance_tpm_ek_pub-instance_method
+      def get_instance_tpm_ek_pub: (
+                                     instance_id: ::String,
+                                     key_type: ("rsa-2048" | "ecc-sec-p384"),
+                                     key_format: ("der" | "tpmt"),
+                                     ?dry_run: bool
+                                   ) -> _GetInstanceTpmEkPubResponseSuccess
+                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetInstanceTpmEkPubResponseSuccess
+
       interface _GetInstanceTypesFromInstanceRequirementsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetInstanceTypesFromInstanceRequirementsResult]
         def instance_types: () -> ::Array[Types::InstanceTypeInfoFromInstanceRequirements]

data/sig/types.rbs

@@ -7740,6 +7740,22 @@ module Aws::EC2
       SENSITIVE: []
     end
 
+    class GetInstanceTpmEkPubRequest
+      attr_accessor instance_id: ::String
+      attr_accessor key_type: ("rsa-2048" | "ecc-sec-p384")
+      attr_accessor key_format: ("der" | "tpmt")
+      attr_accessor dry_run: bool
+      SENSITIVE: []
+    end
+
+    class GetInstanceTpmEkPubResult
+      attr_accessor instance_id: ::String
+      attr_accessor key_type: ("rsa-2048" | "ecc-sec-p384")
+      attr_accessor key_format: ("der" | "tpmt")
+      attr_accessor key_value: ::String
+      SENSITIVE: [:key_value]
+    end
+
     class GetInstanceTypesFromInstanceRequirementsRequest
       attr_accessor dry_run: bool
       attr_accessor architecture_types: ::Array[("i386" | "x86_64" | "arm64" | "x86_64_mac" | "arm64_mac")]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ec2
 version: !ruby/object:Gem::Version
-  version: 1.454.0
+  version: 1.455.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-05-01 00:00:00.000000000 Z
+date: 2024-05-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core