aws-sdk-sns 1.52.0 → 1.55.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fca122640e0496bbc1f8d429ac5add4dae109d7d1a69389d02f75038ae7dd475
-  data.tar.gz: 031475e1882e37917c18791ee95b3d410060734bd4887f7df00d859bfaef29f6
+  metadata.gz: 8c71df1b2aa3b87d7830d1f1f0da8d3f0e77cd4a47bfefcbd0103b5b6345a0e0
+  data.tar.gz: 94e9f8682965568bb34b3390edbda1e837169b7f8b7c71cc0ee5dc21697b734c
 SHA512:
-  metadata.gz: 4c3a1daca7a28e85aa9bcb6b8ea4d7a15c18a7da2837bbae18750f4d40494c6ff109bfada357f48f50245e8e33812f73835122ced71f0f8893f8b21f106d080a
-  data.tar.gz: 56e93fe8a8308906678f5b04918565e7cf7c8fe594f8cba85361843780c0cae43e5ccfe46a84a8df4a7300a59114d9a33916d69b13895e42f1afee4d1e1bed69
+  metadata.gz: 1748ac289a9df669017f6a77869f5cf04b5c5e91f4576d6519d0c24e5628b2be2e22f526df0f1337930a88e0ea783878bfaa5ed2a7f9ad07eaa8890a59617a12
+  data.tar.gz: '0994ffbc6518f135eeed5877540a3d30ddc42c9d4aef3f155780c22b3cecab8da234890882859f54624969aaab12d8aa84c63cddbee5158b71520f4eaf277d0e'

data/CHANGELOG.md

@@ -1,6 +1,21 @@
 Unreleased Changes
 ------------------
 
+1.55.0 (2022-09-07)
+------------------
+
+* Feature - Amazon SNS introduces the Data Protection Policy APIs, which enable customers to attach a data protection policy to an SNS topic. This allows topic owners to enable the new message data protection feature to audit and block sensitive data that is exchanged through their topics.
+
+1.54.0 (2022-08-22)
+------------------
+
+* Feature - Adding SHA256 message verification
+
+1.53.0 (2022-02-24)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.52.0 (2022-02-10)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.52.0
+1.55.0

data/lib/aws-sdk-sns/client.rb

@@ -27,6 +27,7 @@ require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
 require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
 require 'aws-sdk-core/plugins/transfer_encoding.rb'
 require 'aws-sdk-core/plugins/http_checksum.rb'
+require 'aws-sdk-core/plugins/checksum_algorithm.rb'
 require 'aws-sdk-core/plugins/defaults_mode.rb'
 require 'aws-sdk-core/plugins/recursion_detection.rb'
 require 'aws-sdk-core/plugins/signature_v4.rb'
@@ -75,6 +76,7 @@ module Aws::SNS
     add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
     add_plugin(Aws::Plugins::TransferEncoding)
     add_plugin(Aws::Plugins::HttpChecksum)
+    add_plugin(Aws::Plugins::ChecksumAlgorithm)
     add_plugin(Aws::Plugins::DefaultsMode)
     add_plugin(Aws::Plugins::RecursionDetection)
     add_plugin(Aws::Plugins::SignatureV4)
@@ -746,6 +748,15 @@ module Aws::SNS
     #
     #    </note>
     #
+    # @option params [String] :data_protection_policy
+    #   The body of the policy document you want to use for this topic.
+    #
+    #   You can only add one policy per topic.
+    #
+    #   The policy must be in JSON string format.
+    #
+    #   Length Constraints: Maximum length of 30,720.
+    #
     # @return [Types::CreateTopicResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateTopicResponse#topic_arn #topic_arn} => String
@@ -763,6 +774,7 @@ module Aws::SNS
     #         value: "TagValue", # required
     #       },
     #     ],
+    #     data_protection_policy: "attributeValue",
     #   })
     #
     # @example Response structure
@@ -900,6 +912,42 @@ module Aws::SNS
       req.send_request(options)
     end
 
