aws-sdk-signer 1.40.0 → 1.42.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9aad46fb4c5fdaaee35e3ccb0c330595b8534c2fe14e8c6fb44ff81ec130ad7a
-  data.tar.gz: d81a3eab098de28c0ecc362ff15c21e2626faeca31d3aff417cc603778d9d62b
+  metadata.gz: 8d7d5118e8a891ca04041202d811bd7ba4079b49877934ed16fef9f9f810e7e0
+  data.tar.gz: '09ffa55b9de6acd676bb8ce010ab7c52d7f5d209a0756f3de4dca07e3d2d88bf'
 SHA512:
-  metadata.gz: b82bd7580bce30eb1fd9f8b215ad797c1733cb5b014d54cce59e44245d98498111a33e5df081ce1c6feaf1938e21d000fcd439b7fb88f6c52f5a316d24d1e3cf
-  data.tar.gz: 8b353d8317fe373bef89d28660b46858e6410a13cd5196613e211f0951de10e55928a0f6c27cd8500c7058fccb3186ac8931d88d758f37192b5b98609ceabed1
+  metadata.gz: d1ccf8815f1fc063540efc80d03f10e2dec726f60711e267eed6f78a0c1b42fce18b1e124397fa66f77fa0d53ec9f316099355135fb38a6e31b52c46159f79ea
+  data.tar.gz: 0b89e9c015f4427bf4a37a3488241e6a9a4f031dd773270cb80a299f624be08912ee1614bdbd9abf8382fef0b38a804f04195d8c08c646d035958781a3490c96

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.42.0 (2023-06-06)
+------------------
+
+* Feature - AWS Signer is launching Container Image Signing, a new feature that enables you to sign and verify container images. This feature enables you to validate that only container images you approve are used in your enterprise.
+
+1.41.0 (2023-05-31)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.40.0 (2023-01-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.40.0
+1.42.0

data/lib/aws-sdk-signer/client.rb

@@ -275,6 +275,11 @@ module Aws::Signer
     #       in the future.
     #
     #
+    #   @option options [String] :sdk_ua_app_id
+    #     A unique and opaque application ID that is appended to the
+    #     User-Agent header as app/<sdk_ua_app_id>. It should have a
+    #     maximum length of 50.
+    #
     #   @option options [String] :secret_access_key
     #
     #   @option options [String] :session_token
@@ -521,6 +526,56 @@ module Aws::Signer
       req.send_request(options)
     end
 
+    # Retrieves the revocation status of one or more of the signing profile,
+    # signing job, and signing certificate.
+    #
+    # @option params [required, Time,DateTime,Date,Integer,String] :signature_timestamp
+    #   The timestamp of the signature that validates the profile or job.
+    #
+    # @option params [required, String] :platform_id
+    #   The ID of a signing platform.
+    #
+    # @option params [required, String] :profile_version_arn
+    #   The version of a signing profile.
+    #
+    # @option params [required, String] :job_arn
+    #   The ARN of a signing job.
+    #
+    # @option params [required, Array<String>] :certificate_hashes
+    #   A list of composite signed hashes that identify certificates.
+    #
+    #   A certificate identifier consists of a subject certificate TBS hash
+    #   (signed by the parent CA) combined with a parent CA TBS hash (signed
+    #   by the parent CA’s CA). Root certificates are defined as their own CA.
+    #
+    # @return [Types::GetRevocationStatusResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetRevocationStatusResponse#revoked_entities #revoked_entities} => Array&lt;String&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_revocation_status({
+    #     signature_timestamp: Time.now, # required
+    #     platform_id: "PlatformId", # required
+    #     profile_version_arn: "Arn", # required
+    #     job_arn: "Arn", # required
+    #     certificate_hashes: ["String"], # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.revoked_entities #=> Array
+    #   resp.revoked_entities[0] #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/signer-2017-08-25/GetRevocationStatus AWS API Documentation
+    #
+    # @overload get_revocation_status(params = {})
+    # @param [Hash] params ({})
+    def get_revocation_status(params = {}, options = {})
+      req = build_request(:get_revocation_status, params)
+      req.send_request(options)
+    end
+
     # Returns information on a specific signing platform.
     #
     # @option params [required, String] :platform_id
@@ -955,13 +1010,7 @@ module Aws::Signer
     end
 
