@aws-sdk/client-signer 3.450.0 → 3.451.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +11 -8
- package/dist-types/Signer.d.ts +11 -8
- package/dist-types/SignerClient.d.ts +11 -8
- package/dist-types/commands/GetRevocationStatusCommand.d.ts +2 -3
- package/dist-types/commands/ListSigningJobsCommand.d.ts +4 -4
- package/dist-types/commands/ListSigningPlatformsCommand.d.ts +5 -5
- package/dist-types/commands/ListSigningProfilesCommand.d.ts +5 -5
- package/dist-types/commands/PutSigningProfileCommand.d.ts +1 -1
- package/dist-types/commands/SignPayloadCommand.d.ts +1 -2
- package/dist-types/commands/StartSigningJobCommand.d.ts +3 -4
- package/dist-types/index.d.ts +11 -8
- package/dist-types/models/models_0.d.ts +62 -44
- package/package.json +36 -36
package/README.md
CHANGED
|
@@ -6,20 +6,23 @@
|
|
|
6
6
|
|
|
7
7
|
AWS SDK for JavaScript Signer Client for Node.js, Browser and React Native.
|
|
8
8
|
|
|
9
|
-
<p>AWS Signer is a fully managed code
|
|
9
|
+
<p>AWS Signer is a fully managed code-signing service to help you ensure the trust and
|
|
10
10
|
integrity of your code. </p>
|
|
11
|
-
<p>
|
|
11
|
+
<p>Signer supports the following applications:</p>
|
|
12
12
|
<p>With code signing for AWS Lambda, you can sign <a href="http://docs.aws.amazon.com/lambda/latest/dg/">AWS
|
|
13
13
|
Lambda</a> deployment packages. Integrated support is provided for <a href="http://docs.aws.amazon.com/AmazonS3/latest/gsg/">Amazon S3</a>, <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/">Amazon
|
|
14
14
|
CloudWatch</a>, and <a href="http://docs.aws.amazon.com/awscloudtrail/latest/userguide/">AWS CloudTrail</a>. In order
|
|
15
|
-
to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
16
|
-
in S3. </p>
|
|
15
|
+
to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
16
|
+
files in S3. </p>
|
|
17
17
|
<p>With code signing for IoT, you can sign code for any IoT device that is supported by AWS.
|
|
18
|
-
IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code
|
|
18
|
+
IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code-signing
|
|
19
19
|
certificate using ACM, and use that to sign updates in Amazon FreeRTOS and AWS IoT Device Management. </p>
|
|
20
|
-
<p>With
|
|
21
|
-
|
|
22
|
-
|
|
20
|
+
<p>With Signer and the Notation CLI from the <a href="https://notaryproject.dev/">Notary
|
|
21
|
+
Project</a>, you can sign container images stored in a container registry such
|
|
22
|
+
as Amazon Elastic Container Registry (ECR). The signatures are stored in the registry
|
|
23
|
+
alongside the images, where they are available for verifying image authenticity and
|
|
24
|
+
integrity.</p>
|
|
25
|
+
<p>For more information about Signer, see the <a href="https://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html">AWS Signer Developer
|
|
23
26
|
Guide</a>.</p>
|
|
24
27
|
|
|
25
28
|
## Installing
|
package/dist-types/Signer.d.ts
CHANGED
|
@@ -137,20 +137,23 @@ export interface Signer {
|
|
|
137
137
|
}
|
|
138
138
|
/**
|
|
139
139
|
* @public
|
|
140
|
-
* <p>AWS Signer is a fully managed code
|
|
140
|
+
* <p>AWS Signer is a fully managed code-signing service to help you ensure the trust and
|
|
141
141
|
* integrity of your code. </p>
|
|
142
|
-
* <p>
|
|
142
|
+
* <p>Signer supports the following applications:</p>
|
|
143
143
|
* <p>With code signing for AWS Lambda, you can sign <a href="http://docs.aws.amazon.com/lambda/latest/dg/">AWS
|
|
144
144
|
* Lambda</a> deployment packages. Integrated support is provided for <a href="http://docs.aws.amazon.com/AmazonS3/latest/gsg/">Amazon S3</a>, <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/">Amazon
|
|
145
145
|
* CloudWatch</a>, and <a href="http://docs.aws.amazon.com/awscloudtrail/latest/userguide/">AWS CloudTrail</a>. In order
|
|
146
|
-
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
147
|
-
* in S3. </p>
|
|
146
|
+
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
147
|
+
* files in S3. </p>
|
|
148
148
|
* <p>With code signing for IoT, you can sign code for any IoT device that is supported by AWS.
|
|
149
|
-
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code
|
|
149
|
+
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code-signing
|
|
150
150
|
* certificate using ACM, and use that to sign updates in Amazon FreeRTOS and AWS IoT Device Management. </p>
|
|
151
|
-
* <p>With
|
|
152
|
-
*
|
|
153
|
-
*
|
|
151
|
+
* <p>With Signer and the Notation CLI from the <a href="https://notaryproject.dev/">Notary
|
|
152
|
+
* Project</a>, you can sign container images stored in a container registry such
|
|
153
|
+
* as Amazon Elastic Container Registry (ECR). The signatures are stored in the registry
|
|
154
|
+
* alongside the images, where they are available for verifying image authenticity and
|
|
155
|
+
* integrity.</p>
|
|
156
|
+
* <p>For more information about Signer, see the <a href="https://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html">AWS Signer Developer
|
|
154
157
|
* Guide</a>.</p>
|
|
155
158
|
*/
|
|
156
159
|
export declare class Signer extends SignerClient implements Signer {
|
|
@@ -171,20 +171,23 @@ export interface SignerClientResolvedConfig extends SignerClientResolvedConfigTy
|
|
|
171
171
|
}
|
|
172
172
|
/**
|
|
173
173
|
* @public
|
|
174
|
-
* <p>AWS Signer is a fully managed code
|
|
174
|
+
* <p>AWS Signer is a fully managed code-signing service to help you ensure the trust and
|
|
175
175
|
* integrity of your code. </p>
|
|
176
|
-
* <p>
|
|
176
|
+
* <p>Signer supports the following applications:</p>
|
|
177
177
|
* <p>With code signing for AWS Lambda, you can sign <a href="http://docs.aws.amazon.com/lambda/latest/dg/">AWS
|
|
178
178
|
* Lambda</a> deployment packages. Integrated support is provided for <a href="http://docs.aws.amazon.com/AmazonS3/latest/gsg/">Amazon S3</a>, <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/">Amazon
|
|
179
179
|
* CloudWatch</a>, and <a href="http://docs.aws.amazon.com/awscloudtrail/latest/userguide/">AWS CloudTrail</a>. In order
|
|
180
|
-
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
181
|
-
* in S3. </p>
|
|
180
|
+
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
181
|
+
* files in S3. </p>
|
|
182
182
|
* <p>With code signing for IoT, you can sign code for any IoT device that is supported by AWS.
|
|
183
|
-
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code
|
|
183
|
+
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code-signing
|
|
184
184
|
* certificate using ACM, and use that to sign updates in Amazon FreeRTOS and AWS IoT Device Management. </p>
|
|
185
|
-
* <p>With
|
|
186
|
-
*
|
|
187
|
-
*
|
|
185
|
+
* <p>With Signer and the Notation CLI from the <a href="https://notaryproject.dev/">Notary
|
|
186
|
+
* Project</a>, you can sign container images stored in a container registry such
|
|
187
|
+
* as Amazon Elastic Container Registry (ECR). The signatures are stored in the registry
|
|
188
|
+
* alongside the images, where they are available for verifying image authenticity and
|
|
189
|
+
* integrity.</p>
|
|
190
|
+
* <p>For more information about Signer, see the <a href="https://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html">AWS Signer Developer
|
|
188
191
|
* Guide</a>.</p>
|
|
189
192
|
*/
|
|
190
193
|
export declare class SignerClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, SignerClientResolvedConfig> {
|
|
@@ -23,9 +23,8 @@ export interface GetRevocationStatusCommandOutput extends GetRevocationStatusRes
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Retrieves the
|
|
27
|
-
*
|
|
28
|
-
* certificate.</p>
|
|
26
|
+
* <p>Retrieves the revocation status of one or more of the signing profile, signing job,
|
|
27
|
+
* and signing certificate.</p>
|
|
29
28
|
* @example
|
|
30
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
31
30
|
* ```javascript
|
|
@@ -23,12 +23,12 @@ export interface ListSigningJobsCommandOutput extends ListSigningJobsResponse, _
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Lists all your signing jobs. You can use the <code>maxResults</code> parameter to
|
|
27
|
-
*
|
|
28
|
-
*
|
|
26
|
+
* <p>Lists all your signing jobs. You can use the <code>maxResults</code> parameter to limit the
|
|
27
|
+
* number of signing jobs that are returned in the response. If additional jobs remain to
|
|
28
|
+
* be listed, AWS Signer returns a <code>nextToken</code> value. Use this value in
|
|
29
29
|
* subsequent calls to <code>ListSigningJobs</code> to fetch the remaining values. You can
|
|
30
30
|
* continue calling <code>ListSigningJobs</code> with your <code>maxResults</code>
|
|
31
|
-
* parameter and with new values that
|
|
31
|
+
* parameter and with new values that Signer returns in the <code>nextToken</code>
|
|
32
32
|
* parameter until all of your signing jobs have been returned. </p>
|
|
33
33
|
* @example
|
|
34
34
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -23,11 +23,11 @@ export interface ListSigningPlatformsCommandOutput extends ListSigningPlatformsR
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Lists all signing platforms available in
|
|
27
|
-
* additional jobs remain to be listed,
|
|
28
|
-
* this value in subsequent calls to <code>ListSigningJobs</code> to fetch the
|
|
29
|
-
* values. You can continue calling <code>ListSigningJobs</code> with your
|
|
30
|
-
* <code>maxResults</code> parameter and with new values that
|
|
26
|
+
* <p>Lists all signing platforms available in AWS Signer that match the request parameters. If
|
|
27
|
+
* additional jobs remain to be listed, Signer returns a <code>nextToken</code> value.
|
|
28
|
+
* Use this value in subsequent calls to <code>ListSigningJobs</code> to fetch the
|
|
29
|
+
* remaining values. You can continue calling <code>ListSigningJobs</code> with your
|
|
30
|
+
* <code>maxResults</code> parameter and with new values that Signer returns in the
|
|
31
31
|
* <code>nextToken</code> parameter until all of your signing jobs have been
|
|
32
32
|
* returned.</p>
|
|
33
33
|
* @example
|
|
@@ -23,14 +23,14 @@ export interface ListSigningProfilesCommandOutput extends ListSigningProfilesRes
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Lists all available signing profiles in your AWS account. Returns only profiles with
|
|
27
|
-
*
|
|
28
|
-
* set to <code>true</code>. If additional jobs remain to be listed,
|
|
26
|
+
* <p>Lists all available signing profiles in your AWS account. Returns only profiles with an
|
|
27
|
+
* <code>ACTIVE</code> status unless the <code>includeCanceled</code> request field is
|
|
28
|
+
* set to <code>true</code>. If additional jobs remain to be listed, AWS Signer returns a
|
|
29
29
|
* <code>nextToken</code> value. Use this value in subsequent calls to
|
|
30
30
|
* <code>ListSigningJobs</code> to fetch the remaining values. You can continue calling
|
|
31
31
|
* <code>ListSigningJobs</code> with your <code>maxResults</code> parameter and with
|
|
32
|
-
* new values that
|
|
33
|
-
* signing jobs have been returned.</p>
|
|
32
|
+
* new values that Signer returns in the <code>nextToken</code> parameter until all of
|
|
33
|
+
* your signing jobs have been returned.</p>
|
|
34
34
|
* @example
|
|
35
35
|
* Use a bare-bones client and the command you need to make an API call.
|
|
36
36
|
* ```javascript
|
|
@@ -23,7 +23,7 @@ export interface PutSigningProfileCommandOutput extends PutSigningProfileRespons
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Creates a signing profile. A signing profile is a code
|
|
26
|
+
* <p>Creates a signing profile. A signing profile is a code-signing template that can be used to
|
|
27
27
|
* carry out a pre-defined signing job.
|
|
28
28
|
* </p>
|
|
29
29
|
* @example
|
|
@@ -23,8 +23,7 @@ export interface SignPayloadCommandOutput extends SignPayloadResponse, __Metadat
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Signs a binary
|
|
27
|
-
* payload and returns a signature envelope.</p>
|
|
26
|
+
* <p>Signs a binary payload and returns a signature envelope.</p>
|
|
28
27
|
* @example
|
|
29
28
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
29
|
* ```javascript
|
|
@@ -35,16 +35,15 @@ export interface StartSigningJobCommandOutput extends StartSigningJobResponse, _
|
|
|
35
35
|
* <p>Your S3 source bucket must be version enabled.</p>
|
|
36
36
|
* </li>
|
|
37
37
|
* <li>
|
|
38
|
-
* <p>You must create an S3 destination bucket.
|
|
39
|
-
*
|
|
38
|
+
* <p>You must create an S3 destination bucket. AWS Signer uses your S3 destination bucket to
|
|
39
|
+
* write your signed code.</p>
|
|
40
40
|
* </li>
|
|
41
41
|
* <li>
|
|
42
42
|
* <p>You specify the name of the source and destination buckets when calling the
|
|
43
43
|
* <code>StartSigningJob</code> operation.</p>
|
|
44
44
|
* </li>
|
|
45
45
|
* <li>
|
|
46
|
-
* <p>You must also specify a request token that identifies your request to
|
|
47
|
-
* code signing.</p>
|
|
46
|
+
* <p>You must also specify a request token that identifies your request to Signer.</p>
|
|
48
47
|
* </li>
|
|
49
48
|
* </ul>
|
|
50
49
|
* <p>You can call the <a>DescribeSigningJob</a> and the <a>ListSigningJobs</a> actions after you call
|
package/dist-types/index.d.ts
CHANGED
|
@@ -1,18 +1,21 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* <p>AWS Signer is a fully managed code
|
|
2
|
+
* <p>AWS Signer is a fully managed code-signing service to help you ensure the trust and
|
|
3
3
|
* integrity of your code. </p>
|
|
4
|
-
* <p>
|
|
4
|
+
* <p>Signer supports the following applications:</p>
|
|
5
5
|
* <p>With code signing for AWS Lambda, you can sign <a href="http://docs.aws.amazon.com/lambda/latest/dg/">AWS
|
|
6
6
|
* Lambda</a> deployment packages. Integrated support is provided for <a href="http://docs.aws.amazon.com/AmazonS3/latest/gsg/">Amazon S3</a>, <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/">Amazon
|
|
7
7
|
* CloudWatch</a>, and <a href="http://docs.aws.amazon.com/awscloudtrail/latest/userguide/">AWS CloudTrail</a>. In order
|
|
8
|
-
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
9
|
-
* in S3. </p>
|
|
8
|
+
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
9
|
+
* files in S3. </p>
|
|
10
10
|
* <p>With code signing for IoT, you can sign code for any IoT device that is supported by AWS.
|
|
11
|
-
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code
|
|
11
|
+
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code-signing
|
|
12
12
|
* certificate using ACM, and use that to sign updates in Amazon FreeRTOS and AWS IoT Device Management. </p>
|
|
13
|
-
* <p>With
|
|
14
|
-
*
|
|
15
|
-
*
|
|
13
|
+
* <p>With Signer and the Notation CLI from the <a href="https://notaryproject.dev/">Notary
|
|
14
|
+
* Project</a>, you can sign container images stored in a container registry such
|
|
15
|
+
* as Amazon Elastic Container Registry (ECR). The signatures are stored in the registry
|
|
16
|
+
* alongside the images, where they are available for verifying image authenticity and
|
|
17
|
+
* integrity.</p>
|
|
18
|
+
* <p>For more information about Signer, see the <a href="https://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html">AWS Signer Developer
|
|
16
19
|
* Guide</a>.</p>
|
|
17
20
|
*
|
|
18
21
|
* @packageDocumentation
|
|
@@ -34,8 +34,8 @@ export interface AddProfilePermissionRequest {
|
|
|
34
34
|
action: string | undefined;
|
|
35
35
|
/**
|
|
36
36
|
* @public
|
|
37
|
-
* <p>The AWS principal receiving cross-account permissions. This may be an IAM role or
|
|
38
|
-
*
|
|
37
|
+
* <p>The AWS principal receiving cross-account permissions. This may be an IAM role or another
|
|
38
|
+
* AWS account ID.</p>
|
|
39
39
|
*/
|
|
40
40
|
principal: string | undefined;
|
|
41
41
|
/**
|
|
@@ -215,13 +215,13 @@ export type HashAlgorithm = (typeof HashAlgorithm)[keyof typeof HashAlgorithm];
|
|
|
215
215
|
export interface SigningConfigurationOverrides {
|
|
216
216
|
/**
|
|
217
217
|
* @public
|
|
218
|
-
* <p>A specified override of the default encryption algorithm that is used in a code
|
|
218
|
+
* <p>A specified override of the default encryption algorithm that is used in a code-signing
|
|
219
219
|
* job.</p>
|
|
220
220
|
*/
|
|
221
221
|
encryptionAlgorithm?: EncryptionAlgorithm;
|
|
222
222
|
/**
|
|
223
223
|
* @public
|
|
224
|
-
* <p>A specified override of the default hash algorithm that is used in a code
|
|
224
|
+
* <p>A specified override of the default hash algorithm that is used in a code-signing
|
|
225
225
|
* job.</p>
|
|
226
226
|
*/
|
|
227
227
|
hashAlgorithm?: HashAlgorithm;
|
|
@@ -241,8 +241,7 @@ export declare const ImageFormat: {
|
|
|
241
241
|
export type ImageFormat = (typeof ImageFormat)[keyof typeof ImageFormat];
|
|
242
242
|
/**
|
|
243
243
|
* @public
|
|
244
|
-
* <p>Any overrides that are applied to the signing configuration of a
|
|
245
|
-
* platform.</p>
|
|
244
|
+
* <p>Any overrides that are applied to the signing configuration of a signing platform.</p>
|
|
246
245
|
*/
|
|
247
246
|
export interface SigningPlatformOverrides {
|
|
248
247
|
/**
|
|
@@ -285,7 +284,7 @@ export interface SigningJobRevocationRecord {
|
|
|
285
284
|
}
|
|
286
285
|
/**
|
|
287
286
|
* @public
|
|
288
|
-
* <p>The S3 bucket name and key where
|
|
287
|
+
* <p>The Amazon S3 bucket name and key where Signer saved your signed code image.</p>
|
|
289
288
|
*/
|
|
290
289
|
export interface S3SignedObject {
|
|
291
290
|
/**
|
|
@@ -325,7 +324,7 @@ export interface SigningMaterial {
|
|
|
325
324
|
}
|
|
326
325
|
/**
|
|
327
326
|
* @public
|
|
328
|
-
* <p>Information about the S3 bucket where you saved your unsigned code.</p>
|
|
327
|
+
* <p>Information about the Amazon S3 bucket where you saved your unsigned code.</p>
|
|
329
328
|
*/
|
|
330
329
|
export interface S3Source {
|
|
331
330
|
/**
|
|
@@ -458,7 +457,7 @@ export interface DescribeSigningJobResponse {
|
|
|
458
457
|
revocationRecord?: SigningJobRevocationRecord;
|
|
459
458
|
/**
|
|
460
459
|
* @public
|
|
461
|
-
* <p>Name of the S3 bucket where the signed code image is saved by
|
|
460
|
+
* <p>Name of the S3 bucket where the signed code image is saved by AWS Signer.</p>
|
|
462
461
|
*/
|
|
463
462
|
signedObject?: SignedObject;
|
|
464
463
|
/**
|
|
@@ -474,7 +473,7 @@ export interface DescribeSigningJobResponse {
|
|
|
474
473
|
}
|
|
475
474
|
/**
|
|
476
475
|
* @public
|
|
477
|
-
* <p>The name and prefix of the S3 bucket where
|
|
476
|
+
* <p>The name and prefix of the Amazon S3 bucket where AWS Signer saves your signed objects.</p>
|
|
478
477
|
*/
|
|
479
478
|
export interface S3Destination {
|
|
480
479
|
/**
|
|
@@ -484,8 +483,8 @@ export interface S3Destination {
|
|
|
484
483
|
bucketName?: string;
|
|
485
484
|
/**
|
|
486
485
|
* @public
|
|
487
|
-
* <p>An
|
|
488
|
-
*
|
|
486
|
+
* <p>An S3 prefix that you can use to limit responses to those that begin with the specified
|
|
487
|
+
* prefix.</p>
|
|
489
488
|
*/
|
|
490
489
|
prefix?: string;
|
|
491
490
|
}
|
|
@@ -503,17 +502,17 @@ export interface Destination {
|
|
|
503
502
|
}
|
|
504
503
|
/**
|
|
505
504
|
* @public
|
|
506
|
-
* <p>The encryption algorithm options that are available to a code
|
|
505
|
+
* <p>The encryption algorithm options that are available to a code-signing job.</p>
|
|
507
506
|
*/
|
|
508
507
|
export interface EncryptionAlgorithmOptions {
|
|
509
508
|
/**
|
|
510
509
|
* @public
|
|
511
|
-
* <p>The set of accepted encryption algorithms that are allowed in a code
|
|
510
|
+
* <p>The set of accepted encryption algorithms that are allowed in a code-signing job.</p>
|
|
512
511
|
*/
|
|
513
512
|
allowedValues: EncryptionAlgorithm[] | undefined;
|
|
514
513
|
/**
|
|
515
514
|
* @public
|
|
516
|
-
* <p>The default encryption algorithm that is used by a code
|
|
515
|
+
* <p>The default encryption algorithm that is used by a code-signing job.</p>
|
|
517
516
|
*/
|
|
518
517
|
defaultValue: EncryptionAlgorithm | undefined;
|
|
519
518
|
}
|
|
@@ -547,6 +546,26 @@ export interface GetRevocationStatusRequest {
|
|
|
547
546
|
* <p>A certificate identifier consists of a subject certificate TBS hash (signed by the
|
|
548
547
|
* parent CA) combined with a parent CA TBS hash (signed by the parent CA’s CA). Root
|
|
549
548
|
* certificates are defined as their own CA.</p>
|
|
549
|
+
* <p>The following example shows how to calculate a hash for this parameter using OpenSSL
|
|
550
|
+
* commands: </p>
|
|
551
|
+
*
|
|
552
|
+
* <p>
|
|
553
|
+
* <code>openssl asn1parse -in childCert.pem -strparse 4 -out childCert.tbs</code>
|
|
554
|
+
* </p>
|
|
555
|
+
* <p>
|
|
556
|
+
* <code>openssl sha384 < childCert.tbs -binary > childCertTbsHash</code>
|
|
557
|
+
* </p>
|
|
558
|
+
* <p>
|
|
559
|
+
* <code>openssl asn1parse -in parentCert.pem -strparse 4 -out parentCert.tbs</code>
|
|
560
|
+
* </p>
|
|
561
|
+
* <p>
|
|
562
|
+
* <code>openssl sha384 < parentCert.tbs -binary > parentCertTbsHash xxd -p
|
|
563
|
+
* childCertTbsHash > certificateHash.hex xxd -p parentCertTbsHash >>
|
|
564
|
+
* certificateHash.hex</code>
|
|
565
|
+
* </p>
|
|
566
|
+
* <p>
|
|
567
|
+
* <code>cat certificateHash.hex | tr -d '\n'</code>
|
|
568
|
+
* </p>
|
|
550
569
|
*/
|
|
551
570
|
certificateHashes: string[] | undefined;
|
|
552
571
|
}
|
|
@@ -556,8 +575,8 @@ export interface GetRevocationStatusRequest {
|
|
|
556
575
|
export interface GetRevocationStatusResponse {
|
|
557
576
|
/**
|
|
558
577
|
* @public
|
|
559
|
-
* <p>A list of revoked entities (including
|
|
560
|
-
*
|
|
578
|
+
* <p>A list of revoked entities (including zero or more of the signing profile ARN, signing job
|
|
579
|
+
* ARN, and certificate hashes) supplied as input to the API.</p>
|
|
561
580
|
*/
|
|
562
581
|
revokedEntities?: string[];
|
|
563
582
|
}
|
|
@@ -573,49 +592,49 @@ export interface GetSigningPlatformRequest {
|
|
|
573
592
|
}
|
|
574
593
|
/**
|
|
575
594
|
* @public
|
|
576
|
-
* <p>The hash algorithms that are available to a code
|
|
595
|
+
* <p>The hash algorithms that are available to a code-signing job.</p>
|
|
577
596
|
*/
|
|
578
597
|
export interface HashAlgorithmOptions {
|
|
579
598
|
/**
|
|
580
599
|
* @public
|
|
581
|
-
* <p>The set of accepted hash algorithms allowed in a code
|
|
600
|
+
* <p>The set of accepted hash algorithms allowed in a code-signing job.</p>
|
|
582
601
|
*/
|
|
583
602
|
allowedValues: HashAlgorithm[] | undefined;
|
|
584
603
|
/**
|
|
585
604
|
* @public
|
|
586
|
-
* <p>The default hash algorithm that is used in a code
|
|
605
|
+
* <p>The default hash algorithm that is used in a code-signing job.</p>
|
|
587
606
|
*/
|
|
588
607
|
defaultValue: HashAlgorithm | undefined;
|
|
589
608
|
}
|
|
590
609
|
/**
|
|
591
610
|
* @public
|
|
592
|
-
* <p>The configuration of a
|
|
611
|
+
* <p>The configuration of a signing operation.</p>
|
|
593
612
|
*/
|
|
594
613
|
export interface SigningConfiguration {
|
|
595
614
|
/**
|
|
596
615
|
* @public
|
|
597
|
-
* <p>The encryption algorithm options that are available for a code
|
|
616
|
+
* <p>The encryption algorithm options that are available for a code-signing job.</p>
|
|
598
617
|
*/
|
|
599
618
|
encryptionAlgorithmOptions: EncryptionAlgorithmOptions | undefined;
|
|
600
619
|
/**
|
|
601
620
|
* @public
|
|
602
|
-
* <p>The hash algorithm options that are available for a code
|
|
621
|
+
* <p>The hash algorithm options that are available for a code-signing job.</p>
|
|
603
622
|
*/
|
|
604
623
|
hashAlgorithmOptions: HashAlgorithmOptions | undefined;
|
|
605
624
|
}
|
|
606
625
|
/**
|
|
607
626
|
* @public
|
|
608
|
-
* <p>The image format of a
|
|
627
|
+
* <p>The image format of a AWS Signer platform or profile.</p>
|
|
609
628
|
*/
|
|
610
629
|
export interface SigningImageFormat {
|
|
611
630
|
/**
|
|
612
631
|
* @public
|
|
613
|
-
* <p>The supported formats of a
|
|
632
|
+
* <p>The supported formats of a signing image.</p>
|
|
614
633
|
*/
|
|
615
634
|
supportedFormats: ImageFormat[] | undefined;
|
|
616
635
|
/**
|
|
617
636
|
* @public
|
|
618
|
-
* <p>The default format of a
|
|
637
|
+
* <p>The default format of a signing image.</p>
|
|
619
638
|
*/
|
|
620
639
|
defaultFormat: ImageFormat | undefined;
|
|
621
640
|
}
|
|
@@ -1082,48 +1101,48 @@ export interface ListSigningPlatformsRequest {
|
|
|
1082
1101
|
/**
|
|
1083
1102
|
* @public
|
|
1084
1103
|
* <p>Contains information about the signing configurations and parameters that are used to
|
|
1085
|
-
* perform a code
|
|
1104
|
+
* perform a code-signing job.</p>
|
|
1086
1105
|
*/
|
|
1087
1106
|
export interface SigningPlatform {
|
|
1088
1107
|
/**
|
|
1089
1108
|
* @public
|
|
1090
|
-
* <p>The ID of a
|
|
1109
|
+
* <p>The ID of a signing platform.</p>
|
|
1091
1110
|
*/
|
|
1092
1111
|
platformId?: string;
|
|
1093
1112
|
/**
|
|
1094
1113
|
* @public
|
|
1095
|
-
* <p>The display name of a
|
|
1114
|
+
* <p>The display name of a signing platform.</p>
|
|
1096
1115
|
*/
|
|
1097
1116
|
displayName?: string;
|
|
1098
1117
|
/**
|
|
1099
1118
|
* @public
|
|
1100
|
-
* <p>Any partner entities linked to a
|
|
1119
|
+
* <p>Any partner entities linked to a signing platform.</p>
|
|
1101
1120
|
*/
|
|
1102
1121
|
partner?: string;
|
|
1103
1122
|
/**
|
|
1104
1123
|
* @public
|
|
1105
|
-
* <p>The types of targets that can be signed by a
|
|
1124
|
+
* <p>The types of targets that can be signed by a signing platform.</p>
|
|
1106
1125
|
*/
|
|
1107
1126
|
target?: string;
|
|
1108
1127
|
/**
|
|
1109
1128
|
* @public
|
|
1110
|
-
* <p>The category of a
|
|
1129
|
+
* <p>The category of a signing platform.</p>
|
|
1111
1130
|
*/
|
|
1112
1131
|
category?: Category;
|
|
1113
1132
|
/**
|
|
1114
1133
|
* @public
|
|
1115
|
-
* <p>The configuration of a
|
|
1116
|
-
*
|
|
1134
|
+
* <p>The configuration of a signing platform. This includes the designated hash algorithm and
|
|
1135
|
+
* encryption algorithm of a signing platform.</p>
|
|
1117
1136
|
*/
|
|
1118
1137
|
signingConfiguration?: SigningConfiguration;
|
|
1119
1138
|
/**
|
|
1120
1139
|
* @public
|
|
1121
|
-
* <p>The image format of a
|
|
1140
|
+
* <p>The image format of a AWS Signer platform or profile.</p>
|
|
1122
1141
|
*/
|
|
1123
1142
|
signingImageFormat?: SigningImageFormat;
|
|
1124
1143
|
/**
|
|
1125
1144
|
* @public
|
|
1126
|
-
* <p>The maximum size (in MB) of code that can be signed by a
|
|
1145
|
+
* <p>The maximum size (in MB) of code that can be signed by a signing platform.</p>
|
|
1127
1146
|
*/
|
|
1128
1147
|
maxSizeInMB?: number;
|
|
1129
1148
|
/**
|
|
@@ -1184,8 +1203,8 @@ export interface ListSigningProfilesRequest {
|
|
|
1184
1203
|
}
|
|
1185
1204
|
/**
|
|
1186
1205
|
* @public
|
|
1187
|
-
* <p>Contains information about the ACM certificates and
|
|
1188
|
-
*
|
|
1206
|
+
* <p>Contains information about the ACM certificates and signing configuration parameters that
|
|
1207
|
+
* can be used by a given code signing user.</p>
|
|
1189
1208
|
*/
|
|
1190
1209
|
export interface SigningProfile {
|
|
1191
1210
|
/**
|
|
@@ -1225,12 +1244,12 @@ export interface SigningProfile {
|
|
|
1225
1244
|
platformDisplayName?: string;
|
|
1226
1245
|
/**
|
|
1227
1246
|
* @public
|
|
1228
|
-
* <p>The parameters that are available for use by a
|
|
1247
|
+
* <p>The parameters that are available for use by a Signer user.</p>
|
|
1229
1248
|
*/
|
|
1230
1249
|
signingParameters?: Record<string, string>;
|
|
1231
1250
|
/**
|
|
1232
1251
|
* @public
|
|
1233
|
-
* <p>The status of a
|
|
1252
|
+
* <p>The status of a signing profile.</p>
|
|
1234
1253
|
*/
|
|
1235
1254
|
status?: SigningProfileStatus;
|
|
1236
1255
|
/**
|
|
@@ -1457,7 +1476,8 @@ export interface SignPayloadRequest {
|
|
|
1457
1476
|
payload: Uint8Array | undefined;
|
|
1458
1477
|
/**
|
|
1459
1478
|
* @public
|
|
1460
|
-
* <p>Payload content type
|
|
1479
|
+
* <p>Payload content type. The single valid type is
|
|
1480
|
+
* <code>application/vnd.cncf.notary.payload.v1+json</code>.</p>
|
|
1461
1481
|
*/
|
|
1462
1482
|
payloadFormat: string | undefined;
|
|
1463
1483
|
}
|
|
@@ -1477,9 +1497,7 @@ export interface SignPayloadResponse {
|
|
|
1477
1497
|
jobOwner?: string;
|
|
1478
1498
|
/**
|
|
1479
1499
|
* @public
|
|
1480
|
-
* <p>Information including the signing profile ARN and the signing job ID
|
|
1481
|
-
* metadata to signature records, for example, as annotations added to the signature
|
|
1482
|
-
* manifest inside an OCI registry.</p>
|
|
1500
|
+
* <p>Information including the signing profile ARN and the signing job ID.</p>
|
|
1483
1501
|
*/
|
|
1484
1502
|
metadata?: Record<string, string>;
|
|
1485
1503
|
/**
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-signer",
|
|
3
3
|
"description": "AWS SDK for JavaScript Signer Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.451.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "tsc -p tsconfig.cjs.json",
|
|
@@ -21,43 +21,43 @@
|
|
|
21
21
|
"dependencies": {
|
|
22
22
|
"@aws-crypto/sha256-browser": "3.0.0",
|
|
23
23
|
"@aws-crypto/sha256-js": "3.0.0",
|
|
24
|
-
"@aws-sdk/client-sts": "3.
|
|
25
|
-
"@aws-sdk/core": "3.
|
|
26
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
27
|
-
"@aws-sdk/middleware-host-header": "3.
|
|
28
|
-
"@aws-sdk/middleware-logger": "3.
|
|
29
|
-
"@aws-sdk/middleware-recursion-detection": "3.
|
|
30
|
-
"@aws-sdk/middleware-signing": "3.
|
|
31
|
-
"@aws-sdk/middleware-user-agent": "3.
|
|
32
|
-
"@aws-sdk/region-config-resolver": "3.
|
|
33
|
-
"@aws-sdk/types": "3.
|
|
34
|
-
"@aws-sdk/util-endpoints": "3.
|
|
35
|
-
"@aws-sdk/util-user-agent-browser": "3.
|
|
36
|
-
"@aws-sdk/util-user-agent-node": "3.
|
|
37
|
-
"@smithy/config-resolver": "^2.0.
|
|
38
|
-
"@smithy/fetch-http-handler": "^2.2.
|
|
39
|
-
"@smithy/hash-node": "^2.0.
|
|
40
|
-
"@smithy/invalid-dependency": "^2.0.
|
|
41
|
-
"@smithy/middleware-content-length": "^2.0.
|
|
42
|
-
"@smithy/middleware-endpoint": "^2.
|
|
43
|
-
"@smithy/middleware-retry": "^2.0.
|
|
44
|
-
"@smithy/middleware-serde": "^2.0.
|
|
45
|
-
"@smithy/middleware-stack": "^2.0.
|
|
46
|
-
"@smithy/node-config-provider": "^2.1.
|
|
47
|
-
"@smithy/node-http-handler": "^2.1.
|
|
48
|
-
"@smithy/protocol-http": "^3.0.
|
|
49
|
-
"@smithy/smithy-client": "^2.1.
|
|
50
|
-
"@smithy/types": "^2.
|
|
51
|
-
"@smithy/url-parser": "^2.0.
|
|
52
|
-
"@smithy/util-base64": "^2.0.
|
|
24
|
+
"@aws-sdk/client-sts": "3.451.0",
|
|
25
|
+
"@aws-sdk/core": "3.451.0",
|
|
26
|
+
"@aws-sdk/credential-provider-node": "3.451.0",
|
|
27
|
+
"@aws-sdk/middleware-host-header": "3.451.0",
|
|
28
|
+
"@aws-sdk/middleware-logger": "3.451.0",
|
|
29
|
+
"@aws-sdk/middleware-recursion-detection": "3.451.0",
|
|
30
|
+
"@aws-sdk/middleware-signing": "3.451.0",
|
|
31
|
+
"@aws-sdk/middleware-user-agent": "3.451.0",
|
|
32
|
+
"@aws-sdk/region-config-resolver": "3.451.0",
|
|
33
|
+
"@aws-sdk/types": "3.451.0",
|
|
34
|
+
"@aws-sdk/util-endpoints": "3.451.0",
|
|
35
|
+
"@aws-sdk/util-user-agent-browser": "3.451.0",
|
|
36
|
+
"@aws-sdk/util-user-agent-node": "3.451.0",
|
|
37
|
+
"@smithy/config-resolver": "^2.0.18",
|
|
38
|
+
"@smithy/fetch-http-handler": "^2.2.6",
|
|
39
|
+
"@smithy/hash-node": "^2.0.15",
|
|
40
|
+
"@smithy/invalid-dependency": "^2.0.13",
|
|
41
|
+
"@smithy/middleware-content-length": "^2.0.15",
|
|
42
|
+
"@smithy/middleware-endpoint": "^2.2.0",
|
|
43
|
+
"@smithy/middleware-retry": "^2.0.20",
|
|
44
|
+
"@smithy/middleware-serde": "^2.0.13",
|
|
45
|
+
"@smithy/middleware-stack": "^2.0.7",
|
|
46
|
+
"@smithy/node-config-provider": "^2.1.5",
|
|
47
|
+
"@smithy/node-http-handler": "^2.1.9",
|
|
48
|
+
"@smithy/protocol-http": "^3.0.9",
|
|
49
|
+
"@smithy/smithy-client": "^2.1.15",
|
|
50
|
+
"@smithy/types": "^2.5.0",
|
|
51
|
+
"@smithy/url-parser": "^2.0.13",
|
|
52
|
+
"@smithy/util-base64": "^2.0.1",
|
|
53
53
|
"@smithy/util-body-length-browser": "^2.0.0",
|
|
54
54
|
"@smithy/util-body-length-node": "^2.1.0",
|
|
55
|
-
"@smithy/util-defaults-mode-browser": "^2.0.
|
|
56
|
-
"@smithy/util-defaults-mode-node": "^2.0.
|
|
57
|
-
"@smithy/util-endpoints": "^1.0.
|
|
58
|
-
"@smithy/util-retry": "^2.0.
|
|
59
|
-
"@smithy/util-utf8": "^2.0.
|
|
60
|
-
"@smithy/util-waiter": "^2.0.
|
|
55
|
+
"@smithy/util-defaults-mode-browser": "^2.0.19",
|
|
56
|
+
"@smithy/util-defaults-mode-node": "^2.0.25",
|
|
57
|
+
"@smithy/util-endpoints": "^1.0.4",
|
|
58
|
+
"@smithy/util-retry": "^2.0.6",
|
|
59
|
+
"@smithy/util-utf8": "^2.0.2",
|
|
60
|
+
"@smithy/util-waiter": "^2.0.13",
|
|
61
61
|
"tslib": "^2.5.0",
|
|
62
62
|
"uuid": "^8.3.2"
|
|
63
63
|
},
|