+    # Retrieves the specified inline `DataProtectionPolicy` document that is
+    # stored in the specified Amazon SNS topic.
+    #
+    # @option params [required, String] :resource_arn
+    #   The ARN of the topic whose `DataProtectionPolicy` you want to get.
+    #
+    #   For more information about ARNs, see [Amazon Resource Names (ARNs)][1]
+    #   in the Amazon Web Services General Reference.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
+    #
+    # @return [Types::GetDataProtectionPolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetDataProtectionPolicyResponse#data_protection_policy #data_protection_policy} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_data_protection_policy({
+    #     resource_arn: "topicARN", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.data_protection_policy #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sns-2010-03-31/GetDataProtectionPolicy AWS API Documentation
+    #
+    # @overload get_data_protection_policy(params = {})
+    # @param [Hash] params ({})
+    def get_data_protection_policy(params = {}, options = {})
+      req = build_request(:get_data_protection_policy, params)
+      req.send_request(options)
+    end
+
     # Retrieves the endpoint attributes for a device on one of the supported
     # push notification services, such as GCM (Firebase Cloud Messaging) and
     # APNS. For more information, see [Using Amazon SNS Mobile Push
@@ -1834,6 +1882,45 @@ module Aws::SNS
       req.send_request(options)
     end
 
+    # Adds or updates an inline policy document that is stored in the
+    # specified Amazon SNS topic.
+    #
+    # @option params [required, String] :resource_arn
+    #   The ARN of the topic whose `DataProtectionPolicy` you want to add or
+    #   update.
+    #
+    #   For more information about ARNs, see [Amazon Resource Names (ARNs)][1]
+    #   in the Amazon Web Services General Reference.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
+    #
+    # @option params [required, String] :data_protection_policy
+    #   The JSON serialization of the topic's `DataProtectionPolicy`.
+    #
+    #   The `DataProtectionPolicy` must be in JSON string format.
+    #
+    #   Length Constraints: Maximum length of 30,720.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_data_protection_policy({
+    #     resource_arn: "topicARN", # required
+    #     data_protection_policy: "attributeValue", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sns-2010-03-31/PutDataProtectionPolicy AWS API Documentation
+    #
+    # @overload put_data_protection_policy(params = {})
+    # @param [Hash] params ({})
+    def put_data_protection_policy(params = {}, options = {})
+      req = build_request(:put_data_protection_policy, params)
+      req.send_request(options)
+    end
+
     # Removes a statement from a topic's access control policy.
     #
     # @option params [required, String] :topic_arn
@@ -2604,7 +2691,7 @@ module Aws::SNS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-sns'
-      context[:gem_version] = '1.52.0'
+      context[:gem_version] = '1.55.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sns/client_api.rb

@@ -45,6 +45,8 @@ module Aws::SNS
     Endpoint = Shapes::StructureShape.new(name: 'Endpoint')
     EndpointDisabledException = Shapes::StructureShape.new(name: 'EndpointDisabledException')
     FilterPolicyLimitExceededException = Shapes::StructureShape.new(name: 'FilterPolicyLimitExceededException')
+    GetDataProtectionPolicyInput = Shapes::StructureShape.new(name: 'GetDataProtectionPolicyInput')
+    GetDataProtectionPolicyResponse = Shapes::StructureShape.new(name: 'GetDataProtectionPolicyResponse')
     GetEndpointAttributesInput = Shapes::StructureShape.new(name: 'GetEndpointAttributesInput')
     GetEndpointAttributesResponse = Shapes::StructureShape.new(name: 'GetEndpointAttributesResponse')
     GetPlatformApplicationAttributesInput = Shapes::StructureShape.new(name: 'GetPlatformApplicationAttributesInput')
@@ -118,6 +120,7 @@ module Aws::SNS
     PublishBatchResultEntryList = Shapes::ListShape.new(name: 'PublishBatchResultEntryList')
     PublishInput = Shapes::StructureShape.new(name: 'PublishInput')
     PublishResponse = Shapes::StructureShape.new(name: 'PublishResponse')
+    PutDataProtectionPolicyInput = Shapes::StructureShape.new(name: 'PutDataProtectionPolicyInput')
     RemovePermissionInput = Shapes::StructureShape.new(name: 'RemovePermissionInput')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     RouteType = Shapes::StringShape.new(name: 'RouteType')
@@ -251,6 +254,7 @@ module Aws::SNS
     CreateTopicInput.add_member(:name, Shapes::ShapeRef.new(shape: topicName, required: true, location_name: "Name"))
     CreateTopicInput.add_member(:attributes, Shapes::ShapeRef.new(shape: TopicAttributesMap, location_name: "Attributes"))
     CreateTopicInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
+    CreateTopicInput.add_member(:data_protection_policy, Shapes::ShapeRef.new(shape: attributeValue, location_name: "DataProtectionPolicy"))
     CreateTopicInput.struct_class = Types::CreateTopicInput
 
