@aws-sdk/client-iot 3.121.0 → 3.128.0

package/dist-types/IoT.d.ts

@@ -1806,21 +1806,18 @@ export declare class IoT extends IoTClient {
     putVerificationStateOnViolation(args: PutVerificationStateOnViolationCommandInput, cb: (err: any, data?: PutVerificationStateOnViolationCommandOutput) => void): void;
     putVerificationStateOnViolation(args: PutVerificationStateOnViolationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutVerificationStateOnViolationCommandOutput) => void): void;
     /**
-     * <p>Registers a CA certificate with IoT. This CA certificate can then be used to sign
-     *          device certificates, which can be then registered with IoT. You can register up to 10
-     *          CA certificates per Amazon Web Services account that have the same subject field. This enables you to have
-     *          up to 10 certificate authorities sign your device certificates. If you have more than one
-     *          CA certificate registered, make sure you pass the CA certificate when you register your
-     *          device certificates with the <a>RegisterCertificate</a> action.</p>
+     * <p>Registers a CA certificate with Amazon Web Services IoT Core. There is no limit to the number of CA
+     *          certificates you can register in your Amazon Web Services account. You can register up to 10 CA
+     *          certificates with the same <code>CA subject field</code> per Amazon Web Services account.</p>
      *          <p>Requires permission to access the <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions">RegisterCACertificate</a> action.</p>
      */
     registerCACertificate(args: RegisterCACertificateCommandInput, options?: __HttpHandlerOptions): Promise<RegisterCACertificateCommandOutput>;
     registerCACertificate(args: RegisterCACertificateCommandInput, cb: (err: any, data?: RegisterCACertificateCommandOutput) => void): void;
     registerCACertificate(args: RegisterCACertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RegisterCACertificateCommandOutput) => void): void;
     /**
-     * <p>Registers a device certificate with IoT. If you have more than one CA certificate
-     *          that has the same subject field, you must specify the CA certificate that was used to sign
-     *          the device certificate being registered.</p>
+     * <p>Registers a device certificate with IoT in the same <a href="https://docs.aws.amazon.com/iot/latest/apireference/API_CertificateDescription.html#iot-Type-CertificateDescription-certificateMode">certificate mode</a> as the signing CA. If you have more than one CA certificate that has the same subject field, you must
+     *          specify the CA certificate that was used to sign the device certificate being
+     *          registered.</p>
      *          <p>Requires permission to access the <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions">RegisterCertificate</a> action.</p>
      */
     registerCertificate(args: RegisterCertificateCommandInput, options?: __HttpHandlerOptions): Promise<RegisterCertificateCommandOutput>;

package/dist-types/commands/RegisterCACertificateCommand.d.ts

@@ -7,12 +7,9 @@ export interface RegisterCACertificateCommandInput extends RegisterCACertificate
 export interface RegisterCACertificateCommandOutput extends RegisterCACertificateResponse, __MetadataBearer {
 }
 /**
- * <p>Registers a CA certificate with IoT. This CA certificate can then be used to sign
- *          device certificates, which can be then registered with IoT. You can register up to 10
- *          CA certificates per Amazon Web Services account that have the same subject field. This enables you to have
- *          up to 10 certificate authorities sign your device certificates. If you have more than one
- *          CA certificate registered, make sure you pass the CA certificate when you register your
- *          device certificates with the <a>RegisterCertificate</a> action.</p>
+ * <p>Registers a CA certificate with Amazon Web Services IoT Core. There is no limit to the number of CA
+ *          certificates you can register in your Amazon Web Services account. You can register up to 10 CA
+ *          certificates with the same <code>CA subject field</code> per Amazon Web Services account.</p>
  *          <p>Requires permission to access the <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions">RegisterCACertificate</a> action.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/RegisterCertificateCommand.d.ts

@@ -7,9 +7,9 @@ export interface RegisterCertificateCommandInput extends RegisterCertificateRequ
 export interface RegisterCertificateCommandOutput extends RegisterCertificateResponse, __MetadataBearer {
 }
 /**
- * <p>Registers a device certificate with IoT. If you have more than one CA certificate
- *          that has the same subject field, you must specify the CA certificate that was used to sign
- *          the device certificate being registered.</p>
+ * <p>Registers a device certificate with IoT in the same <a href="https://docs.aws.amazon.com/iot/latest/apireference/API_CertificateDescription.html#iot-Type-CertificateDescription-certificateMode">certificate mode</a> as the signing CA. If you have more than one CA certificate that has the same subject field, you must
+ *          specify the CA certificate that was used to sign the device certificate being
+ *          registered.</p>
  *          <p>Requires permission to access the <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions">RegisterCertificate</a> action.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/models/models_0.d.ts