     # Creates a signing profile. A signing profile is a code signing
-    # template that can be used to carry out a pre-defined signing job. For
-    # more information, see
-    # [http://docs.aws.amazon.com/signer/latest/developerguide/gs-profile.html][1]
-    #
-    #
-    #
-    # [1]: http://docs.aws.amazon.com/signer/latest/developerguide/gs-profile.html
+    # template that can be used to carry out a pre-defined signing job.
     #
     # @option params [required, String] :profile_name
     #   The name of the signing profile to be created.
@@ -1144,12 +1193,59 @@ module Aws::Signer
       req.send_request(options)
     end
 
+    # Signs a binary payload and returns a signature envelope.
+    #
+    # @option params [required, String] :profile_name
+    #   The name of the signing profile.
+    #
+    # @option params [String] :profile_owner
+    #   The AWS account ID of the profile owner.
+    #
+    # @option params [required, String, StringIO, File] :payload
+    #   Specifies the object digest (hash) to sign.
+    #
+    # @option params [required, String] :payload_format
+    #   Payload content type
+    #
+    # @return [Types::SignPayloadResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::SignPayloadResponse#job_id #job_id} => String
+    #   * {Types::SignPayloadResponse#job_owner #job_owner} => String
+    #   * {Types::SignPayloadResponse#metadata #metadata} => Hash&lt;String,String&gt;
+    #   * {Types::SignPayloadResponse#signature #signature} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.sign_payload({
+    #     profile_name: "ProfileName", # required
+    #     profile_owner: "AccountId",
+    #     payload: "data", # required
+    #     payload_format: "String", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.job_id #=> String
+    #   resp.job_owner #=> String
+    #   resp.metadata #=> Hash
+    #   resp.metadata["String"] #=> String
+    #   resp.signature #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/signer-2017-08-25/SignPayload AWS API Documentation
+    #
+    # @overload sign_payload(params = {})
+    # @param [Hash] params ({})
+    def sign_payload(params = {}, options = {})
+      req = build_request(:sign_payload, params)
+      req.send_request(options)
+    end
+
     # Initiates a signing job to be performed on the code provided. Signing
     # jobs are viewable by the `ListSigningJobs` operation for two years
     # after they are performed. Note the following requirements:
     #
     # * You must create an Amazon S3 source bucket. For more information,
-    #   see [Create a Bucket][1] in the *Amazon S3 Getting Started Guide*.
+    #   see [Creating a Bucket][1] in the *Amazon S3 Getting Started Guide*.
     #
     # * Your S3 source bucket must be version enabled.
     #
@@ -1166,12 +1262,12 @@ module Aws::Signer
     # after you call `StartSigningJob`.
     #
     # For a Java example that shows how to use this action, see
-    # [http://docs.aws.amazon.com/acm/latest/userguide/][2]
+    # [StartSigningJob][2].
     #
     #
     #
     # [1]: http://docs.aws.amazon.com/AmazonS3/latest/gsg/CreatingABucket.html
-    # [2]: http://docs.aws.amazon.com/acm/latest/userguide/
+    # [2]: https://docs.aws.amazon.com/signer/latest/developerguide/api-startsigningjob.html
     #
     # @option params [required, Types::Source] :source
     #   The S3 bucket that contains the object to sign or a BLOB that contains
@@ -1306,7 +1402,7 @@ module Aws::Signer
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-signer'
-      context[:gem_version] = '1.40.0'
+      context[:gem_version] = '1.42.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-signer/client_api.rb

@@ -19,10 +19,12 @@ module Aws::Signer
     AddProfilePermissionResponse = Shapes::StructureShape.new(name: 'AddProfilePermissionResponse')
     Arn = Shapes::StringShape.new(name: 'Arn')
     BadRequestException = Shapes::StructureShape.new(name: 'BadRequestException')
+    Blob = Shapes::BlobShape.new(name: 'Blob')
     BucketName = Shapes::StringShape.new(name: 'BucketName')
     CancelSigningProfileRequest = Shapes::StructureShape.new(name: 'CancelSigningProfileRequest')
     Category = Shapes::StringShape.new(name: 'Category')
     CertificateArn = Shapes::StringShape.new(name: 'CertificateArn')
+    CertificateHashes = Shapes::ListShape.new(name: 'CertificateHashes')
     ClientRequestToken = Shapes::StringShape.new(name: 'ClientRequestToken')
     ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
     DescribeSigningJobRequest = Shapes::StructureShape.new(name: 'DescribeSigningJobRequest')
@@ -34,6 +36,8 @@ module Aws::Signer
     EncryptionAlgorithms = Shapes::ListShape.new(name: 'EncryptionAlgorithms')
     ErrorCode = Shapes::StringShape.new(name: 'ErrorCode')
     ErrorMessage = Shapes::StringShape.new(name: 'ErrorMessage')
+    GetRevocationStatusRequest = Shapes::StructureShape.new(name: 'GetRevocationStatusRequest')
+    GetRevocationStatusResponse = Shapes::StructureShape.new(name: 'GetRevocationStatusResponse')
     GetSigningPlatformRequest = Shapes::StructureShape.new(name: 'GetSigningPlatformRequest')
     GetSigningPlatformResponse = Shapes::StructureShape.new(name: 'GetSigningPlatformResponse')
     GetSigningProfileRequest = Shapes::StructureShape.new(name: 'GetSigningProfileRequest')
@@ -59,8 +63,10 @@ module Aws::Signer
     ListTagsForResourceResponse = Shapes::StructureShape.new(name: 'ListTagsForResourceResponse')
     MaxResults = Shapes::IntegerShape.new(name: 'MaxResults')
     MaxSizeInMB = Shapes::IntegerShape.new(name: 'MaxSizeInMB')
+    Metadata = Shapes::MapShape.new(name: 'Metadata')
     NextToken = Shapes::StringShape.new(name: 'NextToken')
     NotFoundException = Shapes::StructureShape.new(name: 'NotFoundException')
+    Payload = Shapes::BlobShape.new(name: 'Payload')
     Permission = Shapes::StructureShape.new(name: 'Permission')
     Permissions = Shapes::ListShape.new(name: 'Permissions')
     PlatformId = Shapes::StringShape.new(name: 'PlatformId')
@@ -77,10 +83,13 @@ module Aws::Signer
     RevocationReasonString = Shapes::StringShape.new(name: 'RevocationReasonString')
     RevokeSignatureRequest = Shapes::StructureShape.new(name: 'RevokeSignatureRequest')
     RevokeSigningProfileRequest = Shapes::StructureShape.new(name: 'RevokeSigningProfileRequest')
+    RevokedEntities = Shapes::ListShape.new(name: 'RevokedEntities')
     S3Destination = Shapes::StructureShape.new(name: 'S3Destination')
     S3SignedObject = Shapes::StructureShape.new(name: 'S3SignedObject')
     S3Source = Shapes::StructureShape.new(name: 'S3Source')
     ServiceLimitExceededException = Shapes::StructureShape.new(name: 'ServiceLimitExceededException')
+    SignPayloadRequest = Shapes::StructureShape.new(name: 'SignPayloadRequest')
+    SignPayloadResponse = Shapes::StructureShape.new(name: 'SignPayloadResponse')
     SignatureValidityPeriod = Shapes::StructureShape.new(name: 'SignatureValidityPeriod')
     SignedObject = Shapes::StructureShape.new(name: 'SignedObject')
     SigningConfiguration = Shapes::StructureShape.new(name: 'SigningConfiguration')
@@ -146,6 +155,8 @@ module Aws::Signer
     CancelSigningProfileRequest.add_member(:profile_name, Shapes::ShapeRef.new(shape: ProfileName, required: true, location: "uri", location_name: "profileName"))
     CancelSigningProfileRequest.struct_class = Types::CancelSigningProfileRequest
 
+    CertificateHashes.member = Shapes::ShapeRef.new(shape: String)
+
     ConflictException.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessage, location_name: "message"))
     ConflictException.add_member(:code, Shapes::ShapeRef.new(shape: ErrorCode, location_name: "code"))
     ConflictException.struct_class = Types::ConflictException
@@ -183,6 +194,16 @@ module Aws::Signer
 
     EncryptionAlgorithms.member = Shapes::ShapeRef.new(shape: EncryptionAlgorithm)
 
+    GetRevocationStatusRequest.add_member(:signature_timestamp, Shapes::ShapeRef.new(shape: Timestamp, required: true, location: "querystring", location_name: "signatureTimestamp"))
+    GetRevocationStatusRequest.add_member(:platform_id, Shapes::ShapeRef.new(shape: PlatformId, required: true, location: "querystring", location_name: "platformId"))
+    GetRevocationStatusRequest.add_member(:profile_version_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location: "querystring", location_name: "profileVersionArn"))
+    GetRevocationStatusRequest.add_member(:job_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location: "querystring", location_name: "jobArn"))
+    GetRevocationStatusRequest.add_member(:certificate_hashes, Shapes::ShapeRef.new(shape: CertificateHashes, required: true, location: "querystring", location_name: "certificateHashes"))
+    GetRevocationStatusRequest.struct_class = Types::GetRevocationStatusRequest
+
+    GetRevocationStatusResponse.add_member(:revoked_entities, Shapes::ShapeRef.new(shape: RevokedEntities, location_name: "revokedEntities"))
+    GetRevocationStatusResponse.struct_class = Types::GetRevocationStatusResponse
+
     GetSigningPlatformRequest.add_member(:platform_id, Shapes::ShapeRef.new(shape: PlatformId, required: true, location: "uri", location_name: "platformId"))
     GetSigningPlatformRequest.struct_class = Types::GetSigningPlatformRequest
 
@@ -282,6 +303,9 @@ module Aws::Signer
     ListTagsForResourceResponse.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     ListTagsForResourceResponse.struct_class = Types::ListTagsForResourceResponse
 
+    Metadata.key = Shapes::ShapeRef.new(shape: String)
+    Metadata.value = Shapes::ShapeRef.new(shape: String)
+
     NotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessage, location_name: "message"))
     NotFoundException.add_member(:code, Shapes::ShapeRef.new(shape: ErrorCode, location_name: "code"))
     NotFoundException.struct_class = Types::NotFoundException
@@ -331,6 +355,8 @@ module Aws::Signer
     RevokeSigningProfileRequest.add_member(:effective_time, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "effectiveTime"))
     RevokeSigningProfileRequest.struct_class = Types::RevokeSigningProfileRequest
 
+    RevokedEntities.member = Shapes::ShapeRef.new(shape: String)
+
     S3Destination.add_member(:bucket_name, Shapes::ShapeRef.new(shape: BucketName, location_name: "bucketName"))
     S3Destination.add_member(:prefix, Shapes::ShapeRef.new(shape: Prefix, location_name: "prefix"))
     S3Destination.struct_class = Types::S3Destination
@@ -348,6 +374,18 @@ module Aws::Signer
     ServiceLimitExceededException.add_member(:code, Shapes::ShapeRef.new(shape: ErrorCode, location_name: "code"))
     ServiceLimitExceededException.struct_class = Types::ServiceLimitExceededException
 
+    SignPayloadRequest.add_member(:profile_name, Shapes::ShapeRef.new(shape: ProfileName, required: true, location_name: "profileName"))
+    SignPayloadRequest.add_member(:profile_owner, Shapes::ShapeRef.new(shape: AccountId, location_name: "profileOwner"))
+    SignPayloadRequest.add_member(:payload, Shapes::ShapeRef.new(shape: Payload, required: true, location_name: "payload"))
+    SignPayloadRequest.add_member(:payload_format, Shapes::ShapeRef.new(shape: String, required: true, location_name: "payloadFormat"))
+    SignPayloadRequest.struct_class = Types::SignPayloadRequest
+
+    SignPayloadResponse.add_member(:job_id, Shapes::ShapeRef.new(shape: JobId, location_name: "jobId"))
+    SignPayloadResponse.add_member(:job_owner, Shapes::ShapeRef.new(shape: AccountId, location_name: "jobOwner"))
+    SignPayloadResponse.add_member(:metadata, Shapes::ShapeRef.new(shape: Metadata, location_name: "metadata"))
+    SignPayloadResponse.add_member(:signature, Shapes::ShapeRef.new(shape: Blob, location_name: "signature"))
+    SignPayloadResponse.struct_class = Types::SignPayloadResponse
+
     SignatureValidityPeriod.add_member(:value, Shapes::ShapeRef.new(shape: Integer, location_name: "value"))
     SignatureValidityPeriod.add_member(:type, Shapes::ShapeRef.new(shape: ValidityType, location_name: "type"))
     SignatureValidityPeriod.struct_class = Types::SignatureValidityPeriod
@@ -536,6 +574,21 @@ module Aws::Signer
         o.errors << Shapes::ShapeRef.new(shape: InternalServiceErrorException)
       end)
 
+      api.add_operation(:get_revocation_status, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetRevocationStatus"
+        o.http_method = "GET"
+        o.http_request_uri = "/revocations"
+        o.endpoint_pattern = {
+          "hostPrefix" => "verification.",
+        }
+        o.input = Shapes::ShapeRef.new(shape: GetRevocationStatusRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetRevocationStatusResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServiceErrorException)
+      end)
+
       api.add_operation(:get_signing_platform, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetSigningPlatform"
         o.http_method = "GET"
@@ -691,6 +744,19 @@ module Aws::Signer
         o.errors << Shapes::ShapeRef.new(shape: InternalServiceErrorException)
       end)
 
+      api.add_operation(:sign_payload, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "SignPayload"
+        o.http_method = "POST"
+        o.http_request_uri = "/signing-jobs/with-payload"
+        o.input = Shapes::ShapeRef.new(shape: SignPayloadRequest)
+        o.output = Shapes::ShapeRef.new(shape: SignPayloadResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServiceErrorException)
+      end)
+
       api.add_operation(:start_signing_job, Seahorse::Model::Operation.new.tap do |o|
         o.name = "StartSigningJob"
         o.http_method = "POST"

data/lib/aws-sdk-signer/endpoint_provider.rb

@@ -14,36 +14,39 @@ module Aws::Signer
       use_dual_stack = parameters.use_dual_stack
       use_fips = parameters.use_fips
       endpoint = parameters.endpoint
-      if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
-        if Aws::Endpoints::Matchers.set?(endpoint) && (url = Aws::Endpoints::Matchers.parse_url(endpoint))
-          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
-            raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
-          end
-          if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-            raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
-          end
-          return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
-        end
-        if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
-            return Aws::Endpoints::Endpoint.new(url: "https://signer-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
-          end
-          raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
-        end
+      if Aws::Endpoints::Matchers.set?(endpoint)
         if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
-            return Aws::Endpoints::Endpoint.new(url: "https://signer-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
-          end
-          raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
+          raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
         end
         if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
-            return Aws::Endpoints::Endpoint.new(url: "https://signer.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+          raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
+        end
+        return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(region)
+        if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
+          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
+              return Aws::Endpoints::Endpoint.new(url: "https://signer-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+            end
+            raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
+          end
+          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
+              return Aws::Endpoints::Endpoint.new(url: "https://signer-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
+            end
+            raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
+          end
+          if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
+              return Aws::Endpoints::Endpoint.new(url: "https://signer.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+            end
+            raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
           end
-          raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
+          return Aws::Endpoints::Endpoint.new(url: "https://signer.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
         end
-        return Aws::Endpoints::Endpoint.new(url: "https://signer.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
       end
+      raise ArgumentError, "Invalid Configuration: Missing Region"
       raise ArgumentError, 'No endpoint could be resolved'
 
     end

data/lib/aws-sdk-signer/endpoints.rb

@@ -53,6 +53,20 @@ module Aws::Signer
       end
     end
 
+    class GetRevocationStatus
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::Signer::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class GetSigningPlatform
       def self.build(context)
         unless context.config.regional_endpoint
@@ -207,6 +221,20 @@ module Aws::Signer
       end
     end
 
+    class SignPayload
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::Signer::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class StartSigningJob
       def self.build(context)
         unless context.config.regional_endpoint

data/lib/aws-sdk-signer/plugins/endpoints.rb

@@ -62,6 +62,8 @@ module Aws::Signer
             Aws::Signer::Endpoints::CancelSigningProfile.build(context)
           when :describe_signing_job
             Aws::Signer::Endpoints::DescribeSigningJob.build(context)
+          when :get_revocation_status
+            Aws::Signer::Endpoints::GetRevocationStatus.build(context)
           when :get_signing_platform
             Aws::Signer::Endpoints::GetSigningPlatform.build(context)
           when :get_signing_profile
@@ -84,6 +86,8 @@ module Aws::Signer
             Aws::Signer::Endpoints::RevokeSignature.build(context)
           when :revoke_signing_profile
             Aws::Signer::Endpoints::RevokeSigningProfile.build(context)
+          when :sign_payload
+            Aws::Signer::Endpoints::SignPayload.build(context)
           when :start_signing_job
             Aws::Signer::Endpoints::StartSigningJob.build(context)
           when :tag_resource

data/lib/aws-sdk-signer/types.rb

@@ -285,6 +285,57 @@ module Aws::Signer
       include Aws::Structure
     end
 
+    # @!attribute [rw] signature_timestamp
+    #   The timestamp of the signature that validates the profile or job.
+    #   @return [Time]
+    #
+    # @!attribute [rw] platform_id
+    #   The ID of a signing platform.
+    #   @return [String]
+    #
+    # @!attribute [rw] profile_version_arn
+    #   The version of a signing profile.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_arn
+    #   The ARN of a signing job.
+    #   @return [String]
+    #
+    # @!attribute [rw] certificate_hashes
+    #   A list of composite signed hashes that identify certificates.
+    #
+    #   A certificate identifier consists of a subject certificate TBS hash
+    #   (signed by the parent CA) combined with a parent CA TBS hash (signed
+    #   by the parent CA’s CA). Root certificates are defined as their own
+    #   CA.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/signer-2017-08-25/GetRevocationStatusRequest AWS API Documentation
+    #
+    class GetRevocationStatusRequest < Struct.new(
+      :signature_timestamp,
+      :platform_id,
+      :profile_version_arn,
+      :job_arn,
+      :certificate_hashes)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] revoked_entities
+    #   A list of revoked entities (including one or more of the signing
+    #   profile ARN, signing job ID, and certificate hash) supplied as input
+    #   to the API.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/signer-2017-08-25/GetRevocationStatusResponse AWS API Documentation
+    #
+    class GetRevocationStatusResponse < Struct.new(
+      :revoked_entities)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] platform_id
     #   The ID of the target signing platform.
     #   @return [String]
@@ -1048,6 +1099,62 @@ module Aws::Signer
       include Aws::Structure
     end
 
+    # @!attribute [rw] profile_name
+    #   The name of the signing profile.
+    #   @return [String]
+    #
+    # @!attribute [rw] profile_owner
+    #   The AWS account ID of the profile owner.
+    #   @return [String]
+    #
+    # @!attribute [rw] payload
+    #   Specifies the object digest (hash) to sign.
+    #   @return [String]
+    #
+    # @!attribute [rw] payload_format
+    #   Payload content type
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/signer-2017-08-25/SignPayloadRequest AWS API Documentation
+    #
+    class SignPayloadRequest < Struct.new(
+      :profile_name,
+      :profile_owner,
+      :payload,
+      :payload_format)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] job_id
+    #   Unique identifier of the signing job.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_owner
+    #   The AWS account ID of the job owner.
+    #   @return [String]
+    #
+    # @!attribute [rw] metadata
+    #   Information including the signing profile ARN and the signing job
+    #   ID. Clients use metadata to signature records, for example, as
+    #   annotations added to the signature manifest inside an OCI registry.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] signature
+    #   A cryptographic signature.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/signer-2017-08-25/SignPayloadResponse AWS API Documentation
+    #
+    class SignPayloadResponse < Struct.new(
+      :job_id,
+      :job_owner,
+      :metadata,
+      :signature)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The validity period for a signing job.
     #
     # @!attribute [rw] value
@@ -1269,7 +1376,7 @@ module Aws::Signer
     # that are used to perform a code signing job.
     #
     # @!attribute [rw] platform_id
-    #   The ID of a code signing; platform.
+    #   The ID of a code signing platform.
     #   @return [String]
     #
     # @!attribute [rw] display_name

data/lib/aws-sdk-signer.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-signer/customizations'
 # @!group service
 module Aws::Signer
 
-  GEM_VERSION = '1.40.0'
+  GEM_VERSION = '1.42.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-signer
 version: !ruby/object:Gem::Version
-  version: 1.40.0
+  version: 1.42.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-01-18 00:00:00.000000000 Z
+date: 2023-06-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.165.0
+        version: 3.174.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.165.0
+        version: 3.174.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement