capo-cloudfront 0.2.0__py3-none-any.whl

capo_cloudfront/types/minimum_protocol_version.py

@@ -0,0 +1,34 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#MinimumProtocolVersion``."""
+
+from typing import Literal, TypeAlias, cast
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+MinimumProtocolVersion: TypeAlias = Literal[
+    "SSLv3",
+    "TLSv1",
+    "TLSv1_2016",
+    "TLSv1.1_2016",
+    "TLSv1.2_2018",
+    "TLSv1.2_2019",
+    "TLSv1.2_2021",
+    "TLSv1.3_2025",
+    "TLSv1.2_2025",
+]
+
+
+# --- restXml ser/de ---
+def to_xml_text(value: MinimumProtocolVersion) -> str:
+    return value
+
+
+def from_xml_text(text: str) -> MinimumProtocolVersion:
+    return cast(MinimumProtocolVersion, text)
+
+
+def serialize_xml(value: MinimumProtocolVersion, parent: Element, tag: str) -> None:
+    SubElement(parent, tag).text = to_xml_text(value)
+
+
+def deserialize_xml(el: Element) -> MinimumProtocolVersion:
+    return from_xml_text(el.text or "")

capo_cloudfront/types/monitoring_subscription.py

@@ -0,0 +1,46 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#MonitoringSubscription``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.realtime_metrics_subscription_config
+
+
+class MonitoringSubscription(TypedDict, closed=True):
+    realtime_metrics_subscription_config: NotRequired[
+        "capo_cloudfront.types.realtime_metrics_subscription_config.RealtimeMetricsSubscriptionConfig"
+    ]
+    """<p>A subscription configuration for additional CloudWatch metrics.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: MonitoringSubscription, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    if "realtime_metrics_subscription_config" in value:
+        import capo_cloudfront.types.realtime_metrics_subscription_config
+
+        capo_cloudfront.types.realtime_metrics_subscription_config.serialize_xml(
+            value["realtime_metrics_subscription_config"],
+            el,
+            "RealtimeMetricsSubscriptionConfig",
+        )
+
+
+def deserialize_xml(el: Element) -> MonitoringSubscription:
+    out: MonitoringSubscription = {}  # type: ignore[typeddict-item]
+    child_realtime_metrics_subscription_config = el.find(
+        "RealtimeMetricsSubscriptionConfig"
+    )
+    if child_realtime_metrics_subscription_config is not None:
+        import capo_cloudfront.types.realtime_metrics_subscription_config
+
+        out["realtime_metrics_subscription_config"] = (
+            capo_cloudfront.types.realtime_metrics_subscription_config.deserialize_xml(
+                child_realtime_metrics_subscription_config
+            )
+        )
+    return out

capo_cloudfront/types/origin.py

@@ -0,0 +1,174 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#Origin``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+from capo_cloudfront.errors import DeserializationError
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.custom_headers
+    import capo_cloudfront.types.custom_origin_config
+    import capo_cloudfront.types.integer
+    import capo_cloudfront.types.origin_shield
+    import capo_cloudfront.types.s3_origin_config
+    import capo_cloudfront.types.string
+    import capo_cloudfront.types.vpc_origin_config
+
+
+class Origin(TypedDict, closed=True):
+    id: "capo_cloudfront.types.string.string"
+    """<p>A unique identifier for the origin. This value must be unique within the distribution.</p> <p>Use this value to specify the <code>TargetOriginId</code> in a <code>CacheBehavior</code> or <code>DefaultCacheBehavior</code>.</p>"""
+    domain_name: "capo_cloudfront.types.string.string"
+    r"""<p>The domain name for the origin.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesDomainName\">Origin Domain Name</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"""
+    origin_path: NotRequired["capo_cloudfront.types.string.string"]
+    r"""<p>An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginPath\">Origin Path</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"""
+    custom_headers: NotRequired["capo_cloudfront.types.custom_headers.CustomHeaders"]
+    r"""<p>A list of HTTP header names and values that CloudFront adds to the requests that it sends to the origin.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/add-origin-custom-headers.html\">Adding Custom Headers to Origin Requests</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"""
+    s3_origin_config: NotRequired[
+        "capo_cloudfront.types.s3_origin_config.S3OriginConfig"
+    ]
+    """<p>Use this type to specify an origin that is an Amazon S3 bucket that is not configured with static website hosting. To specify any other type of origin, including an Amazon S3 bucket that is configured with static website hosting, use the <code>CustomOriginConfig</code> type instead.</p>"""
+    custom_origin_config: NotRequired[
+        "capo_cloudfront.types.custom_origin_config.CustomOriginConfig"
+    ]
+    """<p>Use this type to specify an origin that is not an Amazon S3 bucket, with one exception. If the Amazon S3 bucket is configured with static website hosting, use this type. If the Amazon S3 bucket is not configured with static website hosting, use the <code>S3OriginConfig</code> type instead.</p>"""
+    vpc_origin_config: NotRequired[
+        "capo_cloudfront.types.vpc_origin_config.VpcOriginConfig"
+    ]
+    """<p>The VPC origin configuration.</p>"""
+    connection_attempts: NotRequired["capo_cloudfront.types.integer.integer"]
+    r"""<p>The number of times that CloudFront attempts to connect to the origin. The minimum number is 1, the maximum is 3, and the default (if you don't specify otherwise) is 3.</p> <p>For a custom origin (including an Amazon S3 bucket that's configured with static website hosting), this value also specifies the number of times that CloudFront attempts to get a response from the origin, in the case of an <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout\">Origin Response Timeout</a>.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#origin-connection-attempts\">Origin Connection Attempts</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"""
+    connection_timeout: NotRequired["capo_cloudfront.types.integer.integer"]
+    r"""<p>The number of seconds that CloudFront waits when trying to establish a connection to the origin. The minimum timeout is 1 second, the maximum is 10 seconds, and the default (if you don't specify otherwise) is 10 seconds.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#origin-connection-timeout\">Origin Connection Timeout</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"""
+    response_completion_timeout: NotRequired["capo_cloudfront.types.integer.integer"]
+    r"""<p>The time (in seconds) that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection.</p> <p>The value for <code>ResponseCompletionTimeout</code> must be equal to or greater than the value for <code>OriginReadTimeout</code>. If you don't set a value for <code>ResponseCompletionTimeout</code>, CloudFront doesn't enforce a maximum value.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout\">Response completion timeout</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"""
+    origin_shield: NotRequired["capo_cloudfront.types.origin_shield.OriginShield"]
+    r"""<p>CloudFront Origin Shield. Using Origin Shield can help reduce the load on your origin.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-shield.html\">Using Origin Shield</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"""
+    origin_access_control_id: NotRequired["capo_cloudfront.types.string.string"]
+    r"""<p>The unique identifier of an origin access control for this origin.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html\">Restricting access to an Amazon S3 origin</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: Origin, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    SubElement(el, "Id").text = str(value["id"])
