@aws-sdk/client-acm-pca 3.1103.0 → 3.1105.0

package/dist-cjs/index.js

@@ -69,7 +69,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1102.0";
+var version = "3.1104.0";
 var packageInfo = {
 	version: version};
 
@@ -1495,10 +1495,13 @@ const SigningAlgorithm = {
     ML_DSA_87: "ML_DSA_87",
     SHA256WITHECDSA: "SHA256WITHECDSA",
     SHA256WITHRSA: "SHA256WITHRSA",
+    SHA256WITHRSA_PSS: "SHA256WITHRSA_PSS",
     SHA384WITHECDSA: "SHA384WITHECDSA",
     SHA384WITHRSA: "SHA384WITHRSA",
+    SHA384WITHRSA_PSS: "SHA384WITHRSA_PSS",
     SHA512WITHECDSA: "SHA512WITHECDSA",
     SHA512WITHRSA: "SHA512WITHRSA",
+    SHA512WITHRSA_PSS: "SHA512WITHRSA_PSS",
     SM3WITHSM2: "SM3WITHSM2",
 };
 const CertificateAuthorityType = {

package/dist-es/models/enums.js

@@ -21,10 +21,13 @@ export const SigningAlgorithm = {
     ML_DSA_87: "ML_DSA_87",
     SHA256WITHECDSA: "SHA256WITHECDSA",
     SHA256WITHRSA: "SHA256WITHRSA",
+    SHA256WITHRSA_PSS: "SHA256WITHRSA_PSS",
     SHA384WITHECDSA: "SHA384WITHECDSA",
     SHA384WITHRSA: "SHA384WITHRSA",
+    SHA384WITHRSA_PSS: "SHA384WITHRSA_PSS",
     SHA512WITHECDSA: "SHA512WITHECDSA",
     SHA512WITHRSA: "SHA512WITHRSA",
+    SHA512WITHRSA_PSS: "SHA512WITHRSA_PSS",
     SM3WITHSM2: "SM3WITHSM2",
 };
 export const CertificateAuthorityType = {

package/dist-types/commands/CreateCertificateAuthorityCommand.d.ts

@@ -36,7 +36,7 @@ declare const CreateCertificateAuthorityCommand_base: {
  * const input = { // CreateCertificateAuthorityRequest
  *   CertificateAuthorityConfiguration: { // CertificateAuthorityConfiguration
  *     KeyAlgorithm: "RSA_2048" || "RSA_3072" || "RSA_4096" || "EC_prime256v1" || "EC_secp384r1" || "EC_secp521r1" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87" || "SM2", // required
- *     SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required
+ *     SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SHA256WITHRSA_PSS" || "SHA384WITHRSA_PSS" || "SHA512WITHRSA_PSS" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required
  *     Subject: { // ASN1Subject
  *       Country: "STRING_VALUE",
  *       Organization: "STRING_VALUE",

package/dist-types/commands/DescribeCertificateAuthorityCommand.d.ts

@@ -52,7 +52,7 @@ declare const DescribeCertificateAuthorityCommand_base: {
  * //     FailureReason: "REQUEST_TIMED_OUT" || "UNSUPPORTED_ALGORITHM" || "OTHER",
  * //     CertificateAuthorityConfiguration: { // CertificateAuthorityConfiguration
  * //       KeyAlgorithm: "RSA_2048" || "RSA_3072" || "RSA_4096" || "EC_prime256v1" || "EC_secp384r1" || "EC_secp521r1" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87" || "SM2", // required
- * //       SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required
+ * //       SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SHA256WITHRSA_PSS" || "SHA384WITHRSA_PSS" || "SHA512WITHRSA_PSS" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required
  * //       Subject: { // ASN1Subject
  * //         Country: "STRING_VALUE",
  * //         Organization: "STRING_VALUE",

package/dist-types/commands/IssueCertificateCommand.d.ts

@@ -138,7 +138,7 @@ declare const IssueCertificateCommand_base: {
  *   },
  *   CertificateAuthorityArn: "STRING_VALUE", // required
  *   Csr: new Uint8Array(), // e.g. Buffer.from("") or new TextEncoder().encode("")   // required
- *   SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required
+ *   SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SHA256WITHRSA_PSS" || "SHA384WITHRSA_PSS" || "SHA512WITHRSA_PSS" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required
  *   TemplateArn: "STRING_VALUE",
  *   Validity: { // Validity
  *     Value: Number("long"), // required

package/dist-types/commands/ListCertificateAuthoritiesCommand.d.ts

@@ -56,7 +56,7 @@ declare const ListCertificateAuthoritiesCommand_base: {
  * //       FailureReason: "REQUEST_TIMED_OUT" || "UNSUPPORTED_ALGORITHM" || "OTHER",
  * //       CertificateAuthorityConfiguration: { // CertificateAuthorityConfiguration
  * //         KeyAlgorithm: "RSA_2048" || "RSA_3072" || "RSA_4096" || "EC_prime256v1" || "EC_secp384r1" || "EC_secp521r1" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87" || "SM2", // required
- * //         SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required
+ * //         SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SHA256WITHRSA_PSS" || "SHA384WITHRSA_PSS" || "SHA512WITHRSA_PSS" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required
  * //         Subject: { // ASN1Subject
  * //           Country: "STRING_VALUE",
  * //           Organization: "STRING_VALUE",

package/dist-types/models/enums.d.ts

@@ -41,10 +41,13 @@ export declare const SigningAlgorithm: {
     readonly ML_DSA_87: "ML_DSA_87";
     readonly SHA256WITHECDSA: "SHA256WITHECDSA";
     readonly SHA256WITHRSA: "SHA256WITHRSA";
+    readonly SHA256WITHRSA_PSS: "SHA256WITHRSA_PSS";
     readonly SHA384WITHECDSA: "SHA384WITHECDSA";
     readonly SHA384WITHRSA: "SHA384WITHRSA";
+    readonly SHA384WITHRSA_PSS: "SHA384WITHRSA_PSS";
     readonly SHA512WITHECDSA: "SHA512WITHECDSA";
     readonly SHA512WITHRSA: "SHA512WITHRSA";
+    readonly SHA512WITHRSA_PSS: "SHA512WITHRSA_PSS";
     readonly SM3WITHSM2: "SM3WITHSM2";
 };
 /**

package/dist-types/models/models_0.d.ts

@@ -284,7 +284,7 @@ export interface CertificateAuthorityConfiguration {
      */
     KeyAlgorithm: KeyAlgorithm | undefined;
     /**
-     * <p>Name of the algorithm your private CA uses to sign certificate requests.</p> <p>This parameter should not be confused with the <code>SigningAlgorithm</code> parameter used to sign certificates when they are issued.</p>
+     * <p>Name of the algorithm your private CA uses to sign certificate requests.</p> <p>This parameter should not be confused with the <code>SigningAlgorithm</code> parameter of the <code>IssueCertificate</code> API action, which is used to sign certificates when they are issued.</p>
      * @public
      */
     SigningAlgorithm: SigningAlgorithm | undefined;
@@ -305,7 +305,7 @@ export interface CertificateAuthorityConfiguration {
  */
 export interface CrlDistributionPointExtensionConfiguration {
     /**
-     * <p>Configures whether the CRL Distribution Point extension should be populated with the default URL to the CRL. If set to <code>true</code>, then the CDP extension will not be present in any certificates issued by that CA unless otherwise specified through CSR or API passthrough.</p> <note> <p>Only set this if you have another way to distribute the CRL Distribution Points ffor certificates issued by your CA, such as the Matter Distributed Compliance Ledger</p> <p>This configuration cannot be enabled with a custom CNAME set.</p> </note>
+     * <p>Configures whether the CRL Distribution Point extension should be populated with the default URL to the CRL. If set to <code>true</code>, then the CDP extension will not be present in any certificates issued by that CA unless otherwise specified through CSR or API passthrough.</p> <note> <p>Only set this if you have another way to distribute the CRL Distribution Points for certificates issued by your CA, such as the Matter Distributed Compliance Ledger</p> <p>This configuration cannot be enabled with a custom CNAME set.</p> </note>
      * @public
      */
     OmitExtension: boolean | undefined;
@@ -331,12 +331,12 @@ export interface CrlConfiguration {
      */
     CustomCname?: string | undefined;
     /**
-     * <p>Name of the S3 bucket that contains the CRL. If you do not provide a value for the <b>CustomCname</b> argument, the name of your S3 bucket is placed into the <b>CRL Distribution Points</b> extension of the issued certificate. You can change the name of your bucket by calling the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html">UpdateCertificateAuthority</a> operation. You must specify a <a href="https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-policies">bucket policy</a> that allows Amazon Web Services Private CA to write the CRL to your bucket.</p> <note> <p>The <code>S3BucketName</code> parameter must conform to the <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html">S3 bucket naming rules</a>.</p> </note>
+     * <p>Name of the S3 bucket that contains the CRL. If you do not provide a value for the <b>CustomCname</b> argument, the name of your S3 bucket is placed into the <b>CRL Distribution Points</b> extension of the issued certificate. You can change the name of your bucket by calling the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html">UpdateCertificateAuthority</a> operation. You must specify a <a href="https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html#s3-policies">bucket policy</a> that allows Amazon Web Services Private CA to write the CRL to your bucket.</p> <note> <p>The <code>S3BucketName</code> parameter must conform to the <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html">S3 bucket naming rules</a>.</p> </note>
      * @public
      */
     S3BucketName?: string | undefined;
     /**
-     * <p>Determines whether the CRL will be publicly readable or privately held in the CRL Amazon S3 bucket. If you choose PUBLIC_READ, the CRL will be accessible over the public internet. If you choose BUCKET_OWNER_FULL_CONTROL, only the owner of the CRL S3 bucket can access the CRL, and your PKI clients may need an alternative method of access. </p> <p>If no value is specified, the default is <code>PUBLIC_READ</code>.</p> <p> <i>Note:</i> This default can cause CA creation to fail in some circumstances. If you have have enabled the Block Public Access (BPA) feature in your S3 account, then you must specify the value of this parameter as <code>BUCKET_OWNER_FULL_CONTROL</code>, and not doing so results in an error. If you have disabled BPA in S3, then you can specify either <code>BUCKET_OWNER_FULL_CONTROL</code> or <code>PUBLIC_READ</code> as the value.</p> <p>For more information, see <a href="https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-bpa">Blocking public access to the S3 bucket</a>.</p>
+     * <p>Determines whether the CRL will be publicly readable or privately held in the CRL Amazon S3 bucket. If you choose PUBLIC_READ, the CRL will be accessible over the public internet. If you choose BUCKET_OWNER_FULL_CONTROL, only the owner of the CRL S3 bucket can access the CRL, and your PKI clients may need an alternative method of access. </p> <p>If no value is specified, the default is <code>PUBLIC_READ</code>.</p> <p> <i>Note:</i> This default can cause CA creation to fail in some circumstances. If you have have enabled the Block Public Access (BPA) feature in your S3 account, then you must specify the value of this parameter as <code>BUCKET_OWNER_FULL_CONTROL</code>, and not doing so results in an error. If you have disabled BPA in S3, then you can specify either <code>BUCKET_OWNER_FULL_CONTROL</code> or <code>PUBLIC_READ</code> as the value.</p> <p>For more information, see <a href="https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html#s3-bpa">Blocking public access to the S3 bucket</a>.</p>
      * @public
      */
     S3ObjectAcl?: S3ObjectAcl | undefined;
@@ -346,7 +346,7 @@ export interface CrlConfiguration {
      */
     CrlDistributionPointExtensionConfiguration?: CrlDistributionPointExtensionConfiguration | undefined;
     /**
-     * <p>Specifies whether to create a complete or partitioned CRL. This setting determines the maximum number of certificates that the certificate authority can issue and revoke. For more information, see <a href="privateca/latest/userguide/pca.html#limits_pca">Amazon Web Services Private CA quotas</a>.</p> <ul> <li> <p> <code>COMPLETE</code> - The default setting. Amazon Web Services Private CA maintains a single CRL file for all unexpired certificates issued by a CA that have been revoked for any reason. Each certificate that Amazon Web Services Private CA issues is bound to a specific CRL through its CRL distribution point (CDP) extension, defined in <a href="https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.9"> RFC 5280</a>.</p> </li> <li> <p> <code>PARTITIONED</code> - Compared to complete CRLs, partitioned CRLs dramatically increase the number of certificates your private CA can issue. </p> <important> <p> When using partitioned CRLs, you must validate that the CRL's associated issuing distribution point (IDP) URI matches the certificate's CDP URI to ensure the right CRL has been fetched. Amazon Web Services Private CA marks the IDP extension as critical, which your client must be able to process. </p> </important> </li> </ul>
+     * <p>Specifies whether to create a complete or partitioned CRL. This setting determines the maximum number of certificates that the certificate authority can issue and revoke. For more information, see <a href="https://docs.aws.amazon.com/general/latest/gr/pca.html#limits_pca">Amazon Web Services Private CA quotas</a>.</p> <ul> <li> <p> <code>COMPLETE</code> - The default setting. Amazon Web Services Private CA maintains a single CRL file for all unexpired certificates issued by a CA that have been revoked for any reason. Each certificate that Amazon Web Services Private CA issues is bound to a specific CRL through its CRL distribution point (CDP) extension, defined in <a href="https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.9"> RFC 5280</a>.</p> </li> <li> <p> <code>PARTITIONED</code> - Compared to complete CRLs, partitioned CRLs dramatically increase the number of certificates your private CA can issue. </p> <important> <p> When using partitioned CRLs, you must validate that the CRL's associated issuing distribution point (IDP) URI matches the certificate's CDP URI to ensure the right CRL has been fetched. Amazon Web Services Private CA marks the IDP extension as critical, which your client must be able to process. </p> </important> </li> </ul>
      * @public
      */
     CrlType?: CrlType | undefined;

package/dist-types/ts3.4/models/enums.d.ts

@@ -23,10 +23,13 @@ export declare const SigningAlgorithm: {
   readonly ML_DSA_87: "ML_DSA_87";
   readonly SHA256WITHECDSA: "SHA256WITHECDSA";
   readonly SHA256WITHRSA: "SHA256WITHRSA";
+  readonly SHA256WITHRSA_PSS: "SHA256WITHRSA_PSS";
   readonly SHA384WITHECDSA: "SHA384WITHECDSA";
   readonly SHA384WITHRSA: "SHA384WITHRSA";
+  readonly SHA384WITHRSA_PSS: "SHA384WITHRSA_PSS";
   readonly SHA512WITHECDSA: "SHA512WITHECDSA";
   readonly SHA512WITHRSA: "SHA512WITHRSA";
+  readonly SHA512WITHRSA_PSS: "SHA512WITHRSA_PSS";
   readonly SM3WITHSM2: "SM3WITHSM2";
 };
 export type SigningAlgorithm = (typeof SigningAlgorithm)[keyof typeof SigningAlgorithm];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-acm-pca",
-  "version": "3.1103.0",
+  "version": "3.1105.0",
   "description": "AWS SDK for JavaScript Acm Pca Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-acm-pca",
   "license": "Apache-2.0",