     CreateTopicResponse.add_member(:topic_arn, Shapes::ShapeRef.new(shape: topicARN, location_name: "TopicArn"))
@@ -285,6 +289,12 @@ module Aws::SNS
     FilterPolicyLimitExceededException.add_member(:message, Shapes::ShapeRef.new(shape: string, location_name: "message"))
     FilterPolicyLimitExceededException.struct_class = Types::FilterPolicyLimitExceededException
 
+    GetDataProtectionPolicyInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: topicARN, required: true, location_name: "ResourceArn"))
+    GetDataProtectionPolicyInput.struct_class = Types::GetDataProtectionPolicyInput
+
+    GetDataProtectionPolicyResponse.add_member(:data_protection_policy, Shapes::ShapeRef.new(shape: attributeValue, location_name: "DataProtectionPolicy"))
+    GetDataProtectionPolicyResponse.struct_class = Types::GetDataProtectionPolicyResponse
+
     GetEndpointAttributesInput.add_member(:endpoint_arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "EndpointArn"))
     GetEndpointAttributesInput.struct_class = Types::GetEndpointAttributesInput
 
@@ -509,6 +519,10 @@ module Aws::SNS
     PublishResponse.add_member(:sequence_number, Shapes::ShapeRef.new(shape: String, location_name: "SequenceNumber"))
     PublishResponse.struct_class = Types::PublishResponse
 
+    PutDataProtectionPolicyInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: topicARN, required: true, location_name: "ResourceArn"))
+    PutDataProtectionPolicyInput.add_member(:data_protection_policy, Shapes::ShapeRef.new(shape: attributeValue, required: true, location_name: "DataProtectionPolicy"))
+    PutDataProtectionPolicyInput.struct_class = Types::PutDataProtectionPolicyInput
+
     RemovePermissionInput.add_member(:topic_arn, Shapes::ShapeRef.new(shape: topicARN, required: true, location_name: "TopicArn"))
     RemovePermissionInput.add_member(:label, Shapes::ShapeRef.new(shape: label, required: true, location_name: "Label"))
     RemovePermissionInput.struct_class = Types::RemovePermissionInput
@@ -796,6 +810,19 @@ module Aws::SNS
         o.errors << Shapes::ShapeRef.new(shape: ConcurrentAccessException)
       end)
 
+      api.add_operation(:get_data_protection_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetDataProtectionPolicy"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetDataProtectionPolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: GetDataProtectionPolicyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalErrorException)
+        o.errors << Shapes::ShapeRef.new(shape: NotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: AuthorizationErrorException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidSecurityException)
+      end)
+
       api.add_operation(:get_endpoint_attributes, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetEndpointAttributes"
         o.http_method = "POST"
@@ -1050,6 +1077,7 @@ module Aws::SNS
         o.errors << Shapes::ShapeRef.new(shape: KMSThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: KMSAccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidSecurityException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
       end)
 
       api.add_operation(:publish_batch, Seahorse::Model::Operation.new.tap do |o|
@@ -1077,6 +1105,20 @@ module Aws::SNS
         o.errors << Shapes::ShapeRef.new(shape: KMSThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: KMSAccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidSecurityException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+      end)
+
+      api.add_operation(:put_data_protection_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "PutDataProtectionPolicy"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: PutDataProtectionPolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: Shapes::StructureShape.new(struct_class: Aws::EmptyStructure))
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalErrorException)
+        o.errors << Shapes::ShapeRef.new(shape: NotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: AuthorizationErrorException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidSecurityException)
       end)
 
       api.add_operation(:remove_permission, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-sns/message_verifier.rb

@@ -65,11 +65,15 @@ module Aws
       def authenticate!(message_body)
         msg = Json.load(message_body)
         msg = convert_lambda_msg(msg) if is_from_lambda(msg)
-        if public_key(msg).verify(sha1, signature(msg), canonical_string(msg))
-          true
+
+        case msg['SignatureVersion']
+        when '1'
+          verify!(msg, sha1)
+        when '2'
+          verify!(msg, sha256)
         else
-          msg = 'the authenticity of the message cannot be verified'
-          raise VerificationError, msg
+          error_msg = 'Invalid SignatureVersion'
+          raise VerificationError, error_msg
         end
       end
 
@@ -88,10 +92,23 @@ module Aws
         message
       end
 
+      def verify!(msg, hash_alg)
+        if public_key(msg).verify(hash_alg, signature(msg), canonical_string(msg))
+          true
+        else
+          msg = 'the authenticity of the message cannot be verified'
+          raise VerificationError, msg
+        end
+      end
+
       def sha1
         OpenSSL::Digest::SHA1.new
       end
 
