aws-sdk-elasticloadbalancingv2 1.141.0 → 1.142.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 52dbaa1a6bdbf36328749c934a18387eabead2175a654c9a7e1af21c203bc029
4
- data.tar.gz: d056c12ff01f0e1ace8f32b127c8179078daefb7f4f72a466a7b0760544d0105
3
+ metadata.gz: 404373b3c0d2ab620f93f929d9550538f308328565bc2bba0fea83caf9f4d03b
4
+ data.tar.gz: 4c5a72ddcfc0d8c0eb7cd8b6df38bab571d64dbe801cef66e3f0638d80148e2f
5
5
  SHA512:
6
- metadata.gz: 117ff320c353d5996ccd4d45a38856777fe855fbcfb3ece19460a4a634a8f61b84617607777734ed6f114fcacdefa0d2f82c3cd3d57c6dfd944967d5408b7ab1
7
- data.tar.gz: 5d44da29ba58bf5ca702f65a724476ec21b442e3e1e4a49e2587590375add59de966908a0e3c29ea0b69ea12d2e58af9a687c2ac354ef206e54c0f3a33a8a725
6
+ metadata.gz: 48506224731ff60f6c03ce2c50ade001f733c217631263bbb1ddcacd5a6c208a92e591c1f9ddc9333eae616cb8103cf3188a4411d0ce6831e144c6e51f4720fa
7
+ data.tar.gz: d55eb10fad6d8508afb246cc6cd08a614a2fa6df5a1ee2278e1051fd28ecef0dc72146846012dabebb87c8b10544e3ba64a1c2c91c6badd0ea5eee4a246089be
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.142.0 (2025-11-12)
5
+ ------------------
6
+
7
+ * Feature - This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule.
8
+
4
9
  1.141.0 (2025-10-21)
5
10
  ------------------
6
11
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.141.0
1
+ 1.142.0
@@ -820,7 +820,7 @@ module Aws::ElasticLoadBalancingV2
820
820
  # ],
821
821
  # default_actions: [ # required
822
822
  # {
823
- # type: "forward", # required, accepts forward, authenticate-oidc, authenticate-cognito, redirect, fixed-response
823
+ # type: "forward", # required, accepts forward, authenticate-oidc, authenticate-cognito, redirect, fixed-response, jwt-validation
824
824
  # target_group_arn: "TargetGroupArn",
825
825
  # authenticate_oidc_config: {
826
826
  # issuer: "AuthenticateOidcActionIssuer", # required
@@ -876,6 +876,17 @@ module Aws::ElasticLoadBalancingV2
876
876
  # duration_seconds: 1,
877
877
  # },
878
878
  # },
879
+ # jwt_validation_config: {
880
+ # jwks_endpoint: "JwtValidationActionJwksEndpoint", # required
881
+ # issuer: "JwtValidationActionIssuer", # required
882
+ # additional_claims: [
883
+ # {
884
+ # format: "single-string", # required, accepts single-string, string-array, space-separated-values
885
+ # name: "JwtValidationActionAdditionalClaimName", # required
886
+ # values: ["JwtValidationActionAdditionalClaimValue"], # required
887
+ # },
888
+ # ],
889
+ # },
879
890
  # },
880
891
  # ],
881
892
  # alpn_policy: ["AlpnPolicyValue"],
@@ -906,7 +917,7 @@ module Aws::ElasticLoadBalancingV2
906
917
  # resp.listeners[0].certificates[0].is_default #=> Boolean
907
918
  # resp.listeners[0].ssl_policy #=> String
908
919
  # resp.listeners[0].default_actions #=> Array
909
- # resp.listeners[0].default_actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response"
920
+ # resp.listeners[0].default_actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response", "jwt-validation"
910
921
  # resp.listeners[0].default_actions[0].target_group_arn #=> String
911
922
  # resp.listeners[0].default_actions[0].authenticate_oidc_config.issuer #=> String
912
923
  # resp.listeners[0].default_actions[0].authenticate_oidc_config.authorization_endpoint #=> String
@@ -945,6 +956,13 @@ module Aws::ElasticLoadBalancingV2
945
956
  # resp.listeners[0].default_actions[0].forward_config.target_groups[0].weight #=> Integer
946
957
  # resp.listeners[0].default_actions[0].forward_config.target_group_stickiness_config.enabled #=> Boolean
947
958
  # resp.listeners[0].default_actions[0].forward_config.target_group_stickiness_config.duration_seconds #=> Integer
959
+ # resp.listeners[0].default_actions[0].jwt_validation_config.jwks_endpoint #=> String
960
+ # resp.listeners[0].default_actions[0].jwt_validation_config.issuer #=> String
961
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims #=> Array
962
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].format #=> String, one of "single-string", "string-array", "space-separated-values"
963
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].name #=> String
964
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].values #=> Array
965
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].values[0] #=> String
948
966
  # resp.listeners[0].alpn_policy #=> Array
949
967
  # resp.listeners[0].alpn_policy[0] #=> String
950
968
  # resp.listeners[0].mutual_authentication.mode #=> String
@@ -1386,7 +1404,7 @@ module Aws::ElasticLoadBalancingV2
1386
1404
  # priority: 1, # required
1387
1405
  # actions: [ # required
1388
1406
  # {
1389
- # type: "forward", # required, accepts forward, authenticate-oidc, authenticate-cognito, redirect, fixed-response
1407
+ # type: "forward", # required, accepts forward, authenticate-oidc, authenticate-cognito, redirect, fixed-response, jwt-validation
1390
1408
  # target_group_arn: "TargetGroupArn",
1391
1409
  # authenticate_oidc_config: {
1392
1410
  # issuer: "AuthenticateOidcActionIssuer", # required
@@ -1442,6 +1460,17 @@ module Aws::ElasticLoadBalancingV2
1442
1460
  # duration_seconds: 1,
1443
1461
  # },
1444
1462
  # },
1463
+ # jwt_validation_config: {
1464
+ # jwks_endpoint: "JwtValidationActionJwksEndpoint", # required
1465
+ # issuer: "JwtValidationActionIssuer", # required
1466
+ # additional_claims: [
1467
+ # {
1468
+ # format: "single-string", # required, accepts single-string, string-array, space-separated-values
1469
+ # name: "JwtValidationActionAdditionalClaimName", # required
1470
+ # values: ["JwtValidationActionAdditionalClaimValue"], # required
1471
+ # },
1472
+ # ],
1473
+ # },
1445
1474
  # },
1446
1475
  # ],
1447
1476
  # tags: [
@@ -1505,7 +1534,7 @@ module Aws::ElasticLoadBalancingV2
1505
1534
  # resp.rules[0].conditions[0].regex_values #=> Array
1506
1535
  # resp.rules[0].conditions[0].regex_values[0] #=> String
1507
1536
  # resp.rules[0].actions #=> Array
1508
- # resp.rules[0].actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response"
1537
+ # resp.rules[0].actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response", "jwt-validation"
1509
1538
  # resp.rules[0].actions[0].target_group_arn #=> String
1510
1539
  # resp.rules[0].actions[0].authenticate_oidc_config.issuer #=> String
1511
1540
  # resp.rules[0].actions[0].authenticate_oidc_config.authorization_endpoint #=> String
@@ -1544,6 +1573,13 @@ module Aws::ElasticLoadBalancingV2
1544
1573
  # resp.rules[0].actions[0].forward_config.target_groups[0].weight #=> Integer
1545
1574
  # resp.rules[0].actions[0].forward_config.target_group_stickiness_config.enabled #=> Boolean
1546
1575
  # resp.rules[0].actions[0].forward_config.target_group_stickiness_config.duration_seconds #=> Integer
1576
+ # resp.rules[0].actions[0].jwt_validation_config.jwks_endpoint #=> String
1577
+ # resp.rules[0].actions[0].jwt_validation_config.issuer #=> String
1578
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims #=> Array
1579
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].format #=> String, one of "single-string", "string-array", "space-separated-values"
1580
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].name #=> String
1581
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].values #=> Array
1582
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].values[0] #=> String
1547
1583
  # resp.rules[0].is_default #=> Boolean
1548
1584
  # resp.rules[0].transforms #=> Array
1549
1585
  # resp.rules[0].transforms[0].type #=> String, one of "host-header-rewrite", "url-rewrite"
@@ -2423,7 +2459,7 @@ module Aws::ElasticLoadBalancingV2
2423
2459
  # resp.listeners[0].certificates[0].is_default #=> Boolean
2424
2460
  # resp.listeners[0].ssl_policy #=> String
2425
2461
  # resp.listeners[0].default_actions #=> Array
2426
- # resp.listeners[0].default_actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response"
2462
+ # resp.listeners[0].default_actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response", "jwt-validation"
2427
2463
  # resp.listeners[0].default_actions[0].target_group_arn #=> String
2428
2464
  # resp.listeners[0].default_actions[0].authenticate_oidc_config.issuer #=> String
2429
2465
  # resp.listeners[0].default_actions[0].authenticate_oidc_config.authorization_endpoint #=> String
@@ -2462,6 +2498,13 @@ module Aws::ElasticLoadBalancingV2
2462
2498
  # resp.listeners[0].default_actions[0].forward_config.target_groups[0].weight #=> Integer
2463
2499
  # resp.listeners[0].default_actions[0].forward_config.target_group_stickiness_config.enabled #=> Boolean
2464
2500
  # resp.listeners[0].default_actions[0].forward_config.target_group_stickiness_config.duration_seconds #=> Integer
2501
+ # resp.listeners[0].default_actions[0].jwt_validation_config.jwks_endpoint #=> String
2502
+ # resp.listeners[0].default_actions[0].jwt_validation_config.issuer #=> String
2503
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims #=> Array
2504
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].format #=> String, one of "single-string", "string-array", "space-separated-values"
2505
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].name #=> String
2506
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].values #=> Array
2507
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].values[0] #=> String
2465
2508
  # resp.listeners[0].alpn_policy #=> Array
2466
2509
  # resp.listeners[0].alpn_policy[0] #=> String
2467
2510
  # resp.listeners[0].mutual_authentication.mode #=> String
@@ -2686,7 +2729,7 @@ module Aws::ElasticLoadBalancingV2
2686
2729
  end
2687
2730
 
2688
2731
  # Describes the specified rules or the rules for the specified listener.
2689
- # You must specify either a listener or one or more rules.
2732
+ # You must specify either a listener or rules.
2690
2733
  #
2691
2734
  # @option params [String] :listener_arn
2692
2735
  # The Amazon Resource Name (ARN) of the listener.
@@ -2785,7 +2828,7 @@ module Aws::ElasticLoadBalancingV2
2785
2828
  # resp.rules[0].conditions[0].regex_values #=> Array
2786
2829
  # resp.rules[0].conditions[0].regex_values[0] #=> String
2787
2830
  # resp.rules[0].actions #=> Array
2788
- # resp.rules[0].actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response"
2831
+ # resp.rules[0].actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response", "jwt-validation"
2789
2832
  # resp.rules[0].actions[0].target_group_arn #=> String
2790
2833
  # resp.rules[0].actions[0].authenticate_oidc_config.issuer #=> String
2791
2834
  # resp.rules[0].actions[0].authenticate_oidc_config.authorization_endpoint #=> String
@@ -2824,6 +2867,13 @@ module Aws::ElasticLoadBalancingV2
2824
2867
  # resp.rules[0].actions[0].forward_config.target_groups[0].weight #=> Integer
2825
2868
  # resp.rules[0].actions[0].forward_config.target_group_stickiness_config.enabled #=> Boolean
2826
2869
  # resp.rules[0].actions[0].forward_config.target_group_stickiness_config.duration_seconds #=> Integer
2870
+ # resp.rules[0].actions[0].jwt_validation_config.jwks_endpoint #=> String
2871
+ # resp.rules[0].actions[0].jwt_validation_config.issuer #=> String
2872
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims #=> Array
2873
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].format #=> String, one of "single-string", "string-array", "space-separated-values"
2874
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].name #=> String
2875
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].values #=> Array
2876
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].values[0] #=> String
2827
2877
  # resp.rules[0].is_default #=> Boolean
2828
2878
  # resp.rules[0].transforms #=> Array
2829
2879
  # resp.rules[0].transforms[0].type #=> String, one of "host-header-rewrite", "url-rewrite"
@@ -3887,7 +3937,7 @@ module Aws::ElasticLoadBalancingV2
3887
3937
  # ],
3888
3938
  # default_actions: [
3889
3939
  # {
3890
- # type: "forward", # required, accepts forward, authenticate-oidc, authenticate-cognito, redirect, fixed-response
3940
+ # type: "forward", # required, accepts forward, authenticate-oidc, authenticate-cognito, redirect, fixed-response, jwt-validation
3891
3941
  # target_group_arn: "TargetGroupArn",
3892
3942
  # authenticate_oidc_config: {
3893
3943
  # issuer: "AuthenticateOidcActionIssuer", # required
@@ -3943,6 +3993,17 @@ module Aws::ElasticLoadBalancingV2
3943
3993
  # duration_seconds: 1,
3944
3994
  # },
3945
3995
  # },
3996
+ # jwt_validation_config: {
3997
+ # jwks_endpoint: "JwtValidationActionJwksEndpoint", # required
3998
+ # issuer: "JwtValidationActionIssuer", # required
3999
+ # additional_claims: [
4000
+ # {
4001
+ # format: "single-string", # required, accepts single-string, string-array, space-separated-values
4002
+ # name: "JwtValidationActionAdditionalClaimName", # required
4003
+ # values: ["JwtValidationActionAdditionalClaimValue"], # required
4004
+ # },
4005
+ # ],
4006
+ # },
3946
4007
  # },
3947
4008
  # ],
3948
4009
  # alpn_policy: ["AlpnPolicyValue"],
@@ -3967,7 +4028,7 @@ module Aws::ElasticLoadBalancingV2
3967
4028
  # resp.listeners[0].certificates[0].is_default #=> Boolean
3968
4029
  # resp.listeners[0].ssl_policy #=> String
3969
4030
  # resp.listeners[0].default_actions #=> Array
3970
- # resp.listeners[0].default_actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response"
4031
+ # resp.listeners[0].default_actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response", "jwt-validation"
3971
4032
  # resp.listeners[0].default_actions[0].target_group_arn #=> String
3972
4033
  # resp.listeners[0].default_actions[0].authenticate_oidc_config.issuer #=> String
3973
4034
  # resp.listeners[0].default_actions[0].authenticate_oidc_config.authorization_endpoint #=> String
@@ -4006,6 +4067,13 @@ module Aws::ElasticLoadBalancingV2
4006
4067
  # resp.listeners[0].default_actions[0].forward_config.target_groups[0].weight #=> Integer
4007
4068
  # resp.listeners[0].default_actions[0].forward_config.target_group_stickiness_config.enabled #=> Boolean
4008
4069
  # resp.listeners[0].default_actions[0].forward_config.target_group_stickiness_config.duration_seconds #=> Integer
4070
+ # resp.listeners[0].default_actions[0].jwt_validation_config.jwks_endpoint #=> String
4071
+ # resp.listeners[0].default_actions[0].jwt_validation_config.issuer #=> String
4072
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims #=> Array
4073
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].format #=> String, one of "single-string", "string-array", "space-separated-values"
4074
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].name #=> String
4075
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].values #=> Array
4076
+ # resp.listeners[0].default_actions[0].jwt_validation_config.additional_claims[0].values[0] #=> String
4009
4077
  # resp.listeners[0].alpn_policy #=> Array
4010
4078
  # resp.listeners[0].alpn_policy[0] #=> String
4011
4079
  # resp.listeners[0].mutual_authentication.mode #=> String
@@ -4348,7 +4416,7 @@ module Aws::ElasticLoadBalancingV2
4348
4416
  # ],
4349
4417
  # actions: [
4350
4418
  # {
4351
- # type: "forward", # required, accepts forward, authenticate-oidc, authenticate-cognito, redirect, fixed-response
4419
+ # type: "forward", # required, accepts forward, authenticate-oidc, authenticate-cognito, redirect, fixed-response, jwt-validation
4352
4420
  # target_group_arn: "TargetGroupArn",
4353
4421
  # authenticate_oidc_config: {
4354
4422
  # issuer: "AuthenticateOidcActionIssuer", # required
@@ -4404,6 +4472,17 @@ module Aws::ElasticLoadBalancingV2
4404
4472
  # duration_seconds: 1,
4405
4473
  # },
4406
4474
  # },
4475
+ # jwt_validation_config: {
4476
+ # jwks_endpoint: "JwtValidationActionJwksEndpoint", # required
4477
+ # issuer: "JwtValidationActionIssuer", # required
4478
+ # additional_claims: [
4479
+ # {
4480
+ # format: "single-string", # required, accepts single-string, string-array, space-separated-values
4481
+ # name: "JwtValidationActionAdditionalClaimName", # required
4482
+ # values: ["JwtValidationActionAdditionalClaimValue"], # required
4483
+ # },
4484
+ # ],
4485
+ # },
4407
4486
  # },
4408
4487
  # ],
4409
4488
  # transforms: [
@@ -4462,7 +4541,7 @@ module Aws::ElasticLoadBalancingV2
4462
4541
  # resp.rules[0].conditions[0].regex_values #=> Array
4463
4542
  # resp.rules[0].conditions[0].regex_values[0] #=> String
4464
4543
  # resp.rules[0].actions #=> Array
4465
- # resp.rules[0].actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response"
4544
+ # resp.rules[0].actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response", "jwt-validation"
4466
4545
  # resp.rules[0].actions[0].target_group_arn #=> String
4467
4546
  # resp.rules[0].actions[0].authenticate_oidc_config.issuer #=> String
4468
4547
  # resp.rules[0].actions[0].authenticate_oidc_config.authorization_endpoint #=> String
@@ -4501,6 +4580,13 @@ module Aws::ElasticLoadBalancingV2
4501
4580
  # resp.rules[0].actions[0].forward_config.target_groups[0].weight #=> Integer
4502
4581
  # resp.rules[0].actions[0].forward_config.target_group_stickiness_config.enabled #=> Boolean
4503
4582
  # resp.rules[0].actions[0].forward_config.target_group_stickiness_config.duration_seconds #=> Integer
4583
+ # resp.rules[0].actions[0].jwt_validation_config.jwks_endpoint #=> String
4584
+ # resp.rules[0].actions[0].jwt_validation_config.issuer #=> String
4585
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims #=> Array
4586
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].format #=> String, one of "single-string", "string-array", "space-separated-values"
4587
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].name #=> String
4588
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].values #=> Array
4589
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].values[0] #=> String
4504
4590
  # resp.rules[0].is_default #=> Boolean
4505
4591
  # resp.rules[0].transforms #=> Array
4506
4592
  # resp.rules[0].transforms[0].type #=> String, one of "host-header-rewrite", "url-rewrite"
@@ -5130,7 +5216,7 @@ module Aws::ElasticLoadBalancingV2
5130
5216
  # resp.rules[0].conditions[0].regex_values #=> Array
5131
5217
  # resp.rules[0].conditions[0].regex_values[0] #=> String
5132
5218
  # resp.rules[0].actions #=> Array
5133
- # resp.rules[0].actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response"
5219
+ # resp.rules[0].actions[0].type #=> String, one of "forward", "authenticate-oidc", "authenticate-cognito", "redirect", "fixed-response", "jwt-validation"
5134
5220
  # resp.rules[0].actions[0].target_group_arn #=> String
5135
5221
  # resp.rules[0].actions[0].authenticate_oidc_config.issuer #=> String
5136
5222
  # resp.rules[0].actions[0].authenticate_oidc_config.authorization_endpoint #=> String
@@ -5169,6 +5255,13 @@ module Aws::ElasticLoadBalancingV2
5169
5255
  # resp.rules[0].actions[0].forward_config.target_groups[0].weight #=> Integer
5170
5256
  # resp.rules[0].actions[0].forward_config.target_group_stickiness_config.enabled #=> Boolean
5171
5257
  # resp.rules[0].actions[0].forward_config.target_group_stickiness_config.duration_seconds #=> Integer
5258
+ # resp.rules[0].actions[0].jwt_validation_config.jwks_endpoint #=> String
5259
+ # resp.rules[0].actions[0].jwt_validation_config.issuer #=> String
5260
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims #=> Array
5261
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].format #=> String, one of "single-string", "string-array", "space-separated-values"
5262
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].name #=> String
5263
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].values #=> Array
5264
+ # resp.rules[0].actions[0].jwt_validation_config.additional_claims[0].values[0] #=> String
5172
5265
  # resp.rules[0].is_default #=> Boolean
5173
5266
  # resp.rules[0].transforms #=> Array
5174
5267
  # resp.rules[0].transforms[0].type #=> String, one of "host-header-rewrite", "url-rewrite"
@@ -5207,7 +5300,8 @@ module Aws::ElasticLoadBalancingV2
5207
5300
  # @option params [String] :enforce_security_group_inbound_rules_on_private_link_traffic
5208
5301
  # Indicates whether to evaluate inbound security group rules for traffic
5209
5302
  # sent to a Network Load Balancer through Amazon Web Services
5210
- # PrivateLink. The default is `on`.
5303
+ # PrivateLink. Applies only if the load balancer has an associated
5304
+ # security group. The default is `on`.
5211
5305
  #
5212
5306
  # @return [Types::SetSecurityGroupsOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
5213
5307
  #
@@ -5421,7 +5515,7 @@ module Aws::ElasticLoadBalancingV2
5421
5515
  tracer: tracer
5422
5516
  )
5423
5517
  context[:gem_name] = 'aws-sdk-elasticloadbalancingv2'
5424
- context[:gem_version] = '1.141.0'
5518
+ context[:gem_version] = '1.142.0'
5425
5519
  Seahorse::Client::Request.new(handlers, context)
5426
5520
  end
5427
5521
 
@@ -195,6 +195,15 @@ module Aws::ElasticLoadBalancingV2
195
195
  IpamPoolId = Shapes::StringShape.new(name: 'IpamPoolId')
196
196
  IpamPools = Shapes::StructureShape.new(name: 'IpamPools')
197
197
  IsDefault = Shapes::BooleanShape.new(name: 'IsDefault')
198
+ JwtValidationActionAdditionalClaim = Shapes::StructureShape.new(name: 'JwtValidationActionAdditionalClaim')
199
+ JwtValidationActionAdditionalClaimFormatEnum = Shapes::StringShape.new(name: 'JwtValidationActionAdditionalClaimFormatEnum')
200
+ JwtValidationActionAdditionalClaimName = Shapes::StringShape.new(name: 'JwtValidationActionAdditionalClaimName')
201
+ JwtValidationActionAdditionalClaimValue = Shapes::StringShape.new(name: 'JwtValidationActionAdditionalClaimValue')
202
+ JwtValidationActionAdditionalClaimValues = Shapes::ListShape.new(name: 'JwtValidationActionAdditionalClaimValues')
203
+ JwtValidationActionAdditionalClaims = Shapes::ListShape.new(name: 'JwtValidationActionAdditionalClaims')
204
+ JwtValidationActionConfig = Shapes::StructureShape.new(name: 'JwtValidationActionConfig')
205
+ JwtValidationActionIssuer = Shapes::StringShape.new(name: 'JwtValidationActionIssuer')
206
+ JwtValidationActionJwksEndpoint = Shapes::StringShape.new(name: 'JwtValidationActionJwksEndpoint')
198
207
  LastModifiedTime = Shapes::TimestampShape.new(name: 'LastModifiedTime')
199
208
  Limit = Shapes::StructureShape.new(name: 'Limit')
200
209
  Limits = Shapes::ListShape.new(name: 'Limits')
@@ -430,6 +439,7 @@ module Aws::ElasticLoadBalancingV2
430
439
  Action.add_member(:redirect_config, Shapes::ShapeRef.new(shape: RedirectActionConfig, location_name: "RedirectConfig"))
431
440
  Action.add_member(:fixed_response_config, Shapes::ShapeRef.new(shape: FixedResponseActionConfig, location_name: "FixedResponseConfig"))
432
441
  Action.add_member(:forward_config, Shapes::ShapeRef.new(shape: ForwardActionConfig, location_name: "ForwardConfig"))
442
+ Action.add_member(:jwt_validation_config, Shapes::ShapeRef.new(shape: JwtValidationActionConfig, location_name: "JwtValidationConfig"))
433
443
  Action.struct_class = Types::Action
434
444
 
435
445
  Actions.member = Shapes::ShapeRef.new(shape: Action)
@@ -870,6 +880,20 @@ module Aws::ElasticLoadBalancingV2
870
880
  IpamPools.add_member(:ipv_4_ipam_pool_id, Shapes::ShapeRef.new(shape: IpamPoolId, location_name: "Ipv4IpamPoolId"))
871
881
  IpamPools.struct_class = Types::IpamPools
872
882
 
883
+ JwtValidationActionAdditionalClaim.add_member(:format, Shapes::ShapeRef.new(shape: JwtValidationActionAdditionalClaimFormatEnum, required: true, location_name: "Format"))
884
+ JwtValidationActionAdditionalClaim.add_member(:name, Shapes::ShapeRef.new(shape: JwtValidationActionAdditionalClaimName, required: true, location_name: "Name"))
885
+ JwtValidationActionAdditionalClaim.add_member(:values, Shapes::ShapeRef.new(shape: JwtValidationActionAdditionalClaimValues, required: true, location_name: "Values"))
886
+ JwtValidationActionAdditionalClaim.struct_class = Types::JwtValidationActionAdditionalClaim
887
+
888
+ JwtValidationActionAdditionalClaimValues.member = Shapes::ShapeRef.new(shape: JwtValidationActionAdditionalClaimValue)
889
+
890
+ JwtValidationActionAdditionalClaims.member = Shapes::ShapeRef.new(shape: JwtValidationActionAdditionalClaim)
891
+
892
+ JwtValidationActionConfig.add_member(:jwks_endpoint, Shapes::ShapeRef.new(shape: JwtValidationActionJwksEndpoint, required: true, location_name: "JwksEndpoint"))
893
+ JwtValidationActionConfig.add_member(:issuer, Shapes::ShapeRef.new(shape: JwtValidationActionIssuer, required: true, location_name: "Issuer"))
894
+ JwtValidationActionConfig.add_member(:additional_claims, Shapes::ShapeRef.new(shape: JwtValidationActionAdditionalClaims, location_name: "AdditionalClaims"))
895
+ JwtValidationActionConfig.struct_class = Types::JwtValidationActionConfig
896
+
873
897
  Limit.add_member(:name, Shapes::ShapeRef.new(shape: Name, location_name: "Name"))
874
898
  Limit.add_member(:max, Shapes::ShapeRef.new(shape: Max, location_name: "Max"))
875
899
  Limit.struct_class = Types::Limit
@@ -18,10 +18,14 @@ module Aws::ElasticLoadBalancingV2
18
18
 
19
19
  # Information about an action.
20
20
  #
21
- # Each rule must include exactly one of the following types of actions:
21
+ # Each rule must include exactly one of the following routing actions:
22
22
  # `forward`, `fixed-response`, or `redirect`, and it must be the last
23
23
  # action to be performed.
24
24
  #
25
+ # Optionally, a rule for an HTTPS listener can also include one of the
26
+ # following user authentication actions: `authenticate-oidc`,
27
+ # `authenticate-cognito`, or `jwt-validation`.
28
+ #
25
29
  # @!attribute [rw] type
26
30
  # The type of action.
27
31
  # @return [String]
@@ -29,8 +33,8 @@ module Aws::ElasticLoadBalancingV2
29
33
  # @!attribute [rw] target_group_arn
30
34
  # The Amazon Resource Name (ARN) of the target group. Specify only
31
35
  # when `Type` is `forward` and you want to route to a single target
32
- # group. To route to one or more target groups, use `ForwardConfig`
33
- # instead.
36
+ # group. To route to multiple target groups, you must use
37
+ # `ForwardConfig` instead.
34
38
  # @return [String]
35
39
  #
36
40
  # @!attribute [rw] authenticate_oidc_config
@@ -64,13 +68,18 @@ module Aws::ElasticLoadBalancingV2
64
68
  #
65
69
  # @!attribute [rw] forward_config
66
70
  # Information for creating an action that distributes requests among
67
- # one or more target groups. For Network Load Balancers, you can
68
- # specify a single target group. Specify only when `Type` is
69
- # `forward`. If you specify both `ForwardConfig` and `TargetGroupArn`,
70
- # you can specify only one target group using `ForwardConfig` and it
71
- # must be the same target group specified in `TargetGroupArn`.
71
+ # multiple target groups. Specify only when `Type` is `forward`.
72
+ #
73
+ # If you specify both `ForwardConfig` and `TargetGroupArn`, you can
74
+ # specify only one target group using `ForwardConfig` and it must be
75
+ # the same target group specified in `TargetGroupArn`.
72
76
  # @return [Types::ForwardActionConfig]
73
77
  #
78
+ # @!attribute [rw] jwt_validation_config
79
+ # \[HTTPS listeners\] Information for validating JWT access tokens in
80
+ # client requests. Specify only when `Type` is `jwt-validation`.
81
+ # @return [Types::JwtValidationActionConfig]
82
+ #
74
83
  # @see http://docs.aws.amazon.com/goto/WebAPI/elasticloadbalancingv2-2015-12-01/Action AWS API Documentation
75
84
  #
76
85
  class Action < Struct.new(
@@ -81,7 +90,8 @@ module Aws::ElasticLoadBalancingV2
81
90
  :order,
82
91
  :redirect_config,
83
92
  :fixed_response_config,
84
- :forward_config)
93
+ :forward_config,
94
+ :jwt_validation_config)
85
95
  SENSITIVE = []
86
96
  include Aws::Structure
87
97
  end
@@ -1878,8 +1888,7 @@ module Aws::ElasticLoadBalancingV2
1878
1888
  # Information about a forward action.
1879
1889
  #
1880
1890
  # @!attribute [rw] target_groups
1881
- # The target groups. For Network Load Balancers, you can specify a
1882
- # single target group.
1891
+ # The target groups.
1883
1892
  # @return [Array<Types::TargetGroupTuple>]
1884
1893
  #
1885
1894
  # @!attribute [rw] target_group_stickiness_config
@@ -2181,6 +2190,63 @@ module Aws::ElasticLoadBalancingV2
2181
2190
  include Aws::Structure
2182
2191
  end
2183
2192
 
2193
+ # Information about an additional claim to validate.
2194
+ #
2195
+ # @!attribute [rw] format
2196
+ # The format of the claim value.
2197
+ # @return [String]
2198
+ #
2199
+ # @!attribute [rw] name
2200
+ # The name of the claim. You can't specify `exp`, `iss`, `nbf`, or
2201
+ # `iat` because we validate them by default.
2202
+ # @return [String]
2203
+ #
2204
+ # @!attribute [rw] values
2205
+ # The claim value. The maximum size of the list is 10. Each value can
2206
+ # be up to 256 characters in length. If the format is
2207
+ # `space-separated-values`, the values can't include spaces.
2208
+ # @return [Array<String>]
2209
+ #
2210
+ # @see http://docs.aws.amazon.com/goto/WebAPI/elasticloadbalancingv2-2015-12-01/JwtValidationActionAdditionalClaim AWS API Documentation
2211
+ #
2212
+ class JwtValidationActionAdditionalClaim < Struct.new(
2213
+ :format,
2214
+ :name,
2215
+ :values)
2216
+ SENSITIVE = []
2217
+ include Aws::Structure
2218
+ end
2219
+
2220
+ # Information about a JSON Web Token (JWT) validation action.
2221
+ #
2222
+ # @!attribute [rw] jwks_endpoint
2223
+ # The JSON Web Key Set (JWKS) endpoint. This endpoint contains JSON
2224
+ # Web Keys (JWK) that are used to validate signatures from the
2225
+ # provider.
2226
+ #
2227
+ # This must be a full URL, including the HTTPS protocol, the domain,
2228
+ # and the path. The maximum length is 256 characters.
2229
+ # @return [String]
2230
+ #
2231
+ # @!attribute [rw] issuer
2232
+ # The issuer of the JWT. The maximum length is 256 characters.
2233
+ # @return [String]
2234
+ #
2235
+ # @!attribute [rw] additional_claims
2236
+ # Additional claims to validate. The maximum size of the list is 10.
2237
+ # We validate the `exp`, `iss`, `nbf`, and `iat` claims by default.
2238
+ # @return [Array<Types::JwtValidationActionAdditionalClaim>]
2239
+ #
2240
+ # @see http://docs.aws.amazon.com/goto/WebAPI/elasticloadbalancingv2-2015-12-01/JwtValidationActionConfig AWS API Documentation
2241
+ #
2242
+ class JwtValidationActionConfig < Struct.new(
2243
+ :jwks_endpoint,
2244
+ :issuer,
2245
+ :additional_claims)
2246
+ SENSITIVE = []
2247
+ include Aws::Structure
2248
+ end
2249
+
2184
2250
  # Information about an Elastic Load Balancing resource limit for your
2185
2251
  # Amazon Web Services account.
2186
2252
  #
@@ -3887,7 +3953,8 @@ module Aws::ElasticLoadBalancingV2
3887
3953
  # @!attribute [rw] enforce_security_group_inbound_rules_on_private_link_traffic
3888
3954
  # Indicates whether to evaluate inbound security group rules for
3889
3955
  # traffic sent to a Network Load Balancer through Amazon Web Services
3890
- # PrivateLink. The default is `on`.
3956
+ # PrivateLink. Applies only if the load balancer has an associated
3957
+ # security group. The default is `on`.
3891
3958
  # @return [String]
3892
3959
  #
3893
3960
  # @see http://docs.aws.amazon.com/goto/WebAPI/elasticloadbalancingv2-2015-12-01/SetSecurityGroupsInput AWS API Documentation
@@ -4542,10 +4609,10 @@ module Aws::ElasticLoadBalancingV2
4542
4609
  # @return [Boolean]
4543
4610
  #
4544
4611
  # @!attribute [rw] duration_seconds
4545
- # The time period, in seconds, during which requests from a client
4546
- # should be routed to the same target group. The range is 1-604800
4547
- # seconds (7 days). You must specify this value when enabling target
4548
- # group stickiness.
4612
+ # \[Application Load Balancers\] The time period, in seconds, during
4613
+ # which requests from a client should be routed to the same target
4614
+ # group. The range is 1-604800 seconds (7 days). You must specify this
4615
+ # value when enabling target group stickiness.
4549
4616
  # @return [Integer]
4550
4617
  #
4551
4618
  # @see http://docs.aws.amazon.com/goto/WebAPI/elasticloadbalancingv2-2015-12-01/TargetGroupStickinessConfig AWS API Documentation
@@ -4602,18 +4669,16 @@ module Aws::ElasticLoadBalancingV2
4602
4669
  # the following values:
4603
4670
  #
4604
4671
  # * `Target.ResponseCodeMismatch` - The health checks did not return
4605
- # an expected HTTP code. Applies only to Application Load Balancers
4606
- # and Gateway Load Balancers.
4672
+ # an expected HTTP code.
4607
4673
  #
4608
- # * `Target.Timeout` - The health check requests timed out. Applies
4609
- # only to Application Load Balancers and Gateway Load Balancers.
4674
+ # * `Target.Timeout` - The health check requests timed out.
4610
4675
  #
4611
4676
  # * `Target.FailedHealthChecks` - The load balancer received an error
4612
4677
  # while establishing a connection to the target or the target
4613
4678
  # response was malformed.
4614
4679
  #
4615
4680
  # * `Elb.InternalError` - The health checks failed due to an internal
4616
- # error. Applies only to Application Load Balancers.
4681
+ # error.
4617
4682
  #
4618
4683
  # If the target state is `unused`, the reason code can be one of the
4619
4684
  # following values:
@@ -4644,10 +4709,10 @@ module Aws::ElasticLoadBalancingV2
4644
4709
  # following value:
4645
4710
  #
4646
4711
  # * `Target.HealthCheckDisabled` - Health checks are disabled for the
4647
- # target group. Applies only to Application Load Balancers.
4712
+ # target group.
4648
4713
  #
4649
4714
  # * `Elb.InternalError` - Target health is unavailable due to an
4650
- # internal error. Applies only to Network Load Balancers.
4715
+ # internal error.
4651
4716
  # @return [String]
4652
4717
  #
4653
4718
  # @!attribute [rw] description
@@ -55,7 +55,7 @@ module Aws::ElasticLoadBalancingV2
55
55
  autoload :EndpointProvider, 'aws-sdk-elasticloadbalancingv2/endpoint_provider'
56
56
  autoload :Endpoints, 'aws-sdk-elasticloadbalancingv2/endpoints'
57
57
 
58
- GEM_VERSION = '1.141.0'
58
+ GEM_VERSION = '1.142.0'
59
59
 
60
60
  end
61
61
 
data/sig/client.rbs CHANGED
@@ -145,7 +145,7 @@ module Aws
145
145
  ],
146
146
  default_actions: Array[
147
147
  {
148
- type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response"),
148
+ type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response" | "jwt-validation"),
149
149
  target_group_arn: ::String?,
150
150
  authenticate_oidc_config: {
151
151
  issuer: ::String,
@@ -196,6 +196,17 @@ module Aws
196
196
  enabled: bool?,
197
197
  duration_seconds: ::Integer?
198
198
  }?
199
+ }?,
200
+ jwt_validation_config: {
201
+ jwks_endpoint: ::String,
202
+ issuer: ::String,
203
+ additional_claims: Array[
204
+ {
205
+ format: ("single-string" | "string-array" | "space-separated-values"),
206
+ name: ::String,
207
+ values: Array[::String]
208
+ },
209
+ ]?
199
210
  }?
200
211
  },
201
212
  ],
@@ -295,7 +306,7 @@ module Aws
295
306
  priority: ::Integer,
296
307
  actions: Array[
297
308
  {
298
- type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response"),
309
+ type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response" | "jwt-validation"),
299
310
  target_group_arn: ::String?,
300
311
  authenticate_oidc_config: {
301
312
  issuer: ::String,
@@ -346,6 +357,17 @@ module Aws
346
357
  enabled: bool?,
347
358
  duration_seconds: ::Integer?
348
359
  }?
360
+ }?,
361
+ jwt_validation_config: {
362
+ jwks_endpoint: ::String,
363
+ issuer: ::String,
364
+ additional_claims: Array[
365
+ {
366
+ format: ("single-string" | "string-array" | "space-separated-values"),
367
+ name: ::String,
368
+ values: Array[::String]
369
+ },
370
+ ]?
349
371
  }?
350
372
  },
351
373
  ],
@@ -791,7 +813,7 @@ module Aws
791
813
  ],
792
814
  ?default_actions: Array[
793
815
  {
794
- type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response"),
816
+ type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response" | "jwt-validation"),
795
817
  target_group_arn: ::String?,
796
818
  authenticate_oidc_config: {
797
819
  issuer: ::String,
@@ -842,6 +864,17 @@ module Aws
842
864
  enabled: bool?,
843
865
  duration_seconds: ::Integer?
844
866
  }?
867
+ }?,
868
+ jwt_validation_config: {
869
+ jwks_endpoint: ::String,
870
+ issuer: ::String,
871
+ additional_claims: Array[
872
+ {
873
+ format: ("single-string" | "string-array" | "space-separated-values"),
874
+ name: ::String,
875
+ values: Array[::String]
876
+ },
877
+ ]?
845
878
  }?
846
879
  },
847
880
  ],
@@ -931,7 +964,7 @@ module Aws
931
964
  ],
932
965
  ?actions: Array[
933
966
  {
934
- type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response"),
967
+ type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response" | "jwt-validation"),
935
968
  target_group_arn: ::String?,
936
969
  authenticate_oidc_config: {
937
970
  issuer: ::String,
@@ -982,6 +1015,17 @@ module Aws
982
1015
  enabled: bool?,
983
1016
  duration_seconds: ::Integer?
984
1017
  }?
1018
+ }?,
1019
+ jwt_validation_config: {
1020
+ jwks_endpoint: ::String,
1021
+ issuer: ::String,
1022
+ additional_claims: Array[
1023
+ {
1024
+ format: ("single-string" | "string-array" | "space-separated-values"),
1025
+ name: ::String,
1026
+ values: Array[::String]
1027
+ },
1028
+ ]?
985
1029
  }?
986
1030
  },
987
1031
  ],
data/sig/types.rbs CHANGED
@@ -12,7 +12,7 @@ module Aws::ElasticLoadBalancingV2
12
12
  end
13
13
 
14
14
  class Action
15
- attr_accessor type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response")
15
+ attr_accessor type: ("forward" | "authenticate-oidc" | "authenticate-cognito" | "redirect" | "fixed-response" | "jwt-validation")
16
16
  attr_accessor target_group_arn: ::String
17
17
  attr_accessor authenticate_oidc_config: Types::AuthenticateOidcActionConfig
18
18
  attr_accessor authenticate_cognito_config: Types::AuthenticateCognitoActionConfig
@@ -20,6 +20,7 @@ module Aws::ElasticLoadBalancingV2
20
20
  attr_accessor redirect_config: Types::RedirectActionConfig
21
21
  attr_accessor fixed_response_config: Types::FixedResponseActionConfig
22
22
  attr_accessor forward_config: Types::ForwardActionConfig
23
+ attr_accessor jwt_validation_config: Types::JwtValidationActionConfig
23
24
  SENSITIVE: []
24
25
  end
25
26
 
@@ -627,6 +628,20 @@ module Aws::ElasticLoadBalancingV2
627
628
  SENSITIVE: []
628
629
  end
629
630
 
631
+ class JwtValidationActionAdditionalClaim
632
+ attr_accessor format: ("single-string" | "string-array" | "space-separated-values")
633
+ attr_accessor name: ::String
634
+ attr_accessor values: ::Array[::String]
635
+ SENSITIVE: []
636
+ end
637
+
638
+ class JwtValidationActionConfig
639
+ attr_accessor jwks_endpoint: ::String
640
+ attr_accessor issuer: ::String
641
+ attr_accessor additional_claims: ::Array[Types::JwtValidationActionAdditionalClaim]
642
+ SENSITIVE: []
643
+ end
644
+
630
645
  class Limit
631
646
  attr_accessor name: ::String
632
647
  attr_accessor max: ::String
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-elasticloadbalancingv2
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.141.0
4
+ version: 1.142.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services