@@ -3675,6 +3675,10 @@ export interface PresignedUrlConfig {
     /**
      * <p>The ARN of an IAM role that grants grants permission to download files from the S3 bucket where the job
      *             data/updates are stored. The role must also grant permission for IoT to download the files.</p>
+     *         <important>
+     *             <p>For information about addressing the confused deputy problem, see <a href="https://docs.aws.amazon.com/iot/latest/developerguide/cross-service-confused-deputy-prevention.html">cross-service
+     *                 confused deputy prevention</a> in the <i>Amazon Web Services IoT Core developer guide</i>.</p>
+     *         </important>
      */
     roleArn?: string;
     /**

package/dist-types/models/models_1.d.ts

@@ -610,6 +610,10 @@ export declare namespace DescribeCACertificateRequest {
      */
     const filterSensitiveLog: (obj: DescribeCACertificateRequest) => any;
 }
+export declare enum CertificateMode {
+    DEFAULT = "DEFAULT",
+    SNI_ONLY = "SNI_ONLY"
+}
 export declare enum CACertificateStatus {
     ACTIVE = "ACTIVE",
     INACTIVE = "INACTIVE"
@@ -682,6 +686,12 @@ export interface CACertificateDescription {
      * <p>When the CA certificate is valid.</p>
      */
     validity?: CertificateValidity;
+    /**
+     * <p>The mode of the CA. </p>
+     *          <p>All the device certificates that are registered using this CA will be registered
+     *          in the same mode as the CA. For more information about certificate mode for device certificates, see <a href="https://docs.aws.amazon.com/iot/latest/apireference/API_CertificateDescription.html#iot-Type-CertificateDescription-certificateMode">certificate mode</a>.</p>
+     */
+    certificateMode?: CertificateMode | string;
 }
 export declare namespace CACertificateDescription {
     /**
@@ -743,10 +753,6 @@ export declare namespace DescribeCertificateRequest {
      */
     const filterSensitiveLog: (obj: DescribeCertificateRequest) => any;
 }
-export declare enum CertificateMode {
-    DEFAULT = "DEFAULT",
-    SNI_ONLY = "SNI_ONLY"
-}
 export declare enum CertificateStatus {
     ACTIVE = "ACTIVE",
     INACTIVE = "INACTIVE",
@@ -844,6 +850,17 @@ export interface CertificateDescription {
     validity?: CertificateValidity;
     /**
      * <p>The mode of the certificate.</p>
+     *          <p>
+     *             <code>DEFAULT</code>: A certificate in <code>DEFAULT</code> mode is either generated by
+     *          Amazon Web Services IoT Core or registered with an issuer certificate authority (CA) in <code>DEFAULT</code> mode. Devices with
+     *          certificates in <code>DEFAULT</code> mode aren't required to send the Server Name
+     *          Indication (SNI) extension when connecting to Amazon Web Services IoT Core. However, to use features such as
+     *          custom domains and VPC endpoints, we recommend that you use the SNI extension when
+     *          connecting to Amazon Web Services IoT Core.</p>
+     *          <p>
+     *             <code>SNI_ONLY</code>: A certificate in <code>SNI_ONLY</code> mode is registered without an issuer CA. Devices with certificates
+     *          in <code>SNI_ONLY</code> mode must send the SNI extension when connecting to Amazon Web Services IoT Core. </p>
+     *          <p>For more information about the value for SNI extension, see <a href="https://docs.aws.amazon.com/iot/latest/developerguide/transport-security.html">Transport security in IoT</a>.</p>
      */
     certificateMode?: CertificateMode | string;
 }
@@ -1710,6 +1727,11 @@ export interface Job {
      *         </note>
      */
     documentParameters?: Record<string, string>;
+    /**
+     * <p>Indicates whether a job is concurrent. Will be true when a job is
+     *             rolling out new job executions or canceling previously created executions,
+     *             otherwise false.</p>
+     */
     isConcurrent?: boolean;
 }
 export declare namespace Job {
@@ -4543,6 +4565,16 @@ export interface Certificate {
     status?: CertificateStatus | string;
     /**
      * <p>The mode of the certificate.</p>
+     *          <p>
+     *             <code>DEFAULT</code>: A certificate in <code>DEFAULT</code> mode is either generated by
+     *          Amazon Web Services IoT Core or registered with an issuer certificate authority (CA) in <code>DEFAULT</code> mode. Devices with
+     *          certificates in <code>DEFAULT</code> mode aren't required to send the Server Name
+     *          Indication (SNI) extension when connecting to Amazon Web Services IoT Core. However, to use features such as
+     *          custom domains and VPC endpoints, we recommend that you use the SNI extension when
+     *          connecting to Amazon Web Services IoT Core.</p>
+     *          <p>
+     *             <code>SNI_ONLY</code>: A certificate in <code>SNI_ONLY</code> mode is registered without an issuer CA. Devices with certificates
+     *          in <code>SNI_ONLY</code> mode must send the SNI extension when connecting to Amazon Web Services IoT Core. </p>
      */
     certificateMode?: CertificateMode | string;
     /**
@@ -5322,6 +5354,11 @@ export interface JobSummary {
      * <p>The time, in seconds since the epoch, when the job completed.</p>
      */
     completedAt?: Date;
+    /**
+     * <p>Indicates whether a job is concurrent. Will be true when a job is
+     *             rolling out new job executions or canceling previously created executions,
+     *             otherwise false.</p>
+     */
     isConcurrent?: boolean;
 }
 export declare namespace JobSummary {

package/dist-types/models/models_2.d.ts

@@ -1,7 +1,7 @@
 import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-client";
 import { IoTServiceException as __BaseException } from "./IoTServiceException";
 import { AbortConfig, AggregationType, AlertTarget, AttributePayload, AuditCheckConfiguration, AuditFrequency, AuditMitigationActionsTaskTarget, AuditNotificationTarget, AuthInfo, AuthorizerConfig, AuthorizerStatus, AuthResult, AutoRegistrationStatus, Behavior, BillingGroupProperties, CustomMetricType, DayOfWeek, DimensionType, FleetMetricUnit, JobExecutionsRetryConfig, JobExecutionsRolloutConfig, LogLevel, MetricToRetain, MetricValue, MitigationActionParams, PresignedUrlConfig, ProvisioningHook, ResourceIdentifier, StreamFile, Tag, ThingGroupProperties, ThingTypeProperties, TimeoutConfig, TopicRuleDestinationStatus, TopicRulePayload, VerificationState, ViolationEventAdditionalInfo } from "./models_0";
-import { BehaviorCriteriaType, CACertificateStatus, CertificateStatus, Configuration, DetectMitigationActionsTaskTarget, DomainConfigurationStatus, LogTargetType, RegistrationConfig, Status, ThingGroupIndexingConfiguration, ThingIndexingConfiguration, ThingTypeMetadata, ViolationEventOccurrenceRange } from "./models_1";
+import { BehaviorCriteriaType, CACertificateStatus, CertificateMode, CertificateStatus, Configuration, DetectMitigationActionsTaskTarget, DomainConfigurationStatus, LogTargetType, RegistrationConfig, Status, ThingGroupIndexingConfiguration, ThingIndexingConfiguration, ThingTypeMetadata, ViolationEventOccurrenceRange } from "./models_1";
 /**
  * <p>The input for the ListThingPrincipal operation.</p>
  */
@@ -844,9 +844,12 @@ export interface RegisterCACertificateRequest {
      */
     caCertificate: string | undefined;
     /**
-     * <p>The private key verification certificate.</p>
+     * <p>The private key verification certificate. If <code>certificateMode</code> is
+     *             <code>SNI_ONLY</code>, the <code>verificationCertificate</code> field must be empty. If
+     *             <code>certificateMode</code> is <code>DEFAULT</code> or not provided, the
+     *             <code>verificationCertificate</code> field must not be empty. </p>
      */
-    verificationCertificate: string | undefined;
+    verificationCertificate?: string;
     /**
      * <p>A boolean value that specifies if the CA certificate is set to active.</p>
      *          <p>Valid values: <code>ACTIVE | INACTIVE</code>
@@ -873,6 +876,18 @@ export interface RegisterCACertificateRequest {
      *          </note>
      */
     tags?: Tag[];
+    /**
+     * <p>Describes the certificate mode in which the Certificate Authority (CA) will be
+     *          registered. If the <code>verificationCertificate</code> field is not provided, set <code>certificateMode</code> to be <code>SNI_ONLY</code>.
+     *          If the <code>verificationCertificate</code> field is provided, set <code>certificateMode</code> to be <code>DEFAULT</code>.
+     *          When <code>certificateMode</code> is not provided, it defaults to <code>DEFAULT</code>.
+     *          All the device certificates that are registered using this CA will be registered in the same certificate mode as the CA.
+     *          For more information about certificate mode for device certificates, see
+     *          <a href="https://docs.aws.amazon.com/iot/latest/apireference/API_CertificateDescription.html#iot-Type-CertificateDescription-certificateMode">
+     *             certificate mode</a>.
+     *       </p>
+     */
+    certificateMode?: CertificateMode | string;
 }
 export declare namespace RegisterCACertificateRequest {
     /**
@@ -1159,7 +1174,8 @@ export interface SearchIndexRequest {
      */
     indexName?: string;
     /**
-     * <p>The search query string.</p>
+     * <p>The search query string. For more information about the search query syntax, see <a href="https://docs.aws.amazon.com/iot/latest/developerguide/query-syntax.html">Query
+     *       syntax</a>.</p>
      */
     queryString: string | undefined;
     /**

package/dist-types/ts3.4/models/models_1.d.ts

@@ -363,6 +363,10 @@ export declare namespace DescribeCACertificateRequest {
     
     const filterSensitiveLog: (obj: DescribeCACertificateRequest) => any;
 }
+export declare enum CertificateMode {
+    DEFAULT = "DEFAULT",
+    SNI_ONLY = "SNI_ONLY"
+}
 export declare enum CACertificateStatus {
     ACTIVE = "ACTIVE",
     INACTIVE = "INACTIVE"
@@ -402,6 +406,8 @@ export interface CACertificateDescription {
     generationId?: string;
     
     validity?: CertificateValidity;
+    
+    certificateMode?: CertificateMode | string;
 }
 export declare namespace CACertificateDescription {
     
@@ -438,10 +444,6 @@ export declare namespace DescribeCertificateRequest {
     
     const filterSensitiveLog: (obj: DescribeCertificateRequest) => any;
 }
-export declare enum CertificateMode {
-    DEFAULT = "DEFAULT",
-    SNI_ONLY = "SNI_ONLY"
-}
 export declare enum CertificateStatus {
     ACTIVE = "ACTIVE",
     INACTIVE = "INACTIVE",
@@ -927,6 +929,7 @@ export interface Job {
     jobExecutionsRetryConfig?: JobExecutionsRetryConfig;
     
     documentParameters?: Record<string, string>;
+    
     isConcurrent?: boolean;
 }
 export declare namespace Job {
@@ -2865,6 +2868,7 @@ export interface JobSummary {
     lastUpdatedAt?: Date;
     
     completedAt?: Date;
+    
     isConcurrent?: boolean;
 }
 export declare namespace JobSummary {

package/dist-types/ts3.4/models/models_2.d.ts

@@ -1,7 +1,7 @@
 import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-client";
 import { IoTServiceException as __BaseException } from "./IoTServiceException";
 import { AbortConfig, AggregationType, AlertTarget, AttributePayload, AuditCheckConfiguration, AuditFrequency, AuditMitigationActionsTaskTarget, AuditNotificationTarget, AuthInfo, AuthorizerConfig, AuthorizerStatus, AuthResult, AutoRegistrationStatus, Behavior, BillingGroupProperties, CustomMetricType, DayOfWeek, DimensionType, FleetMetricUnit, JobExecutionsRetryConfig, JobExecutionsRolloutConfig, LogLevel, MetricToRetain, MetricValue, MitigationActionParams, PresignedUrlConfig, ProvisioningHook, ResourceIdentifier, StreamFile, Tag, ThingGroupProperties, ThingTypeProperties, TimeoutConfig, TopicRuleDestinationStatus, TopicRulePayload, VerificationState, ViolationEventAdditionalInfo } from "./models_0";
-import { BehaviorCriteriaType, CACertificateStatus, CertificateStatus, Configuration, DetectMitigationActionsTaskTarget, DomainConfigurationStatus, LogTargetType, RegistrationConfig, Status, ThingGroupIndexingConfiguration, ThingIndexingConfiguration, ThingTypeMetadata, ViolationEventOccurrenceRange } from "./models_1";
+import { BehaviorCriteriaType, CACertificateStatus, CertificateMode, CertificateStatus, Configuration, DetectMitigationActionsTaskTarget, DomainConfigurationStatus, LogTargetType, RegistrationConfig, Status, ThingGroupIndexingConfiguration, ThingIndexingConfiguration, ThingTypeMetadata, ViolationEventOccurrenceRange } from "./models_1";
 
 export interface ListThingPrincipalsRequest {
     
@@ -451,7 +451,7 @@ export interface RegisterCACertificateRequest {
     
     caCertificate: string | undefined;
     
-    verificationCertificate: string | undefined;
+    verificationCertificate?: string;
     
     setAsActive?: boolean;
     
@@ -460,6 +460,8 @@ export interface RegisterCACertificateRequest {
     registrationConfig?: RegistrationConfig;
     
     tags?: Tag[];
+    
+    certificateMode?: CertificateMode | string;
 }
 export declare namespace RegisterCACertificateRequest {
     

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-iot",
   "description": "AWS SDK for JavaScript Iot Client for Node.js, Browser and React Native",
-  "version": "3.121.0",
+  "version": "3.128.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -18,35 +18,35 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "2.0.0",
     "@aws-crypto/sha256-js": "2.0.0",
-    "@aws-sdk/client-sts": "3.121.0",
-    "@aws-sdk/config-resolver": "3.110.0",
-    "@aws-sdk/credential-provider-node": "3.121.0",
-    "@aws-sdk/fetch-http-handler": "3.110.0",
-    "@aws-sdk/hash-node": "3.110.0",
-    "@aws-sdk/invalid-dependency": "3.110.0",
-    "@aws-sdk/middleware-content-length": "3.110.0",
-    "@aws-sdk/middleware-host-header": "3.110.0",
-    "@aws-sdk/middleware-logger": "3.110.0",
-    "@aws-sdk/middleware-recursion-detection": "3.110.0",
-    "@aws-sdk/middleware-retry": "3.118.1",
-    "@aws-sdk/middleware-serde": "3.110.0",
-    "@aws-sdk/middleware-signing": "3.110.0",
-    "@aws-sdk/middleware-stack": "3.110.0",
-    "@aws-sdk/middleware-user-agent": "3.110.0",
-    "@aws-sdk/node-config-provider": "3.110.0",
-    "@aws-sdk/node-http-handler": "3.118.1",
-    "@aws-sdk/protocol-http": "3.110.0",
-    "@aws-sdk/smithy-client": "3.110.0",
-    "@aws-sdk/types": "3.110.0",
-    "@aws-sdk/url-parser": "3.110.0",
+    "@aws-sdk/client-sts": "3.128.0",
+    "@aws-sdk/config-resolver": "3.128.0",
+    "@aws-sdk/credential-provider-node": "3.128.0",
+    "@aws-sdk/fetch-http-handler": "3.127.0",
+    "@aws-sdk/hash-node": "3.127.0",
+    "@aws-sdk/invalid-dependency": "3.127.0",
+    "@aws-sdk/middleware-content-length": "3.127.0",
+    "@aws-sdk/middleware-host-header": "3.127.0",
+    "@aws-sdk/middleware-logger": "3.127.0",
+    "@aws-sdk/middleware-recursion-detection": "3.127.0",
+    "@aws-sdk/middleware-retry": "3.127.0",
+    "@aws-sdk/middleware-serde": "3.127.0",
+    "@aws-sdk/middleware-signing": "3.128.0",
+    "@aws-sdk/middleware-stack": "3.127.0",
+    "@aws-sdk/middleware-user-agent": "3.127.0",
+    "@aws-sdk/node-config-provider": "3.127.0",
+    "@aws-sdk/node-http-handler": "3.127.0",
+    "@aws-sdk/protocol-http": "3.127.0",
+    "@aws-sdk/smithy-client": "3.127.0",
+    "@aws-sdk/types": "3.127.0",
+    "@aws-sdk/url-parser": "3.127.0",
     "@aws-sdk/util-base64-browser": "3.109.0",
     "@aws-sdk/util-base64-node": "3.55.0",
     "@aws-sdk/util-body-length-browser": "3.55.0",
     "@aws-sdk/util-body-length-node": "3.55.0",
-    "@aws-sdk/util-defaults-mode-browser": "3.110.0",
-    "@aws-sdk/util-defaults-mode-node": "3.110.0",
-    "@aws-sdk/util-user-agent-browser": "3.110.0",
-    "@aws-sdk/util-user-agent-node": "3.118.0",
+    "@aws-sdk/util-defaults-mode-browser": "3.127.0",
+    "@aws-sdk/util-defaults-mode-node": "3.128.0",
+    "@aws-sdk/util-user-agent-browser": "3.127.0",
+    "@aws-sdk/util-user-agent-node": "3.127.0",
     "@aws-sdk/util-utf8-browser": "3.109.0",
     "@aws-sdk/util-utf8-node": "3.109.0",
     "tslib": "^2.3.1",