+      def sha256
+        OpenSSL::Digest::SHA256.new
+      end
+
       def signature(message)
         Base64.decode64(message['Signature'])
       end

data/lib/aws-sdk-sns/resource.rb

@@ -81,6 +81,7 @@ module Aws::SNS
     #         value: "TagValue", # required
     #       },
     #     ],
+    #     data_protection_policy: "attributeValue",
     #   })
     # @param [Hash] options ({})
     # @option options [required, String] :name
@@ -152,6 +153,14 @@ module Aws::SNS
     #   `sns:CreateTopic` and `sns:TagResource` permissions.
     #
     #    </note>
+    # @option options [String] :data_protection_policy
+    #   The body of the policy document you want to use for this topic.
+    #
+    #   You can only add one policy per topic.
+    #
+    #   The policy must be in JSON string format.
+    #
+    #   Length Constraints: Maximum length of 30,720.
     # @return [Topic]
     def create_topic(options = {})
       resp = @client.create_topic(options)

data/lib/aws-sdk-sns/types.rb

@@ -401,6 +401,7 @@ module Aws::SNS
     #             value: "TagValue", # required
     #           },
     #         ],
+    #         data_protection_policy: "attributeValue",
     #       }
     #
     # @!attribute [rw] name
@@ -481,12 +482,23 @@ module Aws::SNS
     #    </note>
     #   @return [Array<Types::Tag>]
     #
+    # @!attribute [rw] data_protection_policy
+    #   The body of the policy document you want to use for this topic.
+    #
+    #   You can only add one policy per topic.
+    #
+    #   The policy must be in JSON string format.
+    #
+    #   Length Constraints: Maximum length of 30,720.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sns-2010-03-31/CreateTopicInput AWS API Documentation
     #
     class CreateTopicInput < Struct.new(
       :name,
       :attributes,
-      :tags)
+      :tags,
+      :data_protection_policy)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -651,6 +663,44 @@ module Aws::SNS
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetDataProtectionPolicyInput
+    #   data as a hash:
+    #
+    #       {
+    #         resource_arn: "topicARN", # required
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The ARN of the topic whose `DataProtectionPolicy` you want to get.
+    #
+    #   For more information about ARNs, see [Amazon Resource Names
+    #   (ARNs)][1] in the Amazon Web Services General Reference.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sns-2010-03-31/GetDataProtectionPolicyInput AWS API Documentation
+    #
+    class GetDataProtectionPolicyInput < Struct.new(
+      :resource_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] data_protection_policy
+    #   Retrieves the `DataProtectionPolicy` in JSON string format.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sns-2010-03-31/GetDataProtectionPolicyResponse AWS API Documentation
+    #
+    class GetDataProtectionPolicyResponse < Struct.new(
+      :data_protection_policy)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Input for GetEndpointAttributes action.
     #
     # @note When making an API call, you may pass GetEndpointAttributesInput
@@ -2227,6 +2277,43 @@ module Aws::SNS
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass PutDataProtectionPolicyInput
+    #   data as a hash:
+    #
+    #       {
+    #         resource_arn: "topicARN", # required
+    #         data_protection_policy: "attributeValue", # required
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The ARN of the topic whose `DataProtectionPolicy` you want to add or
+    #   update.
+    #
+    #   For more information about ARNs, see [Amazon Resource Names
+    #   (ARNs)][1] in the Amazon Web Services General Reference.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
+    #   @return [String]
+    #
+    # @!attribute [rw] data_protection_policy
+    #   The JSON serialization of the topic's `DataProtectionPolicy`.
+    #
+    #   The `DataProtectionPolicy` must be in JSON string format.
+    #
+    #   Length Constraints: Maximum length of 30,720.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sns-2010-03-31/PutDataProtectionPolicyInput AWS API Documentation
+    #
+    class PutDataProtectionPolicyInput < Struct.new(
+      :resource_arn,
+      :data_protection_policy)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Input for RemovePermission action.
     #
     # @note When making an API call, you may pass RemovePermissionInput

data/lib/aws-sdk-sns.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-sns/customizations'
 # @!group service
 module Aws::SNS
 
-  GEM_VERSION = '1.52.0'
+  GEM_VERSION = '1.55.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-sns
 version: !ruby/object:Gem::Version
-  version: 1.52.0
+  version: 1.55.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-02-10 00:00:00.000000000 Z
+date: 2022-09-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.126.0
+        version: 3.127.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.126.0
+        version: 3.127.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement