@aws-sdk/client-signer 3.948.0 → 3.949.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist-cjs/index.js +1 -1
- package/dist-es/schemas/schemas_0.js +1 -1
- package/dist-types/Signer.d.ts +5 -5
- package/dist-types/SignerClient.d.ts +5 -5
- package/dist-types/commands/AddProfilePermissionCommand.d.ts +1 -1
- package/dist-types/commands/CancelSigningProfileCommand.d.ts +2 -3
- package/dist-types/commands/DescribeSigningJobCommand.d.ts +1 -1
- package/dist-types/commands/GetRevocationStatusCommand.d.ts +1 -1
- package/dist-types/commands/GetSigningPlatformCommand.d.ts +1 -1
- package/dist-types/commands/GetSigningProfileCommand.d.ts +1 -1
- package/dist-types/commands/ListProfilePermissionsCommand.d.ts +1 -1
- package/dist-types/commands/ListSigningJobsCommand.d.ts +1 -1
- package/dist-types/commands/ListSigningPlatformsCommand.d.ts +1 -1
- package/dist-types/commands/ListSigningProfilesCommand.d.ts +1 -1
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +1 -1
- package/dist-types/commands/PutSigningProfileCommand.d.ts +1 -1
- package/dist-types/commands/RemoveProfilePermissionCommand.d.ts +1 -1
- package/dist-types/commands/RevokeSignatureCommand.d.ts +2 -2
- package/dist-types/commands/RevokeSigningProfileCommand.d.ts +5 -3
- package/dist-types/commands/SignPayloadCommand.d.ts +1 -1
- package/dist-types/commands/StartSigningJobCommand.d.ts +18 -19
- package/dist-types/commands/TagResourceCommand.d.ts +1 -1
- package/dist-types/commands/UntagResourceCommand.d.ts +1 -1
- package/dist-types/index.d.ts +5 -5
- package/dist-types/models/errors.d.ts +2 -2
- package/dist-types/models/models_0.d.ts +10 -11
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -22,7 +22,7 @@ Project</a>, you can sign container images stored in a container registry such
|
|
|
22
22
|
as Amazon Elastic Container Registry (ECR). The signatures are stored in the registry
|
|
23
23
|
alongside the images, where they are available for verifying image authenticity and
|
|
24
24
|
integrity.</p>
|
|
25
|
-
<p>For more information about Signer, see the <a href="
|
|
25
|
+
<p>For more information about Signer, see the <a href="http://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html">AWS Signer Developer
|
|
26
26
|
Guide</a>.</p>
|
|
27
27
|
|
|
28
28
|
## Installing
|
package/dist-cjs/index.js
CHANGED
|
@@ -800,7 +800,7 @@ var GetRevocationStatus = [
|
|
|
800
800
|
9,
|
|
801
801
|
n0,
|
|
802
802
|
_GRS,
|
|
803
|
-
{ [_h]: ["GET", "/revocations", 200], [_en]: ["
|
|
803
|
+
{ [_h]: ["GET", "/revocations", 200], [_en]: ["data-"] },
|
|
804
804
|
() => GetRevocationStatusRequest,
|
|
805
805
|
() => GetRevocationStatusResponse,
|
|
806
806
|
];
|
|
@@ -552,7 +552,7 @@ export var GetRevocationStatus = [
|
|
|
552
552
|
9,
|
|
553
553
|
n0,
|
|
554
554
|
_GRS,
|
|
555
|
-
{ [_h]: ["GET", "/revocations", 200], [_en]: ["
|
|
555
|
+
{ [_h]: ["GET", "/revocations", 200], [_en]: ["data-"] },
|
|
556
556
|
() => GetRevocationStatusRequest,
|
|
557
557
|
() => GetRevocationStatusResponse,
|
|
558
558
|
];
|
package/dist-types/Signer.d.ts
CHANGED
|
@@ -141,21 +141,21 @@ export interface Signer {
|
|
|
141
141
|
/**
|
|
142
142
|
* <p>AWS Signer is a fully managed code-signing service to help you ensure the trust and
|
|
143
143
|
* integrity of your code. </p>
|
|
144
|
-
*
|
|
145
|
-
*
|
|
144
|
+
* <p>Signer supports the following applications:</p>
|
|
145
|
+
* <p>With code signing for AWS Lambda, you can sign <a href="http://docs.aws.amazon.com/lambda/latest/dg/">AWS
|
|
146
146
|
* Lambda</a> deployment packages. Integrated support is provided for <a href="http://docs.aws.amazon.com/AmazonS3/latest/gsg/">Amazon S3</a>, <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/">Amazon
|
|
147
147
|
* CloudWatch</a>, and <a href="http://docs.aws.amazon.com/awscloudtrail/latest/userguide/">AWS CloudTrail</a>. In order
|
|
148
148
|
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
149
149
|
* files in S3. </p>
|
|
150
|
-
*
|
|
150
|
+
* <p>With code signing for IoT, you can sign code for any IoT device that is supported by AWS.
|
|
151
151
|
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code-signing
|
|
152
152
|
* certificate using ACM, and use that to sign updates in Amazon FreeRTOS and AWS IoT Device Management. </p>
|
|
153
|
-
*
|
|
153
|
+
* <p>With Signer and the Notation CLI from the <a href="https://notaryproject.dev/">Notary
|
|
154
154
|
* Project</a>, you can sign container images stored in a container registry such
|
|
155
155
|
* as Amazon Elastic Container Registry (ECR). The signatures are stored in the registry
|
|
156
156
|
* alongside the images, where they are available for verifying image authenticity and
|
|
157
157
|
* integrity.</p>
|
|
158
|
-
*
|
|
158
|
+
* <p>For more information about Signer, see the <a href="http://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html">AWS Signer Developer
|
|
159
159
|
* Guide</a>.</p>
|
|
160
160
|
* @public
|
|
161
161
|
*/
|
|
@@ -199,21 +199,21 @@ export interface SignerClientResolvedConfig extends SignerClientResolvedConfigTy
|
|
|
199
199
|
/**
|
|
200
200
|
* <p>AWS Signer is a fully managed code-signing service to help you ensure the trust and
|
|
201
201
|
* integrity of your code. </p>
|
|
202
|
-
*
|
|
203
|
-
*
|
|
202
|
+
* <p>Signer supports the following applications:</p>
|
|
203
|
+
* <p>With code signing for AWS Lambda, you can sign <a href="http://docs.aws.amazon.com/lambda/latest/dg/">AWS
|
|
204
204
|
* Lambda</a> deployment packages. Integrated support is provided for <a href="http://docs.aws.amazon.com/AmazonS3/latest/gsg/">Amazon S3</a>, <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/">Amazon
|
|
205
205
|
* CloudWatch</a>, and <a href="http://docs.aws.amazon.com/awscloudtrail/latest/userguide/">AWS CloudTrail</a>. In order
|
|
206
206
|
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
207
207
|
* files in S3. </p>
|
|
208
|
-
*
|
|
208
|
+
* <p>With code signing for IoT, you can sign code for any IoT device that is supported by AWS.
|
|
209
209
|
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code-signing
|
|
210
210
|
* certificate using ACM, and use that to sign updates in Amazon FreeRTOS and AWS IoT Device Management. </p>
|
|
211
|
-
*
|
|
211
|
+
* <p>With Signer and the Notation CLI from the <a href="https://notaryproject.dev/">Notary
|
|
212
212
|
* Project</a>, you can sign container images stored in a container registry such
|
|
213
213
|
* as Amazon Elastic Container Registry (ECR). The signatures are stored in the registry
|
|
214
214
|
* alongside the images, where they are available for verifying image authenticity and
|
|
215
215
|
* integrity.</p>
|
|
216
|
-
*
|
|
216
|
+
* <p>For more information about Signer, see the <a href="http://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html">AWS Signer Developer
|
|
217
217
|
* Guide</a>.</p>
|
|
218
218
|
* @public
|
|
219
219
|
*/
|
|
@@ -75,7 +75,7 @@ declare const AddProfilePermissionCommand_base: {
|
|
|
75
75
|
*
|
|
76
76
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
77
77
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
78
|
-
*
|
|
78
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
79
79
|
*
|
|
80
80
|
* @throws {@link ValidationException} (client fault)
|
|
81
81
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -29,8 +29,7 @@ declare const CancelSigningProfileCommand_base: {
|
|
|
29
29
|
/**
|
|
30
30
|
* <p>Changes the state of an <code>ACTIVE</code> signing profile to <code>CANCELED</code>.
|
|
31
31
|
* A canceled profile is still viewable with the <code>ListSigningProfiles</code>
|
|
32
|
-
*
|
|
33
|
-
* cancelation.</p>
|
|
32
|
+
* operation, but it cannot perform new signing jobs. See <a href="https://docs.aws.amazon.com/signer/latest/developerguide/retention.html">Data Retention</a> for more information on scheduled deletion of a canceled signing profile.</p>
|
|
34
33
|
* @example
|
|
35
34
|
* Use a bare-bones client and the command you need to make an API call.
|
|
36
35
|
* ```javascript
|
|
@@ -65,7 +64,7 @@ declare const CancelSigningProfileCommand_base: {
|
|
|
65
64
|
*
|
|
66
65
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
67
66
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
68
|
-
*
|
|
67
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
69
68
|
*
|
|
70
69
|
* @throws {@link SignerServiceException}
|
|
71
70
|
* <p>Base exception class for all service exceptions from Signer service.</p>
|
|
@@ -109,7 +109,7 @@ declare const DescribeSigningJobCommand_base: {
|
|
|
109
109
|
*
|
|
110
110
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
111
111
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
112
|
-
*
|
|
112
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
113
113
|
*
|
|
114
114
|
* @throws {@link SignerServiceException}
|
|
115
115
|
* <p>Base exception class for all service exceptions from Signer service.</p>
|
|
@@ -70,7 +70,7 @@ declare const GetRevocationStatusCommand_base: {
|
|
|
70
70
|
*
|
|
71
71
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
72
72
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
73
|
-
*
|
|
73
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
74
74
|
*
|
|
75
75
|
* @throws {@link ValidationException} (client fault)
|
|
76
76
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -90,7 +90,7 @@ declare const GetSigningPlatformCommand_base: {
|
|
|
90
90
|
*
|
|
91
91
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
92
92
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
93
|
-
*
|
|
93
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
94
94
|
*
|
|
95
95
|
* @throws {@link SignerServiceException}
|
|
96
96
|
* <p>Base exception class for all service exceptions from Signer service.</p>
|
|
@@ -97,7 +97,7 @@ declare const GetSigningProfileCommand_base: {
|
|
|
97
97
|
*
|
|
98
98
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
99
99
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
100
|
-
*
|
|
100
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
101
101
|
*
|
|
102
102
|
* @throws {@link SignerServiceException}
|
|
103
103
|
* <p>Base exception class for all service exceptions from Signer service.</p>
|
|
@@ -75,7 +75,7 @@ declare const ListProfilePermissionsCommand_base: {
|
|
|
75
75
|
*
|
|
76
76
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
77
77
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
78
|
-
*
|
|
78
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
79
79
|
*
|
|
80
80
|
* @throws {@link ValidationException} (client fault)
|
|
81
81
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -106,7 +106,7 @@ declare const ListSigningJobsCommand_base: {
|
|
|
106
106
|
*
|
|
107
107
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
108
108
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
109
|
-
*
|
|
109
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
110
110
|
*
|
|
111
111
|
* @throws {@link ValidationException} (client fault)
|
|
112
112
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -102,7 +102,7 @@ declare const ListSigningPlatformsCommand_base: {
|
|
|
102
102
|
*
|
|
103
103
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
104
104
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
105
|
-
*
|
|
105
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
106
106
|
*
|
|
107
107
|
* @throws {@link ValidationException} (client fault)
|
|
108
108
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -98,7 +98,7 @@ declare const ListSigningProfilesCommand_base: {
|
|
|
98
98
|
*
|
|
99
99
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
100
100
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
101
|
-
*
|
|
101
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
102
102
|
*
|
|
103
103
|
* @throws {@link SignerServiceException}
|
|
104
104
|
* <p>Base exception class for all service exceptions from Signer service.</p>
|
|
@@ -67,7 +67,7 @@ declare const ListTagsForResourceCommand_base: {
|
|
|
67
67
|
*
|
|
68
68
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
69
69
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
70
|
-
*
|
|
70
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
71
71
|
*
|
|
72
72
|
* @throws {@link SignerServiceException}
|
|
73
73
|
* <p>Base exception class for all service exceptions from Signer service.</p>
|
|
@@ -89,7 +89,7 @@ declare const PutSigningProfileCommand_base: {
|
|
|
89
89
|
*
|
|
90
90
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
91
91
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
92
|
-
*
|
|
92
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
93
93
|
*
|
|
94
94
|
* @throws {@link ValidationException} (client fault)
|
|
95
95
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -69,7 +69,7 @@ declare const RemoveProfilePermissionCommand_base: {
|
|
|
69
69
|
*
|
|
70
70
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
71
71
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
72
|
-
*
|
|
72
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
73
73
|
*
|
|
74
74
|
* @throws {@link ValidationException} (client fault)
|
|
75
75
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -27,7 +27,7 @@ declare const RevokeSignatureCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Changes the state of a signing job to REVOKED
|
|
30
|
+
* <p>Changes the state of a signing job to <code>REVOKED</code>. This indicates that the signature is no
|
|
31
31
|
* longer valid.</p>
|
|
32
32
|
* @example
|
|
33
33
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -65,7 +65,7 @@ declare const RevokeSignatureCommand_base: {
|
|
|
65
65
|
*
|
|
66
66
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
67
67
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
68
|
-
*
|
|
68
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
69
69
|
*
|
|
70
70
|
* @throws {@link ValidationException} (client fault)
|
|
71
71
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -27,9 +27,11 @@ declare const RevokeSigningProfileCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Changes the state of a signing profile to REVOKED
|
|
30
|
+
* <p>Changes the state of a signing profile to <code>REVOKED</code>. This indicates that signatures
|
|
31
31
|
* generated using the signing profile after an effective start date are no longer
|
|
32
|
-
* valid
|
|
32
|
+
* valid. A revoked profile is still viewable with the <code>ListSigningProfiles</code>
|
|
33
|
+
* operation, but it cannot perform new signing jobs. See <a href="https://docs.aws.amazon.com/signer/latest/developerguide/retention.html">Data Retention</a>
|
|
34
|
+
* for more information on scheduled deletion of a revoked signing profile. </p>
|
|
33
35
|
* @example
|
|
34
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
37
|
* ```javascript
|
|
@@ -67,7 +69,7 @@ declare const RevokeSigningProfileCommand_base: {
|
|
|
67
69
|
*
|
|
68
70
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
69
71
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
70
|
-
*
|
|
72
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
71
73
|
*
|
|
72
74
|
* @throws {@link ValidationException} (client fault)
|
|
73
75
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -72,7 +72,7 @@ declare const SignPayloadCommand_base: {
|
|
|
72
72
|
*
|
|
73
73
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
74
74
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
75
|
-
*
|
|
75
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
76
76
|
*
|
|
77
77
|
* @throws {@link ValidationException} (client fault)
|
|
78
78
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -28,34 +28,33 @@ declare const StartSigningJobCommand_base: {
|
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
30
|
* <p>Initiates a signing job to be performed on the code provided. Signing jobs are
|
|
31
|
-
* viewable by the <code>ListSigningJobs</code> operation
|
|
32
|
-
*
|
|
33
|
-
* <ul>
|
|
31
|
+
* viewable by the <code>ListSigningJobs</code> operation. Note the following requirements: </p>
|
|
32
|
+
* <ul>
|
|
34
33
|
* <li>
|
|
35
|
-
*
|
|
34
|
+
* <p> You must create an Amazon S3 source bucket. For more information, see <a href="http://docs.aws.amazon.com/AmazonS3/latest/gsg/CreatingABucket.html">Creating a Bucket</a> in the
|
|
36
35
|
* <i>Amazon S3 Getting Started Guide</i>. </p>
|
|
37
|
-
*
|
|
36
|
+
* </li>
|
|
38
37
|
* <li>
|
|
39
|
-
*
|
|
40
|
-
*
|
|
38
|
+
* <p>Your S3 source bucket must be version enabled.</p>
|
|
39
|
+
* </li>
|
|
41
40
|
* <li>
|
|
42
|
-
*
|
|
41
|
+
* <p>You must create an S3 destination bucket. AWS Signer uses your S3 destination bucket to
|
|
43
42
|
* write your signed code.</p>
|
|
44
|
-
*
|
|
43
|
+
* </li>
|
|
45
44
|
* <li>
|
|
46
|
-
*
|
|
45
|
+
* <p>You specify the name of the source and destination buckets when calling the
|
|
47
46
|
* <code>StartSigningJob</code> operation.</p>
|
|
48
|
-
*
|
|
47
|
+
* </li>
|
|
49
48
|
* <li>
|
|
50
|
-
*
|
|
51
|
-
*
|
|
49
|
+
* <p>You must ensure the S3 buckets are from the same Region as the signing profile. Cross-Region signing isn't supported.</p>
|
|
50
|
+
* </li>
|
|
52
51
|
* <li>
|
|
53
|
-
*
|
|
54
|
-
*
|
|
52
|
+
* <p>You must also specify a request token that identifies your request to Signer.</p>
|
|
53
|
+
* </li>
|
|
55
54
|
* </ul>
|
|
56
|
-
*
|
|
55
|
+
* <p>You can call the <a>DescribeSigningJob</a> and the <a>ListSigningJobs</a> actions after you call
|
|
57
56
|
* <code>StartSigningJob</code>.</p>
|
|
58
|
-
*
|
|
57
|
+
* <p>For a Java example that shows how to use this action, see <a href="https://docs.aws.amazon.com/signer/latest/developerguide/api-startsigningjob.html">StartSigningJob</a>.</p>
|
|
59
58
|
* @example
|
|
60
59
|
* Use a bare-bones client and the command you need to make an API call.
|
|
61
60
|
* ```javascript
|
|
@@ -108,11 +107,11 @@ declare const StartSigningJobCommand_base: {
|
|
|
108
107
|
*
|
|
109
108
|
* @throws {@link ThrottlingException} (client fault)
|
|
110
109
|
* <p>The request was denied due to request throttling.</p>
|
|
111
|
-
*
|
|
110
|
+
* <p>Instead of this error, <code>TooManyRequestsException</code> should be used.</p>
|
|
112
111
|
*
|
|
113
112
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
114
113
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
115
|
-
*
|
|
114
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
116
115
|
*
|
|
117
116
|
* @throws {@link ValidationException} (client fault)
|
|
118
117
|
* <p>You signing certificate could not be validated.</p>
|
|
@@ -69,7 +69,7 @@ declare const TagResourceCommand_base: {
|
|
|
69
69
|
*
|
|
70
70
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
71
71
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
72
|
-
*
|
|
72
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
73
73
|
*
|
|
74
74
|
* @throws {@link SignerServiceException}
|
|
75
75
|
* <p>Base exception class for all service exceptions from Signer service.</p>
|
|
@@ -67,7 +67,7 @@ declare const UntagResourceCommand_base: {
|
|
|
67
67
|
*
|
|
68
68
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
69
69
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
70
|
-
*
|
|
70
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
71
71
|
*
|
|
72
72
|
* @throws {@link SignerServiceException}
|
|
73
73
|
* <p>Base exception class for all service exceptions from Signer service.</p>
|
package/dist-types/index.d.ts
CHANGED
|
@@ -1,21 +1,21 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* <p>AWS Signer is a fully managed code-signing service to help you ensure the trust and
|
|
3
3
|
* integrity of your code. </p>
|
|
4
|
-
*
|
|
5
|
-
*
|
|
4
|
+
* <p>Signer supports the following applications:</p>
|
|
5
|
+
* <p>With code signing for AWS Lambda, you can sign <a href="http://docs.aws.amazon.com/lambda/latest/dg/">AWS
|
|
6
6
|
* Lambda</a> deployment packages. Integrated support is provided for <a href="http://docs.aws.amazon.com/AmazonS3/latest/gsg/">Amazon S3</a>, <a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/">Amazon
|
|
7
7
|
* CloudWatch</a>, and <a href="http://docs.aws.amazon.com/awscloudtrail/latest/userguide/">AWS CloudTrail</a>. In order
|
|
8
8
|
* to sign code, you create a signing profile and then use Signer to sign Lambda zip
|
|
9
9
|
* files in S3. </p>
|
|
10
|
-
*
|
|
10
|
+
* <p>With code signing for IoT, you can sign code for any IoT device that is supported by AWS.
|
|
11
11
|
* IoT code signing is available for <a href="http://docs.aws.amazon.com/freertos/latest/userguide/">Amazon FreeRTOS</a> and <a href="http://docs.aws.amazon.com/iot/latest/developerguide/">AWS IoT Device Management</a>, and is integrated with <a href="http://docs.aws.amazon.com/acm/latest/userguide/">AWS Certificate Manager (ACM)</a>. In order to sign code, you import a third-party code-signing
|
|
12
12
|
* certificate using ACM, and use that to sign updates in Amazon FreeRTOS and AWS IoT Device Management. </p>
|
|
13
|
-
*
|
|
13
|
+
* <p>With Signer and the Notation CLI from the <a href="https://notaryproject.dev/">Notary
|
|
14
14
|
* Project</a>, you can sign container images stored in a container registry such
|
|
15
15
|
* as Amazon Elastic Container Registry (ECR). The signatures are stored in the registry
|
|
16
16
|
* alongside the images, where they are available for verifying image authenticity and
|
|
17
17
|
* integrity.</p>
|
|
18
|
-
*
|
|
18
|
+
* <p>For more information about Signer, see the <a href="http://docs.aws.amazon.com/signer/latest/developerguide/Welcome.html">AWS Signer Developer
|
|
19
19
|
* Guide</a>.</p>
|
|
20
20
|
*
|
|
21
21
|
* @packageDocumentation
|
|
@@ -67,7 +67,7 @@ export declare class ServiceLimitExceededException extends __BaseException {
|
|
|
67
67
|
}
|
|
68
68
|
/**
|
|
69
69
|
* <p>The allowed number of job-signing requests has been exceeded.</p>
|
|
70
|
-
*
|
|
70
|
+
* <p>This error supersedes the error <code>ThrottlingException</code>.</p>
|
|
71
71
|
* @public
|
|
72
72
|
*/
|
|
73
73
|
export declare class TooManyRequestsException extends __BaseException {
|
|
@@ -121,7 +121,7 @@ export declare class NotFoundException extends __BaseException {
|
|
|
121
121
|
}
|
|
122
122
|
/**
|
|
123
123
|
* <p>The request was denied due to request throttling.</p>
|
|
124
|
-
*
|
|
124
|
+
* <p>Instead of this error, <code>TooManyRequestsException</code> should be used.</p>
|
|
125
125
|
*
|
|
126
126
|
* @deprecated Instead of this error, TooManyRequestsException should be used.
|
|
127
127
|
* @public
|
|
@@ -14,9 +14,9 @@ export interface AddProfilePermissionRequest {
|
|
|
14
14
|
*/
|
|
15
15
|
profileVersion?: string | undefined;
|
|
16
16
|
/**
|
|
17
|
-
* <p>For cross-account signing. Grant a designated account permission to perform one or more of the following actions. Each action is associated with a specific API's operations. For more information about cross-account signing, see <a href="
|
|
18
|
-
*
|
|
19
|
-
*
|
|
17
|
+
* <p>For cross-account signing. Grant a designated account permission to perform one or more of the following actions. Each action is associated with a specific API's operations. For more information about cross-account signing, see <a href="http://docs.aws.amazon.com/signer/latest/developerguide/signing-profile-cross-account.html">Using cross-account signing with signing profiles</a> in the <i>AWS Signer Developer Guide</i>.</p>
|
|
18
|
+
* <p>You can designate the following actions to an account.</p>
|
|
19
|
+
* <ul>
|
|
20
20
|
* <li>
|
|
21
21
|
* <p>
|
|
22
22
|
* <code>signer:StartSigningJob</code>. This action isn't supported for container image workflows. For details, see <a>StartSigningJob</a>.</p>
|
|
@@ -394,27 +394,26 @@ export interface GetRevocationStatusRequest {
|
|
|
394
394
|
jobArn: string | undefined;
|
|
395
395
|
/**
|
|
396
396
|
* <p>A list of composite signed hashes that identify certificates.</p>
|
|
397
|
-
*
|
|
397
|
+
* <p>A certificate identifier consists of a subject certificate TBS hash (signed by the
|
|
398
398
|
* parent CA) combined with a parent CA TBS hash (signed by the parent CA’s CA). Root
|
|
399
399
|
* certificates are defined as their own CA.</p>
|
|
400
|
-
*
|
|
400
|
+
* <p>The following example shows how to calculate a hash for this parameter using OpenSSL
|
|
401
401
|
* commands: </p>
|
|
402
|
-
*
|
|
403
|
-
* <p>
|
|
402
|
+
* <p>
|
|
404
403
|
* <code>openssl asn1parse -in childCert.pem -strparse 4 -out childCert.tbs</code>
|
|
405
404
|
* </p>
|
|
406
|
-
*
|
|
405
|
+
* <p>
|
|
407
406
|
* <code>openssl sha384 < childCert.tbs -binary > childCertTbsHash</code>
|
|
408
407
|
* </p>
|
|
409
|
-
*
|
|
408
|
+
* <p>
|
|
410
409
|
* <code>openssl asn1parse -in parentCert.pem -strparse 4 -out parentCert.tbs</code>
|
|
411
410
|
* </p>
|
|
412
|
-
*
|
|
411
|
+
* <p>
|
|
413
412
|
* <code>openssl sha384 < parentCert.tbs -binary > parentCertTbsHash xxd -p
|
|
414
413
|
* childCertTbsHash > certificateHash.hex xxd -p parentCertTbsHash >>
|
|
415
414
|
* certificateHash.hex</code>
|
|
416
415
|
* </p>
|
|
417
|
-
*
|
|
416
|
+
* <p>
|
|
418
417
|
* <code>cat certificateHash.hex | tr -d '\n'</code>
|
|
419
418
|
* </p>
|
|
420
419
|
* @public
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-signer",
|
|
3
3
|
"description": "AWS SDK for JavaScript Signer Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.949.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "node ../../scripts/compilation/inline client-signer",
|