+    SubElement(el, "DomainName").text = str(value["domain_name"])
+    if "origin_path" in value:
+        SubElement(el, "OriginPath").text = str(value["origin_path"])
+    if "custom_headers" in value:
+        import capo_cloudfront.types.custom_headers
+
+        capo_cloudfront.types.custom_headers.serialize_xml(
+            value["custom_headers"], el, "CustomHeaders"
+        )
+    if "s3_origin_config" in value:
+        import capo_cloudfront.types.s3_origin_config
+
+        capo_cloudfront.types.s3_origin_config.serialize_xml(
+            value["s3_origin_config"], el, "S3OriginConfig"
+        )
+    if "custom_origin_config" in value:
+        import capo_cloudfront.types.custom_origin_config
+
+        capo_cloudfront.types.custom_origin_config.serialize_xml(
+            value["custom_origin_config"], el, "CustomOriginConfig"
+        )
+    if "vpc_origin_config" in value:
+        import capo_cloudfront.types.vpc_origin_config
+
+        capo_cloudfront.types.vpc_origin_config.serialize_xml(
+            value["vpc_origin_config"], el, "VpcOriginConfig"
+        )
+    if "connection_attempts" in value:
+        SubElement(el, "ConnectionAttempts").text = str(value["connection_attempts"])
+    if "connection_timeout" in value:
+        SubElement(el, "ConnectionTimeout").text = str(value["connection_timeout"])
+    if "response_completion_timeout" in value:
+        SubElement(el, "ResponseCompletionTimeout").text = str(
+            value["response_completion_timeout"]
+        )
+    if "origin_shield" in value:
+        import capo_cloudfront.types.origin_shield
+
+        capo_cloudfront.types.origin_shield.serialize_xml(
+            value["origin_shield"], el, "OriginShield"
+        )
+    if "origin_access_control_id" in value:
+        SubElement(el, "OriginAccessControlId").text = str(
+            value["origin_access_control_id"]
+        )
+
+
+def deserialize_xml(el: Element) -> Origin:
+    out: Origin = {}  # type: ignore[typeddict-item]
+    child_id = el.find("Id")
+    if child_id is not None:
+        out["id"] = str(child_id.text or "")
+    else:
+        raise DeserializationError("Origin.id required")
+    child_domain_name = el.find("DomainName")
+    if child_domain_name is not None:
+        out["domain_name"] = str(child_domain_name.text or "")
+    else:
+        raise DeserializationError("Origin.domain_name required")
+    child_origin_path = el.find("OriginPath")
+    if child_origin_path is not None:
+        out["origin_path"] = str(child_origin_path.text or "")
+    child_custom_headers = el.find("CustomHeaders")
+    if child_custom_headers is not None:
+        import capo_cloudfront.types.custom_headers
+
+        out["custom_headers"] = capo_cloudfront.types.custom_headers.deserialize_xml(
+            child_custom_headers
+        )
+    child_s3_origin_config = el.find("S3OriginConfig")
+    if child_s3_origin_config is not None:
+        import capo_cloudfront.types.s3_origin_config
+
+        out["s3_origin_config"] = (
+            capo_cloudfront.types.s3_origin_config.deserialize_xml(
+                child_s3_origin_config
+            )
+        )
+    child_custom_origin_config = el.find("CustomOriginConfig")
+    if child_custom_origin_config is not None:
+        import capo_cloudfront.types.custom_origin_config
+
+        out["custom_origin_config"] = (
+            capo_cloudfront.types.custom_origin_config.deserialize_xml(
+                child_custom_origin_config
+            )
+        )
+    child_vpc_origin_config = el.find("VpcOriginConfig")
+    if child_vpc_origin_config is not None:
+        import capo_cloudfront.types.vpc_origin_config
+
+        out["vpc_origin_config"] = (
+            capo_cloudfront.types.vpc_origin_config.deserialize_xml(
+                child_vpc_origin_config
+            )
+        )
+    child_connection_attempts = el.find("ConnectionAttempts")
+    if child_connection_attempts is not None:
+        out["connection_attempts"] = int(child_connection_attempts.text or "")
+    child_connection_timeout = el.find("ConnectionTimeout")
+    if child_connection_timeout is not None:
+        out["connection_timeout"] = int(child_connection_timeout.text or "")
+    child_response_completion_timeout = el.find("ResponseCompletionTimeout")
+    if child_response_completion_timeout is not None:
+        out["response_completion_timeout"] = int(
+            child_response_completion_timeout.text or ""
+        )
+    child_origin_shield = el.find("OriginShield")
+    if child_origin_shield is not None:
+        import capo_cloudfront.types.origin_shield
+
+        out["origin_shield"] = capo_cloudfront.types.origin_shield.deserialize_xml(
+            child_origin_shield
+        )
+    child_origin_access_control_id = el.find("OriginAccessControlId")
+    if child_origin_access_control_id is not None:
+        out["origin_access_control_id"] = str(child_origin_access_control_id.text or "")
+    return out

capo_cloudfront/types/origin_access_control.py

@@ -0,0 +1,52 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#OriginAccessControl``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+from capo_cloudfront.errors import DeserializationError
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.origin_access_control_config
+    import capo_cloudfront.types.string
+
+
+class OriginAccessControl(TypedDict, closed=True):
+    id: "capo_cloudfront.types.string.string"
+    """<p>The unique identifier of the origin access control.</p>"""
+    origin_access_control_config: NotRequired[
+        "capo_cloudfront.types.origin_access_control_config.OriginAccessControlConfig"
+    ]
+    """<p>The origin access control.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: OriginAccessControl, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    SubElement(el, "Id").text = str(value["id"])
+    if "origin_access_control_config" in value:
+        import capo_cloudfront.types.origin_access_control_config
+
+        capo_cloudfront.types.origin_access_control_config.serialize_xml(
+            value["origin_access_control_config"], el, "OriginAccessControlConfig"
+        )
+
+
+def deserialize_xml(el: Element) -> OriginAccessControl:
+    out: OriginAccessControl = {}  # type: ignore[typeddict-item]
+    child_id = el.find("Id")
+    if child_id is not None:
+        out["id"] = str(child_id.text or "")
+    else:
+        raise DeserializationError("OriginAccessControl.id required")
+    child_origin_access_control_config = el.find("OriginAccessControlConfig")
+    if child_origin_access_control_config is not None:
+        import capo_cloudfront.types.origin_access_control_config
+
+        out["origin_access_control_config"] = (
+            capo_cloudfront.types.origin_access_control_config.deserialize_xml(
+                child_origin_access_control_config
+            )
+        )
+    return out

capo_cloudfront/types/origin_access_control_config.py

@@ -0,0 +1,102 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#OriginAccessControlConfig``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+from capo_cloudfront.errors import DeserializationError
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.origin_access_control_origin_types
+    import capo_cloudfront.types.origin_access_control_signing_behaviors
+    import capo_cloudfront.types.origin_access_control_signing_protocols
+    import capo_cloudfront.types.string
+
+
+class OriginAccessControlConfig(TypedDict, closed=True):
+    name: "capo_cloudfront.types.string.string"
+    """<p>A name to identify the origin access control. You can specify up to 64 characters.</p>"""
+    description: NotRequired["capo_cloudfront.types.string.string"]
+    """<p>A description of the origin access control.</p>"""
+    signing_protocol: "capo_cloudfront.types.origin_access_control_signing_protocols.OriginAccessControlSigningProtocols"
+    """<p>The signing protocol of the origin access control, which determines how CloudFront signs (authenticates) requests. The only valid value is <code>sigv4</code>.</p>"""
+    signing_behavior: "capo_cloudfront.types.origin_access_control_signing_behaviors.OriginAccessControlSigningBehaviors"
+    r"""<p>Specifies which requests CloudFront signs (adds authentication information to). Specify <code>always</code> for the most common use case. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#oac-advanced-settings\">origin access control advanced settings</a> in the <i>Amazon CloudFront Developer Guide</i>.</p> <p>This field can have one of the following values:</p> <ul> <li> <p> <code>always</code> – CloudFront signs all origin requests, overwriting the <code>Authorization</code> header from the viewer request if one exists.</p> </li> <li> <p> <code>never</code> – CloudFront doesn't sign any origin requests. This value turns off origin access control for all origins in all distributions that use this origin access control.</p> </li> <li> <p> <code>no-override</code> – If the viewer request doesn't contain the <code>Authorization</code> header, then CloudFront signs the origin request. If the viewer request contains the <code>Authorization</code> header, then CloudFront doesn't sign the origin request and instead passes along the <code>Authorization</code> header from the viewer request. <b>WARNING: To pass along the <code>Authorization</code> header from the viewer request, you <i>must</i> add the <code>Authorization</code> header to a <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html\">cache policy</a> for all cache behaviors that use origins associated with this origin access control.</b> </p> </li> </ul>"""
+    origin_access_control_origin_type: "capo_cloudfront.types.origin_access_control_origin_types.OriginAccessControlOriginTypes"
+    """<p>The type of origin that this origin access control is for.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: OriginAccessControlConfig, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    SubElement(el, "Name").text = str(value["name"])
+    if "description" in value:
+        SubElement(el, "Description").text = str(value["description"])
+    import capo_cloudfront.types.origin_access_control_signing_protocols
+
+    capo_cloudfront.types.origin_access_control_signing_protocols.serialize_xml(
+        value["signing_protocol"], el, "SigningProtocol"
+    )
+    import capo_cloudfront.types.origin_access_control_signing_behaviors
+
+    capo_cloudfront.types.origin_access_control_signing_behaviors.serialize_xml(
+        value["signing_behavior"], el, "SigningBehavior"
+    )
+    import capo_cloudfront.types.origin_access_control_origin_types
+
+    capo_cloudfront.types.origin_access_control_origin_types.serialize_xml(
+        value["origin_access_control_origin_type"], el, "OriginAccessControlOriginType"
+    )
+
+
+def deserialize_xml(el: Element) -> OriginAccessControlConfig:
+    out: OriginAccessControlConfig = {}  # type: ignore[typeddict-item]
+    child_name = el.find("Name")
+    if child_name is not None:
+        out["name"] = str(child_name.text or "")
+    else:
+        raise DeserializationError("OriginAccessControlConfig.name required")
+    child_description = el.find("Description")
+    if child_description is not None:
+        out["description"] = str(child_description.text or "")
+    child_signing_protocol = el.find("SigningProtocol")
+    if child_signing_protocol is not None:
+        import capo_cloudfront.types.origin_access_control_signing_protocols
+
+        out["signing_protocol"] = (
+            capo_cloudfront.types.origin_access_control_signing_protocols.deserialize_xml(
+                child_signing_protocol
+            )
+        )
+    else:
+        raise DeserializationError(
+            "OriginAccessControlConfig.signing_protocol required"
+        )
+    child_signing_behavior = el.find("SigningBehavior")
+    if child_signing_behavior is not None:
+        import capo_cloudfront.types.origin_access_control_signing_behaviors
+
+        out["signing_behavior"] = (
+            capo_cloudfront.types.origin_access_control_signing_behaviors.deserialize_xml(
+                child_signing_behavior
+            )
+        )
+    else:
+        raise DeserializationError(
+            "OriginAccessControlConfig.signing_behavior required"
+        )
+    child_origin_access_control_origin_type = el.find("OriginAccessControlOriginType")
+    if child_origin_access_control_origin_type is not None:
+        import capo_cloudfront.types.origin_access_control_origin_types
+
+        out["origin_access_control_origin_type"] = (
+            capo_cloudfront.types.origin_access_control_origin_types.deserialize_xml(
+                child_origin_access_control_origin_type
+            )
+        )
+    else:
+        raise DeserializationError(
+            "OriginAccessControlConfig.origin_access_control_origin_type required"
+        )
+    return out

capo_cloudfront/types/origin_access_control_list.py

@@ -0,0 +1,85 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#OriginAccessControlList``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+from capo_cloudfront.errors import DeserializationError
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.boolean
+    import capo_cloudfront.types.integer
+    import capo_cloudfront.types.origin_access_control_summary_list
+    import capo_cloudfront.types.string
+
+
+class OriginAccessControlList(TypedDict, closed=True):
+    marker: "capo_cloudfront.types.string.string"
+    """<p>The value of the <code>Marker</code> field that was provided in the request.</p>"""
+    next_marker: NotRequired["capo_cloudfront.types.string.string"]
+    """<p>If there are more items in the list than are in this response, this element is present. It contains the value to use in the <code>Marker</code> field of another request to continue listing origin access controls.</p>"""
+    max_items: "capo_cloudfront.types.integer.integer"
+    """<p>The maximum number of origin access controls requested.</p>"""
+    is_truncated: "capo_cloudfront.types.boolean.boolean"
+    """<p>If there are more items in the list than are in this response, this value is <code>true</code>.</p>"""
+    quantity: "capo_cloudfront.types.integer.integer"
+    """<p>The number of origin access controls returned in the response.</p>"""
+    items: NotRequired[
+        "capo_cloudfront.types.origin_access_control_summary_list.OriginAccessControlSummaryList"
+    ]
+    """<p>Contains the origin access controls in the list.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: OriginAccessControlList, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    SubElement(el, "Marker").text = str(value["marker"])
+    if "next_marker" in value:
+        SubElement(el, "NextMarker").text = str(value["next_marker"])
+    SubElement(el, "MaxItems").text = str(value["max_items"])
+    SubElement(el, "IsTruncated").text = "true" if value["is_truncated"] else "false"
+    SubElement(el, "Quantity").text = str(value["quantity"])
+    if "items" in value:
+        import capo_cloudfront.types.origin_access_control_summary_list
+
+        capo_cloudfront.types.origin_access_control_summary_list.serialize_xml(
+            value["items"], el, "Items"
+        )
+
+
+def deserialize_xml(el: Element) -> OriginAccessControlList:
+    out: OriginAccessControlList = {}  # type: ignore[typeddict-item]
+    child_marker = el.find("Marker")
+    if child_marker is not None:
+        out["marker"] = str(child_marker.text or "")
+    else:
+        raise DeserializationError("OriginAccessControlList.marker required")
+    child_next_marker = el.find("NextMarker")
+    if child_next_marker is not None:
+        out["next_marker"] = str(child_next_marker.text or "")
+    child_max_items = el.find("MaxItems")
+    if child_max_items is not None:
+        out["max_items"] = int(child_max_items.text or "")
+    else:
+        raise DeserializationError("OriginAccessControlList.max_items required")
+    child_is_truncated = el.find("IsTruncated")
+    if child_is_truncated is not None:
+        out["is_truncated"] = (child_is_truncated.text or "").lower() == "true"
+    else:
+        raise DeserializationError("OriginAccessControlList.is_truncated required")
+    child_quantity = el.find("Quantity")
+    if child_quantity is not None:
+        out["quantity"] = int(child_quantity.text or "")
+    else:
+        raise DeserializationError("OriginAccessControlList.quantity required")
+    child_items = el.find("Items")
+    if child_items is not None:
+        import capo_cloudfront.types.origin_access_control_summary_list
+
+        out["items"] = (
+            capo_cloudfront.types.origin_access_control_summary_list.deserialize_xml(
+                child_items
+            )
+        )
+    return out

capo_cloudfront/types/origin_access_control_origin_types.py

@@ -0,0 +1,31 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#OriginAccessControlOriginTypes``."""
+
+from typing import Literal, TypeAlias, cast
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+OriginAccessControlOriginTypes: TypeAlias = Literal[
+    "s3",
+    "mediastore",
+    "mediapackagev2",
+    "lambda",
+]
+
+
+# --- restXml ser/de ---
+def to_xml_text(value: OriginAccessControlOriginTypes) -> str:
+    return value
+
+
+def from_xml_text(text: str) -> OriginAccessControlOriginTypes:
+    return cast(OriginAccessControlOriginTypes, text)
+
+
+def serialize_xml(
+    value: OriginAccessControlOriginTypes, parent: Element, tag: str
+) -> None:
+    SubElement(parent, tag).text = to_xml_text(value)
+
+
+def deserialize_xml(el: Element) -> OriginAccessControlOriginTypes:
+    return from_xml_text(el.text or "")

capo_cloudfront/types/origin_access_control_signing_behaviors.py

@@ -0,0 +1,30 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#OriginAccessControlSigningBehaviors``."""
+
+from typing import Literal, TypeAlias, cast
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+OriginAccessControlSigningBehaviors: TypeAlias = Literal[
+    "never",
+    "always",
+    "no-override",
+]
+
+
+# --- restXml ser/de ---
+def to_xml_text(value: OriginAccessControlSigningBehaviors) -> str:
+    return value
+
+
+def from_xml_text(text: str) -> OriginAccessControlSigningBehaviors:
+    return cast(OriginAccessControlSigningBehaviors, text)
+
+
+def serialize_xml(
+    value: OriginAccessControlSigningBehaviors, parent: Element, tag: str
+) -> None:
+    SubElement(parent, tag).text = to_xml_text(value)
+
+
+def deserialize_xml(el: Element) -> OriginAccessControlSigningBehaviors:
+    return from_xml_text(el.text or "")

capo_cloudfront/types/origin_access_control_signing_protocols.py

@@ -0,0 +1,26 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#OriginAccessControlSigningProtocols``."""
+
+from typing import Literal, TypeAlias, cast
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+OriginAccessControlSigningProtocols: TypeAlias = Literal["sigv4",]
+
+
+# --- restXml ser/de ---
+def to_xml_text(value: OriginAccessControlSigningProtocols) -> str:
+    return value
+
+
+def from_xml_text(text: str) -> OriginAccessControlSigningProtocols:
+    return cast(OriginAccessControlSigningProtocols, text)
+
+
+def serialize_xml(
+    value: OriginAccessControlSigningProtocols, parent: Element, tag: str
+) -> None:
+    SubElement(parent, tag).text = to_xml_text(value)
+
+
+def deserialize_xml(el: Element) -> OriginAccessControlSigningProtocols:
+    return from_xml_text(el.text or "")